# changelog

author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-451.el9]
changelog:
  - Revert "Merge: cgroup: Backport upstream cgroup commits up to v6.8" (Lucas Zampieri)
  - arm64: dts: qcom: sa8775p: fix USB wakeup interrupt types (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: sa8775p-ride: enable pmm8654au_0_pon_resin (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: sa8775p: Make watchdog bark interrupt edge triggered (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: Enable tsens and thermal for sa8775p SoC (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: sa8775p: Add RPMh sleep stats (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: sa8775p: add TRNG node (Steve Dunnagan) [RHEL-31258]
  - arm64: dts: qcom: sa8775p: enable the inline crypto engine (Steve Dunnagan) [RHEL-31258]
  - net: ethtool: reject unsupported RSS input xfrm values (Ivan Vecera) [RHEL-31889]
  - net: ethtool: Fix symmetric-xor RSS RX flow hash check (Ivan Vecera) [RHEL-31889]
  - net: ethtool: add a NO_CHANGE uAPI for new RXFH's input_xfrm (Ivan Vecera) [RHEL-31889]
  - net: ethtool: copy input_xfrm to user-space in ethtool_get_rxfh (Ivan Vecera) [RHEL-31889]
  - net: ethtool: add support for symmetric-xor RSS hash (Ivan Vecera) [RHEL-31889]
  - net: ethtool: get rid of get/set_rxfh_context functions (Ivan Vecera) [RHEL-31889]
  - net: ethtool: pass a pointer to parameters to get/set_rxfh ethtool ops (Ivan Vecera) [RHEL-31889]
  - net/mlx5e: Make flow classification filters static (Ivan Vecera) [RHEL-31889]
  - redhat: kernel.spec: add dependency for the python3-pyyaml package (Petr Oros) [RHEL-30145]
  - Documentation: add pyyaml to requirements.txt (Petr Oros) [RHEL-30145]
  - netlink: use kvmalloc() in netlink_alloc_large_skb() (Petr Oros) [RHEL-30145]
  - devlink: Fix devlink parallel commands processing (Petr Oros) [RHEL-30145]
  - Fix NULL pointer dereference in cn_filter() (Petr Oros) [RHEL-30145]
  - devlink: Fix length of eswitch inline-mode (Petr Oros) [RHEL-30145]
  - net/mlx5: Fix fw reporter diagnose output (Petr Oros) [RHEL-30145]
  - net/mlx5: fix uninit value use (Petr Oros) [RHEL-30145]
  - netdevsim: Block until all devices are released (Petr Oros) [RHEL-30145]
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Petr Oros) [RHEL-30145]
  - devlink: fix port dump cmd type (Petr Oros) [RHEL-30145]
  - devlink: fix possible use-after-free and memory leaks in devlink_init() (Petr Oros) [RHEL-30145]
  - net: add rcu safety to rtnl_prop_list_size() (Petr Oros) [RHEL-30145]
  - devlink: Fix command annotation documentation (Petr Oros) [RHEL-30145]
  - devlink: avoid potential loop in devlink_rel_nested_in_notify_work() (Petr Oros) [RHEL-30145]
  - doc/netlink/specs: Add missing attr in rt_link spec (Petr Oros) [RHEL-30145]
  - devlink: Fix referring to hw_addr attribute during state validation (Petr Oros) [RHEL-30145]
  - netlink: fix potential sleeping issue in mqueue_flush_file (Petr Oros) [RHEL-30145]
  - genetlink: Use internal flags for multicast groups (Petr Oros) [RHEL-30145]
  - rtnetlink: bridge: Enable MDB bulk deletion (Petr Oros) [RHEL-30145]
  - rtnetlink: bridge: Invoke MDB bulk deletion when needed (Petr Oros) [RHEL-30145]
  - net: Add MDB bulk deletion device operation (Petr Oros) [RHEL-30145]
  - rtnetlink: bridge: Use a different policy for MDB bulk delete (Petr Oros) [RHEL-30145]
  - devlink: extend multicast filtering by port index (Petr Oros) [RHEL-30145]
  - devlink: add a command to set notification filter and use it for multicasts (Petr Oros) [RHEL-30145]
  - genetlink: introduce helpers to do filtered multicast (Petr Oros) [RHEL-30145]
  - netlink: introduce typedef for filter function (Petr Oros) [RHEL-30145]
  - genetlink: introduce per-sock family private storage (Petr Oros) [RHEL-30145]
  - devlink: introduce a helper for netlink multicast send (Petr Oros) [RHEL-30145]
  - devlink: send notifications only if there are listeners (Petr Oros) [RHEL-30145]
  - devlink: introduce __devl_is_registered() helper and use it instead of xa_get_mark() (Petr Oros) [RHEL-30145]
  - devlink: use devl_is_registered() helper instead xa_get_mark() (Petr Oros) [RHEL-30145]
  - connector/cn_proc: Performance improvements (Petr Oros) [RHEL-30145]
  - connector/cn_proc: Add filtering to fix some bugs (Petr Oros) [RHEL-30145]
  - tools/net/ynl-gen-rst: Remove extra indentation from generated docs (Petr Oros) [RHEL-30145]
  - tools/net/ynl-gen-rst: Remove bold from attribute-set headings (Petr Oros) [RHEL-30145]
  - tools/net/ynl-gen-rst: Sort the index of generated netlink specs (Petr Oros) [RHEL-30145]
  - tools/net/ynl-gen-rst: Add sub-messages to generated docs (Petr Oros) [RHEL-30145]
  - doc/netlink: Regenerate netlink .rst files if ynl-gen-rst changes (Petr Oros) [RHEL-30145]
  - doc/netlink/specs: Add a spec for tc (Petr Oros) [RHEL-30145]
  - doc/netlink/specs: use pad in structs in rt_link (Petr Oros) [RHEL-30145]
  - doc/netlink/specs: Add sub-message type to rt_link family (Petr Oros) [RHEL-30145]
  - tools/net/ynl: Add binary and pad support to structs for tc (Petr Oros) [RHEL-30145]
  - tools/net/ynl: Add 'sub-message' attribute decoding to ynl (Petr Oros) [RHEL-30145]
  - doc/netlink: Document the sub-message format for netlink-raw (Petr Oros) [RHEL-30145]
  - doc/netlink: Add sub-message support to netlink-raw (Petr Oros) [RHEL-30145]
  - tools/net/ynl: Use consistent array index expression formatting (Petr Oros) [RHEL-30145]
  - net: rtnl: use rcu_replace_pointer_rtnl in rtnl_unregister_* (Petr Oros) [RHEL-30145]
  - net: rtnl: introduce rcu_replace_pointer_rtnl (Petr Oros) [RHEL-30145]
  - netlink: specs: mptcp: rename the MPTCP path management spec (Petr Oros) [RHEL-30145]
  - netlink: specs: ovs: correct enum names in specs (Petr Oros) [RHEL-30145]
  - netlink: specs: ovs: remove fixed header fields from attrs (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: print prototypes for recursive stuff (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: store recursive nests by a pointer (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: re-sort ignoring recursive nests (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: record information about recursive nests (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: fill in implementations for TypeUnused (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: support fixed headers in genetlink (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: use enum user type for members and args (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: add missing request free helpers for dumps (Petr Oros) [RHEL-30145]
  - netlink: specs: devlink: add some(not all) missing attributes in devlink.yaml (Petr Oros) [RHEL-30145]
  - rtnl: add helper to send if skb is not null (Petr Oros) [RHEL-30145]
  - rtnl: add helper to check if a notification is needed (Petr Oros) [RHEL-30145]
  - rtnl: add helper to check if rtnl group has listeners (Petr Oros) [RHEL-30145]
  - tools: ynl: use strerror() if no extack of note provided (Petr Oros) [RHEL-30145]
  - tools: pynl: make flags argument optional for do() (Petr Oros) [RHEL-30145]
  - docs: netlink: add NLMSG_DONE message format for doit actions (Petr Oros) [RHEL-30145]
  - doc/netlink: Add bitfield32, s8, s16 to the netlink-raw schema (Petr Oros) [RHEL-30145]
  - docs: netlink: link to family documentations from spec info (Petr Oros) [RHEL-30145]
  - devlink: warn about existing entities during reload-reinit (Petr Oros) [RHEL-30145]
  - Documentation: devlink: extend reload-reinit description (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: always construct struct ynl_req_state (Petr Oros) [RHEL-30145]
  - ethtool: don't propagate EOPNOTSUPP from dumps (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: use enum name from the spec (Petr Oros) [RHEL-30145]
  - tools: ynl-get: use family c-name (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: always append ULL/LL to range types (Petr Oros) [RHEL-30145]
  - Documentation: Document each netlink family (Petr Oros) [RHEL-30145]
  - tools: ynl: fix duplicate op name in devlink (Petr Oros) [RHEL-30145]
  - tools: ynl: fix header path for nfsd (Petr Oros) [RHEL-30145]
  - rtnetlink: introduce nlmsg_new_large and use it in rtnl_getlink (Petr Oros) [RHEL-30145]
  - devlink: Add device lock assert in reload operation (Petr Oros) [RHEL-30145]
  - devlink: Acquire device lock during reload command (Petr Oros) [RHEL-30145]
  - devlink: Allow taking device lock in pre_doit operations (Petr Oros) [RHEL-30145]
  - devlink: Enable the use of private flags in post_doit operations (Petr Oros) [RHEL-30145]
  - devlink: Acquire device lock during netns dismantle (Petr Oros) [RHEL-30145]
  - devlink: Move private netlink flags to C file (Petr Oros) [RHEL-30145]
  - netlink: specs: Introduce time stamping set command (Petr Oros) [RHEL-30145]
  - netlink: specs: Introduce new netlink command to list available time stamping layers (Petr Oros) [RHEL-30145]
  - netlink: specs: Introduce new netlink command to get current timestamp (Petr Oros) [RHEL-30145]
  - nfsd: regenerate user space parsers after ynl-gen changes (Petr Oros) [RHEL-30145]
  - netlink: fill in missing MODULE_DESCRIPTION() (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: don't touch the output file if content is the same (Petr Oros) [RHEL-30145]
  - netlink: specs: devlink: add forgotten port function caps enum values (Petr Oros) [RHEL-30145]
  - doc/netlink: Update schema to support cmd-cnt-name and cmd-max-name (Petr Oros) [RHEL-30145]
  - tools: ynl: introduce option to process unknown attributes or types (Petr Oros) [RHEL-30145]
  - net: Add MDB get device operation (Petr Oros) [RHEL-30145]
  - bridge: add MDB get uAPI attributes (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: respect attr-cnt-name at the attr set level (Petr Oros) [RHEL-30145]
  - netlink: specs: support conditional operations (Petr Oros) [RHEL-30145]
  - netlink: make range pointers in policies const (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: add support for exact-len validation (Petr Oros) [RHEL-30145]
  - tools: ynl: add uns-admin-perm to genetlink legacy (Petr Oros) [RHEL-30145]
  - devlink: remove netlink small_ops (Petr Oros) [RHEL-30145]
  - devlink: remove duplicated netlink callback prototypes (Petr Oros) [RHEL-30145]
  - netlink: specs: devlink: add the remaining command to generate complete split_ops (Petr Oros) [RHEL-30145]
  - devlink: rename netlink callback to be aligned with the generated ones (Petr Oros) [RHEL-30145]
  - devlink: make devlink_flash_overwrite enum named one (Petr Oros) [RHEL-30145]
  - netlink: specs: devlink: make dont-validate single line (Petr Oros) [RHEL-30145]
  - netlink: specs: devlink: remove reload-action from devlink-get cmd reply (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: render rsp_parse() helpers if cmd has only dump op (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: introduce support for bitfield32 attribute type (Petr Oros) [RHEL-30145]
  - genetlink: don't merge dumpit split op for different cmds into single iter (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: change spacing around __attribute__ (Petr Oros) [RHEL-30145]
  - tcp: add RTAX_FEATURE_TCP_USEC_TS (Petr Oros) [RHEL-30145]
  - netlink: specs: add support for auto-sized scalars (Petr Oros) [RHEL-30145]
  - netlink: add variable-length / auto integers (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: make the mnl_type() method public (Petr Oros) [RHEL-30145]
  - devlink: convert most of devlink_fmsg_*() to return void (Petr Oros) [RHEL-30145]
  - qed: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - net/mlx5: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - mlxsw: core: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - octeontx2-af: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - hinic: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - bnxt_en: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - netdevsim: devlink health: use retained error fmsg API (Petr Oros) [RHEL-30145]
  - devlink: retain error in struct devlink_fmsg (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: support limit names (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: support full range of min/max checks for integer values (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: track attribute use (Petr Oros) [RHEL-30145]
  - devlink: document devlink_rel_nested_in_notify() function (Petr Oros) [RHEL-30145]
  - Documentation: devlink: add a note about RTNL lock into locking section (Petr Oros) [RHEL-30145]
  - Documentation: devlink: add nested instance section (Petr Oros) [RHEL-30145]
  - devlink: don't take instance lock for nested handle put (Petr Oros) [RHEL-30145]
  - devlink: take device reference for devlink object (Petr Oros) [RHEL-30145]
  - devlink: call peernet2id_alloc() with net pointer under RCU read lock (Petr Oros) [RHEL-30145]
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Petr Oros) [RHEL-30145]
  - docs: netlink: clean up after deprecating version (Petr Oros) [RHEL-30145]
  - tools: ynl: fix converting flags to names after recent cleanup (Petr Oros) [RHEL-30145]
  - tools: ynl: Add source files for nfsd netlink protocol (Petr Oros) [RHEL-30145]
  - NFSD: introduce netlink stubs (Petr Oros) [RHEL-30145]
  - net: Handle bulk delete policy in bridge driver (Petr Oros) [RHEL-30145]
  - tools: ynl: use ynl-gen -o instead of stdout in Makefile (Petr Oros) [RHEL-30145]
  - netlink: specs: don't allow version to be specified for genetlink (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: handle do ops with no input attrs (Petr Oros) [RHEL-30145]
  - netlink: specs: remove redundant type keys from attributes in subsets (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: lift type requirement for attribute subsets (Petr Oros) [RHEL-30145]
  - tools: ynl-gen: use uapi header name for the header guard (Petr Oros) [RHEL-30145]
  - netlink: Annotate struct netlink_policy_dump_state with __counted_by (Petr Oros) [RHEL-30145]
  - tools: ynl: use uAPI include magic for samples (Petr Oros) [RHEL-30145]
  - tools: ynl: don't regen on every make (Petr Oros) [RHEL-30145]
  - handshake: Fix sign of key_serial_t fields (Petr Oros) [RHEL-30145]
  - handshake: Fix sign of socket file descriptor fields (Petr Oros) [RHEL-30145]
  - devlink: introduce possibility to expose info about nested devlinks (Petr Oros) [RHEL-30145]
  - devlink: convert linecard nested devlink to new rel infrastructure (Petr Oros) [RHEL-30145]
  - devlink: expose peer SF devlink instance (Petr Oros) [RHEL-30145]
  - devlink: introduce object and nested devlink relationship infra (Petr Oros) [RHEL-30145]
  - devlink: extend devlink_nl_put_nested_handle() with attrtype arg (Petr Oros) [RHEL-30145]
  - devlink: move devlink_nl_put_nested_handle() into netlink.c (Petr Oros) [RHEL-30145]
  - devlink: put netnsid to nested handle (Petr Oros) [RHEL-30145]
  - devlink: move linecard struct into linecard.c (Petr Oros) [RHEL-30145]
  - mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (Rafael Aquini) [RHEL-31840] {CVE-2024-26783}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-32372]
  - ASoC: SOF: ipc4-topology: Save the ALH DAI index during hw_params (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: pcm: reset all PCM sources in case of xruns (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: pcm: add pending_stop state variable (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: pcm: simplify sof_pcm_hw_free() with helper (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: sof-audio: revisit sof_pcm_stream_free() error handling and logs (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda: Clear Soundwire node ID during BE DAI hw_free (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda: move helper to static inline (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: IPC4: extend dai_data with node_id (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda: extend signature of sdw_hda_dai_hw_params() (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: set the DMA TLV device as dai_index (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda-dai: add helpers to set dai config (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda-dai: set dma_stream_channel_map device (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda-dai: set lowest N bits in ch_mask (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: make dma_config_tlv be an array (Jaroslav Kysela) [RHEL-26198]
  - Revert "ASoC: SOF: Intel: hda-dai-ops: only allocate/release streams for first CPU DAI" (Jaroslav Kysela) [RHEL-26198]
  - Revert "ASoC: SOF: Intel: hda-dai-ops: reset device count for SoundWire DAIs" (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Intel: hda-dai: fix channel map configuration for aggregated dailink (Jaroslav Kysela) [RHEL-26198]
  - ASoC: SOF: Introduce generic names for IPC types (Jaroslav Kysela) [RHEL-26198]
  - arm64/arch_timer: Fix MMIO byteswap (Phil Auld) [RHEL-32862]
  - cpuidle: Use local_clock_noinstr() (Phil Auld) [RHEL-32862]
  - sched/clock: Provide local_clock_noinstr() (Phil Auld) [RHEL-32862]
  - sched/clock: Fix local_clock() before sched_clock_init() (Phil Auld) [RHEL-32862]
  - sched/clock: Make local_clock() noinstr (Phil Auld) [RHEL-32862]
  - sched/clock: Use try_cmpxchg64 in sched_clock_{local,remote} (Phil Auld) [RHEL-32862]
  - math64: Always inline u128 version of mul_u64_u64_shr() (Phil Auld) [RHEL-32862]
  - s390/time: Provide sched_clock_noinstr() (Phil Auld) [RHEL-32862]
  - arm64/arch_timer: Provide noinstr sched_clock_read() functions (Phil Auld) [RHEL-32862]
  - arm64/io: Always inline all of __raw_{read,write}[bwlq]() (Phil Auld) [RHEL-32862]
  - time/sched_clock: Provide sched_clock_noinstr() (Phil Auld) [RHEL-32862]
  - seqlock/latch: Provide raw_read_seqcount_latch_retry() (Phil Auld) [RHEL-32862]
  - timekeeping: Consolidate fast timekeeper (Phil Auld) [RHEL-32862]
  - timekeeping: Annotate ktime_get_boot_fast_ns() with data_race() (Phil Auld) [RHEL-32862]
  - KVM: s390: Check kvm pointer when testing KVM_CAP_S390_HPAGE_1M (Thomas Huth) [RHEL-29741]
  - s390/mm: Fix storage key clearing for guest huge pages (Thomas Huth) [RHEL-29741]
  - s390/vfio-ap: handle hardware checkstop state on queue reset operation (Thomas Huth) [RHEL-29741]
  - KVM: s390: Refactor kvm_is_error_gpa() into kvm_is_gpa_in_memslot() (Thomas Huth) [RHEL-29741]
  - KVM: s390: selftest: memop: Fix undefined behavior (Thomas Huth) [RHEL-29741]
  - KVM: s390: only deliver the set service event bits (Thomas Huth) [RHEL-29741]
  - KVM: s390: fix virtual vs physical address confusion (Thomas Huth) [RHEL-29741]
  - KVM: s390: move s390-specific structs to uapi/asm/kvm.h (Thomas Huth) [RHEL-29741]
  - KVM: s390: selftests: memop: add a simple AR test (Thomas Huth) [RHEL-29741]
  - KVM: s390: fix access register usage in ioctls (Thomas Huth) [RHEL-29741]
  - KVM: s390: introduce kvm_s390_fpu_(store|load) (Thomas Huth) [RHEL-29741]
  - KVM: selftests: s390x: Remove redundant newlines (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove TIF_FPU (Thomas Huth) [RHEL-29741]
  - s390/fpu: limit save and restore to used registers (Thomas Huth) [RHEL-29741]
  - s390/fpu: decrease stack usage for some cases (Thomas Huth) [RHEL-29741]
  - s390/fpu: let fpu_vlm() and fpu_vstm() return number of registers (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove anonymous union from struct fpu (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove regs member from struct fpu (Thomas Huth) [RHEL-29741]
  - s390/kvm: convert to regular kernel fpu user (Thomas Huth) [RHEL-29741]
  - s390/fpu: make kernel fpu context preemptible (Thomas Huth) [RHEL-29741]
  - s390/fpu: change type of fpu mask from u32 to int (Thomas Huth) [RHEL-29741]
  - s390/fpu: rename save_fpu_regs() to save_user_fpu_regs(), etc (Thomas Huth) [RHEL-29741]
  - s390/fpu: convert FPU CIF flag to regular TIF flag (Thomas Huth) [RHEL-29741]
  - s390/fpu: convert __kernel_fpu_begin()/__kernel_fpu_end() to C (Thomas Huth) [RHEL-29741]
  - s390/fpu: provide and use vlm and vstm inline assemblies (Thomas Huth) [RHEL-29741]
  - s390/fpu: provide and use lfpc, sfpc, and stfpc inline assemblies (Thomas Huth) [RHEL-29741]
  - s390/fpu: provide and use ld and std inline assemblies (Thomas Huth) [RHEL-29741]
  - s390/fpu: use lfpc instead of sfpc instruction (Thomas Huth) [RHEL-29741]
  - s390/fpu: add documentation about fpu helper functions (Thomas Huth) [RHEL-29741]
  - s390/fpu: move, rename, and merge header files (Thomas Huth) [RHEL-29741]
  - s390/fpu: various coding style changes (Thomas Huth) [RHEL-29741]
  - s390/fpu: use KERNEL_VXR_LOW instead of KERNEL_VXR_V0V7 (Thomas Huth) [RHEL-29741]
  - s390/fpu: improve description of RXB macro (Thomas Huth) [RHEL-29741]
  - s390/fpu: fix VLGV macro (Thomas Huth) [RHEL-29741]
  - s390/switch_to: use generic header file (Thomas Huth) [RHEL-29741]
  - s390/acrs: cleanup access register handling (Thomas Huth) [RHEL-29741]
  - s390/fpu: make use of __uninitialized macro (Thomas Huth) [RHEL-29741]
  - Compiler Attributes: Add __uninitialized macro (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove __load_fpu_regs() export (Thomas Huth) [RHEL-29741]
  - KVM: s390: cpu model: Use proper define for facility mask size (Thomas Huth) [RHEL-29741]
  - s390/vx: fix save/restore of fpu kernel context (Thomas Huth) [RHEL-29741]
  - s390/mm: convert pgste locking functions to C (Thomas Huth) [RHEL-29741]
  - s390/fpu: get rid of MACHINE_HAS_VX (Thomas Huth) [RHEL-29741]
  - s390/als: add vector facility to z13 architecture level set (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove "novx" option (Thomas Huth) [RHEL-29741]
  - s390/fpu: remove ARCH_WANTS_DYNAMIC_TASK_STRUCT support (Thomas Huth) [RHEL-29741]
  - KVM: s390: remove superfluous save_fpu_regs() call (Thomas Huth) [RHEL-29741]
  - s390/ptrace: remove leftover comment (Thomas Huth) [RHEL-29741]
  - s390/fpu: get rid of test_fp_ctl() (Thomas Huth) [RHEL-29741]
  - s390: remove .fixup section (Thomas Huth) [RHEL-29741]
  - KVM: s390: use READ_ONCE() to read fpc register value (Thomas Huth) [RHEL-29741]
  - s390/ptrace: handle setting of fpc register correctly (Thomas Huth) [RHEL-29741]
  - KVM: s390: Harden copying of userspace-array against overflow (Thomas Huth) [RHEL-29741]
  - s390/vfio-ap: improve reaction to response code 07 from PQAP(AQIC) command (Thomas Huth) [RHEL-29741]
  - s390/vfio-ap: set status response code to 06 on gisc registration failure (Thomas Huth) [RHEL-29741]
  - s390/ap: fix AP bus crash on early config change callback invocation (Thomas Huth) [RHEL-29741]
  - s390/ap: re-enable interrupt for AP queues (Thomas Huth) [RHEL-29741]
  - s390/ap: rework to use irq info from ap queue status (Thomas Huth) [RHEL-29741]
  - s390/mm: move translation-exception identification structure to fault.h (Thomas Huth) [RHEL-29741]
  - s390/ap: show APFS value on error reply 0x8B (Thomas Huth) [RHEL-29741]
  - s390/zcrypt: introduce new internal AP queue se_bound attribute (Thomas Huth) [RHEL-29741]
  - s390/ap: re-init AP queues on config on (Thomas Huth) [RHEL-29741]
  - s390/setup: use strlcat() instead of strcat() (Thomas Huth) [RHEL-29741]
  - s390/airq: remove lsi_mask from airq_struct (Thomas Huth) [RHEL-29741]
  - s390/pfault: use consistent comment style (Thomas Huth) [RHEL-29741]
  - s390/pfault: cleanup inline assemblies (Thomas Huth) [RHEL-29741]
  - s390/pfault: use early_param() instead if __setup() (Thomas Huth) [RHEL-29741]
  - s390/pfault: remove not needed packed and aligned attributes (Thomas Huth) [RHEL-29741]
  - s390/pfault: use UL instead of ULL (Thomas Huth) [RHEL-29741]
  - s390/mm: move pfault code to own C file (Thomas Huth) [RHEL-29741]
  - s390/virtio_ccw: fix virtual vs physical address confusion (Thomas Huth) [RHEL-29741]
  - s390/cio: use bitwise types to allow for type checking (Thomas Huth) [RHEL-29741]
  - s390/cio: introduce bitwise dma types and helper functions (Thomas Huth) [RHEL-29741]
  - s390/vfio_ccw: fix virtual vs physical address confusion (Thomas Huth) [RHEL-29741]
  - s390/cio: fix virtual vs physical address confusion (Thomas Huth) [RHEL-29741]
  - s390/zcrypt: fix reference counting on zcrypt card objects (Thomas Huth) [RHEL-29741]
  - s390/vtime: fix average steal time calculation (Thomas Huth) [RHEL-29741]
  - s390: include linux/io.h instead of asm/io.h (Thomas Huth) [RHEL-29741]
  - s390: fix various typos (Thomas Huth) [RHEL-29741]
  - lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Thomas Huth) [RHEL-29741]
  - s390/crypto: use vector instructions only if available for ChaCha20 (Thomas Huth) [RHEL-29741]
  - s390/relocate_kernel: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/entry: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/purgatory: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/kprobes: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/reipl: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/head64: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/earlypgm: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/crc32le: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/crc32be: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/crypto,chacha: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390/lib: use SYM* macros instead of ENTRY(), etc. (Thomas Huth) [RHEL-29741]
  - s390: enable HAVE_ARCH_STACKLEAK (Thomas Huth) [RHEL-29741]
  - s390/stack: set lowcore kernel stack pointer early (Thomas Huth) [RHEL-29741]
  - s390/stack: use STACK_INIT_OFFSET where possible (Thomas Huth) [RHEL-29741]
  - s390/dumpstack: simplify in stack logic code (Thomas Huth) [RHEL-29741]
  - s390/entry: rely on long-displacement facility (Thomas Huth) [RHEL-29741]
  - s390/bp: remove __bpon() (Thomas Huth) [RHEL-29741]
  - s390/bp: remove s390_isolate_bp_guest() (Thomas Huth) [RHEL-29741]
  - s390/bp: remove TIF_ISOLATE_BP (Thomas Huth) [RHEL-29741]
  - s390/bp: add missing BPENTER to program check handler (Thomas Huth) [RHEL-29741]
  - s390/mcck: cleanup user process termination path (Thomas Huth) [RHEL-29741]
  - s390/nmi: fix virtual-physical address confusion (Thomas Huth) [RHEL-29741]
  - s390/entry: remove toolchain dependent micro-optimization (Thomas Huth) [RHEL-29741]
  - s390/vx: remove __uint128_t type from __vector128 struct again (Thomas Huth) [RHEL-29741]
  - s390/vx: use simple assignments to access __vector128 members (Thomas Huth) [RHEL-29741]
  - s390/vx: add 64 and 128 bit members to __vector128 struct (Thomas Huth) [RHEL-29741]
  - s390/virtio: sort out physical vs virtual pointers usage (Thomas Huth) [RHEL-29741]
  - s390/early: fix sclp_early_sccb variable lifetime (Thomas Huth) [RHEL-29741]
  - s390/nmi: get rid of private slab cache (Thomas Huth) [RHEL-29741]
  - s390/nmi: move storage error checking back to C, enter with DAT on (Thomas Huth) [RHEL-29741]
  - s390/nmi: print machine check interruption code before stopping system (Thomas Huth) [RHEL-29741]
  - s390/sclp: introduce sclp_emergency_printk() (Thomas Huth) [RHEL-29741]
  - s390/sclp: keep sclp_early_sccb (Thomas Huth) [RHEL-29741]
  - s390/nmi: rework register validation handling (Thomas Huth) [RHEL-29741]
  - s390/nmi: use vector instruction macros instead of byte patterns (Thomas Huth) [RHEL-29741]
  - s390/vx: add vx-insn.h wrapper include file (Thomas Huth) [RHEL-29741]
  - s390/appldata: remove power management callbacks (Thomas Huth) [RHEL-29741]
  - s390/mm: use pmd_pgtable_page() helper in __gmap_segment_gaddr() (Thomas Huth) [RHEL-29741]
  - mm/thp: rename pmd_to_page() as pmd_pgtable_page() (Thomas Huth) [RHEL-29741]
  - s390/entry: sort out physical vs virtual pointers usage in sie64a (Thomas Huth) [RHEL-29741]
  - s390/nmi: use irqentry_nmi_enter()/irqentry_nmi_exit() (Thomas Huth) [RHEL-29741]
  - lib/test_bitmap: test the tail after bitmap_to_arr64() (Thomas Huth) [RHEL-29741]
  - lib/bitmap: fix off-by-one in bitmap_to_arr64() (Thomas Huth) [RHEL-29741]
  - lib: bitmap: fix the duplicated comments on bitmap_to_arr64() (Thomas Huth) [RHEL-29741]
  - KVM: s390: replace bitmap_copy with bitmap_{from,to}_arr64 where appropriate (Thomas Huth) [RHEL-29741]
  - lib/bitmap: add test for bitmap_{from,to}_arr64 (Thomas Huth) [RHEL-29741]
  - lib: add bitmap_{from,to}_arr64 (Thomas Huth) [RHEL-29741]
  - lib/bitmap: extend comment for bitmap_(from,to)_arr32() (Thomas Huth) [RHEL-29741]
  - s390/stack: add union to reflect kvm stack slot usages (Thomas Huth) [RHEL-29741]
  - s390/stack: merge empty stack frame slots (Thomas Huth) [RHEL-29741]
  - s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag (Thomas Huth) [RHEL-29741]
  - s390: generate register offsets into pt_regs automatically (Thomas Huth) [RHEL-29741]
  - s390: simplify early program check handler (Thomas Huth) [RHEL-29741]
  - s390/head: get rid of 31 bit leftovers (Thomas Huth) [RHEL-29741]
  - scripts/min-tool-version.sh: raise minimum clang version to 14.0.0 for s390 (Thomas Huth) [RHEL-29741]
  - s390/boot: do not emit debug info for assembly with llvm's IAS (Thomas Huth) [RHEL-29741]
  - s390/boot: workaround llvm IAS bug (Thomas Huth) [RHEL-29741]
  - s390/purgatory: workaround llvm's IAS limitations (Thomas Huth) [RHEL-29741]
  - s390/entry: workaround llvm's IAS limitations (Thomas Huth) [RHEL-29741]
  - s390/alternatives: remove padding generation code (Thomas Huth) [RHEL-29741]
  - s390/alternatives: provide identical sized orginal/alternative sequences (Thomas Huth) [RHEL-29741]
  - s390/compat: cleanup compat_linux.h header file (Thomas Huth) [RHEL-29741]
  - s390/entry: remove broken and not needed code (Thomas Huth) [RHEL-29741]
  - s390/boot: convert parmarea to C (Thomas Huth) [RHEL-29741]
  - s390/boot: convert initial lowcore to C (Thomas Huth) [RHEL-29741]
  - s390/ptrace: move short psw definitions to ptrace header file (Thomas Huth) [RHEL-29741]
  - s390/head: initialize all new psws (Thomas Huth) [RHEL-29741]
  - s390/boot: change initial program check handler to disabled wait psw (Thomas Huth) [RHEL-29741]
  - s390/head: adjust iplstart entry point (Thomas Huth) [RHEL-29741]
  - s390/vx: remove comments from macros which break LLVM's IAS (Thomas Huth) [RHEL-29741]
  - s390/nospec: prefer local labels in .set directives (Thomas Huth) [RHEL-29741]
  - s390/alternatives: use insn format for new instructions (Thomas Huth) [RHEL-29741]
  - s390/alternatives: avoid using jgnop mnemonic (Thomas Huth) [RHEL-29741]
  - s390/alternatives: use instructions instead of byte patterns (Thomas Huth) [RHEL-29741]
  - s390/traps: improve panic message for translation-specification exception (Thomas Huth) [RHEL-29741]
  - s390: convert ".insn" encoding to instruction names (Thomas Huth) [RHEL-29741]
  - s390/crypto: fix compile error for ChaCha20 module (Thomas Huth) [RHEL-29741]
  - s390/nospec: move to single register thunks (Thomas Huth) [RHEL-29741]
  - s390/ptrace: remove opencoded offsetof (Thomas Huth) [RHEL-29741]
  - s390: always use the packed stack layout (Thomas Huth) [RHEL-29741]
  - s390/ftrace: fix arch_ftrace_get_regs implementation (Thomas Huth) [RHEL-29741]
  - s390/ftrace: fix ftrace_caller/ftrace_regs_caller generation (Thomas Huth) [RHEL-29741]
  - s390/nmi: handle vector validity failures for KVM guests (Thomas Huth) [RHEL-29741]
  - s390/nmi: handle guarded storage validity failures for KVM guests (Thomas Huth) [RHEL-29741]
  - s390/sclp: sort out physical vs virtual pointers usage (Thomas Huth) [RHEL-29741]
  - s390: make STACK_FRAME_OVERHEAD available via asm-offsets.h (Thomas Huth) [RHEL-29741]
  - s390/ftrace: add HAVE_DYNAMIC_FTRACE_WITH_DIRECT_CALL support (Thomas Huth) [RHEL-29741]
  - s390/ptrace: add function argument access API (Thomas Huth) [RHEL-29741]
  - selftests/ftrace: add s390 support for kprobe args tests (Thomas Huth) [RHEL-29741]
  - s390/ptrace: fix coding style (Thomas Huth) [RHEL-29741]
  - s390/ftrace: provide separate ftrace_caller/ftrace_regs_caller implementations (Thomas Huth) [RHEL-29741]
  - s390/ftrace: add ftrace_instruction_pointer_set() helper function (Thomas Huth) [RHEL-29741]
  - s390/ftrace: add HAVE_DYNAMIC_FTRACE_WITH_ARGS support (Thomas Huth) [RHEL-29741]
  - s390/jump_label: make use of HAVE_JUMP_LABEL_BATCH (Thomas Huth) [RHEL-29741]
  - s390/ftrace: add missing serialization for graph caller patching (Thomas Huth) [RHEL-29741]
  - s390/ftrace: use text_poke_sync_lock() (Thomas Huth) [RHEL-29741]
  - s390/jump_label: use text_poke_sync() (Thomas Huth) [RHEL-29741]
  - s390/ftrace: remove dead code (Thomas Huth) [RHEL-29741]
  - s390/ftrace: remove incorrect __va usage (Thomas Huth) [RHEL-29741]
  - s390/sclp: add __nonstring annotation (Thomas Huth) [RHEL-29741]
  - s390/entry: make oklabel within CHKSTG macro local (Thomas Huth) [RHEL-29741]
  - s390/sclp: add tracing of SCLP interactions (Thomas Huth) [RHEL-29741]
  - s390/debug: fix kernel-doc warnings (Thomas Huth) [RHEL-29741]
  - s390/debug: add early tracing support (Thomas Huth) [RHEL-29741]
  - s390/debug: fix debug area life cycle (Thomas Huth) [RHEL-29741]
  - s390/debug: keep debug data on resize (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: make sie capability regular hwcap (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: remove hwcap stfle check (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: remove z/Architecture mode active check (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: use consistent coding style / remove comments (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: open code initialization of first six hwcap bits (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: split setup_hwcaps() (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: move setup_hwcaps() (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: add sanity checks (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: use named initializers for hwcap string arrays (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: introduce HWCAP bit numbers (Thomas Huth) [RHEL-29741]
  - s390/hwcaps: shorten HWCAP defines (Thomas Huth) [RHEL-29741]
  - s390/cpacf: get rid of register asm (Thomas Huth) [RHEL-29741]
  - s390/debug: remove unused print defines (Thomas Huth) [RHEL-29741]
  - s390/dasd: remove debug printk (Thomas Huth) [RHEL-29741]
  - ipc/msg.c: fix percpu_counter use after free (Rafael Aquini) [RHEL-15602]
  - ipc/msg: mitigate the lock contention with percpu counter (Rafael Aquini) [RHEL-15602]
  - percpu: add percpu_counter_add_local and percpu_counter_sub_local (Rafael Aquini) [RHEL-15602]
  - redhat/configs: Add CONFIG_USB_PCI_AMD (Desnes Nunes) [RHEL-28810]
  - redhat/configs: Add CONFIG_USB_LJCA (Desnes Nunes) [RHEL-28810]
  - redhat/configs: Add CONFIG_USB_CHIPIDEA_NPCM (Desnes Nunes) [RHEL-28810]
  - redhat/configs: Add CONFIG_TYPEC_MUX_PTN36502 (Desnes Nunes) [RHEL-28810]
  - usb: xhci-mtk: set the dma max_seg_size (Desnes Nunes) [RHEL-28810]
  - usb: xhci-mtk: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-28810]
  - xhci: tracing: Use the new __vstring() helper (Desnes Nunes) [RHEL-28810]
  - Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix NULL pointer dereference in tb_port_update_credits() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Do not create DisplayPort tunnels on adapters of the same router (Desnes Nunes) [RHEL-28810]
  - usb: misc: onboard_hub: use pointer consistently in the probe function (Desnes Nunes) [RHEL-28810]
  - usb: typec: ucsi: Fix race between typec_switch and role_switch (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: add Quectel EG912Y module support (Desnes Nunes) [RHEL-28810]
  - USB: serial: ftdi_sio: update Actisense PIDs constant names (Desnes Nunes) [RHEL-28810]
  - usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 (Desnes Nunes) [RHEL-28810]
  - usb: typec: ucsi: fix gpio-based orientation detection (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: add Quectel RM500Q R13 firmware support (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: add Foxconn T99W265 with new baseline (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth (Desnes Nunes) [RHEL-28810]
  - r8152: add vendor/device ID pair for ASUS USB-C2500 (Desnes Nunes) [RHEL-28810]
  - Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" (Desnes Nunes) [RHEL-28810]
  - usb: typec: class: fix typec_altmode_put_partner to put plugs (Desnes Nunes) [RHEL-28810]
  - USB: gadget: core: adjust uevent timing on gadget unbind (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix memory leak in margining_port_remove() (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: add Luat Air72*U series products (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: qcom,dwc3: fix example wakeup interrupt types (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: add Fibocom L7xx modules (Desnes Nunes) [RHEL-28810]
  - USB: xhci-plat: fix legacy PHY double init (Desnes Nunes) [RHEL-28810]
  - usb: typec: tipd: Supply also I2C driver data (Desnes Nunes) [RHEL-28810]
  - i2c: Add i2c_get_match_data() (Desnes Nunes) [RHEL-28810]
  - usb: xhci-mtk: fix in-ep's start-split check failure (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: set the dma max_seg_size (Desnes Nunes) [RHEL-28810]
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: add missing of_node_put and platform_device_put (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: Fix default mode initialization (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Fix a memory leak in an error handling path (Desnes Nunes) [RHEL-28810]
  - usb: typec: tcpm: Skip hard reset when in error recovery (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: hcd: add missing phy name to example (Desnes Nunes) [RHEL-28810]
  - USB: serial: option: don't claim interface 4 for ZTE MF290 (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Only add device router DP IN to the head of the DP resource list (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Send uevent after asymmetric/symmetric switch (Desnes Nunes) [RHEL-28810]
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: fsa4480: Add compatible for OCP96011 (Desnes Nunes) [RHEL-28810]
  - usb: typec: fsa4480: Add support to swap SBU orientation (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: fsa4480: Add data-lanes property to endpoint (Desnes Nunes) [RHEL-28810]
  - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: rockchip,dwc3: update inno usb2 phy binding name (Desnes Nunes) [RHEL-28810]
  - Revert "dt-bindings: usb: Add bindings for multiport properties on DWC3 controller" (Desnes Nunes) [RHEL-28810]
  - Revert "dt-bindings: usb: qcom,dwc3: Add bindings for SC8280 Multiport" (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix one kernel-doc comment (Desnes Nunes) [RHEL-28810]
  - usb: core: Remove duplicated check in usb_hub_create_port_device (Desnes Nunes) [RHEL-28810]
  - usb: typec: tcpm: Add additional checks for contaminant (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: add optional PHY interface clocks (Desnes Nunes) [RHEL-28810]
  - usb: typec: add support for PTN36502 redriver (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: add NXP PTN36502 Type-C redriver bindings (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: Fix unused ci_hdrc_usb2_of_match warning for !CONFIG_OF (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: Add support for NPCM (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: ci-hdrc-usb2: add npcm750 and npcm845 compatible (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: vialab,vl817: remove reset-gpios from required list (Desnes Nunes) [RHEL-28810]
  - usb-storage,uas: make internal quirks flags 64bit (Desnes Nunes) [RHEL-28810]
  - usb-storage: remove UNUSUAL_VENDOR_INTF macro (Desnes Nunes) [RHEL-28810]
  - usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present (Desnes Nunes) [RHEL-28810]
  - usb: host: xhci-plat: fix possible kernel oops while resuming (Desnes Nunes) [RHEL-28810]
  - usb: xhci: Implement xhci_handshake_check_state() helper (Desnes Nunes) [RHEL-28810]
  - xhci: split free interrupter into separate remove and free parts (Desnes Nunes) [RHEL-28810]
  - xhci: Enable RPM on controllers that support low-power states (Desnes Nunes) [RHEL-28810]
  - xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 (Desnes Nunes) [RHEL-28810]
  - xhci: Simplify event ring dequeue pointer update for port change events (Desnes Nunes) [RHEL-28810]
  - xhci: simplify event ring dequeue tracking for transfer events (Desnes Nunes) [RHEL-28810]
  - xhci: Clean up xhci_{alloc,free}_erst() declarations (Desnes Nunes) [RHEL-28810]
  - usb: Annotate struct urb_priv with __counted_by (Desnes Nunes) [RHEL-28810]
  - xhci: Clean up stale comment on ERST_SIZE macro (Desnes Nunes) [RHEL-28810]
  - xhci: Clean up ERST_PTR_MASK inversion (Desnes Nunes) [RHEL-28810]
  - xhci: Expose segment numbers in debugfs (Desnes Nunes) [RHEL-28810]
  - xhci: Update last segment pointer after Event Ring expansion (Desnes Nunes) [RHEL-28810]
  - xhci: Adjust segment numbers after ring expansion (Desnes Nunes) [RHEL-28810]
  - xhci: Use more than one Event Ring segment (Desnes Nunes) [RHEL-28810]
  - xhci: Set DESI bits in ERDP register correctly (Desnes Nunes) [RHEL-28810]
  - xhci: expand next_trb() helper to support more ring types (Desnes Nunes) [RHEL-28810]
  - xhci: Add busnumber to port tracing (Desnes Nunes) [RHEL-28810]
  - xhci: pass port structure to tracing instead of port number (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Configure asymmetric link if needed and bandwidth allows (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Add support for asymmetric link (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Introduce tb_switch_depth() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Introduce tb_for_each_upstream_port_on_path() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Introduce tb_port_path_direction_downstream() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Set path power management packet support bit for USB4 v2 routers (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Change bandwidth reservations to comply USB4 v2 (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Make is_gen4_link() available to the rest of the driver (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Use constants for path weight and priority (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: ti,tps6598x: Disallow undefined properties (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: gpio-sbu-mux: Make 'mode-switch' not required (Desnes Nunes) [RHEL-28810]
  - usb: Inform the USB Type-C class about enumerated devices (Desnes Nunes) [RHEL-28810]
  - usb: typec: Link enumerated USB devices with Type-C partner (Desnes Nunes) [RHEL-28810]
  - media: cx231xx: Use EP5_BUF_SIZE macro (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Add DP IN added last in the head of the list of DP resources (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Log NVM version of routers and retimers (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Use tb_tunnel_xxx() log macros in tb.c (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix typo of HPD bit for Hot Plug Detect (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix typo in enum tb_link_width kernel-doc (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Fix debug log when DisplayPort adapter not available for pairing (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Check for unplugged router in tb_switch_clx_disable() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Make tb_switch_clx_is_supported() static (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Get rid of usb4_usb3_port_actual_link_rate() (Desnes Nunes) [RHEL-28810]
  - thunderbolt: dma_test: Use enum tb_link_width (Desnes Nunes) [RHEL-28810]
  - usb: typec: altmodes/displayport: fixup drm internal api change vs new user. (Desnes Nunes) [RHEL-28810]
  - drm: Add HPD state to drm_connector_oob_hotplug_event() (Desnes Nunes) [RHEL-28810]
  - usb: Add support for Intel LJCA device (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add status trace for tps25750 (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add power status trace for tps25750 (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add trace for tps25750 irq (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add TPS25750 support (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add device data to of_device_id (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Refactor tps6598x port registration (Desnes Nunes) [RHEL-28810]
  - USB: typec: tps6598x: Add patch mode to tps6598x (Desnes Nunes) [RHEL-28810]
  - USB: typec: tsp6598x: Add cmd timeout and response delay (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: tps6598x: Add tps25750 (Desnes Nunes) [RHEL-28810]
  - usb: Use device_get_match_data() (Desnes Nunes) [RHEL-28810]
  - usb: dwc2: add pci_device_id driver_data parse support (Desnes Nunes) [RHEL-28810]
  - usb: usbtest: fix a type promotion bug (Desnes Nunes) [RHEL-28810]
  - usb: ucsi: glink: use the connector orientation GPIO to provide switch events (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: document gfladj_refclk_lpm_sel field (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: gpio-sbu-mux: Add an entry for CBDTU02043 (Desnes Nunes) [RHEL-28810]
  - docs: driver-api: usb: update dma info (Desnes Nunes) [RHEL-28810]
  - USB: dma: remove unused function prototype (Desnes Nunes) [RHEL-28810]
  - usb: atm: Use size_add() in call to struct_size() (Desnes Nunes) [RHEL-28810]
  - usb: gadget: clarify usage of USB_GADGET_DELAYED_STATUS (Desnes Nunes) [RHEL-28810]
  - usb: pd: Exposing the Peak Current value of Fixed Supplies to user space (Desnes Nunes) [RHEL-28810]
  - usb:typec:tcpm:support double Rp to Vbus cable as sink (Desnes Nunes) [RHEL-28810]
  - usb: xhci-mtk: improve split scheduling by separate IN/OUT budget (Desnes Nunes) [RHEL-28810]
  - usb: xhci-mtk: add a bandwidth budget table (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: ci-hdrc-usb2: Allow "fsl,imx27-usb" to be passed alone (Desnes Nunes) [RHEL-28810]
  - usb: pci-quirks: handle HAS_IOPORT dependency for UHCI handoff (Desnes Nunes) [RHEL-28810]
  - usb: pci-quirks: handle HAS_IOPORT dependency for AMD quirk (Desnes Nunes) [RHEL-28810]
  - usb: pci-quirks: group AMD specific quirk code together (Desnes Nunes) [RHEL-28810]
  - usbmon: Use list_for_each_entry() helper (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: tegra: Consistently use dev_err_probe() (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: Simplify Tegra DMA alignment code (Desnes Nunes) [RHEL-28810]
  - usb: chipidea: Fix DMA overwrite for Tegra (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: dwc3: Add SDX75 compatible (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: qcom,dwc3: Fix SDX65 clocks (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: dwc3: Add DWC_usb3 TX/RX threshold configurable (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: core: configure TX/RX threshold for DWC3_IP (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: dwc3: Add Realtek DHC RTD SoC DWC3 USB (Desnes Nunes) [RHEL-28810]
  - usb: dwc3: add Realtek DHC RTD SoC dwc3 glue layer driver (Desnes Nunes) [RHEL-28810]
  - usb: typec: intel_pmc_mux: Configure Displayport Alternate mode 2.1 (Desnes Nunes) [RHEL-28810]
  - usb: pd: Add helper macro to get Type C cable speed (Desnes Nunes) [RHEL-28810]
  - usb: typec: Add Active or Passive cable defination to cable discover mode VDO (Desnes Nunes) [RHEL-28810]
  - usb: typec: Add Displayport Alternate Mode 2.1 Support (Desnes Nunes) [RHEL-28810]
  - usb: xhci: Move extcaps related macros to respective header file (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: Add bindings for multiport properties on DWC3 controller (Desnes Nunes) [RHEL-28810]
  - dt-bindings: usb: qcom,dwc3: Add bindings for SC8280 Multiport (Desnes Nunes) [RHEL-28810]
  - usb: typec: intel_pmc_mux: enable sysfs usb role access (Desnes Nunes) [RHEL-28810]
  - usb: typec: intel_pmc_mux: Add new ACPI ID for Lunar Lake IOM device (Desnes Nunes) [RHEL-28810]
  - usb: typec: intel_pmc_mux: Expose IOM port status to debugfs (Desnes Nunes) [RHEL-28810]
  - usb: typec: intel_pmc_mux: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-28810]
  - media: cx231xx: Add EP5_BUF_SIZE and EP5_TIMEOUT_MS macros (Desnes Nunes) [RHEL-28810]
  - media: cx231xx: Switch to use kmemdup() helper (Desnes Nunes) [RHEL-28810]
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-28810]
  - media: usb: siano: Use kmemdup to simplify kmalloc and memcpy logic (Desnes Nunes) [RHEL-28810]
  - thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager (Desnes Nunes) [RHEL-28810]
  - phy: broadcom: sr-usb: fix Wvoid-pointer-to-enum-cast warning (Desnes Nunes) [RHEL-28810]
  - phy: fsl-imx8mq-usb: add dev_err_probe if getting vbus failed (Desnes Nunes) [RHEL-28810]
  - phy: fsl-imx8mp-usb: add support for phy tuning (Desnes Nunes) [RHEL-28810]
  - phy: tegra: xusb: check return value of devm_kzalloc() (Desnes Nunes) [RHEL-28810]
  - phy: tegra: xusb: Clear the driver reference in usb-phy dev (Desnes Nunes) [RHEL-28810]
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Desnes Nunes) [RHEL-28810]
  - phy: tegra: xusb: Support sleepwalk for Tegra234 (Desnes Nunes) [RHEL-28810]
  - phy: tegra: xusb: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx_pci: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx_pci: Drop if block with always false condition (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx_pci: fix return value check of mmc_add_host() (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx: add 74 Clocks in power on flow (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx: Fix build errors/warnings for unused variable (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx: Let MMC core handle runtime PM (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx: Use pm_runtime_{get,put}() to handle runtime PM (Desnes Nunes) [RHEL-28810]
  - mmc: rtsx_pci: Fix long reads when clock is prescaled (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: Fix clang -Wsometimes-uninitialized in rts5261_init_from_hw() (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: add rts5261 efuse function (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (Desnes Nunes) [RHEL-28810]
  - misc: rtsx_pcr: Fix a typo (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: Fix an error handling path in rtsx_pci_probe() (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: Avoid mangling IRQ during runtime PM (Desnes Nunes) [RHEL-28810]
  - misc: rtsx: Remove usage of the deprecated "pci-dma-compat.h" API (Desnes Nunes) [RHEL-28810]
  - mlxsw: core_env: Fix driver initialization with old firmware (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Register netdevice notifier before nexthop (Ivan Vecera) [RHEL-34673]
  - mlxsw: pci: Allocate skbs using GFP_KERNEL during initialization (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_ethtool: Fix -Wformat-truncation warning (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_thermal: Fix -Wformat-truncation warning (Ivan Vecera) [RHEL-34673]
  - mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_acl_flex_keys: Fill blocks with high entropy first (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_acl_flex_keys: Save chosen elements in all blocks per search (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_acl_flex_keys: Save chosen elements per block (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_acl_flex_keys: Add a bitmap to save which blocks are chosen (Ivan Vecera) [RHEL-34673]
  - mlxsw: Mark high entropy key blocks (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_span: Annotate struct mlxsw_sp_span with __counted_by (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Annotate struct mlxsw_sp_nexthop_group_info with __counted_by (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Annotate struct mlxsw_sp_counter_pool with __counted_by (Ivan Vecera) [RHEL-34673]
  - mlxsw: core: Annotate struct mlxsw_env with __counted_by (Ivan Vecera) [RHEL-34673]
  - mlxsw: Annotate struct mlxsw_linecards with __counted_by (Ivan Vecera) [RHEL-34673]
  - mlxsw: i2c: Utilize standard macros for dividing buffer into chunks (Ivan Vecera) [RHEL-34673]
  - mlxsw: core: Extend allowed list of external cooling devices for thermal zone binding (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Limit MTBR register payload to a single data record (Ivan Vecera) [RHEL-34673]
  - mlxsw: Edit IPv6 key blocks to use one less block for multicast forwarding (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_acl_flex_keys: Add 'ipv4_5b' flex key (Ivan Vecera) [RHEL-34673]
  - mlxsw: Add 'ipv4_5' flex key (Ivan Vecera) [RHEL-34673]
  - mlxsw: Use size_mul() in call to struct_size() (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_hwmon: Adjust module label names based on MTCAP sensor counter (Ivan Vecera) [RHEL-34673]
  - mlxsw: i2c: Limit single transaction buffer size (Ivan Vecera) [RHEL-34673]
  - mlxsw: i2c: Fix chunk size setting in output mailbox buffer (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: Fix test failure on Spectrum-4 (Ivan Vecera) [RHEL-34673]
  - mlxsw: Fix the size of 'VIRT_ROUTER_MSB' (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Fix SSPR register layout (Ivan Vecera) [RHEL-34673]
  - mlxsw: pci: Set time stamp fields also when its type is MIRROR_UTC (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Stop ignoring learning notifications from redirected traffic (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_flower: Disable learning and security lookup when redirecting (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_acl_flex_actions: Add IGNORE_ACTION (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_switchdev: Use is_zero_ether_addr() instead of ether_addr_equal() (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: router_bridge_lag: Add a new selftest (Ivan Vecera) [RHEL-34673]
  - mlxsw: Set port STP state on bridge enslavement (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Remove unused function declarations (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: rif_bridge: Add a new selftest (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: rif_lag_vlan: Add a new selftest (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: rif_lag: Add a new selftest (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: IPv6 events: Use tracker helpers to hold & put netdevices (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: RIF: Use tracker helpers to hold & put netdevices (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: hw_stats: Use tracker helpers to hold & put netdevices (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: FIB: Use tracker helpers to hold & put netdevices (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_switchdev: Use tracker helpers to hold & put netdevices (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_nve: Do not take reference when looking up netdevice (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Drop unused functions mlxsw_sp_port_lower_dev_hold/_put() (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_env: Read transceiver module EEPROM in 128 bytes chunks (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Increase Management Cable Info Access Register length (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Remove unused function argument (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Add Management Capabilities Mask Register (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Move 'mpsc' definition in 'mlxsw_reg_infos' (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Permit enslavement to netdevices with uppers (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Replay IP NETDEV_UP on device deslavement (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Replay IP NETDEV_UP on device enslavement (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Replay neighbours when RIF is made (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Replay MACVLANs when RIF is made (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Offload ethernet nexthops when RIF is made (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Join RIFs of LAG upper VLANs (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_switchdev: Replay switchdev objects on port join (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: On port enslavement to a LAG, join upper's bridges (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Add a replay_deslavement argument to event handlers (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Allow event handlers to check unowned bridges (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum: Split a helper out of mlxsw_sp_netdevice_event() (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Extract a helper to schedule neighbour work (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Allow address handlers to run on bridge ports (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: rtnetlink: Drop obsolete tests (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_switchdev: Manage RIFs on PVID change (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: mlxsw_sp_inetaddr_bridge_event: Add an argument (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Adjust mlxsw_sp_inetaddr_vlan_event() coding style (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Take VID for VLAN FIDs from RIF params (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Pass struct mlxsw_sp_rif_params to fid_get (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_switchdev: Pass extack to mlxsw_sp_br_ban_rif_pvid_change() (Ivan Vecera) [RHEL-34673]
  - selftests: forwarding: Add test cases for flower port range matching (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: Test port range registers' occupancy (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: Add scale test for port ranges (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_flower: Add ability to match on port ranges (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_acl: Pass main driver structure to mlxsw_sp_acl_rulei_destroy() (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_acl: Add port range key element (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_port_range: Add devlink resource support (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_port_range: Add port range core (Ivan Vecera) [RHEL-34673]
  - mlxsw: resource: Add resource identifier for port range registers (Ivan Vecera) [RHEL-34673]
  - mlxsw: reg: Add Policy-Engine Port Range Register (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Fix an IS_ERR() vs NULL check (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Track next hops at CRIFs (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Split nexthop finalization to two stages (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Use router.lb_crif instead of .lb_rif_index (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Link CRIFs to RIFs (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Maintain CRIF for fallback loopback RIF (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Maintain a hash table of CRIFs (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Use mlxsw_sp_ul_rif_get() to get main VRF LB RIF (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Add extack argument to mlxsw_sp_lb_rif_init() (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: one_armed_router: Use port MAC for bridge address (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: vxlan: Disable IPv6 autogen on bridges (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: spectrum: q_in_vni_veto: Disable IPv6 autogen on a bridge (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: qos_mc_aware: Disable IPv6 autogen on bridges (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: qos_ets_strict: Disable IPv6 autogen on bridges (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: qos_dscp_bridge: Disable IPv6 autogen on a bridge (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: mirror_gre_scale: Disable IPv6 autogen on a bridge (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: extack: Disable IPv6 autogen on bridges (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: q_in_q_veto: Disable IPv6 autogen on bridges (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Move IPIP init up (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Extract a helper for RIF migration (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Add a helper to check if netdev has addresses (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Extract a helper to free a RIF (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Access nhgi->rif through a helper (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Access nh->rif->dev through a helper (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Access rif->dev from params in mlxsw_sp_rif_create() (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Access rif->dev through a helper (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Add a helper specifically for joining a LAG (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Extract a helper from mlxsw_sp_port_vlan_router_join() (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Privatize mlxsw_sp_rif_dev() (Ivan Vecera) [RHEL-34673]
  - mlxsw: Convert does-RIF-have-this-netdev queries to a dedicated helper (Ivan Vecera) [RHEL-34673]
  - mlxsw: Convert RIF-has-netdevice queries to a dedicated helper (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Reuse work neighbor initialization in work scheduler (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Use the available router pointer for netevent handling (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Pass router to mlxsw_sp_router_schedule_work() directly (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Move here inetaddr validator notifiers (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: mlxsw_sp_router_fini(): Extract a helper variable (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: egress_vid_classification: Fix the diagram (Ivan Vecera) [RHEL-34673]
  - selftests: mlxsw: ingress_rif_conf_1d: Fix the diagram (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Do not query MAX_VRS on each iteration (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Do not query MAX_RIFS on each iteration (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Use extack in mlxsw_sp~_rif_ipip_lb_configure() (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_router: Clarify a comment (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_flower: Add ability to match on layer 2 miss (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_flower: Do not force matching on iif (Ivan Vecera) [RHEL-34673]
  - mlxsw: spectrum_flower: Split iif parsing to a separate function (Ivan Vecera) [RHEL-34673]
  - mlxfw: Replace zero-length array with DECLARE_FLEX_ARRAY() helper (Ivan Vecera) [RHEL-34673]
  - selftests: forwarding: introduce helper for standard ethtool counters (Ivan Vecera) [RHEL-34673]
  - selftests: forwarding: generalize bail_on_lldpad from mlxsw (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_thermal: Simplify transceiver module get_temp() callback (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_thermal: Make mlxsw_thermal_module_init() void (Ivan Vecera) [RHEL-34673]
  - mlxsw: core_thermal: Use static trip points for transceiver modules (Ivan Vecera) [RHEL-34673]
  - net/mlxsw: Convert to i2c's .probe_new() (Ivan Vecera) [RHEL-34673]
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Ivan Vecera) [RHEL-32141]
  - cgroup/cpuset: Fix retval in update_cpumask() (Waiman Long) [RHEL-34600]
  - cgroup/cpuset: Fix a memory leak in update_exclusive_cpumask() (Waiman Long) [RHEL-34600]
  - kernel/cgroup: use kernfs_create_dir_ns() (Waiman Long) [RHEL-34600]
  - PM: sleep: Remove obsolete comment from unlock_system_sleep() (Waiman Long) [RHEL-34600]
  - Documentation: PM: Adjust freezing-of-tasks.rst to the freezer changes (Waiman Long) [RHEL-34600]
  - cgroup: Move rcu_head up near the top of cgroup_root (Waiman Long) [RHEL-34600]
  - cgroup: Add a new helper for cgroup1 hierarchy (Waiman Long) [RHEL-34600]
  - cgroup: Add annotation for holding namespace_sem in current_cgns_cgroup_from_root() (Waiman Long) [RHEL-34600]
  - cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show() (Waiman Long) [RHEL-34600]
  - cgroup: Make operations on the cgroup root_list RCU safe (Waiman Long) [RHEL-34600]
  - cgroup: Remove unnecessary list_empty() (Waiman Long) [RHEL-34600]
  - cgroup_freezer: cgroup_freezing: Check if not frozen (Waiman Long) [RHEL-34600]
  - sched: psi: fix unprivileged polling against cgroups (Waiman Long) [RHEL-34600]
  - cgroup: use legacy_name for cgroup v1 disable info (Waiman Long) [RHEL-34600]
  - cgroup: Avoid extra dereference in css_populate_dir() (Waiman Long) [RHEL-34600]
  - cgroup: Check for ret during cgroup1_base_files cft addition (Waiman Long) [RHEL-34600]
  - sched/core: Update stale comment in try_to_wake_up() (Waiman Long) [RHEL-34600]
  - cgroup: Remove duplicates in cgroup v1 tasks file (Waiman Long) [RHEL-34600]
  - cgroup: fix build when CGROUP_SCHED is not enabled (Waiman Long) [RHEL-34600]
  - cgroup: Avoid -Wstringop-overflow warnings (Waiman Long) [RHEL-34600]
  - cgroup:namespace: Remove unused cgroup_namespaces_init() (Waiman Long) [RHEL-34600]
  - cgroup/rstat: Record the cumulative per-cpu time of cgroup and its descendants (Waiman Long) [RHEL-34600]
  - cgroup: clean up if condition in cgroup_pidlist_start() (Waiman Long) [RHEL-34600]
  - cgroup: fix obsolete function name in cgroup_destroy_locked() (Waiman Long) [RHEL-34600]
  - cgroup: fix obsolete function name above css_free_rwork_fn() (Waiman Long) [RHEL-34600]
  - cgroup/cpuset: fix kernel-doc (Waiman Long) [RHEL-34600]
  - cgroup: clean up printk() (Waiman Long) [RHEL-34600]
  - cgroup: fix obsolete comment above cgroup_create() (Waiman Long) [RHEL-34600]
  - cgroup/misc: Store atomic64_t reads to u64 (Waiman Long) [RHEL-34600]
  - cgroup/misc: Change counters to be explicit 64bit types (Waiman Long) [RHEL-34600]
  - cgroup/misc: update struct members descriptions (Waiman Long) [RHEL-34600]
  - cgroup: remove cgrp->kn check in css_populate_dir() (Waiman Long) [RHEL-34600]
  - cgroup: fix obsolete function name (Waiman Long) [RHEL-34600]
  - cgroup: use cached local variable parent in for loop (Waiman Long) [RHEL-34600]
  - cgroup: put cgroup_tryget_css() inside CONFIG_CGROUP_SCHED (Waiman Long) [RHEL-34600]
  - cgroup: fix obsolete comment above for_each_css() (Waiman Long) [RHEL-34600]
  - cgroup/cpuset: avoid unneeded cpuset_mutex re-lock (Waiman Long) [RHEL-34600]
  - cgroup: minor cleanup for cgroup_extra_stat_show() (Waiman Long) [RHEL-34600]
  - cgroup: remove unneeded return value of cgroup_rm_cftypes_locked() (Waiman Long) [RHEL-34600]
  - kernfs: add stub helper for kernfs_generic_poll() (Waiman Long) [RHEL-34600]
  - sched/psi: Select KERNFS as needed (Waiman Long) [RHEL-34600]
  - sched: add throttled time stat for throttled children (Waiman Long) [RHEL-34600]
  - sched: don't account throttle time for empty groups (Waiman Long) [RHEL-34600]
  - sched/psi: use kernfs polling functions for PSI trigger polling (Waiman Long) [RHEL-34600]
  - psi: remove 500ms min window size limitation for triggers (Waiman Long) [RHEL-34600]
  - cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}() (Waiman Long) [RHEL-34600]
  - cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex (Waiman Long) [RHEL-34600]
  - freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL (Waiman Long) [RHEL-34600]
  - sched: Fix race in task_call_func() (Waiman Long) [RHEL-34600]
  - sched/psi: Per-cgroup PSI accounting disable/re-enable interface (Waiman Long) [RHEL-34600]
  - sched: Fix more TASK_state comparisons (Waiman Long) [RHEL-34600]
  - sched: Fix TASK_state comparisons (Waiman Long) [RHEL-34600]
  - freezer,sched: Rewrite core freezer logic (Waiman Long) [RHEL-34600]
  - cgroup.c: remove redundant check for mixable cgroup in cgroup_migrate_vet_dst (Waiman Long) [RHEL-34600]
  - ethtool: add SET for TCP_DATA_SPLIT ringparam (Ivan Vecera) [RHEL-32112]
  - i40e: Report MFS in decimal base instead of hex (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: fix i40e_count_filters() to count only active/new filters (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Enforce software interrupt during busy-poll exit (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: remove unnecessary qv_info ptr NULL checks (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Remove VEB recursion (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Fix broken support for floating VEBs (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Add helpers to find VSI and VEB by SEID and use them (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Introduce and use macros for iterating VSIs and VEBs (Kamal Heib) [RHEL-17460 RHEL-25596]
  - i40e: Use existing helper to find flow director VSI (Kamal Heib) [RHEL-17460 RHEL-25596]
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: Allow model specific EPPs (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: Refine computation of P-state for given frequency (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: Revise global turbo disable check (Steve Best) [RHEL-34665]
  - cpufreq: intel_pstate: set stale CPU frequency to minimum (Steve Best) [RHEL-34665]
  - bitfield: add FIELD_PREP_CONST() (Steve Best) [RHEL-34665]
  - NFSv4.1/pnfs: fix NFS with TLS in pnfs (Benjamin Coddington) [RHEL-34576]
  - octeontx2-af: Use separate handlers for interrupts (Kamal Heib) [RHEL-35170] {CVE-2024-27030}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35078] {CVE-2024-26993}
  - init/main.c: Fix potential static_command_line memory overflow (Steve Best) [RHEL-35088] {CVE-2024-26988}
  - tls: remove redundant assignment to variable decrypted (Sabrina Dubroca) [RHEL-29306]
  - net: skbuff: generalize the skb->decrypted bit (Sabrina Dubroca) [RHEL-29306]
  - tls: fix lockless read of strp->msg_ready in ->poll (Sabrina Dubroca) [RHEL-29306]
  - tls: get psock ref after taking rxlock to avoid leak (Sabrina Dubroca) [RHEL-29306]
  - selftests: tls: add test with a partially invalid iov (Sabrina Dubroca) [RHEL-29306]
  - tls: adjust recv return with async crypto and failed copy to userspace (Sabrina Dubroca) [RHEL-29306]
  - tls: recv: process_rx_list shouldn't use an offset with kvec (Sabrina Dubroca) [RHEL-29306]
  - tls: fix peeking with sync+async decryption (Sabrina Dubroca) [RHEL-29306]
  - selftests: tls: add test for peeking past a record of a different type (Sabrina Dubroca) [RHEL-29306]
  - selftests: tls: add test for merging of same-type control messages (Sabrina Dubroca) [RHEL-29306]
  - tls: don't skip over different type records from the rx_list (Sabrina Dubroca) [RHEL-29306]
  - tls: stop recv() if initial process_rx_list gave us non-DATA (Sabrina Dubroca) [RHEL-29306]
  - tls: break out of main loop when PEEK gets a non-data record (Sabrina Dubroca) [RHEL-29306]
  - selftests: tls: increase the wait in poll_partial_rec_async (Sabrina Dubroca) [RHEL-29306]
  - net: tls: fix returned read length with async decrypt (Sabrina Dubroca) [RHEL-29306]
  - selftests: tls: use exact comparison in recv_partial (Sabrina Dubroca) [RHEL-29306]
  - net: tls, add test to capture error on large splice (Sabrina Dubroca) [RHEL-29306]
  - tls: Use size_add() in call to struct_size() (Sabrina Dubroca) [RHEL-29306]
  - net/tls: avoid TCP window full during ->read_sock() (Sabrina Dubroca) [RHEL-29306]
  - PCI: Fix pci_rh_check_status() call semantics (Luiz Capitulino) [RHEL-35032]
  - ionic: keep stats struct local to error handling (Michal Schmidt) [RHEL-36065]
  - ionic: better dma-map error handling (Michal Schmidt) [RHEL-36065]
  - ionic: remove unnecessary NULL test (Michal Schmidt) [RHEL-36065]
  - ionic: rearrange ionic_queue for better layout (Michal Schmidt) [RHEL-36065]
  - ionic: rearrange ionic_qcq (Michal Schmidt) [RHEL-36065]
  - ionic: carry idev in ionic_cq struct (Michal Schmidt) [RHEL-36065]
  - ionic: refactor skb building (Michal Schmidt) [RHEL-36065]
  - ionic: fold adminq clean into service routine (Michal Schmidt) [RHEL-36065]
  - ionic: use specialized desc info structs (Michal Schmidt) [RHEL-36065]
  - ionic: remove the cq_info to save more memory (Michal Schmidt) [RHEL-36065]
  - ionic: remove callback pointer from desc_info (Michal Schmidt) [RHEL-36065]
  - ionic: move adminq-notifyq handling to main file (Michal Schmidt) [RHEL-36065]
  - ionic: drop q mapping (Michal Schmidt) [RHEL-36065]
  - ionic: remove desc, sg_desc and cmb_desc from desc_info (Michal Schmidt) [RHEL-36065]
  - ionic: change MODULE_AUTHOR to person name (Michal Schmidt) [RHEL-36065]
  - ionic: Clean RCT ordering issues (Michal Schmidt) [RHEL-36065]
  - ionic: Use CQE profile for dim (Michal Schmidt) [RHEL-36065]
  - ionic: change the hwstamp likely check (Michal Schmidt) [RHEL-36065]
  - ionic: reduce the use of netdev (Michal Schmidt) [RHEL-36065]
  - ionic: Pass local netdev instead of referencing struct (Michal Schmidt) [RHEL-36065]
  - ionic: Check stop no restart (Michal Schmidt) [RHEL-36065]
  - ionic: Clean up BQL logic (Michal Schmidt) [RHEL-36065]
  - ionic: Make use napi_consume_skb (Michal Schmidt) [RHEL-36065]
  - ionic: Shorten a Tx hotpath (Michal Schmidt) [RHEL-36065]
  - ionic: Change default number of descriptors for Tx and Rx (Michal Schmidt) [RHEL-36065]
  - ionic: Rework Tx start/stop flow (Michal Schmidt) [RHEL-36065]
  - ionic: restore netdev feature bits after reset (Michal Schmidt) [RHEL-36065]
  - ionic: check cmd_regs before copying in or out (Michal Schmidt) [RHEL-36065]
  - ionic: check before releasing pci regions (Michal Schmidt) [RHEL-36065]
  - ionic: use pci_is_enabled not open code (Michal Schmidt) [RHEL-36065]
  - ionic: implement xdp frags support (Michal Schmidt) [RHEL-36065]
  - ionic: add ndo_xdp_xmit (Michal Schmidt) [RHEL-36065]
  - ionic: Add XDP_REDIRECT support (Michal Schmidt) [RHEL-36065]
  - ionic: Add XDP_TX support (Michal Schmidt) [RHEL-36065]
  - ionic: Add XDP packet headroom (Michal Schmidt) [RHEL-36065]
  - ionic: add initial framework for XDP support (Michal Schmidt) [RHEL-36065]
  - ionic: use dma range APIs (Michal Schmidt) [RHEL-36065]
  - ionic: add helpers for accessing buffer info (Michal Schmidt) [RHEL-36065]
  - ionic: set adminq irq affinity (Michal Schmidt) [RHEL-36065]
  - ionic: minimal work with 0 budget (Michal Schmidt) [RHEL-36065]
  - ionic: fill out pci error handlers (Michal Schmidt) [RHEL-36065]
  - ionic: lif debugfs refresh on reset (Michal Schmidt) [RHEL-36065]
  - ionic: use timer_shutdown_sync (Michal Schmidt) [RHEL-36065]
  - ionic: no fw read when PCI reset failed (Michal Schmidt) [RHEL-36065]
  - ionic: prevent pci disable of already disabled device (Michal Schmidt) [RHEL-36065]
  - ionic: bypass firmware cmds when stuck in reset (Michal Schmidt) [RHEL-36065]
  - ionic: keep filters across FLR (Michal Schmidt) [RHEL-36065]
  - ionic: pass opcode to devcmd_wait (Michal Schmidt) [RHEL-36065]
  - ionic: Re-arrange ionic_intr_info struct for cache perf (Michal Schmidt) [RHEL-36065]
  - ionic: Make the check for Tx HW timestamping more obvious (Michal Schmidt) [RHEL-36065]
  - ionic: Don't check null when calling vfree() (Michal Schmidt) [RHEL-36065]
  - ionic: set ionic ptr before setting up ethtool ops (Michal Schmidt) [RHEL-36065]
  - ionic: Use cached VF attributes (Michal Schmidt) [RHEL-36065]
  - ionic: Fix dim work handling in split interrupt mode (Michal Schmidt) [RHEL-36065]
  - ionic: fix snprintf format length warning (Michal Schmidt) [RHEL-36065]
  - ionic: replace deprecated strncpy with strscpy (Michal Schmidt) [RHEL-36065]
  - ionic: expand the descriptor bufs array (Michal Schmidt) [RHEL-36065]
  - ionic: add a check for max SGs and SKB frags (Michal Schmidt) [RHEL-36065]
  - ionic: count SGs in packet to minimize linearize (Michal Schmidt) [RHEL-36065]
  - ionic: fix 16bit math issue when PAGE_SIZE >= 64KB (Michal Schmidt) [RHEL-36065]
  - ionic: Remove unused declarations (Michal Schmidt) [RHEL-36065]
  - ionic: Add missing err handling for queue reconfig (Michal Schmidt) [RHEL-36065]
  - ionic: add FLR recovery support (Michal Schmidt) [RHEL-36065]
  - ionic: pull out common bits from fw_up (Michal Schmidt) [RHEL-36065]
  - ionic: extract common bits from ionic_probe (Michal Schmidt) [RHEL-36065]
  - ionic: extract common bits from ionic_remove (Michal Schmidt) [RHEL-36065]
  - ionic: remove dead device fail path (Michal Schmidt) [RHEL-36065]
  - ionic: remove WARN_ON to prevent panic_on_warn (Michal Schmidt) [RHEL-36065]
  - ionic: use vmalloc_array and vcalloc (Michal Schmidt) [RHEL-36065]
  - ionic: add support for ethtool extended stat link_down_count (Michal Schmidt) [RHEL-36065]
  - ionic: catch failure from devlink_alloc (Michal Schmidt) [RHEL-36065]
  - ionic: remove noise from ethtool rxnfc error msg (Michal Schmidt) [RHEL-36065]
  - ionic: Don't overwrite the cyclecounter bitmask (Michal Schmidt) [RHEL-36065]
  - ionic: Remove redundant pci_clear_master (Michal Schmidt) [RHEL-36065]
  - ionic: add tx/rx-push support with device Component Memory Buffers (Michal Schmidt) [RHEL-36065]
  - ionic: remove unnecessary void casts (Michal Schmidt) [RHEL-36065]
  - ionic: remove unnecessary indirection (Michal Schmidt) [RHEL-36065]
  - ionic: missed doorbell workaround (Michal Schmidt) [RHEL-36065]
  - ionic: clear up notifyq alloc commentary (Michal Schmidt) [RHEL-36065]
  - ionic: clean interrupt before enabling queue to avoid credit race (Michal Schmidt) [RHEL-36065]
  - net: ionic: Fix error handling in ionic_init_module() (Michal Schmidt) [RHEL-36065]
  - ionic: refactor use of ionic_rx_fill() (Michal Schmidt) [RHEL-36065]
  - ionic: enable tunnel offloads (Michal Schmidt) [RHEL-36065]
  - ionic: new ionic device identity level and VF start control (Michal Schmidt) [RHEL-36065]
  - ionic: only save the user set VF attributes (Michal Schmidt) [RHEL-36065]
  - ionic: replay VF attributes after fw crash recovery (Michal Schmidt) [RHEL-36065]
  - ionic: catch NULL pointer issue on reconfig (Michal Schmidt) [RHEL-36065]
  - ionic: VF initial random MAC address if no assigned mac (Michal Schmidt) [RHEL-36065]
  - ionic: fix up issues with handling EAGAIN on FW cmds (Michal Schmidt) [RHEL-36065]
  - ionic: clear broken state on generation change (Michal Schmidt) [RHEL-36065]
  - net: ionic: fix error check for vlan flags in ionic_set_nic_features() (Michal Schmidt) [RHEL-36065]
  - ionic: convert users of bitmap_foo() to linkmode_foo() (Michal Schmidt) [RHEL-36065]
  - arm64: add dependency between vmlinuz.efi and Image (Lenny Szubowicz) [RHEL-25537]
  - aarch64: enable zboot (Lenny Szubowicz) [RHEL-25537]
  - arm64: efi: enable generic EFI compressed boot (Lenny Szubowicz) [RHEL-25537]
  - kbuild: factor out the common installation code into scripts/install.sh (Lenny Szubowicz) [RHEL-25537]
  - ipv6: fib6_rules: flush route cache when rule is changed (Hangbin Liu) [RHEL-31050]
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-31050 RHEL-33271] {CVE-2024-26852}
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Hangbin Liu) [RHEL-31050]
  - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid (Hangbin Liu) [RHEL-31050]
  - ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() (Hangbin Liu) [RHEL-31050]
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Hangbin Liu) [RHEL-31050]
  - ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (Hangbin Liu) [RHEL-29532 RHEL-31050] {CVE-2024-26631}
  - net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX (Hangbin Liu) [RHEL-31050]
  - ipv6: remove hard coded limitation on ipv6_pinfo (Hangbin Liu) [RHEL-31050]
  - tools headers UAPI: Sync the linux/in.h with the kernel sources (Hangbin Liu) [RHEL-31050]
  - ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Hangbin Liu) [RHEL-31050]
  - net: openvswitch: limit the number of recursions from action sets (Aaron Conole) [RHEL-23575] {CVE-2024-1151}
  - RHEL: enable CONFIG_AMD_ATL (Aristeu Rozanski) [RHEL-26704]
  - EDAC/amd64: Use new AMD Address Translation Library (Aristeu Rozanski) [RHEL-26704]
  - RAS: Introduce AMD Address Translation Library (Aristeu Rozanski) [RHEL-26704]
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21507] {CVE-2024-0340}
  - serial: 8250: Toggle IER bits on only after irq has been set up (Prarit Bhargava) [RHEL-30355]
  - HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID (Tony Camuso) [RHEL-31212]
  - HID: Intel-ish-hid: Ishtp: Fix sensor reads after ACPI S3 suspend (Tony Camuso) [RHEL-31212]
  - HID: intel-ish-hid: ipc: Rework EHL OOB wakeup (Tony Camuso) [RHEL-31212]
  - HID: intel-ish-hid: ishtp-fw-loader: use helper functions for connection (Tony Camuso) [RHEL-31212]
  - HID: intel-ish-hid: ishtp-hid-client: use helper functions for connection (Tony Camuso) [RHEL-31212]
  - HID: Intel-ish-hid: Ishtp: Add helper functions for client connection (Tony Camuso) [RHEL-31212]
  - maple_tree: fix node allocation testing on 32 bit (Nico Pache) [RHEL-5619]
  - bdi: remove enum wb_congested_state (Nico Pache) [RHEL-5619]
  - mm/page_alloc: fix min_free_kbytes calculation regarding ZONE_MOVABLE (Nico Pache) [RHEL-5619]
  - fuse: remove unneeded lock which protecting update of congestion_threshold (Nico Pache) [RHEL-5619]
  - mm: memcg: use larger batches for proactive reclaim (Nico Pache) [RHEL-5619]
  - hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write (Nico Pache) [RHEL-5619]
  - Revert "page cache: fix page_cache_next/prev_miss off by one" (Nico Pache) [RHEL-5619]
  - tmpfs: fix Documentation of noswap and huge mount options (Nico Pache) [RHEL-5619]
  - selftests/memfd: sysctl: fix MEMFD_NOEXEC_SCOPE_NOEXEC_ENFORCED (Nico Pache) [RHEL-5619]
  - mm/memfd: sysctl: fix MEMFD_NOEXEC_SCOPE_NOEXEC_ENFORCED (Nico Pache) [RHEL-5619]
  - kasan: remove hwasan-kernel-mem-intrinsic-prefix=1 for clang-14 (Nico Pache) [RHEL-5619]
  - mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (Nico Pache) [RHEL-5619]
  - objtool: mem*() are not uaccess safe (Nico Pache) [RHEL-5619]
  - mm: page_alloc: unreserve highatomic page blocks before oom (Nico Pache) [RHEL-5619]
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Nico Pache) [RHEL-5619]
  - mm: fix unaccount of memory on vma_link() failure (Nico Pache) [RHEL-5619]
  - vfs: fix readahead(2) on block devices (Nico Pache) [RHEL-5619]
  - kasan: print the original fault addr when access invalid shadow (Nico Pache) [RHEL-5619]
  - hugetlbfs: close race between MADV_DONTNEED and page fault (Nico Pache) [RHEL-5619]
  - hugetlbfs: extend hugetlb_vma_lock to private VMAs (Nico Pache) [RHEL-5619]
  - hugetlbfs: clear resv_map pointer if mmap fails (Nico Pache) [RHEL-5619]
  - mm/page_alloc: use write_seqlock_irqsave() instead write_seqlock() + local_irq_save(). (Nico Pache) [RHEL-5619]
  - writeback: account the number of pages written back (Nico Pache) [RHEL-5619]
  - mm/hugetlb.c: fix a bug within a BUG(): inconsistent pte comparison (Nico Pache) [RHEL-5619]
  - mm: memcontrol: don't throttle dying tasks on memory.high (Nico Pache) [RHEL-5619]
  - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Nico Pache) [RHEL-5619]
  - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Nico Pache) [RHEL-5619]
  - mm/memcontrol: do not tweak node in mem_cgroup_init() (Nico Pache) [RHEL-5619]
  - mm:vmscan: fix inaccurate reclaim during proactive reclaim (Nico Pache) [RHEL-5619]
  - fuse: remove reliance on bdi congestion (Nico Pache) [RHEL-5619]
  - minmax: clamp more efficiently by avoiding extra comparison (Nico Pache) [RHEL-5619]
  - minmax: sanity check constant bounds when clamping (Nico Pache) [RHEL-5619]
  - FAT: use io_schedule_timeout() instead of congestion_wait() (Nico Pache) [RHEL-5619]
  - mm, mmap: fix vma_merge() case 7 with vma_ops->close (Nico Pache) [RHEL-5619]
  - mmap: fix error paths with dup_anon_vma() (Nico Pache) [RHEL-5619]
  - mm: move vma locking out of vma_prepare and dup_anon_vma (Nico Pache) [RHEL-5619]
  - mm: always lock new vma before inserting into vma tree (Nico Pache) [RHEL-5619]
  - mm: lock vma explicitly before doing vm_flags_reset and vm_flags_reset_once (Nico Pache) [RHEL-5619]
  - mm: mark VMA as being written when changing vm_flags (Nico Pache) [RHEL-5619]
  - mm: replace mmap with vma write lock assertions when operating on a vma (Nico Pache) [RHEL-5619]
  - mm: for !CONFIG_PER_VMA_LOCK equate write lock assertion for vma and mmap (Nico Pache) [RHEL-5619]
  - mmap: fix vma_iterator in error path of vma_merge() (Nico Pache) [RHEL-5619]
  - kunit: kasan_test: disable fortify string checker on kmalloc_oob_memset (Nico Pache) [RHEL-5619]
  - x86/mm/pat: fix VM_PAT handling in COW mappings (Nico Pache) [RHEL-5619]
  - mm: cachestat: fix two shmem bugs (Nico Pache) [RHEL-5619]
  - memtest: use {READ,WRITE}_ONCE in memory scanning (Nico Pache) [RHEL-5619]
  - mm: cachestat: fix folio read-after-free in cache walk (Nico Pache) [RHEL-5619]
  - kasan/test: avoid gcc warning for intentional overflow (Nico Pache) [RHEL-5619]
  - mm: memcontrol: clarify swapaccount=0 deprecation warning (Nico Pache) [RHEL-5619]
  - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb (Nico Pache) [RHEL-5619]
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Nico Pache) [RHEL-5619]
  - readahead: avoid multiple marked readahead pages (Nico Pache) [RHEL-5619]
  - mm: fix unmap_mapping_range high bits shift bug (Nico Pache) [RHEL-5619]
  - mm/mglru: respect min_ttl_ms with memcgs (Nico Pache) [RHEL-5619]
  - mm/shmem: fix race in shmem_undo_range w/THP (Nico Pache) [RHEL-5619]
  - mm/rmap: fix misplaced parenthesis of a likely() (Nico Pache) [RHEL-5619]
  - mm: fix oops when filemap_map_pmd() without prealloc_pte (Nico Pache) [RHEL-5619]
  - mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors (Nico Pache) [RHEL-5619]
  - mm: fix for negative counter: nr_file_hugepages (Nico Pache) [RHEL-5619]
  - mm: zswap: fix pool refcount bug around shrink_worker() (Nico Pache) [RHEL-5619]
  - mm/migrate: fix do_pages_move for compat pointers (Nico Pache) [RHEL-5619]
  - mm/page_alloc: correct start page when guard page debug is enabled (Nico Pache) [RHEL-5619]
  - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Nico Pache) [RHEL-5619]
  - mm/cma: use nth_page() in place of direct struct page manipulation (Nico Pache) [RHEL-5619]
  - mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Nico Pache) [RHEL-5619]
  - mm, memcg: reconsider kmem.limit_in_bytes deprecation (Nico Pache) [RHEL-5619]
  - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Nico Pache) [RHEL-5619]
  - mm: page_alloc: fix CMA and HIGHATOMIC landing on the wrong buddy list (Nico Pache) [RHEL-5619]
  - rcu: dump vmalloc memory info safely (Nico Pache) [RHEL-5619]
  - mm/vmalloc: add a safer version of find_vm_area() for debug (Nico Pache) [RHEL-5619]
  - mm: memory-failure: fix unexpected return value in soft_offline_page() (Nico Pache) [RHEL-5619]
  - mm: add a call to flush_cache_vmap() in vmap_pfn() (Nico Pache) [RHEL-5619]
  - mm/gup: handle cont-PTE hugetlb pages correctly in gup_must_unshare() via GUP-fast (Nico Pache) [RHEL-5619]
  - mm: enable page walking API to lock vmas during the walk (Nico Pache) [RHEL-5619]
  - smaps: use vm_normal_page_pmd() instead of follow_trans_huge_pmd() (Nico Pache) [RHEL-5619]
  - mm/gup: reintroduce FOLL_NUMA as FOLL_HONOR_NUMA_FAULT (Nico Pache) [RHEL-5619]
  - mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Nico Pache) [RHEL-5619]
  - memcg: drop kmem.limit_in_bytes (Nico Pache) [RHEL-5619]
  - hugetlb: do not clear hugetlb dtor until allocating vmemmap (Nico Pache) [RHEL-5619]
  - zsmalloc: fix races between modifications of fullness and isolated (Nico Pache) [RHEL-5619]
  - kasan, slub: fix HW_TAGS zeroing with slub_debug (Nico Pache) [RHEL-5619]
  - kasan: fix type cast in memory_is_poisoned_n (Nico Pache) [RHEL-5619]
  - mm: call arch_swap_restore() from do_swap_page() (Nico Pache) [RHEL-5619]
  - shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (Nico Pache) [RHEL-5619]
  - kasan: use internal prototypes matching gcc-13 builtins (Nico Pache) [RHEL-5619]
  - kasan: add kasan_tag_mismatch prototype (Nico Pache) [RHEL-5619]
  - radix tree: remove unused variable (Nico Pache) [RHEL-5619]
  - lib/test_meminit: allocate pages up to order MAX_ORDER (Nico Pache) [RHEL-5619]
  - maple_tree: fix 32 bit mas_next testing (Nico Pache) [RHEL-5619]
  - lz4: fix LZ4_decompress_safe_partial read out of bound (Nico Pache) [RHEL-5619]
  - lib/raid6/test: fix multiple definition linking error (Nico Pache) [RHEL-5619]
  - mm/mmap: Fix error return in do_vmi_align_munmap() (Nico Pache) [RHEL-5619]
  - mm/ksm: support fork/exec for prctl (Nico Pache) [RHEL-5619]
  - mm/uffd: allow vma to merge as much as possible (Nico Pache) [RHEL-5619]
  - mm/uffd: fix vma operation where start addr cuts part of vma (Nico Pache) [RHEL-5619]
  - mm/khugepaged: fix regression in collapse_file() (Nico Pache) [RHEL-5619]
  - mm: remove unused vma_init_lock() (Nico Pache) [RHEL-5619]
  - fs/proc/kcore: reinstate bounce buffer for KCORE_TEXT regions (Nico Pache) [RHEL-5619]
  - mm/mempolicy: Take VMA lock before replacing policy (Nico Pache) [RHEL-5619]
  - mm: lock_vma_under_rcu() must check vma->anon_vma under vma lock (Nico Pache) [RHEL-5619]
  - tcp: Use per-vma locking for receive zerocopy (Nico Pache) [RHEL-5619]
  - mm: fix memory ordering for mm_lock_seq and vm_lock_seq (Nico Pache) [RHEL-5619]
  - mm: lock VMA in dup_anon_vma() before setting ->anon_vma (Nico Pache) [RHEL-5619]
  - mm: don't drop VMA locks in mm_drop_all_locks() (Nico Pache) [RHEL-5619]
  - userfaultfd: fix regression in userfaultfd_unmap_prep() (Nico Pache) [RHEL-5619]
  - mm/gup: disallow FOLL_LONGTERM GUP-fast writing to file-backed mappings (Nico Pache) [RHEL-5619]
  - mm/gup: disallow FOLL_LONGTERM GUP-nonfast writing to file-backed mappings (Nico Pache) [RHEL-5619]
  - mm/mmap: separate writenotify and dirty tracking logic (Nico Pache) [RHEL-5619]
  - mm/mlock: rename mlock_future_check() to mlock_future_ok() (Nico Pache) [RHEL-5619]
  - mm/mmap: refactor mlock_future_check() (Nico Pache) [RHEL-5619]
  - mm: avoid rewalk in mmap_region (Nico Pache) [RHEL-5619]
  - mm: add vma_iter_{next,prev}_range() to vma iterator (Nico Pache) [RHEL-5619]
  - mm: update vma_iter_store() to use MAS_WARN_ON() (Nico Pache) [RHEL-5619]
  - mm: update validate_mm() to use vma iterator (Nico Pache) [RHEL-5619]
  - dmapool: create/destroy cleanup (Nico Pache) [RHEL-5619]
  - mm/mempolicy: fix set_mempolicy_home_node() previous VMA pointer (Nico Pache) [RHEL-5619]
  - mm/vmalloc: fix the unchecked dereference warning in vread_iter() (Nico Pache) [RHEL-5619]
  - selftests/mm: FOLL_LONGTERM need to be updated to 0x100 (Nico Pache) [RHEL-5619]
  - hugetlb: revert use of page_cache_next_miss() (Nico Pache) [RHEL-5619]
  - mm/mlock: fix vma iterator conversion of apply_vma_lock_flags() (Nico Pache) [RHEL-5619]
  - mm: add a NO_INHERIT flag to the PR_SET_MDWE prctl (Nico Pache) [RHEL-5619]
  - mm: make PR_MDWE_REFUSE_EXEC_GAIN an unsigned long (Nico Pache) [RHEL-5619]
  - tools headers UAPI: Sync linux/prctl.h with the kernel sources (Nico Pache) [RHEL-5619]
  - mm: fix memcpy_from_file_folio() integer underflow (Nico Pache) [RHEL-5619]
  - mm: page_alloc: remove stale CMA guard code (Nico Pache) [RHEL-5619]
  - mm/memory-failure: fix hardware poison check in unpoison_memory() (Nico Pache) [RHEL-5619]
  - tools/Makefile: do missed s/vm/mm/ (Nico Pache) [RHEL-5619]
  - mm: memory-failure: avoid false hwpoison page mapped error info (Nico Pache) [RHEL-5619]
  - mm: memory-failure: fix potential unexpected return value from unpoison_memory() (Nico Pache) [RHEL-5619]
  - mm/swapfile: fix wrong swap entry type for hwpoisoned swapcache page (Nico Pache) [RHEL-5619]
  - Docs/admin-guide/mm/zswap: remove zsmalloc's lack of writeback warning (Nico Pache) [RHEL-5619]
  - mm: fix arithmetic for max_prop_frac when setting max_ratio (Nico Pache) [RHEL-5619]
  - mm: fix arithmetic for bdi min_ratio (Nico Pache) [RHEL-5619]
  - mm/gup: add missing gup_must_unshare() check to gup_huge_pgd() (Nico Pache) [RHEL-5619]
  - docs: Fix path paste-o for /sys/kernel/warn_count (Nico Pache) [RHEL-5619]
  - mm: remove unused inline functions from include/linux/mm_inline.h (Nico Pache) [RHEL-5619]
  - mm: add more BUILD_BUG_ONs to gfp_migratetype() (Nico Pache) [RHEL-5619]
  - mm: cleanup is_highmem() (Nico Pache) [RHEL-5619]
  - mm/huge_memory: check pmd_present first in is_huge_zero_pmd (Nico Pache) [RHEL-5619]
  - mm/mmap: drop ARCH_HAS_VM_GET_PAGE_PROT (Nico Pache) [RHEL-5619]
  - s390/mm: enable ARCH_HAS_VM_GET_PAGE_PROT (Nico Pache) [RHEL-5619]
  - memregion: Fix memregion_free() fallback definition (Nico Pache) [RHEL-5619]
  - mm: Add kernel-doc for folio->mlock_count (Nico Pache) [RHEL-5619]
  - nodemask.h: fix compilation error with GCC12 (Nico Pache) [RHEL-5619]
  - mm/swap: fix the obsolete comment for SWP_TYPE_SHIFT (Nico Pache) [RHEL-5619]
  - filemap: Update the folio_lock documentation (Nico Pache) [RHEL-5619]
  - filemap: Remove obsolete comment in lock_page (Nico Pache) [RHEL-5619]
  - kasan: mark KASAN_VMALLOC flags as kasan_vmalloc_flags_t (Nico Pache) [RHEL-5619]
  - mm/vmalloc: fix comments about vmap_area struct (Nico Pache) [RHEL-5619]
  - mm/memcg: retrieve parent memcg from css.parent (Nico Pache) [RHEL-5619]
  - remove congestion tracking framework (Nico Pache) [RHEL-5619]
  - mm: slab: Delete unused SLAB_DEACTIVATED flag (Nico Pache) [RHEL-5619]
  - mm: fix boolreturn.cocci warning (Nico Pache) [RHEL-5619]
  - memblock: Remove #ifdef __KERNEL__ from memblock.h (Nico Pache) [RHEL-5619]
  - mm/slab: Finish struct page to struct slab conversion (Nico Pache) [RHEL-5619]
  - memblock: fix memblock_phys_alloc() section mismatch error (Nico Pache) [RHEL-5619]
  - mm, slab: Remove compiler check in __kmalloc_index (Nico Pache) [RHEL-5619]
  - memblock: improve MEMBLOCK_HOTPLUG documentation (Nico Pache) [RHEL-5619]
  - mm/memory_hotplug: remove stale function declarations (Nico Pache) [RHEL-5619]
  - mm/vmstat: annotate data race for zone->free_area[order].nr_free (Nico Pache) [RHEL-5619]
  - mm/page_alloc.c: avoid allocating highmem pages via alloc_pages_exact[_nid] (Nico Pache) [RHEL-5619]
  - mm: fix data race in PagePoisoned() (Nico Pache) [RHEL-5619]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-453.el9]
changelog:
  - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26577] {CVE-2023-52464}
  - rtc: cmos: Use ACPI alarm for non-Intel x86 systems too (Čestmír Kalina) [RHEL-19606]
  - redhat: configs: move CONFIG_BLK_SED_OPAL to configs/common/generic/ (Ming Lei) [RHEL-18186]
  - platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe (Steve Best) [RHEL-30600] {CVE-2024-26650}
  - x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (Steve Best) [RHEL-31441] {CVE-2024-26674}
  - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29296] {CVE-2023-52560}
  - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (Steve Best) [RHEL-34985] {CVE-2024-26946}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Jose Ignacio Tornos Martinez) [RHEL-31530] {CVE-2023-52638}
  - RDMA/efa: Add shutdown notifier (Kamal Heib) [RHEL-15968]
  - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34973 RHEL-34974] {CVE-2024-26960}
  - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34973 RHEL-34974] {CVE-2024-26960}
  - config: wifi: enable RTL 8822BU device (Jose Ignacio Tornos Martinez) [RHEL-33698]
  - selftests: cgroup: fix unexpected failure on test_memcg_sock (Waiman Long) [RHEL-33709]
  - selftests: cgroup: Add 'malloc' failures checks in test_memcontrol (Waiman Long) [RHEL-33709]
  - selftests: memcg: fix compilation (Waiman Long) [RHEL-33709]
  - x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section (Lenny Szubowicz) [RHEL-31446] {CVE-2024-26678}
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Jose Ignacio Tornos Martinez) [RHEL-31532] {CVE-2023-52637}
  - pstore: inode: Only d_invalidate() is needed (Steve Best) [RHEL-35207] {CVE-2024-27389}
  - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35043] {CVE-2024-27014}
  - iavf: Fix TC config comparison with existing adapter TC config (Michal Schmidt) [RHEL-17485]
  - iavf: drop duplicate iavf_{add|del}_cloud_filter() calls (Michal Schmidt) [RHEL-17485]
  - iavf: adopt skb_network_header_len() more broadly (Michal Schmidt) [RHEL-17485]
  - iavf: adopt skb_network_offset() and similar helpers (Michal Schmidt) [RHEL-17485]
  - iavf: field get conversion (Michal Schmidt) [RHEL-17485]
  - iavf: field prep conversion (Michal Schmidt) [RHEL-17485]
  - iavf: add bit macro includes where needed (Michal Schmidt) [RHEL-17485]
  - iavf: use iavf_schedule_aq_request() helper (Michal Schmidt) [RHEL-17485]
  - iavf: Remove queue tracking fields from iavf_adminq_ring (Michal Schmidt) [RHEL-17485]
  - ubi: Check for too small LEB size in VTBL code (Steve Best) [RHEL-25094] {CVE-2024-25739}
  - cxgb4: Properly lock TX queue for the selftest. (Michal Schmidt) [RHEL-31990 RHEL-9354]
  - net: chelsio: remove unused function calc_tx_descs (Michal Schmidt) [RHEL-9354]
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Michal Schmidt) [RHEL-9354]
  - cxgb4: Annotate struct smt_data with __counted_by (Michal Schmidt) [RHEL-9354]
  - cxgb4: Annotate struct sched_table with __counted_by (Michal Schmidt) [RHEL-9354]
  - cxgb4: Annotate struct cxgb4_tc_u32_table with __counted_by (Michal Schmidt) [RHEL-9354]
  - cxgb4: Annotate struct clip_tbl with __counted_by (Michal Schmidt) [RHEL-9354]
  - chelsio/l2t: Annotate struct l2t_data with __counted_by (Michal Schmidt) [RHEL-9354]
  - net: cxgb4vf: Remove redundant pci_clear_master (Michal Schmidt) [RHEL-9354]
  - cxgb4: fill IPsec state validation failure reason (Michal Schmidt) [RHEL-9354]
  - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Michal Schmidt) [RHEL-9354]
  - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (Michal Schmidt) [RHEL-9354]
  - PCI/ASPM: Restore parent state to parent, child state to child (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Clarify that pcie_aspm=off means leave ASPM untouched (Myron Stowe) [RHEL-33544]
  - MAINTAINERS: Drop Gustavo Pimentel as PCI DWC Maintainer (Myron Stowe) [RHEL-33544]
  - PCI: qcom: Add X1E80100 PCIe support (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom: Document the X1E80100 PCIe Controller (Myron Stowe) [RHEL-33544]
  - PCI: qcom: Enable BDF to SID translation properly (Myron Stowe) [RHEL-33544]
  - PCI: qcom: Disable ASPM L0s for sc8280xp, sa8540p and sa8295p (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom: Do not require 'msi-map-mask' (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom: Allow 'required-opps' (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sa8775p: Move SA8775p to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sc7280: Move SC7280 to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sc8180x: Move SC8180X to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sc8280xp: Move SC8280XP to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sm8350: Move SM8350 to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sm8150: Move SM8150 to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sm8250: Move SM8250 to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sm8450: Move SM8450 to dedicated schema (Myron Stowe) [RHEL-33544]
  - dt-bindings: PCI: qcom,pcie-sm8550: Move SM8550 to dedicated schema (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Add iMX95 Endpoint (EP) support (Myron Stowe) [RHEL-33544]
  - dt-bindings: imx6q-pcie: Add iMX95 pcie endpoint compatible string (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Add epc_features in imx6_pcie_drvdata (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Clean up addr_space retrieval code (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Add iMX95 PCIe Root Complex support (Myron Stowe) [RHEL-33544]
  - dt-bindings: imx6q-pcie: Add imx95 pcie compatible string (Myron Stowe) [RHEL-33544]
  - dt-bindings: imx6q-pcie: Restruct reg and reg-name (Myron Stowe) [RHEL-33544]
  - dt-bindings: imx6q-pcie: Clean up duplicate clocks check (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify switch-case logic by introducing init_phy() callback (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify configure_type() by using mode_off and mode_mask (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify ltssm_enable() by using ltssm_off and ltssm_mask (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify reset handling by using *_FLAG_HAS_*_RESET (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify PHY handling by using IMX6_PCIE_FLAG_HAS_PHYDRV (Myron Stowe) [RHEL-33544]
  - PCI: imx6: Simplify clock handling by using clk_bulk*() function (Myron Stowe) [RHEL-33544]
  - PCI: dwc: endpoint: Fix advertised resizable BAR size (Myron Stowe) [RHEL-33544]
  - PCI: dwc: Strengthen the MSI address allocation logic (Myron Stowe) [RHEL-33544]
  - PCI: cadence: Clear the ARI Capability Next Function Number of the last function (Myron Stowe) [RHEL-33544]
  - PCI: brcmstb: Fix broken brcm_pcie_mdio_write() polling (Myron Stowe) [RHEL-33544]
  - PCI: Make pcie_port_bus_type const (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: Drop only_64bit on reserved BARs (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: Clean up hardware description for BARs (Myron Stowe) [RHEL-33544]
  - PCI: epf-mhi: Add support for SA8775P SoC (Myron Stowe) [RHEL-33544]
  - PCI: epf-mhi: Add "pci_epf_mhi_" prefix to the function names (Myron Stowe) [RHEL-33544]
  - PCI: epf-vntb: Return actual error code during pci_vntb_probe() failure (Myron Stowe) [RHEL-33544]
  - NTB: fix possible name leak in ntb_register_device() (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: pci-epf-vntb: Remove superfluous checks for pci_epf_alloc_space() API (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: pci-epf-test: Remove superfluous checks for pci_epf_alloc_space() API (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: Improve pci_epf_alloc_space() API (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: Refactor pci_epf_alloc_space() API (Myron Stowe) [RHEL-33544]
  - PCI: endpoint: Make pci_epf_bus_type const (Myron Stowe) [RHEL-33544]
  - PCI/sysfs: Demacrofy pci_dev_resource_resize_attr(n) functions (Myron Stowe) [RHEL-33544]
  - PCI: Remove obsolete pci_cleanup_rom() declaration (Myron Stowe) [RHEL-33544]
  - PCI/sysfs: Compile pci-sysfs.c only if CONFIG_SYSFS=y (Myron Stowe) [RHEL-33544]
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() (Myron Stowe) [RHEL-33544]
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-33544]
  - PCI/PM: Allow runtime PM with no PM callbacks at all (Myron Stowe) [RHEL-33544]
  - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" (Myron Stowe) [RHEL-33544]
  - PCI: Disable D3cold on Asus B1400 PCI-NVMe bridge (Myron Stowe) [RHEL-33544]
  - PCI/P2PDMA: Fix a sleeping issue in a RCU read section (Myron Stowe) [RHEL-33544]
  - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken (Myron Stowe) [RHEL-33544]
  - PCI: Place interrupt related code into irq.c (Myron Stowe) [RHEL-33544]
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports (Myron Stowe) [RHEL-33544]
  - PCI/DPC: Ignore Surprise Down error on hot removal (Myron Stowe) [RHEL-33544]
  - PCI/DPC: Print all TLP Prefixes, not just the first (Myron Stowe) [RHEL-33544]
  - PCI: Move devres code from pci.c to devres.c (Myron Stowe) [RHEL-33544]
  - PCI: Move PCI-specific devres code to drivers/pci/ (Myron Stowe) [RHEL-33544]
  - PCI: Move pci_iomap.c to drivers/pci/ (Myron Stowe) [RHEL-33544]
  - pci_iounmap(): Fix MMIO mapping leak (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Update save_state when configuration changes (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Disable L1 before configuring L1 Substates (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Call pci_save_ltr_state() from pci_save_pcie_state() (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Save L1 PM Substates Capability for suspend/resume (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Move pci_save_ltr_state() to aspm.c (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Always build aspm.c (Myron Stowe) [RHEL-33544]
  - PCI/ASPM: Move pci_configure_ltr() to aspm.c (Myron Stowe) [RHEL-33544]
  - PCI/AER: Generalize TLP Header Log reading (Myron Stowe) [RHEL-33544]
  - PCI/AER: Use explicit register size for PCI_ERR_CAP (Myron Stowe) [RHEL-33544]
  - PCI/AER: Block runtime suspend when handling errors (Myron Stowe) [RHEL-33544]
  - PCI/AER: Clean up version indentation in ABI docs (Myron Stowe) [RHEL-33544]
  - PCI/AER: Fix rootport attribute paths in ABI docs (Myron Stowe) [RHEL-33544]
  - PCI: Move pci_clear_and_set_dword() helper to PCI header (Myron Stowe) [RHEL-33544]
  - PCI: Add debug print for device ready delay (Myron Stowe) [RHEL-33544]
  - PCI/AER: Unmask RCEC internal errors to enable RCH downstream port error handling (Myron Stowe) [RHEL-33544]
  - PCI/AER: Forward RCH downstream port-detected errors to the CXL.mem dev handler (Myron Stowe) [RHEL-33544]
  - PCI/AER: Refactor cper_print_aer() for use by CXL driver module (Myron Stowe) [RHEL-33544]
  - NTB: EPF: fix possible memory leak in pci_vntb_probe() (Myron Stowe) [RHEL-33544]
  - devres: show which resource was invalid in __devm_ioremap_resource() (Myron Stowe) [RHEL-33544]
  - devres: remove devm_ioremap_np (Myron Stowe) [RHEL-33544]
  - lib: devres: use numa aware allocation (Myron Stowe) [RHEL-33544]
  - PCI: Allow architecture-specific pci_remap_iospace() (Myron Stowe) [RHEL-33544]
  - pci_iounmap'2: Electric Boogaloo: try to make sense of it all (Myron Stowe) [RHEL-33544]
  - parisc: Declare pci_iounmap() parisc version only when CONFIG_PCI enabled (Myron Stowe) [RHEL-33544]
  - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31824] {CVE-2024-26802}
  - drm/i915/display: Increase number of fast wake precharge pulses (Mika Penttilä) [RHEL-20439]
  - drm/i915/psr: Improve fast and IO wake lines calculation (Mika Penttilä) [RHEL-20439]
  - drm/i915/display: Make intel_dp_aux_fw_sync_len available for PSR code (Mika Penttilä) [RHEL-20439]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-454.el9]
changelog:
  - RAS: enable CONFIG_RAS_FMPM (Aristeu Rozanski) [RHEL-17008]
  - RAS: Avoid build errors when CONFIG_DEBUG_FS=n (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/FMPM: Safely handle saved records of various sizes (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records() (Aristeu Rozanski) [RHEL-17008]
  - Merge tag 'edac_updates_for_v6.9' of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/FMPM: Fix off by one when unwinding on error (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/FMPM: Add debugfs interface to print record entries (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/FMPM: Save SPA values (Aristeu Rozanski) [RHEL-17008]
  - RAS: Export helper to get ras_debugfs_dir (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2() (Aristeu Rozanski) [RHEL-17008]
  - RAS: Introduce a FRU memory poison manager (Aristeu Rozanski) [RHEL-17008]
  - x86/cpu/amd: Provide a separate accessor for Node ID (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/ATL: Add MI300 row retirement support (Aristeu Rozanski) [RHEL-17008]
  - Documentation: Move RAS section to admin-guide (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (Aristeu Rozanski) [RHEL-17008]
  - RAS/AMD/ATL: Add MI300 support (Aristeu Rozanski) [RHEL-17008]
  - Documentation: RAS: Add index and address translation section (Aristeu Rozanski) [RHEL-17008]
  - hwmon: (fam15h_power) Use topology_core_id() (Aristeu Rozanski) [RHEL-17008]
  - scsi: lpfc: Use topology_core_id() (Aristeu Rozanski) [RHEL-17008]
  - cpu/SMT: Make SMT control more robust against enumeration failures (Aristeu Rozanski) [RHEL-17008]
  - dm integrity: fix out-of-range warning (Benjamin Marzinski) [RHEL-34599]
  - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-34599]
  - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-33217] {CVE-2024-26880}
  - dm raid: fix false positive for requeue needed during reshape (Benjamin Marzinski) [RHEL-34599]
  - dm: replace fmode_t with a block-specific type for block open flags (Benjamin Marzinski) [RHEL-34599]
  - dm flakey: use get_random_u8() in corrupt_bio_random (Benjamin Marzinski) [RHEL-34599]
  - block: count 'ios' and 'sectors' when io is done for bio-based device (Benjamin Marzinski) [RHEL-34599]
  - dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter (Benjamin Marzinski) [RHEL-34599]
  - dm integrity: Use alloc_ordered_workqueue() to create ordered workqueues (Benjamin Marzinski) [RHEL-34599]
  - dm: Add support for block PR read keys/reservation (Benjamin Marzinski) [RHEL-34599]
  - dm: Annotate struct dm_bio_prison with __counted_by (Benjamin Marzinski) [RHEL-34599]
  - dm: Annotate struct dm_stat with __counted_by (Benjamin Marzinski) [RHEL-34599]
  - dm: Annotate struct stripe_c with __counted_by (Benjamin Marzinski) [RHEL-34599]
  - dm crypt: Annotate struct crypt_config with __counted_by (Benjamin Marzinski) [RHEL-34599]
  - dm raid: Annotate struct raid_set with __counted_by (Benjamin Marzinski) [RHEL-34599]
  - scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi) [RHEL-21327]
  - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-31226]
  - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-31226]
  - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-31226]
  - redhat/configs: Enable x86 CONFIG_MITIGATION_RFDS (Waiman Long) [RHEL-31226]
  - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-31226]
  - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-31226]
  - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-31226]
  - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-31226]
  - KVM/VMX: Move VERW closer to VMentry for MDS mitigation (Waiman Long) [RHEL-31226]
  - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-31226]
  - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-31226]
  - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-31226]
  - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-31226]
  - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-31226]
  - PM: clk: make pm_clk_add_notifier() take a const pointer (Jerry Snitselaar) [RHEL-28792]
  - driver core: bus: constantify subsys_register() calls (Jerry Snitselaar) [RHEL-28792]
  - driver core: bus: make bus_sort_breadthfirst() take a const pointer (Jerry Snitselaar) [RHEL-28792]
  - vfio/type1: constify bus_type use in vfio_bus_type (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: constify the struct device_type usage (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: make dsa_bus_type const (Jerry Snitselaar) [RHEL-28792]
  - driver core: device.h: make struct bus_type a const * (Jerry Snitselaar) [RHEL-28792]
  - driver core: make the bus_type in struct device_driver constant (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: of: constify of_phandle_args in of_dma_find_controller() (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: ptdma: use consistent DMA masks (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: usb-dmac: Avoid format-overflow warning (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: sh: rz-dmac: Avoid format-overflow warning (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: imx-sdma: fix Excess kernel-doc warnings (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28792 RHEL-28869] {CVE-2023-52492}
  - dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: dmatest: prevent using swiotlb buffer with nobounce parameter (Jerry Snitselaar) [RHEL-28792]
  - iommu/tegra: Use tegra_dev_iommu_get_stream_id() in the remaining places (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: Fix incorrect descriptions for GRPCFG register (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: Protect int_handle field in hw descriptor (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: Remove unused declaration dma_chan_cleanup() (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: qcom: fix Wvoid-pointer-to-enum-cast warning (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: usb-dmac: Annotate struct usb_dmac_desc with __counted_by (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: tegra: Annotate struct tegra_dma_desc with __counted_by (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idxd: rate limit printk in misc interrupt thread (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: tegra20-apb-dma: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: tegra186-gpc-dma: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: sh: usb-dmac: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: sh: rz-dmac: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: sh: rcar-dmac: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: qcom: hidma: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: imx-sdma: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: idma64: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: dw: platform: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-28792]
  - dmaengine:idxd: Use local64_try_cmpxchg in perfmon_pmu_event_update (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: Explicitly include correct DT includes (Jerry Snitselaar) [RHEL-28792]
  - dmaengine: qcom: gpi: Use devm_platform_get_and_ioremap_resource() (Jerry Snitselaar) [RHEL-28792]
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() (Myron Stowe) [RHEL-29481] {CVE-2023-52617}
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Myron Stowe) [RHEL-29481] {CVE-2023-52617}
  - kbuild: factor out the common objtool arguments (Joe Lawrence) [RHEL-2773]
  - kbuild: move vmlinux.o link to scripts/Makefile.vmlinux_o (Joe Lawrence) [RHEL-2773]
  - kbuild: remove redundant cleanups in scripts/link-vmlinux.sh (Joe Lawrence) [RHEL-2773]
  - kbuild: add cmd_and_savecmd macro (Joe Lawrence) [RHEL-2773]
  - kbuild: warn if FORCE is missing for if_changed(_dep,_rule) and filechk (Joe Lawrence) [RHEL-2773]
  - kbuild: macrofy the condition of if_changed and friends (Joe Lawrence) [RHEL-2773]
  - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31646] {CVE-2024-26759}
  - timers: Use already existing function for forwarding timer base (Phil Auld) [RHEL-33787]
  - timers: Split out forward timer base functionality (Phil Auld) [RHEL-33787]
  - timers: Clarify check in forward_timer_base() (Phil Auld) [RHEL-33787]
  - timers: Move store of next event into __next_timer_interrupt() (Phil Auld) [RHEL-33787]
  - timers: Do not IPI for deferrable timers (Phil Auld) [RHEL-33787]
  - tracing/timers: Add tracepoint for tracking timer base is_idle flag (Phil Auld) [RHEL-33787]
  - tracing/timers: Enhance timer_start tracepoint (Phil Auld) [RHEL-33787]
  - tick-sched: Warn when next tick seems to be in the past (Phil Auld) [RHEL-33787]
  - tick/sched: Cleanup confusing variables (Phil Auld) [RHEL-33787]
  - tick-sched: Fix function names in comments (Phil Auld) [RHEL-33787]
  - tick/nohz: Update comments some more (Phil Auld) [RHEL-33787]
  - tick/nohz: Don't shutdown the lowres tick from itself (Phil Auld) [RHEL-33787]
  - tick/nohz: Update obsolete comments (Phil Auld) [RHEL-33787]
  - tick/nohz: Rename the tick handlers to more self-explanatory names (Phil Auld) [RHEL-33787]
  - tick/rcu: Fix false positive "softirq work is pending" messages (Phil Auld) [RHEL-33787]
  - tick/common: Align tick period during sched_timer setup (Phil Auld) [RHEL-33787]
  - selftests/proc: Assert clock_gettime(CLOCK_BOOTTIME) VS /proc/uptime monotonicity (Phil Auld) [RHEL-33787]
  - selftests/proc: Remove idle time monotonicity assertions (Phil Auld) [RHEL-33787]
  - MAINTAINERS: Remove stale email address (Phil Auld) [RHEL-33787]
  - timers/nohz: Remove middle-function __tick_nohz_idle_stop_tick() (Phil Auld) [RHEL-33787]
  - timers/nohz: Add a comment about broken iowait counter update race (Phil Auld) [RHEL-33787]
  - timers/nohz: Protect idle/iowait sleep time under seqcount (Phil Auld) [RHEL-33787]
  - timers/nohz: Only ever update sleeptime from idle exit (Phil Auld) [RHEL-33787]
  - timers/nohz: Restructure and reshuffle struct tick_sched (Phil Auld) [RHEL-33787]
  - tick/common: Align tick period with the HZ tick. (Phil Auld) [RHEL-33787]
  - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem (Phil Auld) [RHEL-33787]
  - timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped (Phil Auld) [RHEL-33787]
  - tracing/timer: Add missing argument documentation of trace points (Phil Auld) [RHEL-33787]
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Maurizio Lombardi) [RHEL-25590]
  - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33188 RHEL-35110] {CVE-2024-26973}
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33188] {CVE-2024-26901}
  - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-35393]
  - md: don't account sync_io if iostats of the disk is disabled (Nigel Croxon) [RHEL-35393]
  - md: Fix overflow in is_mddev_idle (Nigel Croxon) [RHEL-35393]
  - md: add check for sleepers in md_wakeup_thread() (Nigel Croxon) [RHEL-35393]
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-35393]
  - Revert "md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING" (Nigel Croxon) [RHEL-35393]
  - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-35393]
  - platform/x86: ISST: Add Grand Ridge to HPM CPU list (Steve Best) [RHEL-35956]
  - platform/x86: ISST: Add Granite Rapids-D to HPM CPU list (Steve Best) [RHEL-35956]
  - platform/x86: ISST: Allow reading core-power state on HWP disabled systems (Steve Best) [RHEL-35956]
  - platform/x86: ISST: Process read/write blocked feature status (Steve Best) [RHEL-35956]
  - platform/x86/intel/tpmi: Change vsec offset to u64 (Steve Best) [RHEL-35956]
  - platform/x86/intel/tpmi: Move TPMI ID definition (Steve Best) [RHEL-35956]
  - platform/x86/intel/tpmi: Modify external interface to get read/write state (Steve Best) [RHEL-35956]
  - platform/x86/intel/tpmi: Don't create devices for disabled features (Steve Best) [RHEL-35956]
  - platform/x86/intel/tpmi: Add debugfs support for read/write blocked (Steve Best) [RHEL-35956]
  - of: fdt: fix off-by-one error in unflatten_dt_nodes() (Steve Best) [RHEL-35465] {CVE-2022-48672}
  - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36047]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-455.el9]
changelog:
  - Documentation: vmcoreinfo: Fix htmldocs warning (Baoquan He) [RHEL-32199]
  - arm64: Fix dangling references to Documentation/arm64 (Baoquan He) [RHEL-32199]
  - arm64: crash_core: Export MODULES, VMALLOC, and VMEMMAP ranges (Baoquan He) [RHEL-32199]
  - LoongArch: Add ELF-related definitions (Baoquan He) [RHEL-32199]
  - kexec.h: add linux/kexec.h to UAPI compile-test coverage (Baoquan He) [RHEL-32199]
  - crash_dump: remove duplicate include in crash_dump.h (Baoquan He) [RHEL-32199]
  - crash_dump: fix boolreturn.cocci warning (Baoquan He) [RHEL-32199]
  - crash_dump: Make elfcorehdr address/size symbols always visible (Baoquan He) [RHEL-32199]
  - proc/vmcore: fix signedness bug in read_from_oldmem() (Baoquan He) [RHEL-32199]
  - use less confusing names for iov_iter direction initializers (Baoquan He) [RHEL-32199]
  - coredump, vmcore: Set p_align to 4 for PT_NOTE (Baoquan He) [RHEL-32199]
  - copy_oldmem_kernel() - WRITE is "data source", not destination (Baoquan He) [RHEL-32199]
  - vmcoreinfo: warn if we exceed vmcoreinfo data size (Baoquan He) [RHEL-32199]
  - x86/purgatory: Omit use of bin2c (Baoquan He) [RHEL-32199]
  - kexec: support purgatories with .text.hot sections (Baoquan He) [RHEL-32199]
  - kexec: enable kexec_crash_size to support two crash kernel regions (Baoquan He) [RHEL-32199]
  - kexec: add helper __crash_shrink_memory() (Baoquan He) [RHEL-32199]
  - kexec: improve the readability of crash_shrink_memory() (Baoquan He) [RHEL-32199]
  - kexec: clear crashk_res if all its memory has been released (Baoquan He) [RHEL-32199]
  - kexec: delete a useless check in crash_shrink_memory() (Baoquan He) [RHEL-32199]
  - kexec: fix a memory leak in crash_shrink_memory() (Baoquan He) [RHEL-32199]
  - kexec: avoid calculating array size twice (Baoquan He) [RHEL-32199]
  - kexec: introduce sysctl parameters kexec_load_limit_* (Baoquan He) [RHEL-32199]
  - kexec: factor out kexec_load_permitted (Baoquan He) [RHEL-32199]
  - Documentation: sysctl: correct kexec_load_disabled (Baoquan He) [RHEL-32199]
  - ARM: kexec: make machine_crash_nonpanic_core() static (Baoquan He) [RHEL-32199]
  - kexec: replace crash_mem_range with range (Baoquan He) [RHEL-32199]
  - kexec: remove the unneeded result variable (Baoquan He) [RHEL-32199]
  - proc/vmcore: fix potential memory leak in vmcore_init() (Baoquan He) [RHEL-32199]
  - kexec: replace kmap() with kmap_local_page() (Baoquan He) [RHEL-32199]
  - powerpc/powernv: Add a null pointer check in opal_powercap_init() (Mamatha Inamdar) [RHEL-37050] {CVE-2023-52696}
  - scsi: sg: Avoid race in error handling & drop bogus warn (Ewan D. Milne) [RHEL-35659]
  - scsi: sg: Avoid sg device teardown race (Ewan D. Milne) [RHEL-35659]
  - xfs: dax - remove tech preview tag (Bill O'Donnell) [RHEL-35289]
  - percpu-internal/pcpu_chunk: re-layout pcpu_chunk structure to reduce false sharing (Audra Mitchell) [RHEL-15605]
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37264] {CVE-2024-35876}
  - Bluetooth: hci_h5: Add ability to allocate memory for private data (Bastien Nocera) [RHEL-33202 RHEL-33203] {CVE-2024-26890}
  - Bluetooth: btrtl: fix out of bounds memory access (Bastien Nocera) [RHEL-33202 RHEL-33203] {CVE-2024-26890}
  - redhat: pass correct RPM_VMLINUX_H to bpftool install (Ian Wienand)


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-456.el9]
changelog:
  - powerpc: Export mmu_feature_keys[] as non-GPL (Mamatha Inamdar) [RHEL-26102]
  - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (Mamatha Inamdar) [RHEL-38276] {CVE-2023-52740}
  - platform/x86/intel/pmc/lnl: Remove SSRAM support (David Arcari) [RHEL-27144]
  - platform/x86/intel/vsec: Remove nuisance message (David Arcari) [RHEL-27144]
  - powerpc/qspinlock: Fix stale propagated yield_cpu (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: add compile-time tuning adjustments (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: provide accounting and options for sleepy locks (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: allow indefinite spinning on a preempted owner (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: reduce remote node steal spins (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: use spin_begin/end API (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: allow lock stealing in trylock and lock fastpath (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: add ability to prod new queue head CPU (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: allow propagation of yield CPU down the queue (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: allow stealing when head of queue yields (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: implement option to yield to previous node (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: paravirt yield to lock owner (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: store owner CPU in lock word (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: theft prevention to control latency (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: allow new waiters to steal the lock before queueing (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: convert atomic operations to assembly (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: use a half-word store to unlock to avoid larx/stcx. (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: add mcs queueing for contended waiters (Artem Savkov) [RHEL-36278]
  - powerpc/qspinlock: powerpc qspinlock implementation (Artem Savkov) [RHEL-36278]
  - thermal/drivers/tsens: Add suspend to RAM support for tsens (Lucas Karpinski) [RHEL-35736]
  - thermal/qcom/tsens: Drop ops_v0_1 (Lucas Karpinski) [RHEL-35736]
  - thermal: tsens: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-35736]
  - drivers: thermal: tsens: Annotate struct tsens_priv with __counted_by (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Make tsens_xxxx_nvmem static (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/temp-alarm: Use dev_err_probe (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/tsens-v0_1: Add MSM8909 data (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/tsens-v0_1: Add mdm9607 correction offsets (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/tsens-v0_1: Fix mdm9607 slope values (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/tsens: Drop unused legacy structs (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/tsens-v0_1: Add support for MSM8226 (Lucas Karpinski) [RHEL-35736]
  - thermal/core: Use the thermal zone 'devdata' accessor in thermal located drivers (Lucas Karpinski) [RHEL-35736]
  - thermal: Remove core header inclusion from drivers (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom-spmi-adc-tm5: Use asm intead of asm-generic (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Drop single-cell code for msm8976/msm8956 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Drop single-cell code for msm8939 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Drop single-cell code for mdm9607 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Rework legacy calibration data parsers (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Support using nvmem cells for msm8974 calibration (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Support using nvmem cells for calibration data (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: fix slope values for msm8939 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Drop msm8976-specific defines (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Drop unnecessary hw_ids (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom: Fix lock inversion (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom: Fix set_trip_temp() deadlock (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom: Use generic thermal_zone_get_trip() function (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/lmh: Fix irq handler return value (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom: Demote error log of thermal zone register to debug (Lucas Karpinski) [RHEL-35736]
  - thermal: qcom-spmi-adc-tm5: suppress probe-deferral error message (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Add IPQ8074 support (Lucas Karpinski) [RHEL-35736]
  - thermal: qcom: qcom-spmi-adc-tm5: convert to IIO fwnode API (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/spmi-adc-tm5: Remove unnecessary print function dev_err() (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/spmi-adc-tm5: Register thermal zones as hwmon sensors (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/temp-alarm: Register thermal zones as hwmon sensors (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/lmh: Add sc8180x compatible (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/tsens: Add compat string for the qcom,msm8960 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/lmh: Add support for sm8150 (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom/lmh: make QCOM_LMH depends on QCOM_SCM (Lucas Karpinski) [RHEL-35736]
  - New configs in drivers/thermal (Lucas Karpinski) [RHEL-35736]
  - thermal/drivers/qcom: Add support for LMh driver (Lucas Karpinski) [RHEL-35736]
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31690] {CVE-2024-26773}
  - ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt (Pavel Reichl) [RHEL-31686] {CVE-2024-26774}
  - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31614] {CVE-2024-26704}
  - ext4: reduce unnecessary memory allocation in alloc_flex_gd() (Pavel Reichl) [RHEL-30509] {CVE-2023-52622}
  - ext4: avoid online resizing failures due to oversized flex bg (Pavel Reichl) [RHEL-30509] {CVE-2023-52622}
  - ext4: remove unnecessary check from alloc_flex_gd() (Pavel Reichl) [RHEL-30509] {CVE-2023-52622}
  - ext4: unify the type of flexbg_size to unsigned int (Pavel Reichl) [RHEL-30509] {CVE-2023-52622}
  - scsi: ufs: host: Fix kernel-doc warning (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: qcom: Avoid re-init quirk when gears match (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Add support for UFS device version detection (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Check return value of phy_set_mode_ext() (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Set initial PHY gear to max HS gear for HW ver 4 and newer (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Limit HS-G5 Rate-A to hosts with HW version 5 (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Allow the first init start with the maximum supported gear (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: Setup host power mode during init (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: ufs-qcom: No need to set hs_rate after ufshcd_init_host_param() (Joel Slebodnick) [RHEL-35861]
  - scsi: ufs: host: Rename structure ufs_dev_params to ufs_host_params (Joel Slebodnick) [RHEL-35861]
  - mfd: intel-lpss: Introduce QUIRK_CLOCK_DIVIDER_UNITY for XPS 9530 (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Switch to generalized quirk table (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Fix the fractional clock divider flags (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Don't fail probe on success of pci_alloc_irq_vectors() (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Provide Intel LPSS PM ops structure (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Move exported symbols to INTEL_LPSS namespace (David Arcari) [RHEL-20053]
  - lib/vsprintf: declare no_hash_pointers in sprintf.h (David Arcari) [RHEL-20053]
  - lib/vsprintf: split out sprintf() and friends (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Adjust header inclusions (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Use device_get_match_data() (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Revert "Add missing check for platform_get_resource" (David Arcari) [RHEL-20053]
  - mfd: intel-lpss-acpi: Convert to platform remove callback returning void (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Return error code received from the IRQ API (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Use PCI APIs instead of dereferencing (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Remove usage of the deprecated ida_simple_xx() API (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Add missing check for platform_get_resource (David Arcari) [RHEL-20053]
  - mfd: intel-lpss: Hide suspend/resume functions in #ifdef (David Arcari) [RHEL-20053]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-457.el9]
changelog:
  - net: add netdev_lockdep_set_classes() to virtual drivers (Davide Caratti) [RHEL-6066]
  - net: bridge: use netdev_lockdep_set_classes() (Davide Caratti) [RHEL-6066]
  - vlan: use netdev_lockdep_set_classes() (Davide Caratti) [RHEL-6066]
  - net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path (Davide Caratti) [RHEL-6066]
  - net/sched: fix false lockdep warning on qdisc root lock (Davide Caratti) [RHEL-6066]
  - selftests: net: more pmtu.sh fixes (Hangbin Liu) [RHEL-31077]
  - selftests: net: cope with slow env in so_txtime.sh test (Hangbin Liu) [RHEL-31077]
  - selftests: net: cope with slow env in gro.sh test (Hangbin Liu) [RHEL-31077]
  - selftests: forwarding: Fix bridge locked port test flakiness (Hangbin Liu) [RHEL-31077]
  - selftests: forwarding: Fix bridge MDB test flakiness (Hangbin Liu) [RHEL-31077]
  - selftests: forwarding: Fix layer 2 miss test flakiness (Hangbin Liu) [RHEL-31077]
  - selftests: net: let big_tcp test cope with slow env (Hangbin Liu) [RHEL-31077]
  - selftests: net: avoid just another constant wait (Hangbin Liu) [RHEL-31077]
  - selftests: net: fix tcp listener handling in pmtu.sh (Hangbin Liu) [RHEL-31077]
  - selftests: net: don't access /dev/stdout in pmtu.sh (Hangbin Liu) [RHEL-31077]
  - selftests: net: test vxlan pmtu exceptions with tcp (Hangbin Liu) [RHEL-31077]
  - selftests: net: cut more slack for gro fwd tests. (Hangbin Liu) [RHEL-31077]
  - selftests: forwarding: List helper scripts in TEST_FILES Makefile variable (Hangbin Liu) [RHEL-31077]
  - selftests: bonding: Check initial state (Hangbin Liu) [RHEL-31077]
  - selftests: net: fix available tunnels detection (Hangbin Liu) [RHEL-31077]
  - selftests: net: give more time for GRO aggregation (Hangbin Liu) [RHEL-31077]
  - selftests: net: fix rps_default_mask with >32 CPUs (Hangbin Liu) [RHEL-31077]
  - selftests: forwarding: Remove executable bits from lib.sh (Hangbin Liu) [RHEL-31077]
  - selftests: bonding: Change script interpreter (Hangbin Liu) [RHEL-31077]
  - selftests/net: fix grep checking for fib_nexthop_multiprefix (Hangbin Liu) [RHEL-31077]
  - selftests/net: ipsec: fix constant out of range (Hangbin Liu) [RHEL-31077]
  - selftests: net: fcnal-test: check if FIPS mode is enabled (Hangbin Liu) [RHEL-31077]
  - selftests: net: vrf-xfrm-tests: change authentication and encryption algos (Hangbin Liu) [RHEL-31077]
  - selftests: add few test cases for tap driver (Hangbin Liu) [RHEL-31077]
  - net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Hangbin Liu) [RHEL-31077]
  - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-29553]
  - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-29553]
  - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-29553]
  - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-29553]
  - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-29553]
  - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-29553]
  - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-29553]
  - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-29553]
  - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-29553]
  - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-29553]
  - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-29553]
  - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-29553]
  - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-29553]
  - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-29553]
  - powerpc/smp: do not decrement idle task preempt count in CPU offline (Mamatha Inamdar) [RHEL-38427] {CVE-2021-47454}
  - Squashfs: check the inode number is not the invalid value of zero (Abhi Das) [RHEL-35098] {CVE-2024-26982}
  - locktorture: Increase Hamming distance between call_rcu_chain and rcu_call_chains (Waiman Long) [RHEL-35759]
  - torture: add missing dependency on hrtimer.h (Waiman Long) [RHEL-35759]
  - locking/mutex: Document that mutex_unlock() is non-atomic (Waiman Long) [RHEL-35759]
  - cleanup: Add conditional guard support (Waiman Long) [RHEL-35759]
  - locking/osq_lock: Clarify osq_wait_next() (Waiman Long) [RHEL-35759]
  - locking/osq_lock: Clarify osq_wait_next() calling convention (Waiman Long) [RHEL-35759]
  - locking/osq_lock: Move the definition of optimistic_spin_node into osq_lock.c (Waiman Long) [RHEL-35759]
  - locktorture: Check the correct variable for allocation failure (Waiman Long) [RHEL-35759]
  - locktorture: Rename readers_bind/writers_bind to bind_readers/bind_writers (Waiman Long) [RHEL-35759]
  - doc: Catch-up update for locktorture module parameters (Waiman Long) [RHEL-35759]
  - locktorture: Add call_rcu_chains module parameter (Waiman Long) [RHEL-35759]
  - locktorture: Add new module parameters to lock_torture_print_module_parms() (Waiman Long) [RHEL-35759]
  - torture: Print out torture module parameters (Waiman Long) [RHEL-35759]
  - locktorture: Add acq_writer_lim to complain about long acquistion times (Waiman Long) [RHEL-35759]
  - locktorture: Consolidate "if" statements in lock_torture_writer() (Waiman Long) [RHEL-35759]
  - locktorture: Alphabetize torture_param() entries (Waiman Long) [RHEL-35759]
  - rcutorture: Fix stuttering races and other issues (Waiman Long) [RHEL-35759]
  - locktorture: Add readers_bind and writers_bind module parameters (Waiman Long) [RHEL-35759]
  - torture: Move rcutorture_sched_setaffinity() out of rcutorture (Waiman Long) [RHEL-35759]
  - torture: Make torture_hrtimeout_ns() take an hrtimer mode parameter (Waiman Long) [RHEL-35759]
  - torture: Share torture_random_state with torture_shuffle_tasks() (Waiman Long) [RHEL-35759]
  - locking/seqlock: Fix grammar in comment (Waiman Long) [RHEL-35759]
  - locking/seqlock: Propagate 'const' pointers within read-only methods, remove forced type casts (Waiman Long) [RHEL-35759]
  - locking/lockdep: Fix string sizing bug that triggers a format-truncation compiler-warning (Waiman Long) [RHEL-35759]
  - locking/seqlock: Change __seqprop() to return the function pointer (Waiman Long) [RHEL-35759]
  - locking/seqlock: Simplify SEQCOUNT_LOCKNAME() (Waiman Long) [RHEL-35759]
  - locking/seqlock: Fix typo in comment (Waiman Long) [RHEL-35759]
  - locking/debug: Fix debugfs API return value checks to use IS_ERR() (Waiman Long) [RHEL-35759]
  - locking/ww_mutex/test: Make sure we bail out instead of livelock (Waiman Long) [RHEL-35759]
  - locking/ww_mutex/test: Fix potential workqueue corruption (Waiman Long) [RHEL-35759]
  - locking/ww_mutex/test: Use prng instead of rng to avoid hangs at bootup (Waiman Long) [RHEL-35759]
  - locking: export contention tracepoints for bcachefs six locks (Waiman Long) [RHEL-35759]
  - locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() (Waiman Long) [RHEL-35759]
  - lockdep: fix static memory detection even more (Waiman Long) [RHEL-35759]
  - torture: Stop right-shifting torture_random() return values (Waiman Long) [RHEL-35759]
  - torture: Move stutter_wait() timeouts to hrtimers (Waiman Long) [RHEL-35759]
  - torture: Move torture_shuffle() timeouts to hrtimers (Waiman Long) [RHEL-35759]
  - torture: Move torture_onoff() timeouts to hrtimers (Waiman Long) [RHEL-35759]
  - torture: Make torture_hrtimeout_*() use TASK_IDLE (Waiman Long) [RHEL-35759]
  - torture: Add lock_torture writer_fifo module parameter (Waiman Long) [RHEL-35759]
  - torture: Add a kthread-creation callback to _torture_create_kthread() (Waiman Long) [RHEL-35759]
  - torture: Support randomized shuffling for proxy exec testing (Waiman Long) [RHEL-35759]
  - locking: add lockevent_read() prototype (Waiman Long) [RHEL-35759]
  - lockdep: Add lock_set_cmp_fn() annotation (Waiman Long) [RHEL-35759]
  - locktorture: Add long_hold to adjust lock-hold delays (Waiman Long) [RHEL-35759]
  - torture: Fix hang during kthread shutdown phase (Waiman Long) [RHEL-35759]
  - torture: Seed torture_random_state on CPU (Waiman Long) [RHEL-35759]
  - seqlock: drop seqcount_ww_mutex_t (Waiman Long) [RHEL-35759]
  - sections: global data can be in .bss (Waiman Long) [RHEL-35759]
  - bnxt_en: do not map packet buffers twice (Petr Oros) [RHEL-31941]
  - bnxt_en: Fix skb recycling logic in bnxt_deliver_skb() (Petr Oros) [RHEL-31941]
  - bpf, test_run: fix crashes due to XDP frame overwriting/corruption (Petr Oros) [RHEL-31941]
  - bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES (Petr Oros) [RHEL-31941]
  - Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES" (Petr Oros) [RHEL-31941]
  - bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES (Petr Oros) [RHEL-31941]
  - page_pool: fix netlink dump stop/resume (Petr Oros) [RHEL-31941]
  - page_pool: fix typos and punctuation (Petr Oros) [RHEL-31941]
  - page_pool: transition to reference count management after page draining (Petr Oros) [RHEL-31941]
  - net: page_pool: factor out releasing DMA from releasing the page (Petr Oros) [RHEL-31941]
  - net: page_pool: fix general protection fault in page_pool_unlist (Petr Oros) [RHEL-31941]
  - tools: ynl: don't skip regeneration from make targets (Petr Oros) [RHEL-31941]
  - tools: ynl: order building samples after generated code (Petr Oros) [RHEL-31941]
  - tools: ynl: make sure we use local headers for page-pool (Petr Oros) [RHEL-31941]
  - tools: ynl: fix build of the page-pool sample (Petr Oros) [RHEL-31941]
  - tools: ynl: add sample for getting page-pool information (Petr Oros) [RHEL-31941]
  - net: page_pool: mute the periodic warning for visible page pools (Petr Oros) [RHEL-31941]
  - net: page_pool: expose page pool stats via netlink (Petr Oros) [RHEL-31941]
  - net: page_pool: report when page pool was destroyed (Petr Oros) [RHEL-31941]
  - net: page_pool: report amount of memory held by page pools (Petr Oros) [RHEL-31941]
  - net: page_pool: add netlink notifications for state changes (Petr Oros) [RHEL-31941]
  - net: page_pool: implement GET in the netlink API (Petr Oros) [RHEL-31941]
  - net: page_pool: add nlspec for basic access to page pools (Petr Oros) [RHEL-31941]
  - eth: link netdev to page_pools in drivers (Petr Oros) [RHEL-31941]
  - net: page_pool: stash the NAPI ID for easier access (Petr Oros) [RHEL-31941]
  - net: page_pool: record pools per netdev (Petr Oros) [RHEL-31941]
  - net: page_pool: id the page pools (Petr Oros) [RHEL-31941]
  - net: page_pool: factor out uninit (Petr Oros) [RHEL-31941]
  - net: page_pool: avoid touching slow on the fastpath (Petr Oros) [RHEL-31941]
  - net: page_pool: split the page_pool_params into fast and slow (Petr Oros) [RHEL-31941]
  - page_pool: update document about fragment API (Petr Oros) [RHEL-31941]
  - page_pool: introduce page_pool_alloc() API (Petr Oros) [RHEL-31941]
  - page_pool: remove PP_FLAG_PAGE_FRAG (Petr Oros) [RHEL-31941]
  - bnxt_en: Let the page pool manage the DMA mapping (Petr Oros) [RHEL-31941]
  - bnxt_en: Use the unified RX page pool buffers for XDP and non-XDP (Petr Oros) [RHEL-31941]
  - page_pool: unify frag_count handling in page_pool_is_last_frag() (Petr Oros) [RHEL-31941]
  - page_pool: fragment API support for 32-bit arch with 64-bit DMA (Petr Oros) [RHEL-31941]
  - page_pool: fix documentation typos (Petr Oros) [RHEL-31941]
  - docs: net: page_pool: de-duplicate the intro comment (Petr Oros) [RHEL-31941]
  - net: skbuff: always try to recycle PP pages directly when in softirq (Petr Oros) [RHEL-31941]
  - page_pool: add a lockdep check for recycling in hardirq (Petr Oros) [RHEL-31941]
  - net: skbuff: avoid accessing page_pool if !napi_safe when returning page (Petr Oros) [RHEL-31941]
  - page_pool: place frag_* fields in one cacheline (Petr Oros) [RHEL-31941]
  - net: page_pool: merge page_pool_release_page() with page_pool_return_page() (Petr Oros) [RHEL-31941]
  - net: page_pool: hide page_pool_release_page() (Petr Oros) [RHEL-31941]
  - eth: stmmac: let page recycling happen with skbs (Petr Oros) [RHEL-31941]
  - page_pool: add DMA_ATTR_WEAK_ORDERING on all mappings (Petr Oros) [RHEL-31941]
  - xdp: remove unused {__,}xdp_release_frame() (Petr Oros) [RHEL-31941]
  - xdp: recycle Page Pool backed skbs built from XDP frames (Petr Oros) [RHEL-31941]
  - net: page_pool, skbuff: make skb_mark_for_recycle() always available (Petr Oros) [RHEL-31941]
  - selftests/bpf: robustify test_xdp_do_redirect with more payload magics (Petr Oros) [RHEL-31941]
  - Documentation: networking: correct spelling (Petr Oros) [RHEL-31941]
  - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37232] {CVE-2024-35888}
  - tcp: Add memory barrier to tcp_push() (Antoine Tenart) [RHEL-22708]
  - tcp: tcp_wfree() refactoring (Antoine Tenart) [RHEL-22708]
  - powerpc/powernv: Add a null pointer check to scom_debug_init_one() (Mamatha Inamdar) [RHEL-37052] {CVE-2023-52690}
  - KVM: Drop unused @may_block param from gfn_to_pfn_cache_invalidate_start() (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add coverage of EPT-disabled to vmx_dirty_log_test (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Fix and clarify comments about clearing D-bit vs. write-protecting (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Remove function comments above clear_dirty_{gfn_range,pt_masked}() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Disable LBR virtualization if the CPU doesn't support LBR callstacks (Maxim Levitsky) [RHEL-32430]
  - perf/x86/intel: Expose existence of callback support to KVM (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Snapshot LBR capabilities during module initialization (Maxim Levitsky) [RHEL-32430]
  - tools/include: Sync uapi/linux/kvm.h and asm/kvm.h with the kernel sources (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Create a stack frame in __svm_sev_es_vcpu_run() (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Save/restore args across SEV-ES VMRUN via host save area (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Save/restore non-volatile GPRs in SEV-ES VMRUN via host save area (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Wrap __svm_sev_es_vcpu_run() with #ifdef CONFIG_KVM_AMD_SEV (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Clobber RAX instead of RBX when discarding spec_ctrl_intercepted (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Drop 32-bit "support" from __svm_sev_es_vcpu_run() (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Remove a useless zeroing of allocated memory (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Ignore MKTME KeyID bits when intercepting #PF for allow_smaller_maxphyaddr (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: fix max_guest_memory_test with more that 256 vCPUs (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Verify post-RESET value of PERF_GLOBAL_CTRL in PMCs test (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Set enable bits for GP counters in PERF_GLOBAL_CTRL at "RESET" (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Disable support for adaptive PEBS (Maxim Levitsky) [RHEL-32430]
  - KVM: Explicitly disallow activatating a gfn_to_pfn_cache with INVALID_GPA (Maxim Levitsky) [RHEL-32430]
  - KVM: Check validity of offset+length of gfn_to_pfn_cache prior to activation (Maxim Levitsky) [RHEL-32430]
  - KVM: Add helpers to consolidate gfn_to_pfn_cache's page split check (Maxim Levitsky) [RHEL-32430]
  - KVM: SEV: fix compat ABI for KVM_MEMORY_ENCRYPT_OP (Maxim Levitsky) [RHEL-32430]
  - selftests: kvm: remove meaningless assignments in Makefiles (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Check that PV_UNHALT is cleared when HLT exiting is disabled (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Explicitly close guest_memfd files in some gmem tests (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: fix recursive deadlock in timer injection (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: simplify locking and make more self-contained (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: remove WARN_ON_ONCE() with false positives in evtchn delivery (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: inject vCPU upcall vector when local APIC is enabled (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: improve accuracy of Xen timers (Maxim Levitsky) [RHEL-32430]
  - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_* (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a basic SEV-ES smoke test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a basic SEV smoke test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Use the SEV library APIs in the intra-host migration test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add library for creating and interacting with SEV guests (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Allow tagging protected memory in guest page tables (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Explicitly ucall pool from shared memory (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add support for protected vm_vaddr_* allocations (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add support for allocating/managing protected guest memory (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a macro to iterate over a sparsebit range (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Make sparsebit structs const where appropriate (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Extend VM creation's @shape to allow control of VM subtype (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: Use TAP interface in the userspace_msr_exit test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: Use TAP interface in the vmx_pmu_caps test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: Use TAP interface in the fix_hypercall test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: Use TAP interface in the sync_regs test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a macro to define a test with one vcpu (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Move setting a vCPU's entry point to a dedicated API (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: sync_regs_test: Get regs structure before modifying it (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86: sync_regs_test: Use vcpu_run() where appropriate (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Combine "check" and "get" APIs for passthrough MSR lookups (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Rename vmplX_ssp -> plX_ssp (Maxim Levitsky) [RHEL-32430]
  - kvm/x86: allocate the write-tracking metadata on-demand (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: return early if msr_bitmap is not supported (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: fix comment to add LBR to passthrough MSRs (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Explicitly check NMI from guest to reducee false positives (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add CONFIG_64BIT definition for the build (Maxim Levitsky) [RHEL-32430]
  - selftests/kvm: Fix issues with $(SPLIT_TESTS) (Maxim Levitsky) [RHEL-32430]
  - KVM: Get rid of return value from kvm_arch_create_vm_debugfs() (Maxim Levitsky) [RHEL-32430]
  - tools/include: Sync x86 asm/irq_vectors.h with the kernel sources (Maxim Levitsky) [RHEL-32430]
  - x86: irq: unconditionally define KVM interrupt vectors (Maxim Levitsky) [RHEL-32430]
  - KVM: fix kvm_mmu_memory_cache allocation warning (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Free TDP MMU roots while holding mmy_lock for read (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Alloc TDP MMU roots while holding mmu_lock for read (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Check for usable TDP MMU root while holding mmu_lock for read (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Skip invalid TDP MMU roots when write-protecting SPTEs (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Skip invalid roots when zapping leaf SPTEs for GFN range (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Allow passing '-1' for "all" as_id for TDP MMU iterators (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Don't do TLB flush when zappings SPTEs in invalid roots (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Zap invalidated TDP MMU roots at 4KiB granularity (Maxim Levitsky) [RHEL-32430]
  - KVM: Add a comment explaining the directed yield pending interrupt logic (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Clean up directed yield API for "has pending interrupt" (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Rely solely on preempted_in_kernel flag for directed yield (Maxim Levitsky) [RHEL-32430]
  - KVM: Add dedicated arch hook for querying if vCPU was preempted in-kernel (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Sanity check that kvm_has_noapic_vcpu is zero at module_exit() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Move "KVM no-APIC vCPU" key management into local APIC code (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Fully defer to vendor code to decide how to force immediate exit (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2 (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Handle forced exit due to preemption timer in fastpath (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Drop superfluous check on direct MMU vs. WRITE_PF_TO_SP flag (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Drop dedicated logic for direct MMUs in reexecute_instruction() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Don't acquire mmu_lock when using indirect_shadow_pages as a heuristic (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Open code all direct reads to guest DR6 and DR7 (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Make kvm_get_dr() return a value, not use an out parameter (Maxim Levitsky) [RHEL-32430]
  - x86/cpu: Add a VMX flag to enumerate 5-level EPT support to userspace (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test top-down slots event in x86's pmu_counters_test (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: allow vcpu_info content to be 'safely' copied (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: check the need for invalidation under read lock first (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: advertize the KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA capability (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: re-map Xen's vcpu_info using HVA rather than GPA (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: map Xen's shared_info page using HVA rather than GFN (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: allow vcpu_info to be mapped by fixed HVA (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: allow shared_info to be mapped by fixed HVA (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: re-initialize shared_info if guest (32/64-bit) mode is set (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: separate initialization of shared_info cache and content (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: allow a cache to be activated with a fixed (userspace) HVA (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: include page offset in uhva and use it consistently (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: stop open-coding offset_in_page() (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: remove KVM_GUEST_USES_PFN usage (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: add a mark-dirty helper (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: mark guest pages dirty with the pfncache lock held (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: remove unnecessary exports (Maxim Levitsky) [RHEL-32430]
  - KVM: pfncache: Add a map helper function (Maxim Levitsky) [RHEL-32430]
  - treewide: remove CONFIG_HAVE_KVM (Maxim Levitsky) [RHEL-32430]
  - vfio: replace CONFIG_HAVE_KVM with IS_ENABLED(CONFIG_KVM) (Maxim Levitsky) [RHEL-32430]
  - x86: replace CONFIG_HAVE_KVM with IS_ENABLED(CONFIG_KVM) (Maxim Levitsky) [RHEL-32430]
  - MIPS: introduce Kconfig for MIPS VZ (Maxim Levitsky) [RHEL-32430]
  - kvm: move "select IRQ_BYPASS_MANAGER" to common code (Maxim Levitsky) [RHEL-32430]
  - KVM: remove unnecessary #ifdef (Maxim Levitsky) [RHEL-32430]
  - KVM: define __KVM_HAVE_GUEST_DEBUG unconditionally (Maxim Levitsky) [RHEL-32430]
  - kvm: replace __KVM_HAVE_READONLY_MEM with Kconfig symbol (Maxim Levitsky) [RHEL-32430]
  - KVM: arm64: move ARM-specific defines to uapi/asm/kvm.h (Maxim Levitsky) [RHEL-32430]
  - KVM: powerpc: move powerpc-specific structs to uapi/asm/kvm.h (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: move x86-specific structs to uapi/asm/kvm.h (Maxim Levitsky) [RHEL-32430]
  - KVM: remove more traces of device assignment UAPI (Maxim Levitsky) [RHEL-32430]
  - kvm: x86: use a uapi-friendly macro for GENMASK (Maxim Levitsky) [RHEL-32430]
  - kvm: x86: use a uapi-friendly macro for BIT (Maxim Levitsky) [RHEL-32430]
  - uapi: introduce uapi-friendly macros for GENMASK (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: rename push to emulate_push for consistency (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Clean up partially uninitialized integer in emulate_pop() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/emulator: emulate movbe with operand-size prefix (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Report up-to-date exit qualification to userspace (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Return -EINVAL instead of -EBUSY on attempt to re-init SEV/SEV-ES (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Add support for allowing zero SEV ASIDs (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Use unsigned integers when dealing with ASIDs (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Set sev->asid in sev_asid_new() instead of overloading the return (Maxim Levitsky) [RHEL-32430]
  - KVM: Nullify async #PF worker's "apf" pointer as soon as it might be freed (Maxim Levitsky) [RHEL-32430]
  - KVM: Get reference to VM's address space in the async #PF worker (Maxim Levitsky) [RHEL-32430]
  - KVM: Put mm immediately after async #PF worker completes remote gup() (Maxim Levitsky) [RHEL-32430]
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Improve documentation of MSR_KVM_ASYNC_PF_EN (Maxim Levitsky) [RHEL-32430]
  - x86/kvm: Use separate percpu variable to track the enabling of asyncpf (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Fix broken debugregs ABI for 32 bit kernels (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Avoid CPL lookup if PMC enabline for USER and KERNEL is the same (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Check eventsel first when emulating (branch) insns retired (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Expand the comment about what bits are check emulating events (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Snapshot event selectors that KVM emulates in software (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Process only enabled PMCs when emulating events in software (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Add macros to iterate over all PMCs given a bitmap (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Snapshot and clear reprogramming bitmap before reprogramming (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Move pmc_idx => pmc translation helper to common code (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Add common define to capture fixed counters offset (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Zero out PMU metadata on AMD if PMU is disabled (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Use KMEM_CACHE instead of kmem_cache_create() (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Extend PMU counters test to validate RDPMC after WRMSR (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add helpers for safe and safe+forced RDMSR, RDPMC, and XGETBV (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a forced emulation variation of KVM_ASM_SAFE() (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test PMC virtualization with forced emulation (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Move KVM_FEP macro into common library header (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Query module param to detect FEP in MSR filtering test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add helpers to read integer module params (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a helper to query if the PMU module param is enabled (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Expand PMU counters test to verify LLC events (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add functional test for Intel's fixed PMU counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test consistency of CPUID with num of fixed counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test consistency of CPUID with num of gp counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test Intel PMU architectural events on fixed counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test Intel PMU architectural events on gp counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add pmu.h and lib/pmu.c for common PMU assets (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Extend {kvm,this}_pmu_has() to support fixed counters (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Drop the "name" param from KVM_X86_PMU_FEATURE() (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add vcpu_set_cpuid_property() to set properties (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Explicitly check for RDPMC of unsupported Intel PMC types (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Treat "fixed" PMU type in RDPMC as index as a value, not flag (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Disallow "fast" RDPMC for architectural Intel PMUs (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Apply "fast" RDPMC only to Intel PMUs (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Prioritize VMX interception over #GP on RDPMC due to bad index (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Don't ignore bits 31:30 for RDPMC index on AMD (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Get eventsel for fixed counters from perf (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Setup fixed counters' eventsel during PMU initialization (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Remove KVM's enumeration of Intel's architectural encodings (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Allow programming events that match unsupported arch events (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Always treat Fixed counters as available when supported (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Use mutex guards to eliminate __kvm_x86_vendor_init() (Maxim Levitsky) [RHEL-32430]
  - KVM: Harden against unpaired kvm_mmu_notifier_invalidate_range_end() calls (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add a testcase to verify GUEST_MEMFD and READONLY are exclusive (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Create GUEST_MEMFD for relevant invalid flags testcases (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Restrict KVM_SW_PROTECTED_VM to the TDP MMU (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Update KVM_SW_PROTECTED_VM docs to make it clear they're a WIP (Maxim Levitsky) [RHEL-32430]
  - KVM: Make KVM_MEM_GUEST_MEMFD mutually exclusive with KVM_MEM_READONLY (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Mark target gfn of emulated atomic instruction as dirty (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Don't assert on exact number of 4KiB in dirty log split test (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Fix KVM_GET_MSRS stack info leak (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Fix type length error when reading pmu->fixed_ctr_ctrl (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Make gtod_is_based_on_tsc() return 'bool' (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Check irqchip mode before create PIT (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fail tests when open() fails with !ENOENT (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Avoid infinite loop in hyperv_features when invtsc is missing (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Delete superfluous, unused "stage" variable in AMX test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: x86_64: Remove redundant newlines (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Remove redundant newlines (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Reword the NX hugepage test's skip message to be more helpful (Maxim Levitsky) [RHEL-32430]
  - tools headers UAPI: Sync kvm headers with the kernel sources (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: add missing "depends on KVM" (Maxim Levitsky) [RHEL-32430]
  - KVM: fix direction of dependency on MMU notifiers (Maxim Levitsky) [RHEL-32430]
  - KVM: introduce CONFIG_KVM_COMMON (Maxim Levitsky) [RHEL-32430]
  - KVM: clean up directives to compile out irqfds (Maxim Levitsky) [RHEL-32430]
  - KVM: remove deprecated UAPIs (Maxim Levitsky) [RHEL-32430]
  - KVM: remove CONFIG_HAVE_KVM_IRQFD (Maxim Levitsky) [RHEL-32430]
  - KVM: remove CONFIG_HAVE_KVM_EVENTFD (Maxim Levitsky) [RHEL-32430]
  - KVM: guest-memfd: fix unused-function warning (Maxim Levitsky) [RHEL-32430]
  - KVM x86/xen: add an override for PVCLOCK_TSC_STABLE_BIT (Maxim Levitsky) [RHEL-32430]
  - KVM: nSVM: Hide more stuff under CONFIG_KVM_HYPERV/CONFIG_HYPERV (Maxim Levitsky) [RHEL-32430]
  - KVM: nVMX: Hide more stuff under CONFIG_KVM_HYPERV (Maxim Levitsky) [RHEL-32430]
  - KVM: nVMX: Introduce accessor to get Hyper-V eVMCS pointer (Maxim Levitsky) [RHEL-32430]
  - KVM: nVMX: Introduce helpers to check if Hyper-V evmptr12 is valid/set (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Make Hyper-V emulation optional (Maxim Levitsky) [RHEL-32430]
  - KVM: nVMX: Move guest_cpuid_has_evmcs() to hyperv.h (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fix vmxon_pa == vmcs12_pa == -1ull nVMX testcase for !eVMCS (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Make Hyper-V tests explicitly require KVM Hyper-V support (Maxim Levitsky) [RHEL-32430]
  - KVM: nVMX: Split off helper for emulating VMCLEAR on Hyper-V eVMCS (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Introduce helper to handle Hyper-V paravirt TLB flush requests (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Split off hyperv_evmcs.{ch} (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Introduce helper to check if vector is set in Hyper-V SynIC (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Introduce helper to check if auto-EOI is set in Hyper-V SynIC (Maxim Levitsky) [RHEL-32430]
  - KVM: VMX: Split off vmx_onhyperv.{ch} from hyperv.{ch} (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Move Hyper-V partition assist page out of Hyper-V emulation context (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/xen: Remove unneeded xen context from kvm_arch when !CONFIG_KVM_XEN (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fix broken assert messages in Hyper-V features test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fix benign %llx vs. %lx issues in guest asserts (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fix MWAIT error message when guest assertion fails (Maxim Levitsky) [RHEL-32430]
  - KVM: Harden copying of userspace-array against overflow (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Harden copying of userspace-array against overflow (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: fix comment about mmu_unsync_pages_lock (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: always take tdp_mmu_pages_lock (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: remove unnecessary "bool shared" argument from iterators (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: remove unnecessary "bool shared" argument from functions (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Check for leaf SPTE when clearing dirty bit in the TDP MMU (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Fix off-by-1 when splitting huge pages during CLEAR (Maxim Levitsky) [RHEL-32430]
  - KVM: move KVM_CAP_DEVICE_CTRL to the generic check (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Track emulated counter events instead of previous counter (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Update sample period in pmc_write_counter() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Remove manual clearing of fields in kvm_pmu_init() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Stop calling kvm_pmu_reset() at RESET (it's redundant) (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Reset the PMU, i.e. stop counters, before refreshing (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/pmu: Move PMU reset logic to common x86 code (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM,VMX: Use %rip-relative addressing to access kvm_rebooting (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Don't intercept IRET when injecting NMI and vNMI is enabled (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Explicitly require FLUSHBYASID to enable SEV support (Maxim Levitsky) [RHEL-32430]
  - KVM: nSVM: Advertise support for flush-by-ASID (Maxim Levitsky) [RHEL-32430]
  - Revert "nSVM: Check for reserved encodings of TLB_CONTROL in nested VMCB" (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Turn off KVM_WERROR by default for all configs (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Remove x86's so called "MMIO warning" test (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Add logic to detect if ioctl() failed because VM was killed (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Drop the single-underscore ioctl() helpers (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Declare flush_remote_tlbs{_range}() hooks iff HYPERV!=n (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Use KVM-governed feature framework to track "LAM enabled" (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Advertise and enable LAM (user and supervisor) (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Virtualize LAM for user pointer (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Virtualize LAM for supervisor pointer (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Untag addresses for LAM emulation where applicable (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Introduce get_untagged_addr() in kvm_x86_ops and call it in emulator (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Remove kvm_vcpu_is_illegal_gpa() (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Add & use kvm_vcpu_is_legal_cr3() to check CR3's legality (Maxim Levitsky) [RHEL-32430]
  - KVM: x86/mmu: Drop non-PA bits when getting GFN for guest's PGD (Maxim Levitsky) [RHEL-32430]
  - KVM: SEV: Do not intercept accesses to MSR_IA32_XSS for SEV-ES guests (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Fix dynamic generation of configuration names (Maxim Levitsky) [RHEL-32430]
  - KVM: Convert comment into an assertion in kvm_io_bus_register_dev() (Maxim Levitsky) [RHEL-32430]
  - KVM: SVM: Update EFER software model on CR0 trap for SEV-ES (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: add -MP to CFLAGS (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Actually print out magic token in NX hugepages skip message (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Remove 'return void' expression for 'void function' (Maxim Levitsky) [RHEL-32430]
  - Revert "KVM: Prevent module exit until all VMs are freed" (Maxim Levitsky) [RHEL-32430]
  - KVM: Set file_operations.owner appropriately for all such structures (Maxim Levitsky) [RHEL-32430]
  - KVM: x86: Get CPL directly when checking if loaded vCPU is in kernel mode (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Avoid using forced target for generating arm64 headers (Maxim Levitsky) [RHEL-32430]
  - tools headers arm64: Update sysreg.h with kernel sources (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Generate sysreg-defs.h and add to include path (Maxim Levitsky) [RHEL-32430]
  - perf build: Generate arm64's sysreg-defs.h and add to include path (Maxim Levitsky) [RHEL-32430]
  - tools: arm64: Add a Makefile for generating sysreg-defs.h (Maxim Levitsky) [RHEL-32430]
  - KVM: selftests: Test behavior of HWCR, a.k.a. MSR_K7_HWCR (Maxim Levitsky) [RHEL-32430]
  - KVM: Annotate struct kvm_irq_routing_table with __counted_by (Maxim Levitsky) [RHEL-32430]
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37060] {CVE-2023-52686}
  - crypto: qcom-rng - Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-36682]
  - crypto: qcom-rng - Add missing dependency on hw_random (Lucas Karpinski) [RHEL-36682]
  - crypto: qcom-rng - Add hw_random interface support (Lucas Karpinski) [RHEL-36682]
  - crypto: qcom-rng: Make the core clock optional regardless of ACPI presence (Lucas Karpinski) [RHEL-36682]
  - crypto: qcom-rng - Fix qcom_rng_of_match unused warning (Lucas Karpinski) [RHEL-36682]
  - bpf: fix check for attempt to corrupt spilled pointer (Viktor Malik) [RHEL-26569] {CVE-2023-52462}
  - vxlan: Add missing VNI filter counter update in arp_reduce(). (Ivan Vecera) [RHEL-36610]
  - vxlan: Fix racy device stats updates. (Ivan Vecera) [RHEL-36610]
  - selftests: vxlan_mdb: Fix failures with old libnet (Ivan Vecera) [RHEL-36610]
  - selftests: fill in some missing configs for net (Ivan Vecera) [RHEL-36610]
  - vxlan: Cleanup IFLA_VXLAN_PORT_RANGE entry in vxlan_get_size() (Ivan Vecera) [RHEL-36610]
  - mlxsw: spectrum_nve_vxlan: Fix unsupported flag regression (Ivan Vecera) [RHEL-36610]
  - net-next: gro: Fix use of skb_gro_header_slow (Ivan Vecera) [RHEL-36610]
  - vxlan: Add missing entries to vxlan_get_size() (Ivan Vecera) [RHEL-36610]
  - vxlan: vnifilter: Use GFP_KERNEL instead of GFP_ATOMIC (Ivan Vecera) [RHEL-36610]
  - vxlan: Use helper functions to update stats (Ivan Vecera) [RHEL-36610]
  - drivers: vxlan: vnifilter: free percpu vni stats on error path (Ivan Vecera) [RHEL-36610]
  - vxlan: Add support for nexthop ID metadata (Ivan Vecera) [RHEL-36610]
  - ip_tunnels: Add nexthop ID field to ip_tunnel_key (Ivan Vecera) [RHEL-36610]
  - selftests: net: vxlan: Fix selftest regression after changes in iproute2. (Ivan Vecera) [RHEL-36610]
  - selftests: net: vxlan: Add tests for vxlan nolocalbypass option. (Ivan Vecera) [RHEL-36610]
  - net: vxlan: Add nolocalbypass option to vxlan. (Ivan Vecera) [RHEL-36610]
  - selftests: net: Add VXLAN MDB test (Ivan Vecera) [RHEL-36610]
  - vxlan: Enable MDB support (Ivan Vecera) [RHEL-36610]
  - vxlan: Add MDB data path support (Ivan Vecera) [RHEL-36610]
  - vxlan: mdb: Add an internal flag to indicate MDB usage (Ivan Vecera) [RHEL-36610]
  - vxlan: mdb: Add MDB control path support (Ivan Vecera) [RHEL-36610]
  - vxlan: Expose vxlan_xmit_one() (Ivan Vecera) [RHEL-36610]
  - vxlan: Move address helpers to private headers (Ivan Vecera) [RHEL-36610]
  - selftests: Fix failing VXLAN VNI filtering test (Ivan Vecera) [RHEL-36610]
  - vxlan: Fix memory leaks in error path (Ivan Vecera) [RHEL-36610]
  - net: gro: skb_gro_header helper function (Ivan Vecera) [RHEL-36610]
  - net: vxlan: Fix kernel coding style (Ivan Vecera) [RHEL-36610]
  - net: vxlan: Add extack support to vxlan_fdb_delete (Ivan Vecera) [RHEL-36610]
  - selftests/net: add missing tests to Makefile (Ivan Vecera) [RHEL-36610]
  - vxlan: do not feed vxlan_vnifilter_dump_dev with non vxlan devices (Ivan Vecera) [RHEL-36610]
  - drivers: vxlan: fix returnvar.cocci warning (Ivan Vecera) [RHEL-36610]
  - vxlan_core: delete unnecessary condition (Ivan Vecera) [RHEL-36610]
  - drivers: vxlan: vnifilter: add support for stats dumping (Ivan Vecera) [RHEL-36610]
  - drivers: vxlan: vnifilter: per vni stats (Ivan Vecera) [RHEL-36610]
  - selftests: add new tests for vxlan vnifiltering (Ivan Vecera) [RHEL-36610]
  - vxlan: vni filtering support on collect metadata device (Ivan Vecera) [RHEL-36610]
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [RHEL-37511]
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Hangbin Liu) [RHEL-37511]
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [RHEL-37511]
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-37511]
  - ipv6: sr: add missing seg6_local_exit (Hangbin Liu) [RHEL-37511]
  - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string (Ivan Vecera) [RHEL-36218]
  - net: bql: fix building with BQL disabled (Ivan Vecera) [RHEL-36218]
  - net: sched: Remove NET_ACT_IPT from Kconfig (Ivan Vecera) [RHEL-36218]
  - net: fill in MODULE_DESCRIPTION()s for net/sched (Ivan Vecera) [RHEL-36218]
  - net/sched: act_mirred: Don't zero blockid when net device is being deleted (Ivan Vecera) [RHEL-36218]
  - selftests: forwarding: Fix layer 2 miss test flakiness (Ivan Vecera) [RHEL-36218]
  - net: netdevsim: don't try to destroy PHC on VFs (Ivan Vecera) [RHEL-36218]
  - net: sched: track device in tcf_block_get/put_ext() only for clsact binder types (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove ipt action tests (Ivan Vecera) [RHEL-36218]
  - net/sched: simplify tc_action_load_ops parameters (Ivan Vecera) [RHEL-36218]
  - net: sched: move block device tracking into tcf_block_get/put_ext() (Ivan Vecera) [RHEL-36218]
  - net/sched: sch_api: conditional netlink notifications (Ivan Vecera) [RHEL-36218]
  - net/sched: introduce ACT_P_BOUND return code (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_api: complement tcf_tfilter_dump_policy (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove uapi support for CBQ qdisc (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove uapi support for ATM qdisc (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove uapi support for dsmark qdisc (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove uapi support for tcindex classifier (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove uapi support for rsvp classifier (Ivan Vecera) [RHEL-36218]
  - net/sched: Remove CONFIG_NET_ACT_IPT from default configs (Ivan Vecera) [RHEL-36218]
  - net/sched: Retire ipt action (Ivan Vecera) [RHEL-36218]
  - net: sched: em_text: fix possible memory leak in em_text_destroy() (Ivan Vecera) [RHEL-36218]
  - net/sched: act_mirred: Allow mirred to block (Ivan Vecera) [RHEL-36218]
  - net/sched: act_mirred: Add helper function tcf_mirred_replace_dev (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_api: Expose tc block to the datapath (Ivan Vecera) [RHEL-36218]
  - net/sched: Introduce tc block netdev tracking infra (Ivan Vecera) [RHEL-36218]
  - net: sched: Add initial TC error skb drop reasons (Ivan Vecera) [RHEL-36218]
  - packet: add a generic drop reason for receive (Ivan Vecera) [RHEL-36218]
  - net: sched: Make tc-related drop reason more flexible for remaining qdiscs (Ivan Vecera) [RHEL-36218]
  - net: sched: Move drop_reason to struct tc_skb_cb (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: skip idr replace on bound actions (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_api: conditional notification of events (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_api: remove 'unicast' argument from delete notification (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: conditional notification of events (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: don't open code max() (Ivan Vecera) [RHEL-36218]
  - rtnl: add helper to send if skb is not null (Ivan Vecera) [RHEL-36218]
  - rtnl: add helper to check if a notification is needed (Ivan Vecera) [RHEL-36218]
  - rtnl: add helper to check if rtnl group has listeners (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: use tcf_act_for_each_action in tcf_idr_insert_many (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: stop loop over ops array on NULL in tcf_action_init (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: avoid non-contiguous action array (Ivan Vecera) [RHEL-36218]
  - net/sched: act_api: use tcf_act_for_each_action (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove filters/tests.json (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: rename concurrency.json to flower.json (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove spurious './' from Makefile (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove spurious nsPlugin usage (Ivan Vecera) [RHEL-36218]
  - net/sched: cbs: Use units.h instead of the copy of a definition (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove unused import (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: cleanup on Ctrl-C (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: prefix iproute2 functions with "ipr2" (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove unnecessary time.sleep (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: remove buildebpf plugin (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: report number of workers in use (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: timeout on unbounded loops (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: leverage -all in suite ns teardown (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: use netns delete from pyroute2 (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: move back to per test ns setup (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: cap parallel tdc to 4 cores (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: add hashtable tests for u32 (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_u32: replace int refcounts with proper refcounts (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: use parallel tdc in kselftests (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: preload all modules in kselftests (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: rework namespaces and devices setup (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: drop '-N' argument from nsPlugin (Ivan Vecera) [RHEL-36218]
  - net: don't dump stack on queue timeout (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: better validate TCA_FQ_WEIGHTS and TCA_FQ_PRIOMAP (Ivan Vecera) [RHEL-36218]
  - net, sched: Fix SKB_NOT_DROPPED_YET splat under debug config (Ivan Vecera) [RHEL-36218]
  - net: sched: Fill in missing MODULE_DESCRIPTION for qdiscs (Ivan Vecera) [RHEL-36218]
  - net: sched: Fill in missing MODULE_DESCRIPTION for classifiers (Ivan Vecera) [RHEL-36218]
  - net: sched: Fill in MODULE_DESCRIPTION for act_gate (Ivan Vecera) [RHEL-36218]
  - sched: act_ct: switch to per-action label counting (Ivan Vecera) [RHEL-36218]
  - net: sched: sch_qfq: Use non-work-conserving warning handler (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: fastpath needs to take care of sk->sk_pacing_status (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: fix off-by-one error in fq_dequeue() (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: add test for 'rt' upgrade on hfsc (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: move auxiliary scripts to a dedicated folder (Ivan Vecera) [RHEL-36218]
  - selftests: tc-testing: add missing Kconfig options to 'config' (Ivan Vecera) [RHEL-36218]
  - net, sched: Add tcf_set_drop_reason for {__,}tcf_classify (Ivan Vecera) [RHEL-36218]
  - net, sched: Make tc-related drop reason more flexible (Ivan Vecera) [RHEL-36218]
  - net: sched: cls_u32: Fix allocation size in u32_init() (Ivan Vecera) [RHEL-36218]
  - netem: Annotate struct disttable with __counted_by (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: add TCA_FQ_WEIGHTS attribute (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: add 3 bands and WRR scheduling (Ivan Vecera) [RHEL-36218]
  - net_sched: export pfifo_fast prio2band[] (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: remove q->ktime_cache (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: always garbage collect (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: add fast path for mostly idle qdisc (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: change how @inactive is tracked (Ivan Vecera) [RHEL-36218]
  - net_sched: sch_fq: struct sched_data reorg (Ivan Vecera) [RHEL-36218]
  - net_sched: constify qdisc_priv() (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: update tdc documentation (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: implement tdc parallel test run (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: update test definitions for local resources (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: localize test resources (Ivan Vecera) [RHEL-36218]
  - net/sched: cls_route: make netlink errors meaningful (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: cls_u32: add tests for classid (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: cls_route: add tests for classid (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: cls_fw: add tests for classid (Ivan Vecera) [RHEL-36218]
  - net/ipv6: SKB symmetric hash should incorporate transport ports (Ivan Vecera) [RHEL-36218]
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Ivan Vecera) [RHEL-36218]
  - net/sched: fq_pie: avoid stalls in fq_pie_timer() (Ivan Vecera) [RHEL-36218]
  - netem: use seeded PRNG for correlated loss events (Ivan Vecera) [RHEL-36218]
  - netem: use a seeded PRNG for generating random losses (Ivan Vecera) [RHEL-36218]
  - netem: add prng attribute to netem_sched_data (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: verify that a qdisc can be grafted onto a taprio class (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: test that taprio can only be attached as root (Ivan Vecera) [RHEL-36218]
  - selftests/tc-testing: add ptp_mock Kconfig dependency (Ivan Vecera) [RHEL-36218]
  - net: netdevsim: mimic tc-taprio offload (Ivan Vecera) [RHEL-36218]
  - net: netdevsim: use mock PHC driver (Ivan Vecera) [RHEL-36218]
  - redhat/configs: Add CONFIG_PTP_1588_CLOCK_MOCK (Ivan Vecera) [RHEL-36218]
  - net: ptp: create a mock-up PTP Hardware Clock driver (Ivan Vecera) [RHEL-36218]
  - net/sched: taprio: dump class stats for the actual q->qdiscs[] (Ivan Vecera) [RHEL-36218]
  - net/sched: taprio: delete misleading comment about preallocating child qdiscs (Ivan Vecera) [RHEL-36218]
  - net/sched: taprio: try again to report q->qdiscs[] to qdisc_leaf() (Ivan Vecera) [RHEL-36218]
  - net/sched: taprio: keep child Qdisc refcount elevated at 2 in offload mode (Ivan Vecera) [RHEL-36218]
  - net/sched: taprio: don't access q->qdiscs[] in unoffloaded mode during attach() (Ivan Vecera) [RHEL-36218]
  - net: pkt_cls: Remove unused inline helpers (Ivan Vecera) [RHEL-36218]
  - tc: flower: Enable offload support IPSEC SPI field. (Ivan Vecera) [RHEL-36218]
  - tc: flower: support for SPI (Ivan Vecera) [RHEL-36218]
  - net: flow_dissector: Add IPSEC dissector (Ivan Vecera) [RHEL-36218]
  - net/sched: sch_qfq: warn about class in use while deleting (Ivan Vecera) [RHEL-36218]
  - net/sched: sch_drr: warn about class in use while deleting (Ivan Vecera) [RHEL-36218]
  - net/sched: wrap open coded Qdics class filter counter (Ivan Vecera) [RHEL-36218]
  - overflow: Allow mixed type arguments (Ivan Vecera) [RHEL-36218]
  - compiler.h: drop fallback overflow checkers (Ivan Vecera) [RHEL-36218]
  - dpll: fix dpll_pin_on_pin_register() for multiple parent pins (Petr Oros) [RHEL-32098]
  - dpll: indent DPLL option type by a tab (Petr Oros) [RHEL-32098]
  - dpll: fix dpll_xa_ref_*_del() for multiple registrations (Petr Oros) [RHEL-32098]
  - dpll: spec: use proper enum for pin capabilities attribute (Petr Oros) [RHEL-32098]
  - dpll: move all dpll<>netdev helpers to dpll code (Petr Oros) [RHEL-32098]
  - dpll: fix build failure due to rcu_dereference_check() on unknown type (Petr Oros) [RHEL-32098]
  - dpll: rely on rcu for netdev_dpll_pin() (Petr Oros) [RHEL-32098]
  - dpll: fix possible deadlock during netlink dump operation (Petr Oros) [RHEL-32098]
  - dpll: check that pin is registered in __dpll_pin_unregister() (Petr Oros) [RHEL-32098]
  - dpll: move xa_erase() call in to match dpll_pin_alloc() error path order (Petr Oros) [RHEL-32098]
  - dpll: expose fractional frequency offset value to user (Petr Oros) [RHEL-32098]
  - dpll: allocate pin ids in cycle (Petr Oros) [RHEL-32098]
  - dpll: remove leftover mode_supported() op and use mode_get() instead (Petr Oros) [RHEL-32098]
  - Documentation: dpll: wrap DPLL_CMD_PIN_GET output in a code block (Petr Oros) [RHEL-32098]
  - Documentation: dpll: Fix code blocks (Petr Oros) [RHEL-32098]
  - MAINTAINERS: adjust header file entry in DPLL SUBSYSTEM (Petr Oros) [RHEL-32098]
  - netdev: Remove unneeded semicolon (Petr Oros) [RHEL-32098]
  - ipvs: Fix checksumming on GSO of SCTP packets (Xin Long) [RHEL-36204]
  - net: sctp: fix skb leak in sctp_inq_free() (Xin Long) [RHEL-36204]
  - sctp: preserve const qualifier in sctp_sk() (Xin Long) [RHEL-36204]
  - sctp: Simplify the allocation of slab caches (Xin Long) [RHEL-36204]
  - sctp: fix busy polling (Xin Long) [RHEL-36204]
  - sctp: support MSG_ERRQUEUE flag in recvmsg() (Xin Long) [RHEL-36204]
  - arm64: dts: qcom: sa8775p: Make watchdog bark interrupt edge triggered (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8775p: enable safety IRQ (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: Add sa8775p compatible (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: Add compatible for MSM8226 (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: Add compatible for SM6375 (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: Add QCM2290 (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: qcom-tsens: Correct unit address (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: correct name of remoteproc_nsp0 firmware (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: add per-sensor cells for msm8974 (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: support per-sensor calibration cells (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: add msm8956 compat (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: Document i2c busses (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: Fix some i2c pinctrl settings (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: add i2c nodes (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: add missing spi nodes (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: add missing i2c nodes (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: rename qup0_i2c4 to i2c4 (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: rename qup2_i2c5 to i2c21 (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: rename qup2_uart17 to uart17 (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: disable pcie2a node (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: enable pcie2a node (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sa8540p-ride: enable rtc (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: Pad addresses to 8 hex digits (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: drop bogus clock-controller property (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: correct SPMI bus address cells (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: align PSCI domain names with DT schema (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: add gpr node (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: fix USB-DP PHY nodes (Steve Dunnagan) [RHEL-33072]
  - arm64: dts: qcom: sc8280xp: fix primary USB-DP PHY reset (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: qcom-tsens: narrow interrupts for SC8280XP, SM6350 and SM8450 (Steve Dunnagan) [RHEL-33072]
  - dt-bindings: thermal: tsens: Add sc8280xp compatible (Steve Dunnagan) [RHEL-33072]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-2
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "Staat der Nederlanden Root CA - G2"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-90.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-4
changelog:
  - Add Pull request #18
  - Replaces kerberos with gssapi
  - Replaces requests_kerberos with requests_gssapi


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-5
changelog:
  - Add Pull request #19
  - Remove Pull request #17 as it is not accepted
  - Review comment #13, #14 addressed


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Miroslav Lichvar <mlichvar@redhat.com> 4.0-0.8.pre3
changelog:
  - update to 4.0-pre3
  - switch to sourcedir directive for loading servers from DHCP
  - add NetworkManager dispatcher script to save servers from DHCP when
    dhclient is not installed (Robert Fairley)
  - drop old migration code from scriptlet
  - move default paths in /var/run to /run


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-1
changelog:
  - update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
    RHEL-12411)
  - add chronyd-restricted service (RHEL-9972)


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Packit <hello@packit.dev> - 312-1
changelog:
  - Accounts: support lastlog2 and make the page faster
  - Storage: Various Anaconda mode fixes
  - Fix package build if cockpit-bridge package is installed


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Kamil Dudka <kdudka@redhat.com> - 8.32-22
changelog:
  - weaken the dependency on glibc-doc to reduce minimal installations
  - drop the last use of ncurses no longer needed (#1830318)
  - utimens: fix confusing arg type in internal func


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
changelog:
  - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
  - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
  - fips-mode-setup: catch more inconsistencies, clarify --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
changelog:
  - DEFAULT: drop DNSSEC SHA-1 exception
  - openssh: add support for sntrup761x25519-sha512@openssh.com


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git94f0e2c
changelog:
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - FIPS: enforce EMS in FIPS mode
  - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode
  - nss: implement EMS enforcement in FIPS mode (disabled in ELN)
  - openssl: implement EMS enforcement in FIPS mode
  - gnutls: implement EMS enforcement in FIPS mode (disabled in ELN)
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230920-1.git8dcf74d
changelog:
  - OSPP subpolicy: tighten beyond reason for OSPP 4.3
  - fips-mode-setup: more thorough --disable, still unsupported


author: Alexander Sosedkin <asosedkin@redhat.com> - 20231016-1.git77ceb0b
changelog:
  - openssl: fix SHA1 and NO-ENFORCE-EMS interaction
  - bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx


author: Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
changelog:
  - turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
  - fips-mode-setup: increase chroot-friendliness (RHEL-11350)
  - fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)


author: Clemens Lang <cllang@redhat.com> - 20231109-1.git0ceff7f
changelog:
  - Restore support for scoped ssh_etm directives (RHEL-15925)
  - Print matches in syntax deprecation warnings (RHEL-15925)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
changelog:
  - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240202-1.git283706d
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - fips-finish-install: Create/remove /etc/system-fips on ostree systems
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.gitb1c706d
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: use newly introduced SKIP_LINTING=1
  - packaging: drop stale workarounds


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - 2217177 - Delays printing to lpd when reserved ports are exhausted
  - 2217284 - The command "cancel -x <job>" does not remove job files
  - 2217954 - Enlarge backlog queue for listen() in cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-2
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Restore --reportformat option in pvdisplay.
  - Improve multipath backlist option handling.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-3
changelog:
  - Fix effect of setting multipath_component_detection to 0.
  - Fix lvmdbusd using lvm shell with editline.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-11
changelog:
  - Add 0059-multipathd-Add-missing-ctype-include.patch
  - Add 0060-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119896


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-13
changelog:
  - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2125357


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-14
changelog:
  - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133999
  - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133989
  - Resolves: bz #2133989, #2133999


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-15
changelog:
  - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2141860
  - Add 0068-libmultipath-cleanup-remove_feature.patch
  - Add 0069-libmultipath-cleanup-add_feature.patch
  - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2033080
  - Resolves: bz #2033080, #2141860


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-17
changelog:
  - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2145225


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-21
changelog:
  - Add 0085-multipathd-make-pr-registration-consistent.patch
  - Add 0086-libmultipath-make-prflag-an-enum.patch
  - Add 0087-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0088-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164869


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-22
changelog:
  - Add 0089-RH-Add-mpathcleanup.patch
    * Fixes RHEL-782
  - Add 0090-RH-make-listing-return-an-error-if-the-config-file-i.patch
  - Install mpathcleanup
    * Fixes RHEL-781
  - Resolves: #781, #782


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-23
changelog:
  - Add 0091-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Fixes RHEL-6678 (Add support in multipathd for NVMe to listen for FPIN-Li
      events and mark effected paths as marginal)
  - Add 0092-multipath-tools-add-HPE-Alletra-9000-NVMe-to-hardwar.patch
    * Fixes RHEL-1830 (Changes to Arcus NVMeoFC multipath.conf settings for RHEL
      9.x to be included in kernel by default)
  - Resolves: RHEL-6678
  - Resolves: RHEL-1830


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-24
changelog:
  - Add 0093-RH-multipath-add-mpathcleanup-man-page.patch
    * Fixes RHEL-1266 ("There is no man page for mpathcleanup")
  - Resolves: RHEL-1266


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-25
changelog:
  - Add 0094-libmultipath-Add-max_retries-config-option.patch
    * Fixes RHEL-1729 ("Allow multipathd to set the max_retries of the
      scsi_device for paths")
  - Add 0095-libmutipath-Retain-device-size-if-sysfs_get_size-fai.patch
  - Add 0096-multipathd-check-and-update-all-paths-when-in-cli_re.patch
  - Add 0097-multipathd-move-post-reloading-commands-into-resize_.patch
  - Add 0098-multipathd-move-resize_map-to-multipathd-main.c.patch
  - Add 0099-multipathd-Add-auto_resize-config-option.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986
  - Resolves: RHEL-1729


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-2
changelog:
  - Allow non-zero values in unused index block entries.
  - Fix boundary check on the bitset for cached blocks.
  - Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
  - Fix thin_repair checking keys on a node with a zero key.
  - Enhance error message in cache_check suggesting fix when applicable.


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.14.0-1
changelog:
  - Update to 4.14.0
  - Add doc related to --destdir and --downloadonly options (RhBug:2100811)
  - Fix broken dependencies error reporting (RhBug:2088422)
  - Add support for group upgrade rollback (RhBug:2016070)
  - Expose plugin unload method to API (RhBug:2047251)
  - Fix upgrade from file to noarch pkg (RhBug:2006018)
  - Allow passing plugin parameters with dashes in names (RhBug:1980712)
  - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421)
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)
  - doc: Describe how gpg keys are stored for `repo_ggpcheck` (RhBug:2020678)
  - bash-completion: use sqlite cache when available


author: Nicola Sella <nsella@redhat.com> - 4.14.0-3
changelog:
  - Move system-upgrade plugin to core (RhBug:2131288)
  - offline-upgrade: add support for security filters (RhBug:1939975,2139326)
  - Fix plugins unit tests + unload plugins upon their deletion


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-6
changelog:
  - Add reboot option to DNF Automatic (RhBug:2124793)
  - Omit src RPMs from check-update (RhBug:2151910,2203069)
  - automatic: Fix online detection with proxy (RhBug:2022440,2189851)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-8
changelog:
  - Return an error when transaction fails (RhBug:2170093,2212262)
  - Document symbols in `dnf history list` output (RhBug:2172067,2218113)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-9
changelog:
  - Fix japanese translations (RHEL-11345)
  - Fix substitution in kay-value-pair list in add_new_repo (RHEL-6396)
  - base: Add obsoleters of only latest versions (RHEL-6304)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-11
changelog:
  - Fix handling an installation reason of install-only packages on autoremove
    (RHEL-15902)
  - Fix dnf-automatic service to apply security updates the same way as dnf tool
    (RHEL-21874)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-12
changelog:
  - Fix reporting nothing-to-do for "dnf remove --duplicates" (RHEL-6424)
  - Fix reporting nothing-to-do for "dnf remove --oldinstallonly" (RHEL-6424)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.12.0-1
changelog:
  - Allow destdir option with modulesync command
  - Add documentation for query api flags (RhBug:2035577)
  - Fix swap command to work with local rpm files correctly (RhBug:2036434)
  - Fix regression in verifying signatures using rpmkeys
  - Fix decompression of groups.xml (RhBug:2030255)
  - Fix history undo on a Reason Change (RhBug:2010259,2053014)
  - Remove /usr/bin from sys.path to avoid accidentally importing garbage
  - Fix python3.11 build: remove deprecated, update traceback regex
  - fix dnf mark error when history sqlite missing
  - [doc] clarify effect of --enablerepo and --disablerepo options (RhBug:2031414)
  - [doc] default values for module_obsoletes and module_stream_switch (RhBug: 2051846)
  - dnf.conf: hint users where to find more info about defaults and other options
  - Fix unittests that relied on checksum being at the end of solvfiles
  - completion: remove unnecessary echo
  - Fix remove when no repos are enabled (RhBug:2064341)
  - Add loongarch support for dnf
  - Add spaces between words to fix typos (RhBug:2077296)
  - [doc] Improve "proxy" configuration option documentation (RhBug:2072332)
  - Fix download errors handling in non-english locales (RhBug:2024527)


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - [config-manager] Update documentation (RhBug:2075366)
  - [builddep] Warning when using macros with source rpms (RhBug:2077820)
  - [repomanage] Use modules only from repo they are handling (RhBug:2072441)
  - Skip all non rpm transaction items for transaction_action plugins (rhbug:2023652)
  - feat(repomanage): Add new option --oldonly


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Dave Dykstra <dwd@fedoraproject.org> - 2.9.9-7
changelog:
  - Update the Requires: fuse-common >= version to 3.4.2-4 because
    fuse-common > 3.4.2-3 is insufficient to force the new version


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-67
changelog:
  - grub2-mkconfig: dont overwrite BLS cmdline if BLSCFG is true
  - Resolves: #2203203
  - Resolves: #2212320
  - Resolves: #2221543


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-68
changelog:
  - Revert previous patch as it breaks install
  - Related: #2203203
  - Related: #2212320
  - Related: #2221543


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-69
changelog:
  - grub2-mkconfig: dont overwrite BLS cmdline if BLSCFG is true
  - This is an updated version of the 2.06-67 patch
  - Resolves: #2203203
  - Resolves: #2212320
  - Resolves: #2221543


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-73
changelog:
  - search command: add flag to only search root dev
  - Resolves: #RHEL-20526
  - Resolves: #CVE-2023-4001


author: Tom Stellard <tstellar@redhat.com> - 8.40-50
changelog:
  - Use make_build macro instead of plain make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Jan Macku <jamacku@redhat.com> - 10.05-1
changelog:
  - service: Prevent variables from globbing
  - init.d/functions: Make usage msgs more clear
  - network-scripts: Use net_log() instead of logger
  - Allow updating rfkill switch status while in readonly root mode
  - Add info into specfile about readonly-root deprecation
  - Allow updating mlocate.db while in readonly root mode
  - rc.d/functions: replace grep's --quiet with -q
  - Add warning to warn user when ETHTOOL_OPTS is set and ethtool binary is missing - Olav Vitters
  - Fix spacing in Makefile
  - Add optional 'dev' keyword


author: Jan Macku <jamacku@redhat.com> - 10.07-1
changelog:
  - doc: Fix "Duplicated string found in the file."
  - doc: Documents RES_OPTIONS option
  - doc: Documents ifcfg option LINKSTATUS
  - ci: use up to date keywords and fix some warnings
  - network: fix set_link_up()
  - network: add option to keep the link down
  - Rework of shell ci
  - Translations update from Weblate


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Eugene Syromiatnikov <esyr@redhat.com> - 23.11-2
changelog:
  - Revert commit "lib: update detection of non-architectural L3CAT" that removed
    L3CAT detection support on Tiger Lake and Erkhart Lake CPUs (RHEL-22729)


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Phil Sutter <psutter@redhat.com> - 1.8.7-19
changelog:
  - Build iptables-services on C9S only
  - Use systemd_ordering in nft-services, too
  - Drop compat package, nft-services serves well for that purpose
  - Make legacy unconditionally provide iptables, it's not built on RHEL


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Tao Liu <ltao@redhat.com> - 2:1.8.0-5
changelog:
  - Document migrateval. Resolves: rhbz2071959
  - Confine irqbalance to systems where it is useful. Resolves: rhbz2063930
  - Wrong EnvironmentFile in irqbalance.service. Resolves: rhbz2058509


author: Tao Liu <ltao@redhat.com> - 2:1.9.2-3
changelog:
  - Use misc/irqbalance.env as irqbalance.sysconfig
  - Use new rpm macros: autosetup and make_build
  - Use irqbalance-1.9.0-environment-file
  - Remove _hardened_build
  - Remove triggerun -- irqbalance < 2:0.56-3
  - Use SPDX licence


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Herton R. Krzesinski <herton@redhat.com> - 20221214-129
changelog:
  - Update to upstream 20221012 release (rhbz 2153045, 2047484).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: updated navi10 firmware for amd-5.4
  - amdgpu: updated yellow carp firmware for amd-5.4
  - amdgpu: updated raven2 firmware for amd-5.4
  - amdgpu: updated raven firmware for amd-5.4
  - amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  - amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  - amdgpu: updated vega20 firmware for amd-5.4
  - amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  - amdgpu: add VCN 4.0.0 firmware for amd-5.4
  - amdgpu: add SMU 13.0.0 firmware for amd-5.4
  - amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  - amdgpu: add PSP 13.0.0 firmware for amd-5.4
  - amdgpu: add GC 11.0.0 firmware for amd-5.4
  - amdgpu: add DCN 3.2.0 firmware for amd-5.4
  - amdgpu: updated vega10 firmware for amd-5.4
  - amdgpu: updated beige goby firmware for amd-5.4
  - amdgpu: updated dimgrey cavefish firmware for amd-5.4
  - amdgpu: updated vangogh firmware for amd-5.4
  - amdgpu: updated picasso firmware for amd-5.4
  - amdgpu: updated navy flounder firmware for amd-5.4
  - amdgpu: updated green sardine firmware for amd-5.4
  - amdgpu: updated sienna cichlid firmware for amd-5.4
  - amdgpu: updated arcture firmware for amd-5.4
  - amdgpu: updated navi14 firmware for amd-5.4
  - amdgpu: updated renoir firmware for amd-5.4
  - amdgpu: updated navi12 firmware for amd-5.4
  - amdgpu: updated aldebaran firmware for amd-5.4
  - sr150 : Add NXP SR150 UWB firmware
  - brcm: add/update firmware files for brcmfmac driver
  - rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098
  - amdgpu: update sdma_5.2.7 firmware
  - QCA: Add Bluetooth firmware for WCN785x This adds required Bluetooth firmware
    files for QCA WCN785x. The image version is 2.0.0-00515.
  - linux-firmware: update firmware for MT7916
  - linux-firmware: update firmware for MT7915
  - i915: Add DMC v2.08 for DG2
  - amdgpu: update green sardine DMCUB firmware
  - i915: Add DMC v2.10 for MTL
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - amdgpu: update DMCUB firmware for DCN 3.1.6
  - rtl_bt: Update RTL8822C BT UART firmware to 0xFFB8_ABD6
  - rtl_bt: Update RTL8822C BT USB firmware to 0xFFB8_ABD3
  - WHENCE: mrvl: prestera: Add WHENCE entries for newly updated 4.1 FW images
  - mrvl: prestera: Update Marvell Prestera Switchdev FW to v4.1
  - iwlwifi: add new FWs from core74_pv-60 release
  - qcom: drop split a530_zap firmware file
  - qcom/vpu-1.0: drop split firmware in favour of the mbn file
  - qcom/venus-4.2: drop split firmware in favour of the mbn file
  - qcom/venus-4.2: replace split firmware with the mbn file
  - qcom/venus-1.8: replace split firmware with the mbn file
  - linux-firmware: Add firmware for Cirrus CS35L41 on new ASUS Laptop
  - iwlwifi: add new PNVM binaries from core74-44 release
  - iwlwifi: add new FWs from core69-81 release
  - qcom: update venus firmware files for VPU-2.0
  - qcom: remove split SC7280 venus firmware images
  - qcom: update venus firmware file for v5.4
  - qcom: replace split SC7180 venus firmware images with symlink
  - rtw89: 8852b: update fw to v0.27.32.1
  - rtlwifi: update firmware for rtl8192eu to v35.7
  - rtlwifi: Add firmware v4.0 for RTL8188FU
  - i915: Add HuC 7.10.3 for DG2
  - cnm: update chips&media wave521c firmware.
  - brcm: add symlink for Pi Zero 2 W NVRAM file
  - linux-firmware: Add firmware for Cirrus CS35L41 on ASUS Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Laptops
  - rtw89: 8852b: add initial fw v0.27.32.0
  - iwlwifi: add new FWs from core72-129 release
  - iwlwifi: update 9000-family firmwares to core72-129


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-130
changelog:
  - Update to upstream 20230210 release (rhbz 2047488).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Update AMD cpu microcode
  - brcm: revert firmware files for Cypress devices
  - brcm: restore previous firmware file for BCM4329 device
  - rtw88: 8822c: Update normal firmware to v9.9.14
  - i915: Add DMC v2.11 for MTL
  - linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  - linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps
  - i915: Add DMC v2.18 for ADLP
  - amdgpu: Add VCN 4.0.2 firmware
  - amdgpu: Add PSP 13.0.4 firmware
  - amdgpu: Add SDMA 6.0.1 fimware
  - amdgpu: Add GC 11.0.1 firmware
  - amdgpu: Add DCN 3.1.4 firmware
  - iwlwifi: remove old intermediate 5.15+ firmwares
  - iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  - iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  - iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  - iwlwifi: remove old unsupported older than 4.14 LTS
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update vangogh firmware
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - brcm: add configuration files for CyberTan WC121
  - qcom: add firmware files for Adreno A200
  - rtw89: 8852c: update fw to v0.27.56.10
  - QCA: Add Bluetooth firmware for QCA2066
  - amdgpu: add VCN4.0.4 firmware from amd-5.4
  - amdgpu: add SMU13.0.7 firmware from amd-5.4
  - amdgpu: add SDMA6.0.2 firmware from amd-5.4
  - amdgpu: add PSP13.0.7 firmware from amd-5.4
  - amdgpu: add GC11.0.2 firmware from amd-5.4
  - amdgpu: add DCN3.2.1 firmware from amd-5.4
  - amdgpu: update VCN4.0.0 firmware from amd-5.4
  - amdgpu: update SMU13.0.0 firmware from amd-5.4
  - amdgpu: update SDMA6.0.0 firmware from amd-5.4
  - amdgpu: update PSP13.0.0 firmware from amd-5.4
  - amdgpu: update GC11.0.0 firmware from amd-5.4
  - iwlwifi: add new FWs from core76-35 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  - iwlwifi: add new FWs from core75-47 release
  - iwlwifi: update 9000-family firmwares to core75-47
  - amdgpu: update renoir DMCUB firmware
  - amdgpu: Update renoir PSP firmware
  - amdgpu: update copyright date for LICENSE.amdgpu
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - cxgb4: Update firmware to revision 1.27.1.0
  - qca: Update firmware files for BT chip WCN6750
  - rtw89: 8852c: update fw to v0.27.56.9
  - rtw89: 8852c: update fw to v0.27.56.8


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-131
changelog:
  - Update amdgpu/gc_11_0_1_rlc.bin file from the following linux-firmware commit:
    commit c0a0bc2 - amdgpu: Update GC 11.0.1 firmware (rhbz 2047462).


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-132
changelog:
  - Update ath10k/ath11k firmware (rhbz 2169013):
    ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
    ath11k: WCN6855 hw2.0: update board-2.bin
    ath11k: WCN6750 hw1.0: update board-2.bin
    ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
    ath11k: IPQ5018 hw1.0: add board-2.bin
    ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
    ath10k: WCN3990 hw1.0: update board-2.bin
  - Ship new firmware files using patch/git apply instead of as rpm sources.


author: Herton R. Krzesinski <herton@redhat.com> - 20230310-133
changelog:
  - Removed notices and check about the liquidio/lio_23xx_vsw.bin file: starting
    with 20230310 release of linux-firmware, it was removed upstream as well.
  - Update to upstream 20230310 release (rhbz 2029566).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qat: update licence text
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  - rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  - WHENCE: remove duplicate File entries
  - WHENCE: remove trailing white space
  - linux-firmware: add fw for qat_4xxx
  - Fix symlinks for Intel firmware
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7921 WiFi device
  - iwlwifi: update core69 and core72 firmwares for Ty device
  - rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  - brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  - brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  - brcm: Add nvram for the Advantech MICA-071 tablet
  - rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  - rtl_bt: Add firmware and config files for RTL8821CS
  - rtw89: 8852b: update fw to v0.29.29.0
  - rtw89: 8852b: update fw to v0.29.26.0
  - liquidio: remove lio_23xx_vsw.bin
  - intel: avs: Add AudioDSP base firmware for CNL-based platforms
  - intel: avs: Add AudioDSP base firmware for APL-based platforms
  - intel: avs: Add AudioDSP base firmware for SKL-based platforms
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ5018 hw1.0: add board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - cnm: update chips&media wave521c firmware.
  - amdgpu: Update GC 11.0.1 firmware
  - intel: catpt: Add AudioDSP base firmware for BDW platforms


author: Jan Stancek <jstancek@redhat.com> - 20230404-134
changelog:
  - Update to upstream 20230404 release (rhbz 2183603).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: Amphion: Update vpu firmware
  - iwlwifi: add new FWs from core78-32 release
  - iwlwifi: update 9000-family firmwares to core78-32
  - amdgpu: Update SDMA 6.0.1 firmware
  - amdgpu: Add PSP 13.0.11 firmware
  - amdgpu: Update PSP 13.0.4 firmware
  - amdgpu: Update GC 11.0.1 firmware
  - amdgpu: Update DCN 3.1.4 firmware
  - amdgpu: Add GC 11.0.4 firmware
  - rtw88: 8822c: Update normal firmware to v9.9.15
  - linux-firmware: Update firmware file for Intel Bluetooth AX101
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: add firmware files for NXP BT chipsets
  - rtw89: 8852b: update format-1 fw to v0.29.29.0
  - rtw89: 8852b: add format-1 fw v0.29.26.0
  - rtw89: 8852b: rollback firmware to v0.27.32.1
  - i915: Update MTL DMC to v2.12
  - i915: Update ADLP DMC to v2.19
  - mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
  - iwlwifi: update core69 and core72 firmwares for So device


author: Jan Stancek <jstancek@redhat.com> - 20230525-135
changelog:
  - Update to upstream 20230525 release (rhbz 2178579).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: update yellow carp firmware for amd.5.5 release
  - amdgpu: update navi14 firmware for amd.5.5 release
  - amdgpu: update navi12 firmware for amd.5.5 release
  - amdgpu: update vega20 firmware for amd.5.5 release
  - amdgpu: update vega12 firmware for amd.5.5 release
  - amdgpu: update navi10 firmware for amd.5.5 release
  - amdgpu: update vega10 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  - amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  - amdgpu: update 13.0.8 firmware for amd.5.5 release
  - amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  - amdgpu: update vangogh firmware for amd.5.5 release
  - amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  - amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  - amdgpu: update renoir firmware for amd.5.5 release
  - amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  - amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  - amdgpu: update green sardine firmware for amd.5.5 release
  - amdgpu: update beige goby firmware for amd.5.5 release
  - amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  - amdgpu: update arcturus firmware for amd.5.5 release
  - amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  - amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  - amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  - amdgpu: update navy flounder firmware for amd.5.5 release
  - amdgpu: update sienna cichlid firmware for amd.5.5 release
  - amdgpu: update aldebaran firmware for amd.5.5 release
  - amdgpu: DMCUB updates for various AMDGPU asics
  - ice: update ice DDP comms package to 1.3.40.0
  - rtlwifi: Add firmware v6.0 for RTL8192FU
  - rtlwifi: Update firmware for RTL8188EU to v28.0
  - cirrus: Add firmware and tuning files for HP G10 series laptops
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - WHENCE: comment out duplicate MediaTek firmware
  - i915: Add GuC v70.6.6 for MTL
  - amdgpu: update DCN 3.1.6 DMCUB firmware
  - rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  - rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  - rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
  - Group all Conexant V4L devices together
  - rtl_nic: update firmware of USB devices
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: update firmware for MT7981
  - qca: Update firmware files for BT chip WCN6750
  - mt76xx: Move the old Mediatek WiFi firmware to mediatek
  - rtl_bt: Add firmware and config files for RTL8851B
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: add firmware for MT7981
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update qat firmware
  - linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops
  - linux-firmware: update firmware for MT7916
  - rtw89: 8852b: update format-1 fw to v0.29.29.1
  - rtw89: 8852c: update fw to v0.27.56.13
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update board-2.bin
  - ath10k: QCA99X0 hw2.0: update board-2.bin
  - ath10k: QCA9984 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin


author: Jan Stancek <jstancek@redhat.com> - 20230625-137
changelog:
  - Fix PSR-SU issues with kernel 6.2 or later (rhbz 2218668)
  - Update to upstream 20230625 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Makefile, copy-firmware: support xz/zstd compressed firmware
  - copy-firmware: silence the last shellcheck warnings
  - copy-firmware: drop obsolete backticks, quote
  - copy-firmware: tweak sed invocation
  - copy-firmware: quote deskdir and dirname
  - check_whence: error if symlinks are in-tree
  - check_whence: error if File: is actually a link
  - check_whence: strip quotation marks
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  - ice: update ice DDP wireless_edge package to 1.3.10.0
  - amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
  - amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  - fix broken cirrus firmware symlinks
  - qcom: Update the microcode files for Adreno a630 GPUs.
  - qcom: sdm845: rename the modem firmware
  - qcom: sdm845: update remoteproc firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  - rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  - amdgpu: DMCUB updates for various AMDGPU asics
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - i915: Add HuC v8.5.0 for MTL
  - mediatek: Update mt8195 SCP firmware to support hevc
  - qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  - cirrus: Add firmware for new Asus ROG Laptops
  - brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  - amdgpu: Update GC 11.0.1 and 11.0.4
  - rtw89: 8851b: add firmware v0.29.41.0
  - ice: update ice DDP comms package to 1.3.40.0
  - cxgb4: Update firmware to revision 1.27.3.0


author: Jan Stancek <jstancek@redhat.com> - 20230726-138
changelog:
  - Navi32 dGPU firmware (rhbz 2047486)
  - CVE-2023-20593 linux-firmware: hw: amd: Cross-Process Information Leak (rhbz 2227156)
  - Update to upstream 20230726 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - copy-firmware: Fix linking directories when using compression
  - copy-firmware: Fix test: unexpected operator
  - qcom: sc8280xp: LENOVO: remove directory sym link
  - qcom: sc8280xp: LENOVO: Remove execute bits
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: add initial SMU 13.0.10 firmware
  - amdgpu: add initial SDMA 6.0.3 firmware
  - amdgpu: add initial PSP 13.0.10 firmware
  - amdgpu: add initial GC 11.0.3 firmware
  - linux-firmware: Update AMD fam17h cpu microcode
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update green sardine VCN firmware
  - amdgpu: update renoir VCN firmware
  - amdgpu: update raven VCN firmware
  - amdgpu: update raven2 VCN firmware
  - amdgpu: update Picasso VCN firmware
  - amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  - Updated NXP SR150 UWB firmware
  - wfx: update to firmware 3.16.1
  - mediatek: Update mt8195 SCP firmware to support 10bit mode
  - i915: update DG2 GuC to v70.8.0
  - i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  - cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models
  - Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - Fix qcom ASoC tglp WHENCE entry
  - check_whence: Check link targets are valid
  - iwlwifi: add new FWs from core80-39 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  - qcom: Add Audio firmware for SC8280XP X13s


author: Jan Stancek <jstancek@redhat.com> - 20230814-139
changelog:
  - CVE-2023-20569 linux-firmware: hw amd: Return Address Predictor velunerability leading to information disclosure (rhbz 2230418)
  - [AMDCLIENT 9.3 Bug] Linux FW update to fix multi monitor behind TBT3 dock & random flickers (rhbz 2227845)
  - amdgpu: partially revert firmware for GC 11.0.0 and GC 11.0.2
  - linux-firmware: Update AMD cpu microcode
  - Merge branch 'for-upstream' of http://git.chelsio.net/pub/git/linux-firmware
  - rtl_bt: Add firmware v2 file for RTL8852C
  - Revert "rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225"
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cxgb4: Update firmware to revision 1.27.4.0
  - Merge branch 'rb3-update' of https://github.com/lumag/linux-firmware
  - Merge https://github.com/pkshih/linux-firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2012.1012
  - linux-firmware: Add URL for latest FW binaries for NXP BT chipsets
  - rtw89: 8851b: update firmware to v0.29.41.1
  - qcom: sdm845: add RB3 sensors DSP firmware
  - amdgpu: Update DMCUB for DCN314 & Yellow Carp
  - Merge branch 'dmc-adlp_2.20-mtl_2.13' of git://anongit.freedesktop.org/drm/drm-firmware
  - Merge branch 'for-upstream' of https://github.com/CirrusLogic/linux-firmware
  - ice: add LAG-supporting DDP package
  - i915: Update MTL DMC to v2.13
  - i915: Update ADLP DMC to v2.20
  - cirrus: Add CS35L41 firmware for Dell Oasis Models


author: Scott Weaver <scweaver@redhat.com> - 20230926-140
changelog:
  - [Intel 9.4 FEAT] [SPR][EMR] QAT firmware update available (rhbz 2238636)
  - [AMDCLIENT 9.4 Feature] Sub-Feature: AMD PMF Linux FW (rhbz 2227340)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amd_pmf: Add initial PMF TA for Smart PC Solution Builder
  - linux-firmware: Update FW files for MRVL PCIE 8997 chipsets
  - rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
  - iwlwifi: add new FWs from core81-65 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release
  - linux-firmware: amd-ucode: Add note on fam19h warnings
  - i915: update MTL HuC to version 8.5.4
  - amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs
  - linux-firmware: add link to sc8280xp audioreach firmware
  - qcom: sm8250: add RB5 sensors DSP firmware
  - qcom: Update vpu-1.0 firmware
  - qcom: sm8250: update DSP firmware
  - qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210
  - qcom: add venus firmware files for v6.0
  - qcom: add firmware for QRB4210 platforms
  - qcom: add firmware for QCM2290 platforms
  - qcom: add GPU firmware for QCM2290 / QRB2210
  - ath10k/WCN3990: move wlanmdsp to qcom/sdm845
  - WHENCE: Don't compress qcom json files
  - WHENCE: amd-ucode: Use new RawFile keyword
  - Create symlinks for all firmware that is duplicate using rdfind
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605
  - Fix carl9170fw shell scripts for shellcheck errors
  - i915: Update MTL DMC to v2.16
  - copy-firmware: Introduce 'RawFile' keyword
  - copy-firmware: Support additional compressor options
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: update firmware for qat_4xxx devices
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: update DMCUB to 0.0.181.0 for various AMDGPU ASICs
  - rtw89: 8852b: update fw to v0.29.29.3
  - rtw89: 8851b: update fw to v0.29.41.2
  - i915: add GSC 102.0.0.1655 for MTL
  - amdgpu: DMCUB updates for various AMDGPU asics
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cirrus: Add CS35L41 firmware for HP G11 models


author: Scott Weaver <scweaver@redhat.com> - 20231030-141
changelog:
  - CVE-2022-46329 linux-firmware: hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (RHEL-14264)
  - amd-ucode early loading broken [RHEL-15387]
  - Update to upstream 20231030 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX101
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - rtl_nic: update firmware of RTL8156B
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update SMU 13.0.0 firmware
  - linux-firmware: add Amlogic bluetooth firmware
  - i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
  - iwlwifi: add a missing FW from core80-39 release
  - WHENCE: add symlink for BananaPi M64
  - linux-firmware: Add firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - i915: Update MTL DMC to v2.17
  - amdgpu: update raven firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.7 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.8 firmware from 5.7 branch
  - amdgpu: update GC 10.3.7 firmware from 5.7 branch
  - amdgpu: update DCN 3.1.6 firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.6 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.5 firmware from 5.7 branch
  - amdgpu: update GC 10.3.6 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.0 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.0 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.0 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.0 firmware from 5.7 branch
  - amdgpu: update GC 11.0.0 firmware from 5.7 branch
  - amdgpu: update vega20 firmware from 5.7 branch
  - amdgpu: update beige goby firmware from 5.7 branch
  - amdgpu: update vega12 firmware from 5.7 branch
  - amdgpu: update vega10 firmware from 5.7 branch
  - amdgpu: update dimgrey cavefish firmware from 5.7 branch
  - amdgpu: update picasso firmware from 5.7 branch
  - amdgpu: update navy flounder firmware from 5.7 branch
  - amdgpu: update vangogh firmware from 5.7 branch
  - amdgpu: update green sardine firmware from 5.7 branch
  - amdgpu: update sienna cichlid firmware from 5.7 branch
  - amdgpu: update PSP 13.0.11 firmware from 5.7 branch
  - amdgpu: update GC 11.0.4 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.1 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.4 firmware from 5.7 branch
  - amdgpu: update GC 11.0.1 firmware from 5.7 branch
  - amdgpu: update navi14 firmware from 5.7 branch
  - amdgpu: update renoir firmware from 5.7 branch
  - amdgpu: update navi12 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.4 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.7 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.2 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.7 firmware from 5.7 branch
  - amdgpu: update GC 11.0.2 firmware from 5.7 branch
  - amdgpu: update yellow carp firmware from 5.7 branch
  - amdgpu: update navi10 firmware from 5.7 branch
  - amdgpu: update raven2 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.10 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.10 firmware from 5.7 branch
  - amdgpu: update GC 11.0.3 firmware from 5.7 branch
  - amdgpu: update aldebaran firmware from 5.7 branch
  - iwlwifi: add FWs for new GL and MA device types with multiple RF modules


author: Scott Weaver <scweaver@redhat.com> - 20240109-142
changelog:
  - [DELL 9.3 BUG]System resume failed from suspend and auto reboot with WCN6856 (1/10 fail rate) (RHEL-4431)
  - [DELL 9.3 FEAT] - linux-firmware: Include to support QCA WIFI-7 WCN7850 Module: wifi firmware support (RHEL-10212)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: update firmware for w1u_uart
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - linux-firmware: add firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: add firmware for MT7925
  - ASoC: tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ASoC: tas2781: Add dsp firmware for different laptops
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.36
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00309-
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2023 Models
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 QRD
  - qcom: Add Audio firmware for SM8550 QRD
  - wfx: update to firmware 3.17
  - wfx: fix broken firmware
  - linux-firmware: Update AMD cpu microcode
  - cxgb4: Update firmware to revision 1.27.5.0
  - linux-firmware: add firmware for en8811h 2.5G ethernet phy
  - s5p-mfc: Add MFC v12 Firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
  - ice: update ice DDP wireless_edge package to 1.3.13.0
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
  - qcom: update qrb4210 firmware
  - qcom: update qcm2290 firmware
  - qcom: update qcm2290/qrb4210 WiFi firmware file
  - qcom: update Venus firmware file for v6.0
  - powervr: add firmware for Imagination Technologies AXE-1-16M GPU
  - ice: update ice DDP comms package to 1.3.45.0
  - ice: update ice DDP package to 1.3.35.0
  - mediatek: Remove an unused packed library
  - mediatek: Sync shared memory structure changes
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
  - i915: Update MTL DMC to v2.19
  - iwlwifi: fix for the new FWs from core83-55 release
  - iwlwifi: add new FWs from core83-55 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP G11 Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on 2024 ASUS Zenbook Laptops
  - linux-firmware: add firmware for mt7988 internal 2.5G ethernet phy
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - nvidia: add GSP-RM version 535.113.01 firmware images
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qca: add bluetooth firmware for WCN3988
  - linux-firmware: ixp4xx: Add the IXP4xx firmware
  - rtw89: 8852b: update fw to v0.29.29.5
  - rtw89: 8852b: update fw to v0.29.29.4
  - rtw89: 8851b: update fw to v0.29.41.3


author: Scott Weaver <scweaver@redhat.com> - 20240219-143
changelog:
  - [AMDCLIENT 9.4 Bug] Update PHX 1/2 firmware to fix some PSR related issues (RHEL-25408)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: First GuC release for LNL and Xe
  - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
  - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
  - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
  - ice: update ice DDP package to 1.3.36.0
  - Intel IPU3 ImgU: Move firmware file under intel/ipu
  - Intel IPU6: Move firmware binaries under ipu/
  - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
  - panthor: Add initial firmware for Gen10 Arm Mali GPUs
  - amdgpu: DMCUB Updates for DCN321: 7.0.38.0
  - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
  - qcom: update venus firmware file for v5.4
  - Montage: add firmware for Mont-TSSE
  - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
  - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
  - linux-firmware: Fix filenames for some CS35L41 firmwares for HP
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
  - rtl_nic: add firmware for RTL8126A
  - linux-firmware: intel: Add IPU6 firmware binaries
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
  - qcom: Add Audio firmware for SM8550 HDK
  - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 MTP
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SDMA 5.2.7 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update SDMA 5.2.6 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: add GC 11.0.1 rlc_1 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update picasso firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update navi14 firmware
  - amdgpu: add VCN 4.0.3 firmware
  - amdgpu: add SDMA 4.4.2 firmware
  - amdgpu: add SMU 13.0.6 firmware
  - amdgpu: add PSP 13.0.6 firmware
  - amdgpu: Add GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - RTL8192E: Remove old realtek WiFi firmware
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for DCN314
  - qcom: Update the firmware for Adreno a630 family of GPUs
  - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
  - linux-firmware: update firmware for qat_4xxx devices
  - cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240603-144
changelog:
  - [AMD 9.3 FEAT]: MI300 GPU firmware (RHEL-10056)
  - CVE-2023-31346 linux-firmware: kernel: Reserved fields in guest message responses may not be zero initialized [rhel-9.4.z] (RHEL-35597)
  - linux-firmware ships encrypted zip files (named *.ncf) (RHEL-32145)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  - linux-firmware: Add tuning parameter configs for CS35L41 Firmware
  - linux-firmware: Fix firmware names for Laptop SSID 104316a3
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - iwlwifi: add gl FW for core87-44 release
  - iwlwifi: add ty/So/Ma firmwares for core87-44 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release
  - nvidia: Update Tegra210 XUSB firmware to v50.29
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update sdma 6.0.1 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update sdma 6.0.2 firmware
  - amdgpu: update ipsp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update raven firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update smu 13.0.6 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update sdma 6.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update  firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update gc 10.3.7 firmware
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9
  - Merge https://github.com/pkshih/linux-firmware into rtw
  - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file
  - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location
  - i915: Add DG2 HuC 7.10.15
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - mekdiatek: Update mt8186 SOF firmware to v2.0.1
  - rtw89: 8852c: update fw to v0.27.56.14
  - rtw89: 8922a: add firmware v0.35.18.0
  - rtw88: Add RTL8703B firmware v11.0.0
  - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops
  - Montage: update firmware for Mont-TSSE
  - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8
  - imx: sdma: update firmware to v3.6/v4.6
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: update 9000-family firmwares to core85-89
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops
  - amdgpu: Update VCN firmware binaries
  - Intel IPU2: Add firmware files
  - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
  - i915: Add Xe2LPD DMC v2.18
  - i915: Update MTL DMC v2.21
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - linux-firmware: add firmware for MT7996


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Tao Liu <ltao@redhat.com> - 2.0.26-9
changelog:
  - Introduce a function to get reserved memory size
  - powerpc: update fadump sysfs node path
  - kdumpctl: merge check_current_{kdump,fadump}_status
  - kdumpctl: remove unnecessary uses of $?


author: Tao Liu <ltao@redhat.com> - 2.0.27-3
changelog:
  - Rebase makedumpfile to v1.7.4
  - powerpc: update kdumpctl to load kernel signing key for fadump
  - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded


author: Tao Liu <ltao@redhat.com> - 2.0.27-4
changelog:
  - kdump-lib.sh: add extra 64M to default crashkernel if sme/sev is active
  - Allow _crashkernel_add to address larger memory ranges
  - kdump-lib: Harden _crashkernel_add


author: Tao Liu <ltao@redhat.com> - 2.0.27-7
changelog:
  - Explain the auto_reset_crashkernel option in more details
  - Use the same /etc/resolve.conf in kdump initrd if it's managed manually


author: Tao Liu <ltao@redhat.com> - 2.0.27-10
changelog:
  - mkdumprd: Fix makedumpfile parameter check.
  - Install the driver of physical device for a SR-IOV virtual device
  - Try to install PHY and MDIO bus drivers explicitly


author: Tao Liu <ltao@redhat.com> - 2.0.26-2
changelog:
  - Rebase makedumpfile to upstream latest(8e8b8814be1)
  - Show how much time kdump has waited for the network to be ready
  - Tell nmcli to not escape colon when getting the path of connection profile


author: Tao Liu <ltao@redhat.com> - 2.0.26-3
changelog:
  - Rebase makedumpfile to v1.7.3
  - kdumpctl: lower the log level in reset_crashkernel_for_installed_kernel


author: Tao Liu <ltao@redhat.com> - 2.0.26-4
changelog:
  - kdumpctl: Add basic UKI support
  - kdumpctl: Move temp file in get_kernel_size to global temp dir
  - kdumpctl: Move get_kernel_size to kdumpctl
  - kdump-lib: fix prepare_cmdline
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS


author: Tao Liu <ltao@redhat.com> - 2.0.26-5
changelog:
  - Add lvm thin provision to kdump supported-kdump-targets.txt
  - mkdumprd: Use the correct syntax to redirect the stderr to null


author: Tao Liu <ltao@redhat.com> - 2.0.26-6
changelog:
  - kdumpctl: Fix the matching of plus symbol by grep's EREs
  - kdump-lib: Evaluate the memory consumption by smmu and mlx5 separately
  - kdump-lib: add support for 64K aarch64
  - kdump-lib: Introduce parse_kver_from_path() to get kernel version from its path name
  - kdump-lib: Introduce a help function _crashkernel_add()
  - Simplify the management of the kernel parameter crashkernel
  - kdump-lib: fix the matching pattern for debug-kernel
  - kdump-lib: always specify version in is_squash_available


author: Tao Liu <ltao@redhat.com> - 2.0.26-7
changelog:
  - kdumpctl: Fix temporary directory location
  - kdump-lib: Match 64k debug kernel in prepare_kdump_bootinfo()


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.67.0-1
changelog:
  - Fix handling transaction id in resolveTransactionItemReason (RhBug:2010259,2053014)
  - Remove deprecated assertions (RhBug:2027383)
  - Skip rich deps for autodetection of unmet dependencies (RhBug:2033130, 2048394)
  - Increase required rpm version since we use `rpmdbCookie()`
  - Add 'loongarch' support
  - Use dnf solv userdata to check versions and checksum (RhBug:2027445)
  - context: Substitute all repository config options (RhBug:2076853)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Make keeping connection more reliable (jhnidek@redhat.com)
  - Small improvements of keep alive (jhnidek@redhat.com)
  - Keep TCP/TLS connection alive and close connection properly
    (jhnidek@redhat.com)
  - ENT-4700: Switch away from 'imp' (mhorky@redhat.com)
  - ENT-4088: Fix flake8 error E731 (mhorky@redhat.com)
  - ENT-4048: Fix flake8 error E501 (mhorky@redhat.com)
  - ENT-240: Add --no-progress-messages CLI option (mhorky@redhat.com)
  - ENT-240: Use spinner to indicate that API communication is pending
    (mhorky@redhat.com)
  - ENT-240: Make verbose messages translatable (mhorky@redhat.com)
  - ENT-240: Make subscription-manager more verbose (mhorky@redhat.com)
  - 2075455: enable sslverifystatus on repos if advertized by CP
    (ptoscano@redhat.com)
  - RepoUpdateActionCommand: lazy load the consumer auth (ptoscano@redhat.com)
  - 2043331: Do not delete installed SCA cert during registration
    (jhnidek@redhat.com)
  - Remove Group tag from .spec file for RHEL/Fedora (jhnidek@redhat.com)
  - 2073354: Print correct status, when access mode has changed
    (jhnidek@redhat.com)
  - flake8: ignore the build directory (ptoscano@redhat.com)
  - Remove ownership of /etc/rhsm (csnyder@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Revert "build: pin flake8 to < 4" (ptoscano@redhat.com)
  - build: simplify flake8 run (ptoscano@redhat.com)
  - flake8: improve the config a bit (ptoscano@redhat.com)
  - jenkins: run stylish.sh with -e (ptoscano@redhat.com)
  - flake8: simplify/update config (ptoscano@redhat.com)
  - tests: remove unused exception variable (ptoscano@redhat.com)
  - Drop cockpit sources & related bits (ptoscano@redhat.com)
  - cockpit: test with split subscription-manager-cockpit (ptoscano@redhat.com)
  - Remove print statements from test suite (mhorky@redhat.com)
  - Run CI's pytest with verbose flag (mhorky@redhat.com)
  - Optimize rhsmlib DBus test strings (mhorky@redhat.com)
  - Change names of some directories in test/ (mhorky@redhat.com)
  - Reorder rhsmlib tests (mhorky@redhat.com)
  - refresh: clear also the release status (ptoscano@redhat.com)
  - 2074110: clear the release cache on release change (ptoscano@redhat.com)
  - Add gcp_license_codes to system facts. (jhnidek@redhat.com)
  - Pass version to make in debian/rules using 'pkg-info.mk' (reisner@atix.de)
  - Refactored rpm-version to pkg-version (reisner@atix.de)
  - Ignore black commit hashes (mhorky@redhat.com)
  - Add check to YumPluginManager.enable_pkg_plugins() if system is using yum/dnf
    to prevent warnings on debian based systems (reisner@atix.de)
  - Extend HardwareCollector.get_distribution() to return ID and ID_LIKE
    (reisner@atix.de)
  - Format code with black==22.3.0 (mhorky@redhat.com)
  - Add Black to CI (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Fix few grammar mistakes in rhsm.conf and man page (jhnidek@redhat.com)
  - 2058662: Fix inaccurate module status in combined profile
    (jhnidek@redhat.com)
  - Add file .git-blame-ignore-revs (mhorky@redhat.com)
  - Update configuration files for flake8 (mhorky@redhat.com)
  - Use double quotes for strings (mhorky@redhat.com)
  - Format the code with black (mhorky@redhat.com)
  - Custom facts should not influence unit tests of cloud-what
    (jhnidek@redhat.com)
  - Drop redhat-uep.pem (ptoscano@redhat.com)
  - Move redhat-entitlement-authority.pem to container plugin
    (ptoscano@redhat.com)
  - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com)
  - spec: relax subscription-manager-rhsm-certificates requires
    (ptoscano@redhat.com)
  - test: Rely on insights-client.service to succeed in testSubAndInAndFail
    (mvollmer@redhat.com)
  - integration-tests: Run testSubAndInAndFail with "setenforce 0"
    (mvollmer@redhat.com)
  - integration-test: Use custom TLS certs for mock-insights
    (mvollmer@redhat.com)
  - Keep the user namespace from the host (csnyder@redhat.com)
  - tracking return values of tests (jmolet@redhat.com)
  - Adding containers for development and test (csnyder@redhat.com)
  - Drop old git-checkcommits bits (ptoscano@redhat.com)
  - tests: drop no more needed bits (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase (ptoscano@redhat.com)
  - Drop the rel-eng directory for old tito versions (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase.assertRaisesNothing()
    (ptoscano@redhat.com)
  - tests: use write_to_file_utf8() from syspurpose.utils (ptoscano@redhat.com)
  - tests: directly use tempfile.TemporaryDirectory() (ptoscano@redhat.com)
  - tests: use Capture from the main sub-man fitxure module (ptoscano@redhat.com)
  - tests: switch from assert_equal_dict() to assertEqual() (ptoscano@redhat.com)
  - tests: switch from assert_string_equals() to assertEqual()
    (ptoscano@redhat.com)
  - cockpit: bump API version to 264 (ptoscano@redhat.com)
  - cockpit: simplify skipUnlessDistroFamily() to properly skip tests
    (ptoscano@redhat.com)
  - cockpit: drop rhel-atomic bits (ptoscano@redhat.com)
  - cockpit: bump candlepin minimum waiting time to 10 seconds
    (ptoscano@redhat.com)
  - integration-test: Updates for newer insights-client (mvollmer@redhat.com)
  - 2018221: Cockpit use "Organization ID" in label (jhnidek@redhat.com)
  - 2059631: rhsm.conf: fix typo in comment (ptoscano@redhat.com)
  - 2057053: Improve API of detection of cloud-what (jhnidek@redhat.com)
  - 1935446: Revert "Revert "1935446: Use updated cert with SHA-256 algorithm""
    (ptoscano@redhat.com)
  - cockpit: set $RPM_BUILD_ROOT w/ installing (ptoscano@redhat.com)
  - 2057053: Facts: do no use heuristics detection of cloud (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Improve azure determination method (suttner@atix.de)
  - 2056896: Handle all exceptions of gathering data properly
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.29-1
changelog:
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5215: Handle all exceptions caused by network problems
    (mhorky@redhat.com)
  - ENT-5215: Handle errors raised in DNF plugin (mhorky@redhat.com)
  - Make TestProfileManager subclass of SubManFixture (mhorky@redhat.com)
  - ENT-5054: Drop singleton implementation in rhsmlib/utils.py
    (mhorky@redhat.com)
  - Rename test file for rhsm/utils.py (mhorky@redhat.com)
  - ENT-5054: Create singleton decorators in rhsm/utils.py (mhorky@redhat.com)
  - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com)
  - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com)
  - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com)
  - facts: add dmidecode parser and facts collector (ptoscano@redhat.com)
  - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com)
  - 2096446: Make 'rhsm-debug' autocomplete --no-progress-messages
    (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 2092014: Do not use injections in rhsm (mhorky@redhat.com)
  - ci: run rpmlint as part of stylish (ptoscano@redhat.com)
  - build: switch rpmlint check to rpmlint 2.x (ptoscano@redhat.com)
  - ci: drop stylish job from Jenkins (ptoscano@redhat.com)
  - ci: add black & flake8 check using GitHub Actions (ptoscano@redhat.com)
  - build: install files without exec permissions (ptoscano@redhat.com)
  - 2092014: Disable progress messages when sub-man RPM is not installed
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.30-1
changelog:
  - Fix issue, when connection is not shared (jhnidek@redhat.com)
  - Unit tests: Add stub class for SyspurposeComplianceStatusCache
    (jhnidek@redhat.com)
  - ENT-4664: Ensure tests clean up after themselves (mhorky@redhat.com)
  - Refactoring of cloud-what unit tests (jhnidek@redhat.com)
  - 2111035: Do not allow reusing TCP connection for rhsm.service
    (jhnidek@redhat.com)
  - spec: remove redundant License from python3-cloud-what (ptoscano@redhat.com)
  - Ensure tests don't fail when run under root (mhorky@redhat.com)
  - Fix issue with unit tests (jhnidek@redhat.com)
  - 2111757: Make parsing of HTTP headers more reliable (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5286: Unify environment variable evaluation (mhorky@redhat.com)
  - Use dmidecode on aarch64 (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Increase security level for zypper repos managed by sub-man (suttner@atix.de)
  - ENT-5271: Fix spelling of Candlepin API endpoint description
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.31-1
changelog:
  - warning: refname 'subscription-manager-1.29.30-1' is ambiguous.
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - tests: fix typos in test method names (ptoscano@redhat.com)
  - 2125227: Fixed incorrect registration warning with yum/dnf
    (jajerome@redhat.com)
  - 2094942: Fixed expected message for manual attach case (jajerome@redhat.com)
  - ENT-5102: Type-hint rhsmlib/facts (mhorky@redhat.com)
  - 2094942: Improve warning message (auto-attach in SCA mode)
    (jhnidek@redhat.com)
  - Update INSTALL.md (mhorky@redhat.com)
  - Remove unused classes of DBus tests (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Unregister objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Register objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Products object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of AllFacts object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Entitlement object (mhorky@redhat.com)
  - Fix typo in method name of EntitlementService (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Consumer object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Attach object (mhorky@redhat.com)
  - Fix possible parsing issues of dmidecode output (mhorky@redhat.com)
  - ENT-5317: New way to test DBus methods, starting with Config
    (mhorky@redhat.com)
  - cockpit: disable the reference branch for sub-man-cockpit
    (ptoscano@redhat.com)
  - TESTING.md: Remove mention of pytest-xdist (mhorky@redhat.com)
  - INSTALL.md: Update list of packages to be installed (mhorky@redhat.com)
  - Stop calling pytest with --failed-first (mhorky@redhat.com)
  - GCP: Better computing of cached token TTL (jhnidek@redhat.com)
  - 2101510: Fix D-Bus Register() and update entitlement certs
    (jhnidek@redhat.com)
  - 2120744: Close keycloak connection properly (jhnidek@redhat.com)
  - 2094942: [RFE] Improve the message, when  SCA is enabled (jhnidek@redhat.com)
  - Replaced list[] with List[] and dict[] with Dict[]. (jhnidek@redhat.com)
  - Update TESTING.md (mhorky@redhat.com)
  - Update README.md (mhorky@redhat.com)
  - Add INSTALL.md (mhorky@redhat.com)
  - Added type hints to package rhsmlib.service (jhnidek@redhat.com)
  - Added some missing imports. (jhnidek@redhat.com)
  - Reformated using black. (jhnidek@redhat.com)
  - Added one FIXME to redeem.py (jhnidek@redhat.com)
  - Added type hints and FIXMEs to rhsm package. (jhnidek@redhat.com)
  - [wip] ENT-5100: Type hint rhsm (mhorky@redhat.com)
  - Added type hints to syspurpose package (jhnidek@redhat.com)
  - Drop libnotify-devel usage (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.32-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - utils: import pkg_resources only when needed (ptoscano@redhat.com)
  - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)
  - Call parent methods in DBusServerStubProvider (mhorky@redhat.com)
  - Base D-Bus tests on SubManFixture (mhorky@redhat.com)
  - ENT-5532: Call rhsm-package-profile-uploader with --force-upload
    (jhnidek@redhat.com)
  - 2108549: do not detect containers in OCP as such (ptoscano@redhat.com)
  - tests: extend InContainerTests for path checks (ptoscano@redhat.com)
  - Resolved issues in PR feedback (jajerome@redhat.com)
  - Updated request handling in connection.py (jajerome@redhat.com)
  - Resolve issues from PR review (jajerome@redhat.com)
  - Removed fixme since activateMachine() is still used (jajerome@redhat.com)
  - Black/flake8 fixes (jajerome@redhat.com)
  - FIXME: renamed default argument to not shadow inbuilt type
    (jajerome@redhat.com)
  - FIXME: removed Restlib and using only BaseRestLib (jajerome@redhat.com)
  - FIXME: updated unregisterConsumer() to return True if status code is 204
    (jajerome@redhat.com)
  - FIXME: changed unbindBySerial/unbindByPoolId to return bool
    (jajerome@redhat.com)
  - FIXME: changed default value of facts in updateConsumerFacts()
    (jajerome@redhat.com)
  - FIXME: sanitized email/lang variables in activateMachine()
    (jajerome@redhat.com)
  - FIXME: made email argument required in activatemachine()
    (jajerome@redhat.com)
  - FIXME: changed default value of serials argument to None
    (jajerome@redhat.com)
  - FIXME: removed unused username/password arguments (jajerome@redhat.com)
  - FIXME: raise exceptions where sanitizing guest Id returns None
    (jajerome@redhat.com)
  - FIXME: renamed response argument to result in validateResponse()
    (jajerome@redhat.com)
  - FIXME: rename info argument to params in _request() (jajerome@redhat.com)
  - FIXME: added error message when redeeming subscription fails
    (jajerome@redhat.com)
  - FIXME: removed unused UEPConnection class methods (jajerome@redhat.com)
  - Fixed profile tests setting Package release numbers as int instead of str
    (jajerome@redhat.com)
  - FIXME: changed epoch data type to str in Package class (jajerome@redhat.com)
  - FIXME: added null-checks for stdout/stderr wrapper (jajerome@redhat.com)
  - FIXME: re-iterated a fix is not needed for urlparse (jajerome@redhat.com)
  - FIXME: added exception messages to parse_url() (jajerome@redhat.com)
  - FIXME: changed  lists to tuples in StatusSpinnerStyle class
    (jajerome@redhat.com)
  - FIXME: fixed type hints for _normalize_string() (jajerome@redhat.com)
  - FIXME: use super() instead of class name (jajerome@redhat.com)
  - FIXME: fixed strings not being translated in is_log_level_valid()
    (jajerome@redhat.com)
  - FIXME: resolved improper use of tempfile in save() (jajerome@redhat.com)
  - FIXME: fixed config_file argument not being used in save()
    (jajerome@redhat.com)
  - FIXME: updated default value for files_name argument in read()
    (jajerome@redhat.com)
  - FIXME: fixed minor typo in bogus() (jajerome@redhat.com)
  - FIXME: changed read() to return self instead of None (jajerome@redhat.com)
  - FIXME: set default argument 'facts' to None in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: renamed argument 'type' to 'consumer_type' in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: ping() resolved in rhsm/connection.py (jajerome@redhat.com)
  - Remove test dependency 'mock' (mhorky@redhat.com)
  - Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - Mark D-Bus tests (mhorky@redhat.com)
  - 2131789: Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com)
  - Catch generic OSError during HTTPSConnection.connect() (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com)
  - Catch also CertificateLoadingError for identity cert loading
    (ptoscano@redhat.com)
  - ENT-4286: Additional fix for exception handling (jajerome@redhat.com)
  - Remove D-Bus env vars from container and CI files (mhorky@redhat.com)
  - 2121350: Implement "force" register option in rhsm dbus python binding
    (jajerome@redhat.com)
  - Show locals in pytest output (mhorky@redhat.com)
  - Improve formatting of CertificateLoadingError (ptoscano@redhat.com)
  - Raise a new CertificateLoadingError on X.509 loading failures
    (ptoscano@redhat.com)
  - Improve formatting of UnknownContentException (ptoscano@redhat.com)
  - connection: improve the internal UnknownContentException
    (ptoscano@redhat.com)
  - utils: add terminal_printable_content (ptoscano@redhat.com)
  - connection: rename NetworkException to UnknownContentException
    (ptoscano@redhat.com)
  - Improve formatting of ProxyException (ptoscano@redhat.com)
  - connection: improve the internal ProxyException (ptoscano@redhat.com)
  - Improve formatting of socket.gaierror (ptoscano@redhat.com)
  - Improve formatting of ConnectionError (ptoscano@redhat.com)
  - Improve formatting of BadCertificateException (ptoscano@redhat.com)
  - connection: extend BadCertificateException w/ SSL exception
    (ptoscano@redhat.com)
  - connection: drop dead code (ptoscano@redhat.com)
  - ENT-4286: Simplify exception reporting with system_exit()
    (jajerome@redhat.com)
  - 2136694: Clear progress messages properly (mhorky@redhat.com)
  - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com)
  - 2097679: Additional fix for non-interactive parameters (jajerome@redhat.com)
  - 2097679: Fixed script hang in non-interactive execution (jajerome@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.33-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Simplify test setup for D-Bus fact collection (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-102
changelog:
  - resolves: rhbz#2169980 - Fix winbind memory leak
  - resolves: rhbz#2156056 - Fix Samba shares not accessible issue


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


