# changelog

author: Scott Weaver <scweaver@redhat.com> [5.14.0-383.el9]
changelog:
  - redhat: configs: disable CONFIG_REMOTE_TARGET (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Fix target_cmd_counter leak (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Replace strlcpy() with strscpy() (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Fix write perf due to unneeded throttling (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Stop using sprintf() in iscsi_target_configfs.c (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Remove the unused netif_timeout attribute (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: tcmu: Replace strlcpy() with strscpy() (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Rename sbc_ops to exec_cmd_ops (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Replace all non-returning strlcpy() with strscpy() (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Fix error path in target_setup_session() (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Fix hang in the iSCSI login code (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Fix invalid memory access (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Remove unused 'prod_len' variable (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: tcm_loop: Remove redundant driver match function (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsit: Fix TAS handling during conn cleanup (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Fix multiple LUN_RESET handling (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsit: Free cmds before session free (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsit: Stop/wait on cmds during conn close (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: iscsit: isert: Alloc per conn cmd counter (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Pass in cmd counter to use during cmd setup (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Move cmd counter allocation (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Move sess cmd counter to new struct (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Add virtual remote target (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: fcoe: Remove default fabric ops callouts (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: sbp: Remove default fabric ops callouts (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: loop: Remove default fabric ops callouts (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: Add default fabric ops callouts (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Add RTPI attribute for target port (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Drop device-based RTPI (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Use RTPI from target port (Maurizio Lombardi) [RHEL-5751]
  - scsi: target: core: Add RTPI field to target port (Maurizio Lombardi) [RHEL-5751]
  - kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa) [2060283]
  - virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan) [RHEL-1673]
  - ice: do not re-enable miscellaneous interrupt until thread_fn completes (Petr Oros) [2229762]
  - ice: trigger PFINT_OICR_TSYN_TX interrupt instead of polling (Petr Oros) [2229762]
  - ice: introduce ICE_TX_TSTAMP_WORK enumeration (Petr Oros) [2229762]
  - spi: spi-geni-qcom: Add SPI Device mode support for GENI based QuPv3 (Shawn Doherty) [RHEL-14715]
  - spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode (Shawn Doherty) [RHEL-14715]
  - spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan() (Shawn Doherty) [RHEL-14715]
  - soc: qcom: geni-se: Add SPI Device mode support for GENI based QuPv3 (Shawn Doherty) [RHEL-14715]
  - i40e: Fix VF VLAN offloading when port VLAN is configured (Ivan Vecera) [RHEL-6382]
  - KVM: arm64: Avoid soft lockups due to I-cache maintenance (Gavin Shan) [RHEL-1859]
  - arm64: tlbflush: Rename MAX_TLBI_OPS (Gavin Shan) [RHEL-1859]
  - KVM: arm64: Drop is_kernel_in_hyp_mode() from __invalidate_icache_guest_page() (Gavin Shan) [RHEL-1859]
  - x86/platform/uv: Use alternate source for socket to node data (Frank Ramsay) [RHEL-11428]
  - ovl: Handle verity during copy-up (Alexander Larsson) [RHEL-2146]
  - ovl: Validate verity xattr when resolving lowerdata (Alexander Larsson) [RHEL-2146]
  - ovl: Add versioned header for overlay.metacopy xattr (Alexander Larsson) [RHEL-2146]
  - ovl: Add framework for verity support (Alexander Larsson) [RHEL-2146]
  - fsverity: rework fsverity_get_digest() again (Alexander Larsson) [RHEL-2146]
  - fsverity: simplify fsverity_get_digest() (Alexander Larsson) [RHEL-2146]
  - fs-verity: define a function to return the integrity protected file digest (Alexander Larsson) [RHEL-2146]
  - ovl: implement lazy lookup of lowerdata in data-only layers (Alexander Larsson) [RHEL-2146]
  - ovl: prepare for lazy lookup of lowerdata inode (Alexander Larsson) [RHEL-2146]
  - ovl: prepare to store lowerdata redirect for lazy lowerdata lookup (Alexander Larsson) [RHEL-2146]
  - ovl: implement lookup in data-only layers (Alexander Larsson) [RHEL-2146]
  - ovl: introduce data-only lower layers (Alexander Larsson) [RHEL-2146]
  - ovl: remove unneeded goto instructions (Alexander Larsson) [RHEL-2146]
  - ovl: move freeing ovl_entry past rcu delay (Alexander Larsson) [RHEL-2146]
  - ovl: deduplicate lowerdata and lowerstack[] (Alexander Larsson) [RHEL-2146]
  - ovl: deduplicate lowerpath and lowerstack[] (Alexander Larsson) [RHEL-2146]
  - ovl: move ovl_entry into ovl_inode (Alexander Larsson) [RHEL-2146]
  - ovl: factor out ovl_free_entry() and ovl_stack_*() helpers (Alexander Larsson) [RHEL-2146]
  - ovl: fetch inode once in ovl_dentry_revalidate_common() (Alexander Larsson) [RHEL-2146]
  - ovl: use ovl_numlower() and ovl_lowerstack() accessors (Alexander Larsson) [RHEL-2146]
  - ovl: use OVL_E() and OVL_E_FLAGS() accessors (Alexander Larsson) [RHEL-2146]
  - ovl: update of dentry revalidate flags after copy up (Alexander Larsson) [RHEL-2146]
  - ovl: let helper ovl_i_path_real() return the realinode (Alexander Larsson) [RHEL-2146]
  - ovl: fix use inode directly in rcu-walk mode (Alexander Larsson) [RHEL-2146]
  - ovl: handle idmappings in ovl_xattr_{g,s}et() (Alexander Larsson) [RHEL-2146]
  - ovl: use ovl_copy_{real,upper}attr() wrappers (Alexander Larsson) [RHEL-2146]
  - ovl: store lower path in ovl_inode (Alexander Larsson) [RHEL-2146]
  - ovl: update ctime when changing fileattr (Alexander Larsson) [RHEL-2146]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-384.el9]
changelog:
  - perf/core: Fix potential NULL deref (Wander Lairson Costa) [RHEL-14984] {CVE-2023-5717}
  - perf: Disallow mis-matched inherited group reads (Wander Lairson Costa) [RHEL-14984] {CVE-2023-5717}
  - page_pool: unlink from napi during destroy (Ivan Vecera) [RHEL-12613]
  - page_pool: allow caching from safely localized NAPI (Ivan Vecera) [RHEL-12613]
  - net: skb: plumb napi state thru skb freeing paths (Ivan Vecera) [RHEL-12613]
  - net: introduce skb_poison_list and use in kfree_skb_list (Ivan Vecera) [RHEL-12613]
  - net: fix kfree_skb_list use of skb_mark_not_on_list (Ivan Vecera) [RHEL-12613]
  - net: kfree_skb_list use kmem_cache_free_bulk (Ivan Vecera) [RHEL-12613]
  - net: skb: move skb_pp_recycle() to skbuff.c (Ivan Vecera) [RHEL-12613]
  - ibmvnic: Ensure login failure recovery is safe from other resets (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: Do partial reset on login failure (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: Handle DMA unmapping of login buffs in release functions (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: Unmap DMA login rsp buffer on send login fail (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: Enforce stronger sanity checks on login response (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: remove unused rc variable (Mamatha Inamdar) [RHEL-15149]
  - ibmvnic: Free rwi on reset success (Mamatha Inamdar) [RHEL-15149]
  - selftests: tty: add selftest for tty timestamp updates (Aristeu Rozanski) [RHEL-3902]
  - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-3902]
  - powerpc/rtas_flash: allow user copy to flash block cache objects (Mamatha Inamdar) [2228278]
  - preempt: Put preempt_enable() within an instrumentation*() section. (Eder Zulian) [RHEL-3988]
  - sched/rt: Don't try push tasks if there are none. (Eder Zulian) [RHEL-3988]
  - signal: Add proper comment about the preempt-disable in ptrace_stop(). (Eder Zulian) [RHEL-3988]
  - scsi: scsi_debug: Remove dead code (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Abort commands from scsi_debug_device_reset() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Fix missing error code in scsi_debug_init() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop sdebug_queue (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Only allow sdebug_max_queue be modified when no shosts (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Use scsi_host_busy() in delay_store() and ndelay_store() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Use blk_mq_tagset_busy_iter() in stop_all_queued() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Use blk_mq_tagset_busy_iter() in sdebug_blk_mq_poll() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Dynamically allocate sdebug_queued_cmd (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Use scsi_block_requests() to block queues (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Protect block_unblock_all_queues() with mutex (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Change shost list lock to a mutex (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Don't iter all shosts in clear_luns_changed_on_target() (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Fix check for sdev queue full (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Remove redundant driver match function (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Add poll mode deferred completions to statistics (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Get command abort feature working again (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop sdebug_dev_info.num_in_q (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop check for num_in_q exceeding queue depth (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop scsi_debug_host_reset() device NULL pointer check (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop scsi_debug_bus_reset() NULL pointer checks (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop scsi_debug_target_reset() NULL pointer checks (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop scsi_debug_device_reset() NULL pointer checks (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Drop scsi_debug_abort() NULL pointer checks (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Stop setting devip->sdbg_host twice (Ming Lei) [RHEL-15276]
  - scsi: scsi_debug: Don't hold driver host struct pointer in host->hostdata[] (Ming Lei) [RHEL-15276]
  - scsi: smartpqi: Change driver version to 2.1.24-046 (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Enhance error messages (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Enhance controller offline notification (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Enhance shutdown notification (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Simplify lun_number assignment (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Rename pciinfo to pci_info (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Rename MACRO to clarify purpose (Don Brace) [RHEL-2301]
  - scsi: smartpqi: Add abort handler (Don Brace) [RHEL-2301]
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [2227299] {CVE-2023-39193}
  - net: xfrm: Fix xfrm_address_filter OOB read (Wander Lairson Costa) [2227305] {CVE-2023-39194}
  - drm/qxl: fix UAF on handle creation (Wander Lairson Costa) [2218334] {CVE-2023-39198}
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [2227287] {CVE-2023-39189}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-385.el9]
changelog:
  - s390/qdio: fix do_sqbs() inline assembly constraint (Tobias Huschle) [RHEL-11201]
  - s390/lcs: Convert sysfs sprintf to sysfs_emit (Tobias Huschle) [RHEL-11201]
  - s390/lcs: Convert sprintf to scnprintf (Tobias Huschle) [RHEL-11201]
  - s390/ctcm: Convert sysfs sprintf to sysfs_emit (Tobias Huschle) [RHEL-11201]
  - s390/ctcm: Convert sprintf/snprintf to scnprintf (Tobias Huschle) [RHEL-11201]
  - s390/qeth: Fix vipa deletion (Tobias Huschle) [RHEL-11201]
  - s390/lcs: Remove FDDI option (Tobias Huschle) [RHEL-11201]
  - nd_btt: Make BTT lanes preemptible (Tomas Glozar) [RHEL-9172]
  - clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name (Alessandro Carminati) [RHEL-15417]
  - Revert "rcu: Permit start_poll_synchronize_rcu_expedited() to be invoked early" (Čestmír Kalina) [RHEL-14709]
  - scsi: sd: Remove the number of forward declarations (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Report error list information in debugfs (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Remove unused extern declarations (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Fix legacy /proc parsing buffer overflow (Ewan D. Milne) [RHEL-14312]
  - scsi: sd_zbc: Set zone limits before revalidating zones (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Improve warning message in scsi_device_block() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Replace scsi_target_block() with scsi_block_targets() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Don't wait for quiesce in scsi_device_block() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Don't wait for quiesce in scsi_stop_queue() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Merge scsi_internal_device_block() and device_block() (Ewan D. Milne) [RHEL-14312]
  - scsi: sg: Increase number of devices (Ewan D. Milne) [RHEL-14312]
  - scsi: sd: sd_zbc: Use PAGE_SECTORS_SHIFT (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Support setting BLK_MQ_F_BLOCKING (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Rework scsi_host_block() (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Only kick the requeue list if necessary (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Use min() instead of open-coding it (Ewan D. Milne) [RHEL-14312]
  - scsi: scsi_transport_fc: Remove unused 'desc_cnt' variable (Ewan D. Milne) [RHEL-14312]
  - scsi: sr: Simplify the sr_open() function (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Improve scsi_vpd_inquiry() checks (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Fix a procfs host directory removal regression (Ewan D. Milne) [RHEL-14312]
  - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (Ewan D. Milne) [RHEL-14312]
  - scsi: sd: Update DIX config every time sd_revalidate_disk() is called (Ewan D. Milne) [RHEL-14312]
  - tcp: fix delayed ACKs for MSS boundary condition (Paolo Abeni) [RHEL-14348]
  - tcp: fix quick-ack counting to count actual ACKs of new data (Paolo Abeni) [RHEL-14348]
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Paolo Abeni) [RHEL-14348]
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Paolo Abeni) [RHEL-14348]
  - tcp: gso: really support BIG TCP (Paolo Abeni) [RHEL-14348]
  - tcp: fix mishandling when the sack compression is deferred. (Paolo Abeni) [RHEL-14348]
  - wifi: rtw89: Fix loading of compressed firmware (Jose Ignacio Tornos Martinez) [RHEL-13881]
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Jose Ignacio Tornos Martinez) [RHEL-6358] {CVE-2023-31083}
  - x86/retpoline: Document some thunk handling aspects (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool: Fix return thunk patching in retpolines (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Remove unnecessary semicolon (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/calldepth: Rename __x86_return_skl() to call_depth_return_thunk() (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/nospec: Refactor UNTRAIN_RET[_*] (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Disentangle rethunk-dependent options (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/bugs: Remove default case for fully switched enums (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Remove 'pred_cmd' label (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Unexport untraining functions (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Improve i-cache locality for alias mitigation (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix unret validation dependencies (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix vulnerability reporting for missing microcode (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Print mitigation for retbleed IBPB case (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Print actual mitigation if requested mitigation isn't possible (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for (possible) future fixed HW (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86,static_call: Fix static-call vs return-thunk (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/alternatives: Remove faulty optimization (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Don't probe microcode in a guest (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Set CPUID feature bits independently of bug or mitigation status (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix srso_show_state() side effect (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix amd_check_microcode() declaration (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Correct the mitigation status when SMT is disabled (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/static_call: Fix __static_call_fixup() (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool/x86: Fixup frame-pointer vs rethunk (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Explain the untraining sequences a bit more (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu/kvm: Provide UNTRAIN_RET_VM (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Cleanup the untrain mess (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Rename original retbleed methods (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Clean up SRSO return thunk mess (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/alternative: Make custom return thunk unconditional (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool/x86: Fix SRSO mess (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu: Fix __x86_return_thunk symbol type (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Disable the mitigation on unaffected configurations (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Waiman Long) [RHEL-8594] {CVE-2023-20588}
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Waiman Long) [RHEL-8594] {CVE-2023-20593}
  - driver core: cpu: Fix the fallback cpu_show_gds() name (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86: Move gds_ucode_mitigated() declaration to header (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/speculation: Add cpu_show_gds() prototype (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Make cpu_show_not_affected() static (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix build breakage with the LLVM linker (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - Documentation/srso: Document IBPB aspect and fix formatting (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - driver core: cpu: Unify redundant silly stubs (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Waiman Long) [RHEL-8594] {CVE-2023-20588}
  - x86/srso: Tie SBPB bit setting to microcode patch detection (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add a forgotten NOENDBR annotation (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Fix return thunks in generated code (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB on VMEXIT (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add SRSO_NO support (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add IBPB_BRTYPE support (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - redhat/configs/x86: Enable CONFIG_CPU_SRSO (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/srso: Add a Speculative RAS Overflow mitigation (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/retbleed: Add __x86_return_thunk alignment checks (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/retbleed: Fix return thunk alignment (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/alternative: Optimize returns patching (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86,objtool: Separate unret validation from unwind hints (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool: Add objtool_types.h (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool: Union instruction::{call_dest,jump_table} (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - objtool: Fix SEGFAULT (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - vmlinux.lds.h: add BOUNDED_SECTION* macros (Waiman Long) [RHEL-8594] {CVE-2023-20569}
  - livepatch: Make 'klp_stack_entries' static (Ryan Sullivan) [RHEL-2768]
  - livepatch: Convert stack entries array to percpu (Ryan Sullivan) [RHEL-2768]
  - livepatch: fix ELF typos (Ryan Sullivan) [RHEL-2768]
  - livepatch: Make kobj_type structures constant (Ryan Sullivan) [RHEL-2768]
  - Documentation: livepatch: module-elf-format: Remove local klp_modinfo definition (Ryan Sullivan) [RHEL-2768]
  - module.h: Document klp_modinfo struct using kdoc (Ryan Sullivan) [RHEL-2768]
  - livepatch,x86: Clear relocation targets on a module removal (Ryan Sullivan) [RHEL-2768]
  - x86/module: remove unused code in __apply_relocate_add (Ryan Sullivan) [RHEL-2768]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-386.el9]
changelog:
  - KVM: arm64: selftest: Perform ISB before reading PAR_EL1 (Gavin Shan) [RHEL-16004]
  - KVM: arm64: selftest: Add the missing .guest_prepare() (Gavin Shan) [RHEL-16004]
  - scsi: mpt3sas: Drop redundant pci_enable_pcie_error_reporting() (Tomas Henzl) [RHEL-8247]
  - scsi: mpt3sas: Fix in error path (Tomas Henzl) [RHEL-8247]
  - scsi: mpt3sas: Fix loop logic (Tomas Henzl) [RHEL-8247]
  - scsi: mpt3sas: Remove volatile qualifier (Tomas Henzl) [RHEL-8247]
  - scsi: mpt3sas: Perform additional retries if doorbell read returns 0 (Tomas Henzl) [RHEL-8247]
  - net/ism: Remove redundant pci_clear_master (Tobias Huschle) [RHEL-11199]
  - net/smc: Fix dependency of SMC on ISM (Tobias Huschle) [RHEL-11199]
  - s390/ism: Do not unregister clients with registered DMBs (Tobias Huschle) [RHEL-11199]
  - s390/ism: Fix and simplify add()/remove() callback handling (Tobias Huschle) [RHEL-11199]
  - s390/ism: Fix locking for forwarding of IRQs and events to clients (Tobias Huschle) [RHEL-11199]
  - s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit() (Tobias Huschle) [RHEL-11199]
  - s390/ism: Set DMA coherent mask (Tobias Huschle) [RHEL-11199]
  - net/ism: Remove extra include (Tobias Huschle) [RHEL-11199]
  - net/smc: Introduce explicit check for v2 support (Tobias Huschle) [RHEL-11199]
  - cifs: Fix UAF in cifs_demultiplex_thread() (Scott Mayhew) [RHEL-15170 RHEL-15174] {CVE-2023-1192}
  - scsi: mpi3mr: Split off bus_reset function from host_reset (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Update driver version to 8.5.0.0.0 (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Enhance handling of devices removed after controller reset (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: WRITE SAME implementation (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Add support for more than 1MB I/O (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Update MPI Headers to version 3.00.28 (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Invoke soft reset upon TSU or event ack time out (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O (Tomas Henzl) [RHEL-8231]
  - scsi: mpi3mr: Fix the type used for pointers to bitmap (Tomas Henzl) [RHEL-8231]
  - redhat: self-test: Use a more complete SRPM file suffix (Andrew Halaney) [RHEL-15147]
  - redhat: makefile: remove stray rpmbuild --without (Andrew Halaney) [RHEL-15147]
  - redhat: kernel.spec: amend license macro expansion (Eric Chanudet) [RHEL-15147]
  - wireguard: allowedips: expand maximum node depth (Hangbin Liu) [RHEL-13966]
  - wireguard: timers: move to using timer_delete_sync (Hangbin Liu) [RHEL-13966]
  - wireguard: netlink: send staged packets when setting initial private key (Hangbin Liu) [RHEL-13966]
  - wireguard: queueing: use saner cpu selection wrapping (Hangbin Liu) [RHEL-13966]
  - wireguard: timers: cast enum limits members to int in prints (Hangbin Liu) [RHEL-13966]
  - wireguard: allowedips: don't corrupt stack when detecting overflow (Hangbin Liu) [RHEL-13966]
  - x86/speculation: Provide a debugfs file to dump SPEC_CTRL MSRs (Waiman Long) [RHEL-8620]
  - x86/idle: Disable IBRS entering mwait idle and enable it on wakeup (Waiman Long) [RHEL-8620]
  - intel_idle: Add ibrs_off module parameter to force-disable IBRS (Waiman Long) [RHEL-8620]
  - intel_idle: Use __update_spec_ctrl() in intel_idle_ibrs() (Waiman Long) [RHEL-8620]
  - x86/idle: Disable IBRS when CPU is offline to improve single-threaded performance (Waiman Long) [RHEL-8620]
  - x86/speculation: Add __update_spec_ctrl() helper (Waiman Long) [RHEL-8620]
  - redhat/configs: Increase CONFIG_NODES_SHIFT from 6 to 8 for arm64 (Waiman Long) [RHEL-11395]
  - lib: cpu_rmap: Add irq_cpu_rmap_remove to complement irq_cpu_rmap_add (Petr Oros) [RHEL-5076]
  - vc_screen: don't clobber return value in vcs_read (Ricardo Robaina) [2221465] {CVE-2023-3567}
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (Ricardo Robaina) [2221465] {CVE-2023-3567}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-387.el9]
changelog:
  - iommu: Avoid unnecessary cache invalidations (Jerry Snitselaar) [RHEL-10094]
  - mm: slab: Do not create kmalloc caches smaller than arch_slab_minalign() (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: make io_tlb_default_mem local to swiotlb.c (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: optimize get_max_slots() (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: use the calculated number of areas (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Avoid memory allocation in iommu_suspend() (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Avoid constructing invalid range commands (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove kernel-doc warnings (Jerry Snitselaar) [RHEL-10094]
  - iommu: Avoid locking/unlocking for iommu_probe_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Split iommu_group_add_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Always destroy the iommu_group during iommu_release_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Do not export iommu_device_link/unlink() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Move the iommu driver sysfs setup into iommu_init/deinit_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Add iommu_init/deinit_device() paired functions (Jerry Snitselaar) [RHEL-10094]
  - iommu: Simplify the __iommu_group_remove_device() flow (Jerry Snitselaar) [RHEL-10094]
  - iommu: Inline iommu_group_get_for_dev() into __iommu_probe_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use iommu_group_ref_get/put() for dev->iommu_group (Jerry Snitselaar) [RHEL-10094]
  - iommu: Have __iommu_probe_device() check for already probed devices (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Rearrange DTE bit definations (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Remove unsued extern declaration amd_iommu_init_hardware() (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Enable PPR/GA interrupt after interrupt handler setup (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Consolidate PPR log enablement (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Disable PPR log/interrupt in iommu_disable() (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Enable separate interrupt for PPR and GA log (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Refactor IOMMU interrupt handling logic for Event, PPR, and GA logs (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Handle PPR log overflow (Jerry Snitselaar) [RHEL-3655]
  - iommu/amd: Generalize log overflow handling (Jerry Snitselaar) [RHEL-3655]
  - iommu/vt-d: Fix to convert mm pfn to dma pfn (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Fix to flush cache of PASID directory table (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove rmrr check in domain attaching device path (Jerry Snitselaar) [RHEL-10094]
  - iommu: Prevent RESV_DIRECT devices from blocking domains (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Add set_dev_pasid callback for dma domain (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Prepare for set_dev_pasid callback (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Make prq draining code generic (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove pasid_mutex (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Add domain_flush_pasid_iotlb() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Move global PASID allocation from SVA to core (Jerry Snitselaar) [RHEL-10094]
  - iommu: Generalize PASID 0 for normal DMA w/o PASID (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Add SM6375 SMMUv2 (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Add SM6350 DPU compatible (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Add SM6375 DPU compatible (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Sort the compatible list alphabetically (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Change vmid alloc strategy from bitmap to ida (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Allow PCIe devices (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Convert to read_poll_timeout_atomic() (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Don't leak the platform device memory when unloading the module (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Implement hw_info for iommu capability query (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Add coverage for IOMMU_GET_HW_INFO ioctl (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add IOMMU_GET_HW_INFO (Jerry Snitselaar) [RHEL-10094]
  - iommu: Add new iommu op to get iommu hardware information (Jerry Snitselaar) [RHEL-10094]
  - iommu: Move dev_iommu_ops() to private header (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Remove iommufd_ref_to_users() (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Make the mock iommu driver into a real driver (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Add IOMMU_TEST_OP_ACCESS_REPLACE_IOAS coverage (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add iommufd_access_replace() API (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Use iommufd_access_change_ioas in iommufd_access_destroy_object (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add iommufd_access_change_ioas(_id) helpers (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Allow passing in iopt_access_list_id to iopt_remove_access() (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Add a selftest for IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Return the real idev id from selftest mock_domain (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Test iommufd_device_replace() (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Make destroy_rwsem use a lock class per object type (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add iommufd_device_replace() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Introduce a new iommu_group_replace_domain() API (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Reorganize iommufd_device_attach into iommufd_device_change_pt (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Fix locking around hwpt allocation (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Allow a hwpt to be aborted after allocation (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add enforced_cache_coherency to iommufd_hw_pagetable_alloc() (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Move putting a hwpt to a helper function (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Make sw_msi_start a group global (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Use the iommufd_group to avoid duplicate MSI setup (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Keep track of each device's reserved regions instead of groups (Jerry Snitselaar) [RHEL-10094]
  - iommu: Export iommu_get_resv_regions() (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Replace the hwpt->devices list with iommufd_group (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add iommufd_group (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Move isolated msi enforcement to iommufd_device_bind() (Jerry Snitselaar) [RHEL-10094]
  - dma-pool: remove a __maybe_unused label in atomic_pool_expand (Jerry Snitselaar) [RHEL-10094]
  - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: bail out of swiotlb_init_late() if swiotlb is already allocated (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: move arch_dma_set_mask() declaration to header (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: unexport is_swiotlb_active (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Set end correctly when doing batch carry (Jerry Snitselaar) [RHEL-10094]
  - iommufd: IOMMUFD_DESTROY should not increase the refcount (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Fix signedness bug in iommu_sva_alloc_pasid() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Fix crash during syfs iommu_groups/N/type (Jerry Snitselaar) [RHEL-10094]
  - drm/nouveau: stop using is_swiotlb_active (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: use the atomic counter of total used slabs if available (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: remove unused field "used" from struct io_tlb_mem (Jerry Snitselaar) [RHEL-10094]
  - dma-remap: use kvmalloc_array/kvfree for larger dma memory remap (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: fix a Kconfig typo (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Do not access the area pointer after unlocking (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Remove extern from function prototypes (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Use BIT/BIT_ULL macro to define bit fields (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Fix compile error for unused function (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Improving Interrupt Remapping Table Invalidation (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Introduce Disable IRTE Caching Support (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Remove the unused struct amd_ir_data.ref (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Jerry Snitselaar) [RHEL-10026]
  - iommu/amd: Update copyright notice (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Use page mode macros in fetch_pte() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Tidy the control flow in iommu_group_store_type() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove __iommu_group_for_each_dev() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Allow IOMMU_RESV_DIRECT to work on ARM (Jerry Snitselaar) [RHEL-10094]
  - iommu: Consolidate the default_domain setup to one function (Jerry Snitselaar) [RHEL-10094]
  - iommu: Revise iommu_group_alloc_default_domain() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Consolidate the code to calculate the target default domain type (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove the assignment of group->domain during default domain alloc (Jerry Snitselaar) [RHEL-10094]
  - iommu: Do iommu_group_create_direct_mappings() before attach (Jerry Snitselaar) [RHEL-10094]
  - iommu: Fix iommu_probe_device() to attach the right domain (Jerry Snitselaar) [RHEL-10094]
  - iommu: Replace iommu_group_do_dma_first_attach with __iommu_device_set_domain (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove iommu_group_do_dma_first_attach() from iommu_group_add_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Replace __iommu_group_dma_first_attach() with set_domain (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use __iommu_group_set_domain() in iommu_change_dev_def_domain() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use __iommu_group_set_domain() for __iommu_attach_group() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Make __iommu_group_set_domain() handle error unwind (Jerry Snitselaar) [RHEL-10094]
  - iommu: Add for_each_group_device() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Replace iommu_group_device_count() with list_count_nodes() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Suppress empty whitespaces in prints (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use flush queue capability (Jerry Snitselaar) [RHEL-10094]
  - iommu: Add a capability for flush queue support (Jerry Snitselaar) [RHEL-10094]
  - iommu/iova: Optimize iova_magazine_alloc() (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove commented-out code (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove two WARN_ON in domain_context_mapping_one() (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Handle the failure case of dmar_reenable_qi() (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove unnecessary (void*) conversions (Jerry Snitselaar) [RHEL-10094]
  - iommu/virtio: Return size mapped for a detached domain (Jerry Snitselaar) [RHEL-10094]
  - iommu/virtio: Detach domain on endpoint release (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Set TTL invalidation hint better (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Document nesting-related errata (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Add explicit feature for nesting (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 (Jerry Snitselaar) [RHEL-10094]
  - iommu/dma: force bouncing if the size is not cacheline-aligned (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: force bouncing if the kmalloc() size is not cache-line-aligned (Jerry Snitselaar) [RHEL-10094]
  - powerpc: move the ARCH_DMA_MINALIGN definition to asm/cache.h (Jerry Snitselaar) [RHEL-10094]
  - arm64: enable ARCH_WANT_KMALLOC_DMA_BOUNCE for arm64 (Jerry Snitselaar) [RHEL-10094]
  - mm: slab: reduce the kmalloc() minimum alignment if DMA bouncing possible (Jerry Snitselaar) [RHEL-10094]
  - arm64: allow kmalloc() caches aligned to the smaller cache_line_size() (Jerry Snitselaar) [RHEL-10094]
  - dm-crypt: use ARCH_DMA_MINALIGN instead of ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - drivers/spi: use ARCH_DMA_MINALIGN instead of ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - drivers/usb: use ARCH_DMA_MINALIGN instead of ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - drivers/gpu: use ARCH_DMA_MINALIGN instead of ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - drivers/base: use ARCH_DMA_MINALIGN instead of ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - mm/slab: limit kmalloc() minimum alignment to dma_get_cache_alignment() (Jerry Snitselaar) [RHEL-10094]
  - mm/slab: simplify create_kmalloc_cache() args and make it static (Jerry Snitselaar) [RHEL-10094]
  - dma: allow dma_get_cache_alignment() to be overridden by the arch code (Jerry Snitselaar) [RHEL-10094]
  - mm/slab: decouple ARCH_KMALLOC_MINALIGN from ARCH_DMA_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - mm: slab: fix comment for ARCH_KMALLOC_MINALIGN (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: name SG DMA flag helpers consistently (Jerry Snitselaar) [RHEL-10094]
  - scatterlist: add dedicated config for DMA flags (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd/pgtbl_v2: Fix domain max address (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Handle GALog overflows (Jerry Snitselaar) [RHEL-10094]
  - iommu: Make IPMMU_VMSA dependencies more strict (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Fix missing adreno_smmu's (Jerry Snitselaar) [RHEL-10094]
  - rhel: configs: Clean up s390 IOMMU configs that no longer exist (Jerry Snitselaar) [RHEL-10094]
  - s390/iommu: get rid of S390_CCW_IOMMU and S390_AP_IOMMU (Jerry Snitselaar) [RHEL-10094]
  - iommu: Spelling s/cpmxchg64/cmpxchg64/ (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Convert to platform remove callback returning void (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu: Drop if with an always false condition (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove iommu_group_get_by_id() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Make iommu_release_device() static (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove ioasid infrastructure (Jerry Snitselaar) [RHEL-10094]
  - iommu/ioasid: Rename INVALID_IOASID (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Use GFP_KERNEL for pasid allocation (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Stop using ioasid_set for SVA (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Remove PASID to mm lookup function (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Move PASID helpers to sva code (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove virtual command interface (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use sysfs_emit() for sysfs show (Jerry Snitselaar) [RHEL-10094]
  - iommu: Cleanup iommu_change_dev_def_domain() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Replace device_lock() with group->mutex (Jerry Snitselaar) [RHEL-10094]
  - iommu: Move lock from iommu_change_dev_def_domain() to its caller (Jerry Snitselaar) [RHEL-10094]
  - iommu: Same critical region for device release and removal (Jerry Snitselaar) [RHEL-10094]
  - iommu: Split iommu_group_remove_device() into helpers (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Call arm_iommu_release_mapping() in release path (Jerry Snitselaar) [RHEL-10094]
  - iommu: Use of_property_present() for testing DT property presence (Jerry Snitselaar) [RHEL-10094]
  - iommu: Make kobj_type structure constant (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Add 5 level guest page table support (Jerry Snitselaar) [RHEL-10042]
  - iommu/amd: Allocate IOMMU irqs using numa locality info (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Allocate page table using numa locality info (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove BUG_ON in dmar_insert_dev_scope() (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove a useless BUG_ON(dev->is_virtfn) (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove BUG_ON in map/unmap() (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove BUG_ON when domain->pgd is NULL (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove BUG_ON in handling iotlb cache invalidation (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove BUG_ON on checking valid pfn range (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Make size of operands same in bitwise operations (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove PASID supervisor request support (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Use non-privileged mode for all PASIDs (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove extern from function prototypes (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Do not use GFP_ATOMIC when not needed (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Remove unnecessary checks in iopf disabling path (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Move PRI handling to IOPF feature path (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Move pfsid and ats_qdep calculation to device probe path (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Move iopf code from SVA to IOPF enabling path (Jerry Snitselaar) [RHEL-10094]
  - iommu/vt-d: Allow SVA with device-specific IOPF (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-qcom: Limit the SMR groups to 128 (Jerry Snitselaar) [RHEL-10094]
  - iommu/arm-smmu-v3: Explain why ATS stays disabled with bypass (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: remove R-Car H3 ES1.* handling (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: Omit total_used and used_hiwater if !CONFIG_DEBUG_FS (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: track and report io_tlb_used high water marks in debugfs (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: fix debugfs reporting of reserved memory pools (Jerry Snitselaar) [RHEL-10094]
  - swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: provide CONFIG_ARCH_DMA_DEFAULT_COHERENT (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: provide a fallback dma_default_coherent (Jerry Snitselaar) [RHEL-10094]
  - dma-debug: Use %pa to format phys_addr_t (Jerry Snitselaar) [RHEL-10094]
  - dma-debug: add cacheline to user/kernel space dump messages (Jerry Snitselaar) [RHEL-10094]
  - dma-debug: small dma_debug_entry's comment and variable name updates (Jerry Snitselaar) [RHEL-10094]
  - dma-direct: cleanup parameters to dma_direct_optimal_gfp_mask (Jerry Snitselaar) [RHEL-10094]
  - iommu/sva: Replace pasid_valid() helper with mm_valid_pasid() (Jerry Snitselaar) [RHEL-10094]
  - dma-mapping: benchmark: remove MODULE_LICENSE in non-modules (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Cover domain unmap with huge pages and access (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Set varaiable mock_iommu_device storage-class-specifier to static (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Catch overflow of uptr and length (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Add a selftest for iommufd_device_attach() with a hwpt argument (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Make selftest create a more complete mock device (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Rename the remaining mock device_id's to stdev_id (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Rename domain_id to hwpt_id for FIXTURE iommufd_mock_domain (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Rename domain_id to stdev_id for FIXTURE iommufd_ioas (Jerry Snitselaar) [RHEL-10094]
  - iommufd/selftest: Rename the sefltest 'device_id' to 'stdev_id' (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Make iommufd_hw_pagetable_alloc() do iopt_table_add_domain() (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Move iommufd_device to iommufd_private.h (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Move ioas related HWPT destruction into iommufd_hw_pagetable_destroy() (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Consistently manage hwpt_item (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Add iommufd_lock_obj() around the auto-domains hwpts (Jerry Snitselaar) [RHEL-10094]
  - iommufd: Assert devices_lock for iommufd_hw_pagetable_has_group() (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Set page size bitmap during V2 domain allocation (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Fix sparse warning (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Remove outdated comment (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Add command-line option to enable different page table (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Add support for using AMD IOMMU v2 page table for DMA-API (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Add support for Guest IO protection (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Initial support for AMD IOMMU v2 page table (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Update sanity check when enable PRI/ATS for IOMMU v1 table (Jerry Snitselaar) [RHEL-10007]
  - iommu/amd: Refactor amd_iommu_domain_enable_v2 to remove locking (Jerry Snitselaar) [RHEL-10007]
  - iommu/ipmmu-vmsa: Remove ipmmu_utlb_disable() (Jerry Snitselaar) [RHEL-10094]
  - iommu: Remove detach_dev callbacks (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Update to {map,unmap}_pages (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Clean up bus_set_iommu() (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Fix compatible for rcar-gen4 (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Add support for R-Car Gen4 (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Check for error num after setting mask (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Hook up r8a77980 DT matching code (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Add support for r8a779a0 (Jerry Snitselaar) [RHEL-10094]
  - iommu/ipmmu-vmsa: Drop IOVA cookie management (Jerry Snitselaar) [RHEL-10094]
  - x86_64: Remove pointless set_64bit() usage (Jerry Snitselaar) [RHEL-10094]
  - iommu/amd: Fix possible memory leak of 'domain' (Jerry Snitselaar) [RHEL-800]
  - iommu/amd/iommu_v2: Clear pasid state in free path (Jerry Snitselaar) [2223717]
  - iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind (Jerry Snitselaar) [2223717]
  - iommu/amd: Fix DTE_IRQ_PHYS_ADDR_MASK macro (Jerry Snitselaar) [RHEL-800]
  - iommu/amd: Fix domain flush size when syncing iotlb (Jerry Snitselaar) [RHEL-800]
  - iommu/amd: Add missing domain type checks (Jerry Snitselaar) [RHEL-800]
  - iommu/amd: Don't block updates to GATag if guest mode is on (Jerry Snitselaar) [RHEL-800]
  - iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE (Jerry Snitselaar) [RHEL-800]
  - swiotlb: reduce the number of areas to match actual memory pool size (Jerry Snitselaar) [RHEL-800]
  - swiotlb: always set the number of areas before allocating the pool (Jerry Snitselaar) [RHEL-800]
  - redhat: Enable -Werror for s390x and ppc64le, too (Thomas Huth) [RHEL-12454]
  - cachestat: wire up cachestat for other architectures (Thomas Huth) [RHEL-12454]
  - genirq: Allow irq_chip registration functions to take a const irq_chip (Thomas Huth) [RHEL-12454]
  - scsi: ibmvscsi: Avoid multi-field memset() overflow by aiming at srp (Thomas Huth) [RHEL-12454]
  - uaccess: fix type mismatch warnings from access_ok() (Thomas Huth) [RHEL-12454]
  - s390/con3270: use proper type for tasklet function (Thomas Huth) [RHEL-12454]
  - net/smc: Remove left-over label and code from a previous incomplete backport (Thomas Huth) [RHEL-12454]
  - KVM: s390: add tracepoint in gmap notifier (Thomas Huth) [RHEL-11438]
  - KVM: s390: add stat counter for shadow gmap events (Thomas Huth) [RHEL-11438]
  - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (Mamatha Inamdar) [RHEL-5838]
  - powerpc: Add HOTPLUG_SMT support (Mamatha Inamdar) [RHEL-5838]
  - powerpc/pseries: Initialise CPU hotplug callbacks earlier (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Allow enabling partial SMT states via sysfs (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Create topology_smt_thread_allowed() (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Remove topology_smt_supported() (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Store the current/max number of threads (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Move smt/control simple exit cases earlier (Mamatha Inamdar) [RHEL-5838]
  - cpu/SMT: Move SMT prototypes into cpu_smt.h (Mamatha Inamdar) [RHEL-5838]
  - hwmon: (ina3221) Add support for channel summation disable (Steve Best) [RHEL-1899]
  - virtchnl: Add header dependencies (Ivan Vecera) [RHEL-15261]
  - virtchnl: Add CRC stripping capability (Ivan Vecera) [RHEL-15261]
  - virtchnl: fix fake 1-elem arrays for structures allocated as `nents` (Ivan Vecera) [RHEL-15261]
  - virtchnl: fix fake 1-elem arrays in structures allocated as `nents + 1` (Ivan Vecera) [RHEL-15261]
  - virtchnl: fix fake 1-elem arrays in structs allocated as `nents + 1` - 1 (Ivan Vecera) [RHEL-15261]
  - virtchnl: do structure hardening (Ivan Vecera) [RHEL-15261]
  - virtchnl: update header and increase header clarity (Ivan Vecera) [RHEL-15261]
  - virtchnl: remove unused structure declaration (Ivan Vecera) [RHEL-15261]
  - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (Mamatha Inamdar) [RHEL-11213]
  - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (Mamatha Inamdar) [RHEL-11213]
  - powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (Mamatha Inamdar) [RHEL-11213]
  - powerpc/iommu: fix memory leak with using debugfs_lookup() (Mamatha Inamdar) [RHEL-11213]
  - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (Mamatha Inamdar) [RHEL-11213]
  - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/ddw: simplify enable_ddw() (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Check if the default window in use before removing it (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Use correct vfree for it_map (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Add of_node_put() before break (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Rename "direct window" to "dma window" (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Make use of DDW for indirect mapping (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Find existing DDW with given property name (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (Mamatha Inamdar) [RHEL-11213]
  - powerpc/pseries/iommu: Replace hard-coded page shift (Mamatha Inamdar) [RHEL-11213]
  - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (Mamatha Inamdar) [RHEL-11213]
  - dt-bindings: usb: qcom,dwc3: allow required-opps (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Reset num TRBs before giving back the request (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Execute gadget stop after halting the controller (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: gadget: drop dead hibernation code (Desnes Nunes) [RHEL-13058]
  - usb: remove dead code in dwc3_gadget_get_irq (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Change condition for processing suspend event (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (Desnes Nunes) [RHEL-13058]
  - usb: ulpi: Use of_request_module() (Desnes Nunes) [RHEL-13058]
  - of: device: Kill of_device_request_module() (Desnes Nunes) [RHEL-13058]
  - of: Move the request module helper logic to module.c (Desnes Nunes) [RHEL-13058]
  - of: Move of_modalias() to module.c (Desnes Nunes) [RHEL-13058]
  - of: Rename of_modalias_node() (Desnes Nunes) [RHEL-13058]
  - of: move from strlcpy with unused retval to strscpy (Desnes Nunes) [RHEL-13058]
  - of: Update of_device_get_modalias() (Desnes Nunes) [RHEL-13058]
  - of: device: Do not ignore error code in of_device_uevent_modalias (Desnes Nunes) [RHEL-13058]
  - of: device: Ignore modalias of reused nodes (Desnes Nunes) [RHEL-13058]
  - of: Fix modalias string generation (Desnes Nunes) [RHEL-13058]
  - usb: typec: Fix fast_role_swap_current show function (Desnes Nunes) [RHEL-13058]
  - usb: typec: ucsi: Fix command cancellation (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: fix use-after-free on core driver unbind (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: qcom: fix NULL-deref on suspend (Desnes Nunes) [RHEL-13058]
  - USB: serial: option: add Quectel EM061KGL series (Desnes Nunes) [RHEL-13058]
  - usb: typec: tps6598x: Fix broken polling mode after system suspend/resume (Desnes Nunes) [RHEL-13058]
  - usb: usbfs: Use consistent mmap functions (Desnes Nunes) [RHEL-13058]
  - usb: usbfs: Enforce page requirements for mmap (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type (Desnes Nunes) [RHEL-13058]
  - thunderbolt: Do not touch CL state configuration during discovery (Desnes Nunes) [RHEL-13058]
  - thunderbolt: dma_test: Use correct value for absent rings when creating paths (Desnes Nunes) [RHEL-13058]
  - xhci: Fix incorrect tracking of free space on transfer rings (Desnes Nunes) [RHEL-13058]
  - xhci-pci: Only run d3cold avoidance quirk for s2idle (Desnes Nunes) [RHEL-13058]
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Desnes Nunes) [RHEL-13058]
  - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Desnes Nunes) [RHEL-13058]
  - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Desnes Nunes) [RHEL-13058]
  - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Desnes Nunes) [RHEL-13058]
  - usb-storage: fix deadlock when a scsi command timeouts more than once (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: fix a test for error in dwc3_core_init() (Desnes Nunes) [RHEL-13058]
  - usb: typec: tps6598x: Fix fault at module removal (Desnes Nunes) [RHEL-13058]
  - usb: typec: altmodes/displayport: fix pin_assignment_show (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: debugfs: Resume dwc3 before accessing registers (Desnes Nunes) [RHEL-13058]
  - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: fix gadget mode suspend interrupt handler issue (Desnes Nunes) [RHEL-13058]
  - USB: usbtmc: Fix direction for 0-length ioctl control messages (Desnes Nunes) [RHEL-13058]
  - media: pvrusb2: fix DVB_CORE dependency (Desnes Nunes) [RHEL-13058]
  - USB: sisusbvga: Add endpoint checks (Desnes Nunes) [RHEL-13058]
  - USB: core: Add routines for endpoint checks in old drivers (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: Add 'snps,parkmode-disable-hs-quirk' quirk (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: core: add support for disabling High-speed park mode (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: ci-hdrc-usb2: allow multiple PHYs (Desnes Nunes) [RHEL-13058]
  - usb: chipidea: fix missing goto in `ci_hdrc_probe` (Desnes Nunes) [RHEL-13058]
  - usb: typec: ucsi: don't print PPM init deferred errors (Desnes Nunes) [RHEL-13058]
  - usb: typec: tcpm: fix multiple times discover svids error (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: clean up probe declarations (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: refactor clock lookups (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: refactor phy handling (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: clean up core init error handling (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: clean up phy init error handling (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: clean up probe error labels (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: drop dead hibernation code (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: disable autosuspend on unbind (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: fix runtime pm imbalance on unbind (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: fix runtime pm imbalance on probe errors (Desnes Nunes) [RHEL-13058]
  - usb: xhci-mtk: add optional frame count clock (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: mtk-xhci: add an optional frame count clock (Desnes Nunes) [RHEL-13058]
  - usb: xhci: plat: Add USB 3.0 phy support (Desnes Nunes) [RHEL-13058]
  - usb: host: xhci-plat: Use dev_is_pci() helper (Desnes Nunes) [RHEL-13058]
  - xhci: fix debugfs register accesses while suspended (Desnes Nunes) [RHEL-13058]
  - usb: gadget: tegra-xudc: Remove unneeded return variable (Desnes Nunes) [RHEL-13058]
  - usb: gadget: tegra-xudc: Fix crash in vbus_draw (Desnes Nunes) [RHEL-13058]
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Desnes Nunes) [RHEL-13058]
  - net: thunderbolt: Fix typos in comments (Desnes Nunes) [RHEL-13058]
  - net: thunderbolt: Fix sparse warnings in tbnet_xmit_csum_and_map() (Desnes Nunes) [RHEL-13058]
  - net: thunderbolt: Fix sparse warnings in tbnet_check_frame() and tbnet_poll() (Desnes Nunes) [RHEL-13058]
  - media: mc-device: remove unnecessary __must_check (Desnes Nunes) [RHEL-13058]
  - media: au0828: remove unnecessary (void*) conversions (Desnes Nunes) [RHEL-13058]
  - USB: core: Fix docs warning caused by wireless_status feature (Desnes Nunes) [RHEL-13058]
  - dt-bindings: Add missing (unevaluated|additional)Properties on child node schemas (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: mediatek,mtk-xhci: drop assigned-clocks (Desnes Nunes) [RHEL-13058]
  - usb: chipidea: imx: avoid unnecessary probe defer (Desnes Nunes) [RHEL-13058]
  - usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325 (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: pci: Change PCI device macros (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: tps6598x: make interrupts optional (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: typec-tcpci: convert to DT schema format (Desnes Nunes) [RHEL-13058]
  - usb: typec: tcpm: try to get role switch from tcpc fwnode (Desnes Nunes) [RHEL-13058]
  - USB: core: Add API to change the wireless_status (Desnes Nunes) [RHEL-13058]
  - USB: core: Add wireless_status sysfs attribute (Desnes Nunes) [RHEL-13058]
  - ABI: sysfs-bus-usb: add missing sysfs fields (Desnes Nunes) [RHEL-13058]
  - ABI: sysfs-bus-usb: use a wildcard for interface name on What (Desnes Nunes) [RHEL-13058]
  - ABI: sysfs-bus-usb: better document variable argument (Desnes Nunes) [RHEL-13058]
  - thunderbolt: Introduce usb4_port_sb_opcode_err_to_errno() helper (Desnes Nunes) [RHEL-13058]
  - media: pvrusb2: clean up unneeded complexity in pvrusb2 class logic (Desnes Nunes) [RHEL-13058]
  - usb: move config USB_USS720 to usb's misc Kconfig (Desnes Nunes) [RHEL-13058]
  - usb: gadget: f_ecm: Add suspend/resume and remote wakeup support (Desnes Nunes) [RHEL-13058]
  - usb: gadget: Handle function suspend feature selector (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: Add function suspend and function wakeup support (Desnes Nunes) [RHEL-13058]
  - usb: gadget: Add function wakeup support (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: Add remote wakeup handling (Desnes Nunes) [RHEL-13058]
  - usb: gadget: Properly configure the device for remote wakeup (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: usb-nop-xceiv: add power-domains property (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: ci-hdrc-usb2: convert to DT schema format (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: usbmisc-imx: convert to DT schema (Desnes Nunes) [RHEL-13058]
  - thunderbolt: Make use of SI units from units.h (Desnes Nunes) [RHEL-13058]
  - thunderbolt: Get rid of redundant 'else' (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: host: remove dead code in dwc3_host_get_irq() (Desnes Nunes) [RHEL-13058]
  - usb: pci-quirks: Reduce the length of a spinlock section in usb_amd_find_chipset_info() (Desnes Nunes) [RHEL-13058]
  - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Desnes Nunes) [RHEL-13058]
  - usb: xhci-pci: Set PROBE_PREFER_ASYNCHRONOUS (Desnes Nunes) [RHEL-13058]
  - usb: typec: tps6598x: Add support for polling interrupts status (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: add several registers dump for debugfs (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: document HS & SS OF graph ports (Desnes Nunes) [RHEL-13058]
  - usb: typec: ucsi: add PMIC Glink UCSI driver (Desnes Nunes) [RHEL-13058]
  - usb: phy: tegra: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-13058]
  - usb: phy: mxs: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-13058]
  - usb: phy: generic: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: correct i.MX8MQ support (Desnes Nunes) [RHEL-13058]
  - USB: serial: quatech2: remove unused qt2_setdevice function (Desnes Nunes) [RHEL-13058]
  - usb: typec: tipd: remove unused tps6598x_write16,32 functions (Desnes Nunes) [RHEL-13058]
  - usb: typec: tcpm: remove unnecessary (void*) conversions (Desnes Nunes) [RHEL-13058]
  - usb: chipidea: debug: remove redundant 'role' debug file (Desnes Nunes) [RHEL-13058]
  - xhci: Move xhci MSI sync function to to xhci-pci (Desnes Nunes) [RHEL-13058]
  - xhci: Call MSI sync function from xhci-pci instead of generic xhci code (Desnes Nunes) [RHEL-13058]
  - xhci: Move functions to cleanup MSI to xhci-pci (Desnes Nunes) [RHEL-13058]
  - xhci: move PCI specific MSI/MSIX cleanup away from generic xhci functions (Desnes Nunes) [RHEL-13058]
  - xhci: Move functions to setup msi to xhci-pci (Desnes Nunes) [RHEL-13058]
  - xhci: Avoid PCI MSI/MSIX interrupt reinitialization at resume (Desnes Nunes) [RHEL-13058]
  - xhci: dbc: Provide sysfs option to configure dbc descriptors (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Join string literals back (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Replace explicit castings with appropriate specifiers (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Use while (i--) pattern to clean up (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Drop useless return:s (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Get rid of redundant 'else' (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Use dma_poll_zalloc() instead of explicit memset() (Desnes Nunes) [RHEL-13058]
  - xhci: mem: Carefully calculate size for memory allocations (Desnes Nunes) [RHEL-13058]
  - redhat/configs: delete ftdi-elan driver config (Desnes Nunes) [RHEL-13058]
  - usb: ftdi-elan: Delete driver (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: Drop unneeded quotes (Desnes Nunes) [RHEL-13058]
  - redhat/configs: delete u132-hcd driver config (Desnes Nunes) [RHEL-13058]
  - usb: host: u132-hcd: Delete driver (Desnes Nunes) [RHEL-13058]
  - usb: host: u132-hcd: Drop if with an always true condition (Desnes Nunes) [RHEL-13058]
  - usb: host: u132-hcd: Various style improvements (Desnes Nunes) [RHEL-13058]
  - media: pvrusb2: VIDEO_PVRUSB2 depends on DVB_CORE to use dvb_* symbols (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: dwc3: Add QCM2290 compatible (Desnes Nunes) [RHEL-13058]
  - usb: misc: usb3503: support usb3803 and bypass mode (Desnes Nunes) [RHEL-13058]
  - usb: misc: usb3503: refactor code to prepare for usb3803 addition (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: smsc,usb3503: Add usb3803 (Desnes Nunes) [RHEL-13058]
  - usb: typec: fusb302: mark OF related data as maybe unused (Desnes Nunes) [RHEL-13058]
  - usb: acpi: Switch to use acpi_evaluate_dsm_typed() (Desnes Nunes) [RHEL-13058]
  - usb: Use of_property_read_bool() for boolean properties (Desnes Nunes) [RHEL-13058]
  - usb: usb251xb: Switch to use dev_err_probe() helper (Desnes Nunes) [RHEL-13058]
  - usb: Use of_property_present() for testing DT property presence (Desnes Nunes) [RHEL-13058]
  - usb: musb: fix error return code in omap2430_probe() (Desnes Nunes) [RHEL-13058]
  - usb: musb: omap2430: Fix probe regression for missing resources (Desnes Nunes) [RHEL-13058]
  - thunderbolt: Refactor DROM reading (Desnes Nunes) [RHEL-13058]
  - thunderbolt: use `tb_eeprom_get_drom_offset` to discover DROM offset (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: support i.MX8MQ (Desnes Nunes) [RHEL-13058]
  - usb: xhci: change some trace event __dynamic_array() to __get_buf() (Desnes Nunes) [RHEL-13058]
  - tracing: Acquire buffer from temparary trace sequence (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: change some trace event __dynamic_array() to __get_buf() (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: core: add external vBus supply support for ulpi phy (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: dwc3: Add snps,ulpi-ext-vbus-drv quirk (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: allow evaluated properties in OHCI controllers (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: usb-device: make "compatible" optional (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: document extcon property (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: snps,dwc3: Allow power-domains property (Desnes Nunes) [RHEL-13058]
  - usb: host: xhci-tegra: Drop using of_irq_parse_one() (Desnes Nunes) [RHEL-13058]
  - dt-bindings: Fix SPI and I2C bus node names in examples (Desnes Nunes) [RHEL-13058]
  - usb: gadget: Use correct endianness of the wLength field for WebUSB (Desnes Nunes) [RHEL-13058]
  - usb: gadget: add WebUSB landing page support (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: pci: add support for the Intel Meteor Lake-S (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: Fix a typo in field name (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: xilinx: Remove unused of_gpio,h (Desnes Nunes) [RHEL-13058]
  - usb: dwc3: pci: add support for the Intel Meteor Lake-M (Desnes Nunes) [RHEL-13058]
  - USB: dwc3: fix memory leak with using debugfs_lookup() (Desnes Nunes) [RHEL-13058]
  - dt-bindings: usb: dwc3-imx8mp: add power domain property (Desnes Nunes) [RHEL-13058]
  - ipmi: Explicitly include correct DT includes (Tony Camuso) [RHEL-12707]
  - ipmi_si: fix -Wvoid-pointer-to-enum-cast warning (Tony Camuso) [RHEL-12707]
  - ipmi: fix potential deadlock on &kcs_bmc->lock (Tony Camuso) [RHEL-12707]
  - ipmi_si: fix a memleak in try_smi_init() (Tony Camuso) [RHEL-12707]
  - ipmi: Change request_module to request_module_nowait (Tony Camuso) [RHEL-12707]
  - ipmi:ssif: Fix a memory leak when scanning for an adapter (Tony Camuso) [RHEL-12707]
  - ipmi:ssif: Add check for kstrdup (Tony Camuso) [RHEL-12707]
  - ipmi_watchdog: Fix read syscall not responding to signals during sleep (Tony Camuso) [RHEL-12707]
  - ipmi:ssif: Drop if blocks with always false condition (Tony Camuso) [RHEL-12707]
  - ipmi: fix SSIF not responding under certain cond. (Tony Camuso) [RHEL-12707]
  - ipmi:ssif: Add send_retries increment (Tony Camuso) [RHEL-12707]
  - char:ipmi:Fix spelling mistake "asychronously" -> "asynchronously" (Tony Camuso) [RHEL-12707]
  - ipmi: simplify sysctl registration (Tony Camuso) [RHEL-12707]
  - ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it (Tony Camuso) [RHEL-12707]
  - vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() (Alex Williamson) [RHEL-14318]
  - vfio: Do not allow !ops->dma_unmap in vfio_pin/unpin_pages() (Alex Williamson) [RHEL-14318]
  - vfio: align capability structures (Alex Williamson) [RHEL-14318]
  - vfio/type1: fix cap_migration information leak (Alex Williamson) [RHEL-14318]
  - vfio/fsl-mc: Use module_fsl_mc_driver macro to simplify the code (Alex Williamson) [RHEL-14318]
  - vfio: Commonize combine_ranges for use in other VFIO drivers (Alex Williamson) [RHEL-14318]
  - kvm/vfio: avoid bouncing the mutex when adding and deleting groups (Alex Williamson) [RHEL-14318]
  - kvm/vfio: ensure kvg instance stays around in kvm_vfio_group_add() (Alex Williamson) [RHEL-14318]
  - docs: vfio: Add vfio device cdev description (Alex Williamson) [RHEL-14318]
  - vfio: Compile vfio_group infrastructure optionally (Alex Williamson) [RHEL-14318]
  - vfio: Move the IOMMU_CAP_CACHE_COHERENCY check in __vfio_register_dev() (Alex Williamson) [RHEL-14318]
  - vfio: Add VFIO_DEVICE_[AT|DE]TACH_IOMMUFD_PT (Alex Williamson) [RHEL-14318]
  - vfio: Add VFIO_DEVICE_BIND_IOMMUFD (Alex Williamson) [RHEL-14318]
  - vfio: Avoid repeated user pointer cast in vfio_device_fops_unl_ioctl() (Alex Williamson) [RHEL-14318]
  - iommufd: Add iommufd_ctx_from_fd() (Alex Williamson) [RHEL-14318]
  - vfio: Test kvm pointer in _vfio_device_get_kvm_safe() (Alex Williamson) [RHEL-14318]
  - vfio: Add cdev for vfio_device (Alex Williamson) [RHEL-14318]
  - vfio: Move device_del() before waiting for the last vfio_device registration refcount (Alex Williamson) [RHEL-14318]
  - vfio: Move vfio_device_group_unregister() to be the first operation in unregister (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: Add detach_ioas support for emulated VFIO devices (Alex Williamson) [RHEL-14318]
  - iommufd/device: Add iommufd_access_detach() API (Alex Williamson) [RHEL-14318]
  - iommufd: Call iopt_area_contig_done() under the lock (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: Add detach_ioas support for physical VFIO devices (Alex Williamson) [RHEL-14318]
  - vfio: Record devid in vfio_device_file (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: Split bind/attach into two steps (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: Move noiommu compat validation out of vfio_iommufd_bind() (Alex Williamson) [RHEL-14318]
  - vfio: Make vfio_df_open() single open for device cdev path (Alex Williamson) [RHEL-14318]
  - vfio: Add cdev_device_open_cnt to vfio_group (Alex Williamson) [RHEL-14318]
  - vfio: Block device access via device fd until device is opened (Alex Williamson) [RHEL-14318]
  - vfio: Pass struct vfio_device_file * to vfio_device_open/close() (Alex Williamson) [RHEL-14318]
  - kvm/vfio: Accept vfio device file from userspace (Alex Williamson) [RHEL-14318]
  - kvm/vfio: Prepare for accepting vfio device fd (Alex Williamson) [RHEL-14318]
  - vfio: Accept vfio device file in the KVM facing kAPI (Alex Williamson) [RHEL-14318]
  - vfio: Refine vfio file kAPIs for KVM (Alex Williamson) [RHEL-14318]
  - vfio: Allocate per device file structure (Alex Williamson) [RHEL-14318]
  - vfio/pci: Allow passing zero-length fd array in VFIO_DEVICE_PCI_HOT_RESET (Alex Williamson) [RHEL-14318]
  - vfio/pci: Copy hot-reset device info to userspace in the devices loop (Alex Williamson) [RHEL-14318]
  - vfio/pci: Extend VFIO_DEVICE_GET_PCI_HOT_RESET_INFO for vfio device cdev (Alex Williamson) [RHEL-14318]
  - vfio: Add helper to search vfio_device in a dev_set (Alex Williamson) [RHEL-14318]
  - vfio: Mark cdev usage in vfio_device (Alex Williamson) [RHEL-14318]
  - iommufd: Add helper to retrieve iommufd_ctx and devid (Alex Williamson) [RHEL-14318]
  - iommufd: Add iommufd_ctx_has_group() (Alex Williamson) [RHEL-14318]
  - iommufd: Reserve all negative IDs in the iommufd xarray (Alex Williamson) [RHEL-14318]
  - vfio/pci: Move the existing hot reset logic to be a helper (Alex Williamson) [RHEL-14318]
  - vfio/pci: Update comment around group_fd get in vfio_pci_ioctl_pci_hot_reset() (Alex Williamson) [RHEL-14318]
  - vfio/mdev: Move the compat_class initialization to module init (Alex Williamson) [RHEL-14318]
  - vfio/fsl: Create Kconfig sub-menu (Alex Williamson) [RHEL-14318]
  - redhat/configs: Disable CONFIG_VFIO_AMBA (Alex Williamson) [RHEL-14318]
  - vfio/platform: Cleanup Kconfig (Alex Williamson) [RHEL-14318]
  - vfio/pci: Cleanup Kconfig (Alex Williamson) [RHEL-14318]
  - vfio/pci-core: Add capability for AtomicOp completer support (Alex Williamson) [RHEL-14318]
  - vfio/pci: Clear VFIO_IRQ_INFO_NORESIZE for MSI-X (Alex Williamson) [RHEL-14318]
  - vfio/pci: Support dynamic MSI-X (Alex Williamson) [RHEL-14318]
  - vfio/pci: Probe and store ability to support dynamic MSI-X (Alex Williamson) [RHEL-14318]
  - vfio/pci: Use bitfield for struct vfio_pci_core_device flags (Alex Williamson) [RHEL-14318]
  - vfio/pci: Update stale comment (Alex Williamson) [RHEL-14318]
  - vfio/pci: Remove interrupt context counter (Alex Williamson) [RHEL-14318]
  - vfio/pci: Use xarray for interrupt context storage (Alex Williamson) [RHEL-14318]
  - vfio/pci: Move to single error path (Alex Williamson) [RHEL-14318]
  - vfio/pci: Prepare for dynamic interrupt context storage (Alex Williamson) [RHEL-14318]
  - vfio/pci: Remove negative check on unsigned vector (Alex Williamson) [RHEL-14318]
  - vfio/pci: Consolidate irq cleanup on MSI/MSI-X disable (Alex Williamson) [RHEL-14318]
  - vfio/ccw: use struct_size() helper (Alex Williamson) [RHEL-14318]
  - vfio/ccw: replace one-element array with flexible-array member (Alex Williamson) [RHEL-14318]
  - vfio/type1: check pfn valid before converting to struct page (Alex Williamson) [RHEL-14318]
  - docs: kvm: vfio: Suggest KVM_DEV_VFIO_GROUP_ADD vs VFIO_GROUP_GET_DEVICE_FD ordering (Alex Williamson) [RHEL-14318]
  - vfio: correct kdoc for ops structures (Alex Williamson) [RHEL-14318]
  - vfio/pci: Add DVSEC PCI Extended Config Capability to user visible list. (Alex Williamson) [RHEL-14318]
  - vfio: Check the presence for iommufd callbacks in __vfio_register_dev() (Alex Williamson) [RHEL-14318]
  - vfio/mdev: Uses the vfio emulated iommufd ops set in the mdev sample drivers (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: Make vfio_iommufd_emulated_bind() return iommufd_access ID (Alex Williamson) [RHEL-14318]
  - vfio-iommufd: No need to record iommufd_ctx in vfio_device (Alex Williamson) [RHEL-14318]
  - iommufd: Create access in vfio_iommufd_emulated_bind() (Alex Williamson) [RHEL-14318]
  - iommu/iommufd: Pass iommufd_ctx pointer in iommufd_get_ioas() (Alex Williamson) [RHEL-14318]
  - nvme: avoid bogus CRTO values (Maurizio Lombardi) [RHEL-11472]
  - nvme-pci: do not set the NUMA node of device if it has none (Maurizio Lombardi) [RHEL-11472]
  - nvme: host: hwmon: constify pointers to hwmon_channel_info (Maurizio Lombardi) [RHEL-11472]
  - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Maurizio Lombardi) [RHEL-11472]
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G (Maurizio Lombardi) [RHEL-11472]
  - scsi: nvme: zns: Set zone limits before revalidating zones (Maurizio Lombardi) [RHEL-11472]
  - nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices (Maurizio Lombardi) [RHEL-11472]
  - nvme-fc: fix race between error recovery and creating association (Maurizio Lombardi) [RHEL-11472]
  - nvme-fc: return non-zero status code when fails to create association (Maurizio Lombardi) [RHEL-11472]
  - nvme: fix parameter check in nvme_fault_inject_init() (Maurizio Lombardi) [RHEL-11472]
  - nvme: warn only once for legacy uuid attribute (Maurizio Lombardi) [RHEL-11472]
  - nvme: forward port sysfs delete fix (Maurizio Lombardi) [RHEL-11472]
  - nvme: skip optional id ctrl csi if it failed (Maurizio Lombardi) [RHEL-11472]
  - nvme-core: use nvme_ns_head_multipath instead of ns->head->disk (Maurizio Lombardi) [RHEL-11472]
  - nvmet-fcloop: Do not wait on completion when unregister fails (Maurizio Lombardi) [RHEL-11472]
  - nvme: Increase block size variable size to 32-bit (Maurizio Lombardi) [RHEL-11472]
  - nvme-fcloop: no need to return from void function (Maurizio Lombardi) [RHEL-11472]
  - nvmet-auth: remove unnecessary break after goto (Maurizio Lombardi) [RHEL-11472]
  - nvmet-auth: remove some dead code (Maurizio Lombardi) [RHEL-11472]
  - nvme: move sysfs code to a dedicated sysfs.c file (Maurizio Lombardi) [RHEL-11472]
  - nvme-fabrics: check hostid using uuid_equal (Maurizio Lombardi) [RHEL-11472]
  - nvme-fabrics: unify common code in admin and io queue connect (Maurizio Lombardi) [RHEL-11472]
  - nvmet: reorder fields in 'struct nvmefc_fcp_req' (Maurizio Lombardi) [RHEL-11472]
  - nvmet: reorder fields in 'struct nvme_dhchap_queue_context' (Maurizio Lombardi) [RHEL-11472]
  - nvmet: reorder fields in 'struct nvmf_ctrl_options' (Maurizio Lombardi) [RHEL-11472]
  - nvme: reorder fields in 'struct nvme_ctrl' (Maurizio Lombardi) [RHEL-11472]
  - nvmet: reorder fields in 'struct nvmet_sq' (Maurizio Lombardi) [RHEL-11472]
  - nvme-fabrics: add queue setup helpers (Maurizio Lombardi) [RHEL-11472]
  - nvme-pci: cleaning up nvme_pci_init_request (Maurizio Lombardi) [RHEL-11472]
  - nvme-rdma: fix typo in comment (Maurizio Lombardi) [RHEL-11472]
  - nvme-tcp: fix a possible UAF when failing to allocate an io queue (Maurizio Lombardi) [RHEL-11472]
  - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (Maurizio Lombardi) [RHEL-11472]
  - nvme-tcp: fix nvme_tcp_term_pdu to match spec (Maurizio Lombardi) [RHEL-11472]
  - nvme: send Identify with CNS 06h only to I/O controllers (Maurizio Lombardi) [RHEL-11472]
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (John Meneghini) [RHEL-11488 RHEL-11492] {CVE-2023-5178}
  - sched: remove wait bookmarks (Carlos Maiolino) [RHEL-5335]
  - filemap: remove use of wait bookmarks (Carlos Maiolino) [RHEL-5335]
  - ext4: fix rec_len verify error (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused parameter from ext4_mb_new_blocks_simple() (Carlos Maiolino) [RHEL-5335]
  - ext4: fix wrong unit use in ext4_mb_new_blocks (Carlos Maiolino) [RHEL-5335]
  - ext4: fix wrong unit use in ext4_mb_clear_bb (Carlos Maiolino) [RHEL-5335]
  - ext4: treat stripe in block unit (Carlos Maiolino) [RHEL-5335]
  - ext4: fix wrong unit use in ext4_mb_find_by_goal (Carlos Maiolino) [RHEL-5335]
  - ext4: fix wrong unit use in ext4_mb_normalize_request (Carlos Maiolino) [RHEL-5335]
  - ext4: only check dquot_initialize_needed() when debugging (Carlos Maiolino) [RHEL-5335]
  - Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled" (Carlos Maiolino) [RHEL-5335]
  - Revert "ext4: remove ac->ac_found > sbi->s_mb_min_to_scan dead check in ext4_mb_check_limits" (Carlos Maiolino) [RHEL-5335]
  - ext4: enable the lazy init thread when remounting read/write (Carlos Maiolino) [RHEL-5335]
  - ext4: fix fsync for non-directories (Carlos Maiolino) [RHEL-5335]
  - ext4: add lockdep annotations for i_data_sem for ea_inode's (Carlos Maiolino) [RHEL-5335]
  - ext4: disallow ea_inodes with extended attributes (Carlos Maiolino) [RHEL-5335]
  - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (Carlos Maiolino) [RHEL-5335]
  - ext4: add EA_INODE checking to ext4_iget() (Carlos Maiolino) [RHEL-5335]
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Carlos Maiolino) [RHEL-5335]
  - ext4: add bounds checking in get_max_inline_xattr_value_size() (Carlos Maiolino) [RHEL-5335]
  - ext4: add indication of ro vs r/w mounts in the mount message (Carlos Maiolino) [RHEL-5335]
  - ext4: fix deadlock when converting an inline directory in nojournal mode (Carlos Maiolino) [RHEL-5335]
  - ext4: improve error recovery code paths in __ext4_remount() (Carlos Maiolino) [RHEL-5335]
  - ext4: improve error handling from ext4_dirhash() (Carlos Maiolino) [RHEL-5335]
  - ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled (Carlos Maiolino) [RHEL-5335]
  - ext4: check iomap type only if ext4_iomap_begin() does not fail (Carlos Maiolino) [RHEL-5335]
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Carlos Maiolino) [RHEL-5335]
  - ext4: fix data races when using cached status extents (Carlos Maiolino) [RHEL-5335]
  - ext4: avoid deadlock in fs reclaim with page writeback (Carlos Maiolino) [RHEL-5335]
  - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Carlos Maiolino) [RHEL-5335]
  - ext4: fix lockdep warning when enabling MMP (Carlos Maiolino) [RHEL-5335]
  - ext4: fix WARNING in mb_find_extent (Carlos Maiolino) [RHEL-5335]
  - ext4: reflect error codes from ext4_multi_mount_protect() to its callers (Carlos Maiolino) [RHEL-5335]
  - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Carlos Maiolino) [RHEL-5335]
  - ext4: fix i_disksize exceeding i_size problem in paritally written case (Carlos Maiolino) [RHEL-5335]
  - jdb2: Don't refuse invalidation of already invalidated buffers (Carlos Maiolino) [RHEL-5335]
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow (Carlos Maiolino) [RHEL-5335]
  - ext4: add two helper functions extent_logical_end() and pa_logical_end() (Carlos Maiolino) [RHEL-5335]
  - ext4: fix rbtree traversal bug in ext4_mb_use_preallocated (Carlos Maiolino) [RHEL-5335]
  - ext4: Remove unused extern variables declaration (Carlos Maiolino) [RHEL-5335]
  - ext4: mballoc: Remove useless setting of ac_criteria (Carlos Maiolino) [RHEL-5335]
  - ext4: try all groups in ext4_mb_new_blocks_simple (Carlos Maiolino) [RHEL-5335]
  - ext4: remove ext4_block_group and ext4_block_group_offset declaration (Carlos Maiolino) [RHEL-5335]
  - ext4: add EXT4_MB_HINT_GOAL_ONLY test in ext4_mb_use_preallocated (Carlos Maiolino) [RHEL-5335]
  - ext4: fix unit mismatch in ext4_mb_new_blocks_simple (Carlos Maiolino) [RHEL-5335]
  - ext4: Remove the logic to trim inode PAs (Carlos Maiolino) [RHEL-5335]
  - ext4: Use rbtrees to manage PAs instead of inode i_prealloc_list (Carlos Maiolino) [RHEL-5335]
  - ext4: Convert pa->pa_inode_list and pa->pa_obj_lock into a union (Carlos Maiolino) [RHEL-5335]
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Carlos Maiolino) [RHEL-5335]
  - ext4: Abstract out overlap fix/check logic in ext4_mb_normalize_request() (Carlos Maiolino) [RHEL-5335]
  - ext4: Move overlap assert logic into a separate function (Carlos Maiolino) [RHEL-5335]
  - ext4: Refactor code in ext4_mb_normalize_request() and ext4_mb_use_preallocated() (Carlos Maiolino) [RHEL-5335]
  - ext4: Refactor code related to freeing PAs (Carlos Maiolino) [RHEL-5335]
  - ext4: Stop searching if PA doesn't satisfy non-extent file (Carlos Maiolino) [RHEL-5335]
  - ext4: convert some BUG_ON's in mballoc to use WARN_RATELIMITED instead (Carlos Maiolino) [RHEL-5335]
  - ext4: avoid unnecessary pointer dereference in ext4_mb_normalize_request (Carlos Maiolino) [RHEL-5335]
  - ext4: fix typos in mballoc (Carlos Maiolino) [RHEL-5335]
  - ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple (Carlos Maiolino) [RHEL-5335]
  - ext4: remove comment code ext4_discard_preallocations (Carlos Maiolino) [RHEL-5335]
  - ext4: remove repeat assignment to ac_f_ex (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary goto in ext4_mb_mark_diskspace_used (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary count2 in ext4_free_data_in_buddy (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary exit_meta_group_info tag (Carlos Maiolino) [RHEL-5335]
  - ext4: use best found when complex scan of group finishs (Carlos Maiolino) [RHEL-5335]
  - ext4: remove ac->ac_found > sbi->s_mb_min_to_scan dead check in ext4_mb_check_limits (Carlos Maiolino) [RHEL-5335]
  - ext4: remove dead check in mb_buddy_mark_free (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary check in ext4_mb_new_blocks (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary e4b->bd_buddy_page check in ext4_mb_load_buddy_gfp (Carlos Maiolino) [RHEL-5335]
  - ext4: Remove unnecessary release when memory allocation failed in ext4_mb_init_cache (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused return value of ext4_mb_try_best_found and ext4_mb_free_metadata (Carlos Maiolino) [RHEL-5335]
  - ext4: add missed brelse in ext4_free_blocks_simple (Carlos Maiolino) [RHEL-5335]
  - ext4: protect pa->pa_free in ext4_discard_allocated_blocks (Carlos Maiolino) [RHEL-5335]
  - ext4: correct start of used group pa for debug in ext4_mb_use_group_pa (Carlos Maiolino) [RHEL-5335]
  - ext4: correct calculation of s_mb_preallocated (Carlos Maiolino) [RHEL-5335]
  - ext4: get correct ext4_group_info in ext4_mb_prefetch_fini (Carlos Maiolino) [RHEL-5335]
  - ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set (Carlos Maiolino) [RHEL-5335]
  - ext4: set goal start correctly in ext4_mb_normalize_request (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused group parameter in ext4_block_bitmap_csum_set (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused group parameter in ext4_block_bitmap_csum_verify (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused group parameter in ext4_inode_bitmap_csum_set (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unused group parameter in ext4_inode_bitmap_csum_verify (Carlos Maiolino) [RHEL-5335]
  - ext4: improve inode table blocks counting in ext4_num_overhead_clusters (Carlos Maiolino) [RHEL-5335]
  - ext4: stop trying to verify just initialized bitmap in ext4_read_block_bitmap_nowait (Carlos Maiolino) [RHEL-5335]
  - ext4: remove stale comment in ext4_init_block_bitmap (Carlos Maiolino) [RHEL-5335]
  - Revert "ext4: remove unnecessary check in ext4_bg_num_gdb_nometa" (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unnecessary check in ext4_bg_num_gdb_nometa (Carlos Maiolino) [RHEL-5335]
  - ext4: call ext4_bg_num_gdb_[no]meta directly in ext4_num_base_meta_clusters (Carlos Maiolino) [RHEL-5335]
  - ext4: correct validation check of inode table in ext4_valid_block_bitmap (Carlos Maiolino) [RHEL-5335]
  - ext4: properly handle error of ext4_init_block_bitmap in ext4_read_block_bitmap_nowait (Carlos Maiolino) [RHEL-5335]
  - ext4: Move mpage_page_done() calls after error handling (Carlos Maiolino) [RHEL-5335]
  - ext4: Move page unlocking out of mpage_submit_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: Don't unlock page in ext4_bio_write_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: Mark page for delayed dirtying only if it is pinned (Carlos Maiolino) [RHEL-5335]
  - ext4: Use nr_to_write directly in mpage_prepare_extent_to_map() (Carlos Maiolino) [RHEL-5335]
  - ext4: Update stale comment about write constraints (Carlos Maiolino) [RHEL-5335]
  - ext4: convert mext_page_double_lock() to mext_folio_double_lock() (Carlos Maiolino) [RHEL-5335]
  - ext4: simplify ext4_readpage_limit() (Carlos Maiolino) [RHEL-5335]
  - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Carlos Maiolino) [RHEL-5335]
  - ext4: avoid unaccounted block allocation when expanding inode (Carlos Maiolino) [RHEL-5335]
  - ext4: initialize quota before expanding inode in setproject ioctl (Carlos Maiolino) [RHEL-5335]
  - ext4: stop providing .writepage hook (Carlos Maiolino) [RHEL-5335]
  - mm: export buffer_migrate_folio_norefs() (Carlos Maiolino) [RHEL-5335]
  - ext4: switch to using write_cache_pages() for data=journal writeout (Carlos Maiolino) [RHEL-5335]
  - jbd2: switch jbd2_submit_inode_data() to use fs-provided hook for data writeout (Carlos Maiolino) [RHEL-5335]
  - ext4: switch to using ext4_do_writepages() for ordered data writeout (Carlos Maiolino) [RHEL-5335]
  - ext4: move percpu_rwsem protection into ext4_writepages() (Carlos Maiolino) [RHEL-5335]
  - ext4: provide ext4_do_writepages() (Carlos Maiolino) [RHEL-5335]
  - ext4: add support for writepages calls that cannot map blocks (Carlos Maiolino) [RHEL-5335]
  - ext4: drop pointless IO submission from ext4_bio_write_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: remove nr_submitted from ext4_bio_write_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: remove unneeded check of nr_to_submit (Carlos Maiolino) [RHEL-5335]
  - ext4: move keep_towrite handling to ext4_bio_write_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: handle redirtying in ext4_bio_write_page() (Carlos Maiolino) [RHEL-5335]
  - ext4: make ext4_mb_initialize_context return void (Carlos Maiolino) [RHEL-5335]
  - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (Carlos Maiolino) [RHEL-5335]
  - ext4: don't fail GETFSUUID when the caller provides a long buffer (Carlos Maiolino) [RHEL-5335]
  - ext4: dont return EINVAL from GETFSUUID when reporting UUID length (Carlos Maiolino) [RHEL-5335]
  - ext4: fix error code return to user-space in ext4_get_branch() (Carlos Maiolino) [RHEL-5335]
  - ext4: replace kmem_cache_create with KMEM_CACHE (Carlos Maiolino) [RHEL-5335]
  - ext4: correct inconsistent error msg in nojournal mode (Carlos Maiolino) [RHEL-5335]
  - ext4: print file system UUID on mount, remount and unmount (Carlos Maiolino) [RHEL-5335]
  - ext4: init quota for 'old.inode' in 'ext4_rename' (Carlos Maiolino) [RHEL-5335]
  - ext4: simplify fast-commit CRC calculation (Carlos Maiolino) [RHEL-5335]
  - ext4: fix use-after-free in ext4_orphan_cleanup (Carlos Maiolino) [RHEL-5335]
  - ext4: don't allow journal inode to have encrypt flag (Carlos Maiolino) [RHEL-5335]
  - ext4: fix bug_on in __es_tree_search caused by bad quota inode (Carlos Maiolino) [RHEL-5335]
  - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Carlos Maiolino) [RHEL-5335]
  - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Carlos Maiolino) [RHEL-5335]
  - ext4: add helper to check quota inums (Carlos Maiolino) [RHEL-5335]
  - ext4: remove trailing newline from ext4_msg() message (Carlos Maiolino) [RHEL-5335]
  - ext4: split ext4_journal_start trace for debug (Carlos Maiolino) [RHEL-5335]
  - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-5335]
  - ext4: remove redundant variable err (Carlos Maiolino) [RHEL-5335]
  - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Carlos Maiolino) [RHEL-5335]
  - fs/ext4: replace ternary operator with min()/max() and min_t() (Carlos Maiolino) [RHEL-5335]
  - ext4: check and assert if marking an no_delete evicting inode dirty (Carlos Maiolino) [RHEL-5335]
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Florian Westphal) [RHEL-8437] {CVE-2023-42753}
  - arm64: dts: imx8mq: Deduplicate PCIe clock-names property (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mm-verdin: Do not power down eth-phy (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mp: fix address length for LCDIF2 (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mp: Fix LCDIF2 node clock order (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mp: Drop simple-bus from fsl,imx8mp-media-blk-ctrl (Steve Best) [RHEL-2711]
  - Revert "arm64: dts: ls1028a: sl28: get MAC addresses from VPD" (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (Steve Best) [RHEL-2711]
  - arm64: dts: verdin-imx8mp: unify gpio-key node name (Steve Best) [RHEL-2711]
  - arm64: dts: ls1028a: sl28: get MAC addresses from VPD (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mp: Add LCDIF2 & LDB nodes (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mp: use syscon for iomuxc-gpr (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mn: update iomuxc-gpr node name (Steve Best) [RHEL-2711]
  - arm64: dts: imx8mm: correct iomuxc-gpr compatible (Steve Best) [RHEL-2711]
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ricardo Robaina) [RHEL-7186 RHEL-7264] {CVE-2023-3812}
  - serial: fsl_lpuart: Reset prior to registration (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: don't break the on-going transfer when global reset (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: count tty buffer overruns (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: Add i.MXRT1050 support (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: add timeout for wait_event_interruptible in .shutdown() (Steve Best) [RHEL-2715]
  - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: do software reset for imx7ulp and imx8qxp (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: enable two stop bits for lpuart32 (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: fix the wrong mapbase value (Steve Best) [RHEL-2715]
  - tty: serial: fsl_lpuart: check dma_tx_in_progress in tx dma callback (Steve Best) [RHEL-2715]
  - Bluetooth: hci_sync: Fix handling of HCI_QUIRK_STRICT_DUPLICATE_FILTER (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix hci_link_tx_to RCU lock usage (Bastien Nocera) [RHEL-2530]
  - redhat/configs: Disable NXP Bluetooth driver by default (Bastien Nocera) [RHEL-2530]
  - New configs in net/bluetooth (Bastien Nocera) [RHEL-2530]
  - New configs in drivers/bluetooth (Bastien Nocera) [RHEL-2530]
  - PCI: Add locking to RMW PCI Express Capability Register accessors (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: Use correct address for memcpy() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: call disconnect callback before deleting conn (Bastien Nocera) [RHEL-2530]
  - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (Bastien Nocera) [RHEL-2530]
  - virtio_bt: call scheduler when we free unused buffs (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Use kmemdup() to replace kzalloc + memcpy (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: fix Set CIG Parameters error status handling (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (Bastien Nocera) [RHEL-2530]
  - Bluetooth: fix use-bdaddr-property quirk (Bastien Nocera) [RHEL-2530]
  - Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Bastien Nocera) [RHEL-2530 RHEL-2717] {CVE-2023-40283}
  - Bluetooth: L2CAP: Fix use-after-free (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btqca: use le32_to_cpu for ver.soc_id (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add device 6655:8771 to device tables (Bastien Nocera) [RHEL-2530]
  - dt-bindings: net: bluetooth: nxp: Add missing type for "fw-init-baudrate" (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix potential use-after-free when clear keys (Bastien Nocera) [RHEL-2530]
  - Bluetooth: HCI: Introduce HCI_QUIRK_BROKEN_LE_CODED (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: avoid checking uninitialized CIG/CIS ids (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix not allowing valid CIS ID (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix modifying handle while aborting (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: handle bound CIS cleanup via hci_conn (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Notify user space about failed bis connections (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Always allocate unique handles (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix not handling ISO_LINK in hci_abort_conn_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Consolidate code for aborting connections (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Support multiple BIGs (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Load FW v2 otherwise FW v1 for RTL8852C (Bastien Nocera) [RHEL-2530]
  - Bluetooth: msft: Extended monitor tracking by address filter (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Correct the length of the HCI command for drop fw (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Add Realtek devcoredump support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Add missing MODULE_FIRMWARE declarations (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: do not emit new LE Create CIS if previous is pending (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: Fix parsing of CIS Established Event (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Rework sync_interval to be sync_factor (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Add support for connecting multiple BISes (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: use hci_sync for setting CIG parameters (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Fix bluetooth on Intel Macbook 2014 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link (Bastien Nocera) [RHEL-2530]
  - Bluetooth: SCO: fix sco_conn related locking and validity issues (Bastien Nocera) [RHEL-2530]
  - Bluetooth: coredump: fix building with coredump disabled (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: fix iso_conn related locking and validity issues (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Add missing checks for invalid DCID (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: use correct CIS order in Set CIG Parameters event (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix l2cap_disconnect_req deadlock (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: fix debugfs registration (Bastien Nocera) [RHEL-2530]
  - Bluetooth: fix debugfs registration (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: consider right CIS when removing CIG at cleanup (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Fix compiler warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Unlink CISes when LE disconnects in hci_conn_del (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix UAF in hci_conn_hash_flush again (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Refcnt drop must be placed last in hci_conn_unlink (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix potential double free caused by hci_conn_unlink (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add WCN6855 devcoredump support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Enable flow control before checking boot signature (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Cancel sync command before suspend and power off (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Add the support for RTL8851B (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Fix sparse warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Firmware format v2 support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Devcoredump: Fix storing u32 without specifying byte order issue (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Bastien Nocera) [RHEL-2530]
  - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Bastien Nocera) [RHEL-2530]
  - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add new quirk for broken set random RPA timeout for ATS2851 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix not waiting for HCI_EVT_LE_CIS_ESTABLISHED (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix not matching by CIS ID (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Add support for linking multiple hcon (Bastien Nocera) [RHEL-2530]
  - Bluetooth: vhci: Fix info leak in force_devcd_write() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: mark OF related data as maybe unused (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: remove extra line in hci_le_big_create_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: fix inconsistent indenting (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: No need to check the received bootloader signature (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Disable Power Save feature on startup (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Deasset UART break before closing serdev device (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btnxpuart: Add support to download helper FW file for w8997 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: Add Acer Iconia One 7 B1-750 to the bcm_broken_irq_dmi_table (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: Add Lenovo Yoga Tablet 2 830 / 1050 to the bcm_broken_irq_dmi_table (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: Limit bcm43430a0 / bcm43430a1 baudrate to 2000000 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_h5: Complements reliable packet processing logic (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Enable all supported LE PHY by default (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Split bt_iso_qos into dedicated structures (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Add Intel devcoredump support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add btusb devcoredump support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add vhci devcoredump support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add support for hci devcoredump (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Add LE States quirk support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: Add support for QTI Bluetooth chip wcn6855 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: check for NULL in btrtl_set_quirks() (Bastien Nocera) [RHEL-2530]
  - bluetooth: Add device 13d3:3571 to device tables (Bastien Nocera) [RHEL-2530]
  - bluetooth: Add device 0bda:887b to device tables (Bastien Nocera) [RHEL-2530]
  - Bluetooth: NXP: select CONFIG_CRC8 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: NXP: Add protocol support for NXP Bluetooth chipsets (Bastien Nocera) [RHEL-2530]
  - dt-bindings: net: bluetooth: Add NXP bluetooth support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_ldisc: Fix tty_set_termios() return value assumptions (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Improve support for Actions Semi ATS2851 based devices (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: add support for the RTL8723CS (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add new quirk for broken local ext features page 2 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btmtkuart: mark OF related data as maybe unused (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: mark OF related data as maybe unused (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btmrvl_sdio: mark OF related data as maybe unused (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_ll: drop of_match_ptr for ID table (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Delay identity address updates (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Remove duplicate statement (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Convert MSFT filter HCI cmd to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Don't wait peer's reply when powering off (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add VID/PID 0489/e0e4 for MediaTek MT7922 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_h5: btrtl: Add support for RTL8821CS (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add new PID/VID 04ca:3801 for MT7663 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix smatch warning (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_core: Make hci_conn_hash_add append to the list (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Add support for RTL8852BS (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_mrvl: Add serdev support for 88W8997 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_mrvl: use maybe_unused macro for device tree ids (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Do not require hardcoded interface numbers (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: Use BIT macro when defining bitfields (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Set ISO Data Path on broadcast sink (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix possible UAF (Bastien Nocera) [RHEL-2530]
  - Bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt (Bastien Nocera) [RHEL-2530]
  - Bluetooth: SCO: Fix possible circular locking dependency on sco_connect_cfm (Bastien Nocera) [RHEL-2530]
  - bluetooth: btbcm: Fix logic error in forming the board name. (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix race condition in hidp_session_thread (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix printing errors if LE Connection times out (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (Bastien Nocera) [RHEL-2530]
  - Bluetooth: HCI: Fix global-out-of-bounds (Bastien Nocera) [RHEL-2530 RHEL-2556] {CVE-2023-28866}
  - Bluetooth: mgmt: Fix MGMT add advmon with RSSI command (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix responding with wrong PDU type (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btinel: Check ACPI handle for NULL before accessing (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Remove "Power-on" check from Mesh feature (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix race condition in hci_cmd_sync_clear (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Iterate only bluetooth device ACPI entries (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: fix timestamped HCI ISO data packet parsing (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Remove detection of ISO packets over bulk (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Resume adv with no RPA when active scan (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Set Per Platform Antenna Gain(PPAG) (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Make sure LE create conn cancel is sent when timeout (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Free potentially unfreed SCO connection (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: get wakeup status from serdev device handle (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix potential user-after-free (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: add CIS feature bits to controller information (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds (Bastien Nocera) [RHEL-2530]
  - Bluetooth: HCI: Replace zero-length arrays with flexible-array members (Bastien Nocera) [RHEL-2530]
  - Bluetooth: qca: Fix sparse warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix issue with Actions Semi ATS2851 based devices (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Use crypto_wait_req (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix possible deadlock in rfcomm_sk_state_change (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Fix possible circular locking dependency (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: Fix Invalid wait context (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Fix possible circular locking dependency (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: Fix driver shutdown on closed serdev (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix memory leaks (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix a buffer overflow in mgmt_mesh_add() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Wait for HCI_OP_WRITE_AUTH_PAYLOAD_TO to complete (Bastien Nocera) [RHEL-2530]
  - Bluetooth: ISO: Avoid circular locking dependency (Bastien Nocera) [RHEL-2530]
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Fix existing sparce warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Fix existing sparce warning (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Fix new sparce warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add a new PID/VID 13d3/3549 for RTL8822CU (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add a new VID/PID 0489/e0f2 for MT7922 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm4377: Fix missing pci_disable_device() on error in bcm4377_probe() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add Realtek 8761BUV support ID 0x2B89:0x8761 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm4377: Add new driver for BCM4377 PCIe boards (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add quirk to disable MWS Transport Configuration (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add quirk to disable extended scanning (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: Ignore reserved bits in LE Extended Adv Report (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_bcm: Add CYW4373A0 support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Use kzalloc instead of kmalloc/memset (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add more device IDs for WCN6855 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix EALREADY and ELOOP cases in bt_status() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add CONFIG_BT_LE_L2CAP_ECRED (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Default CONFIG_BT_HCIBTUSB_POLL_SYNC=y (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add CONFIG_BT_HCIBTUSB_POLL_SYNC (Bastien Nocera) [RHEL-2530]
  - virtio_bt: Fix alignment in configuration struct (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_core: fix error handling in hci_register_dev() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Use kzalloc instead of kmalloc/memset (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: only assign wakeup with serial port support (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: use HCI dst_type values also for BIS (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Ignore zero length of USB packets on ALT 6 for specific chip (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btrtl: Add btrealtek data struct (Bastien Nocera) [RHEL-2530]
  - Bluetooth: virtio_bt: fix device removal (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix not able to set force_static_address (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix not setting static address (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Work around SCO over USB HCI design defect (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Introduce generic USB reset (Bastien Nocera) [RHEL-2530]
  - btusb: Avoid reset of ISOC endpoint alt settings to zero (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_qca: Fix the teardown problem for real (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix crash when replugging CSR fake controllers (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix not cleanup led when bt_init fails (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Fix support for Read Local Supported Codecs V2 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Remove codec id field in vendor codec definition (Bastien Nocera) [RHEL-2530]
  - Bluetooth: silence a dmesg error message in hci_request.c (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_conn: add missing hci_dev_put() in iso_listen_bis() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add debug message for CSR controllers (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Fix CSR clones again by re-adding ERR_DATA_REPORTING quirk (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Bastien Nocera) [RHEL-2530]
  - Bluetooth: virtio_bt: Use skb_put to set length (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: Fix not indicating power state (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: Fix user-after-free (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Call shutdown for HCI_USER_CHANNEL (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_core: Fix not handling link timeouts propertly (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_event: Make sure ISO events don't affect non-ISO connections (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_debugfs: Fix not checking conn->debugfs (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Bastien Nocera) [RHEL-2530]
  - Bluetooth: MGMT: fix zalloc-simple.cocci warnings (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (Bastien Nocera) [RHEL-2530]
  - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release (Bastien Nocera) [RHEL-2530]
  - Bluetooth: hci_sync: allow advertise when scan without RPA (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add a new VID/PID 0e8d/0608 for MT7921 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add a new PID/VID 13d3/3583 for MT7921 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btintel: Add support for Magnetor (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add a new PID/VID 13d3/3578 for MT7921 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Add experimental wrapper for MGMT based mesh (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Implement support for Mesh (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add BT device 0cb8:c549 from RTW8852AE to tables (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add RTL8761BUV device (Edimax BT-8500) (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: RTL8761BUV consistent naming (Bastien Nocera) [RHEL-2530]
  - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3592 (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Move hci_abort_conn to hci_conn.c (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Normalize HCI_OP_READ_ENC_KEY_SIZE cmdcmplt (Bastien Nocera) [RHEL-2530]
  - Bluetooth: convert hci_update_adv_data to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: move hci_get_random_address() to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Delete unreferenced hci_request code (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Move Adv Instance timer to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Convert SCO configure_datapath to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Delete unused hci_req_stop_discovery() (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Rework le_scan_restart for hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: Convert le_scan_disable timeout to hci_sync (Bastien Nocera) [RHEL-2530]
  - Bluetooth: clean up error pointer checking (Bastien Nocera) [RHEL-2530]
  - regmap: Account for register length in SMBus I/O limits (Mark Langsdorf) [RHEL-1023]
  - regmap: Drop initial version of maximum transfer length fixes (Mark Langsdorf) [RHEL-1023]
  - regmap: spi-avmm: Fix regmap_bus max_raw_write (Mark Langsdorf) [RHEL-1023]
  - drivers: base: cacheinfo: Update cpu_map_populated during CPU Hotplug (Mark Langsdorf) [RHEL-1023]
  - drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug (Mark Langsdorf) [RHEL-1023]
  - firmware_loader: Fix a NULL vs IS_ERR() check (Mark Langsdorf) [RHEL-1023]
  - driver core: class: properly reference count class_dev_iter() (Mark Langsdorf) [RHEL-1023]
  - regmap: Account for register length when chunking (Mark Langsdorf) [RHEL-1023]
  - device property: make device_property functions take const device * (Mark Langsdorf) [RHEL-1023]
  - driver core: update comments in device_rename() (Mark Langsdorf) [RHEL-1023]
  - driver core: Don't require dynamic_debug for initcall_debug probe timing (Mark Langsdorf) [RHEL-1023]
  - firmware_loader: rework crypto dependencies (Mark Langsdorf) [RHEL-1023]
  - firmware_loader: Strip off \n from customized path (Mark Langsdorf) [RHEL-1023]
  - cacheinfo: Adjust includes to remove of_device.h (Mark Langsdorf) [RHEL-1023]
  - of: Move CPU node related functions to their own file (Mark Langsdorf) [RHEL-1023]
  - regmap: allow upshifting register addresses before performing operations (Mark Langsdorf) [RHEL-1023]
  - PM: core: Remove unnecessary (void *) conversions (Mark Langsdorf) [RHEL-1023]
  - regmap: Pass irq_drv_data as a parameter for set_type_config() (Mark Langsdorf) [RHEL-1023]
  - tty: make tty_class a static const structure (Mark Langsdorf) [RHEL-1023]
  - driver core: class: remove struct class_interface * from callbacks (Mark Langsdorf) [RHEL-1023]
  - driver core: class: mark the struct class in struct class_interface constant (Mark Langsdorf) [RHEL-1023]
  - driver core: class: make class_register() take a const * (Mark Langsdorf) [RHEL-1023]
  - driver core: class: mark class_release() as taking a const * (Mark Langsdorf) [RHEL-1023]
  - pktcdvd: simplify the class_pktcdvd logic (Mark Langsdorf) [RHEL-1023]
  - driver core: remove incorrect comment for device_create* (Mark Langsdorf) [RHEL-1023]
  - regmap: Factor out single value register syncing (Mark Langsdorf) [RHEL-1023]
  - driver core: class: fix slab-use-after-free Read in class_register() (Mark Langsdorf) [RHEL-1023]
  - driver core: make sysfs_dev_char_kobj static (Mark Langsdorf) [RHEL-1023]
  - driver core: make sysfs_dev_block_kobj static (Mark Langsdorf) [RHEL-1023]
  - driver core: class: remove dev_kobj from struct class (Mark Langsdorf) [RHEL-1023]
  - driver core: clean up the logic to determine which /sys/dev/ directory to use (Mark Langsdorf) [RHEL-1023]
  - driver core: class: remove subsystem private pointer from struct class (Mark Langsdorf) [RHEL-1023]
  - driver core: create class_is_registered() (Mark Langsdorf) [RHEL-1023]
  - driver core: core: move to use class_to_subsys() (Mark Langsdorf) [RHEL-1023]
  - regmap: Removed compressed cache support (Mark Langsdorf) [RHEL-1023]
  - firmware_loader: Add debug message with checksum for FW file (Mark Langsdorf) [RHEL-1023]
  - redhat/configs: enable the new firmware loader debug logging (Mark Langsdorf) [RHEL-1023]
  - base: soc: populate machine name in soc_device_register if empty (Mark Langsdorf) [RHEL-1023]
  - driver core: class.c: convert to only use class_to_subsys (Mark Langsdorf) [RHEL-1023]
  - driver core: class: implement class_get/put without the private pointer. (Mark Langsdorf) [RHEL-1023]
  - zram: fix up permission for the hot_add sysfs file (Mark Langsdorf) [RHEL-1023]
  - driver core: class: mark the struct class for sysfs callbacks as constant (Mark Langsdorf) [RHEL-1023]
  - driver core: Add CONFIG_FW_DEVLINK_SYNC_STATE_TIMEOUT (Mark Langsdorf) [RHEL-1023]
  - redhat/configs: disable the new fw_devlink option (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: constify class_unregister/destroy() (Mark Langsdorf) [RHEL-1023]
  - driver core: Add a comment to set_primary_fwnode() on nullifying (Mark Langsdorf) [RHEL-1023]
  - driver core: move sysfs_dev_char_kobj out of class.h (Mark Langsdorf) [RHEL-1023]
  - driver core: class: fix documentation for class_create() (Mark Langsdorf) [RHEL-1023]
  - regmap: Support paging for buses with reg_read()/reg_write() (Mark Langsdorf) [RHEL-1023]
  - regmap: Clarify error for unknown cache types (Mark Langsdorf) [RHEL-1023]
  - regmap: Handle sparse caches in the default sync (Mark Langsdorf) [RHEL-1023]
  - regmap: add a helper to translate the register address (Mark Langsdorf) [RHEL-1023]
  - kobject.h remove extern from function prototypes (Greg Kroah-Hartman) [RHEL-1023]
  - driver core: device.h: remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: physical_location.h remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: base.h: remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: driver.h: remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: bus.h: remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: class.h: remove extern from function prototypes (Mark Langsdorf) [RHEL-1023]
  - driver core: class: use lock_class_key already present in struct subsys_private (Mark Langsdorf) [RHEL-1023]
  - device property: Constify a few fwnode APIs (Mark Langsdorf) [RHEL-1023]
  - device property: constify fwnode_get_phy_mode() argument (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: constify bus_get() (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: constify driver_find() (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: constify bus_rescan_devices() (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: constantify bus_register() (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: mark the struct bus_type for sysfs callbacks as constant (Mark Langsdorf) [RHEL-1023]
  - workqueue: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - ACPI: LPIT: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - cpu/hotplug: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - EDAC/sysfs: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - x86/umwait: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - x86/microcode: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - irqchip/mbigen: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - s390/smp: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - s390/topology: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - powerpc/fsl: fix compiler warning in fsl_wakeup_sys_init() (Mark Langsdorf) [RHEL-1023]
  - powerpc/fsl: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - powerpc/pseries: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - powerpc/powernv: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - powerpc/sysfs: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - arm64: cpufeature: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - platform/x86: ibm_rtl: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - cpufreq: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - cpuidle: move to use bus_get_dev_root() (Mark Langsdorf) [RHEL-1023]
  - driver core: bus: move dev_root out of struct bus_type (Mark Langsdorf) [RHEL-1023]
  - driver core: device: make device_create*() take a const struct class * (Mark Langsdorf) [RHEL-1023]
  - driver core: device: mark struct class in struct device as constant (Mark Langsdorf) [RHEL-1023]
  - driver core: device: make device_destroy() take a const class * (Mark Langsdorf) [RHEL-1023]
  - driver core: class: make class_create/remove_file*() options const (Mark Langsdorf) [RHEL-1023]
  - driver core: class: make class_find_device*() options const (Mark Langsdorf) [RHEL-1023]
  - driver core: class: make class_for_each_device() options const (Mark Langsdorf) [RHEL-1023]
  - driver core: class: make class_dev_iter_init() options const (Mark Langsdorf) [RHEL-1023]
  - driver core: class: remove module * from class_create() (Mark Langsdorf) [RHEL-1023]
  - driver core: class: remove struct module owner out of struct class (Mark Langsdorf) [RHEL-1023]
  - drivers: remove struct module * setting from struct class (Mark Langsdorf) [RHEL-1023]
  - driver core: class: specify the module owner in __class_register() (Mark Langsdorf) [RHEL-1023]
  - regmap: cache: Silence checkpatch warning (Mark Langsdorf) [RHEL-1023]
  - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Mark Langsdorf) [RHEL-1023]
  - devres: Pass unique name of the resource to devm_add_action() (Mark Langsdorf) [RHEL-1023]
  - device property: Clarify description of returned value in some functions (Mark Langsdorf) [RHEL-1023]
  - driver core: Make state_synced device attribute writeable (Mark Langsdorf) [RHEL-1023]
  - driver core: Add fw_devlink.sync_state command line param (Mark Langsdorf) [RHEL-1023]
  - driver core: class: fix block class problem when removing CONFIG_SYSFS_DEPRECATED* (Mark Langsdorf) [RHEL-1023]
  - driver core: remove CONFIG_SYSFS_DEPRECATED and CONFIG_SYSFS_DEPRECATED_V2 (Mark Langsdorf) [RHEL-1023]
  - regmap-irq: Add no_status support (Mark Langsdorf) [RHEL-1023]
  - regmap-irq: Remove unused mask_invert flag (Mark Langsdorf) [RHEL-1023]
  - regmap-irq: Remove unused type_invert flag (Mark Langsdorf) [RHEL-1023]
  - mfd: rohm-bd718x7: Drop useless mask_invert flag on irqchip (Mark Langsdorf) [RHEL-1023]
  - genirq: Allow irq_chip registration functions to take a const irq_chip (Mark Langsdorf) [RHEL-1023]
  - PM: domains: fix memory leak with using debugfs_lookup() (Mark Langsdorf) [RHEL-1023]
  - driver core: make kobj_type structures constant (Mark Langsdorf) [RHEL-1023]
  - kobject: kset_uevent_ops: make uevent() callback take a const * (Mark Langsdorf) [RHEL-1023]
  - i3c: fix device.h kernel-doc warnings (Mark Langsdorf) [RHEL-1023]
  - i3c: move dev_to_i3cdev() to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - mcb: move to_mcb_device() to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - drivers: hv: move device_to_hv_device to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - platform/x86: wmi: move dev_to_wblock() and dev_to_wdev to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - vio: move to_vio_dev() to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - firewire: move fw_device() and fw_unit() to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - platform/surface: aggregator: move to_ssam_device() to use container_of_const() (Mark Langsdorf) [RHEL-1023]
  - driver core: fixup for "driver core: make struct bus_type.uevent() take a const *" (Mark Langsdorf) [RHEL-1023]
  - driver core: make struct bus_type.uevent() take a const * (Mark Langsdorf) [RHEL-1023]
  - driver core: make struct device_type.uevent() take a const * (Mark Langsdorf) [RHEL-1023]
  - kobject: make kobject_namespace take a const * (Mark Langsdorf) [RHEL-1023]
  - kobject: kset_uevent_ops: make name() callback take a const * (Mark Langsdorf) [RHEL-1023]
  - kobject: kset_uevent_ops: make filter() callback take a const * (Mark Langsdorf) [RHEL-1023]
  - kobject: make kobject_get_ownership() take a constant kobject * (Mark Langsdorf) [RHEL-1023]
  - kobject: make get_ktype() take a const pointer (Mark Langsdorf) [RHEL-1023]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-388.el9]
changelog:
  - scsi: qedi: Remove unused declarations (Nilesh Javali) [RHEL-9868]
  - scsi: qedi: Fix firmware halt over suspend and resume (Nilesh Javali) [RHEL-9868]
  - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Nilesh Javali) [RHEL-9868]
  - scsi: qedi: Replace all non-returning strlcpy with strscpy (Nilesh Javali) [RHEL-9868]
  - scsi: qedi: Fix use after free bug in qedi_remove() (Nilesh Javali) [RHEL-9868]
  - scsi: qedi: Remove unneeded version.h include (Nilesh Javali) [RHEL-9868]
  - scsi: qla2xxx: Fix system crash due to bad pointer access (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix double free of dsd_list during driver load (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Correct endianness for rqstlen and rsplen (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix unused variable warning in qla2xxx_process_purls_pkt() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix spelling mistake "tranport" -> "transport" (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix nvme_fc_rcv_ls_req() undefined error (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Update version to 10.02.09.100-k (Nilesh Javali) [RHEL-9867]
  - Revert "scsi: qla2xxx: Fix buffer overrun" (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Remove unsupported ql2xenabledif option (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Error code did not return to upper layer (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Add logs for SFP temperature monitoring (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix firmware resource tracking (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Flush mailbox commands on chip reset (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Add Unsolicited LS Request and Response Support for NVMe (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Allow 32-byte CDBs (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Move resource to allow code reuse (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Remove unused declarations (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Update version to 10.02.08.500-k (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: fix inconsistent TMF timeout (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix TMF leak through (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Turn off noisy message log (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix session hang in gnl (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix erroneous link up failure (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix command flush during TMF (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Limit TMF to 8 per function (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Adjust IOCB resource on qpair create (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix deletion race condition (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Silence a static checker warning (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Update version to 10.02.08.400-k (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Correct the index of array (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Pointer may be dereferenced (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix buffer overrun (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Avoid fcport pointer dereference (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix potential NULL pointer dereference (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Array index may go out of bound (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Drop useless LIST_HEAD (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix end of loop test (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix NULL pointer dereference in target mode (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Update version to 10.02.08.300-k (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Wait for io return on terminate rport (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix mem access after free (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix hang in task management (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix task management cmd failure (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Multi-que support for TMF (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Remove default fabric ops callouts (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (Nilesh Javali) [RHEL-9867]
  - scsi: qla2xxx: Add option to disable FC2 Target support (Nilesh Javali) [RHEL-9867]
  - net: add missing includes and forward declarations under net/ (Ivan Vecera) [RHEL-15262]
  - igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15192] {CVE-2023-45871}
  - selftests: mptcp: display simult in extra_msg (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: drop mptcp_connect var (Paolo Abeni) [RHEL-15036]
  - mptcp: define more local variables sk (Paolo Abeni) [RHEL-15036]
  - mptcp: move sk assignment statement ahead (Paolo Abeni) [RHEL-15036]
  - mptcp: use mptcp_get_ext helper (Paolo Abeni) [RHEL-15036]
  - mptcp: use mptcp_check_fallback helper (Paolo Abeni) [RHEL-15036]
  - mptcp: drop useless ssk in pm_subflow_check_next (Paolo Abeni) [RHEL-15036]
  - mptcp: userspace pm send RM_ADDR for ID 0 (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: fix wait_rm_addr/sf parameters (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: run userspace pm tests slower (Paolo Abeni) [RHEL-15036]
  - mptcp: refactor sndbuf auto-tuning (Paolo Abeni) [RHEL-15036]
  - mptcp: ignore notsent_lowat setting at the subflow level (Paolo Abeni) [RHEL-15036]
  - mptcp: consolidate sockopt synchronization (Paolo Abeni) [RHEL-15036]
  - mptcp: use copy_from_iter helpers on transmit (Paolo Abeni) [RHEL-15036]
  - mptcp: give rcvlowat some love (Paolo Abeni) [RHEL-15036]
  - tcp: define initial scaling factor value as a macro (Paolo Abeni) [RHEL-15036]
  - mptcp: use plain bool instead of custom binary enum (Paolo Abeni) [RHEL-15036]
  - mptcp: properly account fastopen data (Paolo Abeni) [RHEL-15036]
  - mptcp: add a new sysctl for make after break timeout (Paolo Abeni) [RHEL-15036]
  - net: mptcp: use policy generated by YAML spec (Paolo Abeni) [RHEL-15036]
  - net: mptcp: rename netlink handlers to mptcp_pm_nl_<blah>_{doit,dumpit} (Paolo Abeni) [RHEL-15036]
  - uapi: mptcp: use header file generated from YAML spec (Paolo Abeni) [RHEL-15036]
  - Documentation: netlink: add a YAML spec for mptcp (Paolo Abeni) [RHEL-15036]
  - net: mptcp: convert netlink from small_ops to ops (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: no RST when rm subflow/addr (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid sending RST when closing the initial subflow (Paolo Abeni) [RHEL-15036]
  - mptcp: more conservative check for zero probes (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: correctly check for no RST (Paolo Abeni) [RHEL-15036]
  - mptcp: userspace pm allow creating id 0 subflow (Paolo Abeni) [RHEL-15036]
  - mptcp: fix delegated action races (Paolo Abeni) [RHEL-15036]
  - mptcp: fix dangling connection hang-up (Paolo Abeni) [RHEL-15036]
  - mptcp: rename timer related helper to less confusing names (Paolo Abeni) [RHEL-15036]
  - mptcp: process pending subflow error on close (Paolo Abeni) [RHEL-15036]
  - mptcp: move __mptcp_error_report in protocol.c (Paolo Abeni) [RHEL-15036]
  - mptcp: fix bogus receive window shrinkage with multiple subflows (Paolo Abeni) [RHEL-15036]
  - mptcp: annotate data-races around msk->rmem_fwd_alloc (Paolo Abeni) [RHEL-15036]
  - mptcp: register default scheduler (Paolo Abeni) [RHEL-15036]
  - mptcp: use get_retrans wrapper (Paolo Abeni) [RHEL-15036]
  - mptcp: use get_send wrapper (Paolo Abeni) [RHEL-15036]
  - mptcp: add scheduler wrappers (Paolo Abeni) [RHEL-15036]
  - mptcp: add scheduled in mptcp_subflow_context (Paolo Abeni) [RHEL-15036]
  - mptcp: add sched in mptcp_sock (Paolo Abeni) [RHEL-15036]
  - mptcp: add a new sysctl scheduler (Paolo Abeni) [RHEL-15036]
  - mptcp: add struct mptcp_sched_ops (Paolo Abeni) [RHEL-15036]
  - mptcp: drop last_snd and MPTCP_RESET_SCHEDULER (Paolo Abeni) [RHEL-15036]
  - mptcp: refactor push_pending logic (Paolo Abeni) [RHEL-15036]
  - bpf: Add update_socket_protocol hook (Paolo Abeni) [RHEL-15036]
  - mptcp: Remove unnecessary test for __mptcp_init_sock() (Paolo Abeni) [RHEL-15036]
  - mptcp: get rid of msk->subflow (Paolo Abeni) [RHEL-15036]
  - mptcp: change the mpc check helper to return a sk (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid ssock usage in mptcp_pm_nl_create_listen_socket() (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid additional indirection in sockopt (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid unneeded indirection in mptcp_stream_accept() (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid additional indirection in mptcp_poll() (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid additional indirection in mptcp_listen() (Paolo Abeni) [RHEL-15036]
  - mptcp: mptcp: avoid additional indirection in mptcp_bind() (Paolo Abeni) [RHEL-15036]
  - net: factor out inet{,6}_bind_sk helpers (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid subflow socket usage in mptcp_get_port() (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid additional __inet_stream_connect() call (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid unneeded mptcp_token_destroy() calls (Paolo Abeni) [RHEL-15036]
  - net: annotate data-races around sock->ops (Paolo Abeni) [RHEL-15036]
  - mptcp: fix disconnect vs accept race (Paolo Abeni) [RHEL-15036]
  - mptcp: avoid bogus reset on fallback close (Paolo Abeni) [RHEL-15036]
  - mptcp: fix the incorrect judgment for msk->cb_flags (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: unmute unexpected errors (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm_nl_ctl: always look for errors (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: colored results (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: rework detailed report (Paolo Abeni) [RHEL-15036]
  - net: annotate data-races around sk->sk_mark (Paolo Abeni) [RHEL-15036]
  - mptcp: more accurate NL event generation (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: only check for ip6tables if needed (Paolo Abeni) [RHEL-15036]
  - mptcp: fix rcv buffer auto-tuning (Paolo Abeni) [RHEL-15036]
  - tcp: get rid of sysctl_tcp_adv_win_scale (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: simult flows: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: diag: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm_netlink: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: lib: format subtests results in TAP (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: reduce dup code around printf (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: uniform results printing (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: fix shellcheck warnings (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace pm: don't stop if error (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: don't stop if error (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add speed env var (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add fullmesh env var (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add fastclose env var (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: set all env vars as local ones (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm_nl_ctl: fix 32-bit support (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: depend on SYN_COOKIES (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: report errors with 'remove' tests (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace_pm: use correct server port (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: return error if wrong mark (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: use 'iptables-legacy' if available (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: fail if nft supposed to work (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: fix comment typo (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add pm_nl_set_endpoint helper (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: drop sflags parameter (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: drop addr_nr_ns1/2 parameters (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: drop test_linkfail parameter (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: set FAILING_LINKS in run_tests (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: check subflow and addr infos (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: test userspace pm out of transfer (Paolo Abeni) [RHEL-15036]
  - mptcp: pass addr to mptcp_pm_alloc_anno_list (Paolo Abeni) [RHEL-15036]
  - mptcp: consolidate transition to TCP_CLOSE in mptcp_do_fastclose() (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip check if MIB counter not supported (part 2) (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add MPTCP_FULL_INFO testcase (Paolo Abeni) [RHEL-15036]
  - mptcp: introduce MPTCP_FULL_INFO getsockopt (Paolo Abeni) [RHEL-15036]
  - mptcp: add subflow unique id (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: explicitly tests aggregate counters (Paolo Abeni) [RHEL-15036]
  - mptcp: track some aggregate data counters (Paolo Abeni) [RHEL-15036]
  - mptcp: move snd_una update earlier for fallback socket (Paolo Abeni) [RHEL-15036]
  - mptcp: drop legacy code around RX EOF (Paolo Abeni) [RHEL-15036]
  - mptcp: consolidate fallback and non fallback state machine (Paolo Abeni) [RHEL-15036]
  - mptcp: Reorder fields in 'struct mptcp_pm_add_entry' (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip mixed tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: uniform listener tests (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip PM listener tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip MPC backups tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip fail tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip userspace PM tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip fullmesh flag tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip backup if set flag on ID not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip implicit tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: support RM_ADDR for used endpoints or not (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip Fastclose tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: support local endpoint being tracked or not (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip test if iptables/tc cmds fail (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip check if MIB counter not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: helpers to skip tests (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: use 'iptables-legacy' if available (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: lib: skip if not below kernel version (Paolo Abeni) [RHEL-15036]
  - mptcp: unify pm set_flags interfaces (Paolo Abeni) [RHEL-15036]
  - mptcp: unify pm get_flags_and_ifindex_by_id (Paolo Abeni) [RHEL-15036]
  - mptcp: unify pm get_local_id interfaces (Paolo Abeni) [RHEL-15036]
  - mptcp: export local_address (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace pm: skip PM listener events tests if unavailable (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace pm: skip if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: skip TCP_INQ checks if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: skip getsockopt checks if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: relax expected returned size (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm nl: skip fullmesh flag checks if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm nl: remove hardcoded default limits (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: diag: skip inuse tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: diag: skip listen tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: skip TFO tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: skip disconnect tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: skip transp tests if not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: lib: skip if missing symbol (Paolo Abeni) [RHEL-15036]
  - mptcp: update userspace pm infos (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: update userspace pm subflow tests (Paolo Abeni) [RHEL-15036]
  - mptcp: add address into userspace pm list (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: update userspace pm addr tests (Paolo Abeni) [RHEL-15036]
  - mptcp: only send RM_ADDR in nl_cmd_remove (Paolo Abeni) [RHEL-15036]
  - mptcp: add annotations around sk->sk_shutdown accesses (Paolo Abeni) [RHEL-15036]
  - mptcp: fix data race around msk->first access (Paolo Abeni) [RHEL-15036]
  - mptcp: consolidate passive msk socket initialization (Paolo Abeni) [RHEL-15036]
  - mptcp: add annotations around msk->subflow accesses (Paolo Abeni) [RHEL-15036]
  - mptcp: fix connect timeout handling (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: userspace pm: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: sockopt: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: simult flows: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: diag: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: pm nl: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: connect: skip if MPTCP is not supported (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: join: avoid using 'cmp --bytes' (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: centralize stats dumping (Paolo Abeni) [RHEL-15036]
  - selftests: mptcp: add explicit check for new mibs (Paolo Abeni) [RHEL-15036]
  - mptcp: introduces more address related mibs (Paolo Abeni) [RHEL-15036]
  - mptcp: refactor mptcp_stream_accept() (Paolo Abeni) [RHEL-15036]
  - inet: factor out locked section of inet_accept() in a new helper (Paolo Abeni) [RHEL-15036]
  - net: factor out __inet_listen_sk() helper (Paolo Abeni) [RHEL-15036]
  - mptcp: preserve const qualifier in mptcp_sk() (Paolo Abeni) [RHEL-15036]
  - mptcp: annotate lockless accesses to sk->sk_err (Paolo Abeni) [RHEL-15036]
  - tcp: enforce receive buffer memory limits by allowing the tcp window to shrink (Felix Maurer) [RHEL-11592]
  - tcp: adjust rcv_ssthresh according to sk_reserved_mem (Felix Maurer) [RHEL-11592]
  - macsec: Don't rely solely on the dst MAC address to identify destination MACsec device (Sabrina Dubroca) [RHEL-14698]
  - net: ipv4: fix return value check in esp_remove_trailer (Sabrina Dubroca) [RHEL-14517]
  - net: ipv6: fix return value check in esp_remove_trailer (Sabrina Dubroca) [RHEL-14517]
  - net: xfrm: skip policies marked as dead while reinserting policies (Sabrina Dubroca) [RHEL-14517]
  - xfrm: don't skip free of empty state in acquire policy (Sabrina Dubroca) [RHEL-14517]
  - xfrm: delete offloaded policy (Sabrina Dubroca) [RHEL-14517]
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Sabrina Dubroca) [RHEL-14517]
  - ip6_vti: fix slab-use-after-free in decode_session6 (Sabrina Dubroca) [RHEL-14517]
  - xfrm: fix slab-use-after-free in decode_session6 (Sabrina Dubroca) [RHEL-14517]
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Sabrina Dubroca) [RHEL-14517]
  - net: ipv4: Use kfree_sensitive instead of kfree (Sabrina Dubroca) [RHEL-14517]
  - tipc: fix a potential deadlock on &tx->lock (Xin Long) [RHEL-14731]
  - tipc: stop tipc crypto on failure in tipc_node_create (Xin Long) [RHEL-14731]
  - tipc: check return value of pskb_trim() (Xin Long) [RHEL-14731]
  - net: skb_queue_purge_reason() optimizations (Antoine Tenart) [RHEL-14554]
  - net: add skb_queue_purge_reason and __skb_queue_purge_reason (Antoine Tenart) [RHEL-14554]
  - tcp: add TCP_OLD_SEQUENCE drop reason (Antoine Tenart) [RHEL-14554]
  - net: skbuff: update and rename __kfree_skb_defer() (Antoine Tenart) [RHEL-14554]
  - devlink: Hold devlink lock on health reporter dump get (Davide Caratti) [RHEL-14526]
  - selftests/bpf: Update bpf_clone_redirect expected return code (Davide Caratti) [RHEL-14526]
  - bpf: Clarify error expectations from bpf_clone_redirect (Davide Caratti) [RHEL-14526]
  - veth: Update XDP feature set when bringing up device (Davide Caratti) [RHEL-14526]
  - ethtool: plca: fix plca enable data type while parsing the value (Davide Caratti) [RHEL-14526]
  - af_unix: Fix data-race around unix_tot_inflight. (Davide Caratti) [RHEL-14526]
  - af_unix: Fix data-races around user->unix_inflight. (Davide Caratti) [RHEL-14526]
  - veth: Fixing transmit return status for dropped packets (Davide Caratti) [RHEL-14526]
  - net: fib: avoid warn splat in flow dissector (Davide Caratti) [RHEL-14526]
  - net/packet: annotate data-races around tp->status (Davide Caratti) [RHEL-14526]
  - net: dcb: choose correct policy to parse DCB_ATTR_BCN (Davide Caratti) [RHEL-14526]
  - llc: Don't drop packet from non-root netns. (Davide Caratti) [RHEL-14526]
  - net: af_key: fix sadb_x_filter validation (Davide Caratti) [RHEL-14526]
  - netlink: Correct offload_xstats size (Paolo Abeni) [RHEL-14364]
  - net: prevent address rewrite in kernel_bind() (Paolo Abeni) [RHEL-14364]
  - net: prevent rewrite of msg_name in sock_sendmsg() (Paolo Abeni) [RHEL-14364]
  - net: fix possible store tearing in neigh_periodic_work() (Paolo Abeni) [RHEL-14364]
  - neigh: make sure used and confirmed times are valid (Paolo Abeni) [RHEL-14364]
  - net/core: Fix ETH_P_1588 flow dissector (Paolo Abeni) [RHEL-14364]
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Paolo Abeni) [RHEL-14364]
  - net: use sk_forward_alloc_get() in sk_get_meminfo() (Paolo Abeni) [RHEL-14364]
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Paolo Abeni) [RHEL-14364]
  - net: prevent skb corruption on frag list segmentation (Paolo Abeni) [RHEL-14364]
  - netlink: do not hard code device address lenth in fdb dumps (Paolo Abeni) [RHEL-14364]
  - net: fix UaF in netns ops registration error path (Paolo Abeni) [RHEL-14364]
  - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Paolo Abeni) [RHEL-14364]
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-14233]
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-14233]
  - net/sched: fix a qdisc modification with ambiguous command request (Davide Caratti) [RHEL-14233]
  - bonding: Return pointer to data after pull on skb (Hangbin Liu) [RHEL-13964]
  - selftests: bonding: create directly devices in the target namespaces (Hangbin Liu) [RHEL-13964]
  - selftests: bonding: add macvlan over bond testing (Hangbin Liu) [RHEL-13964]
  - selftest: bond: add new topo bond_topo_2d1c.sh (Hangbin Liu) [RHEL-13964]
  - bonding: fix macvlan over alb bond support (Hangbin Liu) [RHEL-13964]
  - selftests: bonding: do not set port down before adding to bond (Hangbin Liu) [RHEL-13964]
  - selftests: bonding: remove redundant delete action of device link1_1 (Hangbin Liu) [RHEL-13964]
  - bonding: remove unnecessary NULL check in bond_destructor (Hangbin Liu) [RHEL-13964]
  - bonding: use bond_set_slave_arr to simplify code (Hangbin Liu) [RHEL-13964]
  - bonding: add modifier to initialization function and exit function (Hangbin Liu) [RHEL-13964]
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Hangbin Liu) [RHEL-13964]
  - bonding: support balance-alb with openvswitch (Hangbin Liu) [RHEL-13964]
  - bonding: Always assign be16 value to vlan_proto (Hangbin Liu) [RHEL-13964]
  - selftests: bonding: delete unnecessary line (Hangbin Liu) [RHEL-13964]
  - bonding: add software tx timestamping support (Hangbin Liu) [RHEL-13964]
  - selftests/bpf: Add selftest for bpf_task_under_cgroup() in sleepable prog (Viktor Malik) [RHEL-9957]
  - bpf: Fix missed rcu read lock in bpf_task_under_cgroup() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: precision tracking test for BPF_NEG and BPF_END (Viktor Malik) [RHEL-9957]
  - bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END (Viktor Malik) [RHEL-9957]
  - redhat: update self-test data (Viktor Malik) [RHEL-9957]
  - redhat: ignore BPFTOOLVERSION/bpftoolversion in self-test create-data.sh (Viktor Malik) [RHEL-9957]
  - bpftool: Specify XDP Hints ifname when loading program (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix flaky cgroup_iter_sleepable subtest (Viktor Malik) [RHEL-9957]
  - libbpf: Set close-on-exec flag on gzopen (Viktor Malik) [RHEL-9957]
  - selftests/bpf: fix static assert compilation issue for test_cls_*.c (Viktor Malik) [RHEL-9957]
  - bpf, cpumap: Handle skb as well when clean up ptr_ring (Viktor Malik) [RHEL-9957]
  - bpf, cpumap: Make sure kthread is running before map update returns (Viktor Malik) [RHEL-9957]
  - bpf: Disable preemption in bpf_event_output (Viktor Malik) [RHEL-9957]
  - bpf: Disable preemption in bpf_perf_event_output (Viktor Malik) [RHEL-9957]
  - bpf, arm64: Fix BTI type used for freplace attached functions (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add more tests for check_max_stack_depth bug (Viktor Malik) [RHEL-9957]
  - bpf: Repeat check_max_stack_depth for async callbacks (Viktor Malik) [RHEL-9957]
  - bpf: Fix subprog idx logic in check_max_stack_depth (Viktor Malik) [RHEL-9957]
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add selftest for check_stack_max_depth bug (Viktor Malik) [RHEL-9957]
  - bpf: Fix max stack depth check for async callbacks (Viktor Malik) [RHEL-9957]
  - bpf, btf: Warn but return no error for NULL btf from __register_btf_kfunc_id_set() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Set the default value of consumer_cnt as 0 (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Ensure that next_cpu() returns a valid CPU number (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Output the correct error code for pthread APIs (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Use producer_cnt to allocate local counter array (Viktor Malik) [RHEL-9957]
  - bpf: Keep BPF_PROG_LOAD permission checks clear of validations (Viktor Malik) [RHEL-9957]
  - bpf: Centralize permissions checks for all BPF map types (Viktor Malik) [RHEL-9957]
  - bpf: Inline map creation logic in map_create() function (Viktor Malik) [RHEL-9957]
  - bpf: Move unprivileged checks into map_create() and bpf_prog_load() (Viktor Malik) [RHEL-9957]
  - bpf: Remove in_atomic() from bpf_link_put(). (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Verify that check_ids() is used for scalars in regsafe() (Viktor Malik) [RHEL-9957]
  - bpf: Verify scalar ids mapping in regsafe() using check_ids() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Check if mark_chain_precision() follows scalar ids (Viktor Malik) [RHEL-9957]
  - bpf: Use scalar ids in mark_chain_precision() (Viktor Malik) [RHEL-9957]
  - bpf/docs: Update documentation for new cpumask kfuncs (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Update bpf_cpumask_any* tests to use bpf_cpumask_any_distribute* (Viktor Malik) [RHEL-9957]
  - bpf: Replace bpf_cpumask_any* with bpf_cpumask_any_distribute* (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add test for new bpf_cpumask_first_and() kfunc (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_cpumask_first_and() kfunc (Viktor Malik) [RHEL-9957]
  - bpf: Hide unused bpf_patch_call_args (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix invalid pointer check in get_xlated_program() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add missing prototypes for several test kfuncs (Viktor Malik) [RHEL-9957]
  - bpf: Factor out a common helper free_all() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix check_mtu using wrong variable type (Viktor Malik) [RHEL-9957]
  - bpf: Cleanup unused function declaration (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add missing selftests kconfig options (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add test for non-NULLable PTR_TO_BTF_IDs (Viktor Malik) [RHEL-9957]
  - bpf: Teach verifier that trusted PTR_TO_BTF_ID pointers are non-NULL (Viktor Malik) [RHEL-9957]
  - bpf: Replace open code with for allocated object check (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Test table ID fib lookup BPF helper (Viktor Malik) [RHEL-9957]
  - bpf: Add table ID to bpf_fib_lookup BPF helper (Viktor Malik) [RHEL-9957]
  - bpf: Replace all non-returning strlcpy with strscpy (Viktor Malik) [RHEL-9957]
  - bpf/tests: Use struct_size() (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add a test where map key_type_id with decl_tag type (Viktor Malik) [RHEL-9957]
  - bpf: Silence a warning in btf_type_id_size() (Viktor Malik) [RHEL-9957]
  - bpf: Fix bad unlock balance on freeze_mutex (Viktor Malik) [RHEL-9957]
  - libbpf: Ensure FD >= 3 during bpf_map__reuse_fd() (Viktor Malik) [RHEL-9957]
  - libbpf: Ensure libbpf always opens files with O_CLOEXEC (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Check whether to run selftest (Viktor Malik) [RHEL-9957]
  - libbpf: Change var type in datasec resize func (Viktor Malik) [RHEL-9957]
  - bpf: drop unnecessary bpf_capable() check in BPF_MAP_FREEZE command (Viktor Malik) [RHEL-9957]
  - libbpf: Selftests for resizing datasec maps (Viktor Malik) [RHEL-9957]
  - libbpf: Add capability for resizing datasec maps (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add path_fd-based BPF_OBJ_PIN and BPF_OBJ_GET tests (Viktor Malik) [RHEL-9957]
  - libbpf: Add opts-based bpf_obj_pin() API and add support for path_fd (Viktor Malik) [RHEL-9957]
  - bpf: Support O_PATH FDs in BPF_OBJ_PIN and BPF_OBJ_GET commands (Viktor Malik) [RHEL-9957]
  - libbpf: Start v1.3 development cycle (Viktor Malik) [RHEL-9957]
  - bpf: Validate BPF object in BPF_OBJ_PIN before calling LSM (Viktor Malik) [RHEL-9957]
  - bpf: Add kfunc filter function to 'struct btf_kfunc_id_set' (Viktor Malik) [RHEL-9957]
  - bpftool: Show target_{obj,btf}_id in tracing link info (Viktor Malik) [RHEL-9957]
  - bpf: Show target_{obj,btf}_id in tracing link fdinfo (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Make bpf_dynptr_is_rdonly() prototyype consistent with kernel (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix dynptr/test_dynptr_is_null (Viktor Malik) [RHEL-9957]
  - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log (Viktor Malik) [RHEL-9957]
  - bpf, docs: Shift operations are defined to use a mask (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Remove extern from kfuncs declarations (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Allow to use kfunc from testmod.ko in test_verifier (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Load bpf_testmod for verifier test (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Use un/load_bpf_testmod functions in tests (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Do not unload bpf_testmod in load_bpf_testmod (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Use only stdout in un/load_bpf_testmod functions (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Move test_progs helpers to testing_helpers object (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Move kfunc exports to bpf_testmod/bpf_testmod_kfunc.h (Viktor Malik) [RHEL-9957]
  - libbpf: Store zero fd to fd_array for loader kfunc relocation (Viktor Malik) [RHEL-9957]
  - bpftool: Support bpffs mountpoint as pin path for prog loadall (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix s390 sock_field test failure (Viktor Malik) [RHEL-9957]
  - selftests/bpf: improve netcnt test robustness (Viktor Malik) [RHEL-9957]
  - bpf: fix calculation of subseq_idx during precision backtracking (Viktor Malik) [RHEL-9957]
  - bpf: Fix memleak due to fentry attach failure (Viktor Malik) [RHEL-9957]
  - bpf: Remove bpf trampoline selector (Viktor Malik) [RHEL-9957]
  - bpf, arm64: Support struct arguments in the BPF trampoline (Viktor Malik) [RHEL-9957]
  - bpftool: JIT limited misreported as negative value on aarch64 (Viktor Malik) [RHEL-9957]
  - bpf: Document EFAULT changes for sockopt (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Correctly handle optlen > 4096 (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Update EFAULT {g,s}etsockopt selftests (Viktor Malik) [RHEL-9957]
  - bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen (Viktor Malik) [RHEL-9957]
  - libbpf: fix offsetof() and container_of() to work with CO-RE (Viktor Malik) [RHEL-9957]
  - bpf: Address KCSAN report on bpf_lru_list (Viktor Malik) [RHEL-9957]
  - bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Accept mem from dynptr in helper funcs (Viktor Malik) [RHEL-9957]
  - bpf: verifier: Accept dynptr mem as mem in helpers (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Check overflow in optional buffer (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Test allowing NULL buffer in dynptr slice (Viktor Malik) [RHEL-9957]
  - bpf: Allow NULL buffers in bpf_dynptr_slice(_rw) (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add testcase for bpf_task_under_cgroup (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_task_under_cgroup() kfunc (Viktor Malik) [RHEL-9957]
  - samples/bpf: Fix buffer overflow in tcp_basertt (Viktor Malik) [RHEL-9957]
  - bpf, docs: Update llvm_relocs.rst with typo fixes (Viktor Malik) [RHEL-9957]
  - selftests/bpf: revert iter test subprog precision workaround (Viktor Malik) [RHEL-9957]
  - selftests/bpf: add precision propagation tests in the presence of subprogs (Viktor Malik) [RHEL-9957]
  - bpf: support precision propagation in the presence of subprogs (Viktor Malik) [RHEL-9957]
  - bpf: fix mark_all_scalars_precise use in mark_chain_precision (Viktor Malik) [RHEL-9957]
  - bpf: fix propagate_precision() logic for inner frames (Viktor Malik) [RHEL-9957]
  - bpf: maintain bitmasks across all active frames in __mark_chain_precision (Viktor Malik) [RHEL-9957]
  - bpf: improve precision backtrack logging (Viktor Malik) [RHEL-9957]
  - bpf: encapsulate precision backtracking bookkeeping (Viktor Malik) [RHEL-9957]
  - bpf: mark relevant stack slots scratched for register read instructions (Viktor Malik) [RHEL-9957]
  - veristat: add -t flag for adding BPF_F_TEST_STATE_FREQ program flag (Viktor Malik) [RHEL-9957]
  - bpf: Print a warning only if writing to unprivileged_bpf_disabled. (Viktor Malik) [RHEL-9957]
  - bpf: Emit struct bpf_tcp_sock type in vmlinux BTF (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Test_progs can read test lists from file (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Extract insert_test from parse_test_list (Viktor Malik) [RHEL-9957]
  - libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add fexit_sleep to DENYLIST.aarch64 (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Fix selftest test_global_funcs/global_func1 failure with latest clang (Viktor Malik) [RHEL-9957]
  - bpftool: Dump map id instead of value for map_of_maps types (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Update the aarch64 tests deny list (Viktor Malik) [RHEL-9957]
  - bpftool: Show map IDs along with struct_ops links. (Viktor Malik) [RHEL-9957]
  - docs/bpf: Add LRU internals description and graph (Viktor Malik) [RHEL-9957]
  - docs/bpf: Add table to describe LRU properties (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add test case to assert precise scalar path pruning (Viktor Malik) [RHEL-9957]
  - selftests/bpf: Add tests for dynptr convenience helpers (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_dynptr_clone (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_dynptr_size (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_dynptr_is_null and bpf_dynptr_is_rdonly (Viktor Malik) [RHEL-9957]
  - bpf: Add bpf_dynptr_adjust (Viktor Malik) [RHEL-9957]
  - Add CONFIG_ADDRESS_MASKING to RHEL configs collection (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Zero out buffer for readlink() (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm: Remove unused current_untag_mask() (Chris von Recklinghausen) [RHEL-11561]
  - tools headers disabled-features: Sync with the kernel sources (Chris von Recklinghausen) [RHEL-11561]
  - tools headers UAPI: Sync arch prctl headers with the kernel sources (Chris von Recklinghausen) [RHEL-11561]
  - x86: mm: remove 'sign' games from LAM untagged_addr*() macros (Chris von Recklinghausen) [RHEL-11561]
  - x86: uaccess: move 32-bit and 64-bit parts into proper <asm/uaccess_N.h> header (Chris von Recklinghausen) [RHEL-11561]
  - x86-64: make access_ok() independent of LAM (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm/iommu/sva: Do not allow to set FORCE_TAGGED_SVA bit from outside (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm/iommu/sva: Fix error code for LAM enabling failure due to SVA (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add test cases for LAM vs thread creation (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add ARCH_FORCE_TAGGED_SVA test cases for linear-address masking (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add inherit test cases for linear-address masking (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add io_uring test cases for linear-address masking (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add mmap and SYSCALL test cases for linear-address masking (Chris von Recklinghausen) [RHEL-11561]
  - selftests/x86/lam: Add malloc and tag-bits test cases for linear-address masking (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm/iommu/sva: Make LAM and SVA mutually exclusive (Chris von Recklinghausen) [RHEL-11561]
  - mm: Expose untagging mask in /proc/$PID/status (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm: Provide arch_prctl() interface for LAM (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm: Reduce untagged_addr() overhead for systems without LAM (Chris von Recklinghausen) [RHEL-11561]
  - x86/uaccess: Provide untagged_addr() and remove tags before address check (Chris von Recklinghausen) [RHEL-11561]
  - mm: Introduce untagged_addr_remote() (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm: Handle LAM on context switch (Chris von Recklinghausen) [RHEL-11561]
  - x86: CPUID and CR3/CR4 flags for Linear Address Masking (Chris von Recklinghausen) [RHEL-11561]
  - x86: Allow atomic MM_CONTEXT flags setting (Chris von Recklinghausen) [RHEL-11561]
  - x86/mm: Rework address range check in get_user() and put_user() (Chris von Recklinghausen) [RHEL-11561]
  - mm: export dump_mm() (Chris von Recklinghausen) [RHEL-11561]
  - tools headers cpufeatures: Sync with the kernel sources (Chris von Recklinghausen) [RHEL-11561]
  - tools headers UAPI: Sync x86 arch prctl headers with the kernel sources (Chris von Recklinghausen) [RHEL-11561]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-2
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "Staat der Nederlanden Root CA - G2"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-90.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Miroslav Lichvar <mlichvar@redhat.com> 4.0-0.8.pre3
changelog:
  - update to 4.0-pre3
  - switch to sourcedir directive for loading servers from DHCP
  - add NetworkManager dispatcher script to save servers from DHCP when
    dhclient is not installed (Robert Fairley)
  - drop old migration code from scriptlet
  - move default paths in /var/run to /run


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Packit <hello@packit.dev> - 299-1
changelog:
  - Kdump: Show location of kdump to verify the successful configuration test
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Packit <hello@packit.dev> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Kamil Dudka <kdudka@redhat.com> - 8.32-22
changelog:
  - weaken the dependency on glibc-doc to reduce minimal installations
  - drop the last use of ncurses no longer needed (#1830318)
  - utimens: fix confusing arg type in internal func


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
changelog:
  - gnutls: enable SHAKE, needed for Ed448
  - fips-mode-setup: improve handling FIPS plus subpolicies
  - FIPS: disable SHA-1 HMAC
  - FIPS: disable CBC ciphers except in Kerberos


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
changelog:
  - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
  - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
  - fips-mode-setup: catch more inconsistencies, clarify --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
changelog:
  - DEFAULT: drop DNSSEC SHA-1 exception
  - openssh: add support for sntrup761x25519-sha512@openssh.com


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git94f0e2c
changelog:
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - FIPS: enforce EMS in FIPS mode
  - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode
  - nss: implement EMS enforcement in FIPS mode (disabled in ELN)
  - openssl: implement EMS enforcement in FIPS mode
  - gnutls: implement EMS enforcement in FIPS mode (disabled in ELN)
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230920-1.git8dcf74d
changelog:
  - OSPP subpolicy: tighten beyond reason for OSPP 4.3
  - fips-mode-setup: more thorough --disable, still unsupported


author: Alexander Sosedkin <asosedkin@redhat.com> - 20231016-1.git77ceb0b
changelog:
  - openssl: fix SHA1 and NO-ENFORCE-EMS interaction
  - bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx


author: Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
changelog:
  - turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
  - fips-mode-setup: increase chroot-friendliness (RHEL-11350)
  - fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)


author: Clemens Lang <cllang@redhat.com> - 20231109-1.git0ceff7f
changelog:
  - Restore support for scoped ssh_etm directives (RHEL-15925)
  - Print matches in syntax deprecation warnings (RHEL-15925)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
changelog:
  - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - 2217177 - Delays printing to lpd when reserved ports are exhausted
  - 2217284 - The command "cancel -x <job>" does not remove job files
  - 2217954 - Enlarge backlog queue for listen() in cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-4
changelog:
  - Remove service based autoactivation.
  - New lvmautoactivation(7) man page.
  - Fix missing PVIDs for multipath devices in system.devices file.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-2
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Restore --reportformat option in pvdisplay.
  - Improve multipath backlist option handling.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-3
changelog:
  - Fix effect of setting multipath_component_detection to 0.
  - Fix lvmdbusd using lvm shell with editline.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-9
changelog:
  - Add 0045-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2084356
  - Add 0046-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2084358
  - Add 0047-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0048-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0049-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0050-libmultipath-make-protocol_name-global.patch
  - Add 0051-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0052-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0053-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0054-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0055-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0056-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement the feature from bz #2084365
  - Add 0057-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2084357
  Resolves: bz #2084365, #2084357, #2084358, #2084365


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-11
changelog:
  - Add 0059-multipathd-Add-missing-ctype-include.patch
  - Add 0060-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119896


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-13
changelog:
  - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2125357


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-14
changelog:
  - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133999
  - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133989
  - Resolves: bz #2133989, #2133999


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-15
changelog:
  - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2141860
  - Add 0068-libmultipath-cleanup-remove_feature.patch
  - Add 0069-libmultipath-cleanup-add_feature.patch
  - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2033080
  - Resolves: bz #2033080, #2141860


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-17
changelog:
  - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2145225


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-21
changelog:
  - Add 0085-multipathd-make-pr-registration-consistent.patch
  - Add 0086-libmultipath-make-prflag-an-enum.patch
  - Add 0087-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0088-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164869


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-22
changelog:
  - Add 0089-RH-Add-mpathcleanup.patch
    * Fixes RHEL-782
  - Add 0090-RH-make-listing-return-an-error-if-the-config-file-i.patch
  - Install mpathcleanup
    * Fixes RHEL-781
  - Resolves: #781, #782


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-2
changelog:
  - Respect cacheonly in python dnf API (RhBug:2026849)
  - [doc] Improve description of multilib_policy=all (RhBug:1996681,1995630)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-3
changelog:
  - Don't recommend python3-unbound (RhBug:1947925)
  - Recommend rpm-plugin-systemd-inhibit only if systemd (RhBug:1947924)
  - Don't recommend /usr/bin/sqlite3 for bash-completion (RhBug:1947924)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.12.0-1
changelog:
  - Allow destdir option with modulesync command
  - Add documentation for query api flags (RhBug:2035577)
  - Fix swap command to work with local rpm files correctly (RhBug:2036434)
  - Fix regression in verifying signatures using rpmkeys
  - Fix decompression of groups.xml (RhBug:2030255)
  - Fix history undo on a Reason Change (RhBug:2010259,2053014)
  - Remove /usr/bin from sys.path to avoid accidentally importing garbage
  - Fix python3.11 build: remove deprecated, update traceback regex
  - fix dnf mark error when history sqlite missing
  - [doc] clarify effect of --enablerepo and --disablerepo options (RhBug:2031414)
  - [doc] default values for module_obsoletes and module_stream_switch (RhBug: 2051846)
  - dnf.conf: hint users where to find more info about defaults and other options
  - Fix unittests that relied on checksum being at the end of solvfiles
  - completion: remove unnecessary echo
  - Fix remove when no repos are enabled (RhBug:2064341)
  - Add loongarch support for dnf
  - Add spaces between words to fix typos (RhBug:2077296)
  - [doc] Improve "proxy" configuration option documentation (RhBug:2072332)
  - Fix download errors handling in non-english locales (RhBug:2024527)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.14.0-1
changelog:
  - Update to 4.14.0
  - Add doc related to --destdir and --downloadonly options (RhBug:2100811)
  - Fix broken dependencies error reporting (RhBug:2088422)
  - Add support for group upgrade rollback (RhBug:2016070)
  - Expose plugin unload method to API (RhBug:2047251)
  - Fix upgrade from file to noarch pkg (RhBug:2006018)
  - Allow passing plugin parameters with dashes in names (RhBug:1980712)
  - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421)
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)
  - doc: Describe how gpg keys are stored for `repo_ggpcheck` (RhBug:2020678)
  - bash-completion: use sqlite cache when available


author: Nicola Sella <nsella@redhat.com> - 4.14.0-3
changelog:
  - Move system-upgrade plugin to core (RhBug:2131288)
  - offline-upgrade: add support for security filters (RhBug:1939975,2139326)
  - Fix plugins unit tests + unload plugins upon their deletion


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-6
changelog:
  - Add reboot option to DNF Automatic (RhBug:2124793)
  - Omit src RPMs from check-update (RhBug:2151910,2203069)
  - automatic: Fix online detection with proxy (RhBug:2022440,2189851)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-8
changelog:
  - Return an error when transaction fails (RhBug:2170093,2212262)
  - Document symbols in `dnf history list` output (RhBug:2172067,2218113)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-9
changelog:
  - Fix japanese translations (RHEL-11345)
  - Fix substitution in kay-value-pair list in add_new_repo (RHEL-6396)
  - base: Add obsoleters of only latest versions (RHEL-6304)


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.1.0-1
changelog:
  - Add a new subpackage with modulesync command. The command downloads packages from modules and/or creates a repository with modular data. (RhBug:1868047)
  - [repoclosure] Print counts of missing dependencies
  - [reposync] Do not stop downloading packages on the first error (RhBug:2009894)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - [config-manager] Update documentation (RhBug:2075366)
  - [builddep] Warning when using macros with source rpms (RhBug:2077820)
  - [repomanage] Use modules only from repo they are handling (RhBug:2072441)
  - Skip all non rpm transaction items for transaction_action plugins (rhbug:2023652)
  - feat(repomanage): Add new option --oldonly


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Dave Dykstra <dwd@fedoraproject.org> - 2.9.9-7
changelog:
  - Update the Requires: fuse-common >= version to 3.4.2-4 because
    fuse-common > 3.4.2-3 is insufficient to force the new version


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-12
changelog:
  - fips: mark PBKDF2 with short key and output sizes non-approved
  - fips: only mark HMAC as approved in PBKDF2
  - fips: mark gnutls_key_generate with short key sizes non-approved
  - fips: fix checking on hash algorithm used in ECDSA
  - fips: preserve operation context around FIPS selftests API


author: Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-13
changelog:
  - fips: make XTS key check failure not fatal (#2130971)
  - enable source archive verification again (#2127094)
  - clear server's session ticket indication at rehandshake (#2136072)
  - crypto-api: add block cipher API with automatic padding (#2084161)
  - fips: remove library path checking from FIPS integrity check (#2140908)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-67
changelog:
  - grub2-mkconfig: dont overwrite BLS cmdline if BLSCFG is true
  - Resolves: #2203203
  - Resolves: #2212320
  - Resolves: #2221543


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-68
changelog:
  - Revert previous patch as it breaks install
  - Related: #2203203
  - Related: #2212320
  - Related: #2221543


author: Tom Stellard <tstellar@redhat.com> - 8.40-50
changelog:
  - Use make_build macro instead of plain make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Jan Macku <jamacku@redhat.com> - 10.05-1
changelog:
  - service: Prevent variables from globbing
  - init.d/functions: Make usage msgs more clear
  - network-scripts: Use net_log() instead of logger
  - Allow updating rfkill switch status while in readonly root mode
  - Add info into specfile about readonly-root deprecation
  - Allow updating mlocate.db while in readonly root mode
  - rc.d/functions: replace grep's --quiet with -q
  - Add warning to warn user when ETHTOOL_OPTS is set and ethtool binary is missing - Olav Vitters
  - Fix spacing in Makefile
  - Add optional 'dev' keyword


author: Jan Macku <jamacku@redhat.com> - 10.07-1
changelog:
  - doc: Fix "Duplicated string found in the file."
  - doc: Documents RES_OPTIONS option
  - doc: Documents ifcfg option LINKSTATUS
  - ci: use up to date keywords and fix some warnings
  - network: fix set_link_up()
  - network: add option to keep the link down
  - Rework of shell ci
  - Translations update from Weblate


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.7-18
changelog:
  - Make iptables-nft-services require iptables-services to avoid confusion
  - Add deprecation notice to iptables-extensions man page as well


author: Phil Sutter <psutter@redhat.com> - 1.8.7-19
changelog:
  - Build iptables-services on C9S only
  - Use systemd_ordering in nft-services, too
  - Drop compat package, nft-services serves well for that purpose
  - Make legacy unconditionally provide iptables, it's not built on RHEL


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Tao Liu <ltao@redhat.com> - 2:1.8.0-5
changelog:
  - Document migrateval. Resolves: rhbz2071959
  - Confine irqbalance to systems where it is useful. Resolves: rhbz2063930
  - Wrong EnvironmentFile in irqbalance.service. Resolves: rhbz2058509


author: Tao Liu <ltao@redhat.com> - 2:1.9.2-3
changelog:
  - Use misc/irqbalance.env as irqbalance.sysconfig
  - Use new rpm macros: autosetup and make_build
  - Use irqbalance-1.9.0-environment-file
  - Remove _hardened_build
  - Remove triggerun -- irqbalance < 2:0.56-3
  - Use SPDX licence


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Frantisek Hrbata <fhrbata@redhat.com> - 20221012-128
changelog:
  - Update to upstream 20221012 release (rhbz 2121447).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - rtl_bt: Update RTL8852C BT USB firmware to 0xD5B8_A40A
  - amdgpu: update GC 10.3.6 RLC firmware
  - amdgpu: update GC 10.3.7 RLC firmware
  - amdgpu: update Yellow Carp RLC firmware
  - amdgpu: update Beige Goby RLC firmware
  - amdgpu: update Dimgrey Cavefish RLC firmware
  - amdgpu: update Navy Flounder RLC firmware
  - amdgpu: update Sienna Cichlid RLC firmware
  - mediatek: Update mt8195 SOF firmware to v0.4.1
  - qcom: add squashed version of a530 zap shader
  - rtw89: 8852c: update fw to v0.27.56.1
  - rtw89: 8852c: update fw to v0.27.56.0
  - mediatek: Update mt8186 SCP firmware
  - linux-firmware: Update AMD cpu microcode
  - mediatek: mt8195: Update scp.img to v2.0.11956
  - mediatek: Add new mt8195 SOF firmware
  - mediatek: Update mt8186 SOF firmware to v0.2.1
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9B8_8207
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - cxgb4: Update firmware to revision 1.27.0.0
  - i915: Add versionless HuC files for current platforms
  - i915: Add GuC v70.5.1 for DG1, DG2, TGL and ADL-P
  - qca: Update firmware files for BT chip WCN3991.
  - Removing crnv32
  - amdgpu: update yellow carp DMCUB firmware
  - amdgpu: add firmware for VCN 3.1.2 IP block
  - amdgpu: add firmware for SDMA 5.2.6 IP block
  - amdgpu: add firmware for PSP 13.0.5 IP block
  - amdgpu: add firmware for GC 10.3.6 IP block
  - amdgpu: add firmware for DCN 3.1.5 IP block
  - qcom: rename Lenovo ThinkPad X13s firmware paths
  - rtw89: 8852c: update fw to v0.27.42.0
  - rtw89: 8852c: update fw to v0.27.36.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.3146
  - amdgpu: update beige goby VCN firmware
  - amdgpu: update dimgrey cavefish VCN firmware
  - amdgpu: update navy flounder VCN firmware
  - amdgpu: update sienna cichlid VCN firmware
  - rtl_bt: Update RTL8852C BT USB firmware to 0xDFB8_5A33
  - mediatek: reference the LICENCE file for MediaTek firmwares
  - mediatek: Add new mt8186 SOF firmware
  - ice: Update package to 1.3.30.0
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00438
  - brcm: Add nvram for Lenovo Yoga Tablet 2 830F/L and 1050F/L tablets
  - brcm: Add nvram for the Xiaomi Mi Pad 2 tablet
  - brcm: Add nvram for the Asus TF103C tablet
  - Add amd-ucode README file
  - qca: Update firmware files for BT chip WCN6750.      This commit will update required firmware files for WCN6750.
  - amdgpu: Update Yellow Carp VCN firmware
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.3020
  - qcom: Add firmware for Lenovo ThinkPad X13s
  - linux-firmware: Add firmware for Cirrus CS35L41
  - i915: Add GuC v70.4.1 for DG2
  - i915: Add DMC v2.07 for DG2
  - amdgpu partially revert "amdgpu: update beige goby to release 22.20"
  - mediatek: Update mt8183/mt8192/mt8195 SCP firmware
  - amdgpu: update renoir to release 22.20
  - amdgpu: update beige goby to release 22.20
  - amdgpu: update yellow carp to release 22.20
  - amdgpu: update dimgrey cavefish to release 22.20
  - amdgpu: update vega20 to release 22.20
  - amdgpu: update vega12 to release 22.20
  - amdgpu: update raven to release 22.20
  - amdgpu: update navy flounder to release 22.20
  - amdgpu: update vega10 to release 22.20
  - amdgpu: update sienna cichlid to release 22.20
  - amdgpu: update navi14 to release 22.20
  - amdgpu: update green sardine to release 22.20
  - amdgpu: update vangogh to release 22.20
  - amdgpu: update navi12 to release 22.20
  - amdgpu: update navi10 to release 22.20
  - amdgpu: update picasso to release 22.20
  - amdgpu: update aldebaran to release 22.20
  - amdgpu: update psp 13.0.8 TA firmware
  - WHENCE: Fix the dangling symlinks fix
  - amdgpu: update DMCUB firmware for DCN 3.1.6
  - WHENCE: Correct dangling symlinks


author: Herton R. Krzesinski <herton@redhat.com> - 20221214-129
changelog:
  - Update to upstream 20221012 release (rhbz 2153045, 2047484).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: updated navi10 firmware for amd-5.4
  - amdgpu: updated yellow carp firmware for amd-5.4
  - amdgpu: updated raven2 firmware for amd-5.4
  - amdgpu: updated raven firmware for amd-5.4
  - amdgpu: updated PSP 13.0.8 firmware for amd-5.4
  - amdgpu: updated GC 10.3.7 RLC firmware for amd-5.4
  - amdgpu: updated vega20 firmware for amd-5.4
  - amdgpu: updated PSP 13.0.5 firmware for amd-5.4
  - amdgpu: add VCN 4.0.0 firmware for amd-5.4
  - amdgpu: add SMU 13.0.0 firmware for amd-5.4
  - amdgpu: Add SDMA 6.0.0 firmware for amd-5.4
  - amdgpu: add PSP 13.0.0 firmware for amd-5.4
  - amdgpu: add GC 11.0.0 firmware for amd-5.4
  - amdgpu: add DCN 3.2.0 firmware for amd-5.4
  - amdgpu: updated vega10 firmware for amd-5.4
  - amdgpu: updated beige goby firmware for amd-5.4
  - amdgpu: updated dimgrey cavefish firmware for amd-5.4
  - amdgpu: updated vangogh firmware for amd-5.4
  - amdgpu: updated picasso firmware for amd-5.4
  - amdgpu: updated navy flounder firmware for amd-5.4
  - amdgpu: updated green sardine firmware for amd-5.4
  - amdgpu: updated sienna cichlid firmware for amd-5.4
  - amdgpu: updated arcture firmware for amd-5.4
  - amdgpu: updated navi14 firmware for amd-5.4
  - amdgpu: updated renoir firmware for amd-5.4
  - amdgpu: updated navi12 firmware for amd-5.4
  - amdgpu: updated aldebaran firmware for amd-5.4
  - sr150 : Add NXP SR150 UWB firmware
  - brcm: add/update firmware files for brcmfmac driver
  - rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098
  - amdgpu: update sdma_5.2.7 firmware
  - QCA: Add Bluetooth firmware for WCN785x This adds required Bluetooth firmware
    files for QCA WCN785x. The image version is 2.0.0-00515.
  - linux-firmware: update firmware for MT7916
  - linux-firmware: update firmware for MT7915
  - i915: Add DMC v2.08 for DG2
  - amdgpu: update green sardine DMCUB firmware
  - i915: Add DMC v2.10 for MTL
  - linux-firmware: update firmware for MT7986
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - amdgpu: update DMCUB firmware for DCN 3.1.6
  - rtl_bt: Update RTL8822C BT UART firmware to 0xFFB8_ABD6
  - rtl_bt: Update RTL8822C BT USB firmware to 0xFFB8_ABD3
  - WHENCE: mrvl: prestera: Add WHENCE entries for newly updated 4.1 FW images
  - mrvl: prestera: Update Marvell Prestera Switchdev FW to v4.1
  - iwlwifi: add new FWs from core74_pv-60 release
  - qcom: drop split a530_zap firmware file
  - qcom/vpu-1.0: drop split firmware in favour of the mbn file
  - qcom/venus-4.2: drop split firmware in favour of the mbn file
  - qcom/venus-4.2: replace split firmware with the mbn file
  - qcom/venus-1.8: replace split firmware with the mbn file
  - linux-firmware: Add firmware for Cirrus CS35L41 on new ASUS Laptop
  - iwlwifi: add new PNVM binaries from core74-44 release
  - iwlwifi: add new FWs from core69-81 release
  - qcom: update venus firmware files for VPU-2.0
  - qcom: remove split SC7280 venus firmware images
  - qcom: update venus firmware file for v5.4
  - qcom: replace split SC7180 venus firmware images with symlink
  - rtw89: 8852b: update fw to v0.27.32.1
  - rtlwifi: update firmware for rtl8192eu to v35.7
  - rtlwifi: Add firmware v4.0 for RTL8188FU
  - i915: Add HuC 7.10.3 for DG2
  - cnm: update chips&media wave521c firmware.
  - brcm: add symlink for Pi Zero 2 W NVRAM file
  - linux-firmware: Add firmware for Cirrus CS35L41 on ASUS Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Laptops
  - rtw89: 8852b: add initial fw v0.27.32.0
  - iwlwifi: add new FWs from core72-129 release
  - iwlwifi: update 9000-family firmwares to core72-129


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-130
changelog:
  - Update to upstream 20230210 release (rhbz 2047488).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Update AMD cpu microcode
  - brcm: revert firmware files for Cypress devices
  - brcm: restore previous firmware file for BCM4329 device
  - rtw88: 8822c: Update normal firmware to v9.9.14
  - i915: Add DMC v2.11 for MTL
  - linux-firmware: Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  - linux-firmware: Add missing tuning files for HP Laptops using Cirrus Amps
  - i915: Add DMC v2.18 for ADLP
  - amdgpu: Add VCN 4.0.2 firmware
  - amdgpu: Add PSP 13.0.4 firmware
  - amdgpu: Add SDMA 6.0.1 fimware
  - amdgpu: Add GC 11.0.1 firmware
  - amdgpu: Add DCN 3.1.4 firmware
  - iwlwifi: remove old intermediate 5.15+ firmwares
  - iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  - iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  - iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  - iwlwifi: remove old unsupported older than 4.14 LTS
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update vangogh firmware
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - brcm: add configuration files for CyberTan WC121
  - qcom: add firmware files for Adreno A200
  - rtw89: 8852c: update fw to v0.27.56.10
  - QCA: Add Bluetooth firmware for QCA2066
  - amdgpu: add VCN4.0.4 firmware from amd-5.4
  - amdgpu: add SMU13.0.7 firmware from amd-5.4
  - amdgpu: add SDMA6.0.2 firmware from amd-5.4
  - amdgpu: add PSP13.0.7 firmware from amd-5.4
  - amdgpu: add GC11.0.2 firmware from amd-5.4
  - amdgpu: add DCN3.2.1 firmware from amd-5.4
  - amdgpu: update VCN4.0.0 firmware from amd-5.4
  - amdgpu: update SMU13.0.0 firmware from amd-5.4
  - amdgpu: update SDMA6.0.0 firmware from amd-5.4
  - amdgpu: update PSP13.0.0 firmware from amd-5.4
  - amdgpu: update GC11.0.0 firmware from amd-5.4
  - iwlwifi: add new FWs from core76-35 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  - iwlwifi: add new FWs from core75-47 release
  - iwlwifi: update 9000-family firmwares to core75-47
  - amdgpu: update renoir DMCUB firmware
  - amdgpu: Update renoir PSP firmware
  - amdgpu: update copyright date for LICENSE.amdgpu
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - cxgb4: Update firmware to revision 1.27.1.0
  - qca: Update firmware files for BT chip WCN6750
  - rtw89: 8852c: update fw to v0.27.56.9
  - rtw89: 8852c: update fw to v0.27.56.8


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-131
changelog:
  - Update amdgpu/gc_11_0_1_rlc.bin file from the following linux-firmware commit:
    commit c0a0bc2 - amdgpu: Update GC 11.0.1 firmware (rhbz 2047462).


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-132
changelog:
  - Update ath10k/ath11k firmware (rhbz 2169013):
    ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
    ath11k: WCN6855 hw2.0: update board-2.bin
    ath11k: WCN6750 hw1.0: update board-2.bin
    ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
    ath11k: IPQ5018 hw1.0: add board-2.bin
    ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
    ath10k: WCN3990 hw1.0: update board-2.bin
  - Ship new firmware files using patch/git apply instead of as rpm sources.


author: Herton R. Krzesinski <herton@redhat.com> - 20230310-133
changelog:
  - Removed notices and check about the liquidio/lio_23xx_vsw.bin file: starting
    with 20230310 release of linux-firmware, it was removed upstream as well.
  - Update to upstream 20230310 release (rhbz 2029566).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qat: update licence text
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  - rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  - WHENCE: remove duplicate File entries
  - WHENCE: remove trailing white space
  - linux-firmware: add fw for qat_4xxx
  - Fix symlinks for Intel firmware
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7921 WiFi device
  - iwlwifi: update core69 and core72 firmwares for Ty device
  - rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  - brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  - brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  - brcm: Add nvram for the Advantech MICA-071 tablet
  - rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  - rtl_bt: Add firmware and config files for RTL8821CS
  - rtw89: 8852b: update fw to v0.29.29.0
  - rtw89: 8852b: update fw to v0.29.26.0
  - liquidio: remove lio_23xx_vsw.bin
  - intel: avs: Add AudioDSP base firmware for CNL-based platforms
  - intel: avs: Add AudioDSP base firmware for APL-based platforms
  - intel: avs: Add AudioDSP base firmware for SKL-based platforms
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ5018 hw1.0: add board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - cnm: update chips&media wave521c firmware.
  - amdgpu: Update GC 11.0.1 firmware
  - intel: catpt: Add AudioDSP base firmware for BDW platforms


author: Jan Stancek <jstancek@redhat.com> - 20230404-134
changelog:
  - Update to upstream 20230404 release (rhbz 2183603).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: Amphion: Update vpu firmware
  - iwlwifi: add new FWs from core78-32 release
  - iwlwifi: update 9000-family firmwares to core78-32
  - amdgpu: Update SDMA 6.0.1 firmware
  - amdgpu: Add PSP 13.0.11 firmware
  - amdgpu: Update PSP 13.0.4 firmware
  - amdgpu: Update GC 11.0.1 firmware
  - amdgpu: Update DCN 3.1.4 firmware
  - amdgpu: Add GC 11.0.4 firmware
  - rtw88: 8822c: Update normal firmware to v9.9.15
  - linux-firmware: Update firmware file for Intel Bluetooth AX101
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: add firmware files for NXP BT chipsets
  - rtw89: 8852b: update format-1 fw to v0.29.29.0
  - rtw89: 8852b: add format-1 fw v0.29.26.0
  - rtw89: 8852b: rollback firmware to v0.27.32.1
  - i915: Update MTL DMC to v2.12
  - i915: Update ADLP DMC to v2.19
  - mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
  - iwlwifi: update core69 and core72 firmwares for So device


author: Jan Stancek <jstancek@redhat.com> - 20230525-135
changelog:
  - Update to upstream 20230525 release (rhbz 2178579).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: update yellow carp firmware for amd.5.5 release
  - amdgpu: update navi14 firmware for amd.5.5 release
  - amdgpu: update navi12 firmware for amd.5.5 release
  - amdgpu: update vega20 firmware for amd.5.5 release
  - amdgpu: update vega12 firmware for amd.5.5 release
  - amdgpu: update navi10 firmware for amd.5.5 release
  - amdgpu: update vega10 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  - amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  - amdgpu: update 13.0.8 firmware for amd.5.5 release
  - amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  - amdgpu: update vangogh firmware for amd.5.5 release
  - amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  - amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  - amdgpu: update renoir firmware for amd.5.5 release
  - amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  - amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  - amdgpu: update green sardine firmware for amd.5.5 release
  - amdgpu: update beige goby firmware for amd.5.5 release
  - amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  - amdgpu: update arcturus firmware for amd.5.5 release
  - amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  - amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  - amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  - amdgpu: update navy flounder firmware for amd.5.5 release
  - amdgpu: update sienna cichlid firmware for amd.5.5 release
  - amdgpu: update aldebaran firmware for amd.5.5 release
  - amdgpu: DMCUB updates for various AMDGPU asics
  - ice: update ice DDP comms package to 1.3.40.0
  - rtlwifi: Add firmware v6.0 for RTL8192FU
  - rtlwifi: Update firmware for RTL8188EU to v28.0
  - cirrus: Add firmware and tuning files for HP G10 series laptops
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - WHENCE: comment out duplicate MediaTek firmware
  - i915: Add GuC v70.6.6 for MTL
  - amdgpu: update DCN 3.1.6 DMCUB firmware
  - rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  - rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  - rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
  - Group all Conexant V4L devices together
  - rtl_nic: update firmware of USB devices
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: update firmware for MT7981
  - qca: Update firmware files for BT chip WCN6750
  - mt76xx: Move the old Mediatek WiFi firmware to mediatek
  - rtl_bt: Add firmware and config files for RTL8851B
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: add firmware for MT7981
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update qat firmware
  - linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops
  - linux-firmware: update firmware for MT7916
  - rtw89: 8852b: update format-1 fw to v0.29.29.1
  - rtw89: 8852c: update fw to v0.27.56.13
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update board-2.bin
  - ath10k: QCA99X0 hw2.0: update board-2.bin
  - ath10k: QCA9984 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin


author: Jan Stancek <jstancek@redhat.com> - 20230625-137
changelog:
  - Fix PSR-SU issues with kernel 6.2 or later (rhbz 2218668)
  - Update to upstream 20230625 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Makefile, copy-firmware: support xz/zstd compressed firmware
  - copy-firmware: silence the last shellcheck warnings
  - copy-firmware: drop obsolete backticks, quote
  - copy-firmware: tweak sed invocation
  - copy-firmware: quote deskdir and dirname
  - check_whence: error if symlinks are in-tree
  - check_whence: error if File: is actually a link
  - check_whence: strip quotation marks
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  - ice: update ice DDP wireless_edge package to 1.3.10.0
  - amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
  - amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  - fix broken cirrus firmware symlinks
  - qcom: Update the microcode files for Adreno a630 GPUs.
  - qcom: sdm845: rename the modem firmware
  - qcom: sdm845: update remoteproc firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  - rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  - amdgpu: DMCUB updates for various AMDGPU asics
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - i915: Add HuC v8.5.0 for MTL
  - mediatek: Update mt8195 SCP firmware to support hevc
  - qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  - cirrus: Add firmware for new Asus ROG Laptops
  - brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  - amdgpu: Update GC 11.0.1 and 11.0.4
  - rtw89: 8851b: add firmware v0.29.41.0
  - ice: update ice DDP comms package to 1.3.40.0
  - cxgb4: Update firmware to revision 1.27.3.0


author: Jan Stancek <jstancek@redhat.com> - 20230726-138
changelog:
  - Navi32 dGPU firmware (rhbz 2047486)
  - CVE-2023-20593 linux-firmware: hw: amd: Cross-Process Information Leak (rhbz 2227156)
  - Update to upstream 20230726 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - copy-firmware: Fix linking directories when using compression
  - copy-firmware: Fix test: unexpected operator
  - qcom: sc8280xp: LENOVO: remove directory sym link
  - qcom: sc8280xp: LENOVO: Remove execute bits
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: add initial SMU 13.0.10 firmware
  - amdgpu: add initial SDMA 6.0.3 firmware
  - amdgpu: add initial PSP 13.0.10 firmware
  - amdgpu: add initial GC 11.0.3 firmware
  - linux-firmware: Update AMD fam17h cpu microcode
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update green sardine VCN firmware
  - amdgpu: update renoir VCN firmware
  - amdgpu: update raven VCN firmware
  - amdgpu: update raven2 VCN firmware
  - amdgpu: update Picasso VCN firmware
  - amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  - Updated NXP SR150 UWB firmware
  - wfx: update to firmware 3.16.1
  - mediatek: Update mt8195 SCP firmware to support 10bit mode
  - i915: update DG2 GuC to v70.8.0
  - i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  - cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models
  - Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - Fix qcom ASoC tglp WHENCE entry
  - check_whence: Check link targets are valid
  - iwlwifi: add new FWs from core80-39 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  - qcom: Add Audio firmware for SC8280XP X13s


author: Jan Stancek <jstancek@redhat.com> - 20230814-139
changelog:
  - CVE-2023-20569 linux-firmware: hw amd: Return Address Predictor velunerability leading to information disclosure (rhbz 2230418)
  - [AMDCLIENT 9.3 Bug] Linux FW update to fix multi monitor behind TBT3 dock & random flickers (rhbz 2227845)
  - amdgpu: partially revert firmware for GC 11.0.0 and GC 11.0.2
  - linux-firmware: Update AMD cpu microcode
  - Merge branch 'for-upstream' of http://git.chelsio.net/pub/git/linux-firmware
  - rtl_bt: Add firmware v2 file for RTL8852C
  - Revert "rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225"
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cxgb4: Update firmware to revision 1.27.4.0
  - Merge branch 'rb3-update' of https://github.com/lumag/linux-firmware
  - Merge https://github.com/pkshih/linux-firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2012.1012
  - linux-firmware: Add URL for latest FW binaries for NXP BT chipsets
  - rtw89: 8851b: update firmware to v0.29.41.1
  - qcom: sdm845: add RB3 sensors DSP firmware
  - amdgpu: Update DMCUB for DCN314 & Yellow Carp
  - Merge branch 'dmc-adlp_2.20-mtl_2.13' of git://anongit.freedesktop.org/drm/drm-firmware
  - Merge branch 'for-upstream' of https://github.com/CirrusLogic/linux-firmware
  - ice: add LAG-supporting DDP package
  - i915: Update MTL DMC to v2.13
  - i915: Update ADLP DMC to v2.20
  - cirrus: Add CS35L41 firmware for Dell Oasis Models


author: Scott Weaver <scweaver@redhat.com> - 20230926-140
changelog:
  - [Intel 9.4 FEAT] [SPR][EMR] QAT firmware update available (rhbz 2238636)
  - [AMDCLIENT 9.4 Feature] Sub-Feature: AMD PMF Linux FW (rhbz 2227340)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amd_pmf: Add initial PMF TA for Smart PC Solution Builder
  - linux-firmware: Update FW files for MRVL PCIE 8997 chipsets
  - rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
  - iwlwifi: add new FWs from core81-65 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release
  - linux-firmware: amd-ucode: Add note on fam19h warnings
  - i915: update MTL HuC to version 8.5.4
  - amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs
  - linux-firmware: add link to sc8280xp audioreach firmware
  - qcom: sm8250: add RB5 sensors DSP firmware
  - qcom: Update vpu-1.0 firmware
  - qcom: sm8250: update DSP firmware
  - qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210
  - qcom: add venus firmware files for v6.0
  - qcom: add firmware for QRB4210 platforms
  - qcom: add firmware for QCM2290 platforms
  - qcom: add GPU firmware for QCM2290 / QRB2210
  - ath10k/WCN3990: move wlanmdsp to qcom/sdm845
  - WHENCE: Don't compress qcom json files
  - WHENCE: amd-ucode: Use new RawFile keyword
  - Create symlinks for all firmware that is duplicate using rdfind
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605
  - Fix carl9170fw shell scripts for shellcheck errors
  - i915: Update MTL DMC to v2.16
  - copy-firmware: Introduce 'RawFile' keyword
  - copy-firmware: Support additional compressor options
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: update firmware for qat_4xxx devices
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: update DMCUB to 0.0.181.0 for various AMDGPU ASICs
  - rtw89: 8852b: update fw to v0.29.29.3
  - rtw89: 8851b: update fw to v0.29.41.2
  - i915: add GSC 102.0.0.1655 for MTL
  - amdgpu: DMCUB updates for various AMDGPU asics
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cirrus: Add CS35L41 firmware for HP G11 models


author: Scott Weaver <scweaver@redhat.com> - 20231030-141
changelog:
  - CVE-2022-46329 linux-firmware: hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (RHEL-14264)
  - amd-ucode early loading broken [RHEL-15387]
  - Update to upstream 20231030 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX101
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - rtl_nic: update firmware of RTL8156B
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update SMU 13.0.0 firmware
  - linux-firmware: add Amlogic bluetooth firmware
  - i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
  - iwlwifi: add a missing FW from core80-39 release
  - WHENCE: add symlink for BananaPi M64
  - linux-firmware: Add firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - i915: Update MTL DMC to v2.17
  - amdgpu: update raven firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.7 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.8 firmware from 5.7 branch
  - amdgpu: update GC 10.3.7 firmware from 5.7 branch
  - amdgpu: update DCN 3.1.6 firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.6 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.5 firmware from 5.7 branch
  - amdgpu: update GC 10.3.6 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.0 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.0 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.0 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.0 firmware from 5.7 branch
  - amdgpu: update GC 11.0.0 firmware from 5.7 branch
  - amdgpu: update vega20 firmware from 5.7 branch
  - amdgpu: update beige goby firmware from 5.7 branch
  - amdgpu: update vega12 firmware from 5.7 branch
  - amdgpu: update vega10 firmware from 5.7 branch
  - amdgpu: update dimgrey cavefish firmware from 5.7 branch
  - amdgpu: update picasso firmware from 5.7 branch
  - amdgpu: update navy flounder firmware from 5.7 branch
  - amdgpu: update vangogh firmware from 5.7 branch
  - amdgpu: update green sardine firmware from 5.7 branch
  - amdgpu: update sienna cichlid firmware from 5.7 branch
  - amdgpu: update PSP 13.0.11 firmware from 5.7 branch
  - amdgpu: update GC 11.0.4 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.1 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.4 firmware from 5.7 branch
  - amdgpu: update GC 11.0.1 firmware from 5.7 branch
  - amdgpu: update navi14 firmware from 5.7 branch
  - amdgpu: update renoir firmware from 5.7 branch
  - amdgpu: update navi12 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.4 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.7 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.2 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.7 firmware from 5.7 branch
  - amdgpu: update GC 11.0.2 firmware from 5.7 branch
  - amdgpu: update yellow carp firmware from 5.7 branch
  - amdgpu: update navi10 firmware from 5.7 branch
  - amdgpu: update raven2 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.10 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.10 firmware from 5.7 branch
  - amdgpu: update GC 11.0.3 firmware from 5.7 branch
  - amdgpu: update aldebaran firmware from 5.7 branch
  - iwlwifi: add FWs for new GL and MA device types with multiple RF modules


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Tao Liu <ltao@redhat.com> - 2.0.25-12
changelog:
  - Reset crashkernel to default value if newly installed kernel has crashkernel=auto
  - Use the correct command to get architecture


author: Tao Liu <ltao@redhat.com> - 2.0.25-13
changelog:
  - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
  - kdump-lib: attempt to fix BOOT_IMAGE detection
  - kdump-lib: change how ostree based systems are detected
  - kdump-lib: clear up references to Atomic/CoreOS


author: Tao Liu <ltao@redhat.com> - 2.0.25-14
changelog:
  - Install nfsv4-related drivers when users specify nfs dumping via dracut_args
  - Revert "ppc64: tackle SRCU hang issue"
  - sysconfig: add zfcp.allow_lun_scan to KDUMP_COMMANDLINE_REMOVE on s390


author: Tao Liu <ltao@redhat.com> - 2.0.26-2
changelog:
  - Rebase makedumpfile to upstream latest(8e8b8814be1)
  - Show how much time kdump has waited for the network to be ready
  - Tell nmcli to not escape colon when getting the path of connection profile


author: Tao Liu <ltao@redhat.com> - 2.0.26-3
changelog:
  - Rebase makedumpfile to v1.7.3
  - kdumpctl: lower the log level in reset_crashkernel_for_installed_kernel


author: Tao Liu <ltao@redhat.com> - 2.0.26-4
changelog:
  - kdumpctl: Add basic UKI support
  - kdumpctl: Move temp file in get_kernel_size to global temp dir
  - kdumpctl: Move get_kernel_size to kdumpctl
  - kdump-lib: fix prepare_cmdline
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS


author: Tao Liu <ltao@redhat.com> - 2.0.26-5
changelog:
  - Add lvm thin provision to kdump supported-kdump-targets.txt
  - mkdumprd: Use the correct syntax to redirect the stderr to null


author: Tao Liu <ltao@redhat.com> - 2.0.26-6
changelog:
  - kdumpctl: Fix the matching of plus symbol by grep's EREs
  - kdump-lib: Evaluate the memory consumption by smmu and mlx5 separately
  - kdump-lib: add support for 64K aarch64
  - kdump-lib: Introduce parse_kver_from_path() to get kernel version from its path name
  - kdump-lib: Introduce a help function _crashkernel_add()
  - Simplify the management of the kernel parameter crashkernel
  - kdump-lib: fix the matching pattern for debug-kernel
  - kdump-lib: always specify version in is_squash_available


author: Tao Liu <ltao@redhat.com> - 2.0.26-7
changelog:
  - kdumpctl: Fix temporary directory location
  - kdump-lib: Match 64k debug kernel in prepare_kdump_bootinfo()


author: Tao Liu <ltao@redhat.com> - 2.0.26-9
changelog:
  - Introduce a function to get reserved memory size
  - powerpc: update fadump sysfs node path
  - kdumpctl: merge check_current_{kdump,fadump}_status
  - kdumpctl: remove unnecessary uses of $?


author: Tao Liu <ltao@redhat.com> - 2.0.27-3
changelog:
  - Rebase makedumpfile to v1.7.4
  - powerpc: update kdumpctl to load kernel signing key for fadump
  - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded


author: Tao Liu <ltao@redhat.com> - 2.0.27-4
changelog:
  - kdump-lib.sh: add extra 64M to default crashkernel if sme/sev is active
  - Allow _crashkernel_add to address larger memory ranges
  - kdump-lib: Harden _crashkernel_add


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - add support for relocation of the PCH data (pch/71934, #2044917)
  - remove 30_threads/future/members/poll.cc (#2050090)
  - avoid overly-greedy match in dejagnu regexp (#2050089)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.67.0-1
changelog:
  - Fix handling transaction id in resolveTransactionItemReason (RhBug:2010259,2053014)
  - Remove deprecated assertions (RhBug:2027383)
  - Skip rich deps for autodetection of unmet dependencies (RhBug:2033130, 2048394)
  - Increase required rpm version since we use `rpmdbCookie()`
  - Add 'loongarch' support
  - Use dnf solv userdata to check versions and checksum (RhBug:2027445)
  - context: Substitute all repository config options (RhBug:2076853)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Christopher Snyder <csnyder@redhat.com> 1.29.26-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Revert "1935446: Use updated cert with SHA-256 algorithm"
    (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Make keeping connection more reliable (jhnidek@redhat.com)
  - Small improvements of keep alive (jhnidek@redhat.com)
  - Keep TCP/TLS connection alive and close connection properly
    (jhnidek@redhat.com)
  - ENT-4700: Switch away from 'imp' (mhorky@redhat.com)
  - ENT-4088: Fix flake8 error E731 (mhorky@redhat.com)
  - ENT-4048: Fix flake8 error E501 (mhorky@redhat.com)
  - ENT-240: Add --no-progress-messages CLI option (mhorky@redhat.com)
  - ENT-240: Use spinner to indicate that API communication is pending
    (mhorky@redhat.com)
  - ENT-240: Make verbose messages translatable (mhorky@redhat.com)
  - ENT-240: Make subscription-manager more verbose (mhorky@redhat.com)
  - 2075455: enable sslverifystatus on repos if advertized by CP
    (ptoscano@redhat.com)
  - RepoUpdateActionCommand: lazy load the consumer auth (ptoscano@redhat.com)
  - 2043331: Do not delete installed SCA cert during registration
    (jhnidek@redhat.com)
  - Remove Group tag from .spec file for RHEL/Fedora (jhnidek@redhat.com)
  - 2073354: Print correct status, when access mode has changed
    (jhnidek@redhat.com)
  - flake8: ignore the build directory (ptoscano@redhat.com)
  - Remove ownership of /etc/rhsm (csnyder@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Revert "build: pin flake8 to < 4" (ptoscano@redhat.com)
  - build: simplify flake8 run (ptoscano@redhat.com)
  - flake8: improve the config a bit (ptoscano@redhat.com)
  - jenkins: run stylish.sh with -e (ptoscano@redhat.com)
  - flake8: simplify/update config (ptoscano@redhat.com)
  - tests: remove unused exception variable (ptoscano@redhat.com)
  - Drop cockpit sources & related bits (ptoscano@redhat.com)
  - cockpit: test with split subscription-manager-cockpit (ptoscano@redhat.com)
  - Remove print statements from test suite (mhorky@redhat.com)
  - Run CI's pytest with verbose flag (mhorky@redhat.com)
  - Optimize rhsmlib DBus test strings (mhorky@redhat.com)
  - Change names of some directories in test/ (mhorky@redhat.com)
  - Reorder rhsmlib tests (mhorky@redhat.com)
  - refresh: clear also the release status (ptoscano@redhat.com)
  - 2074110: clear the release cache on release change (ptoscano@redhat.com)
  - Add gcp_license_codes to system facts. (jhnidek@redhat.com)
  - Pass version to make in debian/rules using 'pkg-info.mk' (reisner@atix.de)
  - Refactored rpm-version to pkg-version (reisner@atix.de)
  - Ignore black commit hashes (mhorky@redhat.com)
  - Add check to YumPluginManager.enable_pkg_plugins() if system is using yum/dnf
    to prevent warnings on debian based systems (reisner@atix.de)
  - Extend HardwareCollector.get_distribution() to return ID and ID_LIKE
    (reisner@atix.de)
  - Format code with black==22.3.0 (mhorky@redhat.com)
  - Add Black to CI (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Fix few grammar mistakes in rhsm.conf and man page (jhnidek@redhat.com)
  - 2058662: Fix inaccurate module status in combined profile
    (jhnidek@redhat.com)
  - Add file .git-blame-ignore-revs (mhorky@redhat.com)
  - Update configuration files for flake8 (mhorky@redhat.com)
  - Use double quotes for strings (mhorky@redhat.com)
  - Format the code with black (mhorky@redhat.com)
  - Custom facts should not influence unit tests of cloud-what
    (jhnidek@redhat.com)
  - Drop redhat-uep.pem (ptoscano@redhat.com)
  - Move redhat-entitlement-authority.pem to container plugin
    (ptoscano@redhat.com)
  - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com)
  - spec: relax subscription-manager-rhsm-certificates requires
    (ptoscano@redhat.com)
  - test: Rely on insights-client.service to succeed in testSubAndInAndFail
    (mvollmer@redhat.com)
  - integration-tests: Run testSubAndInAndFail with "setenforce 0"
    (mvollmer@redhat.com)
  - integration-test: Use custom TLS certs for mock-insights
    (mvollmer@redhat.com)
  - Keep the user namespace from the host (csnyder@redhat.com)
  - tracking return values of tests (jmolet@redhat.com)
  - Adding containers for development and test (csnyder@redhat.com)
  - Drop old git-checkcommits bits (ptoscano@redhat.com)
  - tests: drop no more needed bits (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase (ptoscano@redhat.com)
  - Drop the rel-eng directory for old tito versions (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase.assertRaisesNothing()
    (ptoscano@redhat.com)
  - tests: use write_to_file_utf8() from syspurpose.utils (ptoscano@redhat.com)
  - tests: directly use tempfile.TemporaryDirectory() (ptoscano@redhat.com)
  - tests: use Capture from the main sub-man fitxure module (ptoscano@redhat.com)
  - tests: switch from assert_equal_dict() to assertEqual() (ptoscano@redhat.com)
  - tests: switch from assert_string_equals() to assertEqual()
    (ptoscano@redhat.com)
  - cockpit: bump API version to 264 (ptoscano@redhat.com)
  - cockpit: simplify skipUnlessDistroFamily() to properly skip tests
    (ptoscano@redhat.com)
  - cockpit: drop rhel-atomic bits (ptoscano@redhat.com)
  - cockpit: bump candlepin minimum waiting time to 10 seconds
    (ptoscano@redhat.com)
  - integration-test: Updates for newer insights-client (mvollmer@redhat.com)
  - 2018221: Cockpit use "Organization ID" in label (jhnidek@redhat.com)
  - 2059631: rhsm.conf: fix typo in comment (ptoscano@redhat.com)
  - 2057053: Improve API of detection of cloud-what (jhnidek@redhat.com)
  - 1935446: Revert "Revert "1935446: Use updated cert with SHA-256 algorithm""
    (ptoscano@redhat.com)
  - cockpit: set $RPM_BUILD_ROOT w/ installing (ptoscano@redhat.com)
  - 2057053: Facts: do no use heuristics detection of cloud (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Improve azure determination method (suttner@atix.de)
  - 2056896: Handle all exceptions of gathering data properly
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.29-1
changelog:
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5215: Handle all exceptions caused by network problems
    (mhorky@redhat.com)
  - ENT-5215: Handle errors raised in DNF plugin (mhorky@redhat.com)
  - Make TestProfileManager subclass of SubManFixture (mhorky@redhat.com)
  - ENT-5054: Drop singleton implementation in rhsmlib/utils.py
    (mhorky@redhat.com)
  - Rename test file for rhsm/utils.py (mhorky@redhat.com)
  - ENT-5054: Create singleton decorators in rhsm/utils.py (mhorky@redhat.com)
  - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com)
  - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com)
  - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com)
  - facts: add dmidecode parser and facts collector (ptoscano@redhat.com)
  - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com)
  - 2096446: Make 'rhsm-debug' autocomplete --no-progress-messages
    (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 2092014: Do not use injections in rhsm (mhorky@redhat.com)
  - ci: run rpmlint as part of stylish (ptoscano@redhat.com)
  - build: switch rpmlint check to rpmlint 2.x (ptoscano@redhat.com)
  - ci: drop stylish job from Jenkins (ptoscano@redhat.com)
  - ci: add black & flake8 check using GitHub Actions (ptoscano@redhat.com)
  - build: install files without exec permissions (ptoscano@redhat.com)
  - 2092014: Disable progress messages when sub-man RPM is not installed
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.30-1
changelog:
  - Fix issue, when connection is not shared (jhnidek@redhat.com)
  - Unit tests: Add stub class for SyspurposeComplianceStatusCache
    (jhnidek@redhat.com)
  - ENT-4664: Ensure tests clean up after themselves (mhorky@redhat.com)
  - Refactoring of cloud-what unit tests (jhnidek@redhat.com)
  - 2111035: Do not allow reusing TCP connection for rhsm.service
    (jhnidek@redhat.com)
  - spec: remove redundant License from python3-cloud-what (ptoscano@redhat.com)
  - Ensure tests don't fail when run under root (mhorky@redhat.com)
  - Fix issue with unit tests (jhnidek@redhat.com)
  - 2111757: Make parsing of HTTP headers more reliable (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5286: Unify environment variable evaluation (mhorky@redhat.com)
  - Use dmidecode on aarch64 (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Increase security level for zypper repos managed by sub-man (suttner@atix.de)
  - ENT-5271: Fix spelling of Candlepin API endpoint description
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.31-1
changelog:
  - warning: refname 'subscription-manager-1.29.30-1' is ambiguous.
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - tests: fix typos in test method names (ptoscano@redhat.com)
  - 2125227: Fixed incorrect registration warning with yum/dnf
    (jajerome@redhat.com)
  - 2094942: Fixed expected message for manual attach case (jajerome@redhat.com)
  - ENT-5102: Type-hint rhsmlib/facts (mhorky@redhat.com)
  - 2094942: Improve warning message (auto-attach in SCA mode)
    (jhnidek@redhat.com)
  - Update INSTALL.md (mhorky@redhat.com)
  - Remove unused classes of DBus tests (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Unregister objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Register objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Products object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of AllFacts object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Entitlement object (mhorky@redhat.com)
  - Fix typo in method name of EntitlementService (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Consumer object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Attach object (mhorky@redhat.com)
  - Fix possible parsing issues of dmidecode output (mhorky@redhat.com)
  - ENT-5317: New way to test DBus methods, starting with Config
    (mhorky@redhat.com)
  - cockpit: disable the reference branch for sub-man-cockpit
    (ptoscano@redhat.com)
  - TESTING.md: Remove mention of pytest-xdist (mhorky@redhat.com)
  - INSTALL.md: Update list of packages to be installed (mhorky@redhat.com)
  - Stop calling pytest with --failed-first (mhorky@redhat.com)
  - GCP: Better computing of cached token TTL (jhnidek@redhat.com)
  - 2101510: Fix D-Bus Register() and update entitlement certs
    (jhnidek@redhat.com)
  - 2120744: Close keycloak connection properly (jhnidek@redhat.com)
  - 2094942: [RFE] Improve the message, when  SCA is enabled (jhnidek@redhat.com)
  - Replaced list[] with List[] and dict[] with Dict[]. (jhnidek@redhat.com)
  - Update TESTING.md (mhorky@redhat.com)
  - Update README.md (mhorky@redhat.com)
  - Add INSTALL.md (mhorky@redhat.com)
  - Added type hints to package rhsmlib.service (jhnidek@redhat.com)
  - Added some missing imports. (jhnidek@redhat.com)
  - Reformated using black. (jhnidek@redhat.com)
  - Added one FIXME to redeem.py (jhnidek@redhat.com)
  - Added type hints and FIXMEs to rhsm package. (jhnidek@redhat.com)
  - [wip] ENT-5100: Type hint rhsm (mhorky@redhat.com)
  - Added type hints to syspurpose package (jhnidek@redhat.com)
  - Drop libnotify-devel usage (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.32-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - utils: import pkg_resources only when needed (ptoscano@redhat.com)
  - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)
  - Call parent methods in DBusServerStubProvider (mhorky@redhat.com)
  - Base D-Bus tests on SubManFixture (mhorky@redhat.com)
  - ENT-5532: Call rhsm-package-profile-uploader with --force-upload
    (jhnidek@redhat.com)
  - 2108549: do not detect containers in OCP as such (ptoscano@redhat.com)
  - tests: extend InContainerTests for path checks (ptoscano@redhat.com)
  - Resolved issues in PR feedback (jajerome@redhat.com)
  - Updated request handling in connection.py (jajerome@redhat.com)
  - Resolve issues from PR review (jajerome@redhat.com)
  - Removed fixme since activateMachine() is still used (jajerome@redhat.com)
  - Black/flake8 fixes (jajerome@redhat.com)
  - FIXME: renamed default argument to not shadow inbuilt type
    (jajerome@redhat.com)
  - FIXME: removed Restlib and using only BaseRestLib (jajerome@redhat.com)
  - FIXME: updated unregisterConsumer() to return True if status code is 204
    (jajerome@redhat.com)
  - FIXME: changed unbindBySerial/unbindByPoolId to return bool
    (jajerome@redhat.com)
  - FIXME: changed default value of facts in updateConsumerFacts()
    (jajerome@redhat.com)
  - FIXME: sanitized email/lang variables in activateMachine()
    (jajerome@redhat.com)
  - FIXME: made email argument required in activatemachine()
    (jajerome@redhat.com)
  - FIXME: changed default value of serials argument to None
    (jajerome@redhat.com)
  - FIXME: removed unused username/password arguments (jajerome@redhat.com)
  - FIXME: raise exceptions where sanitizing guest Id returns None
    (jajerome@redhat.com)
  - FIXME: renamed response argument to result in validateResponse()
    (jajerome@redhat.com)
  - FIXME: rename info argument to params in _request() (jajerome@redhat.com)
  - FIXME: added error message when redeeming subscription fails
    (jajerome@redhat.com)
  - FIXME: removed unused UEPConnection class methods (jajerome@redhat.com)
  - Fixed profile tests setting Package release numbers as int instead of str
    (jajerome@redhat.com)
  - FIXME: changed epoch data type to str in Package class (jajerome@redhat.com)
  - FIXME: added null-checks for stdout/stderr wrapper (jajerome@redhat.com)
  - FIXME: re-iterated a fix is not needed for urlparse (jajerome@redhat.com)
  - FIXME: added exception messages to parse_url() (jajerome@redhat.com)
  - FIXME: changed  lists to tuples in StatusSpinnerStyle class
    (jajerome@redhat.com)
  - FIXME: fixed type hints for _normalize_string() (jajerome@redhat.com)
  - FIXME: use super() instead of class name (jajerome@redhat.com)
  - FIXME: fixed strings not being translated in is_log_level_valid()
    (jajerome@redhat.com)
  - FIXME: resolved improper use of tempfile in save() (jajerome@redhat.com)
  - FIXME: fixed config_file argument not being used in save()
    (jajerome@redhat.com)
  - FIXME: updated default value for files_name argument in read()
    (jajerome@redhat.com)
  - FIXME: fixed minor typo in bogus() (jajerome@redhat.com)
  - FIXME: changed read() to return self instead of None (jajerome@redhat.com)
  - FIXME: set default argument 'facts' to None in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: renamed argument 'type' to 'consumer_type' in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: ping() resolved in rhsm/connection.py (jajerome@redhat.com)
  - Remove test dependency 'mock' (mhorky@redhat.com)
  - Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - Mark D-Bus tests (mhorky@redhat.com)
  - 2131789: Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com)
  - Catch generic OSError during HTTPSConnection.connect() (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com)
  - Catch also CertificateLoadingError for identity cert loading
    (ptoscano@redhat.com)
  - ENT-4286: Additional fix for exception handling (jajerome@redhat.com)
  - Remove D-Bus env vars from container and CI files (mhorky@redhat.com)
  - 2121350: Implement "force" register option in rhsm dbus python binding
    (jajerome@redhat.com)
  - Show locals in pytest output (mhorky@redhat.com)
  - Improve formatting of CertificateLoadingError (ptoscano@redhat.com)
  - Raise a new CertificateLoadingError on X.509 loading failures
    (ptoscano@redhat.com)
  - Improve formatting of UnknownContentException (ptoscano@redhat.com)
  - connection: improve the internal UnknownContentException
    (ptoscano@redhat.com)
  - utils: add terminal_printable_content (ptoscano@redhat.com)
  - connection: rename NetworkException to UnknownContentException
    (ptoscano@redhat.com)
  - Improve formatting of ProxyException (ptoscano@redhat.com)
  - connection: improve the internal ProxyException (ptoscano@redhat.com)
  - Improve formatting of socket.gaierror (ptoscano@redhat.com)
  - Improve formatting of ConnectionError (ptoscano@redhat.com)
  - Improve formatting of BadCertificateException (ptoscano@redhat.com)
  - connection: extend BadCertificateException w/ SSL exception
    (ptoscano@redhat.com)
  - connection: drop dead code (ptoscano@redhat.com)
  - ENT-4286: Simplify exception reporting with system_exit()
    (jajerome@redhat.com)
  - 2136694: Clear progress messages properly (mhorky@redhat.com)
  - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com)
  - 2097679: Additional fix for non-interactive parameters (jajerome@redhat.com)
  - 2097679: Fixed script hang in non-interactive execution (jajerome@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.33-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Simplify test setup for D-Bus fact collection (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Andreas Schneider <asn@redhat.com> - 4.17.2-102
changelog:
  - Fix CVE-2022-1615 GnuTLS gnutls_rnd() can fail and give predictable random values
  - resolves: rhbz#2126175


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-103
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2131993


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.4-100
changelog:
  - related: rhbz#2131993 - Update to version 4.17.4
  - resolves: rhbz#2154373 - Fix CVE-2022-38023
  - resolves: rhbz#2143196 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2114884 - Fix id command to return new groups after successful user login
  - resolves: rhbz#2154885 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-102
changelog:
  - resolves: rhbz#2169980 - Fix winbind memory leak
  - resolves: rhbz#2156056 - Fix Samba shares not accessible issue


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Fix static analyzer issues in rhbz#1938795
  - Rebase to version 0.9.6
  - Resolves: rhbz#1994607, rhbz#1938795, rhbz#2009669


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Tom Stellard <tstellar@redhat.com> - 1.2.6-2
changelog:
  - Add BuildRequires: gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Than Ngo <than@redhat.com> - 1.7.14-3
changelog:
  - Resolves: #2181241, lsvpd is not reporting the correct I/O microcode
    for HBA, PCIe, SAS adapters, HDD, etc


author: Than Ngo <than@redhat.com> - 1.7.14-4
changelog:
  - Related: #2181241, backport upstream patch to update update nvme_templates
    with logpage format for 0005 and 0006 versions


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-10
changelog:
  - tests: shell: better parameters for the interval stack overflow test
  - tests: shell: $NFT needs to be invoked unquoted


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-11
changelog:
  - tests: py: add dnat to port without defining destination address
  - evaluate: fix inet nat with no layer 3 info
  - include: missing sctp_chunk.h in Makefile.am
  - exthdr: Implement SCTP Chunk matching
  - scanner: sctp: Move to own scope
  - scanner: introduce start condition stack
  - json: Simplify non-tcpopt exthdr printing a bit


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-4
changelog:
  - Backport Channel Binding support. Related: rhbz#1967853
  - Fix coverity issues. Related: rhbz#1938829


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-26
changelog:
  - Fix one-byte overflow in SSH banner processing
    Resolves: rhbz#2138345
  - Fix double free() in error path
    Resolves: rhbz#2138347


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-28
changelog:
  - Do not try to use SHA1 for host key ownership proof when we don't support it server-side
    Resolves: rhbz#2088750


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-11
changelog:
  - Add missing reference to patchfile to add explicit FIPS indicator to RSA
    encryption and RSASVE and fix the gettable parameter list for the RSA
    asymmetric cipher implementation.
    Resolves: rhbz#2179379


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-13
changelog:
  - Enforce using EMS in FIPS mode
    Resolves: rhbz#2157951
  - Fix excessive resource usage in verifying X509 policy constraints
    Resolves: rhbz#2186661
  - Fix invalid certificate policies in leaf certificates check
    Resolves: rhbz#2187429
  - Certificate policy check not enabled
    Resolves: rhbz#2187431
  - OpenSSL rsa_verify_recover key length checks in FIPS mode
    Resolves: rhbz#2186819


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.7-16
changelog:
  - Upload new upstream sources without manually hobbling them.
  - Remove the hobbling script as it is redundant. It is now allowed to ship
    the sources of patented EC curves, however it is still made unavailable to use
    by compiling with the 'no-ec2m' Configure option. The additional forbidden
    curves such as P-160, P-192, wap-tls curves are manually removed by updating
    0011-Remove-EC-curves.patch.
  - Enable Brainpool curves.
  - Apply the changes to ec_curve.c and  ectest.c as a new patch
    0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
  - Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
  - Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.
    Resolves: rhbz#2130618, rhbz#2188180


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-19
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2169757


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-20
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211340


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-3
changelog:
  - Fix misparsing long numbers as a backreference and a number without
    a closing bracket as a quantifier (upstream bug #2690)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-2
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Than Ngo <than@redhat.com> - 1.3.8-9
changelog:
  - Resolves: #1937038, New lparstat -x option to report the security flavor
  - Use od instead xxd
  - rebase patch fix_boot-time_bonding_interface_cleanup_and_avoid_use_ifcfg
  - ppc64_cpu --help does not list --version as an option
  - take care of NUMA topology when removing memory (DLPAR)


author: Than Ngo <than@redhat.com> - 1.3.10-1
changelog:
  - Resolves: #1920964, P10 Power Mode Reporting
  - Resolves: #2050893, Linux Hybrid Network Virtualizatio
  - Resolves: #2065169, bootloader fails to update boot order after OS install
  - Resolves: #2071862, Fix NM HNV setting primary slave
  - Resolves: #2089106, smtstate --save command failed


author: Than Ngo <than@redhat.com> - 1.3.10-3
changelog:
  - Resolves: #2111991, Add udev rule for the nx-gzip in to the core subpackage
  - Resolves: #2121470, Fix lsslot -c mem output when using 4GB LMB size
  - Resolves: #2110129, Add NVMf-FC boot support for Power


author: Than Ngo <than@redhat.com> - 1.3.10-4
changelog:
  - Resolves: #2150698, handle nsid of nvmf device as hexadecimal number
  - Resolves: #2150697, setup multiple device path for a nvmf boot device


author: Than Ngo <than@redhat.com> - 1.3.10-6
changelog:
  - Resolves: #2166870, lparstat: Fix display of mode for dedicated-donating partition
  - Resolves: #2169269, lparstat: Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.10-7
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  Resolves: #2225371


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.16-2
changelog:
  - ps: new exe format option to show real path to exe
  - pidof: new -w option to show kernel worker threads
  - pkill: manpage to document -e option
  - Resolves: bz#1629413
  - Resolves: bz#1399206


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Tomas Orsava <torsava@redhat.com> - 3.9.9-2
changelog:
  - Read pre-packaged Python wheels from a newly versioned directory
    /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.16-1
changelog:
  - Update to 3.9.16
  - Security fixes for CVE-2022-42919 and CVE-2022-45061
  Resolves: rhbz#2138705, rhbz#2144072


author: Tomas Orsava <torsava@redhat.com> - 1.14.5-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-7614


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.1-3
changelog:
  - Subpackage python2-pysocks has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-10
changelog:
  - Address covscan issues in binding sigs validation patch (#1943724)
  - Bump hash for rpmdb cookie to SHA256 for FIPS (#2048455)
  - Add --path query option (#2037352)
  - Skip recorded symlinks in --setperms (#2025906)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-11
changelog:
  - Fix IMA signature lengths assumed constant, take III (#2018937)
  - Fix regression reading rpm v3 and other rare packages (#2037186)
  - Fix spurious %transfiletriggerpostun execution (#2023692)


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-20
changelog:
  - Add bcond macros (#2129060)
  - Fix db queries with carets (#2129468)
  - Remove spurious Python rpm module (#2135731)
  - Handle SELinux log messages (#2123719)
  - Add --nocompression to rpm2archive (#2150804)


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-23
changelog:
  - Don't error out on IMA signatures on files not supporting them
    (#2157835, #2157836)
  - Use external find-debug and debugedit (#2166383)


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


