# changelog

author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Annocheck: Add code to handle another glibc function built without LTO.
  - GCC Plugin: Do not run if other plugins are active.  (#2175768)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - Annocheck: Fix lto testing.  (#2177140)
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.
  - gcc-plugin: use a bigger buffer for constructing notes.
  - llvm-plugin: Fix detection of optimization level.  Improve test.
  - clang-plugin: Improve test.
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.
  - configure: Simplify.
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.
  - gcc plugin: Keep ELF notes at protocol version 3.
  - Protocol Version 4: String format notes.
  - Annocheck: Update message for LTO tests.  (#2177140)


author: Nick Clifton <nickc@redhat.com> - 12.09-1
changelog:
  - Annocheck: Fix detection of missing plugin options.  (#2189492)
  - Fix generation of auto-generated files.
  - Fix covscan reported errors.


author: Nick Clifton <nickc@redhat.com> - 12.12-1
changelog:
  - Rebuild against LLVM-16.  (#2212739)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)
  - Annocheck: Suppress more tests for Rust binaries.


author: Nick Clifton <nickc@redhat.com> - 12.28-1
changelog:
  - Tests: Fix obsoleted syntax in plans/ci.fmf  (RHEL-12194)
  - Spec File: Use SPDX licensing.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - LLVM Plugin: Fix building with LLVM version 17.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon binutils-devel.
  - Annocheck: Add detection of known parts of libstdc++-nonshared.a that contain gaps.  (#2217864)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifron <nickc@redhat.com> - 12.31-1
changelog:
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.


author: Nick Clifron <nickc@redhat.com> - 12.64-1
changelog:
  - Rebase to 12.64, allowing build with LLVM 18.  (RHEL-49953)
  - Retire: annobin-strings-no-attach.patch
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - GCC Plugin: Fix bug extracing the value of target specific command line options.
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - Clang Plugin: Fix building with Clang 18.  (#31414)
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
  - GCC Plugin: Do not use section groups with string format notes.
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
  - Annocheck: Improve detection of FIPS compliant GO binaries.
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.
  - GCC Plugin: Add support for -fhardended.


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - Spec File: Add LTO option to clang and llvm plugin builds.  (RHEL-50796)


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-6
changelog:
  - Bound the amount of work performed for delegations (CVE-2022-2795)
  - Add /usr/lib64/named to bind-chroot (#2129466)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-9
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20231016-1.git77ceb0b
changelog:
  - openssl: fix SHA1 and NO-ENFORCE-EMS interaction
  - bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx


author: Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
changelog:
  - turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
  - fips-mode-setup: increase chroot-friendliness (RHEL-11350)
  - fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)


author: Clemens Lang <cllang@redhat.com> - 20231109-1.git0ceff7f
changelog:
  - Restore support for scoped ssh_etm directives (RHEL-15925)
  - Print matches in syntax deprecation warnings (RHEL-15925)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
changelog:
  - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240202-1.git283706d
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - fips-finish-install: Create/remove /etc/system-fips on ostree systems
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.gitb1c706d
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: use newly introduced SKIP_LINTING=1
  - packaging: drop stale workarounds


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240815-1.gite217f03
changelog:
  - java: start controlling / disable DTLSv1.0
  - java: disable anon ciphersuites, tying them to NULL
  - java: respect more key size restrictions
  - java: specify jdk.tls.namedGroups system property
  - java: make hash, mac and sign more orthogonal
  - fips-mode-setup: add another scary "unsupported"
  - fips-mode-setup: flashy ticking warning upon use
  - java: use and include jdk.disabled.namedCurves
  - ec_min_size: introduce and use in java, default to 256
  - java: stop specifying jdk.tls.namedGroups in javasystem
  - fips-setup-helper: add a libexec helper for anaconda
  - fips-mode-setup: force --no-bootcfg when UKI is detected


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Patsy Griffin <patsy@redhat.com> - 2.34-113
changelog:
  - CVE-2024-33601 glibc: netgroup cache may terminate daemon on
    memory allocation failure (RHEL-34272)
  - CVE-2024-33602 glibc: netgroup cache assumes NSS callback 
    uses in-buffer strings (RHEL-34274)


author: Patsy Griffin <patsy@redhat.com> - 2.34-115
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39992)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Jan Macku <jamacku@redhat.com> - 10.11.8-1
changelog:
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - sync spec with c9s


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Michel Lind <salimma@fedoraproject.org> - 1.8.10-2.2
changelog:
  - Hardcode dist for iptables dependency, since on epel9-next it evaluates to
    el9.next while upstream's disttag is only el9


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.0.1-5
changelog:
  - Actually, specify pagesizes according to arches, closes #1545539
  - Remove patch disabling thp as this is now handled by configure, see
    upstream issue 526


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-494.el9]
changelog:
  - Revert: Duplicated code of __iowrite32_copy() (Lucas Zampieri)
  - cxl/mem: Fix no cxl_nvd during pmem region auto-assembling (John W. Linville) [RHEL-51364] {CVE-2024-41085}
  - cxl/region: Avoid null pointer dereference in region lookup (John W. Linville) [RHEL-51656] {CVE-2024-41084}
  - PCI/MSI: Fix UAF in msi_capability_init (John W. Linville) [RHEL-51436] {CVE-2024-41096}
  - perf test stat_bpf_counter.sh: Stabilize the test results (Michael Petlan) [RHEL-33020]
  - perf test bpf-counters: Add test for BPF event modifier (Michael Petlan) [RHEL-33020]
  - nvme: avoid double free special payload (CKI Backport Bot) [RHEL-51309] {CVE-2024-41073}
  - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48282] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48282] {CVE-2024-40972}
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48517] {CVE-2024-40998}
  - ext4: turn quotas off if mount failed after enabling quotas (Carlos Maiolino) [RHEL-48517] {CVE-2024-40998}
  - arm64/io: add constant-argument check (Charles Mirabile) [RHEL-43402]
  - IB/mlx5: Use __iowrite64_copy() for write combining stores (Charles Mirabile) [RHEL-43402]
  - arm64/io: Provide a WC friendly __iowriteXX_copy() (Charles Mirabile) [RHEL-43402]
  - s390: Stop using weak symbols for __iowrite64_copy() (Charles Mirabile) [RHEL-43402]
  - s390: use the correct count for __iowrite64_copy() (Charles Mirabile) [RHEL-43402]
  - s390: Implement __iowrite32_copy() (Charles Mirabile) [RHEL-43402]
  - x86: Stop using weak symbols for __iowrite32_copy() (Charles Mirabile) [RHEL-43402]
  - hwmon: (dell-smm) Add Dell Precision 7540 to fan control whitelist (David Arcari) [RHEL-37108]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-495.el9]
changelog:
  - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52031] {CVE-2024-42154}
  - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (Benjamin Coddington) [RHEL-53004]
  - NFSD: Support write delegations in LAYOUTGET (Benjamin Coddington) [RHEL-53004]
  - nfs: fix undefined behavior in nfs_block_bits() (Benjamin Coddington) [RHEL-53004]
  - knfsd: LOOKUP can return an illegal error value (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington) [RHEL-53004]
  - nfs: pass explicit offset/count to trace events (Benjamin Coddington) [RHEL-53004]
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Benjamin Coddington) [RHEL-53004]
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Benjamin Coddington) [RHEL-53004]
  - NFSD: Fix nfsdcld warning (Benjamin Coddington) [RHEL-53004]
  - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (Benjamin Coddington) [RHEL-53004]
  - xprtrdma: Fix rpcrdma_reqs_reset() (Benjamin Coddington) [RHEL-53004]
  - Revert "nfsd: fix oops when reading pool_stats before server is started" (Benjamin Coddington) [RHEL-53004]
  - nfsd: initialise nfsd_info.mutex early. (Benjamin Coddington) [RHEL-53004]
  - nfs: drop the incorrect assertion in nfs_swap_rw() (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: Fix backchannel reply, again (Benjamin Coddington) [RHEL-53004]
  - NFS: add barriers when testing for NFS_FSDATA_BLOCKED (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: return proper error from gss_wrap_req_priv (Benjamin Coddington) [RHEL-53004]
  - NFSv4.1 enforce rootpath check in fs_location query (Benjamin Coddington) [RHEL-53004]
  - pNFS/filelayout: fixup pNfs allocation modes (Benjamin Coddington) [RHEL-53004]
  - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL (Benjamin Coddington) [RHEL-53004]
  - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS (Benjamin Coddington) [RHEL-53004]
  - sunrpc: fix NFSACL RPC retry on soft mount (Benjamin Coddington) [RHEL-53004]
  - nfs: keep server info for remounts (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: Fix gss_free_in_token_pages() (Benjamin Coddington) [RHEL-53004]
  - sunrpc: removed redundant procp check (Benjamin Coddington) [RHEL-53004]
  - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52367] {CVE-2024-42225}
  - ice: xsk: fix txq interrupt mapping (Petr Oros) [RHEL-15670]
  - ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (Petr Oros) [RHEL-15670]
  - ice: improve updating ice_{t,r}x_ring::xsk_pool (Petr Oros) [RHEL-15670]
  - ice: toggle netif_carrier when setting up XSK pool (Petr Oros) [RHEL-15670]
  - ice: modify error handling when setting XSK pool in ndo_bpf (Petr Oros) [RHEL-15670]
  - ice: replace synchronize_rcu with synchronize_net (Petr Oros) [RHEL-15670]
  - ice: don't busy wait for Rx queue disable in ice_qp_dis() (Petr Oros) [RHEL-15670]
  - ice: respect netif readiness in AF_XDP ZC related ndo's (Petr Oros) [RHEL-15670]
  - wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband (CKI Backport Bot) [RHEL-51809] {CVE-2024-42125}
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (CKI Backport Bot) [RHEL-51767] {CVE-2024-42114}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51033] {CVE-2024-41041}
  - ACPI: fix double INT_SRC_OVR override (Desnes Nunes) [RHEL-45576]
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-46609]
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-46609]
  - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49371] {CVE-2024-41005}
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46479] {CVE-2024-39472}
  - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35048] {CVE-2024-27013}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-496.el9]
changelog:
  - mptcp: fix possible NULL dereferences (Antoine Tenart) [RHEL-48648]
  - af_packet: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - udp: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - tcp: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - net: raw: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - ping: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - net: introduce sk_skb_reason_drop function (Antoine Tenart) [RHEL-48648]
  - net: add rx_sk to trace_kfree_skb (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_check_req() (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: handle timewait cases in the receive path (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_rcv_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_ack() (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_rcv_synsent_state_process() (Antoine Tenart) [RHEL-48648]
  - rstreason: make it work in trace world (Antoine Tenart) [RHEL-48648]
  - mptcp: introducing a helper into active reset logic (Antoine Tenart) [RHEL-48648]
  - mptcp: support rstreason for passive reset (Antoine Tenart) [RHEL-48648]
  - tcp: support rstreason for passive reset (Antoine Tenart) [RHEL-48648]
  - rstreason: prepare for active reset (Antoine Tenart) [RHEL-48648]
  - rstreason: prepare for passive reset (Antoine Tenart) [RHEL-48648]
  - net: introduce rstreason to detect why the RST is sent (Antoine Tenart) [RHEL-48648]
  - trace: tcp: fully support trace_tcp_send_reset (Antoine Tenart) [RHEL-48648]
  - trace: adjust TP_STORE_ADDR_PORTS_SKB() parameters (Antoine Tenart) [RHEL-48648]
  - net: udp: add IP/port data to the tracepoint udp/udp_fail_queue_rcv_skb (Antoine Tenart) [RHEL-48648]
  - net: port TP_STORE_ADDR_PORTS_SKB macro to be tcp/udp independent (Antoine Tenart) [RHEL-48648]
  - trace: use TP_STORE_ADDRS() macro in inet_sock_set_state() (Antoine Tenart) [RHEL-48648]
  - trace: use TP_STORE_ADDRS() macro in inet_sk_error_report() (Antoine Tenart) [RHEL-48648]
  - trace: move to TP_STORE_ADDRS related macro to net_probe_common.h (Antoine Tenart) [RHEL-48648]
  - inet: preserve const qualifier in inet_sk() (Antoine Tenart) [RHEL-48648]
  - tcp: make dropreason in tcp_child_process() work (Antoine Tenart) [RHEL-48648]
  - tcp: make the dropreason really work when calling tcp_rcv_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: add dropreasons in tcp_rcv_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: add more specific possible drop reasons in tcp_rcv_synsent_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: introduce dropreasons in receive path (Antoine Tenart) [RHEL-48648]
  - tcp: use drop reasons in cookie check for ipv6 (Antoine Tenart) [RHEL-48648]
  - tcp: directly drop skb in cookie check for ipv6 (Antoine Tenart) [RHEL-48648]
  - tcp: use drop reasons in cookie check for ipv4 (Antoine Tenart) [RHEL-48648]
  - tcp: directly drop skb in cookie check for ipv4 (Antoine Tenart) [RHEL-48648]
  - tcp: add a dropreason definitions and prepare for cookie check (Antoine Tenart) [RHEL-48648]
  - tcp: Clean up goto labels in cookie_v[46]_check(). (Antoine Tenart) [RHEL-48648]
  - net: use %pS for kfree_skb tracing event location (Antoine Tenart) [RHEL-48648]
  - PCI: endpoint: remove bogus return in pci_epf_device_remove() (Brian Masney) [RHEL-47218]
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37006] {CVE-2024-35855}
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37010] {CVE-2024-35854}
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37014] {CVE-2024-35853}
  - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37486] {CVE-2024-36006}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-497.el9]
changelog:
  - Add amd-pstate-ut to the mod-internal.list (David Arcari) [RHEL-53955]
  - firmware: cs_dsp: Return error if block header overflows file (David Arcari) [RHEL-53650] {CVE-2024-42238}
  - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51138] {CVE-2024-41055}
  - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51138] {CVE-2024-41055}
  - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51046] {CVE-2024-41042}
  - netfilter: nf_tables: allow loop termination for pending fatal signal (Phil Sutter) [RHEL-51046]
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51522] {CVE-2024-42070}
  - netfilter: nft_inner: validate mandatory meta and payload (Phil Sutter) [RHEL-47486] {CVE-2024-39504}
  - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47616] {CVE-2024-39503}
  - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47616] {CVE-2024-39503}
  - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47616] {CVE-2024-39503}
  - qed/qede: Fix scheduling while atomic (John Meneghini) [RHEL-9751]
  - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (Pavel Reichl) [RHEL-51157] {CVE-2024-41057}
  - cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (Pavel Reichl) [RHEL-51163] {CVE-2024-41058}
  - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() (Pavel Reichl) [RHEL-51157 RHEL-51163]
  - nvme-fabrics: use reserved tag for reg read/write command (CKI Backport Bot) [RHEL-51357] {CVE-2024-41082}
  - nvmet: always initialize cqe.result (Maurizio Lombardi) [RHEL-51334 RHEL-51335] {CVE-2024-41079}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52019 RHEL-52020] {CVE-2024-42152}
  - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-52083] {CVE-2024-41076}
  - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50885] {CVE-2024-41013}
  - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50862] {CVE-2024-41014}
  - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48637] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48637]
  - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39906] {CVE-2024-36939}
  - mm/page_table_check: fix crash on ZONE_DEVICE (Chris von Recklinghausen) [RHEL-48052] {CVE-2024-40948}
  - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28110] {CVE-2021-47101}
  - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28110] {CVE-2021-47101}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-498.el9]
changelog:
  - xfs: allow SECURE namespace xattrs to use reserved block pool (Pavel Reichl) [RHEL-49806]
  - firmware: cs_dsp: Validate payload length before processing block (David Arcari) [RHEL-53640] {CVE-2024-42237}
  - selftests: netfilter: test nat source port clash resolution interaction with tcp early demux (Florian Westphal) [RHEL-6151]
  - netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash (Florian Westphal) [RHEL-6151]
  - xfs: allow symlinks with short remote targets (CKI Backport Bot) [RHEL-53164]
  - netfilter: Use flowlabel flow key when re-routing mangled packets (Florian Westphal) [RHEL-40213]
  - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51059] {CVE-2024-41044}
  - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47943 RHEL-47944] {CVE-2024-40931}
  - Bluetooth: ISO: Check socket flag instead of hcon (CKI Backport Bot) [RHEL-51982] {CVE-2024-42141}
  - bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX (CKI Backport Bot) [RHEL-51910] {CVE-2024-42132}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (CKI Backport Bot) [RHEL-51214] {CVE-2024-41063}
  - mm: vmalloc: check if a hash-index is in cpu_possible_mask (CKI Backport Bot) [RHEL-50955] {CVE-2024-41032}
  - Merge DRM changes from upstream v6.9..v6.9.11 (Dave Airlie) [RHEL-24103]
  - powerpc/mm: Fix false detection of read faults (Chris von Recklinghausen) [RHEL-50040]
  - powerpc/mm: Support execute-only memory on the Radix MMU (Chris von Recklinghausen) [RHEL-50040]
  - io_uring/sqpoll: work around a potential audit memory leak (Jeff Moyer) [RHEL-48561] {CVE-2024-41001}
  - io_uring/rsrc: don't lock while !TASK_RUNNING (Jeff Moyer) [RHEL-47830] {CVE-2024-40922}
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags (Jeff Moyer) [RHEL-47505] {CVE-2024-39508}
  - kunit: kasan_test: fix backport error in kasan test (Nico Pache) [RHEL-39303]
  - redhat: add configs for new kunit tests (Nico Pache) [RHEL-39303]
  - kasan: use unchecked __memset internally (Nico Pache) [RHEL-39303]
  - kasan: unify printk prefixes (Nico Pache) [RHEL-39303]
  - net/handshake: Fix handshake_req_destroy_test1 (Nico Pache) [RHEL-39303]
  - kunit: bail out early in __kunit_test_suites_init() if there are no suites to test (Nico Pache) [RHEL-39303]
  - kunit: string-stream-test: use KUNIT_DEFINE_ACTION_WRAPPER (Nico Pache) [RHEL-39303]
  - kunit: test: Move fault tests behind KUNIT_FAULT_TEST Kconfig option (Nico Pache) [RHEL-39303]
  - kunit: unregister the device on error (Nico Pache) [RHEL-39303]
  - kunit: Fix race condition in try-catch completion (Nico Pache) [RHEL-39303]
  - kunit: Add tests for fault (Nico Pache) [RHEL-39303]
  - kunit: Print last test location on fault (Nico Pache) [RHEL-39303]
  - kunit: Handle test faults (Nico Pache) [RHEL-39303]
  - kunit: Fix timeout message (Nico Pache) [RHEL-39303]
  - kunit: Fix kthread reference (Nico Pache) [RHEL-39303]
  - kunit: Handle thread creation error (Nico Pache) [RHEL-39303]
  - lib: checksum: hide unused expected_csum_ipv6_magic[] (Nico Pache) [RHEL-39303]
  - Revert "kunit: memcpy: Split slow memcpy tests into MEMCPY_SLOW_KUNIT_TEST" (Nico Pache) [RHEL-39303]
  - kunit: Fix again checksum tests on big endian CPUs (Nico Pache) [RHEL-39303]
  - kunit: Annotate _MSG assertion variants with gnu printf specifiers (Nico Pache) [RHEL-39303]
  - rtc: test: Fix invalid format specifier. (Nico Pache) [RHEL-39303]
  - lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg (Nico Pache) [RHEL-39303]
  - lib/cmdline: Fix an invalid format specifier in an assertion msg (Nico Pache) [RHEL-39303]
  - kunit: test: Log the correct filter string in executor_test (Nico Pache) [RHEL-39303]
  - kunit: make kunit_bus_type const (Nico Pache) [RHEL-39303]
  - kunit: Mark filter* params as rw (Nico Pache) [RHEL-39303]
  - kunit: tool: Print UML command (Nico Pache) [RHEL-39303]
  - time/kunit: Use correct format specifier (Nico Pache) [RHEL-39303]
  - Documentation: KUnit: Update the instructions on how to test static functions (Nico Pache) [RHEL-39303]
  - kunit: run test suites only after module initialization completes (Nico Pache) [RHEL-39303]
  - MAINTAINERS: kunit: Add Rae Moar as a reviewer (Nico Pache) [RHEL-39303]
  - lib: checksum: Fix build with CONFIG_NET=n (Nico Pache) [RHEL-39303]
  - kunit: Add tests for csum_ipv6_magic and ip_fast_csum (Nico Pache) [RHEL-39303]
  - Documentation: kunit: Add clang UML coverage example (Nico Pache) [RHEL-39303]
  - kunit: Protect string comparisons against NULL (Nico Pache) [RHEL-39303]
  - kunit: Add example of kunit_activate_static_stub() with pointer-to-function (Nico Pache) [RHEL-39303]
  - kunit: Allow passing function pointer to kunit_activate_static_stub() (Nico Pache) [RHEL-39303]
  - kunit: Fix NULL-dereference in kunit_init_suite() if suite->log is NULL (Nico Pache) [RHEL-39303]
  - kunit: Reset test->priv after each param iteration (Nico Pache) [RHEL-39303]
  - kunit: Add example for using test->priv (Nico Pache) [RHEL-39303]
  - Documentation: Add debugfs docs with run after boot (Nico Pache) [RHEL-39303]
  - kunit: add ability to run tests after boot using debugfs (Nico Pache) [RHEL-39303]
  - kunit: add is_init test attribute (Nico Pache) [RHEL-39303]
  - kunit: add example suite to test init suites (Nico Pache) [RHEL-39303]
  - kunit: add KUNIT_INIT_TABLE to init linker section (Nico Pache) [RHEL-39303]
  - kunit: move KUNIT_TABLE out of INIT_DATA (Nico Pache) [RHEL-39303]
  - kunit: tool: add test for parsing attributes (Nico Pache) [RHEL-39303]
  - kunit: tool: fix parsing of test attributes (Nico Pache) [RHEL-39303]
  - kunit: debugfs: Handle errors from alloc_string_stream() (Nico Pache) [RHEL-39303]
  - kunit: debugfs: Fix unchecked dereference in debugfs_print_results() (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Allow ERR_PTR to be passed to string_stream_destroy() (Nico Pache) [RHEL-39303]
  - kunit: string-stream-test: Avoid cast warning when testing gfp_t flags (Nico Pache) [RHEL-39303]
  - mptcp: fill in missing MODULE_DESCRIPTION() (Nico Pache) [RHEL-39303]
  - kunit: test: Avoid cast warning when adding kfree() as an action (Nico Pache) [RHEL-39303]
  - kunit: Reset suite counter right before running tests (Nico Pache) [RHEL-39303]
  - kunit: Warn if tests are slow (Nico Pache) [RHEL-39303]
  - kasan: fix and update KUNIT_EXPECT_KASAN_FAIL comment (Nico Pache) [RHEL-39303]
  - x86/asm: Fix build of UML with KASAN (Nico Pache) [RHEL-39303]
  - kunit: Reset test status on each param iteration (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Test performance of string_stream (Nico Pache) [RHEL-39303]
  - kunit: Use string_stream for test log (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Add tests for freeing resource-managed string_stream (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Decouple string_stream from kunit (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Add kunit_alloc_string_stream() (Nico Pache) [RHEL-39303]
  - kunit: Don't use a managed alloc in is_literal() (Nico Pache) [RHEL-39303]
  - kunit: string-stream-test: Add cases for string_stream newline appending (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Add option to make all lines end with newline (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Improve testing of string_stream (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Don't create a fragment for empty strings (Nico Pache) [RHEL-39303]
  - kunit: Fix wild-memory-access bug in kunit_free_suite_set() (Nico Pache) [RHEL-39303]
  - kunit: tool: Add command line interface to filter and report attributes (Nico Pache) [RHEL-39303]
  - kunit: tool: Enable CONFIG_FORTIFY_SOURCE under UML (Nico Pache) [RHEL-39303]
  - kunit: tool: undo type subscripts for subprocess.Popen (Nico Pache) [RHEL-39303]
  - kunit: tool: Add support for SH under QEMU (Nico Pache) [RHEL-39303]
  - kunit: tool: Add support for overriding the QEMU serial port (Nico Pache) [RHEL-39303]
  - kunit: tool: fix pre-existing `mypy --strict` errors and update run_checks.py (Nico Pache) [RHEL-39303]
  - kunit: tool: remove unused imports and variables (Nico Pache) [RHEL-39303]
  - kunit: tool: add subscripts for type annotations where appropriate (Nico Pache) [RHEL-39303]
  - kunit: tool: Add support for m68k under QEMU (Nico Pache) [RHEL-39303]
  - kunit: kunit.py extract handlers (Nico Pache) [RHEL-39303]
  - kunit: tool: remove redundant file.close() call in unit test (Nico Pache) [RHEL-39303]
  - kunit: tool: unit tests all check parser errors, standardize formatting a bit (Nico Pache) [RHEL-39303]
  - kunit: tool: make TestCounts a dataclass (Nico Pache) [RHEL-39303]
  - kunit: tool: make parser preserve whitespace when printing test log (Nico Pache) [RHEL-39303]
  - kunit: tool: Don't download risc-v opensbi firmware with wget (Nico Pache) [RHEL-39303]
  - kunit: tool: rename all_test_uml.config, use it for --alltests (Nico Pache) [RHEL-39303]
  - Documentation: KUnit: Fix non-uml anchor (Nico Pache) [RHEL-39303]
  - Documentation: Kunit: Fix inconsistent titles (Nico Pache) [RHEL-39303]
  - Documentation: kunit: fix trivial typo (Nico Pache) [RHEL-39303]
  - kunit: tool: make --raw_output=kunit (aka --raw_output) preserve leading spaces (Nico Pache) [RHEL-39303]
  - Documentation: Kunit: Add ref for other kinds of tests (Nico Pache) [RHEL-39303]
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (CKI Backport Bot) [RHEL-43727] {CVE-2024-36979}
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (CKI Backport Bot) [RHEL-43727] {CVE-2024-36979}
  - net: bridge: mst: fix vlan use-after-free (CKI Backport Bot) [RHEL-43727] {CVE-2024-36979}
  - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44114] {CVE-2024-38579}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-499.el9]
changelog:
  - ARM: dts: renesas: Improve TMU interrupt descriptions (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add interrupt-names to arch timer nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: s4sk: Add aliases for I2C buses (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add Renesas R8A779F4 SoC support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: s4sk: Fix ethernet0 alias (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-ethernet: Enable Ethernet Switch and SERDES (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: rzg2: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: rcar-gen3: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - ARM: dts: rzg1: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - ARM: dts: rcar-gen2: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add aliases for I2C buses (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Improve TMU interrupt descriptions (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add R-Car S4 Starter Kit support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: spider: Enable PCIe Host ch0 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add PCIe Host and Endpoint nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add GP LEDs (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add INTC-EX node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Revise renesas,ipmmu-main (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Use proper labels for thermal zones (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Drop specifying the GIC_CPU_MASK_SIMPLE() for GICv3 systems (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add iommus to MMC node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable UFS device (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CA55 operating points (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add Ethernet Switch and SERDES nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Switch from SCIF3 to HSCIF0 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Fix SCIF "brg_int" clock (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Fix HSCIF "brg_int" clock (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add missing bootargs (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider: Move aliases and chosen (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add MSIOF nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add TMU nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CMT support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable eMMC0 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add SDHI0 support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Fix scif0/scif3 sort order (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable SCIF0 on second connector (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add SCIF nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add HSCIF nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add DMA properties to SCIF3 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CPU core clocks (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CPUIdle support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add secondary CA55 CPU cores (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add L3 cache controller (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add UFS node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add iommus to DMAC nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add IPMMU nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add sys-dmac nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add thermal support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add GPIO nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: rcar-gen4: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider: Add Ethernet sub-board (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add I2C4 and EEPROMs (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add I2C nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider: Complete SCIF3 description (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add pinctrl device node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable watchdog timer (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add RWDT node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add Renesas R8A779F0 SoC support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add Renesas Spider boards support (Steve Dunnagan) [RHEL-53987]
  - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51020] {CVE-2024-41040}
  - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44201 RHEL-44202] {CVE-2024-38559}
  - netfilter: br_netfilter: remove WARN traps (Florian Westphal) [RHEL-36872]
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets (Florian Westphal) [RHEL-36872]
  - netfilter: bridge: confirm multicast packets before passing them up the stack (Florian Westphal) [RHEL-36872] {CVE-2024-27415}
  - netfilter: nf_conntrack_bridge: initialize err to 0 (Florian Westphal) [RHEL-36872]
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: E-switch, Create ingress ACL when needed (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Add check for srq max_sge attribute (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Remove extra unlock on error path (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Always stop health timer during driver removal (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Fix UDP GSO for encapsulated packets (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Fix IPsec tunnel mode offload feature check (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Lag, do bond only if slaves agree on roce state (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Reload only IB representors upon lag disable/enable (Benjamin Poirier) [RHEL-45365]
  - IB/mlx5: Use __iowrite64_copy() for write combining stores (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Adding remote atomic access flag to updatable flags (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Change check for cacheable mkeys (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Benjamin Poirier) [RHEL-45365]
  - mlx5: stop warning for 64KB pages (Benjamin Poirier) [RHEL-45365]
  - mlx5: avoid truncating error message (Benjamin Poirier) [RHEL-45365]
  - tools/power/x86/intel-speed-select: v1.19 release (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Display CPU as None for -1 (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: SST BF/TF support per level (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Increase number of CPUs displayed (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Present all TRL levels for turbo-freq (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Fix display for unsupported levels (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Support multiple dies (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Increase die count (David Arcari) [RHEL-20031]
  - platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove() (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Support SST-BF and SST-TF per level (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Add missing MODULE_DESCRIPTION (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Add dev_fmt (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Support partitioned systems (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Shorten the assignments for power_domain_info (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Use local variable for auxdev->dev (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Add additional TPMI header fields (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Align comments in kernel-doc (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Check major version change for TPMI Information (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Handle error from tpmi_process_info() (David Arcari) [RHEL-20031]
  - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-9096]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-500.el9]
changelog:
  - mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines (Chris von Recklinghausen) [RHEL-54027] {CVE-2024-42258}
  - rtla/osnoise: set the default threshold to 1us (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/osnoise: Better report when histogram is empty (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/osnoise: Use pretty formatting only on interactive tty (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla: Fix -t\--trace[=file] (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Fix histogram report when a cpu count is 0 (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla: Add the --warm-up option (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Add a summary for hist mode (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Add a summary for top mode (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Use pretty formatting only on interactive tty (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/auto-analysis: Replace \t with spaces (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Simplify "no value" printing on top (Luis Claudio R. Goncalves) [RHEL-50869]
  - tools/rtla: Add -U/--user-load option to timerlat (Luis Claudio R. Goncalves) [RHEL-50869]
  - Documentation: Add tools/rtla timerlat -u option documentation (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla: Make doc build optional (Luis Claudio R. Goncalves) [RHEL-50869]
  - kernfs: change kernfs_rename_lock into a read-write lock (Ian Kent) [RHEL-52956]
  - kernfs: Separate kernfs_pr_cont_buf and rename_lock (Ian Kent) [RHEL-52956]
  - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [RHEL-52956]
  - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info (Ian Kent) [RHEL-52956]
  - kernfs: Introduce separate rwsem to protect inode attributes (Ian Kent) [RHEL-52956]
  - perf/x86/intel: Support Perfmon MSRs aliasing (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Support PERFEVTSEL extension (Michael Petlan) [RHEL-20059]
  - perf/x86: Add config_mask to represent EVENTSEL bitmask (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Support new data source for Lunar Lake (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Rename model-specific pebs_latency_data functions (Michael Petlan) [RHEL-20059]
  - perf/x86: Add Lunar Lake and Arrow Lake support (Michael Petlan) [RHEL-20059]
  - perf/x86: Support counter mask (Michael Petlan) [RHEL-20059]
  - perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Support the PEBS event mask (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/cstate: Add Lunarlake support (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/cstate: Add Arrowlake support (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/msr: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/uncore: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/pt: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/lbr: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/cstate: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Michael Petlan) [RHEL-20059]
  - x86/cpu/vfm: Add new macros to work with (vendor/family/model) values (Michael Petlan) [RHEL-20059]
  - x86/cpu/vfm: Add/initialize x86_vfm field to struct cpuinfo_x86 (Michael Petlan) [RHEL-20059]
  - intel_th: pci: Add Lunar Lake support (Michael Petlan) [RHEL-20057]
  - iommufd/iova_bitmap: Remove iterator logic (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Dynamic pinning on iova_bitmap_set() (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Consolidate iova_bitmap_set exit conditionals (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Move initial pinning to iova_bitmap_for_each() (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Cache mapped length in iova_bitmap_map struct (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Check iova_bitmap_done() after set ahead (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Do not record head iova to better match iommu drivers (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Fix tests to use MOCK_PAGE_SIZE based buffer sizes (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Add tests for <= u8 bitmap sizes (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Fix iommufd_test_dirty() to handle <u8 bitmaps (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Fix dirty bitmap tests with u8 bitmaps (Jerry Snitselaar) [RHEL-40162]
  - dax/bus.c: use the right locking mode (read vs write) in size_show (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: don't use down_write_killable for non-user processes (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: fix locking for unregister_dax_dev / unregister_dax_mapping paths (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: replace WARN_ON_ONCE() with lockdep asserts (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: fix memmap_on_memory sysfs value retrieval (Jeff Moyer) [RHEL-23824]
  - nvdimm/pmem: fix leak on dax_add_host() failure (Jeff Moyer) [RHEL-23824]
  - dax: add a sysfs knob to control memmap_on_memory behavior (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: export mhp_supports_memmap_on_memory() (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: split memmap_on_memory requests across memblocks (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: replace an open-coded kmemdup() in add_memory_resource() (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: embed vmem_altmap details in memory block (Jeff Moyer) [RHEL-23824]
  - powerpc/book3s64/memhotplug: enable memmap on memory for radix (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: support memmap_on_memory when memmap is not aligned to pageblocks (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: allow architecture to override memmap on memory support check (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: simplify ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE kconfig (Jeff Moyer) [RHEL-23824]
  - Documentatiion/ABI: add ABI documentation for sys-bus-dax (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: replace several sprintf() with sysfs_emit() (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: replace driver-core lock usage by a local rwsem (Jeff Moyer) [RHEL-23824]
  - device-dax: make dax_bus_type const (Jeff Moyer) [RHEL-23824]
  - nvdimm: make nvdimm_bus_type const (Jeff Moyer) [RHEL-23824]
  - libnvdimm: Fix ACPI_NFIT in BLK_DEV_PMEM help (Jeff Moyer) [RHEL-23824]
  - ACPI: NFIT: Switch to use acpi_evaluate_dsm_typed() (Jeff Moyer) [RHEL-23824]
  - tools/testing/nvdimm: Disable "missing prototypes / declarations" warnings (Jeff Moyer) [RHEL-23824]
  - acpi/nfit: Use sysfs_emit() for all attributes (Jeff Moyer) [RHEL-23824]
  - nvdimm/namespace: fix kernel-doc for function params (Jeff Moyer) [RHEL-23824]
  - nvdimm/dimm_devs: fix kernel-doc for function params (Jeff Moyer) [RHEL-23824]
  - nvdimm/btt: fix btt_blk_cleanup() kernel-doc (Jeff Moyer) [RHEL-23824]
  - nvdimm-btt: simplify code with the scope based resource management (Jeff Moyer) [RHEL-23824]
  - nvdimm: Remove usage of the deprecated ida_simple_xx() API (Jeff Moyer) [RHEL-23824]
  - ACPI: NFIT: Use cleanup.h helpers instead of devm_*() (Jeff Moyer) [RHEL-23824]
  - tools/testing/nvdimm: Add compile-test coverage for ndtest (Jeff Moyer) [RHEL-23824]
  - dax/kmem: allow kmem to add memory with memmap_on_memory (Jeff Moyer) [RHEL-23824]
  - nvdimm/btt: replace deprecated strncpy with strscpy (Jeff Moyer) [RHEL-23824]
  - ndtest: fix typo class_regster -> class_register (Jeff Moyer) [RHEL-23824]
  - fs : Fix warning using plain integer as NULL (Jeff Moyer) [RHEL-23824]
  - libnvdimm: remove kernel-doc warnings: (Jeff Moyer) [RHEL-23824]
  - testing: nvdimm: make struct class structures constant (Jeff Moyer) [RHEL-23824]
  - libnvdimm: Annotate struct nd_region with __counted_by (Jeff Moyer) [RHEL-23824]
  - libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (Jeff Moyer) [RHEL-23824]
  - dax: refactor deprecated strncpy (Jeff Moyer) [RHEL-23824]
  - nvdimm: Fix dereference after free in register_nvdimm_pmu() (Jeff Moyer) [RHEL-23824]
  - nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() (Jeff Moyer) [RHEL-23824]
  - nvdimm/pfn_dev: Avoid unnecessary endian conversion (Jeff Moyer) [RHEL-23824]
  - nvdimm/pfn_dev: Prevent the creation of zero-sized namespaces (Jeff Moyer) [RHEL-23824]
  - nvdimm: Explicitly include correct DT includes (Jeff Moyer) [RHEL-23824]
  - nvdimm: Use kstrtobool() instead of strtobool() (Jeff Moyer) [RHEL-23824]
  - dax: enable dax fault handler to report VM_FAULT_HWPOISON (Jeff Moyer) [RHEL-23824]
  - nvdimm: make security_show static (Jeff Moyer) [RHEL-23824]
  - nvdimm: make nd_class variable static (Jeff Moyer) [RHEL-23824]
  - dax/kmem: Pass valid argument to memory_group_register_static (Jeff Moyer) [RHEL-23824]
  - fsdax: remove redundant variable 'error' (Jeff Moyer) [RHEL-23824]
  - dax: Cleanup extra dax_region references (Jeff Moyer) [RHEL-23824]
  - dax: Introduce alloc_dev_dax_id() (Jeff Moyer) [RHEL-23824]
  - dax: Use device_unregister() in unregister_dax_mapping() (Jeff Moyer) [RHEL-23824]
  - dax: Fix dax_mapping_release() use after free (Jeff Moyer) [RHEL-23824]
  - tools/testing/nvdimm: Drop empty platform remove function (Jeff Moyer) [RHEL-23824]
  - dax/kmem: Fix leak of memory-hotplug resources (Jeff Moyer) [RHEL-23824]
  - dax: super.c: fix kernel-doc bad line warning (Jeff Moyer) [RHEL-23824]
  - nvdimm/region: Move cache management to the region driver (Jeff Moyer) [RHEL-23824]
  - ACPI: HMAT: Release platform device in case of platform_device_add_data() fails (Jeff Moyer) [RHEL-23824]
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Mark Salter) [RHEL-46931] {CVE-2024-39488}
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Kamal Heib) [RHEL-44248] {CVE-2024-38544}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-501.el9]
changelog:
  - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53662 RHEL-53665] {CVE-2024-42240}
  - redhat: Fix the ownership of /lib/modules/<kversion> directory (Vitaly Kuznetsov) [RHEL-21034]
  - move ownership of /lib/modules/<ver>/ to kernel-core (Thorsten Leemhuis) [RHEL-21034]
  - KVM: guest_memfd: let kvm_gmem_populate() operate only on private gfns (Paolo Bonzini) [RHEL-32435]
  - KVM: extend kvm_range_has_memory_attributes() to check subset of attributes (Paolo Bonzini) [RHEL-32435]
  - KVM: cleanup and add shortcuts to kvm_range_has_memory_attributes() (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: move check for already-populated page to common code (Paolo Bonzini) [RHEL-32435]
  - KVM: remove kvm_arch_gmem_prepare_needed() (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: make kvm_gmem_prepare_folio() operate on a single struct kvm (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: delay kvm_gmem_prepare_folio() until the memory is passed to the guest (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: return locked folio from __kvm_gmem_get_pfn (Paolo Bonzini) [RHEL-32435]
  - KVM: rename CONFIG_HAVE_KVM_GMEM_* to CONFIG_HAVE_KVM_ARCH_GMEM_* (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: do not go through struct page (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: delay folio_mark_uptodate() until after successful preparation (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: return folio from __kvm_gmem_get_pfn() (Paolo Bonzini) [RHEL-32435]
  - KVM: x86: Eliminate log spam from limited APIC timer periods (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: Use sev_es_host_save_area() helper when initializing tsc_aux (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: Force sev_es_host_save_area() to be inlined (for noinstr usage) (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: Consider NUMA affinity when allocating per-CPU save_area (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: not account memory allocation for per-CPU svm_data (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: remove useless input parameter in snp_safe_alloc_page (Paolo Bonzini) [RHEL-32435]
  - KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN (Paolo Bonzini) [RHEL-32435]
  - KVM: interrupt kvm_gmem_populate() on signals (Paolo Bonzini) [RHEL-32435]
  - KVM: Stop processing *all* memslots when "null" mmu_notifier handler is found (Paolo Bonzini) [RHEL-32435]
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Paolo Bonzini) [RHEL-32435]
  - KVM: selftests: x86: Prioritize getting max_gfn from GuestPhysBits (Paolo Bonzini) [RHEL-32435]
  - KVM: selftests: Fix shift of 32 bit unsigned int more than 32 bits (Paolo Bonzini) [RHEL-32435]
  - KVM: Discard zero mask with function kvm_dirty_ring_reset (Paolo Bonzini) [RHEL-32435]
  - virt: guest_memfd: fix reference leak on hwpoisoned page (Paolo Bonzini) [RHEL-32435]
  - kvm: do not account temporary allocations to kmem (Paolo Bonzini) [RHEL-32435]
  - KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (Paolo Bonzini) [RHEL-32435]
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Myron Stowe) [RHEL-51754] {CVE-2024-42110}
  - Disable NVGRACE_GPU_VFIO_PCI CONFIG for now (Donald Dutile) [RHEL-36542]
  - vfio/nvgrace-gpu: Convey kvm to map device memory region as noncached (Donald Dutile) [RHEL-36544]
  - vfio: Convey kvm that the vfio-pci device is wc safe (Donald Dutile) [RHEL-36543]
  - vfio/nvgrace-gpu: Add vfio pci variant module for grace hopper (Donald Dutile) [RHEL-36542]
  - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48649]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for Apacer AS340 (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for AMD Radeon S3 SSD (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for Crucial CT240BX500SSD1 (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Do not apply Intel PCS quirk on Intel Alder Lake (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Allow command duration limits detection for ACS-4 drives (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Add mask_port_map module parameter (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-sata: Factor out NCQ Priority configuration helpers (Ewan D. Milne) [RHEL-23829]
  - ahci: asm1064: asm1166: don't limit reported ports (Ewan D. Milne) [RHEL-23829]
  - ahci: print the number of implemented ports (Ewan D. Milne) [RHEL-23829]
  - ahci: asm1064: correct count of reported ports (Ewan D. Milne) [RHEL-23829]
  - ahci: rename board_ahci_nomsi (Ewan D. Milne) [RHEL-23829]
  - ahci: drop unused board_ahci_noncq (Ewan D. Milne) [RHEL-23829]
  - ahci: clean up ahci_broken_devslp quirk (Ewan D. Milne) [RHEL-23829]
  - ahci: rename board_ahci_nosntf (Ewan D. Milne) [RHEL-23829]
  - ahci: clean up intel_pcs_quirk (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Drop low power policy board type (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: do not enable LPM on external ports (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: drop hpriv param from ahci_update_initial_lpm_policy() (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: a hotplug capable port is an external port (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: move marking of external port earlier (Ewan D. Milne) [RHEL-23829]
  - ahci: Extend ASM1061 43-bit DMA address quirk to other ASM106x parts (Ewan D. Milne) [RHEL-23829]
  - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers (Ewan D. Milne) [RHEL-23829]
  - ahci: asm1166: correct count of reported ports (Ewan D. Milne) [RHEL-23829]
  - ata: libata-sata: improve sysfs description for ATA_LPM_UNKNOWN (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Fix system start for ATA devices (Ewan D. Milne) [RHEL-23829]
  - scsi: Change SCSI device boolean fields to single bit flags (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Introduce manage_shutdown device flag (Ewan D. Milne) [RHEL-23829]
  - ata: libata-eh: Spinup disk on resume after revalidation (Ewan D. Milne) [RHEL-23829]
  - ata: xgene: Use of_device_get_match_data() (Ewan D. Milne) [RHEL-23829]
  - scsi: Remove scsi device no_start_on_resume flag (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Do not issue commands to suspended disks on shutdown (Ewan D. Milne) [RHEL-23829]
  - ata: libata: Annotate struct ata_cpr_log with __counted_by (Ewan D. Milne) [RHEL-23829]
  - ata: libata-scsi: Disable scsi device manage_system_start_stop (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Differentiate system and runtime start/stop management (Ewan D. Milne) [RHEL-23829]
  - ata: libata-scsi: link ata port and scsi device (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Fix port and device removal (Ewan D. Milne) [RHEL-23829]
  - ata: libata-sata: increase PMP SRST timeout to 10s (Ewan D. Milne) [RHEL-23829]
  - scsi: core: ata: Do no try to probe for CDL on old drives (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: fetch sense data for successful commands iff CDL enabled (Ewan D. Milne) [RHEL-23829]
  - ata: ahci_xgene: fix parameter types of xgene_ahci_poll_reg_val() (Ewan D. Milne) [RHEL-23829]
  - ata: libata: fix parameter type of ata_deadline() (Ewan D. Milne) [RHEL-23829]
  - ata,scsi: do not issue START STOP UNIT on resume (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: fix when to fetch sense data for successful commands (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-scsi: Fix ata_msense_control kdoc comment (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Handle completion of CDL commands using policy 0xD (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Set read/write commands CDL index (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Add ATA feature control sub-page translation (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-scsi: Add support for CDL pages mode sense (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-scsi: Handle CDL bits in ata_scsiop_maint_in() (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Detect support for command duration limits (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Change ata_eh_request_sense() to not set CHECK_CONDITION (Ewan D. Milne) [RHEL-23829]
  - ata: Use of_property_present() for testing DT property presence (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Rename CONFIG_SATA_LPM_POLICY configuration item back (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Rename CONFIG_SATA_LPM_MOBILE_POLICY configuration item (Ewan D. Milne) [RHEL-23829]
  - virt: efi_secret: Convert to platform remove callback returning void (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Add get_event_log() support for CC platforms (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Measure into CC protocol if TCG2 protocol is absent (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Add Confidential Computing (CC) measurement typedefs (Lenny Szubowicz) [RHEL-30322]
  - efi/tpm: Use symbolic GUID name from spec for final events table (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Use TPM event typedefs from the TCG PC Client spec (Lenny Szubowicz) [RHEL-30322]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-502.el9]
changelog:
  - net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: fix error array size (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Assign configured channel value to EXTTS event (Andrew Halaney) [RHEL-6297]
  - net: stmmac: No need to calculate speed divider when offload is disabled (Andrew Halaney) [RHEL-6297]
  - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Configure host DMA width (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move the EST structure to struct stmmac_priv (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move the EST lock to struct stmmac_priv (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add support for RZ/N1 GMAC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-socfpga: use pcs_init/pcs_exit (Andrew Halaney) [RHEL-6297]
  - net: stmmac: introduce pcs_init/pcs_exit stmmac operations (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make stmmac_xpcs_setup() generic to all PCS devices (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add dedicated XPCS cleanup method (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-ipq806x: account for rgmii-txid/rxid/id phy-mode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Rename phylink_get_caps() callback to update_caps() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix IP-cores specific MAC capabilities (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix max-speed being ignored on queue re-init (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Apply half-duplex-less constraint for DW QoS Eth only (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc_core: Add GMAC mmc tx/rx missing statistics (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc_core: Add GMAC LPI statistics (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix rx queue priority assignment (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Support a generic PCS field in mac_device_info (Andrew Halaney) [RHEL-6297]
  - net: stmmac: don't rely on lynx_pcs presence to check for a PHY (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-rk: Remove unused of_gpio.h (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix typo in comment (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Update link clock rate only for RGMII (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Complete meta data only when enabled (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc_core: Drop interrupt registers from stats (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Add support for 2.5G SGMII (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix EST offset for dwmac 5.10 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix incorrect dereference in interrupt handlers (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Simplify mtl IRQ status checking (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: use #define for string constants (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add driver support for common safety IRQ (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Enable TBS on all queues but 0 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove eee_enabled/eee_active in stmmac_ethtool_op_get_eee() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: protect updates of 64-bit statistics counters (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Report taprio offload status (Andrew Halaney) [RHEL-6297]
  - net: stmmac: est: Per Tx-queue error count for HLBF (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Offload queueMaxSDU from tc-taprio (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-starfive: Add support for JH7100 SoC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-imx: set TSO/TBS TX queues default settings (Andrew Halaney) [RHEL-6297]
  - net: stmmac: do not clear TBS enable bit on link up/down (Andrew Halaney) [RHEL-6297]
  - net: fill in MODULE_DESCRIPTION()s for dwmac-socfpga (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Wait a bit for the reset to take effect (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Prevent DSA tags from breaking COE (Andrew Halaney) [RHEL-6297]
  - net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls (Andrew Halaney) [RHEL-6297]
  - Revert "net: stmmac: Enable Per DMA Channel interrupt" (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Use interrupt mode INTM=1 for per channel irq (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add support for TX/RX channel interrupt (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make MSI interrupt routine generic (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix ethtool per-queue statistics (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: drop useless check for compatible fallback (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: Make sure MDIO is initialized before use (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc: Support more counters for XGMAC Core (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add support for EST cycle-time-extension (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Refactor EST implementation (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: EST interrupts handling (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix FPE events losing (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add Tx HWTS support to XDP ZC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: Disable FPE MMC interrupts (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add support for HW-accelerated VLAN stripping (Andrew Halaney) [RHEL-6297]
  - net: stmmac: reduce dma ring display code duplication (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove extra newline from descriptors display (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: Add architecture dependency (Andrew Halaney) [RHEL-6297]
  - net: stmmac: avoid rx queue overrun (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix rx budget limit check (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: update MAC capabilities when tx queues are updated (Andrew Halaney) [RHEL-6297]
  - net: stmmac: increase TX coalesce timer to 5ms (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move TX timer arm after DMA enable (Andrew Halaney) [RHEL-6297]
  - net: stmmac: improve TX timer arm logic (Andrew Halaney) [RHEL-6297]
  - net: introduce napi_is_scheduled helper (Andrew Halaney) [RHEL-6297]
  - net: stmmac: do not silently change auxiliary snapshot capture channel (Andrew Halaney) [RHEL-6297]
  - net: stmmac: ptp: stmmac_enable(): move change of plat->flags into mutex (Andrew Halaney) [RHEL-6297]
  - net: stmmac: intel: remove unnecessary field struct plat_stmmacenet_data::ext_snapshot_num (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use correct PPS capture input index (Andrew Halaney) [RHEL-6297]
  - net: stmmac: simplify debug message on stmmac_enable() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Remove redundant checking for rx_coalesce_usecs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix typo in comment (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: refactor clock config (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove unneeded stmmac_poll_controller (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: fix resume on STM32 MCU (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: fix the incorrect parameter (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix incorrect rxq|txq_stats reference (Andrew Halaney) [RHEL-6297]
  - net: stmmac: make stmmac_{probe|remove}_config_dt static (Andrew Halaney) [RHEL-6297]
  - net: stmmac: rename stmmac_pltfr_remove_no_dt to stmmac_pltfr_remove (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-visconti: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-tegra: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sunxi: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sun8i: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sti: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-starfive: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-socfpga: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-rk: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson8b: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-mediatek: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-lpc18xx: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-ipq806x: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-intel-plat: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-ingenic: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-imx: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use devm_stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-dwc-qos-eth: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-anarion: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Tx coe sw fallback (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add glue layer for Loongson-1 SoC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix handling of zero coalescing tx-usecs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: failure to probe without MAC interface specified (Andrew Halaney) [RHEL-6297]
  - net: stmmac: clarify difference between "interface" and "phy_interface" (Andrew Halaney) [RHEL-6297]
  - net: stmmac: convert half-duplex support to positive logic (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move priv->phylink_config.mac_managed_pm (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move xgmac specific phylink caps to dwxgmac2 core (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move gmac4 specific phylink capabilities to gmac4 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: provide stmmac_mac_phylink_get_caps() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use phylink_limit_mac_speed() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use "mdio_bus_data" local variable (Andrew Halaney) [RHEL-6297]
  - net: stmmac: clean up passing fwnode to phylink (Andrew Halaney) [RHEL-6297]
  - net: stmmac: convert plat->phylink_node to fwnode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Check more MAC HW features for XGMAC Core 3.20 (Andrew Halaney) [RHEL-6297]
  - stmmac: intel: Enable correction of MAC propagation delay (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: show more MAC HW features in debugfs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: RX queue routing configuration (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-oxnas: remove obsolete dwmac glue driver (Andrew Halaney) [RHEL-6297]
  - net: stmmac: XGMAC support for mdio C22 addr > 3 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Apply redundant write work around on 4.xx too (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use per-queue 64 bit statistics where necessary (Andrew Halaney) [RHEL-6297]
  - net: stmmac: don't clear network statistics in .ndo_open() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: Fix L3L4 filter count (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Log more errors in probe (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Use dev_err_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Use of_get_phy_mode() over device_get_phy_mode() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: use devm_stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide devm_stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qco-ethqos: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_remove_no_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use stmmac_pltfr_exit() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_exit() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use stmmac_pltfr_init() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_init() (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmicro: stmmac: fix possible memory leak in __stmmac_open (Andrew Halaney) [RHEL-6297]
  - net: dwmac_socfpga: initialize local data for mdio regmap configuration (Andrew Halaney) [RHEL-6297]
  - net: stmmac: make the pcs_lynx cleanup sequence specific to dwmac_socfpga (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sogfpga: use the lynx pcs driver (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use xpcs_create_mdiodev() (Andrew Halaney) [RHEL-6297]
  - net: pcs: xpcs: add xpcs_create_mdiodev() (Andrew Halaney) [RHEL-6297]
  - net: mdio: add mdio_device_get() and mdio_device_put() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: add ethtool per-queue irq statistic support (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-tegra: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sun8i: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sti: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-rk: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-dwc-qos-eth: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-visconti: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-visconti: Make visconti_eth_clock_remove() return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make stmmac_pltfr_remove() return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register (Andrew Halaney) [RHEL-6297]
  - net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson8b: Avoid cast to incompatible function type (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-sti: remove stih415/stih416/stid127 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-starfive: Add phy interface settings (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add glue layer for StarFive JH7110 SoC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: Add snps,dwmac-5.20 IP compatible string (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add Rx HWTS metadata to XDP ZC receive pkt (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add Rx HWTS metadata to XDP receive pkt (Andrew Halaney) [RHEL-6297]
  - net: stmmac: introduce wrapper for struct xdp_buff (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Remove unnecessary if statement brackets (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-rk: rework optional clock handling (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-anarion: Always return struct anarion_gmac * from anarion_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-anarion: Use annotation __iomem for register base (Andrew Halaney) [RHEL-6297]
  - net: stmmac: check fwnode for phy device before scanning for phy (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add queue reset into stmmac_xdp_open() function (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix up RX flow hash indirection table when setting channels (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove redundant fixup to support fixed-link mode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: check if MAC needs to attach to a PHY (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix for mismatched host/device DMA address width (Andrew Halaney) [RHEL-6297]
  - net: stmmac: generic: drop of_match_ptr for ID table (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add to set device wake up flag when stmmac init phy (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Restrict warning on disabling DMA store and fwd mode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwc-qos: Make struct dwc_eth_dwmac_data::remove return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make stmmac_dvr_remove() return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix invalid call to mdiobus_get_phy() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Separate C22 and C45 transactions for xgmac (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add aux timestamps fifo clearance wait (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-mediatek: remove the dwmac_fix_mac_speed (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix errno when create_singlethread_workqueue() fails (Andrew Halaney) [RHEL-6297]
  - stmmac: fix potential division by 0 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add check for taprio basetime configuration (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix possible memory leak in stmmac_dvr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix "snps,axi-config" node property parsing (Andrew Halaney) [RHEL-6297]
  - Revert "net: stmmac: use sysfs_streq() instead of strncmp()" (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Set MAC's flow control register to reflect current settings (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use sysfs_streq() instead of strncmp() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix invalid mdio_node (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove duplicate dma queue channel macros (Andrew Halaney) [RHEL-6297]
  - net: stmmac: rk3588: Allow multiple gmac controller (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add a parse for new property 'snps,clk-csr' (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Minor spell fix related to 'stmmac_clk_csr_set()' (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmicro: stmmac: dwmac-rk: Add rv1126 support (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwc-qos: Switch to use dev_err_probe() helper (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-rk: Add gmac support for rk3588 (Andrew Halaney) [RHEL-6297]
  - ceph: force sending a cap update msg back to MDS for revoke op (Xiubo Li) [RHEL-48618]
  - ceph: periodically flush the cap releases (Xiubo Li) [RHEL-48618]
  - eeprom: at24: use of_match_ptr() (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: Use pm_runtime_resume_and_get to simplify the code (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: add ST M24C64-D Additional Write lockable page support (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: add ST M24C32-D Additional Write lockable page support (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: Annotate struct at24_data with __counted_by (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: Drop at24_get_chip_data() (Alessandro Carminati) [RHEL-47160]
  - mm: turn off test_uffdio_wp if CONFIG_PTE_MARKER_UFFD_WP is not configured. (Nico Pache) [RHEL-39306]
  - mm: update uffd-stress to handle EINVAL for unset config features (Nico Pache) [RHEL-39306]
  - selftests/bpf: Fix flaky test btf_map_in_map/lookup_update (Nico Pache) [RHEL-39306]
  - kselftests: mm: add s390 to ARCH list (Nico Pache) [RHEL-39306]
  - selftests/mm: fix powerpc ARCH check (Nico Pache) [RHEL-39306]
  - selftests: bpf: xskxceiver: ksft_print_msg: fix format type error (Nico Pache) [RHEL-39306]
  - hugetlbfs: ensure generic_hugetlb_get_unmapped_area() returns higher address than mmap_min_addr (Nico Pache) [RHEL-39306]
  - selftests/vm: fix inability to build any vm tests (Nico Pache) [RHEL-39306]
  - Makefile: add headers_install to kselftest targets (Nico Pache) [RHEL-39306]
  - selftests: drop KSFT_KHDR_INSTALL make target (Nico Pache) [RHEL-39306]
  - selftests: stop using KSFT_KHDR_INSTALL (Nico Pache) [RHEL-39306]
  - selftests: net: Add the uapi headers include variable (Nico Pache) [RHEL-39306]
  - selftests: landlock: Add the uapi headers include variable (Nico Pache) [RHEL-39306]
  - selftests: futex: Add the uapi headers include variable (Nico Pache) [RHEL-39306]
  - selftests: futex: set DEFAULT_INSTALL_HDR_PATH (Nico Pache) [RHEL-39306]
  - selftests: drop khdr make target (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Make it POSIX-compliant (Nico Pache) [RHEL-39306]
  - selftests: use printf instead of echo -ne (Nico Pache) [RHEL-39306]
  - selftests: find echo binary to use -ne options (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add a helper to finish the test (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add a helper to abort the test (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add helper to pass/fail test based on exit code (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add helper to print diagnostic messages (Nico Pache) [RHEL-39306]
  - selftests: Move KTAP bash helpers to selftests common folder (Nico Pache) [RHEL-39306]
  - kselftest: dt: Stop relying on dirname to improve performance (Nico Pache) [RHEL-39306]
  - kselftest: Add new test for detecting unprobed Devicetree devices (Nico Pache) [RHEL-39306]
  - selftests:modify the incorrect print format (Nico Pache) [RHEL-39306]
  - selftests/mm: Substitute attribute with a macro (Nico Pache) [RHEL-39306]
  - selftests: Add printf attribute to kselftest prints (Nico Pache) [RHEL-39306]
  - selftests: fix dependency checker script (Nico Pache) [RHEL-39306]
  - kselftest/runner.sh: Propagate SIGTERM to runner child (Nico Pache) [RHEL-39306]
  - selftests/harness: Actually report SKIP for signal tests (Nico Pache) [RHEL-39306]
  - testing: kselftest_harness: add filtering and enumerating tests (Nico Pache) [RHEL-39306]
  - selftests: break the dependency upon local header files (Nico Pache) [RHEL-39306]
  - kselftest: Add a ksft_perror() helper (Nico Pache) [RHEL-39306]
  - selftests: Make the usage formatting consistent in kselftest_deps.sh (Nico Pache) [RHEL-39306]
  - kselftests: Enable the echo command to print newlines in Makefile (Nico Pache) [RHEL-39306]
  - selftest: Taint kernel when test module loaded (Nico Pache) [RHEL-39306]
  - selftests: Fix build when $(O) points to a relative path (Nico Pache) [RHEL-39306]
  - selftests: Use -isystem instead of -I to include headers (Nico Pache) [RHEL-39306]
  - selftests: Correct the headers install path (Nico Pache) [RHEL-39306]
  - selftests: Add and export a kernel uapi headers path (Nico Pache) [RHEL-39306]
  - selftests: set the BUILD variable to absolute path (Nico Pache) [RHEL-39306]
  - kselftest: signal all child processes (Nico Pache) [RHEL-39306]
  - selftests/mm: fix additional build errors for selftests (Nico Pache) [RHEL-39306]
  - selftests: mm: protection_keys: save/restore nr_hugepages value from launch script (Nico Pache) [RHEL-39306]
  - selftests: mm: make map_fixed_noreplace test names stable (Nico Pache) [RHEL-39306]
  - selftests/mm: fix build warnings on ppc64 (Nico Pache) [RHEL-39306]
  - selftests/mm: hugetlb_madv_vs_map: avoid test skipping by querying hugepage size at runtime (Nico Pache) [RHEL-39306]
  - mm/hugetlb: document why hugetlb uses folio_mapcount() for COW reuse decisions (Nico Pache) [RHEL-39306]
  - selftests: mm: cow: flag vmsplice() hugetlb tests as XFAIL (Nico Pache) [RHEL-39306]
  - selftests/mm: soft-dirty should fail if a testcase fails (Nico Pache) [RHEL-39306]
  - selftests/mm: parse VMA range in one go (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests.sh: fix hugetlb mem size calculation (Nico Pache) [RHEL-39306]
  - selftests/mm: confirm VA exhaustion without reliance on correctness of mmap() (Nico Pache) [RHEL-39306]
  - selftests/mm: virtual_address_range: Switch to ksft_exit_fail_msg (Nico Pache) [RHEL-39306]
  - selftests/mm: include strings.h for ffsl (Nico Pache) [RHEL-39306]
  - selftests/mm: fix ARM related issue with fork after pthread_create (Nico Pache) [RHEL-39306]
  - selftests/mm: sigbus-wp test requires UFFD_FEATURE_WP_HUGETLBFS_SHMEM (Nico Pache) [RHEL-39306]
  - selftests: mm: restore settings from only parent process (Nico Pache) [RHEL-39306]
  - selftests/mm: Fix build with _FORTIFY_SOURCE (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests.sh: add missing tests (Nico Pache) [RHEL-39306]
  - selftests/mm: protection_keys: save/restore nr_hugepages settings (Nico Pache) [RHEL-39306]
  - selftests/mm: save and restore nr_hugepages value (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests: remove sudo and conform to tap (Nico Pache) [RHEL-39306]
  - selftests/mm: hugetlb_reparenting_test: do not unmount (Nico Pache) [RHEL-39306]
  - selftests/mm: log a consistent test name for check_compaction (Nico Pache) [RHEL-39306]
  - selftests/mm: log skipped compaction test as a skip (Nico Pache) [RHEL-39306]
  - selftests/mm: virtual_address_range: conform to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: transhuge-stress: conform to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: split_huge_page_test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mremap_dontunmap: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mrelease_test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mlock2-tests: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mlock-random-test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: map_populate: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: map_hugetlb: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: map_fixed_noreplace: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: skip test if application doesn't has root privileges (Nico Pache) [RHEL-39306]
  - selftests/mm: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests: mm: hugepage-mmap: conform to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: gup_test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - mm/selftests: hugepage-mremap: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: log run_vmtests.sh results in TAP format (Nico Pache) [RHEL-39306]
  - selftests/mm: skip the hugetlb-madvise tests on unmet hugepage requirements (Nico Pache) [RHEL-39306]
  - selftests/mm: skip uffd hugetlb tests with insufficient hugepages (Nico Pache) [RHEL-39306]
  - selftests/mm: dont fail testsuite due to a lack of hugepages (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests.sh: add hugetlb test category (Nico Pache) [RHEL-39306]
  - selftests/mm: new test that steals pages (Nico Pache) [RHEL-39306]
  - selftests: mm: perform some system cleanup before using hugepages (Nico Pache) [RHEL-39306]
  - selftests: avoid using SKIP(exit()) in harness fixure setup (Nico Pache) [RHEL-39306]
  - selftests/mm: uffd-unit-test check if huge page size is 0 (Nico Pache) [RHEL-39306]
  - selftests/mm: ksm_tests should only MADV_HUGEPAGE valid memory (Nico Pache) [RHEL-39306]
  - selftests/mm: switch to bash from sh (Nico Pache) [RHEL-39306]
  - selftests/mm: restore number of hugepages (Nico Pache) [RHEL-39306]
  - selftests/mm: add a new test for madv and hugetlb (Nico Pache) [RHEL-39306]
  - mm/ksm: test case for prctl fork/exec workflow (Nico Pache) [RHEL-39306]
  - kselftest: vm: add tests for no-inherit memory-deny-write-execute (Nico Pache) [RHEL-39306]
  - kselftest: vm: check errnos in mdwe_test (Nico Pache) [RHEL-39306]
  - kselftest: vm: fix mdwe's mmap_FIXED test case (Nico Pache) [RHEL-39306]
  - kselftest: vm: fix tabs/spaces inconsistency in the mdwe test (Nico Pache) [RHEL-39306]
  - selftests: mm: add a test for mutually aligned moves > PMD size (Nico Pache) [RHEL-39306]
  - selftests: mm: fix failure case when new remap region was not found (Nico Pache) [RHEL-39306]
  - selftests/mm: fix uffd-stress help information (Nico Pache) [RHEL-39306]
  - selftests: mm: ksm: fix incorrect evaluation of parameter (Nico Pache) [RHEL-39306]
  - selftests/mm: mkdirty: fix incorrect position of #endif (Nico Pache) [RHEL-39306]
  - selftests: mm: remove wrong kernel header inclusion (Nico Pache) [RHEL-39306]
  - selftests/mm: move certain uffd*() routines from vm_util.c to uffd-common.c (Nico Pache) [RHEL-39306]
  - selftests/mm: fix two -Wformat-security warnings in uffd builds (Nico Pache) [RHEL-39306]
  - selftests/mm: fix uffd-stress unused function warning (Nico Pache) [RHEL-39306]
  - selftests/mm: factor out detection of hugetlb page sizes into vm_util (Nico Pache) [RHEL-39306]
  - selftests/ksm: ksm_functional_tests: add prctl unmerge test (Nico Pache) [RHEL-39306]
  - selftests/mm: add new selftests for KSM (Nico Pache) [RHEL-39306]
  - selftests/mm: add tests for RO pinning vs fork() (Nico Pache) [RHEL-39306]
  - selftests/mm: rename COW_EXTRA_LIBS to IOURING_EXTRA_LIBS (Nico Pache) [RHEL-39306]
  - selftests/mm: extend and rename uffd pagemap test (Nico Pache) [RHEL-39306]
  - selftests/mm: add a few options for uffd-unit-test (Nico Pache) [RHEL-39306]
  - selftests/mm: add uffdio register ioctls test (Nico Pache) [RHEL-39306]
  - selftests/mm: add shmem-private test to uffd-stress (Nico Pache) [RHEL-39306]
  - selftests/mm: drop sys/dev test in uffd-stress test (Nico Pache) [RHEL-39306]
  - selftests/mm: allow uffd test to skip properly with no privilege (Nico Pache) [RHEL-39306]
  - selftests/mm: workaround no way to detect uffd-minor + wp (Nico Pache) [RHEL-39306]
  - selftests/mm: move zeropage test into uffd unit tests (Nico Pache) [RHEL-39306]
  - selftests/mm: move uffd sig/events tests into uffd unit tests (Nico Pache) [RHEL-39306]
  - selftests/mm: move uffd minor test to unit test (Nico Pache) [RHEL-39306]
  - selftests/mm: move uffd pagemap test to unit test (Nico Pache) [RHEL-39306]
  - selftests/mm: add framework for uffd-unit-test (Nico Pache) [RHEL-39306]
  - selftests/mm: allow allocate_area() to fail properly (Nico Pache) [RHEL-39306]
  - selftests/mm: let uffd_handle_page_fault() take wp parameter (Nico Pache) [RHEL-39306]
  - selftests/mm: rename uffd_stats to uffd_args (Nico Pache) [RHEL-39306]
  - selftests/mm: drop global hpage_size in uffd tests (Nico Pache) [RHEL-39306]
  - selftests/mm: drop global mem_fd in uffd tests (Nico Pache) [RHEL-39306]
  - selftests/mm: UFFDIO_API test (Nico Pache) [RHEL-39306]
  - selftests/mm: uffd_open_{dev|sys}() (Nico Pache) [RHEL-39306]
  - selftests/mm: uffd_[un]register() (Nico Pache) [RHEL-39306]
  - selftests/mm: split uffd tests into uffd-stress and uffd-unit-tests (Nico Pache) [RHEL-39306]
  - selftests/mm: create uffd-common.[ch] (Nico Pache) [RHEL-39306]
  - selftests/mm: drop test_uffdio_zeropage_eexist (Nico Pache) [RHEL-39306]
  - selftests/mm: test UFFDIO_ZEROPAGE only when !hugetlb (Nico Pache) [RHEL-39306]
  - selftests/mm: mkdirty: test behavior of (pte|pmd)_mkdirty on VMAs without write permissions (Nico Pache) [RHEL-39306]
  - selftests/mm: reuse read_pmd_pagesize() in COW selftest (Nico Pache) [RHEL-39306]
  - mm: userfaultfd: add UFFDIO_CONTINUE_MODE_WP to install WP PTEs (Nico Pache) [RHEL-39306]
  - kselftest: vm: fix unused variable warning (Nico Pache) [RHEL-39306]
  - kselftest: vm: add tests for memory-deny-write-execute (Nico Pache) [RHEL-39306]
  - selftests/vm: cow: R/O long-term pinning reliability tests for non-anon pages (Nico Pache) [RHEL-39306]
  - config: enable CONFIG_DP83TG720_PHY (Izabela Bakollari) [RHEL-33716]
  - config: CONFIG_QCA807X_PHY (Izabela Bakollari) [RHEL-33716]
  - config: enable CONFIG_QCA808X_PHY (Izabela Bakollari) [RHEL-33716]
  - config: enable CONFIG_QCA83XX_PHY (Izabela Bakollari) [RHEL-33716]
  - net: linkmode: add linkmode_fill() helper (Izabela Bakollari) [RHEL-33716]
  - net: phy: qca807x: fix compilation when CONFIG_GPIOLIB is not set (Izabela Bakollari) [RHEL-33716]
  - net: phy: qca807x: move interface mode check to .config_init_once (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83tg720: get master/slave configuration in link down state (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83tg720: wake up PHYs in managed mode (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: at803x: fix kernel panic with at8031_probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: use devm_clk_get_optional_enabled for the rmii-ref clock (Izabela Bakollari) [RHEL-33716]
  - net: sfp: update comment for FS SFP-10G-T quirk (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: switch to crc_itu_t() (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: drop wrong endianness conversion for addr and CRC (Izabela Bakollari) [RHEL-33716]
  - net: phy: fix phy_read_poll_timeout argument type in genphy_loopback (Izabela Bakollari) [RHEL-33716]
  - net: sfp: enhance quirk for Fibrestore 2.5G copper SFP module (Izabela Bakollari) [RHEL-33716]
  - net: phy: qca807x: add support for configurable LED (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: generalize some qca808x LED functions (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: move common qca808x LED define to shared header (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: add support for QCA807x PHY Family (Izabela Bakollari) [RHEL-33716]
  - net: phy: provide whether link has changed in c37_read_status (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: move more function to shared library (Izabela Bakollari) [RHEL-33716]
  - net: phy: add devm/of_phy_package_join helper (Izabela Bakollari) [RHEL-33716]
  - net: phy: add support for scanning PHY in PHY packages nodes (Izabela Bakollari) [RHEL-33716]
  - of: mdio: Add of_node_put() when breaking out of for_each_xx (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: use generic MDIO helpers to simplify the code (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: add 5Gbps support to rtl822x_config_aneg() (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: use generic MDIO constants (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add 2.5g and 5g related PMA speed constants (Izabela Bakollari) [RHEL-33716]
  - net: phy: c45 scanning: Don't consider -ENODEV fatal (Izabela Bakollari) [RHEL-33716]
  - net: phy: add helper phy_advertise_eee_all (Izabela Bakollari) [RHEL-33716]
  - net: phy: constify phydev->drv (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix the frequency adjustments (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: qca808x: default to LED active High if not set (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: qca808x: fix logic error in LED brightness set (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: add support for RTL8126A-integrated 5Gbps PHY (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83867: Add support for active-low LEDs (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: detach qca808x PHY driver from at803x (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: move additional functions to shared library (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: deatch qca83xx PHY driver from at803x (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: create and move functions to shared library (Izabela Bakollari) [RHEL-33716]
  - net: phy: move at803x PHY driver to dedicated directory (Izabela Bakollari) [RHEL-33716]
  - net: phy: adin1100: Add interrupt support for link change (Izabela Bakollari) [RHEL-33716]
  - net: phy: phy_device: Prevent nullptr exceptions on ISR (Izabela Bakollari) [RHEL-33716]
  - net: phy: c45: change genphy_c45_ethtool_[get|set]_eee to use EEE linkmode bitmaps (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix set/get PHC time for lan8814 (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: add LED support for qca808x (Izabela Bakollari) [RHEL-33716]
  - net: phy: add support for PHY LEDs polarity modes (Izabela Bakollari) [RHEL-33716]
  - net: phy: mediatek-ge-soc: sync driver with MediaTek SDK (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix PTP frame parsing for lan8814 (Izabela Bakollari) [RHEL-33716]
  - net: sfp-bus: fix SFP mode detect from bitrate (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: populate .soft_reset for KSZ9131 (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix PTP frame parsing for lan8841 (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: make read_status more generic (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: add support for cdt cross short test for qca808x (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: refactor qca808x cable test get status function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: generalize cdt fault length function (Izabela Bakollari) [RHEL-33716]
  - net: Use of_property_present() for testing DT property presence (Izabela Bakollari) [RHEL-33716]
  - net: phylink: move phylink_pcs_neg_mode() into phylink.c (Izabela Bakollari) [RHEL-33716]
  - net: mdio_bus: add refcounting for fwnodes to mdiobus (Izabela Bakollari) [RHEL-33716]
  - net: phy: linux/phy.h: fix Excess kernel-doc description warning (Izabela Bakollari) [RHEL-33716]
  - net: phy: nxp-c45-tja11xx: implement mdo_insert_tx_tag (Izabela Bakollari) [RHEL-33716]
  - net: phy: nxp-c45-tja11xx: add MACsec statistics (Izabela Bakollari) [RHEL-33716]
  - net: phy: nxp-c45-tja11xx: add MACsec support (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: better align function varibles to open parenthesis (Izabela Bakollari) [RHEL-33716]
  - net: sfp: fix PHY discovery for FS SFP-10G-T module (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: replace msleep(1) with usleep_range (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: remove extra space after cast (Izabela Bakollari) [RHEL-33716]
  - net: phy: add support for PHY package MMD read/write (Izabela Bakollari) [RHEL-33716]
  - net: phy: restructure __phy_write/read_mmd to helper and phydev user (Izabela Bakollari) [RHEL-33716]
  - net: phy: extend PHY package API to support multiple global address (Izabela Bakollari) [RHEL-33716]
  - net: phy: make addr type u8 in phy_package_shared struct (Izabela Bakollari) [RHEL-33716]
  - net: phylink: reimplement population of pl->supported for in-band (Izabela Bakollari) [RHEL-33716]
  - net: phy: skip LED triggers on PHYs on SFP modules (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: make read specific status function more generic (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific qca808x config_aneg to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: Add support for the DP83TG720S Ethernet PHY (Izabela Bakollari) [RHEL-33716]
  - net: phy: c45: add genphy_c45_pma_read_ext_abilities() function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: drop specific PHY ID check from cable test functions (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move at8035 specific DT parse to dedicated probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move at8031 functions in dedicated section (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: make at8031 related DT functions name more specific (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 config_intr to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 WOL bits to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 config_init to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 probe mode check to dedicated probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific DT option for at8031 to specific probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move qca83xx specific check in dedicated functions (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: raname hw_stats functions to qca83xx specific name (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move disable WOL to specific at8031 probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: fix passing the wrong reference for config_intr (Izabela Bakollari) [RHEL-33716]
  - net: mdio_bus: replace deprecated strncpy with strscpy (Izabela Bakollari) [RHEL-33716]
  - net: sfp: Convert to platform remove callback returning void (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: allow usage of generic ethernet-phy clock (Izabela Bakollari) [RHEL-33716]
  - net: phy: adin: allow control of Fast Link Down (Izabela Bakollari) [RHEL-33716]
  - net: phylink: use the PHY's possible_interfaces if populated (Izabela Bakollari) [RHEL-33716]
  - net: phylink: split out PHY validation from phylink_bringup_phy() (Izabela Bakollari) [RHEL-33716]
  - net: phylink: pass PHY into phylink_validate_mask() (Izabela Bakollari) [RHEL-33716]
  - net: phylink: pass PHY into phylink_validate_one() (Izabela Bakollari) [RHEL-33716]
  - net: phylink: split out per-interface validation (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: fill in possible_interfaces for AQR113C (Izabela Bakollari) [RHEL-33716]
  - net: phy: bcm84881: fill in possible_interfaces (Izabela Bakollari) [RHEL-33716]
  - net: phy: marvell10g: fill in possible_interfaces (Izabela Bakollari) [RHEL-33716]
  - net: phy: marvell10g: table driven mactype decode (Izabela Bakollari) [RHEL-33716]
  - net: phy: add possible interfaces (Izabela Bakollari) [RHEL-33716]
  - net: sfp: rework the RollBall PHY waiting code (Izabela Bakollari) [RHEL-33716]
  - net: phy: correctly check soft_reset ret ONLY if defined for PHY (Izabela Bakollari) [RHEL-33716]
  - net: phylink: use for_each_set_bit() (Izabela Bakollari) [RHEL-33716]
  - net: phy: broadcom: Wire suspend/resume for BCM54612E (Izabela Bakollari) [RHEL-33716]
  - net: sfp: use linkmode_*() rather than open coding (Izabela Bakollari) [RHEL-33716]
  - net: phylink: use linkmode_fill() (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: add firmware load support (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: move MMD_VEND define to header (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: move to separate directory (Izabela Bakollari) [RHEL-33716]
  - net: mdio: fix typo in header (Izabela Bakollari) [RHEL-33716]
  - net: phylink: initialize carrier state at creation (Izabela Bakollari) [RHEL-33716]
  - net: phy: fill in missing MODULE_DESCRIPTION()s (Izabela Bakollari) [RHEL-33716]
  - net: mdio: fill in missing MODULE_DESCRIPTION()s (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: Fix forced link mode for KSZ886X switches (Izabela Bakollari) [RHEL-33716]
  - net: dsa: microchip: ksz8: Enable MIIM PHY Control reg access (Izabela Bakollari) [RHEL-33716]
  - net: phy: mscc: macsec: reject PN update requests (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83867: Add support for hardware blinking LEDs (Izabela Bakollari) [RHEL-33716]
  - net: sfp: improve Nokia GPON sfp fixup (Izabela Bakollari) [RHEL-33716]
  - net: sfp: re-implement ignoring the hardware TX_FAULT signal (Izabela Bakollari) [RHEL-33716]
  - net: sfp: add quirk for FS's 2.5G copper SFP (Izabela Bakollari) [RHEL-33716]
  - net: phy: amd: Support the Altima AMI101L (Izabela Bakollari) [RHEL-33716]
  - net: sfp: add quirk for Fiberstone GPON-ONU-34-20BI (Izabela Bakollari) [RHEL-33716]
  - net: phy: fix regression with AX88772A PHY driver (Izabela Bakollari) [RHEL-33716]
  - net: phy: convert phy_stop() to use split state machine (Izabela Bakollari) [RHEL-33716]
  - net: phy: split locked and unlocked section of phy_state_machine() (Izabela Bakollari) [RHEL-33716]
  - net: phy: move phy_state_machine() (Izabela Bakollari) [RHEL-33716]
  - net: phy: move phy_suspend() to end of phy_state_machine() (Izabela Bakollari) [RHEL-33716]
  - net: phy: move call to start aneg (Izabela Bakollari) [RHEL-33716]
  - net: phy: call phy_error_precise() while holding the lock (Izabela Bakollari) [RHEL-33716]
  - net: phy: always call phy_process_state_change() under lock (Izabela Bakollari) [RHEL-33716]
  - net: phy: marvell: Add support for offloading LED blinking (Izabela Bakollari) [RHEL-33716]
  - net: phy: phy_device: Call into the PHY driver to set LED offload (Izabela Bakollari) [RHEL-33716]
  - net: sfp: Remove unused function declaration sfp_link_configure() (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: add qca8081 fifo reset on the link changed (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: remove qca8081 1G fast retrain and slave seed config (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: support qca8081 1G chip type (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: enable qca8081 slave seed conditionally (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: merge qca8081 slave seed function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: support qca8081 genphy_c45_pma_read_abilities (Izabela Bakollari) [RHEL-33716]
  - net: mdio: Introduce a regmap-based mdio driver (Izabela Bakollari) [RHEL-33716]
  - net: phylib: fix phy_read*_poll_timeout() (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add mdio_device_get() and mdio_device_put() (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add clause 73 to ethtool conversion helper (Izabela Bakollari) [RHEL-33716]
  - mdio_bus: unhide mdio_bus_init prototype (Izabela Bakollari) [RHEL-33716]
  - net: mdio: fix owner field for mdio buses registered using ACPI (Izabela Bakollari) [RHEL-33716]
  - net: phy: improve phy_read_poll_timeout (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add mdiodev_c45_(read|write) (Izabela Bakollari) [RHEL-33716]
  - docs: networking: phy: add missing space (Izabela Bakollari) [RHEL-33716]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.el9]
changelog:
  - Revert "Merge: scsi: fnic: driver update" (John Meneghini) [RHEL-36420]
  - dev/parport: fix the array out-of-bounds risk (CKI Backport Bot) [RHEL-54990] {CVE-2024-42301}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54835] {CVE-2024-43830}
  - null_blk: fix validation of block size (Ming Lei) [RHEL-51322] {CVE-2024-41077}
  - s390/fpu: Re-add exception handling in load_fpu_state() (Aristeu Rozanski) [RHEL-39346]
  - redhat: spec: add cachestat to kselftest package (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: Fix build warnings on ppc64 (Eric Chanudet) [RHEL-50302]
  - selftests/cachestat: Fix print_cachestat format (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: use proper syscall number macro (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: properly link in librt (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: catch failing fsync test on tmpfs (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: test for cachestat availability (Eric Chanudet) [RHEL-50302]
  - selftests: add selftests for cachestat (Eric Chanudet) [RHEL-50302]


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomas Orsava <torsava@redhat.com> - 20.9-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Sérgio Basto <sergio@serjux.com> - 4.1-57
changelog:
  - ncurses-compat-libs was dropped in F37, to workaround and fix FTI (fails to
    install), since F37 we use ncurses-libs


author: Michal Domonkos <mdomonko@redhat.com> - 208-1
changelog:
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-26961)
  - Fix automatic soname requires on non-versioned symlink targets (RHEL-28767)


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ 6dcc9ec2 (bz 2124605)
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 0e560296 (bz 2174916)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: systemd maintenance team <systemd-maint@redhat.com> - 252-37
changelog:
  - ci(src-git): add RHEL-9.1 and RHEL-9.1.z to allowed versions (RHEL-30372)
  - libsystemd: link with '-z nodelete' (RHEL-6589)
  - basic/utf8: make utf8_encoded_to_unichar() return length of the codepoint (RHEL-31219)
  - test-gunicode: add new test to show that unichar_iswide() is borked (RHEL-31219)
  - string-util: pass ANSI sequences through unchanged (RHEL-31219)
  - cryptsetup: do not assert when unsealing token without salt (RHEL-38864)
  - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-38864)
  - core/mount: if umount(8) fails but mount disappeared, assume success (RHEL-13159)
  - Drop log level of header limits log message (RHEL-33890)
  - journal: do not rotate unrelated journal files when full or corrupted (RHEL-33890)
  - man: suffix --unit with an equal sign, since it expects an argument (RHEL-31070)
  - shared: move uid-alloc-range.[ch] from src/shared/ → src/basic/ (RHEL-31070)
  - journald: move uid_for_system_journal() to uid-alloc-range.h (RHEL-31070)
  - sd-journal: when SD_JOURNAL_CURRENT_USER is set, and called from system UID, imply SD_JOURNAL_SYSTEM (RHEL-31070)
  - man: document that journalctl --user requires Storage=persistent (RHEL-31070)
  - fix: prefix of dmesg pstore files (RHEL-20322)
  - backport new mkosi (RHEL-27512)
  - test: Skip various tests when /sys is not mounted (RHEL-27512)
  - string-util: introduce ascii_ishex() (RHEL-27512)
  - sd-id128: several cleanups (RHEL-27512)
  - sd-id128: make id128_read() or friends return -ENOPKG when the file contents is "uninitialized" (RHEL-27512)
  - test: add tests for "uninitialized" string handling by id128_read_fd() (RHEL-27512)
  - man: mention sd_id128_get_machine() or friend may return -ENOPKG (RHEL-27512)
  - sd-id128: make sd_id128_get_boot() and friend return -ENOMEDIUM (RHEL-27512)
  - sd-id128: make sd_id128_get_boot() and friend return -ENOSYS when /proc/ is not mounted (RHEL-27512)
  - man: mention that sd_id128_get_boot() and friend may return -ENOSYS (RHEL-27512)
  - sd-id128: fold do_sync flag into Id128FormatFlag (RHEL-27512)
  - sd-id128: make sd_id128_get_machine() or friends return -EUCLEAN when an ID is in an invalid format (RHEL-27512)
  - sd-id128: allow sd_id128_get_machine() and friend to be called with NULL (RHEL-27512)
  - sd-id128: also refuse an empty invocation ID (RHEL-27512)
  - man: update documents for sd_id128_get_invocation() (RHEL-27512)
  - test-id128: simplify machine-id check (RHEL-27512)
  - test-fs-util: skip part of test_chase_symlinks if machine-id is not initialized (RHEL-27512)
  - test-unit-name: simplify machine-id check (RHEL-27512)
  - test-load-fragment: simplify machine-id check (RHEL-27512)
  - journal: skip part of test-journal-interleaving if no machine-id exists (RHEL-27512)
  - test: skip journal tests without valid /etc/machine-id (RHEL-27512)
  - test-recurse-dir: work around nftw() ignoring symlinks() (RHEL-27512)
  - test: Skip test-recurse-dir on overlayfs (RHEL-27512)
  - test-specifier: Ignore -ENOPKG from specifier_printf() (RHEL-27512)
  - test-execute: Skip when /sys is read-only (RHEL-27512)
  - kernel-install: Make sure KERNEL_INSTALL_BYPASS is disabled in tests (RHEL-27512)
  - tools: make sure $KERNEL_INSTALL_BYPASS is disabled when checking help (RHEL-27512)
  - test-execute: drop capabilities when testing with user manager (RHEL-27512)
  - tmpfiles: Add merge support for copy files action (RHEL-27512)
  - generator: add generator_open_unit_file_full to allow creating temporary units (RHEL-27512)
  - network-generator: rewrite unit if it already exists and its content changed (RHEL-27512)
  - ci: drop super-linter's shellcheck (RHEL-27512)
  - mkosi: make sure we build & use RHEL 9 stuff (RHEL-27512)
  - ci: backport mkosi CI configuration from upstream (RHEL-27512)
  - mkosi: explicitly enroll SecureBoot keys (RHEL-27512)
  - test-execute: also mount tmpfs on /dev/shm (RHEL-27512)
  - mkosi: fix UKI addons test (RHEL-27512)
  - Revert "mkosi: Disable cmdline addon test for now" (RHEL-27512)
  - Revert "mkosi: Don't fail on systemd-vconsole-setup.service failure for now" (RHEL-27512)
  - mkosi: make shellcheck happy (RHEL-27512)
  - mkosi: use pesign for signing UKI addons (RHEL-27512)
  - test: copy out the necessary test data before we start overmounting stuff (RHEL-27512)
  - ci: make the build dir accessible when running w/o privileges (RHEL-27512)
  - ci: explicitly change oom-{score}-adj before running tests (RHEL-27512)
  - ratelimit: add ratelimit_left helper (RHEL-35703)
  - manager: restrict Dump*() to privileged callers or ratelimit (RHEL-35703)
  - ci: define `runas` function inline (RHEL-35703)
  - Drop /dev test in test-mountpoint-util (RHEL-30372)
  - core/manager: export manager_dbus_is_running (RHEL-40878)
  - core: refuse dbus activation if dbus is not running (RHEL-40878)
  - core: only refuse Type=dbus service enqueuing if dbus has stop job (RHEL-40878)
  - Revert "core/manager: export manager_dbus_is_running" and partially "core: refuse dbus activation if dbus is not running" (RHEL-40878)
  - manager: fix reloading in reload-or-restart --marked (RHEL-40878)
  - rpm: add `systemd_postun_with_reload` and `systemd_user_postun_with_reload` (RHEL-40878)
  - rpm: add `systemd_user_daemon_reexec` (RHEL-40878)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-38
changelog:
  - tools: fix the file name that "meson setup" generates (RHEL-30372)
  - tools: explicitly specify "setup" subcommand (RHEL-30372)
  - fuzz: pass -Dc_args=/-Dcpp_args= to fuzzer targets (RHEL-30372)
  - fuzz: don't panic without a C++ compiler (RHEL-30372)
  - meson: use ternary op for brevity (RHEL-30372)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-39
changelog:
  - enable FIDO2 support (RHEL-36276)
  - netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT (RHEL-44630)
  - netif-naming-scheme: make actually possible to use rhel-9.5 scheme (RHEL-44630)
  - generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-33436)
  - ci: add support for rhel-only parameters (RHEL-30372)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-41
changelog:
  - timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020)
  - cryptsetup-tokens: fix pin asserts (RHEL-36276)
  - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276)
  - kernel-install: check machine ID (RHEL-50672)
  - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672)
  - hwdb: Add Lenovo G580 (RHEL-5950)
  - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950)
  - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950)
  - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950)
  - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950)
  - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950)
  - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950)
  - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950)
  - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950)
  - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950)
  - Update 60-evdev.hwdb (#25704) (RHEL-5950)
  - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950)
  - hwdb: drop trailing space (RHEL-5950)
  - hwdb: add comments about matching entries (RHEL-5950)
  - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950)
  - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950)
  - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950)
  - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950)
  - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950)
  - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950)
  - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950)
  - hwdb: remove spurious whitespace (RHEL-5950)
  - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950)
  - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: Add mount matrix for Linx 1020 (RHEL-5950)
  - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950)
  - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950)
  - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update autosuspend db (RHEL-5950)
  - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950)
  - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950)
  - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950)
  - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950)
  - hwdb: add override for IdeaPad5 insert key (RHEL-5950)
  - hwdb: update database (RHEL-5950)
  - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950)
  - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950)
  - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950)
  - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950)
  - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950)
  - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950)
  - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950)
  - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950)
  - hwdb: drop redundant entry (RHEL-5950)
  - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950)
  - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950)
  - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950)
  - hwdb: Add support for "Passion Model P612F" (RHEL-5950)
  - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950)
  - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950)
  - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950)
  - hwdb: Fix rotation for BMAX Y13 (RHEL-5950)
  - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950)
  - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950)
  - hwdb: do not include '#' in modalias (RHEL-5950)
  - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950)
  - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950)
  - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950)
  - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950)
  - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950)
  - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950)
  - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950)
  - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950)
  - hwdb: Add override for headset form-factors (RHEL-5950)
  - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950)
  - hwdb: drop trailing white space (RHEL-5950)
  - hwdb: merge multiple keyboard entries with same setting (RHEL-5950)
  - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950)
  - hwdb update for v246-rc1 (RHEL-5950)
  - update hwdb autosuspend data for v254 (RHEL-5950)
  - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950)
  - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950)
  - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950)
  - Add alternate name for MX Ergo as found on some devices (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950)
  - Update 60-sensor.hwdb (#28804) (RHEL-5950)
  - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950)
  - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950)
  - hwdb: keyboard: D330 FnLk toggle (RHEL-5950)
  - hwdb: Add Logitech G502 X (RHEL-5950)
  - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950)
  - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950)
  - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950)
  - hwdb: Bush tablet rotation support (#29268) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950)
  - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950)
  - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950)
  - add udev rule for micmute (f20) (RHEL-5950)
  - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update hwdb autosuspend rules (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950)
  - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: rename .html=>.csv (RHEL-5950)
  - hwdb/acpi-update.py: streamline python code (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: add Predator PHN16-71 (RHEL-5950)
  - Update 60-autosuspend.hwdb (#30131) (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950)
  - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950)
  - Add three Dell platforms to sensor accel location base (RHEL-5950)
  - Add Bosto BT-12HD series to hwdb (RHEL-5950)
  - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950)
  - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950)
  - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950)
  - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950)
  - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950)
  - hwdb: add resolution setting for GAOMON S620 (RHEL-5950)
  - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950)
  - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950)
  - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950)
  - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950)
  - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950)
  - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950)
  - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950)
  - Update USB ids of hwdb (RHEL-5950)
  - Added resolution for Huion Kamvas Pro 19 (RHEL-5950)
  - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950)
  - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950)
  - Fixed resolution for pen and touchpad (RHEL-5950)
  - hwdb: fix missing colon (#32108) (RHEL-5950)
  - hwdb: update for v256 (RHEL-5950)
  - autosuspend: update for v256 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950)
  - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950)
  - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950)
  - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950)
  - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950)
  - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950)
  - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950)
  - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950)
  - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950)
  - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950)
  - hwdb: add a vmbus id for HyperV Video device (RHEL-5950)
  - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950)
  - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950)
  - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950)
  - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950)
  - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950)
  - Add OrangePi NEO Scancodes (RHEL-5950)
  - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950)
  - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950)
  - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950)
  - hwdb: Add some HP IR cameras (RHEL-5950)
  - hwdb: add more AV controllers (RHEL-5950)
  - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950)
  - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950)
  - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950)
  - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950)
  - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950)
  - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950)
  - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - add udev rules for trezor hw wallet devices (RHEL-5950)
  - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950)
  - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950)
  - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-43
changelog:
  - udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103)
  - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103)
  - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103)
  - Include <threads.h> if possible to get thread_local definition (RHEL-50651)
  - add APIs for detecting confidential virtualization (RHEL-50651)
  - detect-virt: add --cvm option (RHEL-50651)
  - detect-virt: add --list-cvm option (RHEL-50651)
  - unit: add "cvm" option for ConditionSecurity (RHEL-50651)
  - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651)
  - core: log detected confidential virtualization type (RHEL-50651)
  - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651)
  - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-50651)
  - confidential-virt: add detection for s390x target (RHEL-50651)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: Frank Ch. Eigler <fche@redhat.com> - 4.9-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Martin Cermak <mcermak@redhat.com> - 5.1-4
changelog:
  - RHEL-50107.patch:  Make systemtap compatible with kernel
    commit 68cbd415dd4b .  Related: RHEL-56962 .


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-82
changelog:
  - Changing LD_FLAGS to RPM_LD_FLAGS
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Akira TAGOH <tagoh@redhat.com> - 20220612-1
changelog:
  - New upstream release.
    Resolves: rhbz#1858617
  - Revise the spec file for new packaging guidelines.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.32-1
changelog:
  - xkeyboard-config 2.32
  - build with meson now
  - drop the xorg ruleset, no longer in use. Everything is hardcoded to evdev
    these days.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.32-3
changelog:
  - Restore the xorg ruleset, console-setup and possibly others are still
    using those (#1951875)
  - Allow for a "custom" layout
  - Don't mark the DTD document as XML document (#1952283)
  - Remove a duplicate keyboard layout to prevent a crash in gnome-desktop's
    xkbinfo


author: Jakub Martisko <jamartis@redhat.com> - 3.0-31
changelog:
  - Add the missing linker flags
  - Add the patch that allows to configure the linker flags from the spec file
    Resolves: rhbz #2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-33
changelog:
  - Disable the asm implementation of some functions and use the C instead
  - This should fix some of the annocheck issues
    Related: rhbz#2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-34
changelog:
  - Fix the regression introduced in 3.0-33 that caused some of the zip build flags to be dropped
  Resolves: rhbz#2162688


author: Jakub Martisko <jamartis@redhat.com> - 3.0-35
changelog:
  - Fix the annocheck issus from 3-0-33 without reintroducing the regression from 3.0-34
  Related: rhbz#2162688


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


