# changelog

author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2122.305.7.el8uek]
changelog:
  - ice: implement device flash update via devlink (Jacob Keller)  [Orabug: 33236075]  
  - ice: add board identifier info to devlink .info_get (Jacob Keller)  [Orabug: 33236075]  
  - ice: add basic handler for devlink .info_get (Jacob Keller)  [Orabug: 33236075]  
  - ice: enable initial devlink support (Jacob Keller)  [Orabug: 33236075]  
  - bitops: introduce the for_each_set_clump8 macro (William Breathitt Gray)  [Orabug: 33236075]  
  - Add pldmfw library for PLDM firmware update (Jacob Keller)  [Orabug: 33236075]  
  - devlink: expand the devlink-info documentation (Jakub Kicinski)  [Orabug: 33236075]  
  - devlink: promote "fw.bundle_id" to a generic info version (Jacob Keller)  [Orabug: 33236075]  
  - devlink: remove trigger command from devlink-region.rst (Jacob Keller)  [Orabug: 33236075]  
  - devlink: add trap metadata type for cookie (Jiri Pirko)  [Orabug: 33236075]  
  - devlink: add ACL generic packet traps (Jiri Pirko)  [Orabug: 33236075]  
  - devlink: Force enclosing array on binary fmsg data (Aya Levin)  [Orabug: 33236075]  
  - devlink: document devlink info versions reported by bnxt_en driver (Vasundhara Volam)  [Orabug: 33236075]  
  - devlink: add macro for "fw.roce" (Vasundhara Volam)  [Orabug: 33236075]  
  - devlink: Add health recover notifications on devlink flows (Moshe Shemesh)  [Orabug: 33236075]  
  - devlink: Add overlay source MAC is multicast trap (Amit Cohen)  [Orabug: 33236075]  
  - devlink: Add tunnel generic packet traps (Amit Cohen)  [Orabug: 33236075]  
  - devlink: Add non-routable packet trap (Amit Cohen)  [Orabug: 33236075]  
  - devlink: fix typos in qed documentation (Jacob Keller)  [Orabug: 33236075]  
  - devlink: correct misspelling of snapshot (Jacob Keller)  [Orabug: 33236075]  
  - devlink: document region snapshot triggering from userspace (Jacob Keller)  [Orabug: 33236075]  
  - devlink: introduce devlink-dpipe.rst documentation file (Jacob Keller)  [Orabug: 33236075]  
  - devlink: add a devlink-resource.rst documentation file (Jacob Keller)  [Orabug: 33236075]  
  - devlink: rename and expand devlink-trap-netdevsim.rst (Jacob Keller)  [Orabug: 33236075]  
  - devlink: add documentation for ionic device driver (Jacob Keller)  [Orabug: 33236075]  
  - devlink: add a file documenting devlink regions (Jacob Keller)  [Orabug: 33236075]  
  - devlink: add a driver-specific file for the qed driver (Jacob Keller)  [Orabug: 33236075]  
  - devlink: add parameter documentation for the mlx4 driver (Jacob Keller)  [Orabug: 33236075]  
  - devlink: document info versions for each driver (Jacob Keller)  [Orabug: 33236075]  
  - devlink: convert driver-specific files to reStructuredText (Jacob Keller)  [Orabug: 33236075]  
  - devlink: mention reloading in devlink-params.rst (Jacob Keller)  [Orabug: 33236075]  
  - devlink: add documentation for generic devlink parameters (Jacob Keller)  [Orabug: 33236075]  
  - devlink: convert devlink-params.txt to reStructuredText (Jacob Keller)  [Orabug: 33236075]  
  - devlink: rename devlink-info-versions.rst and add a header (Jacob Keller)  [Orabug: 33236075]  
  - devlink: convert devlink-health.txt to rst format (Jacob Keller)  [Orabug: 33236075]  
  - devlink: move devlink documentation to subfolder (Jacob Keller)  [Orabug: 33236075]  
  - devlink: add macro for "fw.psid" (Jacob Keller)  [Orabug: 33236075]  
  - devlink: add devink notification when reporter update health state (Vikas Gupta)  [Orabug: 33236075]  
  - rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire)  [Orabug: 33243559]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.300.0.el8uek]
changelog:
  - misc/pvpanic: fix set driver data (Mihai Carabas)  [Orabug: 33290806]  
  - btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana)  [Orabug: 33265208]  
  - vdpa/mlx5: fix feature negotiation across device reset (Si-Wei Liu)  [Orabug: 33247045]  
  - net/mlx5: E-switch, When eswitch is unsupported, return -EOPNOTSUPP (Parav Pandit)  [Orabug: 33241452]  
  - xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)   
  - net/mlx5: E-switch, Use eswitch total_vports (Parav Pandit)  [Orabug: 33213269]  
  - net/mlx5: E-switch, Reuse total_vports and avoid duplicate nvports (Parav Pandit)  [Orabug: 33213269]  
  - net/mlx5: E-switch, Consider maximum vf vports for steering init (Parav Pandit)  [Orabug: 33213269]  
  - RDMA/mlx5: Fix NULL pointer dereference in destroy_prefetch_work (Maor Gottlieb)  [Orabug: 33303297]  
  - rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372378]  
  - KVM: X86: Micro-optimize IPI fastpath delay (Wanpeng Li)  [Orabug: 33119431]  
  - net/mlx5_core: Restore driver version (Roy Novich)  [Orabug: 33112151]  
  - RDMA/umem: Use ib_dma_max_seg_size instead of dma_get_max_seg_size (Christoph Hellwig)  [Orabug: 33107202]  
  - lib/scatterlist: Do not limit max_segment to PAGE_ALIGNED values (Jason Gunthorpe)  [Orabug: 33107202]  
  - RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 33107202]  
  - lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 33107202]  
  - uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi)  [Orabug: 33246580]  
  - rdmaip: trace message buffer size too small for rdmaip debug tracepoints (Alan Maguire)  [Orabug: 33267573]  
  - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Peter Ujfalusi)  [Orabug: 32461425]  
  - driver core: auxiliary bus: Remove unneeded module bits (Dave Jiang)  [Orabug: 32461425]  
  - driver core: auxiliary bus: Fix calling stage for auxiliary bus init (Dave Jiang)  [Orabug: 32461425]  
  - driver core: auxiliary bus: Fix auxiliary bus shutdown null auxdrv ptr (Dave Jiang)  [Orabug: 32461425]  
  - bnxt_en: Use register window 6 instead of 5 to read the PHC (Michael Chan)  [Orabug: 33181761]  
  - bnxt_en: Update firmware call to retrieve TX PTP timestamp (Michael Chan)  [Orabug: 33181761]  
  - bnxt_en: Update firmware interface to 1.10.2.52 (Michael Chan)  [Orabug: 33181761]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.300.1.el8uek]
changelog:
  - net: qrtr: fix another OOB Read in qrtr_endpoint_post (Xiaolong Huang)  [Orabug: 33336805]  {CVE-2021-3743} 
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33336785]  {CVE-2021-40490} 
  - net/mlx5: E-Switch, Fix vlan or qos setting in legacy mode (Vu Pham)  [Orabug: 33291040]  
  - rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge)  [Orabug: 33331710]  
  - RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33331640]  
  - usb: hso: fix error handling code of hso_create_net_device (Dongliang Mu)  [Orabug: 33329086]  {CVE-2021-37159} 
  - hso: fix bailout in error case of probe (Oliver Neukum)  [Orabug: 33329086]  {CVE-2021-37159} 
  - uek-rpm: Set DEFAULTKERNEL in /etc/sysconfig/kernel correctly (Dave Kleikamp)  [Orabug: 33219604]  
  - RDMA/mlx5: Fix crash when unbind multiport slave (Maor Gottlieb)  [Orabug: 33303425]  
  - net/mlx5: Don't overwrite HCA capabilities when setting MSI-X count (Leon Romanovsky)  [Orabug: 33220810]  
  - net/mlx5: Implement sriov_get_vf_total_msix/count() callbacks (Leon Romanovsky)  [Orabug: 33220810]  
  - net/mlx5: Dynamically assign MSI-X vectors count (Leon Romanovsky)  [Orabug: 33220810]  
  - net/mlx5: Add dynamic MSI-X capabilities bits (Leon Romanovsky)  [Orabug: 33220810]  
  - PCI/IOV: Add sysfs MSI-X vector assignment interface (Leon Romanovsky)  [Orabug: 33220810]  
  - net/mlx5: Check that driver was probed prior attaching the device (Leon Romanovsky)  [Orabug: 33286656]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.300.2.el8uek]
changelog:
  - btrfs: fix NULL pointer dereference when deleting device by invalid id (Qu Wenruo)  [Orabug: 33365609]  {CVE-2021-3739} 
  - Revert "uek-rpm: mark /etc/ld.so.conf.d/ files as %config" (aloktiw)  [Orabug: 33359669]  
  - bpf: provide BPF Type Format (BTF) info for kernel (Alan Maguire)  [Orabug: 33331233]  
  - perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (Like Xu)  [Orabug: 33194216]  
  - IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje)  [Orabug: 33283556]  
  - IB/core: Shifting initialization of device->cache_lock (Anand Khoje)  [Orabug: 33283556]  
  - IB/core: Updating cache for subnet_prefix in config_non_roce_gid_cache() (Anand Khoje)  [Orabug: 33283556]  
  - IB/core: Shuffle locks in ib_port_data to save memory (Anand Khoje)  [Orabug: 33283556]  
  - IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje)  [Orabug: 33283556]  
  - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (Dongli Zhang)  [Orabug: 33106728]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.300.3.el8uek]
changelog:
  - net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33379543]  
  - KVM: X86: MMU: Use the correct inherited permissions to get shadow page (Lai Jiangshan)  [Orabug: 33359297]  {CVE-2021-38198} 
  - KVM: x86: adjust SEV for commit 7e8e6eed75e (Paolo Bonzini)  [Orabug: 33375655]  
  - net/mlx5: Implement Oracle-only solution for mlx device names (Mikhael Goikhman)  [Orabug: 33247746]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.300.4.el8uek]
changelog:
  - Reintroduce: certs: Add EFI_CERT_X509_GUID support for dbx entries (Konrad Rzeszutek Wilk)  [Orabug: 33382994]  
  - bnxt_en: Update the driver version string (Jack Vogel)  [Orabug: 33392416]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.300.5.el8uek]
changelog:
  - dccp: don't duplicate ccid when cloning dccp sock (Lin, Zhenpeng)  [Orabug: 33408808]  {CVE-2017-6074} {CVE-2020-16119} {CVE-2020-16119} 
  - block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi)  [Orabug: 33396355]  
  - uek-rpm: add ofb.ko and crypto_user.ko modules to nano kernel (Somasundaram Krishnasamy)  [Orabug: 31895743]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.300.7.el8uek]
changelog:
  - KVM: SVM: Fix mismerge in svm_update_pi_irte() (Liam Merwick)  [Orabug: 33446526]  
  - Revert "KVM: x86: hyperv: Remove duplicate definitions of Reference TSC Page" (Liam Merwick)  [Orabug: 33450675]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.321.4.el8uek]
changelog:
  - tick/common: Align tick period during sched_timer setup (Thomas Gleixner)  [Orabug: 35520079]  
  - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch)  [Orabug: 35510149]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.322.1.el8uek]
changelog:
  - EDAC/i10nm: Add driver decoder for Sapphire Rapids server (Youquan Song)  [Orabug: 35524077]  
  - EDAC/i10nm: Add driver decoder for Ice Lake and Tremont CPUs (Youquan Song)  [Orabug: 35524077]  
  - EDAC/i10nm: Retrieve and print retry_rd_err_log registers (Youquan Song)  [Orabug: 35524077]  
  - EDAC, skx: Retrieve and print retry_rd_err_log registers (Tony Luck)  [Orabug: 35524077]  
  - EDAC/i10nm: Release mdev/mbase when failing to detect HBM (Qiuxu Zhuo)  [Orabug: 35524077]  
  - EDAC/i10nm: Add support for high bandwidth memory (Qiuxu Zhuo)  [Orabug: 35524077]  
  - EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Robert Richter)  [Orabug: 35524077]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.322.2.el8uek]
changelog:
  - LTS tag: v5.4.249 (Sherry Yang)   
  - xfs: verify buffer contents when we skip log replay (Darrick J. Wong)   
  - mm: make wait_on_page_writeback() wait for multiple pending writebacks (Linus Torvalds)   
  - mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) (Hugh Dickins)   
  - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (Clark Wang)   
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava)   
  - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Min Li)   
  - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (Min Li)   
  - drm/exynos: vidi: fix a wrong error return (Inki Dae)   
  - ARM: dts: Fix erroneous ADS touchscreen polarities (Linus Walleij)   
  - ASoC: nau8824: Add quirk to active-high jack-detect (Edson Juliano Drosdeck)   
  - s390/cio: unregister device when the only path is gone (Vineeth Vijayan)   
  - usb: gadget: udc: fix NULL dereference in remove() (Dan Carpenter)   
  - nfcsim.c: Fix error checking for debugfs_create_dir (Osama Muhammad)   
  - media: cec: core: don't set last_initiator if tx in progress (Hans Verkuil)   
  - arm64: Add missing Set/Way CMO encodings (Marc Zyngier)   
  - HID: wacom: Add error check to wacom_parse_and_register() (Denis Arefev)   
  - scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi)   
  - sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet)   
  - Revert "net: phy: dp83867: perform soft reset and retain established link" (Francesco Dolcini)   
  - netfilter: nfnetlink_osf: fix module autoload (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow element updates of bound anonymous sets (Pablo Neira Ayuso)   
  - be2net: Extend xmit workaround to BE3 chip (Ross Lagerwall)   
  - net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch (Arınç ÜNAL)   
  - ipvs: align inner_mac_header for encapsulation (Terin Stock)   
  - mmc: usdhi60rol0: fix deferred probing (Sergey Shtylyov)   
  - mmc: sh_mmcif: fix deferred probing (Sergey Shtylyov)   
  - mmc: sdhci-acpi: fix deferred probing (Sergey Shtylyov)   
  - mmc: omap_hsmmc: fix deferred probing (Sergey Shtylyov)   
  - mmc: omap: fix deferred probing (Sergey Shtylyov)   
  - mmc: mvsdio: fix deferred probing (Sergey Shtylyov)   
  - mmc: mvsdio: convert to devm_platform_ioremap_resource (Yangtao Li)   
  - mmc: mtk-sd: fix deferred probing (Sergey Shtylyov)   
  - net: qca_spi: Avoid high load if QCA7000 is not available (Stefan Wahren)   
  - xfrm: Linearize the skb after offloading if needed. (Sebastian Andrzej Siewior)   
  - ieee802154: hwsim: Fix possible memory leaks (Chen Aotian)   
  - x86/mm: Avoid using set_pgd() outside of real PGD pages (Lee Jones)   
  - nilfs2: prevent general protection fault in nilfs_clear_dirty_page() (Ryusuke Konishi)   
  - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini)   
  - ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN (Matthias May)   
  - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundebøll)   
  - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng)   
  - PCI: hv: Fix a race condition bug in hv_pci_query_relations() (Dexuan Cui)   
  - Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (Michael Kelley)   
  - nilfs2: fix buffer corruption due to concurrent device reads (Ryusuke Konishi)   
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim)   
  - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab)   
  - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu)   
  - x86/purgatory: remove PGO flags (Ricardo Ribalda)   
  - tracing: Add tracing_reset_all_online_cpus_unlocked() function (Steven Rostedt (Google))   
  - epoll: ep_autoremove_wake_function should use list_del_init_careful (Benjamin Segall)   
  - list: add "list_del_init_careful()" to go with "list_empty_careful()" (Linus Torvalds)   
  - mm: rewrite wait_on_page_bit_common() logic (Linus Torvalds)   
  - nilfs2: reject devices with insufficient block count (Ryusuke Konishi)   
  - LTS tag: v5.4.248 (Sherry Yang)   
  - mmc: block: ensure error propagation for non-blk (Christian Loehle)   
  - drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth (Alexander Kapshuk)   
  - neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky)   
  - net: Remove unused inline function dst_hold_and_use() (Gaosheng Cui)   
  - neighbour: Remove unused inline function neigh_key_eq16() (Gaosheng Cui)   
  - afs: Fix vlserver probe RTT handling (David Howells)   
  - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (Alex Maftei)   
  - net: tipc: resize nlattr array to correct size (Lin Ma)   
  - net: lapbether: only support ethernet devices (Eric Dumazet)   
  - net/sched: cls_api: Fix lockup on flushing explicitly created chain (Vlad Buslov)   
  - drm/nouveau: add nv_encoder pointer check for NULL (Natalia Petrova)   
  - drm/nouveau/kms: Don't change EDID when it hasn't actually changed (Lyude Paul)   
  - drm/nouveau/dp: check for NULL nv_connector->native_mode (Natalia Petrova)   
  - igb: fix nvm.ops.read() error handling (Aleksandr Loktionov)   
  - sctp: fix an error code in sctp_sf_eat_auth() (Dan Carpenter)   
  - ipvlan: fix bound dev checking for IPv6 l3s mode (Hangbin Liu)   
  - IB/isert: Fix incorrect release of isert connection (Saravanan Vajravel)   
  - IB/isert: Fix possible list corruption in CMA handler (Saravanan Vajravel)   
  - IB/isert: Fix dead lock in ib_isert (Saravanan Vajravel)   
  - IB/uverbs: Fix to consider event queue closing also upon non-blocking mode (Yishai Hadas)   
  - iavf: remove mask from iavf_irq_enable_queues() (Ahmed Zaki)   
  - RDMA/rxe: Fix the use-before-initialization error of resp_pkts (Zhu Yanjun)   
  - RDMA/rxe: Removed unused name from rxe_task struct (Bob Pearson)   
  - RDMA/rxe: Remove the unused variable obj (Zhu Yanjun)   
  - net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones)   
  - ping6: Fix send to link-local addresses with VRF. (Guillaume Nault)   
  - netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM (Pablo Neira Ayuso)   
  - spi: fsl-dspi: avoid SCK glitches with continuous transfers (Vladimir Oltean)   
  - spi: spi-fsl-dspi: Remove unused chip->void_write_data (Vladimir Oltean)   
  - usb: dwc3: gadget: Reset num TRBs before giving back the request (Elson Roy Serrao)   
  - serial: lantiq: add missing interrupt ack (Bernhard Seibold)   
  - USB: serial: option: add Quectel EM061KGL series (Jerry Meng)   
  - Remove DECnet support from kernel (Stephen Hemminger)   
  - ALSA: hda/realtek: Add a quirk for Compaq N14JP6 (Edson Juliano Drosdeck)   
  - net: usb: qmi_wwan: add support for Compal RXM-G1 (Wes Huang)   
  - RDMA/uverbs: Restrict usage of privileged QKEYs (Edward Srouji)   
  - nouveau: fix client work fence deletion race (Dave Airlie)   
  - powerpc/purgatory: remove PGO flags (Ricardo Ribalda)   
  - kexec: support purgatories with .text.hot sections (Ricardo Ribalda)   
  - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (Ryusuke Konishi)   
  - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (Ryusuke Konishi)   
  - nios2: dts: Fix tse_mac "max-frame-size" property (Janne Grunau)   
  - ocfs2: check new file size on fallocate call (Luís Henriques)   
  - ocfs2: fix use-after-free when unmounting read-only filesystem (Luís Henriques)   
  - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (Sukrut Bellary)   
  - xen/blkfront: Only check REQ_FUA for writes (Ross Lagerwall)   
  - mips: Move initrd_start check after initrd address sanitisation. (Liviu Dudau)   
  - MIPS: Alchemy: fix dbdma2 (Manuel Lauss)   
  - parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() (Helge Deller)   
  - parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() (Helge Deller)   
  - btrfs: handle memory allocation failure in btrfs_csum_one_bio (Johannes Thumshirn)   
  - power: supply: Fix logic checking if system is running from battery (Mario Limonciello)   
  - irqchip/meson-gpio: Mark OF related data as maybe unused (Krzysztof Kozlowski)   
  - regulator: Fix error checking for debugfs_create_dir (Osama Muhammad)   
  - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (Alexandru Sorodoc)   
  - power: supply: Ratelimit no data debug output (Marek Vasut)   
  - ARM: dts: vexpress: add missing cache properties (Krzysztof Kozlowski)   
  - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (Hans de Goede)   
  - power: supply: sc27xx: Fix external_power_changed race (Hans de Goede)   
  - power: supply: ab8500: Fix external_power_changed race (Hans de Goede)   
  - s390/dasd: Use correct lock while counting channel queue length (Jan Höppner)   
  - dasd: refactor dasd_ioctl_information (Christoph Hellwig)   
  - KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (Roberto Sassu)   
  - test_firmware: fix a memory leak with reqs buffer (Mirsad Goran Todorovac)   
  - LTS tag: v5.4.247 (Sherry Yang)   
  - mtd: spinand: macronix: Add support for MX35LFxGE4AD (YouChing Lin)   
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu)   
  - btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik)   
  - rbd: get snapshot context after exclusive lock is ensured to be held (Ilya Dryomov)   
  - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers (Ville Syrjälä)   
  - ext4: only check dquot_initialize_needed() when debugging (Theodore Ts'o)   
  - eeprom: at24: also select REGMAP (Randy Dunlap)   
  - i2c: sprd: Delete i2c adapter in .remove's error path (Uwe Kleine-König)   
  - bonding (gcc13): synchronize bond_{a,t}lb_xmit() types (Jiri Slaby (SUSE))   
  - usb: usbfs: Use consistent mmap functions (Ruihan Li)   
  - usb: usbfs: Enforce page requirements for mmap (Ruihan Li)   
  - pinctrl: meson-axg: add missing GPIOA_18 gpio group (Martin Hundebøll)   
  - rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (Ilya Dryomov)   
  - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Luiz Augusto von Dentz)   
  - ceph: fix use-after-free bug for inodes when flushing capsnaps (Xiubo Li)   
  - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (Fedor Pchelkin)   
  - can: j1939: change j1939_netdev_lock type to mutex (Fedor Pchelkin)   
  - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (Oleksij Rempel)   
  - drm/amdgpu: fix xclk freq on CHIP_STONEY (Chia-I Wu)   
  - ALSA: hda/realtek: Add Lenovo P3 Tower platform (RenHai)   
  - ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 (Ai Chao)   
  - Input: psmouse - fix OOB access in Elantech protocol (Dmitry Torokhov)   
  - Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (Ismael Ferreras Morezuelas)   
  - batman-adv: Broken sync while rescheduling delayed work (Vladislav Efanov)   
  - bnxt_en: Query default VLAN before VNIC setup on a VF (Somnath Kotur)   
  - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (Hangyu Hua)   
  - net: sched: move rtm_tca_policy declaration to include file (Eric Dumazet)   
  - rfs: annotate lockless accesses to RFS sock flow table (Eric Dumazet)   
  - rfs: annotate lockless accesses to sk->sk_rxhash (Eric Dumazet)   
  - netfilter: ipset: Add schedule point in call_ad(). (Kuniyuki Iwashima)   
  - netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper (Tijs Van Buggenhout)   
  - Bluetooth: L2CAP: Add missing checks for invalid DCID (Sungwoo Kim)   
  - Bluetooth: Fix l2cap_disconnect_req deadlock (Ying Hsu)   
  - net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods (Alexander Sverdlin)   
  - neighbour: fix unaligned access to pneigh_entry (Qingfang DENG)   
  - neighbour: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)   
  - spi: qup: Request DMA before enabling clocks (Stephan Gerhold)   
  - i40e: fix build warnings in i40e_alloc.h (Greg Kroah-Hartman)   
  - i40iw: fix build warning in i40iw_manage_apbvt() (Greg Kroah-Hartman)   
  - block/blk-iocost (gcc13): keep large values in a new enum (Jiri Slaby (SUSE))   
  - blk-iocost: avoid 64-bit division in ioc_timer_fn (Arnd Bergmann)   
  - LTS tag: v5.4.246 (Sherry Yang)   
  - drm/edid: fix objtool warning in drm_cvt_modes() (Linus Torvalds)   
  - wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih)   
  - drm/edid: Fix uninitialized variable in drm_cvt_modes() (Lyude Paul)   
  - RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds (Selvin Xavier)   
  - scsi: dpt_i2o: Do not process completions with invalid addresses (Ben Hutchings)   
  - scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) (Ben Hutchings)   
  - regmap: Account for register length when chunking (Jim Wylder)   
  - test_firmware: fix the memory leak of the allocated firmware buffer (Mirsad Goran Todorovac)   
  - fbcon: Fix null-ptr-deref in soft_cursor (Helge Deller)   
  - ext4: add lockdep annotations for i_data_sem for ea_inode's (Theodore Ts'o)   
  - ext4: disallow ea_inodes with extended attributes (Theodore Ts'o)   
  - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (Theodore Ts'o)   
  - ext4: add EA_INODE checking to ext4_iget() (Theodore Ts'o)   
  - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (Pietro Borrello)   
  - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (Sherry Sun)   
  - mmc: vub300: fix invalid response handling (Deren Wu)   
  - wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski)   
  - lib/dynamic_debug.c: use address-of operator on section symbols (Nathan Chancellor)   
  - treewide: Remove uninitialized_var() usage (Kees Cook)   
  - kernel/extable.c: use address-of operator on section symbols (Nathan Chancellor)   
  - eth: sun: cassini: remove dead code (Martin Liška)   
  - gcc-12: disable '-Wdangling-pointer' warning for now (Linus Torvalds)   
  - ACPI: thermal: drop an always true check (Adam Borowski)   
  - x86/boot: Wrap literal addresses in absolute_pointer() (Kees Cook)   
  - flow_dissector: work around stack frame size warning (Arnd Bergmann)   
  - ata: libata-scsi: Use correct device no in ata_find_dev() (Damien Le Moal)   
  - scsi: stex: Fix gcc 13 warnings (Bart Van Assche)   
  - misc: fastrpc: reject new invocations during device removal (Richard Acayan)   
  - misc: fastrpc: return -EPIPE to invocations on device removal (Richard Acayan)   
  - usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal)   
  - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (Sebastian Krzyszkowiak)   
  - iio: dac: build ad5758 driver when AD5758 is selected (Lukas Bulwahn)   
  - iio: dac: mcp4725: Fix i2c_master_send() return value handling (Marek Vasut)   
  - iio: light: vcnl4035: fixed chip ID check (Frank Li)   
  - HID: wacom: avoid integer overflow in wacom_intuos_inout() (Nikita Zhandarovich)   
  - HID: google: add jewel USB id (Sung-Chi Li)   
  - iio: adc: mxs-lradc: fix the order of two cleanup operations (Jiakai Luo)   
  - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (Dan Carpenter)   
  - atm: hide unused procfs functions (Arnd Bergmann)   
  - ALSA: oss: avoid missing-prototype warnings (Arnd Bergmann)   
  - netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT (Tom Rix)   
  - wifi: b43: fix incorrect __packed annotation (Arnd Bergmann)   
  - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (Wenchao Hao)   
  - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (Min-Hua Chen)   
  - ARM: dts: stm32: add pin map for CAN controller on stm32f7 (Dario Binacchi)   
  - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Yun Lu)   
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim)   
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai)   
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim)   
  - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (Krzysztof Kozlowski)   
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim)   
  - media: dvb_ca_en50221: fix a size write bug (YongSu Yoo)   
  - media: netup_unidvb: fix irq init by register it at the end of probe (Wei Chen)   
  - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (Wei Chen)   
  - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (Wei Chen)   
  - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Zhang Shurong)   
  - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Wei Chen)   
  - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Wei Chen)   
  - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (Wei Chen)   
  - media: dvb_demux: fix a bug for the continuity counter (YongSu Yoo)   
  - ASoC: ssm2602: Add workaround for playback distortions (Paweł Anikiel)   
  - xfrm: Check if_id in inbound policy/secpath match (Benedict Wong)   
  - ASoC: dwc: limit the number of overrun messages (Maxim Kochetkov)   
  - nbd: Fix debugfs_create_dir error checking (Ivan Orlov)   
  - fbdev: stifb: Fix info entry in sti_struct on error path (Helge Deller)   
  - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Helge Deller)   
  - media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE (Niklas Söderlund)   
  - ARM: 9295/1: unwind:fix unwind abort for uleb128 case (Haibo Li)   
  - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (Lee Jones)   
  - watchdog: menz069_wdt: fix watchdog initialisation (Johannes Thumshirn)   
  - mtd: rawnand: marvell: don't set the NAND frequency select (Chris Packham)   
  - mtd: rawnand: marvell: ensure timing values are written (Chris Packham)   
  - net: dsa: mv88e6xxx: Increase wait after reset deactivation (Andreas Svensson)   
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua)   
  - udp6: Fix race condition in udp6_sendmsg & connect (Vladislav Efanov)   
  - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report (Pedro Tammela)   
  - ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use (Andy Shevchenko)   
  - net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao)   
  - net/sched: Prohibit regrafting ingress or clsact Qdiscs (Peilin Ye)   
  - net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs (Peilin Ye)   
  - net/sched: sch_clsact: Only create under TC_H_CLSACT (Peilin Ye)   
  - net/sched: sch_ingress: Only create under TC_H_INGRESS (Peilin Ye)   
  - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu)   
  - tcp: deny tcp_disconnect() when threads are waiting (Eric Dumazet)   
  - af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet)   
  - mtd: rawnand: ingenic: fix empty stub helper definitions (Arnd Bergmann)   
  - amd-xgbe: fix the false linkup in xgbe_phy_status (Raju Rangoju)   
  - af_packet: Fix data-races of pkt_sk(sk)->num. (Kuniyuki Iwashima)   
  - netrom: fix info-leak in nr_write_internal() (Eric Dumazet)   
  - net/mlx5: fw_tracer, Fix event handling (Shay Drory)   
  - dmaengine: pl330: rename _start to prevent build error (Randy Dunlap)   
  - iommu/rockchip: Fix unwind goto issue (Chao Wang)   
  - RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (Kalesh AP)   
  - RDMA/efa: Fix unsupported page sizes in device (Yonatan Nachum)


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.322.3.el8uek]
changelog:
  - btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain)  [Orabug: 35215318]  
  - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 35389985]  
  - xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 35389985]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.322.4.el8uek]
changelog:
  - tools/resolve_btfids: Use pkg-config to locate libelf (Shen Jiamin)  [Orabug: 35110384]  
  - tools resolve_btfids: Always force HOSTARCH (Jiri Olsa)  [Orabug: 35110384]  
  - bpf: Fix cross build for CONFIG_DEBUG_INFO_BTF option (Jiri Olsa)  [Orabug: 35110384]  
  - bpf: Add BPF_FUNC_jiffies64 (Martin KaFai Lau)  [Orabug: 35110384]  
  - selftests/bpf: Add Userspace tests for TCP_WINDOW_CLAMP (Prankur gupta)  [Orabug: 35110384]  
  - bpf: Support bitfield read access in btf_struct_access (Martin KaFai Lau)  [Orabug: 35110384]  
  - bpf: Enable bpf_skc_to_* sock casting helper to networking prog type (Martin KaFai Lau)  [Orabug: 35110384]  
  - bpf: Add bpf_skc_to_{tcp, tcp_timewait, tcp_request}_sock() helpers (Yonghong Song)  [Orabug: 35110384]  
  - bpf: Add bpf_skc_to_tcp6_sock() helper (Alan Maguire)  [Orabug: 35110384]  
  - bpf: Fix race in btf_resolve_helper_id() (Alexei Starovoitov)  [Orabug: 35110384]  
  - bpf: Add PTR_TO_BTF_ID_OR_NULL support (Alan Maguire)  [Orabug: 35110384]  
  - bpf: Compile resolve_btfids tool at kernel compilation start (Jiri Olsa)  [Orabug: 35110384]  
  - bpf: Resolve BTF IDs in vmlinux image (Jiri Olsa)  [Orabug: 35110384]  
  - bpf: Add resolve_btfids tool to resolve BTF IDs in ELF object (Jiri Olsa)  [Orabug: 35110384]  
  - bpf: Add BTF_ID_LIST/BTF_ID/BTF_ID_UNUSED macros (Jiri Olsa)  [Orabug: 35110384]  
  - bpf: Replace prog_raw_tp+btf_id with prog_tracing (Alexei Starovoitov)  [Orabug: 35110384]  
  - bpf: Fix bpf_attr.attach_btf_id check (Alexei Starovoitov)  [Orabug: 35110384]  
  - bpf: Prepare btf_ctx_access for non raw_tp use case (Martin KaFai Lau)  [Orabug: 35110384]  
  - bpf: Enforce 'return 0' in BTF-enabled raw_tp programs (Alexei Starovoitov)  [Orabug: 35110384]  
  - libbpf: Update BTF reloc support to latest Clang format (Andrii Nakryiko)  [Orabug: 35110384]  
  - bpf: Add array support to btf_struct_access (Martin KaFai Lau)  [Orabug: 35110384]  
  - bpf: Check types of arguments passed into helpers (Alexei Starovoitov)  [Orabug: 35110384]  
  - bpf: Add support for BTF pointers to x86 JIT (Alan Maguire)  [Orabug: 35110384]  
  - bpf: Add support for BTF pointers to interpreter (Alexei Starovoitov)  [Orabug: 35110384]  
  - bpf: Attach raw_tp program with BTF via type name (Alexei Starovoitov)  [Orabug: 35110384]  
  - bpf: Implement accurate raw_tp context access via BTF (Alexei Starovoitov)  [Orabug: 35110384]  
  - libbpf: Fix strncat bounds error in libbpf_prog_type_by_name (KP Singh)  [Orabug: 35110384]  
  - libbpf: Auto-detect btf_id of BTF-based raw_tracepoints (Alexei Starovoitov)  [Orabug: 35110384]  
  - bpf: Add attach_btf_id attribute to program load (Alexei Starovoitov)  [Orabug: 35110384]  
  - bpf: Process in-kernel BTF (Alexei Starovoitov)  [Orabug: 35110384]  
  - bpf: Add typecast to bpf helpers to help BTF generation (Alexei Starovoitov)  [Orabug: 35110384]  
  - bpf: Add typecast to raw_tracepoints to help BTF generation (Alexei Starovoitov)  [Orabug: 35110384]  
  - RDMA/restrack: Release MR restrack when delete (Mark Zhang)  [Orabug: 35256660]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.322.5.el8uek]
changelog:
  - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (Srinivas Pandruvada)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Update EPP for AlderLake mobile (Srinivas Pandruvada)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Fix active mode offline/online EPP handling (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable (Srinivas Pandruvada)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Fix unchecked MSR 0x773 access (Srinivas Pandruvada)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Process HWP Guaranteed change notification (Srinivas Pandruvada)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Override parameters if HWP forced by BIOS (Doug Smythies)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Use HWP if enabled by platform firmware (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Take CPUFREQ_GOV_STRICT_TARGET into account (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: Add strict_target to struct cpufreq_policy (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: Introduce CPUFREQ_GOV_STRICT_TARGET (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: Introduce governor flags (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Avoid missing HWP max updates in passive mode (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: Introduce CPUFREQ_NEED_UPDATE_LIMITS driver flag (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Add ->offline and ->online callbacks (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Tweak the EPP sysfs interface (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Update cached EPP in the active mode (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Implement passive mode with HWP enabled (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Rearrange the storing of new EPP values (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Avoid enabling HWP if EPP is not supported (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Clean up aperf_mperf_shift description (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Supply struct attribute description for get_aperf_mperf_shift() (Lee Jones)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Fix active mode setting from command line (Rafael J. Wysocki)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Fix static checker warning for epp variable (Srinivas Pandruvada)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Allow raw energy performance preference value (Srinivas Pandruvada)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Allow enable/disable energy efficiency (Srinivas Pandruvada)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Add one more OOB control bit (Srinivas Pandruvada)  [Orabug: 35524050]  
  - cpufreq: intel_pstate: Use passive mode by default without HWP (Rafael J. Wysocki)  [Orabug: 35524050]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.322.6.el8uek]
changelog:
  - uek-rpm: Add netfilter modules to nano rpm (Samasth Norway Ananda)  [Orabug: 35552175]  
  - scsi: target: iscsi: Fix hang in the iSCSI login code (Maurizio Lombardi)  [Orabug: 35484554]  
  - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi)  [Orabug: 35484554]  
  - scsi: target: iscsi: Fix login error when receiving (Hou Pu)  [Orabug: 35484554]  
  - uek-rpm: Prevent cls_tcindex module to be loaded on demand (Sherry Yang)  [Orabug: 35616810]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.322.6.1.el8uek]
changelog:
  - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD))  [Orabug: 35673692]  
  - x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD))  [Orabug: 35673692]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.322.6.2.el8uek]
changelog:
  - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35722367]  
  - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35724249]  
  - Revert "sched/fair: sanitize vruntime of entity being placed" (Saeed Mirzamohammadi)  [Orabug: 35724243]  
  - Revert "sched/fair: Sanitize vruntime of entity being migrated" (Saeed Mirzamohammadi)  [Orabug: 35724243]  
  - mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds)  [Orabug: 35724237]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.322.6.3.el8uek]
changelog:
  - xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35905429]  
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35905419]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.342.4.el8uek]
changelog:
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Høiland-Jørgensen)
  - udf: Fix use of check_add_overflow() with mixed type arguments (Ben Hutchings)
  - x86/xen: allow larger contiguous memory regions in PV guests (Juergen Gross)
  - xen: remove a confusing comment on auto-translated guest I/O (Petr Tesarik)
  - ALSA: hda/realtek: Fixup ALC225 depop procedure (Kailang Yang)
  - ALSA: hda/realtek - Add type for ALC287 (Kailang Yang)
  - net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel)
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang)
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao)
  - Revert "btrfs: avoid monopolizing a core when activating a swap file" (Koichiro Den)
  - gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). (Kuniyuki Iwashima)
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin)
  - rds: Make sure transmit path and connection tear-down does not run concurrently (Håkon Bugge)  [Orabug: 36308571]
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (Yanjun Zhang)  [Orabug: 37206487]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.342.5.el8uek]
changelog:
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)  [Orabug: 36835558]  {CVE-2024-39494}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.1.el8uek]
changelog:
  - rds: ib: Make traffic_class visible to user-space (Håkon Bugge)  [Orabug: 37617866]
  - rds: ib: Remove incorrect update of the path record sl and qos_class fields (Håkon Bugge)  [Orabug: 37617866]
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Felix Fietkau)  [Orabug: 36683418]  {CVE-2024-36929}
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Antoine Tenart)  [Orabug: 36643088]
  - udp: never accept GSO_FRAGLIST packets (Paolo Abeni)  [Orabug: 36643088]
  - udp: initialize is_flist with 0 in udp_gro_receive (Xin Long)  [Orabug: 36643088]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.2.el8uek]
changelog:
  - rds: ib: Do not attempt to insert RDMA exthdr twice (Håkon Bugge)  [Orabug: 37721764]
  - net: mana: Fix TX CQE error handling (Haiyang Zhang)  [Orabug: 36983924]  {CVE-2023-52532}
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh)  [Orabug: 36929747]
  - rds: ib: Fix racy send affinity work cancellation (Håkon Bugge)  [Orabug: 36605776]
  - uek-rpm: install the perf exec dir (Stephen Brennan)  [Orabug: 35023180]
  - uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda)  [Orabug: 37764002]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.343.3.el8uek]
changelog:
  - LTS tag: v5.4.291 (Sherry Yang)
  - eeprom: digsy_mtc: Make GPIO lookup table match the device (Andy Shevchenko)
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku)
  - intel_th: pci: Add Panther Lake-P/U support (Alexander Shishkin)
  - intel_th: pci: Add Panther Lake-H support (Alexander Shishkin)
  - intel_th: pci: Add Arrow Lake support (Pawel Chmielewski)
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher)
  - xhci: pci: Fix indentation in the PCI device ID definitions (Andy Shevchenko)
  - usb: gadget: Check bmAttributes only if configuration is valid (Prashanth K)
  - usb: gadget: Fix setting self-powered state on suspend (Marek Szyprowski)
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes (Prashanth K)
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality (AngeloGioacchino Del Regno)
  - usb: typec: ucsi: increase timeout for PPM reset operations (Fedor Pchelkin)
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich)
  - usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea)
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Miao Li)
  - usb: renesas_usbhs: Use devm_usb_get_phy() (Claudiu Beznea)
  - usb: renesas_usbhs: Call clk_put() (Claudiu Beznea)
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" (Christian Heusel)
  - gpio: rcar: Fix missing of_node_put() call (Fabrizio Castro)
  - net: ipv6: fix missing dst ref drop in ila lwtunnel (Justin Iurman)
  - net: ipv6: fix dst ref loop in ila lwtunnel (Justin Iurman)
  - net-timestamp: support TCP GSO case for a few missing flags (Jason Xing)
  - vlan: enforce underlying device type (Oscar Maes)
  - ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen)
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Nikolay Aleksandrov)
  - drm/sched: Fix preprocessor guard (Philipp Stanner)
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() (Xinghuo Chen)
  - llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet)
  - hwmon: (ad7314) Validate leading zero bits and return error (Erik Schumacher)
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table (Maud Spierings)
  - hwmon: (pmbus) Initialise page count in pmbus_identify() (Titus Rwantare)
  - caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov)
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart)
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu)
  - HID: google: fix unused variable warning under !CONFIG_ACPI (Yu-Chun Lin)
  - wifi: iwlwifi: limit printed string from FW file (Johannes Berg)
  - mm/page_alloc: fix uninitialized variable (Hao Zhang)
  - rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li)
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li)
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov)
  - wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich)
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (Ahmed S. Darwish)
  - x86/cpu: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e (Mingcong Bai)
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M (Richard Thier)
  - ALSA: hda/realtek: update ALC222 depop optimize (Kailang Yang)
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Hoku Ishibe)
  - HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov)
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" (Rob Herring (Arm))
  - drm/amdgpu: disable BAR resize on Dell G5 SE (Alex Deucher)
  - drm/amdgpu: Check extended configuration space register when system uses large bar (Ma Jun)
  - drm/amdgpu: skip BAR resizing if the bios already did it (Alex Deucher)
  - acct: perform last write from workqueue (Christian Brauner)
  - kernel/acct.c: use dedicated helper to access rlimit values (Yang Yang)
  - kernel/acct.c: use #elif instead of #end and #elif (Hui Su)
  - drop_monitor: fix incorrect initialization order (Gavrilov Ilia)
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le)
  - sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner)
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (Kaustabh Chakraborty)
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (BH Hsieh)
  - usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich)
  - perf/core: Fix low freq setting via IOC_PERIOD (Kan Liang)
  - ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov)
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems (Russell Senior)
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. (Harshal Chaudhari)
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet() (Philo Lu)
  - ASoC: es8328: fix route from DAC to output (Nicolas Frattaroli)
  - net: cadence: macb: Synchronize stats calculations (Sean Anderson)
  - sunrpc: suppress warnings for unused procfs functions (Arnd Bergmann)
  - batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann)
  - batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann)
  - acct: block access to kernel internal filesystems (Christian Brauner)
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (John Veness)
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li)
  - tee: optee: Fix supplicant wait loop (Sumit Garg)
  - power: supply: da9150-fg: fix potential overflow (Andrey Vatoropin)
  - flow_dissector: Fix port range key handling in BPF conversion (Cong Wang)
  - flow_dissector: Fix handling of mixed port and port-range keys (Cong Wang)
  - net: extract port range fields from fl_flow_key (Maksym Glubokiy)
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima)
  - geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima)
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Christophe Leroy)
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline (Christophe Leroy)
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h (Michael Ellerman)
  - USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue)
  - usb/gadget: f_midi: Replace tasklet with work (Davidlohr Bueso)
  - usb/gadget: f_midi: convert tasklets to use new tasklet_setup() API (Allen Pais)
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Selvarasu Ganesan)
  - usb: dwc3: Increase DWC3 controller halt timeout (Wesley Cheng)
  - memcg: fix soft lockup in the OOM process (Chen Ridong)
  - mm: update mark_victim tracepoints fields (Carlos Galo)
  - crypto: testmgr - some more fixes to RSA test vectors (Ignat Korchagin)
  - crypto: testmgr - populate RSA CRT parameters in RSA test vectors (Ignat Korchagin)
  - crypto: testmgr - fix version number of RSA tests (lei he)
  - crypto: testmgr - Fix wrong test case of RSA (Lei He)
  - crypto: testmgr - fix wrong key length for pkcs1pad (Lei He)
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu)
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li)
  - vlan: move dev_put into vlan_dev_uninit (Xin Long)
  - vlan: introduce vlan_dev_free_egress_priority (Xin Long)
  - pps: Fix a use-after-free (Calvin Owens)
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - x86/i8253: Disable PIT timer 0 when not in use (David Woodhouse)
  - parport_pc: add support for ASIX AX99100 (Jiaqing Zhao)
  - serial: 8250_pci: add support for ASIX AX99100 (Jiaqing Zhao)
  - can: ems_pci: move ASIX AX99100 ids to pci_ids.h (Jiaqing Zhao)
  - nilfs2: protect access to buffers with no active references (Ryusuke Konishi)
  - nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi)
  - nilfs2: do not output warnings when clearing dirty buffers (Ryusuke Konishi)
  - alpha: replace hardcoded stack offsets with autogenerated ones (Ivan Kokshaysky)
  - ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet)
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet)
  - arp: use RCU protection in arp_xmit() (Eric Dumazet)
  - neighbour: use RCU protection in __neigh_notify() (Eric Dumazet)
  - neighbour: delete redundant judgment statements (Li Zetao)
  - ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet)
  - ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet)
  - ipv4: use RCU protection in inet_select_addr() (Eric Dumazet)
  - ipv4: use RCU protection in rt_is_expired() (Eric Dumazet)
  - net: add dev_net_rcu() helper (Eric Dumazet)
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Jiri Pirko)
  - regmap-irq: Add missing kfree() (Jiasheng Jiang)
  - partitions: mac: fix handling of bogus partition table (Jann Horn)
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock (Wentao Liang)
  - alpha: align stack for page fault and user unaligned trap handlers (Ivan Kokshaysky)
  - serial: 8250: Fix fifo underflow on flush (John Keeping)
  - alpha: make stack 16-byte aligned (most cases) (Ivan Kokshaysky)
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero (Alexander Hölzl)
  - can: c_can: fix unbalanced runtime PM disable in error path (Krzysztof Kozlowski)
  - USB: serial: option: drop MeiG Smart defines (Johan Hovold)
  - USB: serial: option: fix Telit Cinterion FN990A name (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FN990B compositions (Fabio Porcedda)
  - USB: serial: option: add MeiG Smart SLM828 (Chester A. Unal)
  - usb: cdc-acm: Fix handling of oversized fragments (Jann Horn)
  - usb: cdc-acm: Check control transfer buffer size before access (Jann Horn)
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Marek Vasut)
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces (Alan Stern)
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping)
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Mathias Nyman)
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Lei Huang)
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Huacai Chen)
  - usb: dwc2: gadget: remove of_node reference upon udc_stop (Fabrice Gasnier)
  - usb: gadget: udc: renesas_usb3: Fix compiler warning (Guo Ren)
  - usb: roles: set switch registered flag early on (Elson Roy Serrao)
  - batman-adv: fix panic during interface removal (Andy Strohman)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Hans de Goede)
  - orangefs: fix a oob in orangefs_debug_write (Mike Marshall)
  - Grab mm lock before grabbing pt lock (Maksym Planeta)
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Ramesh Thomas)
  - media: cxd2841er: fix 64-bit division on gcc-9 (Arnd Bergmann)
  - gpio: bcm-kona: Add missing newline to dev_err format string (Artur Weber)
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ (Artur Weber)
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 (Artur Weber)
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec)
  - team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet)
  - vrf: use RCU protection in l3mdev_l3_out() (Eric Dumazet)
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet)
  - HID: multitouch: Add NULL check in mt_input_configured (Charles Han)
  - ocfs2: check dir i_size in ocfs2_find_entry (Su Yue)
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static (WangYuli)
  - ptp: Ensure info->enable callback is always set (Thomas Weißschuh)
  - net/ncsi: wait for the last response to Deselect Package before configuring channel (Paul Fertser)
  - misc: fastrpc: Fix registered buffer page address (Ekansh Gupta)
  - mtd: onenand: Fix uninitialized retlen in do_otp_read() (Ivan Stepchenko)
  - NFC: nci: Add bounds checking in nci_hci_create_pipe() (Dan Carpenter)
  - nilfs2: fix possible int overflows in nilfs_fiemap() (Nikita Zhandarovich)
  - ocfs2: handle a symlink read error correctly (Matthew Wilcox (Oracle))
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
  - nvmem: core: improve range check for nvmem_cell_write() (Jennifer Berringer)
  - crypto: qce - unregister previously registered algos in error path (Bartosz Golaszewski)
  - crypto: qce - fix goto jump in error path (Bartosz Golaszewski)
  - media: uvcvideo: Remove redundant NULL assignment (Ricardo Ribalda)
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Ricardo Ribalda)
  - media: ov5640: fix get_light_freq on auto (Sam Bobrowicz)
  - soc: qcom: smem_state: fix missing of_node_put in error path (Krzysztof Kozlowski)
  - kbuild: Move -Wenum-enum-conversion to W=2 (Nathan Chancellor)
  - powerpc/pseries/eeh: Fix get PE state translation (Narayana Murty N)
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Claudiu Beznea)
  - serial: sh-sci: Drop __initdata macro for port_cfg (Claudiu Beznea)
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (Stephan Gerhold)
  - usb: gadget: f_tcm: Don't prepare BOT write request twice (Thinh Nguyen)
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (Thinh Nguyen)
  - usb: gadget: f_tcm: Decrement command ref count on cleanup (Thinh Nguyen)
  - usb: gadget: f_tcm: Translate error to sense (Thinh Nguyen)
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer)
  - HID: hid-sensor-hub: don't use stale platform-data on remove (Heiko Stuebner)
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Zijun Hu)
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options (Zijun Hu)
  - of: Correct child specifier used as input of the 2nd nexus node (Zijun Hu)
  - perf bench: Fix undefined behavior in cmpworker() (Kuan-Wei Chiu)
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate (Anastasia Belova)
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration (Gabor Juhos)
  - drm/komeda: Add check for komeda_get_layer_fourcc_list() (Haoxiang Li)
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (David Hildenbrand)
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson)
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (Jakob Unterwurzacher)
  - binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter)
  - m68k: vga: Fix I/O defines (Thomas Zimmermann)
  - s390/futex: Fix FUTEX_OP_ANDN implementation (Heiko Carstens)
  - leds: lp8860: Write full EEPROM, not only half of it (Alexander Sverdlin)
  - cpufreq: s3c64xx: Fix compilation warning (Viresh Kumar)
  - tun: revert fix group permission check (Willem de Bruijn)
  - net: rose: lock the socket in rose_bind() (Eric Dumazet)
  - udp: gso: do not drop small packets when PMTU reduces (Yan Zhai)
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz)
  - gpu: drm_dp_cec: fix broken CEC adapter properties check (Hans Verkuil)
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry (Prasad Pandit)
  - nvme: handle connectivity loss in nvme_set_queue_count (Daniel Wagner)
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Michal Pecio)
  - usb: xhci: Add timeout argument in address_device USB HCD callback (Hardik Gajjar)
  - net: usb: rtl8150: enable basic endpoint checking (Nikita Zhandarovich)
  - net: usb: rtl8150: use new tasklet API (Emil Renner Berthing)
  - tasklet: Introduce new initialization API (Romain Perier)
  - kbuild: userprogs: use correct lld when linking through clang (Thomas Weißschuh)
  - media: uvcvideo: Remove dangling pointers (Ricardo Ribalda)
  - media: uvcvideo: Only save async fh if success (Ricardo Ribalda)
  - nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi)
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi)
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi)
  - spi-mxs: Fix chipselect glitch (Ralf Schlatterbeck)
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode (Xi Ruoyao)
  - APEI: GHES: Have GHES honor the panic= setting (Borislav Petkov)
  - HID: Wacom: Add PCI Wacom device support (Even Xu)
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id (Hans de Goede)
  - tomoyo: don't emit warning in tomoyo_write_control() (Tetsuo Handa)
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Dmitry Antipov)
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card (Shawn Lin)
  - tun: fix group permission check (Stas Sergeev)
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Kuan-Wei Chiu)
  - x86/amd_nb: Restrict init function to AMD-based systems (Yazen Ghannam)
  - sched: Don't try to catch up excess steal time. (Suleiman Souhlal)
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Josef Bacik)
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana)
  - btrfs: output the reason for open_ctree() failure (Qu Wenruo)
  - usb: gadget: f_tcm: Don't free command immediately (Thinh Nguyen)
  - media: uvcvideo: Fix double free in error path (Laurent Pinchart)
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (Alan Stern)
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (Jos Wang)
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection (Sean Rhodes)
  - ktest.pl: Check kernelrelease return in get_version (Ricardo B. Marliere)
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Chuck Lever)
  - hexagon: Fix unbalanced spinlock in die() (Lin Yujun)
  - hexagon: fix using plain integer as NULL pointer warning in cmpxchg (Willem de Bruijn)
  - genksyms: fix memory leak when the same symbol is read from *.symref file (Masahiro Yamada)
  - genksyms: fix memory leak when the same symbol is added from source (Masahiro Yamada)
  - net: sh_eth: Fix missing rtnl lock in suspend/resume path (Kory Maincent)
  - vsock: Allow retrying on connect() failure (Michal Luczaj)
  - perf trace: Fix runtime error of index out of bounds (Howard Chu)
  - net: davicom: fix UAF in dm9000_drv_remove (Chenyuan Yang)
  - net: rose: fix timer races against user threads (Eric Dumazet)
  - PM: hibernate: Add error handling for syscore_suspend() (Wentao Liang)
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Eric Dumazet)
  - net: fec: implement TSO descriptor cleanup (Dheeraj Reddy Jonnalagadda)
  - ubifs: skip dumping tnc tree when zroot is null (pangliyuan)
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (Oleksij Rempel)
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Joe Hattori)
  - module: Extend the preempt disabled section in dereference_symbol_descriptor(). (Sebastian Andrzej Siewior)
  - ocfs2: mark dquot as inactive if failed to start trans while releasing dquot (Su Yue)
  - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails (Guixin Liu)
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 (Paul Menzel)
  - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (Joe Hattori)
  - media: uvcvideo: Propagate buf->error to userspace (Ricardo Ribalda)
  - media: camif-core: Add check for clk_enable() (Jiasheng Jiang)
  - media: mipi-csis: Add check for clk_enable() (Jiasheng Jiang)
  - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (Zijun Hu)
  - media: lmedm04: Handle errors for lme2510_int_read (Chen Ni)
  - media: lmedm04: Use GFP_KERNEL for URB allocation/submission. (Malcolm Priestley)
  - media: rc: iguanair: handle timeouts (Oliver Neukum)
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (Joe Hattori)
  - ARM: dts: mediatek: mt7623: fix IR nodename (Rafał Miłecki)
  - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property (Chen-Yu Tsai)
  - rdma/cxgb4: Prevent potential integer overflow on 32bit (Dan Carpenter)
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array (Leon Romanovsky)
  - bpf: Send signals asynchronously if !preemptible (Puranjay Mohan)
  - perf report: Fix misleading help message about --demangle (Jiachen Zhang)
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Arnaldo Carvalho de Melo)
  - padata: fix sysfs store callback check (Thomas Weißschuh)
  - ktest.pl: Remove unused declarations in run_bisect_test function (Ba Jing)
  - perf header: Fix one memory leakage in process_bpf_prog_info() (Zhongqiu Han)
  - perf header: Fix one memory leakage in process_bpf_btf() (Zhongqiu Han)
  - ASoC: sun4i-spdif: Add clock multiplier settings (George Lander)
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande)
  - net: sched: Disallow replacing of child qdisc from one parent to another (Jamal Hadi Salim)
  - net/mlxfw: Drop hard coded max FW flash image size (Maher Sanalla)
  - net: let net.core.dev_weight always be non-zero (Liu Jian)
  - clk: analogbits: Fix incorrect calculation of vco rate delta (Bo Gan)
  - selftests: harness: fix printing of mismatch values in __EXPECT() (Dmitry V. Levin)
  - selftests/harness: Display signed values correctly (Kees Cook)
  - wifi: wlcore: fix unbalanced pm_runtime calls (Andreas Kemnade)
  - regulator: of: Implement the unwind path of of_regulator_match() (Joe Hattori)
  - team: prevent adding a device which is already a team device lower (Octavian Purdila)
  - cpupower: fix TSC MHz calculation (He Rongguang)
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: remove unused dualmac control leftovers (Dmitry Antipov)
  - wifi: rtlwifi: remove unused timer and related code (Dmitry Antipov)
  - rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel)
  - dt-bindings: mmc: controller: clarify the address-cells description (Neil Armstrong)
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (Thadeu Lima de Souza Cascardo)
  - rtlwifi: rtl8192se Rename RT_TRACE to rtl_dbg (Larry Finger)
  - wifi: rtlwifi: do not complete firmware loading needlessly (Thadeu Lima de Souza Cascardo)
  - ipmi: ipmb: Add check devm_kasprintf() returned value (Charles Han)
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko)
  - drm/etnaviv: Fix page property being used for non writecombine buffers (Sui Jingfeng)
  - partitions: ldm: remove the initial kernel-doc notation (Randy Dunlap)
  - nbd: don't allow reconnect after disconnect (Yu Kuai)
  - afs: Fix directory format encoding struct (David Howells)
  - overflow: Allow mixed type arguments (Kees Cook)
  - overflow: Correct check_shl_overflow() comment (Keith Busch)
  - overflow: Add __must_check attribute to check_*() helpers (Kees Cook)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.4.el8uek]
changelog:
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
  - Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy" (Magali Lemes)
  - jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
  - Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy" (Magali Lemes)
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
  - vlan: fix memory leak in vlan_newlink() (Eric Dumazet)
  - rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge)  [Orabug: 37747826]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.343.5.el8uek]
changelog:
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0))  [Orabug: 37846673]
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0))  [Orabug: 37846668]
  - uek-rpm: remove .el7 from shim version (Samasth Norway Ananda)  [Orabug: 37834734]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.5.2.el8uek]
changelog:
  - RDS: use get_user_pages_fast() in rdma_pin_pages() (Stephen Brennan)  [Orabug: 37990761]
  - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37990759]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.5.3.el8uek]
changelog:
  - shmem: add support to ignore swap (Luis Chamberlain)  [Orabug: 38130653]  
  - shmem: update documentation (Luis Chamberlain)  [Orabug: 38130653]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.1.el8uek]
changelog:
  - rds: ib: Make traffic_class visible to user-space (Håkon Bugge) [Orabug: 37617866]
  - rds: ib: Remove incorrect update of the path record sl and qos_class fields (Håkon Bugge) [Orabug: 37617866]
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Felix Fietkau) [Orabug: 36683418] {CVE-2024-36929}
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Antoine Tenart) [Orabug: 36643088] {CVE-2024-35884}
  - udp: never accept GSO_FRAGLIST packets (Paolo Abeni) [Orabug: 36643088] {CVE-2024-35884}
  - udp: initialize is_flist with 0 in udp_gro_receive (Xin Long) [Orabug: 36643088] {CVE-2024-35884}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.2.el8uek]
changelog:
  - rds: ib: Do not attempt to insert RDMA exthdr twice (Håkon Bugge) [Orabug: 37721764]
  - net: mana: Fix TX CQE error handling (Haiyang Zhang) [Orabug: 36983924] {CVE-2023-52532}
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh) [Orabug: 36929747]
  - rds: ib: Fix racy send affinity work cancellation (Håkon Bugge) [Orabug: 36605776]
  - uek-rpm: install the perf exec dir (Stephen Brennan) [Orabug: 35023180]
  - uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda) [Orabug: 37764002]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.343.3.el8uek]
changelog:
  - LTS tag: v5.4.291 (Sherry Yang)
  - eeprom: digsy_mtc: Make GPIO lookup table match the device (Andy Shevchenko)
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku) [Orabug: 37827905] {CVE-2025-21914}
  - intel_th: pci: Add Panther Lake-P/U support (Alexander Shishkin)
  - intel_th: pci: Add Panther Lake-H support (Alexander Shishkin)
  - intel_th: pci: Add Arrow Lake support (Pawel Chmielewski)
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [Orabug: 36597911] {CVE-2024-26982}
  - xhci: pci: Fix indentation in the PCI device ID definitions (Andy Shevchenko)
  - usb: gadget: Check bmAttributes only if configuration is valid (Prashanth K)
  - usb: gadget: Fix setting self-powered state on suspend (Marek Szyprowski)
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes (Prashanth K)
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality (AngeloGioacchino Del Regno)
  - usb: typec: ucsi: increase timeout for PPM reset operations (Fedor Pchelkin)
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich) [Orabug: 37828336] {CVE-2025-21916}
  - usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea) [Orabug: 37827913] {CVE-2025-21917}
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Miao Li)
  - usb: renesas_usbhs: Use devm_usb_get_phy() (Claudiu Beznea)
  - usb: renesas_usbhs: Call clk_put() (Claudiu Beznea)
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" (Christian Heusel)
  - gpio: rcar: Fix missing of_node_put() call (Fabrizio Castro)
  - net: ipv6: fix missing dst ref drop in ila lwtunnel (Justin Iurman)
  - net: ipv6: fix dst ref loop in ila lwtunnel (Justin Iurman)
  - net-timestamp: support TCP GSO case for a few missing flags (Jason Xing)
  - vlan: enforce underlying device type (Oscar Maes) [Orabug: 37827929] {CVE-2025-21920}
  - ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen) [Orabug: 37827937] {CVE-2025-21922}
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Nikolay Aleksandrov)
  - drm/sched: Fix preprocessor guard (Philipp Stanner)
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() (Xinghuo Chen)
  - llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet) [Orabug: 37827950] {CVE-2025-21925}
  - hwmon: (ad7314) Validate leading zero bits and return error (Erik Schumacher)
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table (Maud Spierings)
  - hwmon: (pmbus) Initialise page count in pmbus_identify() (Titus Rwantare)
  - caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov) [Orabug: 37827863] {CVE-2025-21904}
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [Orabug: 37827956] {CVE-2025-21926}
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu) [Orabug: 37827964] {CVE-2025-21928}
  - HID: google: fix unused variable warning under !CONFIG_ACPI (Yu-Chun Lin)
  - wifi: iwlwifi: limit printed string from FW file (Johannes Berg) [Orabug: 37827870] {CVE-2025-21905}
  - mm/page_alloc: fix uninitialized variable (Hao Zhang)
  - rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li) [Orabug: 37827984] {CVE-2025-21934}
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li) [Orabug: 37827989] {CVE-2025-21935}
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov) [Orabug: 37827880] {CVE-2025-21909}
  - wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich) [Orabug: 37827887] {CVE-2025-21910}
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (Ahmed S. Darwish)
  - x86/cpu: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e (Mingcong Bai)
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M (Richard Thier)
  - ALSA: hda/realtek: update ALC222 depop optimize (Kailang Yang)
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Hoku Ishibe)
  - HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov) [Orabug: 37828025] {CVE-2025-21948}
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" (Rob Herring)
  - drm/amdgpu: disable BAR resize on Dell G5 SE (Alex Deucher)
  - drm/amdgpu: Check extended configuration space register when system uses large bar (Ma Jun)
  - drm/amdgpu: skip BAR resizing if the bios already did it (Alex Deucher)
  - acct: perform last write from workqueue (Christian Brauner) [Orabug: 37702044] {CVE-2025-21846}
  - kernel/acct.c: use dedicated helper to access rlimit values (Yang Yang)
  - kernel/acct.c: use #elif instead of #end and #elif (Sh_Def)
  - drop_monitor: fix incorrect initialization order (Gavrilov Ilia) [Orabug: 37702107] {CVE-2025-21862}
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le) [Orabug: 37611837] {CVE-2025-21702}
  - sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner) [Orabug: 37766213] {CVE-2024-58090}
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (Kaustabh Chakraborty)
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (Bh Hsieh)
  - usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich) [Orabug: 37766256] {CVE-2025-21877}
  - perf/core: Fix low freq setting via IOC_PERIOD (Kan Liang)
  - ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov) [Orabug: 37827849] {CVE-2025-21898}
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems (Russell Senior)
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. (Harshal Chaudhari)
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet() (Philo Lu)
  - ASoC: es8328: fix route from DAC to output (Nicolas Frattaroli)
  - net: cadence: macb: Synchronize stats calculations (Sean Anderson)
  - sunrpc: suppress warnings for unused procfs functions (Arnd Bergmann)
  - batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann) [Orabug: 37650307] {CVE-2025-21823}
  - batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann)
  - acct: block access to kernel internal filesystems (Christian Brauner)
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (John Veness)
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li) [Orabug: 37702054] {CVE-2025-21848}
  - tee: optee: Fix supplicant wait loop (Sumit Garg) [Orabug: 37766233] {CVE-2025-21871}
  - power: supply: da9150-fg: fix potential overflow (Andrey Vatoropin)
  - flow_dissector: Fix port range key handling in BPF conversion (Cong Wang)
  - flow_dissector: Fix handling of mixed port and port-range keys (Cong Wang)
  - net: extract port range fields from fl_flow_key (Maksym Glubokiy)
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima)
  - geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima) [Orabug: 37702088] {CVE-2025-21858}
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Christophe Leroy) [Orabug: 37702123] {CVE-2025-21866}
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline (Christophe Leroy)
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h (Michael Ellerman)
  - USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue) [Orabug: 37702094] {CVE-2025-21859}
  - usb/gadget: f_midi: Replace tasklet with work (Davidlohr Bueso)
  - usb/gadget: f_midi: convert tasklets to use new tasklet_setup() API (Allen Pais)
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Selvarasu Ganesan)
  - usb: dwc3: Increase DWC3 controller halt timeout (Wesley Cheng)
  - memcg: fix soft lockup in the OOM process (Chen Ridong) [Orabug: 37649599] {CVE-2024-57977}
  - mm: update mark_victim tracepoints fields (Carlos Galo)
  - crypto: testmgr - some more fixes to RSA test vectors (Ignat Korchagin)
  - crypto: testmgr - populate RSA CRT parameters in RSA test vectors (Ignat Korchagin)
  - crypto: testmgr - fix version number of RSA tests (Lei He)
  - crypto: testmgr - Fix wrong test case of RSA (Lei He)
  - crypto: testmgr - fix wrong key length for pkcs1pad (Lei He)
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu) [Orabug: 37206511] {CVE-2024-50055}
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li)
  - vlan: move dev_put into vlan_dev_uninit (Xin Long)
  - vlan: introduce vlan_dev_free_egress_priority (Xin Long)
  - pps: Fix a use-after-free (Calvin Owens) [Orabug: 37649607] {CVE-2024-57979}
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - x86/i8253: Disable PIT timer 0 when not in use (David Woodhouse)
  - parport_pc: add support for ASIX AX99100 (Jiaqing Zhao)
  - serial: 8250_pci: add support for ASIX AX99100 (Jiaqing Zhao)
  - can: ems_pci: move ASIX AX99100 ids to pci_ids.h (Jiaqing Zhao)
  - nilfs2: protect access to buffers with no active references (Ryusuke Konishi) [Orabug: 37650248] {CVE-2025-21811}
  - nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi) [Orabug: 37649878] {CVE-2025-21722}
  - nilfs2: do not output warnings when clearing dirty buffers (Ryusuke Konishi)
  - alpha: replace hardcoded stack offsets with autogenerated ones (Ivan Kokshaysky)
  - ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet) [Orabug: 37650045] {CVE-2025-21760}
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet) [Orabug: 37650052] {CVE-2025-21761}
  - arp: use RCU protection in arp_xmit() (Eric Dumazet) [Orabug: 37650059] {CVE-2025-21762}
  - neighbour: use RCU protection in __neigh_notify() (Eric Dumazet) [Orabug: 37650066] {CVE-2025-21763}
  - neighbour: delete redundant judgment statements (Li Zetao)
  - ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet) [Orabug: 37650072] {CVE-2025-21764}
  - ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet) [Orabug: 37650078] {CVE-2025-21765}
  - ipv4: use RCU protection in inet_select_addr() (Eric Dumazet)
  - ipv4: use RCU protection in rt_is_expired() (Eric Dumazet)
  - net: add dev_net_rcu() helper (Eric Dumazet)
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Jiri Pirko)
  - regmap-irq: Add missing kfree() (Jiasheng Jiang)
  - partitions: mac: fix handling of bogus partition table (Jann Horn) [Orabug: 37650105] {CVE-2025-21772}
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock (Xu Wang)
  - alpha: align stack for page fault and user unaligned trap handlers (Ivan Kokshaysky)
  - serial: 8250: Fix fifo underflow on flush (John Keeping)
  - alpha: make stack 16-byte aligned (most cases) (Ivan Kokshaysky)
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero (Alexander Hölzl)
  - can: c_can: fix unbalanced runtime PM disable in error path (Krzysztof Kozlowski)
  - USB: serial: option: drop MeiG Smart defines (Johan Hovold)
  - USB: serial: option: fix Telit Cinterion FN990A name (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FN990B compositions (Fabio Porcedda)
  - USB: serial: option: add MeiG Smart SLM828 (Chester A. Unal)
  - usb: cdc-acm: Fix handling of oversized fragments (Jann Horn)
  - usb: cdc-acm: Check control transfer buffer size before access (Jann Horn) [Orabug: 37634049] {CVE-2025-21704}
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Marek Vasut)
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces (Alan Stern) [Orabug: 37650120] {CVE-2025-21776}
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping) [Orabug: 37685650] {CVE-2025-21835}
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Mathias Nyman)
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Huanglei)
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Huacai Chen)
  - usb: dwc2: gadget: remove of_node reference upon udc_stop (Fabrice Gasnier)
  - usb: gadget: udc: renesas_usb3: Fix compiler warning (Guo Ren)
  - usb: roles: set switch registered flag early on (Elson Roy Serrao)
  - batman-adv: fix panic during interface removal (Andy Strohman) [Orabug: 37650144] {CVE-2025-21781}
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Hans de Goede)
  - orangefs: fix a oob in orangefs_debug_write (Mike Marshall) [Orabug: 37650149] {CVE-2025-21782}
  - Grab mm lock before grabbing pt lock (Maksym Planeta)
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Ramesh Thomas)
  - media: cxd2841er: fix 64-bit division on gcc-9 (Arnd Bergmann)
  - gpio: bcm-kona: Add missing newline to dev_err format string (Artur Weber)
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ (Artur Weber)
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 (Artur Weber)
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec) [Orabug: 37650160] {CVE-2025-21785}
  - team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet) [Orabug: 37650167] {CVE-2025-21787}
  - vrf: use RCU protection in l3mdev_l3_out() (Eric Dumazet) [Orabug: 37650181] {CVE-2025-21791}
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet)
  - HID: multitouch: Add NULL check in mt_input_configured (Charles Han) [Orabug: 37649788] {CVE-2024-58020}
  - ocfs2: check dir i_size in ocfs2_find_entry (Su Yue)
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static (Yuli Wang)
  - ptp: Ensure info->enable callback is always set (Thomas Weißschuh) [Orabug: 37650263] {CVE-2025-21814}
  - net/ncsi: wait for the last response to Deselect Package before configuring channel (Paul Fertser)
  - misc: fastrpc: Fix registered buffer page address (Ekansh Gupta)
  - mtd: onenand: Fix uninitialized retlen in do_otp_read() (Ivan Stepchenko)
  - NFC: nci: Add bounds checking in nci_hci_create_pipe() (Dan Carpenter) [Orabug: 37649936] {CVE-2025-21735}
  - nilfs2: fix possible int overflows in nilfs_fiemap() (Nikita Zhandarovich) [Orabug: 37649942] {CVE-2025-21736}
  - ocfs2: handle a symlink read error correctly (Matthew Wilcox) [Orabug: 37649687] {CVE-2024-58001}
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [Orabug: 37592070] {CVE-2025-21687}
  - nvmem: core: improve range check for nvmem_cell_write() (Jennifer Berringer)
  - crypto: qce - unregister previously registered algos in error path (Bartosz Golaszewski)
  - crypto: qce - fix goto jump in error path (Bartosz Golaszewski)
  - media: uvcvideo: Remove redundant NULL assignment (Ricardo Ribalda)
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Ricardo Ribalda)
  - media: ov5640: fix get_light_freq on auto (Samuel Bobrowicz)
  - soc: qcom: smem_state: fix missing of_node_put in error path (Krzysztof Kozlowski)
  - kbuild: Move -Wenum-enum-conversion to W=2 (Nathan Chancellor)
  - powerpc/pseries/eeh: Fix get PE state translation (Narayana Murty N)
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Claudiu Beznea)
  - serial: sh-sci: Drop __initdata macro for port_cfg (Claudiu Beznea)
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (Stephan Gerhold) [Orabug: 37649715] {CVE-2024-58007}
  - usb: gadget: f_tcm: Don't prepare BOT write request twice (Thinh Nguyen)
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (Thinh Nguyen)
  - usb: gadget: f_tcm: Decrement command ref count on cleanup (Thinh Nguyen)
  - usb: gadget: f_tcm: Translate error to sense (Thinh Nguyen)
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer) [Orabug: 37649971] {CVE-2025-21744}
  - HID: hid-sensor-hub: don't use stale platform-data on remove (Heiko Stuebner)
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Zijun Hu)
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options (Zijun Hu)
  - of: Correct child specifier used as input of the 2nd nexus node (Zijun Hu)
  - perf bench: Fix undefined behavior in cmpworker() (Kuan-Wei Chiu)
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate (Anastasia Belova)
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration (Gabor Juhos)
  - drm/komeda: Add check for komeda_get_layer_fourcc_list() (Haoxiang Li)
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (David Hildenbrand)
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson) [Orabug: 37678567] {CVE-2024-58083}
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (Jakob Unterwurzacher)
  - binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter) [Orabug: 37649721] {CVE-2024-58010}
  - m68k: vga: Fix I/O defines (Thomas Zimmermann)
  - s390/futex: Fix FUTEX_OP_ANDN implementation (Heiko Carstens)
  - leds: lp8860: Write full EEPROM, not only half of it (Alexander Sverdlin)
  - cpufreq: s3c64xx: Fix compilation warning (Viresh Kumar)
  - tun: revert fix group permission check (Willem de Bruijn)
  - net: rose: lock the socket in rose_bind() (Eric Dumazet) [Orabug: 37649987] {CVE-2025-21749}
  - udp: gso: do not drop small packets when PMTU reduces (Yan Zhai)
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz)
  - gpu: drm_dp_cec: fix broken CEC adapter properties check (Hans Verkuil)
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry (Prasad Pandit)
  - nvme: handle connectivity loss in nvme_set_queue_count (Daniel Wagner)
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Michał Pecio) [Orabug: 37649622] {CVE-2024-57981}
  - usb: xhci: Add timeout argument in address_device USB HCD callback (Hardik Gajjar)
  - net: usb: rtl8150: enable basic endpoint checking (Nikita Zhandarovich) [Orabug: 37649812] {CVE-2025-21708}
  - net: usb: rtl8150: use new tasklet API (Emil Renner Berthing)
  - tasklet: Introduce new initialization API (Romain Perier)
  - kbuild: userprogs: use correct lld when linking through clang (Thomas Weißschuh)
  - media: uvcvideo: Remove dangling pointers (Ricardo Ribalda) [Orabug: 37649696] {CVE-2024-58002}
  - media: uvcvideo: Only save async fh if success (Ricardo Ribalda)
  - nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi) [Orabug: 37649870] {CVE-2025-21721}
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi)
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi)
  - spi-mxs: Fix chipselect glitch (Ralf Schlatterbeck)
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode (Xi Ruoyao)
  - APEI: GHES: Have GHES honor the panic= setting (Borislav Petkov)
  - HID: Wacom: Add PCI Wacom device support (Even Xu)
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id (Hans de Goede)
  - tomoyo: don't emit warning in tomoyo_write_control() (Tetsuo Handa)
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Dmitry Antipov) [Orabug: 37649750] {CVE-2024-58014}
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card (Shawn Lin)
  - tun: fix group permission check (Stas Sergeev)
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Kuan-Wei Chiu) [Orabug: 37649768] {CVE-2024-58017}
  - x86/amd_nb: Restrict init function to AMD-based systems (Yazen Ghannam)
  - sched: Don't try to catch up excess steal time. (Suleiman Souhlal)
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Josef Bacik)
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana) [Orabug: 37650014] {CVE-2025-21753}
  - btrfs: output the reason for open_ctree() failure (Qu Wenruo)
  - usb: gadget: f_tcm: Don't free command immediately (Thinh Nguyen) [Orabug: 37678479] {CVE-2024-58055}
  - media: uvcvideo: Fix double free in error path (Laurent Pinchart) [Orabug: 37649615] {CVE-2024-57980}
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (Alan Stern) [Orabug: 37649644] {CVE-2024-57986}
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (Jos Wang)
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection (Sean Rhodes)
  - ktest.pl: Check kernelrelease return in get_version (Ricardo B. Marliere)
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Chuck Lever)
  - hexagon: Fix unbalanced spinlock in die() (Lin Yujun)
  - hexagon: fix using plain integer as NULL pointer warning in cmpxchg (Willem de Bruijn)
  - genksyms: fix memory leak when the same symbol is read from *.symref file (Masahiro Yamada)
  - genksyms: fix memory leak when the same symbol is added from source (Masahiro Yamada)
  - net: sh_eth: Fix missing rtnl lock in suspend/resume path (Kory Maincent)
  - vsock: Allow retrying on connect() failure (Michal Luczaj)
  - perf trace: Fix runtime error of index out of bounds (Howard Chu)
  - net: davicom: fix UAF in dm9000_drv_remove (Chenyuan Yang) [Orabug: 37649846] {CVE-2025-21715}
  - net: rose: fix timer races against user threads (Eric Dumazet) [Orabug: 37649856] {CVE-2025-21718}
  - PM: hibernate: Add error handling for syscore_suspend() (Xu Wang)
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Eric Dumazet) [Orabug: 37649862] {CVE-2025-21719}
  - net: fec: implement TSO descriptor cleanup (Dheeraj Reddy Jonnalagadda)
  - ubifs: skip dumping tnc tree when zroot is null (Pangliyuan) [Orabug: 37678491] {CVE-2024-58058}
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (Oleksij Rempel) [Orabug: 37678517] {CVE-2024-58069}
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Joe Hattori)
  - module: Extend the preempt disabled section in dereference_symbol_descriptor(). (Sebastian Andrzej Siewior)
  - ocfs2: mark dquot as inactive if failed to start trans while releasing dquot (Su Yue)
  - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails (Guixin Liu)
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 (Paul Menzel)
  - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (Joe Hattori)
  - media: uvcvideo: Propagate buf->error to userspace (Ricardo Ribalda)
  - media: camif-core: Add check for clk_enable() (Jiasheng Jiang)
  - media: mipi-csis: Add check for clk_enable() (Jiasheng Jiang)
  - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (Zijun Hu)
  - media: lmedm04: Handle errors for lme2510_int_read (Chen Ni)
  - media: lmedm04: Use GFP_KERNEL for URB allocation/submission. (Malcolm Priestley)
  - media: rc: iguanair: handle timeouts (Oliver Neukum)
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (Joe Hattori)
  - ARM: dts: mediatek: mt7623: fix IR nodename (Rafał Miłecki)
  - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property (Chen-Yu Tsai)
  - rdma/cxgb4: Prevent potential integer overflow on 32bit (Dan Carpenter) [Orabug: 37649564] {CVE-2024-57973}
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array (Leon Romanovsky)
  - bpf: Send signals asynchronously if !preemptible (Puranjay Mohan) [Orabug: 37649909] {CVE-2025-21728}
  - perf report: Fix misleading help message about --demangle (Jiachen Zhang)
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Arnaldo Carvalho de Melo)
  - padata: fix sysfs store callback check (Thomas Weißschuh)
  - ktest.pl: Remove unused declarations in run_bisect_test function (Ba Jing)
  - perf header: Fix one memory leakage in process_bpf_prog_info() (Zhongqiu Han)
  - perf header: Fix one memory leakage in process_bpf_btf() (Zhongqiu Han)
  - ASoC: sun4i-spdif: Add clock multiplier settings (George Lander)
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande)
  - net: sched: Disallow replacing of child qdisc from one parent to another (Jamal Hadi Salim) [Orabug: 37592533] {CVE-2025-21700}
  - net/mlxfw: Drop hard coded max FW flash image size (Maher Sanalla)
  - net: let net.core.dev_weight always be non-zero (Liu Jian) [Orabug: 37650232] {CVE-2025-21806}
  - clk: analogbits: Fix incorrect calculation of vco rate delta (Bo Gan)
  - selftests: harness: fix printing of mismatch values in __EXPECT() (Dmitry V. Levin)
  - selftests/harness: Display signed values correctly (Kees Cook)
  - wifi: wlcore: fix unbalanced pm_runtime calls (Andreas Kemnade)
  - regulator: of: Implement the unwind path of of_regulator_match() (Joe Hattori)
  - team: prevent adding a device which is already a team device lower (Octavian Purdila) [Orabug: 37678523] {CVE-2024-58071}
  - cpupower: fix TSC MHz calculation (He Rongguang)
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Thadeu Lima de Souza Cascardo) [Orabug: 37678504] {CVE-2024-58063}
  - wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo) [Orabug: 37678530] {CVE-2024-58072}
  - wifi: rtlwifi: remove unused dualmac control leftovers (Dmitry Antipov)
  - wifi: rtlwifi: remove unused timer and related code (Dmitry Antipov)
  - rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel)
  - dt-bindings: mmc: controller: clarify the address-cells description (Neil Armstrong)
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (Thadeu Lima de Souza Cascardo)
  - rtlwifi: rtl8192se Rename RT_TRACE to rtl_dbg (Larry Finger)
  - wifi: rtlwifi: do not complete firmware loading needlessly (Thadeu Lima de Souza Cascardo)
  - ipmi: ipmb: Add check devm_kasprintf() returned value (Charles Han) [Orabug: 37678457] {CVE-2024-58051}
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko) [Orabug: 37678463] {CVE-2024-58052}
  - drm/etnaviv: Fix page property being used for non writecombine buffers (Sui Jingfeng)
  - partitions: ldm: remove the initial kernel-doc notation (Randy Dunlap)
  - nbd: don't allow reconnect after disconnect (Yu Kuai) [Orabug: 37649918] {CVE-2025-21731}
  - afs: Fix directory format encoding struct (David Howells)
  - overflow: Allow mixed type arguments (Kees Cook)
  - overflow: Correct check_shl_overflow() comment (Keith Busch)
  - overflow: Add __must_check attribute to check_*() helpers (Kees Cook)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.4.el8uek]
changelog:
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
  - Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy" (Magali Lemes)
  - jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz) [Orabug: 37855411] {CVE-2025-39735}
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
  - Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy" (Magali Lemes)
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
  - vlan: fix memory leak in vlan_newlink() (Eric Dumazet)
  - rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge) [Orabug: 37747826]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.343.5.el8uek]
changelog:
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497283,37846673] {CVE-2025-21638}
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497303,37846668] {CVE-2025-21640}
  - uek-rpm: remove .el7 from shim version (Samasth Norway Ananda) [Orabug: 37834734]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.344.1.el8uek]
changelog:
  - RDS: avoid using offlined CPU during reconnect (Arumugam Kolappan) [Orabug: 37800559]
  - x86/microcode/AMD: Clean the cache if update did not load microcode (Boris Ostrovsky) [Orabug: 37800729]
  - x86/microcode/AMD: Add finalize_late_load() microcode_op (Boris Ostrovsky) [Orabug: 37800729]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov) [Orabug: 37800729]
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Borislav Petkov) [Orabug: 37800729]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Borislav Petkov) [Orabug: 37800729]
  - x86/microcode/AMD: Flush patch buffer mapping after application (Borislav Petkov) [Orabug: 37800729]
  - x86/microcode/AMD: Stash BSP's CPUID(1).EAX and patch size (Boris Ostrovsky) [Orabug: 37800729]
  - nvme: fix deadlock between reset and scan (Bitao Hu) [Orabug: 37861518]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.344.2.el8uek]
changelog:
  - LTS tag: v5.4.292 (Alok Tiwari)
  - jfs: add index corruption check to DT_GETPAGE() (Roman Smirnov)
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu) [Orabug: 37844202] {CVE-2025-22035}
  - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability (Karel Balej)
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Paul Menzel)
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Jann Horn) [Orabug: 37844275] {CVE-2025-22045}
  - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume (Guilherme G. Piccoli)
  - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() (Markus Elfring)
  - can: flexcan: only change CAN state when link up in system PM (Haibo Chen)
  - arcnet: Add NULL check in com20020pci_probe() (Henry Martin) [Orabug: 37844303] {CVE-2025-22054}
  - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy (David Oberhollenzer)
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (Fernando Fernandez Mancera)
  - vsock: avoid timeout during connect() if the socket is closing (Stefano Garzarella)
  - net_sched: skbprio: Remove overly strict queue assertions (Cong Wang) [Orabug: 37855375] {CVE-2025-38637}
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu) [Orabug: 37844344] {CVE-2025-22063}
  - ntb: intel: Fix using link status DB's (Nikita Shubin)
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng)
  - spufs: fix a leak in spufs_create_context() (Al Viro) [Orabug: 37844365] {CVE-2025-22071}
  - spufs: fix a leak on spufs_new_file() failure (Al Viro) [Orabug: 37844378] {CVE-2025-22073}
  - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} (Tasos Sahanidis)
  - can: statistics: use atomic access in hot path (Oliver Hartkopp)
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long)
  - sched/deadline: Use online cpus for validating runtime (Shrikanth Hegde)
  - affs: don't write overlarge OFS data block size fields (Simon Tatham)
  - affs: generate OFS sequence numbers starting at 1 (Simon Tatham)
  - wifi: iwlwifi: fw: allocate chained SG tables for dump (Johannes Berg)
  - sched/smt: Always inline sched_smt_active() (Josh Poimboeuf)
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64 (Geetha Sowjanya)
  - ring-buffer: Fix bytes_dropped calculation issue (Feng Yang)
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf) [Orabug: 37976879] {CVE-2025-37937}
  - fs/procfs: fix the comment above proc_pid_wchan() (Bart Van Assche)
  - perf python: Check if there is space to copy all the event (Arnaldo Carvalho de Melo)
  - perf python: Decrement the refcount of just created event on failure (Arnaldo Carvalho de Melo)
  - perf python: Fixup description of sample.id event member (Arnaldo Carvalho de Melo)
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev) [Orabug: 37844394] {CVE-2025-22079}
  - kexec: initialize ELF lowest address to ULONG_MAX (Sourabh Jain)
  - perf units: Fix insufficient array space (Arnaldo Carvalho de Melo)
  - iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio (Jonathan Cameron)
  - coresight: catu: Fix number of pages while using 64k pages (Ilkka Koskinen)
  - isofs: fix KMSAN uninit-value bug in do_isofs_readdir() (Qasim Ijaz)
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment (Jann Horn)
  - mfd: sm501: Switch to BIT() to mitigate integer overflows (Nikita Zhandarovich)
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad) [Orabug: 37844422] {CVE-2025-22086}
  - power: supply: max77693: Fix wrong conversion of charge input threshold value (Artur Weber)
  - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 (Jann Horn)
  - clk: amlogic: g12a: fix mmc A peripheral clock (Jerome Brunet)
  - clk: amlogic: gxbb: drop non existing 32k clock parent (Jerome Brunet)
  - clk: amlogic: g12b: fix cluster A parent data (Jerome Brunet)
  - IB/mad: Check available slots before posting receive WRs (Maher Sanalla)
  - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent (Peter Geis)
  - pinctrl: renesas: rza2: Fix missing of_node_put() call (Fabrizio Castro)
  - lib: 842: Improve error handling in sw842_compress() (Tanya Agarwal)
  - clk: amlogic: gxbb: drop incorrect flag on 32k clock (Jerome Brunet)
  - fbdev: sm501fb: Add some geometry checks. (Danila Chernetsov)
  - mdacon: rework dependency list (Arnd Bergmann)
  - fbdev: au1100fb: Move a variable assignment behind a null pointer check (Markus Elfring)
  - PCI: pciehp: Don't enable HPIE when resuming in poll mode (Ilpo Järvinen)
  - PCI: Remove stray put_device() in pci_register_host_bridge() (Dan Carpenter)
  - PCI/portdrv: Only disable pciehp interrupts early when needed (Feng Tang)
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden) [Orabug: 37844108] {CVE-2024-58093}
  - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member (AngeloGioacchino Del Regno)
  - ALSA: hda/realtek: Always honor no_shutup_pins (Takashi Iwai)
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Tao Chen)
  - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() (Sebastian Andrzej Siewior)
  - PM: sleep: Fix handling devices with direct_complete set on errors (Rafael J. Wysocki)
  - thermal: int340x: Add NULL check for adev (Chenyuan Yang) [Orabug: 37844584] {CVE-2025-23136}
  - EDAC/ie31200: Fix the error path order of ie31200_init() (Qiuxu Zhuo)
  - EDAC/ie31200: Fix the DIMM size mask for several SoCs (Qiuxu Zhuo)
  - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer (Qiuxu Zhuo)
  - selinux: Chain up tool resolving errors in install_policy.sh (Tim Schumacher)
  - x86/platform: Only allow CONFIG_EISA for 32-bit (Arnd Bergmann)
  - x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() (Benjamin Berg)
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Jie Zhan)
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Mike Rapoport)
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Luo Qiu) [Orabug: 37844141] {CVE-2025-22020}
  - net: usb: qmi_wwan: add Telit Cinterion FE990B composition (Fabio Porcedda)
  - net: usb: qmi_wwan: add Telit Cinterion FN990B composition (Fabio Porcedda)
  - tty: serial: 8250: Add some more device IDs (Cameron Williams)
  - counter: stm32-lptimer-cnt: fix error handling when enabling (Fabrice Gasnier)
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy) [Orabug: 37844145] {CVE-2025-22021}
  - ARM: Remove address checking for MMUless devices (Yanjun Yang)
  - ARM: 9351/1: fault: Add "cut here" line for prefetch aborts (Kees Cook)
  - ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed() (Kees Cook)
  - atm: Fix NULL pointer dereference (Minjoong Kim) [Orabug: 37838897] {CVE-2025-22018}
  - HID: hid-plantronics: Add mic mute mapping and generalize quirks (Terry Junge)
  - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Terry Junge)
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich) [Orabug: 37828196] {CVE-2025-21996}
  - batman-adv: Ignore own maximum aggregation size during RX (Sven Eckelmann)
  - ARM: shmobile: smp: Enforce shmobile_smp_* alignment (Geert Uytterhoeven)
  - mmc: atmel-mci: Add missing clk_disable_unprepare() (Gu Bowen)
  - drm/v3d: Don't run jobs that have errors flagged in its fence (Maíra Canal)
  - i2c: omap: fix IRQ storms (Andreas Kemnade)
  - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES (Lin Ma)
  - net: atm: fix use after free in lec_send() (Dan Carpenter) [Orabug: 37828221] {CVE-2025-22004}
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Kuniyuki Iwashima)
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima) [Orabug: 37828229] {CVE-2025-22005}
  - Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter) [Orabug: 37828235] {CVE-2025-22007}
  - RDMA/hns: Fix wrong value of max_sge_rd (Junxian Huang)
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Saravanan Vajravel)
  - xfrm_output: Force software GSO only in tunnel mode (Cosmin Ratiu)
  - firmware: imx-scu: fix OF node leak in .probe() (Joe Hattori)
  - i2c: sis630: Fix an error handling path in sis630_probe() (Christophe Jaillet)
  - i2c: ali15x3: Fix an error handling path in ali15x3_probe() (Christophe Jaillet)
  - i2c: ali1535: Fix an error handling path in ali1535_probe() (Christophe Jaillet)
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Christophe Jaillet)
  - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() (Ivan Abramov)
  - qlcnic: fix memory leak issues in qlcnic_sriov_common.c (Haoxiang Li)
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Alex Hung) [Orabug: 37828049] {CVE-2025-21956}
  - drm/atomic: Filter out redundant DPMS calls (Ville Syrjälä)
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (Florent Revest) [Orabug: 37828167] {CVE-2025-21991}
  - USB: serial: option: match on interface class for Telit FN990B (Johan Hovold)
  - USB: serial: option: fix Telit Cinterion FE990A name (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FE990B compositions (Fabio Porcedda)
  - USB: serial: ftdi_sio: add support for Altera USB Blaster 3 (Boon Khai Ng)
  - block: fix 'kmem_cache of name 'bio-108' already exists' (Ming Lei)
  - drm/nouveau: Do not override forced connector status (Thomas Zimmermann)
  - x86/irq: Define trace events conditionally (Arnd Bergmann)
  - fuse: don't truncate cached, mutated symlink (Miklos Szeredi)
  - nvme: only allow entering LIVE from CONNECTING state (Daniel Wagner)
  - sctp: Fix undefined behavior in left shift operation (Yu-Chun Lin)
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Ruozhu Li)
  - ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime() (Kuninori Morimoto)
  - s390/cio: Fix CHPID "configure" attribute caching (Peter Oberparleiter)
  - HID: ignore non-functional sensor in HP 5MP Camera (Chia-Lin Kao) [Orabug: 37828174] {CVE-2025-21992}
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell (Zhang Lixu)
  - ACPI: resource: IRQ override for Eluktronics MECH-17 (Gannon Kolding)
  - scsi: qla1280: Fix kernel oops when debug level > 2 (Magnus Lindholm) [Orabug: 37828056] {CVE-2025-21957}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Chengen Du) [Orabug: 37828181] {CVE-2025-21993}
  - powercap: call put_device() on an error path in powercap_register_control_type() (Joe Hattori)
  - hrtimers: Mark is_migration_base() with __always_inline (Andy Shevchenko)
  - nvme-fc: go straight to connecting state when initializing (Daniel Wagner)
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Carolina Jubran)
  - netfilter: nft_exthdr: fix offset with ipv4_find_option() (Alexey Kashavkin)
  - net_sched: Prevent creation of classes with TC_H_ROOT (Cong Wang) [Orabug: 37828110] {CVE-2025-21971}
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl() (Dan Carpenter)
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Kohei Enju) [Orabug: 37828064] {CVE-2025-21959}
  - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() (Michael Kelley)
  - drivers/hv: Replace binary semaphore with mutex (Davidlohr Bueso)
  - netpoll: hold rcu read lock in __netpoll_send_skb() (Breno Leitao)
  - netpoll: netpoll_send_skb() returns transmit status (Eric Dumazet)
  - netpoll: move netpoll_send_skb() out of line (Eric Dumazet)
  - netpoll: remove dev argument from netpoll_send_skb_on_dev() (Eric Dumazet)
  - netpoll: Fix use correct return type for ndo_start_xmit() (Yunjian Wang)
  - pinctrl: bcm281xx: Fix incorrect regmap max_registers value (Artur Weber)
  - sched/isolation: Prevent boot crash when the boot CPU is nohz_full (Oleg Nesterov)
  - clockevents/drivers/i8253: Fix stop sequence for timer 0 (David Woodhouse)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.344.3.el8uek]
changelog:
  - net/mlx5e: Don't call cleanup on profile rollback failure (Cosmin Ratiu) [Orabug: 37670859]
  - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (Elena Salomatkina) [Orabug: 37206299,37670859] {CVE-2024-50000}
  - net/mlx5: Fix error path in multi-packet WQE transmit (Gerd Bayer) [Orabug: 37206302,37670859] {CVE-2024-50001}
  - net/mlx5: Discard command completions in internal error (Akiva Goldberger) [Orabug: 36753438,37670859] {CVE-2024-38555}
  - net/mlx5e: fix a potential double-free in fs_any_create_groups (Dinghao Liu) [Orabug: 36802351,37670859] {CVE-2023-52667}
  - net/mlx5: Reclaim max 50K pages at once (Anand Khoje) [Orabug: 36275016]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.344.4.3.el8uek]
changelog:
  - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini)  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky)  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 38129010]  
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.342.5.el8uek]
changelog:
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 36835558] {CVE-2024-39494}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.345.1.el8uek]
changelog:
  - RDS: use get_user_pages_fast() in rdma_pin_pages() (Stephen Brennan)  [Orabug: 37973441]  
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 37959151]  
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956} 
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956} 
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956} 
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956} 
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956} 
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.345.1.el8uek]
changelog:
  - RDS: use get_user_pages_fast() in rdma_pin_pages() (Stephen Brennan)  [Orabug: 37973441]
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 37959151]
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37863727]  {CVE-2024-28956}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.345.2.el8uek]
changelog:
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta)  [Orabug: 37959995]  
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon)  [Orabug: 37959995]  
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon)  [Orabug: 37959995]  
  - certs: Reference revocation list for all keyrings (Eric Snowberg)  [Orabug: 38026794]


author: Jerome Marchand <jmarchan@redhat.com> - 0.9-2
changelog:
  - Fixes gethostlatency
  - Fixes a struct definition issue that made several tools fail
  - Add CI gating


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-3
changelog:
  - Fix ENOMEM issue on arm64 machine with many cpus
  - Fix statsnoop and opensnoop on aarch64
  - Drop tcpdrop on ppc64


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0
  - Rebuild for LLVM15
  - Download the cereal library (not packaged into RHEL8)


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.6-20
changelog:
  - Fixed installation of multiple drivers and text tables in Dracut module
    if environment variables are used


author: Artem Egorenkov <aegorenk@redhat.com> - 5.6-30
changelog:
  - brltty requires brlapi deleted (duplication of automatically determined dependency)
  - isa macro deleted for brlapi requires brltty
  - brlapi recommends brltty
    Resolves: rhbz#1765611


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.1-1
changelog:
  - the latest release, per release notes:
    https://groups.google.com/forum/#!topic/libarchive-discuss/jfc7lBfrvVg


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Anand Jain <anand.jain@oracle.com> - 5.15.1-1.el8
changelog:
  - Release: 5.15.1-1: Fix for missing by-uuid link after mkfs (Anand Jain)  
  - btrfs-progs: fix stray fd close in open_ctree_fs_info() (Qu Wenruo)  [Orabug: 36214038] 
  - btrfs-progs: rename struct open_ctree_flags to open_ctree_args (Anand Jain)  [Orabug: 36214038] 
  - btrfs-progs: mkfs: keep file descriptors open during whole time (Qu Wenruo)  [Orabug: 36214038] 
  - btrfs-progs: mkfs: run device preparation in parallel (Li Zhang)  [Orabug: 36214038]


author: Anand Jain <anand.jain@oralce.com> 5.15.1-2
changelog:
  - Fix for btrfs-convert csum error after ext4 convert [Orabug: 37353780]
  - Fix for btrfs-convert uninitialized ext4 extent [Orabug: 36581591]


author: Colin Walters <walters@verbum.org> - 0.1.7-1
changelog:
  - New upstream version;
    https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.7
  - Resolves: #1411814


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-7
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819393


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-9
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/6a746dc)
  - fixes CVE-2021-3602
  - Related: #1977942


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-10
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.11-rhel
    (https://github.com/containers/buildah/commit/9a4764a)
  - fixes CVE-2022-27649
  - Resolves: #2067545


author: EL Errata <el-errata_ww@oracle.com> - 1.11.6-10.0.1
changelog:
  - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov)
  - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483]


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-2
changelog:
  - fix chroot: unmount with MNT_DETACH instead of UnmountMountpoints()
  - bug reference 1772179
  - Related: RHELPLAN-25138


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-5
changelog:
  - fix "Podman support for FIPS Mode requires a bind mount inside the container"
  - Resolves: #1804188


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1817742


author: David Sloboda <david.x.sloboda@oracle.com> - 1.11.6-8.0.1
changelog:
  - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483]
  - Fixes troubles with oracle registry login [Orabug: 29937283]


author: Jindrich Novy <jnovy@redhat.com> - 1.14.7-1
changelog:
  - initial rhel8-8.2.1 build
  - update to https://github.com/containers/buildah/releases/tag/v1.14.7
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 1.11.6-8
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819810


author: Jindrich Novy <jnovy@redhat.com> - 1.15.0-2
changelog:
  - fix "CVE-2020-14040 buildah: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854717


author: Jindrich Novy <jnovy@redhat.com> - 1.15.1-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.16.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/9e02bf9)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.16.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/56ed75b)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.16.7-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.16
    (https://github.com/containers/buildah/commit/aaed66b)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a96b716)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/76beccc)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/1fb260f)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/db783f4)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/9dd415b)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/e5384ed)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/dcd385e)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7aedb16)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/a2854ed)
  - Resolves: #1935376


author: Jindrich Novy <jnovy@redhat.com> - 1.19.5-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/016b90d)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/22fc573)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.20.2-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/master
    (https://github.com/containers/buildah/commit/135d63d)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 1.19.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/17521db)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/c1d6200)
  - fixes CVE-2021-3602
  - Related: #1977943


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/ff5434f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Resolves: #2067540


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/3808e27)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/7c6701d)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/d69ac6e)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.19.9-6
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.19
    (https://github.com/containers/buildah/commit/6d7f496)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.21.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/42dbc97)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/f517d85)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/56ff12f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/71b8003)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/98960f2)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.22.3-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.22
    (https://github.com/containers/buildah/commit/4d20222)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1.23.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/87a0565)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.1-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/867c1bc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/83a66a7)
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/7b559a3)
  - Related: #2059296


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-5
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/9c456a3)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/d29224c)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/c1bdaba)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/63813ef)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.4-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/e99286b)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/83c5f26)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/8cc4586)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.5-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/0ee422c)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/efed577)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/4198a78)
  - Related: #2123641


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/1320eb7)
  - Related: #2129766


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.6-6
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179943
  - Resolves: #2187341
  - Resolves: #2187359
  - Resolves: #2203677
  - Resolves: #2207505


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f07d2c9)
  - Resolves: #2166195


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f01e5f9)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1:1.30.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175070
  - Resolves: #2179948
  - Resolves: #2187317
  - Resolves: #2187364
  - Resolves: #2203680
  - Resolves: #2207510


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b95e962)
  - Resolves: RHEL-28224


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/997beea)
  - Resolves: RHEL-28725


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.8-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b65a814)
  - Resolves: RHEL-40850


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.10-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/bd85c17)
  - Resolves: RHEL-61835


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.11-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/fe85f0d)
  - Resolves: RHEL-61853


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/58af1cd)
  - Resolves: RHEL-67612


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.12-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/cf49e7c)
  - fixes "CVE-2025-22871 container-tools:rhel8/buildah: Request smuggling due to acceptance of invalid chunked data in net/http [rhel-8.10.z]"
  - Resolves: RHEL-89239


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: Jira:RHEL-2110


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Bump to v1.3
  - Vendor in lates containers/image
  - build-using-dockerfile: let -t include transports again
  - Block use of /proc/acpi and /proc/keys from inside containers
  - Fix handling of --registries-conf
  - Fix becoming a maintainer link
  - add optional CI test fo darwin
  - Don't pass a nil error to errors.Wrapf()
  - image filter test: use kubernetes/pause as a "since"
  - Add --cidfile option to from
  - vendor: update containers/storage
  - Contributors need to find the CONTRIBUTOR.md file easier
  - Add a --loglevel option to build-with-dockerfile
  - Create Development plan
  - cmd: Code improvement
  - allow buildah cross compile for a darwin target
  - Add unused function param lint check
  - docs: Follow man-pages(7) suggestions for SYNOPSIS
  - Start using github.com/seccomp/containers-golang
  - umount: add all option to umount all mounted containers
  - runConfigureNetwork(): remove an unused parameter
  - Update github.com/opencontainers/selinux
  - Fix buildah bud --layers
  - Force ownership of /etc/hosts and /etc/resolv.conf to 0:0
  - main: if unprivileged, reexec in a user namespace
  - Vendor in latest imagebuilder
  - Reduce the complexity of the buildah.Run function
  - mount: output it before replacing lastError
  - Vendor in latest selinux-go code
  - Implement basic recognition of the "--isolation" option
  - Run(): try to resolve non-absolute paths using $PATH
  - Run(): don't include any default environment variables
  - build without seccomp
  - vendor in latest runtime-tools
  - bind/mount_unsupported.go: remove import errors
  - Update github.com/opencontainers/runc
  - Add Capabilities lists to BuilderInfo
  - Tweaks for commit tests
  - commit: recognize committing to second storage locations
  - Fix ARGS parsing for run commands
  - Add info on registries.conf to from manpage
  - Switch from using docker to podman for testing in .papr
  - buildah: set the HTTP User-Agent
  - ONBUILD tutorial
  - Add information about the configuration files to the install docs
  - Makefile: add uninstall
  - Add tilde info for push to troubleshooting
  - mount: support multiple inputs
  - Use the right formatting when adding entries to /etc/hosts
  - Vendor in latest go-selinux bindings
  - Allow --userns-uid-map/--userns-gid-map to be global options
  - bind: factor out UnmountMountpoints
  - Run(): simplify runCopyStdio()
  - Run(): handle POLLNVAL results
  - Run(): tweak terminal mode handling
  - Run(): rename 'copyStdio' to 'copyPipes'
  - Run(): don't set a Pdeathsig for the runtime
  - Run(): add options for adding and removing capabilities
  - Run(): don't use a callback when a slice will do
  - setupSeccomp(): refactor
  - Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers
  - Escape use of '_' in .md docs
  - Break out getProcIDMappings()
  - Break out SetupIntermediateMountNamespace()
  - Add Multi From Demo
  - Use the c/image conversion code instead of converting configs manually
  - Don't throw away the manifest MIME type and guess again
  - Consolidate loading manifest and config in initConfig
  - Pass a types.Image to Builder.initConfig
  - Require an image ID in importBuilderDataFromImage
  - Use c/image/manifest.GuessMIMEType instead of a custom heuristic
  - Do not ignore any parsing errors in initConfig
  - Explicitly handle "from scratch" images in Builder.initConfig
  - Fix parsing of OCI images
  - Simplify dead but dangerous-looking error handling
  - Don't ignore v2s1 history if docker_version is not set
  - Add --rm and --force-rm to buildah bud
  - Add --all,-a flag to buildah images
  - Separate stdio buffering from writing
  - Remove tty check from images --format
  - Add environment variable BUILDAH_RUNTIME
  - Add --layers and --no-cache to buildah bud
  - Touch up images man
  - version.md: fix DESCRIPTION
  - tests: add containers test
  - tests: add images test
  - images: fix usage
  - fix make clean error
  - Change 'registries' to 'container registries' in man
  - add commit test
  - Add(): learn to record hashes of what we add
  - Minor update to buildah config documentation for entrypoint
  - Bump to v1.2-dev
  - Add registries.conf link to a few man pages


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1819431


author: Jindrich Novy <jnovy@redhat.com> - 1.5-4.gite94b4f9
changelog:
  - fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
  - Resolves: #1818127


author: Jakub Martisko <jamartis@redhat.com> - 1.0.6-28
changelog:
  - The previous fix caused some regressions
  - Use an updated patch that deals with the original issue+the regressions
  Resolves: RHEL-71140


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-7
changelog:
  - Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-6.1
changelog:
  - Resolves: rhbz#2209516 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.8.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-9
changelog:
  - Resolves: rhbz#2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] [rhel-8.9.0.z]


author: David Howells <dhowells@redhat.com> 0.10.6-1
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Permit culling to be disabled on the command line with the -N flag.
  - Suspend culling when cache space is short and cache objects are pinned.


author: David Howells <dhowells@redhat.com> 0.10.8-1
changelog:
  - Use systemd interaction macros in specfile installation sections [RH BZ 850053].
  - Fix the service file to use /usr/sbin/ rather than /sbin/.
  - Turn on RELRO and PIE build hardening in RPM builds.


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: Josh Stone <jistone@redhat.com> - 1.40.0-1
changelog:
  - Update to 1.40.0.
  - Fix compiletest with newer (local-rebuild) libtest
  - Build compiletest with in-tree libtest
  - Fix ARM EHABI unwinding


author: Josh Stone <jistone@redhat.com> - 1.51.0-1
changelog:
  - Update to 1.51.0. Update to 1.51.0. Includes security fixes for
    CVE-2021-28875 and CVE-2021-28877.


author: Josh Stone <jistone@redhat.com> - 1.52.1-1
changelog:
  - Update to 1.52.1. Includes security fixes for CVE-2020-36323,
    CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162.


author: Josh Stone <jistone@redhat.com> - 1.71.0-2
changelog:
  - Relax the suspicious_double_ref_op lint (rhbz2225471)
  - Enable the profiler runtime for native hosts (rhbz2213875)


author: Till Maas <opensource@till.name> - 10.2-19
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Robert Scheck <robert@fedoraproject.org> 1.4.4-1
changelog:
  - Update to upstream 1.4.4 (#1352496)
  - Reworked spec file to build libburn1 for RHEL >= 6 (#750009)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-8
changelog:
  - Move systemd tmpfiles from /var/run to /run (#1804928)
  - Improve logging in the SCEP helper (#1807691)
  - Fix sort order of certificates passed into PKCS7_verify (#1808052)
  - Add -N option to SCEP helper to separate web server chain from
    SCEP issuer chain (#1808613)
  - Add template profile, MS v2 template and issuer to getcert list
    output (#1734451)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-9
changelog:
  - Call the secport equivalent of PR_ErrorToString
  - Remove a couple of unused varaibles found by coverity


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-15
changelog:
  - Replace the previous fix for dbus restarting with PartOf in the
    certmonger systemd service file to link the two (#1687698)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-4
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1577570)
  - Certmonger segfault after cert renewal request (#1881500)
  - Include certificate NotBefore date in output of the 'getcert list' command
    (#1940261)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001079)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-5
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012258)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.17-1
changelog:
  - Update to upstream 0.79.17 (#2139523)
  - Certificate format validation when adding the SCEP server's CA (#2150025)
  - Certmonger SCEP renewal should not use old challenges (#2150030)
  - certmonger SEGV during rekey in FIPS mode (#2150070)


author: Rob Crittenden <rcritten@redhat.com> 0.79.5-3
changelog:
  - Remove BR on mktemp. It is now provided by coreutils.
  - Patch to fix NSS handling of keys in sqlite databases
  - Patches to fix tests now that sqlite is the NSS default.


author: Rob Crittenden <rcritten@redhat.com> - 0.79.6-4
changelog:
  - Improve handling of NSS tokens (#1624930)
  - Pull in upstream fixes discovered in coverity and clang (#1632449)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-4
changelog:
  - Optimize closing of file descriptors on fork (#1763745)
  - Remove NOMODDB flag flag from context init, look for full tokens (#1746543)
  - Retrieve full IPA CA chain (#1710632)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.62-1
changelog:
  - use systemctl preset, not systemctl enable
  - fix typo in manpage
  - partly support socket activated services


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.8-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config
  - chkconfig: use isXinetdEnabled instead of isOn
  - leveldb: trim leading whitespaces from systemctl
  - leveldb: suppress error messages when selinux is turned off
  - alternatives: always recreate symlinks when the alternative is updated
  - test-alternatives: basic tests for slave links
  - chkconfig: resetpriorities should work on all runlevels


author: Lukas Nykryn <lnykryn@redhat.com> - 1.11-1
changelog:
  - Add tests for --add/remove-slave and use beakerlib
  - alternatives: add-slave and remove-slave
  - leveldb: don't crash on long names
  - alternatives: prettier --list output


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.19.2-1
changelog:
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - spec: Replace not working awk command with sed (#63)


author: EL Errata <el-errata_ww@oracle.com> - 1.19.2-1.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 35475734]
  - Remove upstream references [OLDIS-4405]


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-2
changelog:
  - fix chronyc getting stuck in infinite loop after clock step
  - don't allow packaging without vendor zone
  - suggest ntp-refclock
  - remove obsolete dependency
  - update description


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
changelog:
  - move pidfile to /var/run/chrony to allow chronyd to remove it on exit
    (#1584585)
  - avoid blocking in getrandom system call (#1592425)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
changelog:
  - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
    (#1614800)
  - add workaround for late reload of unit file (#1614751)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
changelog:
  - update to 3.5 (#1685469 #1677218)
  - fix shellcheck warnings in helper scripts (#1711948)
  - update ntp2chrony script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.1-1
changelog:
  - update to 4.1 (#1895003 #1847853 #1929157)
  - add NetworkManager dispatcher script to add servers from DHCP even without
    dhclient (#1933139)
  - restrict permissions of /var/lib/chrony and /var/log/chrony (#1939295)
  - reset chrony-helper state after stopping chronyd (#1971697)
  - add gcc-c++ and make to build requirements
  - move default paths in /var/run to /run


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2062356)
  - fix chrony-helper to delete sources by their original name (#2061660)
  - update ntp2chrony script (#2018045 #2063766)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-2.el8_10
changelog:
  - fix crash on reload command during start (RHEL-59112)
  - enable AES-CMAC support using gnutls (RHEL-59032)


author: EL Errata <el-errata_ww@oracle.com> - 4.5-2.0.1
changelog:
  - Fixed chrony starting before network-online service [Orabug: 36299189]
  - Change chrony.conf to use pool.ntp.org [Orabug: 28627760]


author: David King <amigadave@amigadave.com> - 0.16-1
changelog:
  - Update to 0.16 (#1144863)
  - Remove clean section and BuildRoot tag
  - Update URL and Sourc0
  - Use license macro for COPYING
  - Use parallel make flags
  - Preserve timestamps during install


author: Jeff Layton <jlayton@redhat.com> - 6.7-5
changelog:
  - more updates, switch to rst for manpages
  - update mount.cifs manpage to describe defaults better (BZ#1474539)


author: Sachin Prabhu <sprabhu@redhat.com> - 6.8-3
changelog:
  - Add manual gating tests
  - docs: cleanup rst formating
  - mount.cifs.rst: document new (no)handlecache mount option
  - manpage: update mount.cifs manpage with info about rdma option
  - checkopts: add python script to cross check mount options
  - mount.cifs.rst: document missing options, correct wrong ones
  - checkopts: report duplicated options in man page
  - mount.cifs.rst: more cleanups
  - mount.cifs.rst: document vers=3 mount option
  - mount.cifs.rst: document vers=3.02 mount option
  - cifs: Allow DNS resolver key to expire
  - mount.cifs: be more verbose and helpful regarding mount errors
  - Update mount.cifs with vers=default mount option and SMBv3.0.2
  - mount.cifs.rst: update vers=3.1.1 option description
  - getcifsacl: Do not go to parse_sec_desc if getxattr fails.
  - getcifsacl: Improve help usage and add -h option.
  - setcifsacl: fix adding ACE when owner sid in unexpected location
  - cifs.upcall: fix a compiler warning
  - mount.cifs Add various missing parms from the help text
  - mount.cifs: add more options to help message
  - mount.cifs: detect GMT format of snapshot version
  - Update man page for mount.cifs to add new options
  - mount.cifs.rst: mention kernel version for snapshots
  - Fix authors and maintainers


author: <thalman@redhat.com> - 0.6.1-4
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: <david.x.sloboda@oracle.com> - 10.0.1-1.0.1
changelog:
  - Modified clang-oracle-distros.patch
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>
  - Use all available cores for build
  - Recognize Oracle Linux distros [OraBug: 29422714]


author: <david.kubat@oracle.com> - 11.0.0-1.0.1
changelog:
  - Recognize Oracle Linux distros [OraBug: 29422714]
    Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>
  - Use all available CPU cores for build


author: Tomas Orsava <torsava@redhat.com> - 6.0.1-6
changelog:
  - Change Requires from python3 to platform-python
  - The python3 package was renamed to platform-python
  - Related: rhbz#1619153


author: EL Errata <el-errata_ww@oracle.com> - 7.0.1-1.0.1
changelog:
  - Recognize Oracle Linux distros.
  - Orabug 29422714.
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 8.0.1-1.0.1
changelog:
  - Recognize Oracle Linux distros.
  - Orabug 29422714.
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>
  - Use all available cores for build
  - Recognize Oracle Linux distros [OraBug: 29422714]


author: Lukas Lemes <lukas.lemes@oracle.com> - 9.0.1-2.0.1
changelog:
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>
  - Use all available cores for build
  - Recognize Oracle Linux distros [OraBug: 29422714]


author: Daniel Kopecek <dkopecek@redhat.com> - 11-2
changelog:
  - Check that key derivation key is available
  - Delete remaining references to the removed http pin
  - Install cryptsetup and tpm2_pcrlist in the initramfs
  - Add device TCTI library to the initramfs
    Resolves: rhbz#1648004
    Resolves: rhbz#1650246


author: Sergio Correia <scorreia@redhat.com> - 13-1
changelog:
  - Update to new upstream release, v13
    Resolves: rhbz#1827225
    Resolves: rhbz#1827665
    Resolves: rhbz#1801556
    Resolves: rhbz#1784448
    Resolves: rhbz#1826917
    Resolves: rhbz#1812014


author: Sergio Correia <scorreia@redhat.com> - 15-1
changelog:
  - Update to latest upstream release, v15
    Resolves: rhbz#1887836
    Resolves: rhbz#1853651
    Resolves: rhbz#1874460


author: Patsy Franklin <pfrankli@redhat.com> - 3.11.0-2
changelog:
  - Choose correct version of python to use.  Require the correct
    sphinx build depending on which python we choose. (#1583117)


author: Marian Csontos <mcsontos@redhat.com> - 2.02.181-1
changelog:
  - Reject conversions on raid1 LVs with split tracked SubLVs.
  - Reject conversions on raid1 split tracked SubLVs.
  - Fix dmstats list failing when no regions exist.
  - Reject conversions of LVs under snapshot.
  - Limit suggested options on incorrect option for lvconvert subcommand.
  - Add vdo plugin for monitoring VDO devices.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.00-0.2
changelog:
  - New upstream release.
  - Deduplication and compression - support for VDO volumes.
  - Dropped lvmetad, clvmd and liblvm2app.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-1
changelog:
  - Fix libdevmapper-event linking issue.
  - Fix missing proper initialization of pv_list struct when adding pv.
  - Fix (de)activation of RaidLVs with visible SubLVs.
  - Prohibit mirrored 'mirror' log via lvcreate and lvconvert.
  - Use sync io if async io_setup fails, or use_aio=0 is set in config.
  - Fix more issues reported by coverity scan.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-3
changelog:
  - Fix handling of exported VGs lvmdbusd.
  - Restore missing man info lvcreate --zero for thin-pools.
  - Drop misleadning comment for metadata minimum_io_size for VDO segment.
  - Ensure migration_threshold for cache is at least 8 chunks.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-4
changelog:
  - Introduce LVM_SUPPRESS_SYSLOG to suppress syslog usage by generator.
  - Fix generator querying config options missing from lvm.conf.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-6
changelog:
  * Thu Feb 07 2019 Marian Csontos <mcsontos@redhat.com> - 2.03.02-5
  - Improve -lXXX%VG modifier which improves cache segment estimation.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.05-2
changelog:
  - Fix scanning of PVs with size not matching device.
  - Allow --stripe/--stripesize in mirror conversions.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.05-3
changelog:
  - Remove unsupported OPTIONS+="event_timeout" udev rule from 11-dm-lvm.rules.
  - Prevent creating VGs with PVs with different logical block sizes.
  - Fix metadata writes from corrupting with large physical block size.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.07-1
changelog:
  - Ensure minimum required region size on striped RaidLV creation.
  - Fix resize of thin-pool with data and metadata of different segtype.
  - Improve mirror type leg splitting.
  - Fix activation order when removing merged snapshot.
  - Experimental VDO support for lvmdbusd.
  - Correctly set read_ahead for LVs when pvmove is finished.
  - Add support for DM_DEVICE_GET_TARGET_VERSION into device_mapper.
  - Activate thin-pool layered volume as 'read-only' device.
  - Ignore crypto devices with UUID signature CRYPT-SUBDEV.
  - Synchronize with udev when dropping snapshot.
  - Add missing device synchronization point before removing pvmove node.
  - See WHATS_NEW for more.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.08-1
changelog:
  - VDO and writecache volume improvements.
  - Prohibit reshaping of stacked raid LVs to prevent corruption.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.09-1
changelog:
  - Fix support for lvconvert --repair of pools used by third party applications.
  - Fix formating of vdopool (vdo_slab_size_mb was smaller by 2 bits).
  - Fix busy loop in dmeventd.
  - Fix lvmlocks.service using incorrect option.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-1
changelog:
  - Fix pvck handling MDA at offset different from 4096.
  - Partial or degraded activation of writecache is not allowed.
  - Enhance error handling in fsadm and handle correct fsck result.
  - Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
  - Support using BLKZEROOUT for clearing devices.
  - Fixed interrup handling.
  - Fix block cache when device has too many failing writes.
  - Fix block cache waiting for IO completion with failing disks.
  - Add configure --enable-editline support as an alternative to readline.
  - Enhance reporting and error handling when creating thin volumes.
  - Enable vgsplit for VDO volumes.
  - Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
  - Restore lost signal blocking while VG lock is held.
  - Improve estimation of needed extents when creating thin-pool.
  - Use extra 1% when resizing thin-pool metadata LV with --use-policy.
  - Enhance --use-policy percentage rounding.
  - Allow pvmove of writecache origin.
  - Report integrity fields.
  - Integrity volumes defaults to journal mode.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-2
changelog:
  - Fix problem with wiping of converted LVs.
  - Fix memleak in scanning.
  - Fix corner case allocation for thin-pools.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-3
changelog:
  - Fix mpath filtering of NVMe devices.
  - Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
  - Limit pool metadata spare to 16GiB.
  - Improves conversion and allocation of pool metadata.
  - Fix different limits used for metadata by lvm2 and thin-tools.
  - Fix interrupting lvconvert --splitcache command with striped origin volumes.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.12-3
changelog:
  - Allow extending thin-pool data with writecache on top.
  - Fix removing thin-pool data converted to writeache.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.12-4
changelog:
  - Fix conversion of writecache LVs to thin pool data volume.
  - Add deviceidtype option for lvmdevices.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.12-6
changelog:
  - Fix handling of pmspare by vgsplit, vgmerge and vgremove.
  - Fix detection of active components of external origin volume.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-7
changelog:
  - Fix lvm crash when recreating PV with UUID of a missing PV.
  - Fix lvconvert --type vdo-pool with --test should not write signature.
  - Use correect profile in lvmdbusd preventing messages in JSON output.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-8
changelog:
  - Fix [vdo_]use_compression options.
  - Fix vgimportdevices operating on incomplete VGs fails when nothing to import.
  - Fix message processing on thin-pool extension leaving devices behind.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-14
changelog:
  - Fix multisegment RAID1 allocator using one disk for both legs.
  - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync.
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: EL Errata <el-errata_ww@oracle.com> - 2.03.14-15.0.1
changelog:
  - Fixed deletion issue for symlink when device is opened [Orabug: 36228608]
  - Prevent duplicate uuid device to replace existing one in udev [Orabug: 35987487]
  - Prevent duplicate label to replace existing one in udev [Orabug: 34898273]


author: Andreas Schneider <asn@redhat.com> - 1.0.1-1
changelog:
  - Update to version 1.0.1:
    * Added a macro for assert_ptr_equal().
    * Fixed test_realloc() if 0 size is passed.
    * Fixed objects packaging bug.
    * Fixed building with newer gcc versions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
      * Added support to catch multiple exceptions
      * Added support to verify call ordering
      * Added support to pass initial data to test cases
      * Added will_return_maybe() for ignoring mock returns
      * Added subtests for groups using TAP output
      * Added support to write multiple XML files for groups
      * Improved documentation
      * Fixed XML output generataion
      * Fixed Windows builds with VS2015


author: marius Vollmer <mvollmer@redhat.com> - 174-1
changelog:
  - Kubernetes: VM detail page
  - Realmd: Install on demand
  - firewalld service is now being dropped by upstream
  - iscsi works fully now


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Fix building with platform-python rhbz#1631174
  - Machines: Fix system VMs with non-root users rhbz#1632772
  - Machines: Offer cockpit-machines as Application


author: Martin Pitt <mpitt@redhat.com> - 181-1
changelog:
  - Fix key typing in file auto complete widget rhbz#1637866
  - Use libvirt-dbus by default rhbz#1637803


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Machines: Manage storage pools
  - Machines: libvirt connection choice during VM creation
  - PackageKit page: Display registration status clearly
  - Drop .map files from -tests, should be only in debuginfo package rhbz#1648953


author: Martin Pitt <mpitt@redhat.com> - 184-1
changelog:
  - Machines: Fix Dialog and tab layouts rhbz#1658490, rhbz#1657119
  - Machines: Fix information popup in vCPU dialog rhbz#1657133
  - Machines: Enforce https:// URLs for remote VM image locations rhbz#1644267
  - Storage: Filesystem labels are validated upfront rhbz#1655580
  - Storage: Some mount options are prefilled when needed
  - Storage: Fix empty tooltips rhbz#1655922


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Machines: Remove useless notifications from disk tab rhbz#1632800
  - Machines: Add deletion and deactivation of storage pools/volumes
    rhbz#1658847, rhbz#1668882, rhbz#1668877
  - Machines: Fix preparation of disk data for disks of type volume rhbz#1661897
  - Machines: Add disk format field when creating new disk xml rhbz#1662213
  - Machines: Fix storage pool state after destroy/undefine rhbz#1663793
  - Machines: Add import of existing images rhbz#1666825
  - Machines: Enable/disable VM autostart rhbz#1670491


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - Storage: Fix pre-filling of vdo fstab options rhbz#1672935
  - Machines: Add PXE boot rhbz#1680973
  - Machines: Add pause/resume rhbz#1680401
  - Machines: Configure boot device order rhbz#1672760
  - Machines: Import existing qcow2 image rhbz#1666825
  - Machines: Edit virtual memory rhbz#1676557
  - Machines: Deletion of storage volumes rhbz#1668882


author: Martin Pitt <mpitt@redhat.com> - 193-1
changelog:
  - Machines: iSCSI direct storage pools
  - Machines: Auto-detect guest operating system rhbz#1652959
  - Machines: Support https://*.iso installation source rhbz#1684422
  - Machines: Fix crash on VM creation with Edge browser rhbz#1692707
  - Storage: The "Format" button is no longer hidden
  - Storage: Improve performance with many block devices


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Machines: Support ISO source from http:// rhbz#1644267
  - Machines: Select destination storage pool on creation rhbz#1658852
  - Machines: Hide iscsi-direct type from create new pool dialog when not
    available rhbz#1709708
  - Machines: Fix handling of storage pools that failed to get active
    rhbz#1715388
  - Machines: Fix OS detection while changing installation source rhbz#1715409


author: Martin Pitt <mpitt@redhat.com> - 197-1
changelog:
  - Machines: Support all storage pool types for new disks
  - Machines: Show available space on host at VM creation
  - Machines: Fix regression on network tab rhbz#1720267


author: Martin Pitt <mpitt@redhat.com> - 197.1-1
changelog:
  - Machines: Fix crash on deleting VM in the middle of the installation (rhbz#1715399)
  - Machines: Properly refresh storage pools (rhbz#1680293)
  - Machines: Fix pool types which don't support volume creation (rhbz#1731849)
  - Machines: Disable PXE booting on session connection (rhbz#1731803)


author: Martin Pitt <mpitt@redhat.com> - 197.2-1
changelog:
  - Machines: Stop bringing libvirt package as a dependency (rhbz#1728219)
  - Machines: Implement VM installation for additional disk types
  - Machines: Fix setting of volume format when adding new disks to VMs (rhbz#1732303)
  - Machines: Disallow pool deletion if pool/volumes are used by any VM (rhbz#1731865)
  - Check for subscription only if enabled in package manager (rhbz#1701067)


author: Matej Marusak <mmarusak@redhat.com> - 206-1
changelog:
  - Machines: Network interface deletion
  - Machines: Refactor Create VM dialog and introduce a download option
  - Software Updates: Use notifications for available updates info
  - Machines: Configure read-only and shareable disks (rhbz#1684304)
  - machines: Implement adding virtual network interfaces (rhbz#1672753)
  - Machines: Creation of Storage Volumes (rhbz#1676506)
  - Machines: VM creation and import dialog changes
  - Machines: Enable interface type "direct" in NIC configuration
  - Machines: LVM storage pools (rhbz#1676600)
  - Machines: VM creation dialog now shows the recommended memory for the selected OS
  - Machines: Managing of Virtual Networks (rhbz#1672755)
  - Machines: Support more disk types


author: Matej Marusak <mmarusak@redhat.com> - 208-1
changelog:
  - Storage: Drop “default mount point” concept
  - Machines: Support transient virtual networks and storage pools
  - Machines: Sliders for disk size and memory in VM creation
  - Storage: List all software devices in a single panel
  - Redesigned notifications


author: Matej Marusak <mmarusak@redhat.com> - 209-1
changelog:
  - Machines: Don't disable detaching button when VM is running (rhbz#1777201)
  - Machines: Support transient virtual networks and storage pools (rhbz#1715429)
  - Machines: Fix Oops when creating a VM from ISO on system with no storage pools (rhbz#1778049)
  - Stop fetching variables from base1/patternfly.css because they can be outdated (rhbz#1777683)


author: Matej Marusak <mmarusak@redhat.com> - 210-1
changelog:
  - Dashboard: Support SSH identity unlocking when adding new machines
  - Machines: Support “bridge” type network interfaces
  - Machines: Support “bus” type disk configuration (rhbz#1671144)
  - Machines: Fix default storage pool search (rhbz#1778049)
  - Machines: Fix lost of configuration changes made before installation (rhbz#1780449)
  - Machines: Fix edit NIC dialog when the current network in XML was deleted (rhbz#1780452)
  - Machines: Fix default volume format detection in Disk Add dialog (rhbz#1784304)
  - Machines: Use all cells when getting Host Max Memory (rhbz#1780530)


author: Matej Marusak <mmarusak@redhat.com> - 211-1
changelog:
  - Machines: The VM is covered when another one has the same name (rhbz#1780451)
  - Machines: Decompress ipv6 addresses before validating them (rhbz#1784289)
  - Machines: Fix default bridge selection for `Bridge to LAN` NIC (rhbz#1791537, rhbz#1791543)


author: Martin Pitt <mpitt@redhat.com> - 211.2.1
changelog:
  - Machines: Fix stuck delete dialogs (rhbz#1791543, #1792379)
  - Machines: Fix CPU statistics (rhbz#1763641)
  - Machines: Fix incorrect format when adding existing disk to VM (rhbz#1792319)
  - Storage: Minor layout fixes
  - Translation updates


author: Matej Marusak <mmarusak@redhat.com> - 219-1
changelog:
  - New upstream release 219
  - Send key functionality for the virtual machines (rhbz#1693487)
  - Fix dnf-automatic timer parsing (rhbz#1829685)


author: Martin Pitt <mpitt@redhat.com> - 221-1
changelog:
  - machines: Remove --noreboot parameter to virt-install for VM installation
    (rhbz#1750637)
  - Translation updates


author: Martin Pitt <mpitt@redhat.com> - 224-1
changelog:
  - Translation updates
  - Machines: Remove creation of user account (rhbz#1853918)
  - Machines: Fix reboot after PXE installation (rhbz#1853408, rhbz#1859045)
  - Machines: Fix notification for transient VMs (rhbz#1853649)
  - Machines: Make Storage/Network lists consistent with VM list (rhbz#1854257)
  - Machines: Fix close button on NIC Edit modal dialog header (rhbz#1857044)


author: Matej Marusak <mmarusak@redhat.com> - 224.1-1
changelog:
  - machines: add padding to storage pools list cells (rhbz#1857500)
  - machines: Fix OS autodetection in create VM dialog (rhbz#1862333)
  - machines: Fix TypeError for OSRow in VM creation dialog (rhbz#1862106)


author: Matej Marusak <mmarusak@redhat.com> - 224.2-1
changelog:
  - lib: Include current directory in FileAutoComplete option listing (rhbz#1866995)
  - lib: Make sure that the expandable part of table rows has unique key (rhbz#1865821)


author: Katerina Koukiou <kkoukiou@redhat.com> - 233.1-1
changelog:
  - machines: Inline error messages (rhbz#1666829)
  - machines: Reimplement the design of the main VMs list (rhbz#1780537, rhbz#1847712, rhbz#1858716, rhbz#1862406, rhbz#1873931)
  - storage: List entries from /etc/crypttab that are still locked
  - machines: Add support for reverting and deleting VM snapshots
  - machines: Add support for VM snapshots (rhbz#1668870, rhbz#1673158)
  - machines: Virtual machine list filtering
  - storage: Better support for "noauto" LUKS devices
  - machines: Fix 'PXE' installed VMs having network first in the boot order even after the installation finishded (rhbz#1859008)
  - machines: Fix Desktop Viewer Console tab CSS issues (rhbz#1868584)
  - tools: Fix duplicated -debuginfo files (rhbz#1870521)
  - machines: Show cdrom details in bootorder dialog (rhbz#1880175)


author: Katerina Koukiou <kkoukiou@redhat.com> - 234-1
changelog:
  - machines: Allow editing VM's CPU mode and model (rhbz#1683301)
  - machines: Add support for cloning VMs (rhbz#1683391)
  - dashboard: Drop cockpit-dashboard package, replaced with shell host switcher


author: Matej Marusak <mmarusak@redhat.com> - 235-1
changelog:
  - machines: Fix check of cpu configuration between active/inactive XML (rhbz#1913205)
  - machines: Fix rounding of memory when switching from MB to GB (rhbz#1908683)


author: Martin Pitt <mpitt@redhat.com> - 236-1
changelog:
  - machines: Fix unstable VNC console (rhbz#1750642)
  - machines: Fix alert close property in the VM details (rhbz#1918147)
  - machines: Fix crash when volumes disappear before starting installation (rhbz#1918156)
  - machines: Fix crash when undefining created VM before starting installation (rhbz#1916597)
  - machines: Fix shutting down transient VM (rhbz#1916595)
  - machines: Fix VM detail page's "Install" button (rhbz#1916120)


author: Katerina Koukiou <kkoukiou@redhat.com> - 237-1
changelog:
  - machines: Fix virt-viewer file download on chromium based Edge (rhbz#1730666)
  - machines: Fix crash when a target is pasted in the VM creation dialog (rhbz#1872660)
  - machines: Fix alert about pending changes in NIC edit dialog (rhbz#1911657)
  - machines: Fix alert about pending changes in overview card related to boot order (rhbz#1915765)
  - machines: Fix file autocomplete select not closing on enter (rhbz#1874392)
  - machines: Fix white screen when deleting a VM in an environment without storage pools (rhbz#1912384)


author: Katerina Koukiou <kkoukiou@redhat.com> - 238-1
changelog:
  - machines: VM disk creation supports a custom path
  - Updates: List outdated software that needs a restart


author: Martin Pitt <mpitt@redhat.com> - 273-1
changelog:
  - Software Updates: Optionally reboot after updating
   - Machines: Show toast notication if VM's storage deletion fails (rhbz#2105984)


author: Matej Marusak <mmarusak@redhat.com> - 278-1
changelog:
  - Machines: Allow TRIM/UNMAP requests by default for newly added disks
  - Machines: Insert and eject CD & DVD media


author: Katerina Koukiou <kkoukiou@redhat.com> - 283-1
changelog:
  - Machines: Summarize system and user session differences
  - Machines: Virtual watchdog device support


author: Martin Pitt <mpitt@redhat.com> - 284-1
changelog:
  - Storage: Set up a system to use NBDE
  - Machines: Option to forcefully revert a snapshot
  - Fix tabular numbers font


author: David Sloboda <david.x.sloboda@oracle.com> - 286.2-1.0.1
changelog:
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]


author: Martin Pitt <mpitt@redhat.com> - 310-1
changelog:
  - Storage: support for btrfs
  - Storage: improved support for swap
  - Machines: Action to Replace SPICE devices (RHEL-17433)
  - Machines: Create external snapshots when supported
  - Machines: Fix VM creation on s390x (RHEL-22241)


author: Martin Pitt <mpitt@redhat.com> - 310.3-2
changelog:
  - Machines: Mass SPICE replacement
  - Machines: Pre-formatted Block Device storage pool support
  - Machines: Translation updates (jira#RHEL-14230)


author: Martin Pitt <mpitt@redhat.com> - 177-1
changelog:
  - Support centrally-managed SSH known hosts rhbz#1622835
  - Drop support for Internet Explorer rhbz#1619993


author: Martin Pitt <mpitt@redhat.com> - 178-1
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627634
  - Fix large downloads stalling after a few megabytes rhbz#1626847
  - Recommend system-logos to ensure correct branding rhbz#1626066


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Various crash fixes (coverity) rhbz#1635182
  - Updates for React 16 (for future backports) rhbz#1635182
  - Fix building with platform-python rhbz#1631174


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Kernel Dump: Support non-local targets rhbz#1651691
  - Fix firewall page oops when not selecting anything rhbz#1652207
  - Fix changing user's own password rhbz#1652304
  - Never send Content-Length with chunked encoding rhbz#1652511
  - Include "Web Console" in package description rhbz#1653617
  - Respect SSH configuration


author: Martin Pitt <mpitt@redhat.com> - 184-1
changelog:
  - Integration of Cockpit pages on the desktop rhbz#1651264
  - Fix crash in Simplified Chinese locale rhbz#1653544
  - Update screenshots in AppStream data rhbz#1656982
  - Update translations from Zanata rhbz#1608292
  - Improve login error message if cockpit-system is not installed rhbz#1650467
  - Mark deleted cookie as HttpOnly to pacify security scanners rhbz#1656441


author: Edward Leung <edward.leung@oracle.com> - 185-2.0.1
changelog:
  - Turn off display of subscriptions menu item in GUI
  - Drop subscription-manager requirement since we do not ship it (tianyue.lan@oracle.com)
  - Remove Red Hat references.


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Add search box to Services page rhbz#1657752
  - Connect to firewalld as superuser rhbz#1664158
  - Fix log filtering rhbz#1665421
  - Show error message for invalid IdM domain names rhbz#1659333
  - Changing passwords as root does not ask for current password rhbz#1666005


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - System: Enable/disable SMT rhbz#1678956
  - Logs: Add service filtering rhbz#1657756
  - Networking: Add custom firewall ports rhbz#1660400


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Networking: Add Firewall Zones configuration rhbz#1678473
  - Fix ssh login to unknown hosts rhbz#1701174
  - Fix login when ~/.bashrc prints to stdout rhbz#1716223
  - Much better On/Off buttons, also avoid text overlap rhbz#1677593


author: Martin Pitt <mpitt@redhat.com> - 196.1-1
changelog:
  - networkmanager: Show correct IPv6 route metric in dialog (rhbz#1719575)
  - networkmanager: Ensure that endianess is always set (rhbz#1728213)
  - Update translations (rhbz#1689977)


author: Matej Marusak <mmmarusak@redhat.com> - 209-1
changelog:
  - New overview design
  - Session timeouts
  - Banners on login screen
  - Client certificate authentication
  - Dropped support for pam_rhost


author: Martin Pitt <mpitt@redhat.com> - 210-1
changelog:
  - Overview: Add CPU utilization to usage card
  - Dashboard: Support SSH identity unlocking when adding new machines
  - SElinux: Introduce an Ansible automation script
  - Translation updates (partially fixes rhbz#1754958)


author: Martin Pitt <mpitt@redhat.com> - 211-1
changelog:
  - Fix HTTPS requests > 4 KiB (rhbz#1785509)
  - Better support for various TLS certificate formats
  - Switch from Zanata to Weblate
  - Overview layout optimizations
  - Translation updates (rhbz#1754958)


author: Martin Pitt <mpitt@redhat.com> - 211.1-1
changelog:
  - system: Fix graph layout across all browsers (rhbz#1792623)
  - websocket: Fix unaligned access in send_prefixed_message_rfc6455()


author: Matej Marusak <mmarusak@redhat.com> - 211.2-1
changelog:
  - Users: Fix reboot warnings of changed roles
  - Translation updates (rhbz#1754958)
  - Fix CPU mitigations to recognize kernel options at the beginning of line


author: Matej Marusak <mmarusak@redhat.com> - 220-1
changelog:
  - New navigation with integrated switching of hosts
  - Logs: Inline help for filtering
  - Fix cockpit-system AppStream dependency (rhbz#1838003)


author: Martin Pitt <mpitt@redhat.com> - 221-1
changelog:
  - Support for Cross-Origin-Resource-Policy
  - Accounts: Some buttons are hidden when access is limited
  - Developers: Importing "base1/patternfly.css" is deprecated
  - Translation updates (rhbz#1820538)


author: Martin Pitt <mpitt@redhat.com> - 221.1-1
changelog:
  - Put back missing base1/patternfly.css
  - Services: Don't offer 'Start Service' in Limited Access mode


author: Matej Marusak <mmarusak@redhat.com> - 222-1
changelog:
  - Logs: More flexible text filters
  - Services, Dashboard: Hide some buttons when access is limited
  - Webserver: Lock down cockpit.service privileges
  - Localization updates (rhbz#1820538)


author: Martin Pitt <mpitt@redhat.com> - 223-1
changelog:
  - Webserver: Standard-conformant lifetime of web server Certificate
  - Support certificate authentication against Active Directory
  - Fix cockpit-desktop privileges (rhbz#1841104)
  - Translation updates (rhbz#1820538)


author: Katerina Koukiou <kkoukiou@redht.com> - 233.1-1
changelog:
  - Non-admin users no longer see Cockpit in motd (rhbz#1872562)
  - Improved host editing
  - Replace system's graph page with a completely new USE method page
  - Logging of remote IP addresses
  - shell: Any page can be the shell
  - Accounts: Allow setting weak passwords (rhbz#1652390)
  - Terminal: Fix issue with prompt not returning when clicking reset button in disoconnected session (rhbz#1897430)


author: Martin Pitt <mpitt@redhat.com> - 235-1
changelog:
  - Login: Improved handling of SSH host keys
  - Overview: Editable motd
  - Adjust tests for sos 4.x to fix gating tests (rhbz#1895912)


author: Martin Pitt <mpitt@redhat.com> - 238-1
changelog:
  - Web server: Preserve permissions of administrator-provided certificates
  - System: Performance page shows busiest CPU cores


author: Martin Pitt <mpitt@redhat.com> - 238.1-1
changelog:
  - Several UI alignment fixes
  - Re-drop unit tests from built packages
  - Metrics: Don't show swap column when no swap is present
  - Metrics: Don't show duplicate events


author: EL Errata <el-errata_ww@oracle.com> - 238.2-1.0.1
changelog:
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Matej Marusak <mmarusak@redhat.com> - 242-1
changelog:
  - Network: Fix device connection button (rhbz#1946874)
  - Network: Fully show MAC dropdown in add bond dialog (rhbz#1946877)


author: Katerina Koukiou <kkoukiou@redhat.com> - 244.1-1
changelog:
  - Shell: sudo is invoked only when explicitly requested
  - Dynamically manage motd/issue symlinks in package scripts (rhbz#1876848)


author: Martin Pitt <mpitt@redhat.com> - 250-1
changelog:
  - Shell: Improve admin switcher and session menu
  - Update Insights links to point to console.redhat.com (rhbz#1984841)


author: EL Errata <el-errata_ww@oracle.com> - 251.1-1.0.1
changelog:
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Martin Pitt <mpitt@redhat.com> - 255-1
changelog:
  - Restrict frame embedding to same origin (rhbz#1984902, CVE-2021-3660)
  - kdump: Show "Directory" field for NFS mounts (rbhz#2004041)


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Support for reading TLS certificates with any permissions
  - cockpit-ws no longer supports merged certificates
  - Services: Show user-owned systemd units (rhbz#1792270)


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation (rhbz#1992620, CVE-2021-3698)
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: Martin Pitt <mpitt@redhat.com> - 263-1
changelog:
  - Overview: Show scheduled shutdowns
  - Networking: Add firewall service description
  - Shell: Fix browser history


author: Martin Pitt <mpitt@redhat.com> - 264-1
changelog:
  - Metrics: Improve layout on small resolutions
   - Networking: Fix checkpoint handling and IP settings dialog (rhbz#2056386)
   - Services: Show error message instead of eternal "Loading..." state
   - Accounts: Add override button to confirm weak password
   - Accounts: Fix parsing of "last login" date


author: EL Errata <el-errata_ww@oracle.com> - 264.1-1.0.1
changelog:
  - Remove duplicate reference to server in cockpit [Orabug: 33862832]
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Martin Pitt <mpitt@redhat.com> - 264.2-1
changelog:
  - login: Use valid selectors when testing for :is() / :where() support (rhbz#2129055)
  - Don't run sudo without explicit request (rhbz#2129058)


author: Matej Marusak <mmarusak@redhat.com> - 269-1
changelog:
  - Kdump: Show journal when service fails (rhbz#2062297)
   - Parse /proc/cpuinfo on s390x (rhbz#2069552)
   - bridge: Default "init-superuser" to "none" (rhbz#2071938)
   - Animate new rows in lists
   - Crypto policies support
   - Metrics: Show busiest CPU core
   - Metrics: Show Podman containers in top CPU and memory lists
   - Standardize on SI-based units for data sizes and rates


author: Martin Pitt <mpitt@redhat.com> - 270-1
changelog:
  - Services: User-created timer deletion
   - System Diagnostics: Working with diagnostic reports has been improved


author: Martin Pitt <mpitt@redhat.com> - 273-1
changelog:
  - Metrics: Display CPU temperature
   - Networking: Suggest netmask and gateway addresses
   - Software Updates: Optionally reboot after updating
   - cockpit/ws container: Support modern SSH keys


author: EL Errata <el-errata_ww@oracle.com> - 276.1-1.0.1
changelog:
  - Update documentation links [Orabug: 34706402]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 33862832]
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Packit <hello@packit.dev> - 297-1
changelog:
  - users: allow administrators to change the user shell
  - Enable Python bridge on Fedora 38 and CentOS/RHEL 9


author: Packit <hello@packit.dev> - 299-1
changelog:
  - Kdump: Show location of kdump to verify the successful configuration test
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Packit <hello@packit.dev> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: mosquito <sensor.wen@gmail.com> - 1.22.2-7
changelog:
  - Add GL_ARB_shader_texture_lod and copy_sub_image support (#1421055)
  - Add pkgconfig(egl) BReq for rawhide
  - Move BReqs to pkgconfig


author: Richard Hughes <richard@hughsie.com> 1.4.0-1
changelog:
  - New upstream version
  - Port to the Meson build system
  - Correctly build the ICC transfer curve for Rec709
  - Do not spin the Huey LEDs when the sensor is embedded
  - Do not use /tmp to create profiles
  - Use a different Huey unlock code on the W700 laptop


author: Richard Hughes <richard@hughsie.com> 1.4.1-1
changelog:
  - New upstream version
  - Include all the files in the GIR target
  - Include the correct file when using Colord-1.0.gir
  - Use gio-2.0 when generating the VAPI


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream version
  - Avoid buffer overflow when reading profile_id
  - Fix the detection of duplicate EDIDs
  - Set cd-create-profile date to SOURCE_DATE_EPOCH


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version.
  - Install the cd-convert utility
  - Do not link against the unused gio-unix-2.0


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-11
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990397


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077418


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077417


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-2
changelog:
  - switch to master branch to fix /dev/null ownership issues
    (https://github.com/containers/conmon/commit/372fa19211cfeabdb2bad52a4ab8a4d1b0b0063c)
  - Related: #1954702


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.26-3
changelog:
  - fix "Permission on /dev/null are changing from 666 to 777 after running podman as root [rhel-8.4.0.z]"
  - Resolves: #1961682


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-2
changelog:
  - switch to master branch to fix /dev/null ownership issues
    (https://github.com/containers/conmon/commit/372fa19211cfeabdb2bad52a4ab8a4d1b0b0063c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-4
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/3161452)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-5
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/b033cb5)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-6
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/75e067e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 0.8.5-1
changelog:
  - update to https://github.com/containernetworking/plugins/archive/v0.8.5.tar.gz
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 0.8.6-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v0.8.6
  - Related: RHELPLAN-39206


author: Jindrich Novy <jnovy@redhat.com> - 0.8.1-2
changelog:
  - backport https://github.com/coreos/go-iptables/pull/62
    from Michael Cambria
  - Resolves: #1627561


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.1-4
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179944
  - Resolves: #2187342
  - Resolves: #2187360
  - Resolves: #2203693
  - Resolves: #2207506


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0
  - Related: Jira:RHEL-2110


author: Kamil Dudka <kdudka@redhat.com> - 8.30-5
changelog:
  - sync: fix open() fallback bug (#1602463)
  - fix implicit declaration warning in coreutils-getgrouplist.patch (#1602463)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-8
changelog:
  - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030)
  - fix formatting of sha512sum(1) man page (#1688744)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-9
changelog:
  - split: fix --number=K/N to output correct part of file (#1921246)
  - rm: do not skip files upon failure to remove an empty dir (#1905481)
  - use statx instead of stat when available (#1760300)


author: EL Errata <el-errata_ww@oracle.com> - 8.30-12.0.1
changelog:
  - clean up empty file if cp is failed [Orabug 15973168]
  - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030)
  - fix formatting of sha512sum(1) man page (#1688744)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-13
changelog:
  - ls, stat: avoid triggering automounts (#2044981)
  - make `df --direct` work again (#2058686)
  - doc: improve description of the --kibibytes option of ls (#1527391)


author: Kamil Dudka <kdudka@redhat.com> - 8.29-7
changelog:
  - add provides to coreutils-single to make it a drop-in replacement (#1572693)
  - reintroduce very old Provides (mktemp, sh-utils, textwrap, fileutils, stat)


author: Kamil Dudka <kdudka@redhat.com> - 8.29-8
changelog:
  - ls: increase the allowed abmon width from 5 to 12 (#1577872)
  - date, ls: pick strftime fixes from glibc to improve locale support (#1577872)


author: Jan Friesse <jfriesse@redhat.com> 2.99.3-3
changelog:
  - Resolves: rhbz#1602409

  - Remove libcgroup (rhbz#1602409)
  - merge upstream commit c9e5d6db13fa965d83e27a3b664477e9b5b26edf (rhbz#1602409)


author: Jan Friesse <jfriesse@redhat.com> 2.99.3-5
changelog:
  - Resolves: rhbz#1639211

  - config: Fix crash in reload if new interfaces are added (rhbz#1639211)
  - merge upstream commit 9f2d5a3a3faa8bd1021b505bcf3c5428b3435e39 (rhbz#1639211)


author: Jan Friesse <jfriesse@redhat.com> 2.99.5-2
changelog:
  - Resolves: rhbz#1654630

  - man: Add some information about address resolution (rhbz#1654630)
  - merge upstream commit 8d50bd946dd7e01da75f06da3f885e7dc82f4f12 (rhbz#1654630)
  - config: Look up hostnames in a defined order (rhbz#1654630)
  - merge upstream commit 3d7f136f86a56dd9d9caa9060f7a01e8b681eb7f (rhbz#1654630)


author: Jan Friesse <jfriesse@redhat.com> 3.0.0-2
changelog:
  - Resolves: rhbz#1665211

  - totemip: Use AF_UNSPEC for ipv4-6 and ipv6-4 (rhbz#1665211)
  - merge upstream commit 2ab4d4188670356dcb82a80f2fc4598f5145c77d (rhbz#1665211)


author: Jan Friesse <jfriesse@redhat.com> 2.99.5-2
changelog:
  - Resolves: rhbz#1654630

  - man: Add some information about address resolution (rhbz#1654630)
  - merge upstream commit 8d50bd946dd7e01da75f06da3f885e7dc82f4f12 (rhbz#1654630)
  - config: Look up hostnames in a defined order (rhbz#1654630)
  - merge upstream commit 3d7f136f86a56dd9d9caa9060f7a01e8b681eb7f (rhbz#1654630)


author: Jan Friesse <jfriesse@redhat.com> 3.0.2-3.1
changelog:
  - Resolves: rhbz#1765619

  - totemsrp: Reduce MTU to left room second mcast (rhbz#1765619)
  - merge upstream commit ee8b8993d98b3f6af9c058194228fc534fcd0796 (rhbz#1765619)


author: Jan Friesse <jfriesse@redhat.com> 3.0.2-4
changelog:
  - Resolves: rhbz#1745624
  - Resolves: rhbz#1745642
  - Resolves: rhbz#1749263
  - Resolves: rhbz#1765025

  - totem: fix check if all nodes have same number of links (rhbz#1749263)
  - merge upstream commit 816324c94cfb917b11f43954b8757424db28b390 (rhbz#1749263)
  - totem: Increase ring_id seq after load (rhbz#1745624)
  - merge upstream commit 3675daceeeeb72af043f5c051daed463fdd2d2a1 (rhbz#1745624)
  - man: Fix link_mode priority description (rhbz#1745642)
  - merge upstream commit 0a323ff2ed0f2aff9cb691072906e69cb96ed662 (rhbz#1745642)
  - totemsrp: Reduce MTU to left room second mcast (rhbz#1765025)
  - merge upstream commit ee8b8993d98b3f6af9c058194228fc534fcd0796 (rhbz#1765025)


author: Jan Friesse <jfriesse@redhat.com> 3.0.3-4
changelog:
  - Resolves: rhbz#1780137
  - Resolves: rhbz#1791792
  - Resolves: rhbz#1809864
  - Resolves: rhbz#1816653

  - votequorum: Ignore the icmap_get_* return value (rhbz#1780137)
  - merge upstream commit cddd62f972bca276c934e58f08da84071cec1ddb (rhbz#1780137)
  - man: move cmap_keys man page from section 8 to 7 (rhbz#1791792)
  - merge upstream commit f1d36307e524f9440733f0b01a9fc627a0e1cac7 (rhbz#1791792)
  - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780137)
  - merge upstream commit 8ce65bf951bc1e5b2d64b60ea027fbdc551d4fc8 (rhbz#1780137)
  - stats: Add stats for scheduler misses (rhbz#1791792)
  - merge upstream commit 48b6894ef41e9a06ccbb696d062d86ef60dc2c4b (rhbz#1791792)
  - stats: Use nanoseconds from epoch for schedmiss (rhbz#1791792)
  - merge upstream commit ebd05fa00826c366922e619b012a0684c6856539 (rhbz#1791792)
  - main: Add schedmiss timestamp into message (rhbz#1791792)
  - merge upstream commit 35662dd0ec53f456445c30c0ef92892f47b25aa2 (rhbz#1791792)
  - votequorum: Change check of expected_votes (rhbz#1809864)
  - merge upstream commit 0c16442f2d93f32a229b87d2672e2dc8025ec704 (rhbz#1809864)
  - quorumtool: exit on invalid expected votes (rhbz#1809864)
  - merge upstream commit 5f543465bb3506b7f4929a426f1c22a9c854cecd (rhbz#1809864)
  - votequorum: set wfa status only on startup (rhbz#1816653)
  - merge upstream commit ca320beac25f82c0c555799e647a47975a333c28 (rhbz#1816653)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-1
changelog:
  - Resolves: rhbz#1855293
  - Resolves: rhbz#1855303
  - Resolves: rhbz#1870449
  - Resolves: rhbz#1887400

  - New upstream release (rhbz#1855293)
  - Support for reload of crypto configuration (rhbz#1855303)
  - Increase default token timeout to 3000ms (rhbz#1870449)
  - Add support for nodelist callback into quorum service (rhbz#1887400)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-3
changelog:
  - Resolves: rhbz#1897085
  - Resolves: rhbz#1896493

  - spausedd: Add ability to move process into root cgroup (rhbz#1897085)
  - totemknet: Check both cipher and hash for crypto (rhbz#1896493)


author: Jan Friesse <jfriesse@redhat.com> 3.0.0-4
changelog:
  - Resolves: rhbz#1827256

  - Add explicit corosync-qdevice and corosync-qnetd dependency for revdeps CI test


author: Jan Friesse <jfriesse@redhat.com> 3.1.4-1
changelog:
  - Related: rhbz#1948973
  - Resolves: rhbz#1962139

  - New upstream release (rhbz#1948973)
  - stats: fix crash when iterating over deleted keys (rhbz#1962139)


author: Jan Friesse <jfriesse@redhat.com> 3.1.5-2
changelog:
  - Resolves: rhbz#2002115
  - Resolves: rhbz#2024658

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)


author: Ondrej Vasik <ovasik@redhat.com> - 2.11-36
changelog:
  - in 2015, file name in CVE-2014-9112 shows in a bit different timestamp
    format (fix FTBFS, #1239416)


author: Marek Polacek <polacek@redhat.com> 8.2.1-1.3
changelog:
  - change the default -march on s390x to z13 with tuning for z14 (#1571124)
  - use --disable-multilib on s390x


author: Jeff Law <law@redhat.com 8.2.1-3.4
changelog:
  - Backport PPC string inlines from trunk which allow for valgrind's
    memcheck to work properly (#1652929)
  - Backport bugfix for clz pattern on s390 affecting jemalloc (#1652016)


author: Qing Zhao <qing.zhao@oracle.com> 8.2.1-3.5.0.1
changelog:
  - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
    This is the similar GCC PR47618, add the fix from Gcc9:
    gcc9-pr47618.patch
  - Fix Orabug 29457270 - With live patching, still need to obey "inline"
    directive
    This is the similar GCC PR89730, add the fix from Gcc9:
    gcc9-pr89730.patch
  - Fix Orabug 29178534 - SEGV in rdbms with gcc8 running lrgsrgdbcon1 
    lrgsrgdbcon2 lrgsrgdbcone 
    This is the similar GCC PR89595, add the fix from Gcc9:
    gcc9-pr89595.patch
    also fixes GCC PR PR89655 PR89656, add the fix from Gcc9:
    gcc9-pr89655-pr89656.patch
  - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC 
    Add -fopt-info-inline support from Gcc9:
    gcc9-opt-info-inline.patch
  - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions 
    Add -flive-patching support from Gcc9:
    gcc9-fipa-reference-addressable.patch
    gcc9-fipa-stack-alignment.patch
    gcc9-add-fomit-frame-pointer-to-test.patch
    gcc9-flive-patching.patch
    gcc9-ipa-stack-alignment-386-test.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Backport 17 ampere patches from
  https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
  e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
  					  aarch64.
  d735f3ae4712f66362326d179b4d7e9332c79677: Revert "2017-10-24  Richard Biener
  271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for 
  					  shifted
  0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
  				    	  eMAG.
  c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
  					  X-Gene
  74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
  ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
  b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
  393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
  b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline: 
  					  Add pipelining loads for list finds.
  095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common 
  					  subexpression elimination.
  a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for 
  					  X-Gene cores.
  256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
  					  without definition stmts.
  6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
  1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
  66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation 
  					  of loop preheaders.
  c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3 (#1680182)
  - remove load and test FP splitter (#1673116)
  - fix *movsi_from_df (#1677652)
  - add missing headers
  - add support for live patching (#1668903)
  - retire gcc8-rh1612514.patch, gcc8-rh1652016.patch, gcc8-rh1652929-?.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4
changelog:
  - update from Fedora 8.3.1-4 (#1680182)
  - drop gcc8-pr60790.patch, gcc8-pr89629.patch, gcc8-rh1668903-4.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.2
changelog:
  - backport the -fuse-ld=lld option (#1670535)
  - TLS model fix (#1678555, PR c++/85400)
  - two small autoFDO fixes (#1686082)
  - libgomp update (#1707568)
  - member template redeclaration fix (#1652704, PR c++/86747)
  - turn libgcc_s.so into a linker script on i?86, x86_64, ppc64le and also on
    ppc and ppc64 for 64-bit multilib (#1708309)
  - avoid using unaligned vsx or lxvd2x/stxvd2x for memcpy/memmove inline
    expansion (#1666977)


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.5
changelog:
  - fix shift count operand printing (#1730380)
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730454)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730454)


author: Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1
changelog:
  - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
    This is the similar GCC PR47618, add the fix from GCC9:
    gcc9-pr47618.patch
  - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC 
    Add -fopt-info-inline support from GCC9:
    gcc9-opt-info-inline.patch
  - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions 
    Add -flive-patching support from GCC9:
    gcc9-fipa-reference-addressable.patch
    gcc9-fipa-stack-alignment.patch
    gcc9-add-fomit-frame-pointer-to-test.patch
    gcc9-extend-live-patching-option-handling.patch
    gcc9-ipa-stack-alignment-386-test.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Backport 17 ampere patches from
  https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
  e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
  					  aarch64.
  d735f3ae4712f66362326d179b4d7e9332c79677: Revert "2017-10-24  Richard Biener
  271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for 
  					  shifted
  0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
  				    	  eMAG.
  c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
  					  X-Gene
  74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
  ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
  b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
  393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
  b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline: 
  					  Add pipelining loads for list finds.
  095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common 
  					  subexpression elimination.
  a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for 
  					  X-Gene cores.
  256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
  					  without definition stmts.
  6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
  1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
  66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation 
  					  of loop preheaders.
  c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.2
changelog:
  - Fix Orabug 29968294 -  Heap corruption with fprofile-dir=%p prevents 
    profiling parallel processes, needed for RDBMS:
    Add patch to fix PR86057 from Gcc9:
    gcc9-pr86057.patch
  - Fix Orabug 30044244 - Profile directory concatenated with object file path 
    This is the same bug as gcc upstream PR91971:
    gcc9-pr85759.patch
    gcc10-pr91971.patch


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3
changelog:
  - CVE-2018-12207 / Intel SKX102
    OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
  - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
    to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
    -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
  - Mitigation patch:
    gcc8-Fix-Wa-with-flto.patch


author: Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4
changelog:
  - Add support for CTF in GCC
  - Fix Orabug 30102948 gcc: Add CTF generation to compiler
  - Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
    ctf-1-new-function-lang_GNU_GIMPLE.patch
    ctf-2-command-line-options-gtLEVEL.patch
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    ctf-5-handle-ctf-sections-when-lto-enabled.patch


author: Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5
changelog:
  - Update support for CTF
  - Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
  - Fix Orabug 30779193 CTF generation fails for some flavors of vla
  - Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6
changelog:
  - Add 5 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
    gcc9-add-mtune-support-for-arm-ares.patch
    gcc9-add-vec-reverse.patch
    gcc9-multiple-changes-align.patch
    gcc9-initial-mcpu-ares-tuning.patch
    gcc9-add-support-for-neoverse-n1.patch


author: Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.7
changelog:
  - Update support for CTF
  - Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
  - Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
    used


author: Marek Polacek <polacek@redhat.com> 8.3.1-5
changelog:
  - update from Fedora gcc-8.3.1-5 (#1747157)
  - use unspec_volatile for darn (PR target/91481, #1760205, CVE-2019-15847)


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.1
changelog:
  - Forward-port Oracle patches from ol8-u1.
  - Apply ares/neoverse support patches only ifarch aarch64.
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
  - Add 5 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
    gcc9-add-mtune-support-for-arm-ares.patch
    gcc9-add-vec-reverse.patch
    gcc9-multiple-changes-align.patch
    gcc9-initial-mcpu-ares-tuning.patch
    gcc9-add-support-for-neoverse-n1.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
  - Update support for CTF
  - Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
  - Fix Orabug 30779193 CTF generation fails for some flavors of vla
  - Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
  - Add support for CTF in GCC
  - Fix Orabug 30102948 gcc: Add CTF generation to compiler
  - Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
    ctf-1-new-function-lang_GNU_GIMPLE.patch
    ctf-2-command-line-options-gtLEVEL.patch
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    ctf-5-handle-ctf-sections-when-lto-enabled.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
  - CVE-2018-12207 / Intel SKX102
    OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
  - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
    to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
    -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
  - Mitigation patch:
    gcc8-Fix-Wa-with-flto.patch
    (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
  - Fix Orabug 29968294 -  Heap corruption with fprofile-dir=%p prevents 
    profiling parallel processes, needed for RDBMS:
    Add patch to fix PR86057 from Gcc9:
    gcc9-pr86057.patch
  - Fix Orabug 30044244 - Profile directory concatenated with object file path 
    This is the same bug as gcc upstream PR91971:
    gcc9-pr85759.patch
    gcc10-pr91971.patch
     (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
  - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
    This is the similar GCC PR47618, add the fix from GCC9:
    gcc9-pr47618.patch
  - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC 
    Add -fopt-info-inline support from GCC9:
    gcc9-opt-info-inline.patch
  - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions 
    Add -flive-patching support from GCC9:
    gcc9-fipa-reference-addressable.patch
    gcc9-fipa-stack-alignment.patch
    gcc9-add-fomit-frame-pointer-to-test.patch
    gcc9-extend-live-patching-option-handling.patch
    gcc9-ipa-stack-alignment-386-test.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Backport 17 ampere patches from
    https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
    e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
    					  aarch64.
    d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
    271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for 
    					  shifted
    0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
    				    	  eMAG.
    c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
    					  X-Gene
    74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
    ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
    b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
    393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
    b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline: 
    					  Add pipelining loads for list finds.
    095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common 
    					  subexpression elimination.
    a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for 
    					  X-Gene cores.
    256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
    					  without definition stmts.
    6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
    1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
    66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation 
    					  of loop preheaders.
    c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.
  - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3
changelog:
  - Fix Orabug 29838827 - provide an option to adjust the maximum depth of nested #include
    This is the same bug as gcc upstream PR90581 from Gcc9:
    gcc9-pr90581.patch
  - Fix Orabug 29541051 -  confusing error message when there is a problem
    with ASAN_OPTIONS "ERROR: expected '='"
    This is the same bug as gcc upstream PR89832 from Gcc9:
    gcc9-pr89832.patch


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4
changelog:
  - Fix generation of CTF type records for completed structs referred
    thru pointers.
  - Orabug 31095790.
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.5
changelog:
  - Add 8 patches from gcc9,10 to support -moutline-atomics for aarch64
    gcc9-early-clobber-aarch64-store.patch
    gcc9-gen-helper-substituting-iterat.patch
    gcc9-imp-swp-generation.patch
    gcc9-imp-atomic-op-lse.patch
    gcc9-simplify-lse-cas.patch
    gcc9-improve-cas.patch
    gcc9-visibility-to-libfunc.patch
    gcc10-imp-moutline-atomics.patch


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.6
changelog:
  - Replace the previous 8 patches in version 0.5 with 19 patches from upstream
    gcc 8 to support -moutline-atomics for aarch64
    moutline-1-add-early-clobber.patch
    moutline-2-simplify-lse-cas.patch
    moutline-3-imp-cas-gen.patch
    moutline-4-imp-swp-gen.patch
    moutline-5-imp-atomic-op-lse.patch
    moutline-6-remove-early-clobber.patch
    moutline-7-extend-R-for-intreg.patch
    moutline-8-imp-TImode-compare-and-swap.patch
    moutline-9-fix-shrinkwrapping-interactions.patch
    moutline-10-tidy-split-compare-and-swap.patch
    moutline-11-out-of-line-for-lse-atomics.patch
    moutline-12-visibility-to-libfunc.patch
    moutline-13-imp-moutline-atomics.patch
    moutline-14-fix-store-exclusive-lse.patch
    moutline-15-configure-for-sys-auxv-libgcc-lse.patch
    moutline-16-fix-compare-and-swphi.patch
    moutline-17-fix-bootstrap-with-old-binutils.patch
    moutline-18-fix-ice-dueto-gen-compare-reg.patch
    moutline-19-re-pr90724.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-5.1
changelog:
  - consider negative edges in cycle detection (#1817991, PR gcov-profile/91601)
  - fix Fortran debug info for arrays with descriptors (#1655624,
    PR fortran/92775)
  - fix wrong code emitted for movv1qi on s390x (#1784758, PR target/92950)


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2
changelog:
  - Fix Orabug 32301371 - bug using gcov with preserve paths option
    This is the same bug as GCC bug PR gcov-profile/88994
    gcc9-pr88994.patch


author: Marek Polacek <polacek@redhat.com> 8.4.1-1
changelog:
  - update from GCC 8.4 release (#1868446)
  - remove symlinks to 32-bit versions of these static libraries: libasan.a,
    libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)


author: Qing Zhao <qing.zhao@oracle.com> 8.4.1-1.0.1
changelog:
  - Merge the following oracle patches to OL8.4 beta:
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

  - Fix Orabug 32301371 - bug using gcov with preserve paths option
    This is the same bug as GCC bug PR gcov-profile/88994
    gcc9-pr88994.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
  - Fix generation of CTF type records for completed structs referred
    thru pointers.
    Orabug 31095790.
    (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
  - Fix Orabug 29838827 - provide an option to adjust the maximum depth 
    of nested #include
    This is the same bug as gcc upstream PR90581 from Gcc9:
    gcc9-pr90581.patch
  - Fix Orabug 29541051 -  confusing error message when there is a problem
    with ASAN_OPTIONS "ERROR: expected '='"
    This is the same bug as gcc upstream PR89832 from Gcc9:
    gcc9-pr89832.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
  - Update support for CTF
    Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
    Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
    used
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
  - Apply ares/neoverse support patches only ifarch aarch64.
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
  - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
    gcc9-add-vec-reverse.patch
    gcc9-multiple-changes-align.patch
    gcc9-initial-mcpu-ares-tuning.patch
    gcc9-add-support-for-neoverse-n1.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
  - Update support for CTF
    Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
    Fix Orabug 30779193 CTF generation fails for some flavors of vla
    Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
  - Add support for CTF in GCC
    Fix Orabug 30102948 gcc: Add CTF generation to compiler
    Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
    ctf-1-new-function-lang_GNU_GIMPLE.patch
    ctf-2-command-line-options-gtLEVEL.patch
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    ctf-5-handle-ctf-sections-when-lto-enabled.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
  - CVE-2018-12207 / Intel SKX102
    OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
  - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
    to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
    -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
  - Mitigation patch:
    gcc8-Fix-Wa-with-flto.patch
    (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
  - Fix Orabug 29968294 -  Heap corruption with fprofile-dir=%p prevents
    profiling parallel processes, needed for RDBMS:
    Add patch to fix PR86057 from Gcc9:
    gcc9-pr86057.patch
  - Fix Orabug 30044244 - Profile directory concatenated with object file path
    This is the same bug as gcc upstream PR91971:
    gcc9-pr85759.patch
    gcc10-pr91971.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
  - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
    This is the similar GCC PR47618, add the fix from GCC9:
    gcc9-pr47618.patch
  - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
    Add -fopt-info-inline support from GCC9:
    gcc9-opt-info-inline.patch
  - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
    Add -flive-patching support from GCC9:
    gcc9-fipa-reference-addressable.patch
    gcc9-fipa-stack-alignment.patch
    gcc9-add-fomit-frame-pointer-to-test.patch
    gcc9-extend-live-patching-option-handling.patch
    gcc9-ipa-stack-alignment-386-test.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Backport 17 ampere patches from
    https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
    e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                            aarch64.
    d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
    271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                            shifted
    0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                            eMAG.
    c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                            X-Gene
    74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
    ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
    b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
    393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
    b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                            Add pipelining loads for list finds.
    095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                            subexpression elimination.
    a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                            X-Gene cores.
    256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                            without definition stmts.
    6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
    1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
    66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                            of loop preheaders.
    c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2
changelog:
  - Add complex divide improvement
    backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3
changelog:
  - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
    This commit brings the support for CTF/BTF debug formats at par with
    upstream.  GCC now generates the CTF/BTF debug information by using the
    internal DWARF representation.
    For backward compatibility reasons, OL8 GCC continues to support -gt
    command line option.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.4
changelog:
  - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
changelog:
  - Add patches to support marvell on Arm:
    gcc9-add-support-for-profile-extension.patch
    gcc10-add-initial-octeontx2-support.patch
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
changelog:
  - Fix Orabug 34066706 only in OL GCC.
    report error when there is no PROGRAM_SUMMARY section in .gcda file.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
changelog:
  - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 8.5.0-13
changelog:
  - require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
  - backport Default widths with -fdec-format-defaults patch (#2074614)


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
changelog:
  - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
    ISSUES IN LINUX ARM64.
    Removing the buggy patch that has been removed from upstream gcc too:
    gcc10-pr91971.patch


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-16.0.2
changelog:
  - Support for -mpreserve-args in aarch64.
  - Fix Orabug 25853011.
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.


author: Marek Polacek <polacek@redhat.com> 8.5.0-17
changelog:
  - fix deserialization for std::normal_distribution (#2130392,
    PR libstdc++/105502)
  - initialize std::normal_distribution::_M_saved (PR libstdc++/99536)
  - reject std::make_shared<T[]> (PR libstdc++/99006)


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
changelog:
  - Support for -mpreserve-args in aarch64.
  - Orabug 35065765.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
changelog:
  - CVE-2023-4039 GCC mitigation.
    Orabug 35751743.
    Includes removal of aarch64-preserve-args.patch.  
  - CVE-2022-40982 "Intel Downfall" mitigation.
    Orabug 35751810.
    Add two patches originally from GCC upstream releases/gcc-11 branch.
    with major adjustment.
    gcc11-downfall-disable-gather-in-vec.patch
    gcc11-downfall-support-mno-gather.patch
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> 8.5.0-18.0.6
changelog:
  - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
    interaction with backported aarch64 -fstack-clash-protection support.
    [Orabug 35843962]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 8.5.0-20
changelog:
  - fix for TLSLD references (#2213753)
  - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506)
  - adjust a pattern in s390.md (PR target/87723, #2214847)


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
changelog:
  - Restore support for -mpreserve-args in aarch64 targets, adapted to
    new AArch64 stack frame layout.
  - Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
changelog:
  - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
    gcc14-pr111407.patch
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-21.0.1
changelog:
  - Merge Oracle patches to 8.5.0-21.
    Oracle history:
    January-19-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-5-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
    - Restore support for -mpreserve-args in aarch64 targets, adapted to
      new AArch64 stack frame layout.
      Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    October-4-2023 David Faust <david.faust@oracle.com> 8.5.0-20.0.1
    - Forward-port Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2023 David Faust <david.faust@oracle.com> 8.5.0-18.0.6
    - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
      interaction with backported aarch64 -fstack-clash-protection support.
      [Orabug 35843962]
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751743.
      Includes removal of aarch64-preserve-args.patch.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751810.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      with major adjustment.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-11-2023 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
    - Support for -mpreserve-args in aarch64.
      Orabug 35065765.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.1
    - Merge Oracle patches with gcc-8.5.0-18.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-12-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-16.0.1
    - Merge oracle patches with gcc-8.5.0-16.
    November-30-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
    - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
      ISSUES IN LINUX ARM64.
      Removing the buggy patch that has been removed from upstream gcc too:
      gcc10-pr91971.patch
    September-28-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.1
    - Merge oracle patches with gcc-8.5.0-15.
    June-29-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
    - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-4-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
    - Fix Orabug 34066706 only in OL GCC.
      report error when there is no PROGRAM_SUMMARY section in .gcda file.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-27-2022 Marek Polacek <polacek@redhat.com> 8.5.0-10.1
    - backport Default widths with -fdec-format-defaults patch (#2079578)
    March-22-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.1
    - Merge with oracle patches.
    January-5-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
    - Add patches to support marvell on Arm:
      gcc9-add-support-for-profile-extension.patch
      gcc10-add-initial-octeontx2-support.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
    - Merge oracle patches to security errata 8.5.0-4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-14-2021 Indu Bhagat <indu.bhagat@oracle.com> 8.5.0-3.0.2
    - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-5-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
    - Merge the following oracle patches to OL8.5 beta:
      - Fix an aarch64 compilation error triggered by the oracle patch
        gcc9-multiple-changes-align.patch on OL8U5 source base.
        gcc-fix-aarch64-tune-params.patch
      - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
        This commit brings the support for CTF/BTF debug formats at par with
        upstream.  GCC now generates the CTF/BTF debug information by using the
        internal DWARF representation.
        For backward compatibility reasons, OL8 GCC continues to support -gt
        command line option.
        (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
      - Add complex divide improvement
        backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
        (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
      - Fix Orabug 32301371 - bug using gcov with preserve paths option
        This is the same bug as GCC bug PR gcov-profile/88994
        gcc9-pr88994.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
      - Fix generation of CTF type records for completed structs referred
        thru pointers.
        Orabug 31095790.
        (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
      - Fix Orabug 29838827 - provide an option to adjust the maximum depth
        of nested #include
        This is the same bug as gcc upstream PR90581 from Gcc9:
        gcc9-pr90581.patch
      - Fix Orabug 29541051 -  confusing error message when there is a problem
        with ASAN_OPTIONS "ERROR: expected '='"
        This is the same bug as gcc upstream PR89832 from Gcc9:
        gcc9-pr89832.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
      - Update support for CTF
        Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
        Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
        used
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
      - Apply ares/neoverse support patches only ifarch aarch64.
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
      - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
        gcc9-add-vec-reverse.patch
        gcc9-multiple-changes-align.patch
        gcc9-initial-mcpu-ares-tuning.patch
        gcc9-add-support-for-neoverse-n1.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
      - Update support for CTF
        Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
        Fix Orabug 30779193 CTF generation fails for some flavors of vla
        Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
      - Add support for CTF in GCC
        Fix Orabug 30102948 gcc: Add CTF generation to compiler
        Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
        ctf-1-new-function-lang_GNU_GIMPLE.patch
        ctf-2-command-line-options-gtLEVEL.patch
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        ctf-5-handle-ctf-sections-when-lto-enabled.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
      - CVE-2018-12207 / Intel SKX102
        OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
      - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
        to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
        -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
      - Mitigation patch:
        gcc8-Fix-Wa-with-flto.patch
        (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
      - Fix Orabug 29968294 -      Heap corruption with fprofile-dir=%p prevents
        profiling parallel processes, needed for RDBMS:
        Add patch to fix PR86057 from Gcc9:
        gcc9-pr86057.patch
      - Fix Orabug 30044244 - Profile directory concatenated with object file path
        This is the same bug as gcc upstream PR91971:
        gcc9-pr85759.patch
        gcc10-pr91971.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
      - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
        This is the similar GCC PR47618, add the fix from GCC9:
        gcc9-pr47618.patch
      - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
        Add -fopt-info-inline support from GCC9:
        gcc9-opt-info-inline.patch
      - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
        Add -flive-patching support from GCC9:
        gcc9-fipa-reference-addressable.patch
        gcc9-fipa-stack-alignment.patch
        gcc9-add-fomit-frame-pointer-to-test.patch
        gcc9-extend-live-patching-option-handling.patch
        gcc9-ipa-stack-alignment-386-test.patch
      - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
      - Backport 17 ampere patches from
        https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
        e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                                  aarch64.
        d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
        271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                                  shifted
        0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                                  eMAG.
        c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                                  X-Gene
        74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
        ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
        b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
        393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
        b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                                  Add pipelining loads for list finds.
        095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                                  subexpression elimination.
        a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                                  X-Gene cores.
        256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                                  without definition stmts.
        6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
        1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
        66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                                  of loop preheaders.
        c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-22.0.1
changelog:
  - Merge Oracle patches to 8.5.0-22.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-21.0.1
    - Merge Oracle patches to 8.5.0-21.
    January-19-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-5-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
    - Restore support for -mpreserve-args in aarch64 targets, adapted to
      new AArch64 stack frame layout.
      Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    October-4-2023 David Faust <david.faust@oracle.com> 8.5.0-20.0.1
    - Forward-port Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2023 David Faust <david.faust@oracle.com> 8.5.0-18.0.6
    - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
      interaction with backported aarch64 -fstack-clash-protection support.
      [Orabug 35843962]
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751743.
      Includes removal of aarch64-preserve-args.patch.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751810.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      with major adjustment.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-11-2023 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
    - Support for -mpreserve-args in aarch64.
      Orabug 35065765.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.1
    - Merge Oracle patches with gcc-8.5.0-18.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-12-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-16.0.1
    - Merge oracle patches with gcc-8.5.0-16.
    November-30-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
    - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
      ISSUES IN LINUX ARM64.
      Removing the buggy patch that has been removed from upstream gcc too:
      gcc10-pr91971.patch
    September-28-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.1
    - Merge oracle patches with gcc-8.5.0-15.
    June-29-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
    - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-4-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
    - Fix Orabug 34066706 only in OL GCC.
      report error when there is no PROGRAM_SUMMARY section in .gcda file.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-27-2022 Marek Polacek <polacek@redhat.com> 8.5.0-10.1
    - backport Default widths with -fdec-format-defaults patch (#2079578)
    March-22-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.1
    - Merge with oracle patches.
    January-5-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
    - Add patches to support marvell on Arm:
      gcc9-add-support-for-profile-extension.patch
      gcc10-add-initial-octeontx2-support.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
    - Merge oracle patches to security errata 8.5.0-4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-14-2021 Indu Bhagat <indu.bhagat@oracle.com> 8.5.0-3.0.2
    - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-5-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
    - Merge the following oracle patches to OL8.5 beta:
      - Fix an aarch64 compilation error triggered by the oracle patch
        gcc9-multiple-changes-align.patch on OL8U5 source base.
        gcc-fix-aarch64-tune-params.patch
      - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
        This commit brings the support for CTF/BTF debug formats at par with
        upstream.  GCC now generates the CTF/BTF debug information by using the
        internal DWARF representation.
        For backward compatibility reasons, OL8 GCC continues to support -gt
        command line option.
        (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
      - Add complex divide improvement
        backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
        (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
      - Fix Orabug 32301371 - bug using gcov with preserve paths option
        This is the same bug as GCC bug PR gcov-profile/88994
        gcc9-pr88994.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
      - Fix generation of CTF type records for completed structs referred
        thru pointers.
        Orabug 31095790.
        (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
      - Fix Orabug 29838827 - provide an option to adjust the maximum depth
        of nested #include
        This is the same bug as gcc upstream PR90581 from Gcc9:
        gcc9-pr90581.patch
      - Fix Orabug 29541051 -  confusing error message when there is a problem
        with ASAN_OPTIONS "ERROR: expected '='"
        This is the same bug as gcc upstream PR89832 from Gcc9:
        gcc9-pr89832.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
      - Update support for CTF
        Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
        Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
        used
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
      - Apply ares/neoverse support patches only ifarch aarch64.
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
      - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
        gcc9-add-vec-reverse.patch
        gcc9-multiple-changes-align.patch
        gcc9-initial-mcpu-ares-tuning.patch
        gcc9-add-support-for-neoverse-n1.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
      - Update support for CTF
        Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
        Fix Orabug 30779193 CTF generation fails for some flavors of vla
        Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
      - Add support for CTF in GCC
        Fix Orabug 30102948 gcc: Add CTF generation to compiler
        Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
        ctf-1-new-function-lang_GNU_GIMPLE.patch
        ctf-2-command-line-options-gtLEVEL.patch
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        ctf-5-handle-ctf-sections-when-lto-enabled.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
      - CVE-2018-12207 / Intel SKX102
        OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
      - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
        to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
        -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
      - Mitigation patch:
        gcc8-Fix-Wa-with-flto.patch
        (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
      - Fix Orabug 29968294 -      Heap corruption with fprofile-dir=%p prevents
        profiling parallel processes, needed for RDBMS:
        Add patch to fix PR86057 from Gcc9:
        gcc9-pr86057.patch
      - Fix Orabug 30044244 - Profile directory concatenated with object file path
        This is the same bug as gcc upstream PR91971:
        gcc9-pr85759.patch
        gcc10-pr91971.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
      - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
        This is the similar GCC PR47618, add the fix from GCC9:
        gcc9-pr47618.patch
      - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
        Add -fopt-info-inline support from GCC9:
        gcc9-opt-info-inline.patch
      - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
        Add -flive-patching support from GCC9:
        gcc9-fipa-reference-addressable.patch
        gcc9-fipa-stack-alignment.patch
        gcc9-add-fomit-frame-pointer-to-test.patch
        gcc9-extend-live-patching-option-handling.patch
        gcc9-ipa-stack-alignment-386-test.patch
      - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
      - Backport 17 ampere patches from
        https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
        e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                                  aarch64.
        d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
        271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                                  shifted
        0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                                  eMAG.
        c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                                  X-Gene
        74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
        ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
        b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
        393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
        b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                                  Add pipelining loads for list finds.
        095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                                  subexpression elimination.
        a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                                  X-Gene cores.
        256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                                  without definition stmts.
        6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
        1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
        66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                                  of loop preheaders.
        c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-23.0.1
changelog:
  - Merge Oracle patches to 8.5.0-23.
    Oracle history:
    May-22-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-22.0.1
    - Merge Oracle patches to 8.5.0-22.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-21.0.1
    - Merge Oracle patches to 8.5.0-21.
    January-19-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-5-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
    - Restore support for -mpreserve-args in aarch64 targets, adapted to
      new AArch64 stack frame layout.
      Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    October-4-2023 David Faust <david.faust@oracle.com> 8.5.0-20.0.1
    - Forward-port Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2023 David Faust <david.faust@oracle.com> 8.5.0-18.0.6
    - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
      interaction with backported aarch64 -fstack-clash-protection support.
      [Orabug 35843962]
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751743.
      Includes removal of aarch64-preserve-args.patch.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751810.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      with major adjustment.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-11-2023 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
    - Support for -mpreserve-args in aarch64.
      Orabug 35065765.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.1
    - Merge Oracle patches with gcc-8.5.0-18.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-12-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-16.0.1
    - Merge oracle patches with gcc-8.5.0-16.
    November-30-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
    - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
      ISSUES IN LINUX ARM64.
      Removing the buggy patch that has been removed from upstream gcc too:
      gcc10-pr91971.patch
    September-28-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.1
    - Merge oracle patches with gcc-8.5.0-15.
    June-29-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
    - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-4-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
    - Fix Orabug 34066706 only in OL GCC.
      report error when there is no PROGRAM_SUMMARY section in .gcda file.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-27-2022 Marek Polacek <polacek@redhat.com> 8.5.0-10.1
    - backport Default widths with -fdec-format-defaults patch (#2079578)
    March-22-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.1
    - Merge with oracle patches.
    January-5-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
    - Add patches to support marvell on Arm:
      gcc9-add-support-for-profile-extension.patch
      gcc10-add-initial-octeontx2-support.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
    - Merge oracle patches to security errata 8.5.0-4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-14-2021 Indu Bhagat <indu.bhagat@oracle.com> 8.5.0-3.0.2
    - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-5-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
    - Merge the following oracle patches to OL8.5 beta:
      - Fix an aarch64 compilation error triggered by the oracle patch
        gcc9-multiple-changes-align.patch on OL8U5 source base.
        gcc-fix-aarch64-tune-params.patch
      - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
        This commit brings the support for CTF/BTF debug formats at par with
        upstream.  GCC now generates the CTF/BTF debug information by using the
        internal DWARF representation.
        For backward compatibility reasons, OL8 GCC continues to support -gt
        command line option.
        (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
      - Add complex divide improvement
        backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
        (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
      - Fix Orabug 32301371 - bug using gcov with preserve paths option
        This is the same bug as GCC bug PR gcov-profile/88994
        gcc9-pr88994.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
      - Fix generation of CTF type records for completed structs referred
        thru pointers.
        Orabug 31095790.
        (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
      - Fix Orabug 29838827 - provide an option to adjust the maximum depth
        of nested #include
        This is the same bug as gcc upstream PR90581 from Gcc9:
        gcc9-pr90581.patch
      - Fix Orabug 29541051 -  confusing error message when there is a problem
        with ASAN_OPTIONS "ERROR: expected '='"
        This is the same bug as gcc upstream PR89832 from Gcc9:
        gcc9-pr89832.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
      - Update support for CTF
        Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
        Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
        used
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
      - Apply ares/neoverse support patches only ifarch aarch64.
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
      - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
        gcc9-add-vec-reverse.patch
        gcc9-multiple-changes-align.patch
        gcc9-initial-mcpu-ares-tuning.patch
        gcc9-add-support-for-neoverse-n1.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
      - Update support for CTF
        Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
        Fix Orabug 30779193 CTF generation fails for some flavors of vla
        Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
      - Add support for CTF in GCC
        Fix Orabug 30102948 gcc: Add CTF generation to compiler
        Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
        ctf-1-new-function-lang_GNU_GIMPLE.patch
        ctf-2-command-line-options-gtLEVEL.patch
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        ctf-5-handle-ctf-sections-when-lto-enabled.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
      - CVE-2018-12207 / Intel SKX102
        OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
      - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
        to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
        -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
      - Mitigation patch:
        gcc8-Fix-Wa-with-flto.patch
        (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
      - Fix Orabug 29968294 -      Heap corruption with fprofile-dir=%p prevents
        profiling parallel processes, needed for RDBMS:
        Add patch to fix PR86057 from Gcc9:
        gcc9-pr86057.patch
      - Fix Orabug 30044244 - Profile directory concatenated with object file path
        This is the same bug as gcc upstream PR91971:
        gcc9-pr85759.patch
        gcc10-pr91971.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
      - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
        This is the similar GCC PR47618, add the fix from GCC9:
        gcc9-pr47618.patch
      - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
        Add -fopt-info-inline support from GCC9:
        gcc9-opt-info-inline.patch
      - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
        Add -flive-patching support from GCC9:
        gcc9-fipa-reference-addressable.patch
        gcc9-fipa-stack-alignment.patch
        gcc9-add-fomit-frame-pointer-to-test.patch
        gcc9-extend-live-patching-option-handling.patch
        gcc9-ipa-stack-alignment-386-test.patch
      - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
      - Backport 17 ampere patches from
        https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
        e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                                  aarch64.
        d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
        271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                                  shifted
        0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                                  eMAG.
        c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                                  X-Gene
        74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
        ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
        b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
        393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
        b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                                  Add pipelining loads for list finds.
        095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                                  subexpression elimination.
        a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                                  X-Gene cores.
        256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                                  without definition stmts.
        6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
        1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
        66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                                  of loop preheaders.
        c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-24.0.1
changelog:
  - Merge Oracle patches to 8.5.0-24.
    Oracle history:
    February-11 2025 Qing Zhao <qing.zhao@oracle.com> 8.5.0-23.0.1
    - Merge Oracle patches to 8.5.0-23.
    May-22-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-22.0.1
    - Merge Oracle patches to 8.5.0-22.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-21.0.1
    - Merge Oracle patches to 8.5.0-21.
    January-19-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-5-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
    - Restore support for -mpreserve-args in aarch64 targets, adapted to
      new AArch64 stack frame layout.
      Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    October-4-2023 David Faust <david.faust@oracle.com> 8.5.0-20.0.1
    - Forward-port Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2023 David Faust <david.faust@oracle.com> 8.5.0-18.0.6
    - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
      interaction with backported aarch64 -fstack-clash-protection support.
      [Orabug 35843962]
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751743.
      Includes removal of aarch64-preserve-args.patch.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751810.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      with major adjustment.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-11-2023 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
    - Support for -mpreserve-args in aarch64.
      Orabug 35065765.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.1
    - Merge Oracle patches with gcc-8.5.0-18.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-12-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-16.0.1
    - Merge oracle patches with gcc-8.5.0-16.
    November-30-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
    - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
      ISSUES IN LINUX ARM64.
      Removing the buggy patch that has been removed from upstream gcc too:
      gcc10-pr91971.patch
    September-28-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.1
    - Merge oracle patches with gcc-8.5.0-15.
    June-29-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
    - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-4-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
    - Fix Orabug 34066706 only in OL GCC.
      report error when there is no PROGRAM_SUMMARY section in .gcda file.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-27-2022 Marek Polacek <polacek@redhat.com> 8.5.0-10.1
    - backport Default widths with -fdec-format-defaults patch (#2079578)
    March-22-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.1
    - Merge with oracle patches.
    January-5-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
    - Add patches to support marvell on Arm:
      gcc9-add-support-for-profile-extension.patch
      gcc10-add-initial-octeontx2-support.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
    - Merge oracle patches to security errata 8.5.0-4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-14-2021 Indu Bhagat <indu.bhagat@oracle.com> 8.5.0-3.0.2
    - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-5-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
    - Merge the following oracle patches to OL8.5 beta:
      - Fix an aarch64 compilation error triggered by the oracle patch
        gcc9-multiple-changes-align.patch on OL8U5 source base.
        gcc-fix-aarch64-tune-params.patch
      - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
        This commit brings the support for CTF/BTF debug formats at par with
        upstream.  GCC now generates the CTF/BTF debug information by using the
        internal DWARF representation.
        For backward compatibility reasons, OL8 GCC continues to support -gt
        command line option.
        (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
      - Add complex divide improvement
        backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
        (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
      - Fix Orabug 32301371 - bug using gcov with preserve paths option
        This is the same bug as GCC bug PR gcov-profile/88994
        gcc9-pr88994.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
      - Fix generation of CTF type records for completed structs referred
        thru pointers.
        Orabug 31095790.
        (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
      - Fix Orabug 29838827 - provide an option to adjust the maximum depth
        of nested #include
        This is the same bug as gcc upstream PR90581 from Gcc9:
        gcc9-pr90581.patch
      - Fix Orabug 29541051 -  confusing error message when there is a problem
        with ASAN_OPTIONS "ERROR: expected '='"
        This is the same bug as gcc upstream PR89832 from Gcc9:
        gcc9-pr89832.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
      - Update support for CTF
        Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
        Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
        used
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
      - Apply ares/neoverse support patches only ifarch aarch64.
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
      - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
        gcc9-add-vec-reverse.patch
        gcc9-multiple-changes-align.patch
        gcc9-initial-mcpu-ares-tuning.patch
        gcc9-add-support-for-neoverse-n1.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
      - Update support for CTF
        Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
        Fix Orabug 30779193 CTF generation fails for some flavors of vla
        Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
      - Add support for CTF in GCC
        Fix Orabug 30102948 gcc: Add CTF generation to compiler
        Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
        ctf-1-new-function-lang_GNU_GIMPLE.patch
        ctf-2-command-line-options-gtLEVEL.patch
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        ctf-5-handle-ctf-sections-when-lto-enabled.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
      - CVE-2018-12207 / Intel SKX102
        OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
      - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
        to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
        -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
      - Mitigation patch:
        gcc8-Fix-Wa-with-flto.patch
        (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
      - Fix Orabug 29968294 -      Heap corruption with fprofile-dir=%p prevents
        profiling parallel processes, needed for RDBMS:
        Add patch to fix PR86057 from Gcc9:
        gcc9-pr86057.patch
      - Fix Orabug 30044244 - Profile directory concatenated with object file path
        This is the same bug as gcc upstream PR91971:
        gcc9-pr85759.patch
        gcc10-pr91971.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
      - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
        This is the similar GCC PR47618, add the fix from GCC9:
        gcc9-pr47618.patch
      - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
        Add -fopt-info-inline support from GCC9:
        gcc9-opt-info-inline.patch
      - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
        Add -flive-patching support from GCC9:
        gcc9-fipa-reference-addressable.patch
        gcc9-fipa-stack-alignment.patch
        gcc9-add-fomit-frame-pointer-to-test.patch
        gcc9-extend-live-patching-option-handling.patch
        gcc9-ipa-stack-alignment-386-test.patch
      - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
      - Backport 17 ampere patches from
        https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
        e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                                  aarch64.
        d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
        271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                                  shifted
        0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                                  eMAG.
        c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                                  X-Gene
        74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
        ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
        b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
        393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
        b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                                  Add pipelining loads for list finds.
        095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                                  subexpression elimination.
        a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                                  X-Gene cores.
        256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                                  without definition stmts.
        6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
        1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
        66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                                  of loop preheaders.
        c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-26.0.1
changelog:
  - Merge Oracle patches to 8.5.0-26.
    Reviewed-by: David Faust <david.faust@oracle.com>
    Oracle history:
    March-11 2025 Qing Zhao <qing.zhao@oracle.com> 8.5.0-24.0.1
    - Merge Oracle patches to 8.5.0-24.
    February-11 2025 Qing Zhao <qing.zhao@oracle.com> 8.5.0-23.0.1
    - Merge Oracle patches to 8.5.0-23.
    May-22-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-22.0.1
    - Merge Oracle patches to 8.5.0-22.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-21.0.1
    - Merge Oracle patches to 8.5.0-21.
    January-19-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-5-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
    - Restore support for -mpreserve-args in aarch64 targets, adapted to
      new AArch64 stack frame layout.
      Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    October-4-2023 David Faust <david.faust@oracle.com> 8.5.0-20.0.1
    - Forward-port Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2023 David Faust <david.faust@oracle.com> 8.5.0-18.0.6
    - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
      interaction with backported aarch64 -fstack-clash-protection support.
      [Orabug 35843962]
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751743.
      Includes removal of aarch64-preserve-args.patch.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751810.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      with major adjustment.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-11-2023 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
    - Support for -mpreserve-args in aarch64.
      Orabug 35065765.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.1
    - Merge Oracle patches with gcc-8.5.0-18.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-12-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-16.0.1
    - Merge oracle patches with gcc-8.5.0-16.
    November-30-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
    - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
      ISSUES IN LINUX ARM64.
      Removing the buggy patch that has been removed from upstream gcc too:
      gcc10-pr91971.patch
    September-28-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.1
    - Merge oracle patches with gcc-8.5.0-15.
    June-29-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
    - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-4-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
    - Fix Orabug 34066706 only in OL GCC.
      report error when there is no PROGRAM_SUMMARY section in .gcda file.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-27-2022 Marek Polacek <polacek@redhat.com> 8.5.0-10.1
    - backport Default widths with -fdec-format-defaults patch (#2079578)
    March-22-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.1
    - Merge with oracle patches.
    January-5-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
    - Add patches to support marvell on Arm:
      gcc9-add-support-for-profile-extension.patch
      gcc10-add-initial-octeontx2-support.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
    - Merge oracle patches to security errata 8.5.0-4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-14-2021 Indu Bhagat <indu.bhagat@oracle.com> 8.5.0-3.0.2
    - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-5-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
    - Merge the following oracle patches to OL8.5 beta:
      - Fix an aarch64 compilation error triggered by the oracle patch
        gcc9-multiple-changes-align.patch on OL8U5 source base.
        gcc-fix-aarch64-tune-params.patch
      - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
        This commit brings the support for CTF/BTF debug formats at par with
        upstream.  GCC now generates the CTF/BTF debug information by using the
        internal DWARF representation.
        For backward compatibility reasons, OL8 GCC continues to support -gt
        command line option.
        (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
      - Add complex divide improvement
        backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
        (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
      - Fix Orabug 32301371 - bug using gcov with preserve paths option
        This is the same bug as GCC bug PR gcov-profile/88994
        gcc9-pr88994.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
      - Fix generation of CTF type records for completed structs referred
        thru pointers.
        Orabug 31095790.
        (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
      - Fix Orabug 29838827 - provide an option to adjust the maximum depth
        of nested #include
        This is the same bug as gcc upstream PR90581 from Gcc9:
        gcc9-pr90581.patch
      - Fix Orabug 29541051 -  confusing error message when there is a problem
        with ASAN_OPTIONS "ERROR: expected '='"
        This is the same bug as gcc upstream PR89832 from Gcc9:
        gcc9-pr89832.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
      - Update support for CTF
        Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
        Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
        used
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
      - Apply ares/neoverse support patches only ifarch aarch64.
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
      - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
        gcc9-add-vec-reverse.patch
        gcc9-multiple-changes-align.patch
        gcc9-initial-mcpu-ares-tuning.patch
        gcc9-add-support-for-neoverse-n1.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
      - Update support for CTF
        Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
        Fix Orabug 30779193 CTF generation fails for some flavors of vla
        Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
      - Add support for CTF in GCC
        Fix Orabug 30102948 gcc: Add CTF generation to compiler
        Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
        ctf-1-new-function-lang_GNU_GIMPLE.patch
        ctf-2-command-line-options-gtLEVEL.patch
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        ctf-5-handle-ctf-sections-when-lto-enabled.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
      - CVE-2018-12207 / Intel SKX102
        OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
      - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
        to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
        -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
      - Mitigation patch:
        gcc8-Fix-Wa-with-flto.patch
        (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
      - Fix Orabug 29968294 -      Heap corruption with fprofile-dir=%p prevents
        profiling parallel processes, needed for RDBMS:
        Add patch to fix PR86057 from Gcc9:
        gcc9-pr86057.patch
      - Fix Orabug 30044244 - Profile directory concatenated with object file path
        This is the same bug as gcc upstream PR91971:
        gcc9-pr85759.patch
        gcc10-pr91971.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
      - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
        This is the similar GCC PR47618, add the fix from GCC9:
        gcc9-pr47618.patch
      - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
        Add -fopt-info-inline support from GCC9:
        gcc9-opt-info-inline.patch
      - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
        Add -flive-patching support from GCC9:
        gcc9-fipa-reference-addressable.patch
        gcc9-fipa-stack-alignment.patch
        gcc9-add-fomit-frame-pointer-to-test.patch
        gcc9-extend-live-patching-option-handling.patch
        gcc9-ipa-stack-alignment-386-test.patch
      - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
      - Backport 17 ampere patches from
        https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
        e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                                  aarch64.
        d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
        271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                                  shifted
        0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                                  eMAG.
        c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                                  X-Gene
        74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
        ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
        b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
        393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
        b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                                  Add pipelining loads for list finds.
        095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                                  subexpression elimination.
        a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                                  X-Gene cores.
        256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                                  without definition stmts.
        6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
        1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
        66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                                  of loop preheaders.
        c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Marek Polacek <polacek@redhat.com> 8.5.0-2
changelog:
  - revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
  - fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
changelog:
  - Merge the following oracle patches to OL8.5 beta:

  - Fix an aarch64 compilation error triggered by the oracle patch
    gcc9-multiple-changes-align.patch on OL8U5 source base.
    gcc-fix-aarch64-tune-params.patch
  - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
    This commit brings the support for CTF/BTF debug formats at par with
    upstream.  GCC now generates the CTF/BTF debug information by using the
    internal DWARF representation.
    For backward compatibility reasons, OL8 GCC continues to support -gt
    command line option.
    (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
  - Add complex divide improvement
    backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
    (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
  - Fix Orabug 32301371 - bug using gcov with preserve paths option
    This is the same bug as GCC bug PR gcov-profile/88994
    gcc9-pr88994.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
  - Fix generation of CTF type records for completed structs referred
    thru pointers.
    Orabug 31095790.
    (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
  - Fix Orabug 29838827 - provide an option to adjust the maximum depth 
    of nested #include
    This is the same bug as gcc upstream PR90581 from Gcc9:
    gcc9-pr90581.patch
  - Fix Orabug 29541051 -  confusing error message when there is a problem
    with ASAN_OPTIONS "ERROR: expected '='"
    This is the same bug as gcc upstream PR89832 from Gcc9:
    gcc9-pr89832.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
  - Update support for CTF
    Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
    Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
    used
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
  - Apply ares/neoverse support patches only ifarch aarch64.
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
  - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
    gcc9-add-vec-reverse.patch
    gcc9-multiple-changes-align.patch
    gcc9-initial-mcpu-ares-tuning.patch
    gcc9-add-support-for-neoverse-n1.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
  - Update support for CTF
    Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
    Fix Orabug 30779193 CTF generation fails for some flavors of vla
    Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
  - Add support for CTF in GCC
    Fix Orabug 30102948 gcc: Add CTF generation to compiler
    Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
    ctf-1-new-function-lang_GNU_GIMPLE.patch
    ctf-2-command-line-options-gtLEVEL.patch
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    ctf-5-handle-ctf-sections-when-lto-enabled.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
  - CVE-2018-12207 / Intel SKX102
    OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
  - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
    to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
    -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
  - Mitigation patch:
    gcc8-Fix-Wa-with-flto.patch
    (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
  - Fix Orabug 29968294 -  Heap corruption with fprofile-dir=%p prevents
    profiling parallel processes, needed for RDBMS:
    Add patch to fix PR86057 from Gcc9:
    gcc9-pr86057.patch
  - Fix Orabug 30044244 - Profile directory concatenated with object file path
    This is the same bug as gcc upstream PR91971:
    gcc9-pr85759.patch
    gcc10-pr91971.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
  - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
    This is the similar GCC PR47618, add the fix from GCC9:
    gcc9-pr47618.patch
  - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
    Add -fopt-info-inline support from GCC9:
    gcc9-opt-info-inline.patch
  - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
    Add -flive-patching support from GCC9:
    gcc9-fipa-reference-addressable.patch
    gcc9-fipa-stack-alignment.patch
    gcc9-add-fomit-frame-pointer-to-test.patch
    gcc9-extend-live-patching-option-handling.patch
    gcc9-ipa-stack-alignment-386-test.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Backport 17 ampere patches from
    https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
    e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                            aarch64.
    d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
    271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                            shifted
    0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                            eMAG.
    c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                            X-Gene
    74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
    ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
    b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
    393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
    b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                            Add pipelining loads for list finds.
    095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                            subexpression elimination.
    a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                            X-Gene cores.
    256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                            without definition stmts.
    6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
    1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
    66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                            of loop preheaders.
    c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
changelog:
  - Merge oracle patches to security errata 8.5.0-4.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to 2.4 upstream tarball
  - Drop patches: cppcheck-1.83-tinyxml.patch, cppcheck-1.81-translations.patch, cppcheck-1.78-cfgdir.patch.
  - Bump BuildRequires for tinyxml2-devel to 2.6.0 at least.
  - Add BuildRequires pandoc.
  - There is no more bundled tinyxml in this new version of cppcheck.
  - Use the man/build-html.sh script to build the html version of the manual
  - Adjust $datadir/CppCheck to $datadir/Cppcheck.
  - Add $bindir/cppcheck*.qm files to the package.
  - Resolves: rhbz#1959478


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.6-8
changelog:
  - Python 2 binary package renamed to python2-cracklib
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Dave Anderson <anderson@redhat.com> - 7.2.3-12
changelog:
  - Address covscan issues
    Resolves: rhbz#1602466
  - Fix for x86_64 5-level pagetable vmalloc range expansion
    Resolves: rhbz#1637125


author: Dave Anderson <anderson@redhat.com> - 7.2.3-16
changelog:
  - Resurrect "dev -p" option.
  - Fix "dev -[dD]" options to account for request_queue.in_flight[] removal.
    Resolves: rhbz#1662039
  - Command line input fixes
    Resolves: rhbz#1664061


author: Dave Anderson <anderson@redhat.com> - 7.2.6-1
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1686560 
  - Utilize the VMCOREINFO PT_NOTE in /proc/kcore header
    Resolves: rhbz#1627528
  - Support extraction of CONFIG_PROC_VMCORE_DEVICE_DUMP data from dumpfile header
    Resolves: rhbz#1702535


author: Dave Anderson <anderson@redhat.com> - 7.2.6-2
changelog:
  - Fix "p" command regression
    Resolves: rhbz#1718417  
  - Fix arm64 debug kernel read error message during initialization
    Resolves: rhbz#1718736


author: Dave Anderson <anderson@redhat.com> - 7.2.7-2
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1738619
  - Support for KASLR on s390x
    Resolves: rhbz# 1753172


author: Dave Anderson <anderson@redhat.com> - 7.2.7-3
changelog:
  - Rebase to github commit 6c1c8ac6
    Resolves: rhbz#1738619
  - Fix "log -a" option
    Resolves: rhbz#1785537
  - Fix for ELF kdump vmcores form s390x KASLR kernels
    Resolves: rhbz#1786996


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-3
changelog:
  - Fix for reading compressed kdump dumpfiles from systems with physical memory
    Resolves: rhbz#1819606


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-6
changelog:
  - aarch64: Revert to reading CONFIG_ARM64_USER_VA_BITS_52 and CONFIG_ARM64_PA_BITS=52 for 52-bit VA/PA space.
    Resolves: rhbz#1861086


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-7
changelog:
  - crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
    Resolves: rhbz#1855527


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.8-8
changelog:
  - crash/arm64: Fix arm64 read error with 'idmap_ptrs_per_pgd' symbol with debug kernel
    Resolves: rhbz#1876039


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.9-1
changelog:
  - Rebase to upstream crash version 7.2.9
  - Also minimize the rhel-only patches to the bare minimum.
    Resolves: rhbz#1881854


author: Bhupesh Sharma <bhsharma@redhat.com> - 7.2.9-2
changelog:
  - Fix the sources file to add gdb-7.6 tarball
    [The line was somehow removed when using rhpkg new-sources to
     update the crash tarball location]
    Resolves: rhbz#1881854


author: EL Errata <el-errata_ww@oracle.com> - 7.2.9-2.0.1
changelog:
  - Add lowercase tcr_el1_t1sz [Orabug: 32534240]
  - Drop patches, incompatible with UEK6 kernel [Orabug: 32130905]
  - Remove upstream references


author: EL Errata <el-errata_ww@oracle.com> - 7.3.0-2.0.1
changelog:
  - Fix module string table access violation problem [Orabug 32887589]
  - Add lowercase tcr_el1_t1sz [Orabug: 32534240]
  - Drop patches, incompatible with UEK6 kernel [Orabug: 32130905]
  - Remove upstream references


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.0-3
changelog:
  - Fix for "sched: Change task_struct::state"
  - Fix for "sched: move CPU field back into thread_info if THREAD_INFO_IN_TASK=y"
  - Fix live debugging with lockdown=integrity
  - Fix 'waitq' command for Linux 4.13 and later kernels
  - Fix for "kmem -s|-S" option on Linux 5.7 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-4
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for "timer -r" option to display all the per-CPU clocks


author: Brian Maly <brian.maly@oracle.com> 8.0.0-2.0.1
changelog:
  - Reworked 0007-bt-x86_64-filter-out-idle-task-stack.patch
  - Reworked lzo_snappy_zstd.patch
  - Reworked rhel8_build.patch
  - Reworked 0008-bt-arm64-add-support-for-bt-n-idle.patch
  - Dropped sbitmapq patches
  - Rebased src tarballs: crash-8.0.0.tar.gz, gdb-10.2.tar.gz [Orabug: 33858562]


author: <brian.maly@oracle.com> 8.0.1-1.0.1
changelog:
  - Reformat rhel8_build.patch
  - Reformat lzo_snappy_zstd.patch
  - Reformat 0007-bt-x86_64-filter-out-idle-task-stack.patch
  - Reformat 0008-bt-arm64-add-support-for-bt-n-idle.patch
  - Rebase to 8.0.1 [Orabug: 34692063]
  - Enable zstd compression [Orabug: 34475766]


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-5
changelog:
  - Update to the latest upstream commit 47216437e79a
  - ("Fix "net" command on kernel configured with CONFIG_IPV6=m")


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.2-8
changelog:
  - arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  - Fix invalid structure size error during crash startup on ppc64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.5.1-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.5.1
    Resolves: rhbz#1851747


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.6.0-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.6.0
    Resolves: rhbz#1903465


author: Lianbo Jiang <lijiang@redhat.com> - 1.6.3-1
changelog:
  - Rebase to upstream crash-gcore-command-1.6.3
  - Fix memory allocation failure issue
  - Resolves: rhbz#2054066


author: Tao Liu <ltao@redhat.com> - 1.6.3-2
changelog:
  - Rebase to upstream crash-gcore-command-1.6.3
  - Fix memory allocation failure issue
  - Resolves: rhbz#2060355


author: Dave Anderson <anderson@redhat.com> - 1.0.3-2.el7
changelog:
  - Add RPM_OPT_FLAGS to gcc line in ptdump.mk
    Resolves: rhbz#1450708
  - Set gdb scope to get appropriate ring_buffer structure
    Resolves: rhbz#1451181


author: Dave Anderson <anderson@redhat.com> - 1.0.3-5
changelog:
  - ptdump: fix build warning: warning: this ‘if’ clause does not guard
  - ptdump: fix failure: ptdump: invalid size request: 0 type: "read page for write" 
  - ptdump: fix heap memory and fd leak when fault happens
    Resolves: rhbz#1786497


author: Lianbo Jiang <lijiang@redhat.com> - 1.0.7-2
changelog:
  - Fix for "current buffer not found"
  - Fix for "invalid kernel virtual address: 0  type: struct topa_entry"
  - Fix for "invalid ring_buffer"
    Resolves: rhbz#1838927


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.11.0-2
changelog:
  - Consistently produce valid URLs by prepending protocol. (RhBug:1632121)
  - modifyrepo_c: Prevent doubling of compression (test.gz.gz) (RhBug:1639287)
  - Correct pkg count in headers if there were invalid pkgs (RhBug:1596211)
  - Add support for modular errata (RhBug:1656584)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.11.0-3
changelog:
  - Backport patch to switch off timestamps on documentation in order to remove
    file conflicts (RhBug:1738788)


author: Ales Matej <amatej@redhat.com> - 0.15.1-1
changelog:
  - Update to 0.15.1
  - Allow pip to see installation of python3-createrepo_c
  - Imporove documentation
  - Remove dependency on deltarpm in favour of drpm
  - Obsolete createrepo on all Fedoras again (RhBug:1702771)
  - Fix issue with createrepo_c hanging at the end (RhBug:1714666)
  - Don't include packages with forbidden control chars in repodata
  - Depend on the appropriate minimum version of libmodulemd
  - Add --pkgorigins mode for Koji
  - Prevent exiting with 0 if errors occur while finalizing repodata.
  - Add support for reading and merging module metadata
  - Update --keep-all-metadata to keep all additional metadata, not just updateinfo and groupfile (RhBug:1639287)
  - mergerepo_c: Add support for --koji simple mode
  - Fix generating corrupted sqlite files (RhBug: 1696808)
  - Do not obsolete createrepo on Fedora < 31
  - mergerepo_c: check if nevra is NULL and warn user about src.rpm naming
  - Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past
  - Enhance support of zchunk
  - Support of zchunk
  - [spec] Fix ldconfig for rhel <= 7
  - Fix "CR_DELTA_RPM_SUPPORT" redefined warnings
  - Set to build against Python 3 by default
  - Update README
  - Add mergerepo_c --repo-prefix-search and --repo-prefix-replace.
  - Fix missing packages in mergerepo_c in case multiple VR exists for single pkg in repo.


author: Ales Matej <amatej@redhat.com> - 0.15.1-2
changelog:
  - Add reboot_suggested to UpdateRecord (RhBug:1772466)
  - Explicitly output boolean values for updateinfo.xml (RhBug:1772466)
  - Fix modifyrepo_c with modules.yaml as a symbolic link (RhBug:1776399)


author: Ales Matej <amatej@redhat.com> - 0.15.10-1
changelog:
  - Update to 0.15.10
  - New option --recycle-pkglist for --update mode
  - Add restart_suggested field to updatecollectionpackage in updateinfo.xml
  - Add relogin_suggested field to updatecollectionpackage in updateinfo.xml (Rhbug:1779751)
  - Export all changelog entries to other.xml in compatibility mode
  - Enhance error handling when locating repositories (RhBug:1762697)
  - Clean up temporary .repodata on sigint
  - Support issued date in epoch format set by Python API (RhBug:1779751)
  - Allow parsing of xml repodata from string via new API functions (RhBug:1804308)
  - Fix a bug when setting updateCollectionModule (RhBug:1821781)


author: Nicola Sella <nsella@redhat.com> - 0.16.2-1
changelog:
  - Update to 0.16.2
  - Add module metadata support to createrepo_c (RhBug:1795936)
  - Fix various memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-4
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:1992209)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Jindrich Novy <jnovy@redhat.com> - 3.15-3
changelog:
  - add Requires: criu-libs = %{version}-%{release} in criu-devel
  - add gating tests
  - Related: #1934415


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 8.3.1-1.0.7
changelog:
  - Backport of upstream patch:
    5bcc0fa05ef713594f6c6d55d5c837e13a9c9803 - Use expected insn for BPFNOP.
  - Reviewed-by: David Faust <david.faust@oracle.com>


author: David Faust <david.faust@oracle.com> - 8.4.1-1.0.1
changelog:
  - Forward-port to gcc 8.4.1
  - Fix ICE reported in Orabug 33249606 by backporting fix for upstream PR85401
  - Add CTF/BTF support to match OL8 GCC
  - Backport the following BPF bug-fixes from upstream:
    + 0a662e103e9 bpf: align function entry point to 64 bits
    + 886b6c1e8af bpf: allow BSS symbols to be global symbols
    + c3a0f537391 bpf: generate indirect calls for xBPF
    + 7c8ba5da80d bpf: use xBPF signed div,mod insns when available
    + 4f0f696fea1 bpf: correct zero_extend output_templates
  - Add BPF CO-RE support
  - Add BPF -mcpu and related feature options
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 8.4.1-1.0.3
changelog:
  - Backport the following fixes from upstream:
    + 1848fbf0546 ctfc: Free CTF container elements in ctfc_delete_container ()
    + ae2df1a347f ctf: Do not warn for CTF not supported for GNU GIMPLE
    + d6a87d96d74 debug/102507: ICE in btf_finalize when compiling with -gbtf
  - Remove BPF CO-RE support.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-1.0.1
changelog:
  - New cross based on GCC 11
  - Add BPF CO-RE support
  - Enable building aarch64 cross
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-2.0.1
changelog:
  - Add the following from gcc-toolset-11-gcc:
    Tue Jan 18 2022 Qing Zhao <qing.zhao@oracle.com>
    + Add more fixes for -ftrivial-auto-var-init support from GCC12
  - Reviewed-by: Qing Zhao  <qing.zhao@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-3.0.1
changelog:
  - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
    PR104550 and PR102276.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-4.0.1
changelog:
  - Sync with gcc-toolset-11-gcc version 11.2.1-9.1.0.3
  - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
    using the following upstream commits (Indu Bhagat):
      613a6fca75156aadc2e79d78a23e547d39762c1e,
      d0b00e74bf59c73b79471bbe9de19373b8661e20, and
      d634c5d7c78c6ec0fa39d96984460475564519c8
  - Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-5.0.2
changelog:
  - CVE-2023-4039 mitigation.
    Orabug 35752004.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.4.1-3.0.1
changelog:
  - Rename packages and binaries to include gcc_major version number
    and avoid collisions with other cross-gcc packages.
  - Sync with gcc-toolset-11-gcc version 11.4.1-3.0.1
  - Remove patches for CVE-2023-4039, the fixes are present in updated sources.
  - Remove patches for ampere1, the changes are present in updated sources.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.5.0-2.0.1
changelog:
  - Sync with gcc-toolset-11-gcc version 11.5.0-2.0.1
  - Merge Oracle patches to 11.5.0-2 (Qing Zhao).
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jindrich Novy <jnovy@redhat.com> - 0.15-2
changelog:
  - backport "exec: check read bytes from sync" (gscrivan@redhat.com)
    (https://github.com/containers/crun/issues/511)
  - Related: #1888571


author: Jindrich Novy <jnovy@redhat.com> - 1.4.4-1
changelog:
  - update to https://github.com/containers/crun/releases/tag/1.4.4
  - Resolves: #2067577
  - Related: #2001445


author: Ondrej Kozina <okozina@redhat.com> - 2.0.4-1
changelog:
  - Update to cryptsetup 2.0.4.
  - patch: Add RHEL system library paths in configure.
  - patch: Increase default LUKS2 header size to 8 MiBs.
  - patch: update tests to be compatible with larger headers.
  - Set default format to LUKS2.
  - Cleanup changelog.
  - Resolves: #1564540 #1595257 #1595266 #1595881 #1600164


author: Ondrej Kozina <okozina@redhat.com> - 2.0.4-2
changelog:
  - patch: fix device alignment bug when processing hinted
    value by device topology info.
  - Resolves: #1614219


author: Ondrej Kozina <okozina@redhat.com> - 2.0.6-1
changelog:
  - Update to cryptsetup 2.0.6
  - Enables all supported metadata sizes in LUKS2 validation code.
  - Resolves: #1653383


author: Ondrej Kozina <okozina@redhat.com> - 2.2.0-2
changelog:
  - patch: Fix mapped segments overflow on 32bit architectures.
  - patch: Take optimal io size in account with LUKS2 reencryption.
  - Resolves: #1742815 #1746532


author: Ondrej Kozina <okozina@redhat.com> - 2.2.2-1
changelog:
  - Update to cryptsetup 2.2.2
  - LUKS2 reencryption honors activation flags (one time and persistent).
  - LUKS2 reencryption works also without volume keys put in kernel
    keyring service.
  - Resolves: #1757783 #1750680 #1753597 #1743399

  - Resolves: #1742815 #1746532


author: Ondrej Kozina <okozina@redhat.com> - 2.2.2-1
changelog:
  - Update to cryptsetup 2.2.2
  - LUKS2 reencryption honors activation flags (one time and persistent).
  - LUKS2 reencryption works also without volume keys put in kernel
    keyring service.
  - Resolves: #1757783 #1750680 #1753597 #1743399


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-2
changelog:
  - patch: Fix possible memory corruption in LUKS2 validation
  	 code in 32bit library.
  - Resolves: #1872294


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.7-1
changelog:
  - update to cryptsetup 2.3.7
  - fixes CVE-2021-4122
  - patch: Fix suboptimal optimization in bundled argon2.
  - patch: Fix bogus memory allocation/device read with
           invalid LUKS2 headers
  - patch: Fix typo in luksRepair prompt.
  - Resolves: #2021815 #2022301 #2031859


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-4
changelog:
  - patch: Remove LUKS2 encryption data size restriction.
  - patch: Abort encryption when header and data devices are same.
  - Resolves: #2150254


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-6
changelog:
  - patch: Delegate FIPS mode detection to configured crypto backend
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212772 #2193342


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: Andreas Schneider <asn@redhat.com> - 4.9.1-5
changelog:
  - resolves: #1644327 - Segfault if wrong 'passdb backend' is configured
  - resolves: #1647959 - Segfault in the debug system with hardended build


author: Andreas Schneider <asn@redhat.com> - 4.9.1-6
changelog:
  - resolves: #1642092 - Harden [homes] share export
  - resolves: #1648846 - Fix out of bound array access in ctdb
  - resolves: #1657266 - Fix tmp directory creation in /run


author: Andreas Schneider <asn@redhat.com> - 4.9.1-7
changelog:
  - resolves: #1658690 - Add smbc_setOptionProtocols()
  - resolves: #1658678 - Fix spoolss client operations against Windows


author: Andreas Schneider <asn@redhat.com> - 4.10.4-0
changelog:
  - related: #1638001 - Rebase to Samba version 4.10.4
  - resolves: #1597298 - Build Samba with python3
  - resolves: #1658558 - Add 'net ads leave --keep-account' option
  - resolves: #1669004 - Fix systemd status notifications
  - resolves: #1672167 - Fix printing cache timeout in debug output
  - resolves: #1696525 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1712378 - Fix smbspool CUPS backend
  - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain'


author: Andreas Schneider <asn@redhat.com> - 4.10.4-100
changelog:
  - resolves: #1760824 - Avoid overlinking with librt and libpthread
  - resolves: #1759236 - Fix forest trusts enumeration
  - resolves: #1761719 - Fix CUPS username/password authentication with smbspool


author: Andreas Schneider <asn@redhat.com> - 4.11.2-4
changelog:
  - related: #1754409 - Add patch to avoid overlinking with libnsl and libsocket
  - related: #1754409 - Fix permissions for pidl
  - related: #1754409 - Fix logrotate script
  - related: #1754409 - Add missing README files


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.11.2-10
changelog:
  - resolves: #1790353 - Fix access check in DsRGetForestTrustInformation
  - resolves: #1791209 - Fix CVE-2019-14907


author: Andreas Schneider <asn@redhat.com> - 4.11.2-12
changelog:
  - related: #1781232 - Improve debug output of smbclient
  - resolves: #1794461 - Do not return bogus inode numbers in
                         cli_qpathinfo2()/cli_qpathinfo3() for SMB1
  - resolves: #1794442 - Fix segfault in smbd_do_qfilepathinfo()


author: Sushmita Bhattacharya <sushmita.bhattacharya@oracle.com> - 4.11.2-13.0.1
changelog:
  - Fix issues with join using netbios name [Orabug: 31546649]
  - related : samba bug #14116 - Join using netbios name and realm instead of machine fqdn
  - resolves: samba bug #14396 - Add msDS-AdditionalDnsHostName to the keytab and add net-ads-join dnshostname option
  - resolves: samba bug #14406 - Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC


author: Andreas Schneider <asn@redhat.com> - 4.12.3-1
changelog:
  - resolves: #1666737 - Add a new smbc_readdirplus2() function to libsmbclient
  - resolves: #1842844 - Fix GnuTLS priority list for TLS connections


author: Isaac Boukris <iboukris@redhat.com> - 4.12.3-4
changelog:
  - resolves: #1850980 - Add "additional dns hostname" to keytab
  - resolves: #1850981 - Add net-ads-join dnshostname=fqdn option


author: Andreas Schneider <asn@redhat.com> - 4.12.3-5
changelog:
  - resolves: #1823612 - Fix segfault in 'net ads dns gethostbyname'
  - resolves: #1792553 - Fix 'net ads join createcomputer=OU'


author: Andreas Schneider <asn@redhat.com> - 4.12.3-7
changelog:
  - resolves: #1855711 - Fix 'require_membership_of' documentation in
                         pam_winbind manpage


author: Andreas Schneider <asn@redhat.com> - 4.12.3-9
changelog:
  - related: #1817557 - Move DECRPC mdssvc data files to correct package
  - resolves: #1856676 - Fix lookuprids in winbind


author: Andreas Schneider <asn@redhat.com> - 4.13.2-1
changelog:
  - resolves: #1878109 - Rebase Samba to version 4.13.2
  - resolves: #1872833 - Add samba-winexe subpackage
  - resolves: #1891688 - Fix CVE-2020-14323
  - resolves: #1892633 - Fix CVE-2020-14318
  - resolves: #1892639 - Fix CVE-2020-14383
  - resolves: #1879835 - Fix CVE-2020-1472
  - resolves: #1888990 - Update smb.conf manpages to describe how to apply
                         config changes.
  - resolves: #1869702 - Fix %U substitution for 'valid users' option
  - resolves: #1818038 - Improve FIPS compliance


author: Andreas Schneider <asn@redhat.com> - 4.13.2-2
changelog:
  - related: #1869702 - Fix spoolss crash
  - resolves: #1896736 - Fix name lookups of FreeIPA users
  - resolves: #1899113 - Fix DFS links


author: Andreas Schneider <asn@redhat.com> - 4.13.3-3
changelog:
  - resolves: #1924615 - Fix a memcache bug when cache is full
  - resolves: #1924571 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.13.3-4
changelog:
  - resolves: #1964314 - Fix ldconfig warning about libsmbldap.so.2
  - resolves: #1964398 - Fix smbd trying to delete files with wrong permissions
  - resolves: #1969831 - Fix memory leak in RPC server


author: Andreas Schneider <asn@redhat.com> - 4.14.4-0
changelog:
  - related: rhbz#1944657 - Update to version 4.14.5
  - resolves: rhbz#1969787 - Fix memory leak in RPC server
  - resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
  - resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
  - resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
  - resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
  - resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message


author: Andreas Schneider <asn@redhat.com> - 4.14.4-4
changelog:
  - resolves: rhbz#2021163
    Fix CVE-2016-2124
  - resolves: rhbz#2021167
    Fix CVE-2021-23192
  - resolves: rhbz#2021171
    Fix CVE-2020-25717


author: Andreas Schneider <asn@redhat.com> - 4.14.5-5
changelog:
  - resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
  - related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'


author: Andreas Schneider <asn@redhat.com> - 4.14.5-9
changelog:
  - resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
  - resolves: rhbz#2046160 - Fix possible segfault while joining a domain
  - resolves: rhbz#2046152 - Fix CVE-2021-44142


author: Andreas Schneider <asn@redhat.com> - 4.14.4-2
changelog:
  - resolves: rhbz#1944657 - Update to version 4.14.4
  - resolves: rhbz#1949445 - Fix CVE-2021-20254
  - resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
  - resolves: rhbz#1908506 - Fix creating the gencache user directory
  - resolves: rhbz#1901029 - Build the vfs_io_uring module


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-0
changelog:
  - Update to Samba 4.15.5
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2046127 - Fix CVE-2021-44141
  - resolves: rhbz#2046153 - Fix CVE-2021-44142
  - resolves: rhbz#2044404 - Printing no longer works on Windows 7
  - resolves: rhbz#2043154 - Fix systemd notifications
  - resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-1
changelog:
  - resolves: #1995849 - [RFE] Change change password change prompt phrasing
  - resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Andreas Schneider <asn@redhat.com> - 4.15.5-5
changelog:
  - resolves: rhbz#2064325 - Fix 'create krb5 conf = yes` when a KDC has a
                             single IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-8
changelog:
  - resolves: rhbz#2079303 - Fix username map for unix groups
  - resolves: rhbz#2079299 - PAM Kerberos authentication fails with a clock skew error
  - resolves: rhbz#2079304 - Fix UPNs handling in lookup_name*() calls


author: EL Errata <el-errata_ww@oracle.com> - 4.15.5-10.0.1
changelog:
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.2-1
changelog:
  - resolves: rhbz#2013596 - Rebase to version 4.15.2
  - resolves: rhbz#1999294 - Remove noisy error message in winbindd
  - resolves: rhbz#1958881 - Don't require winbind being online for krb5 auth
                             with one-way trusts
  - resolves: rhbz#2019461 - Fix deleting directories with dangling symlinks


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013596 - Rebase to version 4.15.3
  - resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-0
changelog:
  - Update to Samba 4.15.4
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2039153 - Fix CVE-2021-20316
  - resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
  - resolves: rhbz#2039157 - Fix CVE-2021-43566
  - resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
  - resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
  - resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-6
changelog:
  - resolves: rhbz#2059151 - Fix username map for unix groups
  - resolves: rhbz#2065212 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-0
changelog:
  - related: rhbz#2077468 - Rebase Samba to 4.16.3
  - resolves: rhbz#2106672 - The pcap background queue process should not be stopped
  - resolves: rhbz#2106263 - Fix crash in rpcd_classic
  - resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.4-5
changelog:
  - resolves: rhbz#2170394 - Fix share enum
  - resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
  - resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
  - resolves: rhbz#2170469 - Create package samba-tools


author: EL Errata <el-errata_ww@oracle.com> - 4.16.4-6.0.1
changelog:
  - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34727815]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Andreas Schneider <asn@redhat.com> - 4.17.2-1
changelog:
  - resolves: rhbz#2132051 - Update to version 4.17.2
  - resolves: rhbz#2126174 - Fix CVE-2022-1615
  - resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2132051


author: Pavel Filipenský <pfilipenn@redhat.com> - 4.17.4-0
changelog:
  - related: rhbz#2132051 - Update to version 4.17.4
  - resolves: rhbz#2154370 - Fix CVE-2022-38023
  - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-2
changelog:
  - resolves: rhbz#2169339 - Fix winbind memory leak
  - resolves: rhbz#2152899 - Fix Samba shares not accessible issue


author: Darren Archibald <darren.archibald@oracle.com> - 4.17.5-3
changelog:
  - resolves: rhbz#2223601 - Fix trust relationship between workstation and DC
  - resolves: rhbz#2222895 - Fix CVE-2023-3347


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-1
changelog:
  - resolves: rhbz#2221594 - Fix broken symlink for libwbclient
  - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-0
changelog:
  - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-1
changelog:
  - related: rhbz#2190417 - Update to version 4.18.6
  - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command


author: Mark Will <mark.will@oracle.com> - 4.18.6-2.0.1
changelog:
  - resolves: RHEL-11937
    Fix CVE-2023-3961 - smbd must check the pipename
  - resolves: RHEL-11937
    Fix CVE-2023-4091 - SMB clients can truncate files
  - resolves: RHEL-11937
    Fix CVE-2023-42669 - Remove rpcecho server


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.3-1
changelog:
  - resolves: RHEL-16483 - Update to version 4.19.3
  - resolves: RHEL-11361
              - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-2228  - Logging Format Enhancement
  - resolves: RHEL-1965  - Fix smbget issues with DFS shares
  - resolves: RHEL-2108  - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-2
changelog:
  - Fix error in PREIN scriptlet in rpm package samba-common
  - related: RHEL-16483 - Update to version 4.19.4


author: Darren Archibald <darren.archibald@oracle.com> - 4.19.4-3.0.1
changelog:
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Akshata Konala <akshata.konala@oracle.com> - 4.19.4-4.0.1
changelog:
  - s3: winbindd: winbindd_pam: fix leak in extract_pac_vrfy_sigs [Orabug: 36518285]
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: EL Errata <el-errata_ww@oracle.com> - 4.19.4-5.0.1
changelog:
  - s3: winbindd: winbindd_pam: fix leak in extract_pac_vrfy_sigs [Orabug: 36518285]
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755]


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc3-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc3
  - resolves: #1554753 - Fix CVE-2018-1050
  - resolves: #1617912 - Fix CVE-2018-10858
  - resolves: #1617913 - Fix CVE-2018-10918
  - resolves: #1617914 - Fix CVE-2018-10919
  - resolves: #1617915 - Fix CVE-2018-1139
  - resolves: #1612522 - Manpage fixes


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc5-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc5
  - resolves: #1610909 - Re-enable glubsterfs vfs module
  - resolves: #1624170 - Build with -fstack-protectore-strong if available
  - resolves: #1602685 - Fixed issues found by covscan


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.1-3
changelog:
  - Temporarily remove smbtorture from samba-test due to Python 2 linkage
  - related: #1609661 - samba-test package cannot be installed due to unresolved dependencies


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-21
changelog:
  - 1602469 - fixed covscan issues
  - 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server
  - 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf
  - 1618009 - Enabling cups.path causes high load when jobs are submitted to CUPS
  - 1630805 - Make cups systemd unit files more upstream-like


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-22
changelog:
  - 1622431 - Jobs with multiple files don't complete when backend fails
  - CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-30
changelog:
  - 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory disclosure and DoS in scheduler
  - 1774463 - CVE-2019-8696


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-35
changelog:
  - 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-36
changelog:
  - 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)
  - 1689207 - Add failover backend
  - 1833516 - DirtyCleanInterval ignored if there are open client connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39
changelog:
  - 1941437 - cupsd doesn't log job ids when logging into journal
  - 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
  - 1938384 - CUPS doesn't start if sssd starts after cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40
changelog:
  - 1955964 - PreserveJobHistory doesn't work with seconds
  - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-41
changelog:
  - 2006987 - Unauthenticated users can't move print jobs in Web UI
  - 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
  - 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work
  - 1982891 - Printing of banner before PCL file only prints banner
  - 2006591 - Trying to restart and hold a job doesn't work
  - 1811716 - lpr to non-existent printer reports incorrect error


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-46
changelog:
  - 2074684 - lp to a remote server takes a long time
  - 2074736 - CUPS is too chatty about "Removing document files." in debug mode


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-52
changelog:
  - 2217178 - Delays printing to lpd when reserved ports are exhausted
  - 2217283 - The command "cancel -x <job>" does not remove job files
  - 2217955 - Enlarge backlog queue for listen() in cupsd
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-55
changelog:
  - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-56
changelog:
  - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents
  - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp


author: Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-60
changelog:
  - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-13
changelog:
  - 1602470 - covscan fixes from upstream
  - 1632268 - cups-filters needs to obsolete ghostscript-cups and foomatic-filters
  - 1626996 - cups-filters: Sticky EOF behavior in glibc breaks descriptor concatenation using dup2


author: EL Errata <el-errata_ww@oracle.com> - 1.20.0-14.0.1
changelog:
  - header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com)
  - Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-33
changelog:
  - RHEL-19433 Incorrect PS header handling in gstopdf
  - RHEL-16034 pdftopdf results with (N > 1)^2 copies if a file is sent to IPP printer with collate
  - RHEL-13211 redhat-lsb unnecessary pulls in cups and avahi dependencies


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-35
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-6
changelog:
  - SASL password overflow via integer overflow (CVE-2018-16839)
  - fix use-after-free in handle close (CVE-2018-16840)
  - fix bad arethmetic when outputting warnings to stderr (CVE-2018-16842)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-10
changelog:
  - fix SMTP end-of-response out-of-bounds read (CVE-2019-3823)
  - fix NTLMv2 type-3 header stack buffer overflow (CVE-2019-3822)
  - fix NTLM type-2 out-of-bounds buffer read (CVE-2018-16890)
  - xattr: strip credentials from any URL that is stored (CVE-2018-20483)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-12
changelog:
  - double free due to subsequent call of realloc() (CVE-2019-5481)
  - fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)
  - fix TFTP receive buffer overflow (CVE-2019-5436)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-15
changelog:
  - do not crash when HTTPS_PROXY and NO_PROXY are used together (#1873327)
  - libcurl: wrong connect-only connection (CVE-2020-8231)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18
changelog:
  - http: send payload when (proxy) authentication is done (#1918692)
  - curl: Inferior OCSP verification (CVE-2020-8286)
  - libcurl: FTP wildcard stack overflow (CVE-2020-8285)
  - curl: trusting FTP PASV responses (CVE-2020-8284)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18.el8_4.1
changelog:
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
  - disable metalink support to fix the following vulnerabilities
      CVE-2021-22923 - metalink download sends credentials
      CVE-2021-22922 - wrong content via metalink not discarded


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18.el8_4.2
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-19
changelog:
  - make `curl --head file://` work as expected (#1947493)
  - prevent automatic referer from leaking credentials (CVE-2021-22876)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-21
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix TELNET stack contents disclosure (CVE-2021-22898)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
  - disable metalink support to fix the following vulnerabilities
      CVE-2021-22923 - metalink download sends credentials
      CVE-2021-22922 - wrong content via metalink not discarded


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22.el8_6.1
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22.el8_6.4
changelog:
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-24
changelog:
  - fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
  - fix invalid type in printf() argument detected by Coverity


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-25
changelog:
  - setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Craig Guiller <craig.guiller@oracle.com> - 7.61.1-30.el8_8.3
changelog:
  - GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix host name wildcard checking (CVE-2023-28321)
  - rebuild certs with 2048-bit RSA keys


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-31
changelog:
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)


author: Alan Steinberg <alan.steinberg@oracle.com> - 7.61.1-33.5
changelog:
  - cap SFTP packet size sent (RHEL-5485)
  - when keyboard-interactive auth fails, try password (#2229800)
  - unify the upload/method handling (CVE-2023-28322)
  - fix cookie injection with none file (CVE-2023-38546)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.61.1-34
changelog:
  - when keyboard-interactive auth fails, try password (#2229800)
  - cap SFTP packet size sent (RHEL-5311)
  - unify the upload/method handling (CVE-2023-28322)
  - fix cookie injection with none file (CVE-2023-38546)
  - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.61.1-34.el8_10.3
changelog:
  - asyn-thread: create a socketpair to wait on (RHEL-34906)
  - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641)


author: Martin Osvald <mosvald@redhat.com> - 3.0.7-24
changelog:
  - Resolves: #1911689 - Fatal error when running "squatter -r user"
  - Resolves: #1941255 - Wait for network-online target
  - Resolves: #1918780 - "(null)" partitions in ctl_mboxlist


author: Simo Sorce <simo@redhat.com> - 2.1.27-0.4rc7
changelog:
  - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
  - Resolves bz#1618744
  - Fix multilib issue bz#1663120


author: Jeff Moyer <jmoyer@redhat.com> - 67-1.el8
changelog:
  - Rebase to v67.  This brings in the following features:
    - support for the 'security frozen' sysfs attribute
    - support for using pmem as system ram
    - various cleanup and bug fixes
  - Fix load-keys failure in initramfs (Jeff Moyer)
  - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-4.el8
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
    - Fix enable-namespace all reporting errors incorrectly
    - Add support for inject-smart on papr scm
  - Related: bz#2090190 bz#1986185 bz#2040074


author: Jeff Moyer <jmoyer@redhat.com> - 1.4-4
changelog:
  - Get rid of SuSe conditionals (Jeff Moyer)
  - Remove the %check section. (Jeff Moyer)
  - Resolves: rhbz#1580829


author: Jeff Moyer <jmoyer@redhat.com> - 1.4-5.el8
changelog:
  - use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection
  - Resolves: rhbz#1630611


author: Jeff Moyer <jmoyer@redhat.com> - 1.5-1.el8
changelog:
  - rebase to pmdk-1.5, and rename to nvml (Jeff Moyer)
  - broken libpmemcto was removed
  - c++ bindings were moved to a separate project/package
  - Fix library requires to be =n-v-r instead of >= (Jeff Moyer)
  - resolves: rhbz#1488828


author: Jeff Moyer <jmoyer@redhat.com> - 1.6-2.el8
changelog:
  - Add explicit version dependencies
  - Fix up broken link line in build system
  - Related: rhbz#1598527


author: Jeff Moyer <jmoyer@redhat.com> - 1.9.2-1.el8
changelog:
  - Package pmdk version 1.9.2 for stream 1-fileformat-v6-rhel-8.3.1
  - libvmem is no longer packaged as part of pmdk.
  - ppc64le packages are now built
  - Related: rhbz#1524652, rhbz#1780388, rhbz#1854812, rhbz#1860860


author: Martin Pitt <mpitt@redhat.com>
changelog:
  - Drop unpublished -doc package to fix FTBFS rhbz#1640736
  - Add dist-git smoketest rhbz#1625683
  - Move dbus system user creation to correct package rhbz#1634496


author: Kevin Lyons <kevin.x.lyons@oracle.com> -1.12.8-12.0.1
changelog:
  - bus: raise fd limits before dropping privs [Orabug: 31175643]
  - fix netlink poll: error 4 (Zhenzhong Duan)


author: John Mcwalters <john.mcwalters@oracle.com> - 1.12.8-12.0.2.el8_4.2
changelog:
  - rebuild bumping release [Orabug 32849538]
  - bus: raise fd limits before dropping privs [Orabug: 31175643]
  - fix netlink poll: error 4 (Zhenzhong Duan)


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-22
changelog:
  - Use hangup signal instead of termination signal to
    kill sesssion monitoring script to appeach tcsh.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-23
changelog:
  - Address race for very short running sessions in SSH
    session monitoring script.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1.12.8-25
changelog:
  - Ensure only one dbus-daemon is spawned for all shells sharing
    a single connection.
    Resolves: #2189201


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1
changelog:
  - Turn 'dbus' package into 'dbus-daemon' package, but keep 'dbus' for
    compatibility around and make it pull in the new 'dbus-daemon' package.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1
changelog:
  - Extract 'dbus-common' package from 'dbus-daemon' to provide XML configuration
    and setup files as independent package ready for alternative Message Bus
    implementations to be used.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-2
changelog:
  - Extract 'dbus-tools' package from 'dbus-daemon' to provide all command-line
    utilities independent of the actual message bus. They are valid to be used
    with independent message-bus implementations, so they should not needlessly
    pull in dbus-daemon.


author: David King <amigadave@amigadave.com> - 0.104-1
changelog:
  - Update to 0.104
  - Remove RPATH
  - Remove executable bit from sourced script
  - Move man page to main package and update glob
  - Make the build output more verbose


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-9
changelog:
  - Python 2 binary package renamed to python2-dbus
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-10
changelog:
  - Also add Provides for the old name without %_isa
  - Use %python_provide for the python3 subpackage and drop manual Provide which
    conflicts with %python_provide in the python2 subpackage.


author: Peter Jones <pjones@redhat.com> - 8-1
changelog:
  - Update to dbxtool 8
  - Make a "make coverity" rule to scan the source
    Results at: https://scan.coverity.com/projects/rhboot-dbxtool
  - Don't try to apply anything if PK and KEK aren't enrolled
  - Add --force and --quiet for the PK/KEK checker, and use them in the
    systemd service.
    Resolves: rhbz#1489942
  - Add a .syntastic_c_config for vim's Syntastic modules
  - Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
  - Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
  - Lots of minor bug fixes gcc -Wextra and friends found.


author: Peter Jones <pjones@redhat.com> - 8-2
changelog:
  - Don't use -f in dbxtool.service; that'll make it do the thing we're
    trying to avoid.
    Resolves: rhbz#1489942


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 8-5.0.1
changelog:
  - Provide DBX for Oracle X7 and X8 [Orabug: 31682440]
  - Apply "fix relop in esl_iter_next()" patch [Orabug: 31682440]


author: Kalev Lember <klember@redhat.com> - 0.27.1-1
changelog:
  - Update to 0.27.1
  - Switch to the meson build system
  - Don't set group tags
  - Remove obsolete rpm scriptlets
  - Fix gtk-doc directory ownership
  - Tighten soname glob


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-2
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Related: #1570569


author: Olivier Fourdan <ofourdan@redhat.com> - 0.28.0-3
changelog:
  - Backport fix for emission of spurious changed signals
  - for all keys at once crashing gnome-shell
  - Resolves: #1666176


author: John McWalters <john.mcwalters@oracle.com> - 0.28.0-4.0.1
changelog:
  - Installing OL 8.3 with GUI on AArch64 (RPi 4 model b) throws bus error when 
    launching Nautilus [Orabug: 33010378]


author: Alejandro Sáez <asm@redhat.com> - 1.6.0-1
changelog:
  - Rebase to 1.6.0
  - Resolves: rhbz#1938071
  - Removes golang-1.15.4-TestStepIntoWrapperForEmbeddedPointer.patch


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22820


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-3
changelog:
  - Skip an additional test as it's breaking in the CI system.
  - Modify the name of the patch.
  - Resolves: RHEL-22820


author: Alejandro Sáez <asm@redhat.com> - 1.3.2-3
changelog:
  - Resolves: rhbz#1758612
    - Resolves: rhbz#1780554
    - Add patch: 1781-pkg-terminal-Fix-exit-status.patch


author: Alejandro Sáez <asm@redhat.com> - 1.3.2-3
changelog:
  - Resolves: rhbz#1758612
  - Resolves: rhbz#1780554
  - Add patch: 1781-pkg-terminal-Fix-exit-status.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-1
changelog:
  - Update Source to 0.7.7
    * Previous patches 0001-0009 & 0016 are included in this commit
  - Add upstream patches since 0.7.7
    * patches 0001-0012 are from upstream commits since 0.7.7
  - Add 0013-libmultipath-print-correct-default-for-delay_-_check.patch
    * fix minor configuration printing issue. posted upstream
  - Add 0014-multipath.conf.5-clarify-property-whitelist-handling.patch
    * clarify property blacklist_excecptions handling in man page
      posted upstream
  - Add 0015-mpathpersist-add-all_tg_pt-option.patch
    * add new all_tg_pt multpiath.conf option. posted upstream
  - Add 0016-libmultipath-remove-rbd-code.patch
    * remove unused rbd code. posted upstream
  - Add 0017-mpathpersist-fix-aptpl-support.patch
    * add ":aptpl" suffix for reservation_key to fix aptpl support.
      posted upstream
  - Add 0018-multipath-don-t-check-timestamps-without-a-path.patch
    * fix multipath null dereference crash. posted upstream
  - Add 0019-libmultipath-fix-detect-alua-corner-case.patch
    * fix alua detection with retain_hardware_handler set to off. posted
      upstream
  - Add 0020-multipath-fix-setting-conf-version.patch
    * multipath wasn't setting the kernel version correctly. posted
      upstream
  - Add 0028-RH-reset-default-find_mutipaths-value-to-off.patch
    * default to RHEL7 and older device detection style. Redhat specific,
      to keep customer experience the same.
  - Rename files
    * Previous patches 0010-0015 & 0017 are now patches 0021-0027
  - Modify 0021-RH-fixup-udev-rules-for-redhat.patch
    * Fix spurious compile warning with redhat compile options
  - Modify 0022-RH-Remove-the-property-blacklist-exception-builtin.patch
    * clarify changes in man page


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-2.gitef6d98b
changelog:
  - Update Source to latest upstream commit
    * Previous patches 0001-0018 are included in this commit
  - Rename files
    * Previous patches 0019-0028 are now patches 0002-0003 & 0012-0019
  - Add 0001-libmultipath-remove-last-of-rbd-code.patch
  - Add 0004-mpathpersist-add-param-alltgpt-option.patch
    * mpathpersist now accepts --param-alltgpt
  - Add 0005-libmutipath-remove-unused-IDE-bus-type.patch
  - Add 0006-multipathd-add-new-protocol-path-wildcard.patch
    * multipathd show paths format now accepts %PATCH for the path protocol/transport
  - Add 0007-libmultipath-add-protocol-blacklist-option.patch
    * You can now use the "protocol" blacklist section parameter to blacklist
      by protocol/transport
  - Add 0008-libmultipath-remove-_filter_-blacklist-functions.patch
  - Add 0009-multipath-tests-change-to-work-with-old-make-version.patch
  - Add 0010-multipath-tests-add-blacklist-tests.patch
  - Add 0011-mpathpersist-add-missing-param-rk-usage-info.patch
  - Refresh 0013-RH-Remove-the-property-blacklist-exception-builtin.patch
  - Modify 0016-RH-add-mpathconf.patch
    * improve usage message and man page
  - Modify device-mapper-multipath.spec
    * updated dependencies


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-1
changelog:
  - Update Source to upstream version 0.7.8
    * Previous patches 0001-0011 are included in this version
  - Rename files
    * Previous patches 0012-0019 are now patches 0007-0014
  - Add 0001-multipath-tweak-logging-style.patch
  - Add 0002-multipathd-check-for-NULL-udevice-in-cli_add_path.patch
  - Add 0003-libmultipath-remove-max_fds-code-duplication.patch
  - Add 0004-multipathd-set-return-code-for-multipathd-commands.patch
  - Add 0005-mpathpersist-fix-registration-rollback-issue.patch
  - Add 0006-libmultipath-timeout-on-unresponsive-tur-thread.patch
    * The above 6 patches have been submitted upstream
  - Resolves: bz #1606947, #1631883


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-2
changelog:
  - Add 0015-libmultipath-free-allocated-value-in-set_int.patch
  - Add 0016-kpartx-fix-new-memory-leak-in-dm_find_part.patch
  - change hardcoded /usr/lib/udev/rules.d to _udevrulesdir
  - Resolves: bz #1606947


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-3
changelog:
  - Add 0017-BZ-1648397-fix-mpp-hwe-handling-when-paths-are-freed.patch
    * Fix crash by deleting in use hardware entry list pointer
  - Add 0018-libmultipath-cleanup-pthread_cleanup_pop-call.patch
    * Fix compiler warning
  - Add 0019-libmultipath-fix-false-removes-in-dmevents-polling-c.patch
    * The above 3 patches have been accepted upstream
  - Resolves: bz #1648397


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-5
changelog:
  - Add 0021-BZ-1673167-Fix-miscounting-active-paths.patch
  - Add 0022-BZ-1673167-ignore-failed-wwid-recheck.patch
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-6
changelog:
  - Fix multipath_conf_syntax CI test
    * need to wait for udev to settle before removing multipath device
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-7.1
changelog:
  - Add 0024-BZ-1723746-check-on-multipathd-without-starting-it.patch
  - Add 0025-BZ-1723746-test-socket-connection-in-non-blocking-mo.patch
  - Update CI testing
  - Resolves: bz #1723746


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-1
changelog:
  - Update Source to upstream version 0.8.0
    * Previous patches 0001-0006 & 0015-0019 are included in this commit
  - Rename files
    * Previous patches 0007-0014 are now 0018-0025
    * Previous patches 0020-0023 are now 0001, 0006 & 0007
  - Add 0002-libmultipath-handle-existing-paths-in-marginal_path-.patch
  - Add 0003-multipathd-cleanup-marginal-paths-checking-timers.patch
  - Add 0004-libmultipath-fix-marginal-paths-queueing-errors.patch
  - Add 0005-libmultipath-fix-marginal_paths-nr_active-check.patch
  - Add 0008-libmutipath-continue-to-use-old-state-on-PATH_PENDIN.patch
  - Add 0009-multipathd-use-update_path_groups-instead-of-reload_.patch
  - Add 0010-multipath.conf-add-missing-options-to-man-page.patch
  - Add 0011-libmultipath-add-get_uid-fallback-code-for-NVMe-devi.patch
  - Add 0012-libmulitpath-cleanup-uid_fallback-code.patch
  - Add 0013-multipathd-handle-changed-wwids-by-removal-and-addit.patch
    * Multipath will now automatically remove and re-add paths if
      their wwid changes
  - Add 0014-multipathd-remove-wwid_changed-path-attribute.patch
  - Add 0015-multipathd-ignore-disable_changed_wwids.patch
    * Since paths are now getting removed and re-added there is
      no need to disable them.
  - Add 0016-multipathd-Don-t-use-fallback-code-after-getting-wwi.patch
  - Add 0017-libmultipath-silence-dm_is_mpath-error-messages.patch
  - Add 0026-RH-Fix-nvme-compilation-warning.patch
  - Add 0027-Fix-systemd-version-detection.patch
    * The above 16 patches have been submitted upstream
  - Add 0028-RH-attempt-to-get-ANA-info-via-sysfs-first.patch
    * Red Hat has a sysfs method to access the ANA state, which isn't
      upstream, and will not be. This will probably go away in the
      future.
  - Resolves: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-2
changelog:
  - Add 0029-BZ-1700451-check-on-multipathd-without-starting-it.patch
  - Add 0030-BZ-1700451-test-socket-connection-in-non-blocking-mo.patch
    * the "multipath -u" call in 62-multipath.rules should no longer hang
      on multipathd startup.
  - Resolves: bz #1700451


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-3
changelog:
  - Add 0031-libmultipath-handle-clock_gettime-failures-in-tur-ch.patch
  - Add 0032-kpartx-fail-if-dup-of-dasd-file-descriptor-fails.patch
  - Add 0033-multipathd-fix-REALLOC_REPLY-with-max-length-reply.patch
  - Add 0034-multipathd-handle-NULL-return-from-genhelp_handler.patch
    * The above 4 patches have been submitted upstream
  - Related: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-4
changelog:
  - Add 0035-BZ-1700911-hwtable-add-Lenovo-DE-series.patch
  - Add 0036-libmultipath-make-vector_foreach_slot_backwards-work.patch
    * Fix for bz #1713459
  - Fixes for bz #1666322 and #1669097 were included in 0.8.0 upstream
    code
  - Resolves: bz #1666322, #1669097, #1700911, #1713459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-1
changelog:
  - Update Source to upstream version 0.8.3
    * This version includes the fixes for bz #1690515, #1703439,
        * Previous patches 0001-0017 & 0031-0036 are included in this version
  - Rename files
    * Previous patches 0018-0026 & 0028 are now 0004-0013
    * 0008-RH-add-mpathconf.patch has been modified to add a
      --property_blacklist option to fix bz #1753729
  - Add 0001-multipathd-warn-when-configuration-has-been-changed.patch
    * Multipath now logs a warning message when the configuration file
      has been changed to fix bz #1750594
  - Add 0002-libmultipath-fix-leak-in-foreign-code.patch
  - Add 0003-Fix-leak-in-mpathpersist.patch
    * The above 3 patches have been submitted upstream
  - Resolves: bz #1690515, #1703439, #1719562, #1747534, #1750594, #1753729


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3
changelog:
  - Rename files
    * Previous patches 0004-0013 are now 0010-0019
    * 0014-RH-add-mpathconf.patch now makes mpathconf default to not
      printing foreign devices (bz #1760709)
  - Add 0004-libmultipath-remove-unused-path-prio_args.patch
  - Add 0005-libmultipath-constify-get_unaligned_be.patch
  - Add 0006-libmultipath-add-missing-hwe-mpe-variable-merges.patch
  - Add 0007-libmultipath-fix-sgio_get_vpd-looping.patch
  - Add 0008-libmultipath-add-vend_id-to-get_vpd_sgio.patch
  - Add 0009-libmultipath-add-code-to-get-vendor-specific-vpd-dat.patch
    * Add the '%g' maps and paths format wildcard, and the vpd_vendor
      multipath.conf devices section parameter. (bz #1527212)
  - Resolves: bz #1527212, #1760709


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3.1
changelog:
  - Add 0020-libmultipath-make-dm_get_map-status-return-codes-sym.patch
  - Add 0021-multipathd-fix-check_path-errors-with-removed-map.patch
    * The above 2 patches fix bz #1856944. multipathd handles external
      device removal better.
  - Resolves: bz #1856944


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3.3
changelog:
  - Add 0022-libmultipath-fix-files-read-from-config_dir.patch
    * Fix for bz #1858993. Only read files ending in .conf
  - Resolves: bz #1858993


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-1
changelog:
  - Update Source to upstream version 0.8.4
    * This version includes the fixes for bz #1768894 & #1821214
    * Previous patches 0001-0009 are included in this version
  - Rename files
    * Previous patches 0010-0019 are now 0011-0020
  - Add 0001-libmultipath-assign-variable-to-make-gcc-happy.patch
  - Add 0002-libmutipath-don-t-close-fd-on-dm_lib_release.patch
  - Add 0003-libmultipath-allow-force-reload-with-no-active-paths.patch
    * make multipath and multipathd reload maps with no active paths
      (bz #1814858)
  - Add 0004-libmpathpersist-depend-on-libmultipath.patch
  - Add 0005-multipath-tools-Makefile-more-dependency-fixes-for-p.patch
  - Add 0006-multipath-tools-Makefile.inc-set-Wno-error-clobbered.patch
  - Add 0007-libmultipath-discovery.c-use-z-qualifier-for-size_t.patch
  - Add 0008-libmultipath-eliminate-more-signed-unsigned-comparis.patch
  - Add 0009-libmultipath-set_uint-fix-parsing-for-32bit.patch
  - Add 0010-multipath-tools-Makefile-add-install-dependency.patch
    * The above 10 patches have been submitted upstream
  - Resolves: bz #1768894, #1814858, #1821214


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-2
changelog:
  - Add 0021-libmultipath-remove-_blacklist_exceptions-functions.patch
  - Add 0022-libmultipath-fix-parser-issue-with-comments-in-strin.patch
  - Add 0023-libmultipath-invert-regexes-that-start-with-exclamat.patch
    * This commit also changes the default devnode blacklist to
      blacklist all devices except scsi, dasd, and nvme.
  - Resolves: bz #1828180


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-3
changelog:
  - Add 0024-libmultipath-make-dm_get_map-status-return-codes-sym.patch
  - Add 0025-multipathd-fix-check_path-errors-with-removed-map.patch
  - Add 0026-libmultipath-make-dm_flush_maps-only-return-0-on-suc.patch
  - Add 0027-multipathd-add-del-maps-multipathd-command.patch
  - Add 0028-multipath-make-flushing-maps-work-like-other-command.patch
  - Add 0029-multipath-delegate-flushing-maps-to-multipathd.patch
  - Add 0030-multipath-add-option-to-skip-multipathd-delegation.patch
    * The above 7 patches fix bz #1845875. Multipath now attempts to
      delegate device removal to multipathd, and multipathd handles
      external device removal better.
  - Add 0031-libmultipath-fix-sysfs-dev_loss_tmo-parsing.patch
    * Fixes bz #1852843
  - Add 0032-kpartx-read-devices-with-direct-IO.patch
    * Fixes bz #1814858
  - Add 0033-kpartx-handle-alternate-bsd-disklabel-location.patch
  - Add 0034-libmultipath-fix-checker-detection-for-nvme-devices.patch
    * fixes bz #1845915
  - Add 0035-Makefile.inc-trim-extra-information-from-systemd-ver.patch
  - Add 0036-kpartx-fix-Wsign-compare-error.patch
  - Resolves: bz #1814858, #1845875, #1845915, #1852843


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-4
changelog:
  - Add 0037-libmultipath-count-pending-paths-as-active-on-loads.patch
    * make udev treat the device as having paths, so it will run kpartx
    * Fixes bz #1846866
  - Resolves: bz #1846866


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-5
changelog:
  - Add 0038-multipath-deal-with-failures-flushing-maps.patch
    * Don't print "fail" if multipath needs to failback to removing
      a device itself.
    * Fixes bz #1845875
  - Modify multipath_conf_syntax CI test
    * It started failing because "multpath -F" can now start multipathd
      via the socket, and the test expected multipathd to not be running
  - Resolves: bz #1845875


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-6
changelog:
  - Add 0039-libmultipath-factor-out-code-to-get-vpd-page-data.patch
  - Add 0040-libmultipath-limit-reading-0xc9-vpd-page.patch
    * Only check for rdac support on configured devices, or devices where
      vpd page 0x00 indicates support for vpd page 0xc9
    * Fixes bz #1877415
  - Add 0041-libmultipath-add-device-to-hwtable.c.patch
    * Add support for Fujitsu Eternus AB/HB
    * Fixes bz #1857429
  - Add 0042-libmultipath-move-fast_io_fail-defines-to-structs.h.patch
  - Add 0043-libmultipath-add-eh_deadline-multipath.conf-paramete.patch
    * Fixes bz #1819897
  - Add 0044-libmultipath-don-t-dlclose-tur-checker-DSO.patch
    * Fixes bz #1875384
  - Add 0045-libmultipath-warn-about-missing-braces-at-end-of-mul.patch
    * Fixes bz #1897530
  - Add 0046-libmultipath-ignore-multipaths-sections-without-wwid.patch
    * Fixes bz #1897815
  - Add 0047-tests-fix-missing-priority-blacklist-test.patch
  - Add 0048-mpathpersist-Fix-Register-and-Ignore-with-0x00-SARK.patch
    * Make mpathpersist Register and Ignore command clear the registration
      with a 0x0 SARK, like sg_persist does.
    * Fixes bz #1894103
  - Add 0049-mpathpersist-update-prkeys-file-on-changing-registra.patch
    * Fixes bz #1900522
    * The above 11 patches have all been submitted upstream
  - Resolves: bz #1819897, #1857429, #1875384, #1877415, #1894103, #1897530
  - Resolves: bz #1897815, #1900522


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-6
changelog:
  - Add 0050-multipathd-Fix-multipathd-stopping-on-shutdown.patch
    * Fixes bz #1892496
  - Add 0051-multipath.conf.5-Improve-checker_timeout-description.patch
    * Fixes bz #1906073
  - Resolves: bz #1892496, #1906073


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-7
changelog:
  - Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
    * Missing part of fix for bz #1897815
  - Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
  - Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
  - Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
  - Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
  - Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
  - Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
    * The above 6 patches fix bz #1920795
  - Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
    * Fixes bz #1913549
  - Resolves: bz #1897815, #1913549, #1920795


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-9
changelog:
  - Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
    * Fixes bz #1925490
  - Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
    * Fixes bz #1921651
  - Resolves: bz #1921651, #1925490


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-10
changelog:
  - Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
    * Fall back to WWID names instead of removing existing device
  - Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
    * make sure to choose a user_friendly_name that isn't in use
    * Fixes bz #1923777
  - Add alias_clash CI test
  - Resolves: bz #1923777


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-11
changelog:
  - Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
    * Fall back to WWID names instead of removing existing device
  - Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
    * make sure to choose a user_friendly_name that isn't in use
    * Fixes bz #1937832
  - Add alias_clash CI test
  - Remove unused multipath.conf
  - Resolves: bz #1937832


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-12
changelog:
  - Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
    * Fixes bz #1946940
  - Resolves: bz #1946940


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-13
changelog:
  - Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
  - Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
  - Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
  - Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
  - Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
  - Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
  - Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
    * add recheck_wwid option
    * Fixes bz #1907904
  - Resolves: bz #1907904


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-17
changelog:
  - Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1984723
  - Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1973592
  - Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
    * Found by coverity
  - Resolves: bz #1973592, #1984723


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-18
changelog:
  - Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
    * Fixes bz #2008101
  - Add 0078-libmulitpath-add-section-name-to-invalid-keyword-out.patch
    * Fixes bz #1918150
  - Resolves: bz #1918150, #2008101


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-20
changelog:
  - Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
  - Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0083-libmultipath-improve-checks-for-set_str.patch
  - Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0085-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
    * Above 8 patches fix bz #1900595
  - Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2009624
  - Resolves: bz #1900595, #2009624, #2021823


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-21
changelog:
  - Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
  - Resolves: bz #1862032


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-23
changelog:
  - Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
    * Partial fix for bz #2058222
  - Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2065468
  - Add 0093-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2058222
  - Resolves bz #2065468, #2058222


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-24
changelog:
  - Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2052054
  - Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0098-libmultipath-make-protocol_name-global.patch
  - Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0102-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement feature from bz #2065477
  - Resolves: bz #2052054, #2065477


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-25
changelog:
  - Add 0105-multipathd-handle-fpin-events.patch
  - Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
  - Resolves: bz #2083077


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-27
changelog:
  - Add 0108-multipathd-Add-missing-ctype-include.patch
  - Add 0109-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119887


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-30
changelog:
  - Add 0111-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0112-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0113-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2110485


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-31
changelog:
  - Add 0114-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133996
  - Add 0115-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133990
  - Resolves: bz #2133990, #2133996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-32
changelog:
  - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2128885
  - Add 0117-libmultipath-cleanup-remove_feature.patch
  - Add 0118-libmultipath-cleanup-add_feature.patch
  - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2022359
  - Resolves: bz #2022359, #2128885


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-33
changelog:
  - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch
    * Fixes bz #2141996
  - Modify tests/multipath_conf_syntax/main.sh
    * fix unrelated test error
  - Resolves: bz #2141996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-34
changelog:
  - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
    * Fixes bz #2126714
  - Cleanup multiple CI tests
  - Resolves: bz #2126714


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-35
changelog:
  - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2155560


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-36
changelog:
  - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166468


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-37
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162537)
  - Resolves: bz #2166468


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-38
changelog:
  - Add 0132-multipathd-make-pr-registration-consistent.patch
  - Add 0133-libmultipath-make-prflag-an-enum.patch
  - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164871


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-39
changelog:
  - Add OSCI tests directory
  - Make kpartx_id installation location relative to /usr/lib/udev/rules.d
  - Resolves: bz #2164871


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-40
changelog:
  - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Add support in multipathd for NVMe to listen for FPIN-Li events and
      mark effected paths as marginal
  - Resolves: RHEL-6677


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searching.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Marian Csontos <mcsontos@redhat.com> - 0.8.5-3
changelog:
  - Remove obsolete pool-inactive option from thin_trim man page.
  - Check input file exists eralier, and prevent writing incorrect metadata.


author: Marian Csontos <mcsontos@redhat.com> - 0.9.0-1
changelog:
  - Update to upstream version 0.9.0.
  - Fix important issues found by static analysis.
  - Update crc32c to version 0.5 supporting non x86 architectures.
  - New tools thin_metadata_pack and thin_metadata_unpack.


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.3.6-33
changelog:
  - Resolves: #1673946 - Change default prefix length to 128
  - Add address-prefix-lenght option to change default value
  - Fix backporting issues


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Don't schedule dleyna_task_processor_t->on_quit_cb more than once
    (RH #1251366)
  - Remove all queues before dleyna_task_processor_t->on_quit_cb is run
    (RH #1205574, #1360209)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.6.0-3
changelog:
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue
  Resolves: #1464902


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Lianbo Jiang <lijiang@redhat.com> - 1:3.2-6
changelog:
  - Updated to the latest upstream(5b3c8e995026 ("Allow overriding
    build settings from the environment"))
  - Resolves: rhbz#1796581


author: Petr Menšík <pemensik@redhat.com> - 2.79-13.1
changelog:
  - Fix various issues in dnssec validation (CVE-2020-25681)
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)


author: Petr Menšík <pemensik@redhat.com> - 2.79-24.1
changelog:
  - Avoid DHCPv6 relayed replies with Client Link-Layer Address (#2169355)
  - Use upstream change for CVE-2022-0934 (#2164859)


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.78-4
changelog:
  - add gcc into buildrequires
  - deliver an extra sysusers.d file to create dnsmasq user/group
  - set CHUSER and CHGRP to dnsmasq in src/config.h


author: Petr Menšík <pemensik@redhat.com> - 2.79-1
changelog:
  - Rebase to 2.79
  - Stop using nettle_hashes directly, use access function (#1548060)
  - Do not break on cname with spaces (#1498667)
  - Require nettle 3.4+
  - Do not own sysusers.d directory, already depends on systemd providing it


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.0-1
changelog:
  - New version
    Resolves: rhbz#1333781
  - Switched to autotools
  - Various spec file cosmetic fixes (e.g. used optflags)


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.8.preview9
changelog:
  - Fix package descriptions for targeting packs
  - Re-generate tarball to remove samples
  - Resolves: RHBZ#1711403


author: Omair Majid <omajid@redhat.com> - 3.0.102-2
changelog:
  - Fix prebuilts leaking into the final build
  - Fix regressions in binary hardering
  - Resolves: RHBZ#1788171


author: Omair Majid <omajid@redhat.com> - 3.1.100-0.4.preview3
changelog:
  - Update to .NET Core Runtime 3.1.0-preview3.19553.2 and SDK 3.1.100-preview3-014645
  - Resolves: RHBZ#1711405


author: Omair Majid <omajid@redhat.com> - 3.1.101-1
changelog:
  - Update to .NET Core Runtime 3.1.1 and SDK 3.1.101
  - Resolves: RHBZ#1794437 - CVE-2020-0602
  - Resolves: RHBZ#1794435 - CVE-2020-0603


author: Omair Majid <omajid@redhat.com> - 3.1.107-1
changelog:
  - Update to .NET Core SDK 3.1.107 and Runtime 3.1.7
  - Resolves: RHBZ#1862590
  - Resolves: RHBZ#1861114


author: Omair Majid <omajid@redhat.com> - 3.1.108-1
changelog:
  - Update to .NET Core SDK 3.1.108 and Runtime 3.1.8
  - Resolves: RHBZ#1874503
  - Resolves: RHBZ#1873454


author: Darren Archibald <darren.archibald@oracle.com> - 3.1.110-1.0.1
changelog:
  - Update patch to support 8.3 (alexander.burmashev@oracle.com)
  - support OL release scheme (alexander.burmashev@oracle.com)


author: EL Errata <el-errata_ww@oracle.com> - 3.1.113-2.0.1
changelog:
  - Update patch to support 8.4 (alexander.burmashev@oracle.com)
  - support OL release scheme (alexander.burmashev@oracle.com)


author: Andrew Slice <aslice@redhat.com> - 3.1.117-1
changelog:
  - Update to .NET SDK 3.1.117 and Runtime 3.1.17
  - Fix renaming of coreclr to dotnet-coreclr
  - Remade the core-setup-hardening patch to incorporate new defaults in the cmake file.
  - Resolves: RHBZ#1978407


author: Omair Majid <omajid@redhat.com> - 3.1.114-2
changelog:
  - Update to .NET SDK 3.1.114 and Runtime 3.1.14
  - Add dotnet-sdk-3.1-source-built-artifacts subpackage
  - Resolves: RHBZ#1946721


author: Omair Majid <omajid@redhat.com> - 3.1.416-4
changelog:
  - Update to .NET SDK 3.1.416 and Runtime 3.1.22
  - Resolves: RHBZ#2011820
  - Resolves: RHBZ#2003077
  - Resolves: RHBZ#2031428


author: EL Errata <el-errata_ww@oracle.com> - 3.1.419-1.0.1
changelog:
  - Add missing Oracle Linux Runtime IDs
  - Update to .NET SDK 3.1.417 and Runtime 3.1.23
  - Resolves: RHBZ#2060566


author: EL Errata <el-errata_ww@oracle.com> - 3.1.105-2.0.1.el8_2
changelog:
  - Update patch to support 8.2 (alexander.burmashev@oracle.com)
  - support OL release scheme (alexander.burmashev@oracle.com)


author: Omair Majid <omajid@redhat.com> - 3.1.107-1
changelog:
  - Update to .NET Core Runtime 3.1.7 and SDK 3.1.107
  - Resolves: RHBZ#1862593
  - Resolves: RHBZ#1861113


author: Andrew Slice <andrew.slice@redhat.com> - 5.0.205-1
changelog:
  - Update to .NET SDK 5.0.205 and Runtime 5.0.8
  - Added a patch to remove references to the tests directory from other patches.
  - Resolves: RHBZ#1980412


author: Omair Majid <omajid@redhat.com> - 5.0.202-2
changelog:
  - Update to .NET SDK 5.0.202 and Runtime 5.0.5
  - Create -source-built-artifacts subpackage
  - Resolves: RHBZ#1947600


author: EL Errata <el-errata_ww@oracle.com> - 5.0.207-3.0.1
changelog:
  - Support AArch64 on Oracle Linux [Orabug: 32738620]
  - Include new Oracle Linux runtime IDs
    Add 1000-Add-missing-OL-RIDs.patch


author: Omair Majid <omajid@redhat.com> - 5.0.209.1-1
changelog:
  - Update to .NET SDK 5.0.209 and Runtime 5.0.12
  - Resolves: RHBZ#2024319
  - Resolves: RHBZ#2011058
  - Resolves: RHBZ#2003078


changelog:
  - Support AArch64 on Oracle Linux [Orabug: 32738620]
  - Add missing Oracle RIDs

author:
  Alex Burmashev <alexander.burmashev@oracle.com> 6.0.0-0.6.28be3e9a006d90d8c6e87d4353b77882829df718.0.1


author: Alex Burmashev <alexander.burmashev@oracle.com> - 6.0.101-2.0.2
changelog:
  - Build all packages on source-build even when in servicing
  - Use versioned buildrequires for build to always pass


author: John McWalters <john.mcwalters@oracle.com> - 6.0.121-4.0.1
changelog:
  - Add missing Oracle Linux Runtime IDs
  - Temporarily add additional 8.8 and 9.3 Runtime IDs
  - Add srict buildrequires on 6.0.121-1.0.1 for build to pass


author: Omair Majid <omajid@redhat.com> - 6.0.100-1
changelog:
  - Fix build against clang 13
  - Resolves: RHBZ#2003061
  - Resolves: RHBZ#2015536
  - Resolves: RHBZ#2014666


author: EL Errata <el-errata_ww@oracle.com> - 7.0.100-0.2.rc1.0.1
changelog:
  - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 7.0.117-1.0.1
changelog:
  - Update to .NET SDK 7.0.117 and Runtime 7.0.17
  - Port Revert "Disable implicit rejection for RSA PKCS#1 (#95217) patch


author: Alan Steinberg <alan.steinberg@oracle.com> - 7.0.108-1.0.1
changelog:
  - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]
  - Update to .NET SDK 7.0.108 and Runtime 7.0.8


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.3
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-2958


author: Alex Burmashev <alexander.burmashev@oracle.com> - 8.0.102-2.0.1
changelog:
  - Update to .NET SDK 8.0.102 and Runtime 8.0.2
  - Add -dbg subpackages for symbol files
  - Resolves: RHEL-23070


author: Apoorva Eliza John <apoorva.eliza.john@oracle.com> - 8.0.102-2.0.2
changelog:
  - Backported patch for Disabling implicit rejection for RSA PKCS#1v1.5 decryption [Orabug: 36362910]


author: Omair Majid <omajid@redhat.com> - 2.1.504-1
changelog:
  - Update to .NET Core Runtime 2.1.8 and SDK 2.1.504
  - Sync with Fedora copr spec file
  - Resolves: RHBZ#1646713


author: Omair Majid <omajid@redhat.com> - 2.1.516-1
changelog:
  - Update to .NET Core SDK 2.1.516 and Runtime 2.1.20
  - Resolves: RHBZ#1851971
  - Resolves: RHBZ#1856937


author: Omair Majid <omajid@redhat.com> - 2.1.519-1
changelog:
  - Update to .NET Core SDK 2.1.519 and Runtime 2.1.23
  - Drop patches merged upstream
  - Resolves: RHBZ#1884080


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-3
changelog:
  - fix global ACL directory configuration search path (#1630383)
  - update first/last_valid_gid range patch (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-7
changelog:
  - do not print error message when restorecon is not present 
    during install (#1626395)
  - change default config to use minimal UID = 1000 (#1630410)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.36-10
changelog:
  - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
    when scanning data in quoted strings, leading to out of bounds heap
    memory writes (#1741788)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.34-1
changelog:
  - dovecot updated to 2.2.34, pigeonhole updated to 0.4.22
  - fixes CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be reached
    and the process restarted. This happens only if Dovecot config has
    local_name { } or local { } configuration blocks and attacker uses
    randomly generated SNI servernames.
  - fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
    leak memory contents to attacker. For example, these memory contents
    might contain parts of an email from another user if the same imap
    process is reused for multiple users.
  - fixes CVE-2017-15132: Aborted SASL authentication leaks memory in login
    process.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-3
changelog:
  - fix CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS (#1840354)
  - fix CVE-2020-10958 dovecot: command followed by sufficient number of newlines
    leads to use-after-free (#1840357)
  - fix CVE-2020-10967 dovecot: sending mail with empty quoted localpart
    leads to DoS (#1840356)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-4
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-6
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55219)
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55206)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-2.2
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866755)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866760)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866767)


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-8
changelog:
  - Align with DPDK patches inside OVS FDP 18.06
  - Enable BNXT, MLX4, MLX5, NFP and QEDE PMDs
  - Backport "net/mlx: fix rdma-core glue path with EAL plugins" (only needed on
    DPDK package)


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-12
changelog:
  - Use python3 packages on RHEL8 and Fedora
  - Remove dpdk-pmdinfo (#1494462)
  - Backport "net/mlx5: fix build with rdma-core v19"


author: Timothy Redaelli <tredaelli@redhat.com> - 18.11-1
changelog:
  - Updated to DPDK 18.11 (#1492326):
    - Updated configs
    - Added libmnl-devel BuildRequires for Mellanox


author: Jens Freimann <jfreimann@redhat.com> - 18.11.2-3
changelog:
  - Add fix for wrong pointer calculation to fix Covscan issue
  - https://cov01.lab.eng.brq.redhat.com/covscanhub/task/135452/log/added.html


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Livy Ge <livy.ge@oracle.com> - 049-10.git20190115.0.1
changelog:
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Alex Burmashev <alexander.burmashev@oracle.com> - 049-10.git20190115.0.4
changelog:
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]


author: Lukas Nykryn <lnykryn@redhat.com> - 048-34.git20180814
changelog:
  - TEST-50-MULTINIC/test.sh: fixed server startup
  - kernel-network-modules: add vlan kernel modules
  - test: fixed KVERSION and qemu backwards compatiblity
  - TEST-70-BONDBRIDGETEAMVLAN: load vlan kernel modules
  - test: also output server.log on failure
  - TEST-50-MULTINIC: s/--device/-device
  - enable parallel test suite
  - TEST-31-ISCSI-MULTI: use different port than TEST-30
  - load modules earlier for iscsi via dhcp root-path
  - test/{TEST-50-MULTINIC,TEST-70-BONDBRIDGETEAMVLAN}: use qemu-3.0 syntax
  - multipath-shutdown: fix shell syntax
  - dracut.spec: remove warpclock from z-series, not the other way round
  - iscsi: remove $() where it does not fit
  - mdraid: better handling of various UUID formats
  - dracut-functions: fix the word splitting
  - Add gpio and pinctrl drivers for arm*/aarch64
  - mdraid/parse-md.sh: also accept rd.md.uuid with ":"
  - spec: sort modules
  - spec: warpclock is not available on s390 or s390x
  - dracut.spec: Remove needless use of defattr
  - dracut.spec: add 00warpclock dracut module
  - Bring back 51-dracut-rescue-postinst.sh
  - lsinitrd: update help message and man page
  - lsinitrd: optimize performance when handling multiple files
  - lsinitrd: allow to only unpack certain files
  - NEWS: forgot to update the latest version
  - 00warpclock: Set correct timezone
  - dracut-install: skip modules with empty path
  - Record loaded kernel modules when hostonly mode is enabled
  - modules.d/95fcoe/cleanup-fcoe.sh: chmod +x
  - TEST-40-NBD: disable for now
  - TEST-30-ISCSI: readd multiple target test


author: Natalya Naumova <natalya.naumova@oracle.com> - 049-10.git20190115.0.7.1
changelog:
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738] (Fred Herard)
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203] (Petr Benes)
  - Fix dhclient classless static route parsing [Orabug: 28881975] (Frank Deng)
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620] (Alex Burmashev)
  - Update list of necessary files after squashfs execution [Orabug: 29864620] (Alex Burmashev)
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195] (Alex Burmashev)
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988] (Alex Burmashev)
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156] (Alex Burmashev)
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713] (Alex Burmashev)
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-127.git20210107
changelog:
  - match the whole string
  - match simplified rd.zfcp format too
  - base: hardcode rhel red
  - 95iscsi:
  - iscsi: fix error messages with iSCSI root
  - 95nvmf: add module for NVMe-oF
  - Write dns values passed by ip argument to ifcfg-* files
  - dracut.sh: added help for --regenerate-all
  - 35network-legacy: fix classless static route parsing
  - network: fix glob matching ipv6 addresses
  - dasd: only install /etc/dasd.conf if present
  - 90multipath: install kpartx's 11-dm-parts.rules
  - network/net-lib.sh: Configure all iBFT interfaces
  - Change the order of NFS servers during the boot NFS server
  - install: string_hash_func should not be fed with NULL
  - Consider also drm_dev_register when looking for gpu driver
  - fix graphics startup failure with the rhgb paramter in
  - Configure the runner for team interfaces
  - network-manager: set kernel hostname from the command line
  - 95nvmf: add NVMe over TCP support
  - 95fcoe: Add the rd.nofcoe option to disable the FCoE module
  - 04watchdog: split the watchdog module install
  - dracut.spec: include the 04watchdog-modules module
  - 95fcoe: ensure needed modules are installed


author: Lukas Nykryn <lnykryn@redhat.com> - 049-131.git20210107
changelog:
  - 00systemd: when putting systemd-vconsole-setup.service as a
  - 51-dracut-rescue.install: Don't use BLS fragment shipped by


author: Lukas Nykryn <lnykryn@redhat.com> - 049-133.git20210112
changelog:
  - 95fcoe: Fix startup when fcoe module is included
  - Fix pre-trigger stage by replacing exit with return in


author: EL Errata <el-errata_ww@oracle.com> - 049-135.git20210121.0.1
changelog:
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-151.git20210719
changelog:
  - Drop 51-dracut-rescue-postinst.sh entirely
  - fix(fips): add dh and ecdh ciphers
  - 35network-legacy: discard pointless RTNETLINK message
  - 95fcoe: don't install if there is no FCoE hostonly devices
  - 95nfs: set correct ownership and permissions for statd 
  - fix(dracut.sh): harden dracut against GZIP environment
  - fix(multipath): stop multipath before udev db cleanup
  - fix(dracut-functions): implement a cache for get_maj_min
  - fix(dracut-functions): get_maj_min without
  - fix(fcoe): rd.nofcoe=0 should disable fcoe
  - fix(fcoe): rename rd.nofcoe to rd.fcoe
  - fix(mdraid): remove offroot
  - fix(mdraid): add grow continue service
  - net-lib.sh: support infiniband network mac addresses
  - 95nvmf: add nvmf-autoconnect script


author: Lukas Nykryn <lnykryn@redhat.com> - 049-188.git20210802
changelog:
  - dracut-functions: fix botched backport
  - squash: unsquash the root image instead of mounting it on
  - 99squash: fail early if can't install require modules in
  - 99squash: Don't hardcode the squash sub directories
  - 99squash: improve pre-requirements check
  - Fixed some SUSE specific typos and outputs
  - 99squash: simplify the code
  - 99squash: Check require module earlier, and properly
  - fix(99squash): use kernel config instead of modprobe to check
  - kill bogus comment
  - busybox: simplify listing of supported utilities
  - fix: use find_binary
  - fix: shellcheck for modules.d/99squash/setup-squash.sh
  - fix: shellcheck for modules.d/99squash/clear-squash.sh
  - fix: shellcheck for modules.d/99squash/module-setup.sh
  - fix(squash): this module shouldn't depend on bash
  - refactor(squash): move the post install scripts into the
  - fix: revise squash module checks
  - fix(squash): post install should be the last step before
  - refactor(squash): move all setup code to init-squash.sh
  - feat(squash): install and depmod modules seperately
  - refactor(squash): don't record mount points in text file
  - lsinitrd: list squash content as well
  - refactor(squash): structure in a cleaner way
  - feat(squash): use busybox for early setup if available
  - feat: squash module follow --compress option
  - perf: disable initrd compression when squash module is
  - fix(squash): shellcheck for modules.d/99squash
  - fix(squash): don't mount the mount points if already mounted
  - feat(squash): install umount util
  - fix(squash): create relative symlinks
  - fix(dracut.sh): handle '-i' option to include files beginning
  - fix(dracut.sh): handle symlinks appropriately while using
  - fix(squash): keep ld cache under initdir
  - dracut-functions: backport block_is_* functions
  - fix(squash): fixes related to squash module rebase
  - fix(squash): remove tailing '/' when installing ld.so.conf.d


