# changelog

author: Rafael Jeffman <rjeffman@redhat.com> - 4.8.7-14
changelog:
  - wgi/plugins.py: ignore empty plugin directories
    Resolves: RHBZ#1895910
  - rpcserver: fallback to non-armored kinit in case of trusted domains
    Resolves: RHBZ#1914821
  - pylint: remove unused variable
    Resolves: RHBZ#1914821
  - ipa-kdb: support subordinate/superior UPN suffixes
    Resolves: RHBZ#1914823
  - ad trust: accept subordinate domains of the forest trust root
    Resolves: RHBZ#1914823
  - ipatests: support subordinate upn suffixes
    Resolves: RHBZ#1914823


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.8-3
changelog:
  - Config plugin: return EmptyModlist when no change is applied.
    Resolves: RHBZ#2031825
  - Custodia: use a stronger encryption algo when exporting keys.
    Resolves: RHBZ#2032806
  - ipa-kdb: do not remove keys for hardened auth-enabled users.
    Resolves: RHBZ#2033342
  - ipa-pki-proxy.conf: provide access to /kra/admin/kra/getStatus
    Resolves: RHBZ#2049167
  - Backport latest test fxes in python3 ipatests.
    Resolves: RHBZ#2048509
  - Removed unused patch files that were part of 4.9.8 rebase.


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.8-4
changelog:
  - Don't always override the port in import_included_profiles
    Fixes: RHBZ#2022483
  - Remove ipa-join errors from behind the debug option
    Fixes: RHBZ#2048558
  - Enable the ccache sweep timer during installation
    Fixes: RHBZ#2051575


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.8-5
changelog:
  - ipatests: remove additional check for failed units.
    Resolves: RHBZ#2053024
  - ipa-cldap: fix memory leak.
    Resolves: RHBZ#2032738


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.8-8
changelog:
  - Backport latest test fixes in python3-ipatests
    Resolves: RHBZ#2060841
  - extdom: user getorigby{user|group}name if available
    Resolves: RHBZ#2062379
  - Set the mode on ipaupgrade.log during RPM post snipppet
    Resolves: RHBZ#2061957
  - test_krbtpolicy: skip SPAKE-related tests in FIPS mode
    Resolves: RHBZ#1909630


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.10-1
changelog:
  - Rebase to upstream release 4.9.10
    Remove upstream patches 0002 to 0016 that are part of version 4.9.10
    Remove patches 1101 that is part of version 4.9.10
    Rename patch 0001 to 1002 as it will be used in future RHEL 8 releases
    Add patches 0001 and 0002 to fix build on RHEL 8.7
    Resolves: RHBZ#2079466
    Resolves: RHBZ#2063155
    Resolves: RHBZ#1958777
    Resolves: RHBZ#2068088
    Resolves: RHBZ#2004646
    Resolves: RHBZ#782917
    Resolves: RHBZ#2059396
    Resolves: RHBZ#2092015


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.10-2
changelog:
  - Preserve user: fix the confusing summary
    Resolves: RHBZ#2022028
  - Only calculate LDAP password grace when the password is expired
    Related: RHBZ#782917


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.10-6
changelog:
  - webui: Allow grace login limit
    Resolves: RHBZ#2109243
  - check_repl_update: in progress is a boolean
    Resolves: RHBZ#2117303
  - Disabling gracelimit does not prevent LDAP binds
    Resolves: RHBZ#2109236
  - Set passwordgracelimit to match global policy on group pw policies
    Resolves: RHBZ#2115475


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.12-1
changelog:
  - Rebase ipa to 4.9.12
    Resolves: RHBZ#2196425
  - user or group name: explain the supported format
    Resolves: RHBZ#2150217


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.12-4
changelog:
  - kdb: Use-krb5_pac_full_sign_compat() when available
    Resolves: RHBZ#2176406
  - OTP: fix-data-type-to-avoid-endianness-issue
    Resolves: RHBZ#2218293
  - Upgrade: fix replica agreement
    Resolves: RHBZ#2216551
  - Upgrade: add PKI drop-in file if missing
    Resolves: RHBZ#2215336
  - Use the python-cryptography parser directly in cert-find
    Resolves: RHBZ#2164349
  - Backport test updates
    Resolves: RHBZ#221884


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.12-6
changelog:
  - ipa-kdb: fix error handling of is_master_host()
    Resolves: RHBZ#2214638
  - ipatests: enable firewall rule for http service on acme client
    Resolves: RHBZ#2230256
  - User plugin: improve error related to non existing idp
    Resolves: RHBZ#2224572
  - Prevent admin user from being deleted
    Resolves: RHBZ#1821181
  - Fix memory leak in the OTP last token plugin
    Resolves: RHBZ#2227783


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.12-7
changelog:
  - ipatests: fix test_topology
    Resolves: RHBZ#2232351
  - Installer: activate nss and pam services in sssd.conf
    Resolves: RHBZ#2216532


author: Julien Rische <jrische@redhat.com> - 4.9.13-10
changelog:
  - kdb: apply combinatorial logic for ticket flags (CVE-2024-3183)
    Resolves: RHEL-29927
  - kdb: fix vulnerability in GCD rules handling (CVE-2024-2698)
    Resolves: RHEL-29692


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-12
changelog:
  - Allow the admin user to be disabled
    Resolves: RHEL-34756
  - ipa-otptoken-import: open the key file in binary mode
    Resolves: RHEL-39616
  - ipa-crlgen-manage: manage the cert status task execution time
    Resolves: RHEL-30280
  - idrange-add: add a warning because 389ds restart is required
    Resolves: RHEL-28996
  - PKINIT certificate: fix renewal on hidden replica
    Resolves: RHEL-4913, RHEL-45908


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-13
changelog:
  - Add ipa-idrange-fix
    Resolves: RHEL-56920
  - Unconditionally add MS-PAC to global config on update
    Resolves: RHEL-49437
  - ipatests: Update ipa-adtrust-install test
    Resolves: RHEL-40894
  - Require python-qrcode version 5.3 or later
    Related: RHEL-15090


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-16
changelog:
  - Add a- heck into ipa-cert-fix tool to avoid updating certs if CA is close to expire
    Resolves: RHEL-4941
  - Fix rpminspect's 'patches' warnings
    Resolves: RHEL-22497


author: Julien Rische <jrische@redhat.com> - 4.9.13-3
changelog:
  - ipa-kdb: Detect and block Bronze-Bit attacks
    Resolves: RHEL-9984
  - Fix for CVE-2023-5455
    Resolves: RHEL-12578


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-4
changelog:
  - Improve server affinity for CA-less deployments
    Resolves: RHEL-22283
  - host: update system: Manage Host Keytab permission
    Resolves: RHEL-22286
  - adtrustinstance: make sure NetBIOS name defaults are set properly
    Resolves: RHEL-21938
  - ipatests: Fix healthcheck report when nsslapd accesslog logbuffering is set to off
    Resolves: RHEL-19672


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-5
changelog:
  - kdb: PAC generator: do not fail if canonical principal is missing
    Resolves: RHEL-23630
  - ipa-kdb: Fix memory leak during PAC verification
    Resolves: RHEL-22644
  - Fix session cookie access
    Resolves: RHEL-23622
  - Do not ignore staged users in sidgen plugin
    Resovlves: RHEL-23626
  - ipa-kdb: Disable Bronze-Bit check if PAC not available
    Resolves: RHEL-22313
  - krb5kdc: Fix start when pkinit and otp auth type are enabled
    Resolves: RHEL-4874
  - hbactest was not collecting or returning messages
    Resolves: RHEL-12780


author: Julien Rische <jrische@redhat.com> - 4.9.13-6
changelog:
  - ipa-kdb: Rework ipadb_reinit_mspac()
    Resolves: RHEL-25742
  - ipatests: wait for replica update in test_dns_locations
    Resolves: RHEL-22373
  - ipatests: fix tasks.wait_for_replication() method
    Resolves: RHEL-25708


author: Julien Rische <jrische@redhat.com> - 4.9.13-7
changelog:
  - ipa-kdb: Fix double free in ipadb_reinit_mspac()
    Resolves: RHEL-25742
  - kra: set RSA-OAEP as default wrapping algo when FIPS is enabled
    Resolves: RHEL-12153
  - Vault: improve vault server archival/retrieval calls error handling
    Resolves: RHEL-12153
  - Vault: add support for RSA-OAEP wrapping algo
    Resolves: RHEL-12153


author: Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-8
changelog:
  - rpcserver: validate Kerberos principal name before running kinit
    Resolves: RHEL-26153
  - Vault: add additional fallback to RSA-OAEP wrapping algo
    Resolves: RHEL-28259


author: Thomas Woerner <twoerner@redhat.com> - 4.9.0-0.1.rc1
changelog:
  - Fix requirement for python3-kdcproxy, add no autoreqprov for ipatests sub
    package
    Related: RHBZ#1891832


author: Thomas Woerner <twoerner@redhat.com> - 4.9.0-0.2.rc2
changelog:
  - Upstream pre release FreeIPA 4.9.0rc2
    Related: RHBZ#1891832
  - Synchronize spec file with upstream and Fedora
    Related: RHBZ#1891832
  - Traceback while doing ipa-backup
    Resolves: RHBZ#1901068
  - ipa-client-install changes system wide ssh configuration
    Resolves: RRBZ#1544379
  - ipa-kdb: support subordinate/superior UPN suffixes
    Resolves: RHBZ#1891056
  - KRA Transport and Storage Certificates do not renew
    Resolves: RHBZ#1872603
  - Move where the restore state is marked during IPA server upgrade
    Resolves: RHBZ#1569011
  - Intermittent IdM Client Registration Failures
    Resolves: RHBZ#1812871
  - Nightly test failure in test_acme.py::TestACME::test_third_party_certs
    (updates-testing)
    Resolves: RHBZ#1903025
  - Add IPA RA Agent to ACME group on the CA
    Resolves: RHBZ#1902727


author: Thomas Woerner <twoerner@redhat.com> - 4.9.2-2
changelog:
  - Sync ipatests from upstream to RHEL packages for FreeIPA 4.9 branch
    Resolves: RHBZ#1932289
  - Fix krb5kdc is crashing intermittently on IPA server
    Resolves: RHBZ#1932784


author: Thomas Woerner <twoerner@redhat.com> - 4.9.2-3
changelog:
  - ipa-client-install displays false message
    'sudo binary does not seem to be present on this system'
    Resolves: RHBZ#1939371


author: Thomas Woerner <twoerner@redhat.com> - 4.9.5-1
changelog:
  - Upstream release FreeIPA 4.9.5
    Related: RHBZ#1945038
  - IPA to allow setting a new range type
    Resolves: RHBZ#1688267
  - ipa-server-install displays debug output when --debug output is not
    specified.
    Resolves: RHBZ#1943151
  - ACME fails to generate a cert on migrated RHEL8.4 server
    Resolves: RHBZ#1934991
  - Switch ipa-client to use the JSON API
    Resolves: RHBZ#1937856
  - IDM - Allow specifying permanent logging settings for BIND
    Resolves: RHBZ#1951511
  - Cache LDAP data within a request
    Resolves: RHBZ#1953656
  - ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4
    Resolves: RHBZ#1957768


author: Thomas Woerner <twoerner@redhat.com> - 4.9.6-1
changelog:
  - Upstream release FreeIPA 4.9.6
    Related: RHBZ#1945038
  - Revise PKINIT upgrade code
    Resolves: RHBZ#1886837
  - ipa-cert-fix man page: add note about certmonger renewal
    Resolves: RHBZ#1780317
  - Certificate Serial Number issue
    Resolves: RHBZ#1919384


author: Thomas Woerner <twoerner@redhat.com> - 4.9.6-2
changelog:
  - IPA server in debug mode fails to run because time.perf_counter_ns is
    Python 3.7+
    Resolves: RHBZ#1974822
  - Add checks to prevent assigning authentication indicators to internal IPA
    services
    Resolves: RHBZ#1979625
  - Unable to set ipaUserAuthType with stageuser-add
    Resolves: RHBZ#1979605


author: Thomas Woerner <twoerner@redhat.com> - 4.9.6-3
changelog:
  - man page: update ipa-server-upgrade.1
    Resolves: RHBZ#1973273
  - Fall back to krbprincipalname when validating host auth indicators
    Resolves: RHBZ#1979625
  - Add dependency for sssd-winbind-idmap to server-trust-ad
    Resolves: RHBZ#1982211


author: Thomas Woerner <twoerner@redhat.com> - 4.9.6-5
changelog:
  - Catch and log errors when adding CA profiles
    Resolves: RHBZ#1999142
  - selinux policy: allow custodia to access /proc/cpuinfo
    Resolves: RHBZ#1998129
  - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
    Resolves: RHBZ#2000263
  - ipa migrate-ds command fails to warn when compat plugin is enabled
    Resolves: RHBZ#1999992
  - Backport latest test fixes in python3-ipatests
    Resolves: RHBZ#2000553


author: Michal Ruprich <mruprich@redhat.com> - 3.5-2
changelog:
  - Resolves: #1647413 - iperf3 with option --sctp in client mode fails with error 'iperf3: unrecognized option --sctp'


author: Michal Ruprich <mruprich@redhat.com> - 3.5-4
changelog:
  - Resolves: #1665142 - [RFE] enable SCTP support in iperf3
  - Resolves: #1656429 - option --udp-counters-64bit shown in --help output but not in man page
  - Resolves: #1700497 - [RFE] enable SSL support in iperf3


author: Josef Ridky <jridky@redhat.com> - 1.8.18-10
changelog:
  - Spec clean up
  - Add support to set kg key
  - Fix DDR4 memory issues
  - Increase length of sensor id
  - Enable usb interface by default
  - Fix input options


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-17
changelog:
  - Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-18
changelog:
  - Protect against negative values to memmove that caused
    "ipmitool sol activate" to crash against an IBM DataPower appliance
    (#1951480)
    Cherry-picked from upstream PR#78.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-19
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Phil Sutter <psutter@redhat.com> [4.18.0-2.el8]
changelog:
  - bridge/mdb: fix missing new line when show bridge mdb (Phil Sutter) [1625500]
  - ip-route: Fix segfault with many nexthops (Phil Sutter) [1625358]
  - Update kernel headers (Phil Sutter) [1615915]
  - tc/flower: Add match on encapsulating tos/ttl (Phil Sutter) [1615915]
  - tc/act_tunnel_key: Enable setup of tos and ttl (Phil Sutter) [1615915]
  - iprule: Fix destination prefix output (Phil Sutter) [1623503]
  - ip: Add missing -M flag to help text (Phil Sutter) [1612704]
  - man: ss.8: Describe --events option (Phil Sutter) [1612704]
  - rtmon: List options in help text (Phil Sutter) [1612704]
  - man: rtacct.8: Fix nstat options (Phil Sutter) [1612704]
  - man: ifstat.8: Document --json and --pretty options (Phil Sutter) [1612704]
  - genl: Fix help text (Phil Sutter) [1612704]
  - man: devlink.8: Document -verbose option (Phil Sutter) [1612704]
  - devlink: trivial: Make help text consistent (Phil Sutter) [1612704]
  - bridge: trivial: Make help text consistent (Phil Sutter) [1612704]
  - man: bridge.8: Document -oneline option (Phil Sutter) [1612704]


author: Phil Sutter <psutter@redhat.com> [4.18.0-4.el8]
changelog:
  - iplink_vxlan: take into account preferred_family creating vxlan device (Phil Sutter) [1626321]
  - ip-addrlabel: Fix printing of label value (Phil Sutter) [1639412]
  - bridge: fdb: Fix for missing keywords in non-JSON output (Phil Sutter) [1636532]


author: Phil Sutter <psutter@redhat.com> [4.18.0-5.el8]
changelog:
  - utils: fix get_rtnl_link_stats_rta stats parsing (Phil Sutter) [1626306]
  - uapi: add snmp header file (Phil Sutter) [1626306]
  - macsec: fix off-by-one when parsing attributes (Phil Sutter) [1628428]
  - json: make 0xhex handle u64 (Phil Sutter) [1628428]


author: Phil Sutter <psutter@redhat.com> [4.18.0-6.el8]
changelog:
  - Update kernel headers (Phil Sutter) [1637440]
  - tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Phil Sutter) [1637440]
  - tc: Remove pointless assignments in batch() (Phil Sutter) [1602555]
  - tipc: Drop unused variable 'genl' (Phil Sutter) [1602555]
  - ip-route: Fix parse_encap_seg6() srh parsing (Phil Sutter) [1602555]
  - rdma: Don't pass garbage to rd_check_is_filtered() (Phil Sutter) [1602555]
  - ip-route: Fix for memleak in error path (Phil Sutter) [1602555]
  - rdma: Fix for ineffective check in add_filter() (Phil Sutter) [1602555]
  - devlink: Fix error reporting in cmd_resource_set() (Phil Sutter) [1602555]
  - libnetlink: fix use-after-free of message buf (Phil Sutter) [1602555]
  - libnetlink: don't return error on success (Phil Sutter) [1602555]
  - libnetlink: fix leak and using unused memory on error (Phil Sutter) [1602555]
  - tc: htb: Print default value in hex (Phil Sutter) [1641053]


author: Phil Sutter <psutter@redhat.com> [4.18.0-7.el8]
changelog:
  - ip-route: Fix nexthop encap parsing (Phil Sutter) [1625358]
  - man: ip-route.8: Document nexthop limit (Phil Sutter) [1625358]


author: Phil Sutter <psutter@redhat.com> [4.18.0-11.el8]
changelog:
  - tc: m_tunnel_key: Add tunnel option support to act_tunnel_key (Phil Sutter) [1654761]
  - tc: f_flower: add geneve option match support to flower (Phil Sutter) [1654761]
  - l2tp: Fix printing of cookie and peer_cookie values (Phil Sutter) [1643805]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-12.el8]
changelog:
  - devlink: Add param command support (Andrea Claudi) [1663199]
  - rdma: Fix representation of PortInfo CapabilityMask (Andrea Claudi) [1664694]
  - uapi: update ib_verbs (Andrea Claudi) [1664694]
  - tc: flower: Add support for QinQ (Andrea Claudi) [1615928]
  - ip rule: Add ipproto and port range to filter list (Andrea Claudi) [1678111]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-13.el8]
changelog:
  - ip-xfrm: Respect family in deleteall and list commands (Andrea Claudi) [1656717]
  - Update kernel headers (Andrea Claudi) [1716361]
  - uapi: update bpf header (Andrea Claudi) [1716361]
  - uapi: update headers to 4.20-rc1 (Andrea Claudi) [1716361]
  - bpf: add btf func and func_proto kind support (Andrea Claudi) [1716361]
  - lib/bpf: fix build warning if no elf (Andrea Claudi) [1716361]
  - bpf: initialise map symbol before retrieving and comparing its type (Andrea Claudi) [1716361]
  - Include bsd/string.h only in include/utils.h (Andrea Claudi) [1716361]
  - Use libbsd for strlcpy if available (Andrea Claudi) [1716361]
  - bpf: check map symbol type properly with newer llvm compiler (Andrea Claudi) [1716361]
  - bpf: implement btf handling and map annotation (Andrea Claudi) [1716361]
  - bpf: implement bpf to bpf calls support (Andrea Claudi) [1716361]
  - bpf: remove strict dependency on af_alg (Andrea Claudi) [1716361]
  - bpf: move bpf_elf_map fixup notification under verbose (Andrea Claudi) [1716361]
  - iplink: add support for reporting multiple XDP programs (Andrea Claudi) [1716361]
  - rdma: Document IB device renaming option (Andrea Claudi) [1663228]
  - rdma: Add an option to rename IB device interface (Andrea Claudi) [1663228]
  - rdma: Introduce command execution helper with required device name (Andrea Claudi) [1663228]
  - rdma: Update kernel include file to support IB device renaming (Andrea Claudi) [1663228]
  - libnetlink: Convert GETADDR dumps to use rtnl_addrdump_req (Andrea Claudi) [1716772]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-15.el8]
changelog:
  - netns: make netns_{save,restore} static (Andrea Claudi) [1719759]
  - ip vrf: use hook to change VRF in the child (Andrea Claudi) [1719759]
  - netns: switch netns in the child when executing commands (Andrea Claudi) [1719759]
  - m_mirred: don't bail if the control action is missing (Andrea Claudi) [1711760]
  - tc: introduce support for chain templates (Andrea Claudi) [1710291]
  - ip: reset netns after each command in batch mode (Andrea Claudi) [1671016]


author: Alexey Kodanev <alexey.kodanev@oracle.com> [5.4.0-1.0.1.el8]
changelog:
  - rdma: Add "stat show mr" support [Orabug: 30511768]
  - rdma: Document MR statistics [Orabug: 30511768]
  - Update to v5.4.0 upstream [Orabug: 30518201]


author: Alex Burmashev <alexander.burmashev@oracle.com> [5.12.0-1.0.1.el8]
changelog:
  - Update to 5.12.0 upstream [Orabug: 32719473]
  - Drop patches that are now present in new version [Orabug: 32719473]


author: Alex Burmashev <alexander.burmashev@oracle.com> [5.12.0-1.0.2.el8]
changelog:
  - Backport selected rdma patches needed for vDPA support [Orabug: 32719473]
  - rdma: Add SRQ resource tracking information [Orabug: 32719473]
  - rdma: Add context resource tracking information [Orabug: 32719473]
  - rdma: Update uapi headers [Orabug: 32719473]
  - lib: move get_task_name() from rdma [Orabug: 32719473]


author: Andrea Claudi <aclaudi@redhat.com> [5.9.0-2.el8]
changelog:
  - tc: flower: fix json output with mpls lse (Andrea Claudi) [1885770]
  - tc-mpls: fix manpage example and help message string (Andrea Claudi) [1885770]
  - tc-vlan: fix help and error message strings (Andrea Claudi) [1885770]
  - m_mpls: test the 'mac_push' action after 'modify' (Andrea Claudi) [1885770]
  - m_mpls: add mac_push action (Andrea Claudi) [1885770]
  - m_vlan: add pop_eth and push_eth actions (Andrea Claudi) [1885770]
  - Update kernel headers (Andrea Claudi) [1885770]


author: Andrea Claudi <aclaudi@redhat.com> [5.12.0-1.el8]
changelog:
  - tc: f_flower: Add missing ct_state flags to usage description (Andrea Claudi) [1957243]
  - tc: f_flower: Add option to match on related ct state (Andrea Claudi) [1957243]


author: Andrea Claudi <aclaudi@redhat.com> [5.12.0-3.el8]
changelog:
  - tc: htb: improve burst error messages (Andrea Claudi) [1910745]
  - tc: u32: Fix key folding in sample option (Andrea Claudi) [1979425]
  - police: Fix normal output back to what it was (Andrea Claudi) [1981393]
  - police: Add support for json output (Andrea Claudi) [1981393]
  - police: add support for packet-per-second rate limiting (Andrea Claudi) [1981393]
  - Update kernel headers (Andrea Claudi) [1981393]
  - mptcp: add support for port based endpoint (Andrea Claudi) [1984733]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-2.el8
changelog:
  - vdpa: Enable user to set mtu of the vdpa device (Andrea Claudi) [2036880]
  - vdpa: Enable user to set mac address of vdpa device (Andrea Claudi) [2036880]
  - vdpa: Enable user to query vdpa device config layout (Andrea Claudi) [2036880]
  - vdpa: align uapi headers (Andrea Claudi) [2036880]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-3.el8
changelog:
  - tc: u32: add json support in `print_raw`, `print_ipv4`, `print_ipv6` (Andrea Claudi) [1989591]
  - tc: u32: add support for json output (Andrea Claudi) [1989591]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-4.el8
changelog:
  - vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2056827]
  - vdpa: Support reading device features (Andrea Claudi) [2056827]
  - vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2056827]
  - vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2056827]
  - vdpa: Remove unsupported command line option (Andrea Claudi) [2056827]
  - uapi: update vdpa.h (Andrea Claudi) [2056827]
  - Update kernel headers and import virtio_net (Andrea Claudi) [2056827]


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 5.18.0-1.1.0.1.el8_8
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2188134]
  - Update kernel headers (Andrea Claudi) [2188134]
    Resolves: rhbz#2188134


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-2.el8]
changelog:
  - man: ip.8: Add missing vrf subcommand description (Andrea Claudi) [1780010]
  - xfrm: not try to delete ipcomp states when using deleteall (Andrea Claudi) [1808634]
  - ip-xfrm: Fix help messages (Andrea Claudi) [1796045]
  - man: rdma.8: Add missing resource subcommand description (Andrea Claudi) [1786576]
  - man: rdma-statistic: Add filter description (Andrea Claudi) [1786565]
  - tc: implement support for action flags (Andrea Claudi) [1770671]
  - Update kernel headers (Andrea Claudi) [1770671]
  - Update kernel headers (Andrea Claudi) [1770671]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-3.el8]
changelog:
  - xfrm: also check for ipv6 state in xfrm_state_keep (Andrea Claudi) [1828033]
  - man: bridge.8: fix bridge link show description (Andrea Claudi) [1817571]
  - ip: fix ip route show json output for multipath nexthops (Andrea Claudi) [1738633]
  - ip link: xstats: fix TX IGMP reports string (Andrea Claudi) [1796041]
  - nstat: print useful error messages in abort() cases (Andrea Claudi) [1824896]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-4.el8]
changelog:
  - tc: f_flower: add options support for erspan (Andrea Claudi) [1830485]
  - tc: f_flower: add options support for vxlan (Andrea Claudi) [1830485]
  - tc: m_tunnel_key: add options support for erpsan (Andrea Claudi) [1830485]
  - tc: m_tunnel_key: add options support for vxlan (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for erspan metadata (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for vxlan metadata (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for geneve metadata (Andrea Claudi) [1830485]
  - Update kernel headers (Andrea Claudi) [1830485]
  - man: ip.8: add reference to mptcp man-page (Andrea Claudi) [1812207]
  - man: mptcp man page (Andrea Claudi) [1812207]
  - ss: allow dumping MPTCP subflow information (Andrea Claudi) [1812207]
  - Update kernel headers (Andrea Claudi) [1812207]
  - Update kernel headers (Andrea Claudi) [1812207]
  - add support for mptcp netlink interface (Andrea Claudi) [1812207]
  - Update kernel headers and import mptcp.h (Andrea Claudi) [1812207]
  - ip: xfrm: add espintcp encapsulation (Andrea Claudi) [1844045]
  - Update kernel headers and import udp.h (Andrea Claudi) [1844045]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-5.el8]
changelog:
  - man: tc-ct.8: Add manual page for ct tc action (Andrea Claudi) [1844637]
  - tc: flower: Add matching on conntrack info (Andrea Claudi) [1844637]
  - tc: Introduce tc ct action (Andrea Claudi) [1844637]
  - tc: add NLA_F_NESTED flag to all actions options nested block (Andrea Claudi) [1844637]
  - Import tc_act/tc_ct.h uapi file (Andrea Claudi) [1844637]
  - ss: allow dumping kTLS info (Andrea Claudi) [1812207]
  - devlink: Add health error recovery status monitoring (Andrea Claudi) [1821039]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el8
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2188134]
  - Update kernel headers (Andrea Claudi) [2188134]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-4.el8
changelog:
  - ip vrf: make ipvrf_exec SELinux-aware (Andrea Claudi) [1780023]
  - lib: add SELinux include and stub functions (Andrea Claudi) [1780023]
  - ss: make SELinux stub functions conformant to API definitions (Andrea Claudi) [1780023]
  - ss: make is_selinux_enabled stub work like in SELinux (Andrea Claudi) [1780023]


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-3
changelog:
  - Fix loading of sets with dependencies on other sets (RHBZ#1647096), and
    hardcode 6.38-1.el7 for ipset-service upgrade and downgrade triggers, so that
    we don't run into issues with z-stream updates


author: Stefano Brivio <sbrivio@redhat.com> - 7.1-1
changelog:
  - Rebase to 7.1 (RHBZ#1649090):
    - Add compatibility support for strscpy()
    - Correct the manpage about the sort option
    - Add missing functions to libipset.map
    - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych)
    - Implement sorting for hash types in the ipset tool
    - Fix to list/save into file specified by option (reported by Isaac Good)
    - Introduction of new commands and protocol version 7, updated kernel include files
    - Add compatibility support for async in pernet_operations
    - Use more robust awk patterns to check for backward compatibility
    - Prepare the ipset tool to handle multiple protocol version
    - Fix warning message handlin
    - Correct to test null valued entry in hash:net6,port,net6 test
    - Library reworked to support embedding ipset completely
    - Add compatibility to support kvcalloc()
    - Validate string type attributes in attr2data() (Stefano Brivio)
    - manpage: Add comment about matching on destination MAC address (Stefano Brivio)
      (RHBZ#1649079)
    - Add compatibility to support is_zero_ether_addr()
    - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649085)
    - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649085)
    - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649085)
    - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) 
  - Fixes:
    - Fix all shellcheck warnings in init script (RHBZ#1649085)
    - Make error reporting consistent, introduce different severities (RHBZ#1683711)
    - While restoring, on invalid entries, remove them and retry (RHBZ#1683713)
    - Fix covscan SC2166 warning in init script (RHBZ#1649085)


author: Phil Sutter <psutter@redhat.com> - 1.8.2-10
changelog:
  - arptables-nft: fix decoding of hlen on bigendian platforms
  - xtables-save: Fix table not found error message
  - xtables: Catch errors when zeroing rule rounters
  - extensions: TRACE: Point at xtables-monitor in documentation
  - extensions: libipt_realm: Document allowed realm values


author: Phil Sutter <psutter@redhat.com> - 1.8.2-12
changelog:
  - Add iptables-test.py testsuite to sources
  - extensions: libip6t_mh: fix bogus translation error
  - extensions: AUDIT: Document ineffective --type option
  - xtables-restore: Fix program names in help texts
  - xtables-save: Point at existing man page in help text
  - utils: Add a manpage for nfbpf_compile
  - Mark man pages in base package as documentation files


author: Phil Sutter <psutter@redhat.com> - 1.8.2-14
changelog:
  - arptables: Print space before comma and counters
  - extensions: Fix ipvs vproto parsing
  - extensions: Fix ipvs vproto option printing
  - extensions: Add testcase for libxt_ipvs


author: Phil Sutter - 1.8.2-2
changelog:
  - Point out that nftables-variants are installed in package description
  - Fix for deleting arptables rules by referencing them


author: Phil Sutter - 1.8.2-4
changelog:
  - Fix iptables init script for nftables-backend
  - Drop references to unsupported broute table from ebtables man page
  - xtables: Don't use native nftables comments


author: Phil Sutter - 1.8.2-6
changelog:
  - Improve performance with large rulesets
  - Fix for changes in arptables output
  - Fix for inserting rules at wrong position
  - Fix segfault when comparing rules with standard target
  - Fix ebtables output for negated values
  - Document missing arptables FORWARD chain


author: Phil Sutter <psutter@redhat.com> - 1.8.4-3
changelog:
  - Reduce globbing in library file names to expose future SONAME changes
  - Add bootstrapping for libip*tc SONAME bump


author: Phil Sutter <psutter@redhat.com> - 1.8.4-8
changelog:
  - xtables-translate: Fix for iface++
  - tests: shell: Fix skip checks with --host mode
  - xtables-restore: fix for --noflush and empty lines


author: Phil Sutter <psutter@redhat.com> - 1.8.4-11
changelog:
  - Complete ebtables-nft among match support
  - Replace RHEL-only xtables-monitor fix with upstream solution
  - xtables: Align effect of -4/-6 options with legacy
  - xtables: Drop -4 and -6 support from xtables-{save,restore}
  - Review systemd unit files


author: Phil Sutter <psutter@redhat.com> - 1.8.4-15.1
changelog:
  - tests: shell: Improve concurrent noflush restore test a bit
  - nft: Fix for concurrent noflush restore calls
  - nft: Fix error reporting for refreshed transactions
  - nft: Make batch_add_chain() return the added batch object


author: Phil Sutter <psutter@redhat.com> - 1.8.4-15.2
changelog:
  - tests/shell: Add test for bitwise avoidance fixes
  - ebtables: Optimize masked MAC address matches
  - nft: Optimize class-based IP prefix matches
  - nft: Fix for broken address mask match detection


author: Phil Sutter <psutter@redhat.com> - 1.8.4-16
changelog:
  - tests/shell: Add test for bitwise avoidance fixes
  - ebtables: Optimize masked MAC address matches
  - nft: Optimize class-based IP prefix matches
  - nft: Fix for broken address mask match detection
  - nft: cache: Make nft_rebuild_cache() respect fake cache
  - tests: shell: Improve concurrent noflush restore test a bit
  - nft: Fix for concurrent noflush restore calls
  - nft: Fix error reporting for refreshed transactions
  - nft: Make batch_add_chain() return the added batch object


author: Phil Sutter <psutter@redhat.com> - 1.8.4-17
changelog:
  - extensions: dccp: Fix for DCCP type 'INVALID'
  - tests: shell: Merge and extend return codes test
  - nft: Fix command name in ip6tables error message
  - extensions: libxt_CT: add translation for NOTRACK
  - extensions: libipt_icmp: Fix translation of type 'any'
  - tests/shell: Test for fixed extension registration
  - libxtables: Register multiple extensions in ascending order
  - libxtables: Simplify pending extension registration
  - libxtables: Make sure extensions register in revision order


author: Phil Sutter <psutter@redhat.com> - 1.8.4-18
changelog:
  - xtables-translate: Fix translation of odd netmasks
  - nft: Fix bitwise expression avoidance detection
  - xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
  - xtables-monitor: print packet first
  - xtables-monitor: fix packet family protocol
  - xtables-monitor: fix rule printing
  - xtables-monitor: Fix ip6tables rule printing


author: Phil Sutter <psutter@redhat.com> - 1.8.4-20
changelog:
  - extensions: SECMARK: Use a better context in test case
  - extensions: sctp: Translate --chunk-types option
  - extensions: sctp: Fix nftables translation
  - extensions: SECMARK: Implement revision 1
  - nft: cache: Retry if kernel returns EINTR


author: Phil Sutter <psutter@redhat.com> - 1.8.4-21
changelog:
  - extensions: hashlimit: Fix tests with HZ=100
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options


author: Phil Sutter <psutter@redhat.com> - 1.8.4-23
changelog:
  - libxtables: Fix unsupported extension warning corner case
  - tests: shell: Check overhead in iptables-save and -restore
  - nft: Fix EPERM handling for extensions without rev 0
  - Improve error messages for unsupported extensions
  - xshared: Fix response to unprivileged users
  - libxtables: Register only the highest revision extension
  - Use proto_to_name() from xshared in more places
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 1.8.4-24.0.1.2
changelog:
  - libxtables: Revert change to struct xtables_pprot (RHBZ#2221107)
  - nft: un-break among match with concatenation (RHBZ#2234809)


author: Phil Sutter <psutter@redhat.com> - 1.8.5-11
changelog:
  - iptables-restore: Drop dead code
  - iptables-apply: Eliminate shellcheck warnings
  - ebtables: Exit gracefully on invalid table names


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-16
changelog:
  - Moved upstream from https://fedorahosted.org/iptraf-ng/ to 
    https://github.com/iptraf-ng/iptraf-ng/ with release v1.1.4
    Fixes error in patch Patch03 - this fixes 1283773


author: Thomas Woerner <twoerner@redhat.com> 2.2.6-1
changelog:
  - New upstream version 2.2.6
    - Located at github
    - Fixes (RHBZ#1294913 and RHBZ#1375395)
  - Additional upstream patch (no_debug) to drop some debugging remains
  - Additional proposed patch to fix segmentation fault with -1 -C (RHBZ#599181)


author: Ryan O'Hara <rohara@redhat.com> - 1.29-7
changelog:
  - Add 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS (#1543790)


author: Ryan O'Hara <rohara@redhat.com> - 1.29-7
changelog:
  - Add 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m32 -march=x86-64 -mtune=generic -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS (#1543790)


author: Ryan O'Hara <rohara@redhat.com> - 1.29-7
changelog:
  - Add 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS (#1543790)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-2
changelog:
  - Fix several memleak problems found by covscan (bz1606969)
  - Fix an possible overflow error (bz1606969)
  - Don't leak socket fd on connection error (bz1606969)
  - Check xen-dyn-event more flexible (bz1576164)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-3
changelog:
  - Update document and remove dead options to fix manpage scan warning (bz1612706)
  - Fix gating test error (bz1680619)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.0.4-1
changelog:
  - New version
    Resolves: rhbz#1468785
    Resolves: CVE-2017-10965
    Resolves: CVE-2017-10966
  - Dropped allow-negative-values-in-settings patch (not needed)


author: Chris Leech <cleech@redhat.com> - 6.2.0.876-1.git4ef9261
changelog:
  - pull in post 2.0.876 tagged fixes from upstream git
  - minimal packaging of libopeniscsiusr (internal use only, no dev package yet)


author: Chris Leech <cleech@redhat.com> - 6.2.0.876-5.gitf3c8e90
changelog:
  - iscsiuio: add mutex to protect netlink buffer for pass-through xmit
  - iscsid: get gateway information from sysfs when recovering sessions
  - enabled MaxOustandingR2T negotiation during login


author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.876-7.gitf3c8e90.0.1
changelog:
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0030-Use-sd_notify-to-tell-systemd-when-iscsid-is-ready.patch
    Add 0031-Update-systemd-unit-files-for-iscsid.patch
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]


author: Fred Herard <fred.herard@oracle.com> - 6.2.0.876-7.gitf3c8e90.0.2
changelog:
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]


author: Livy Ge <livy.ge@oracle.com> - 6.2.0.877-1.gitf71581b.0.1
changelog:
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]


author: Chris Leech <cleech@redhat.com> - 6.2.0.878-0.gitd791ce0
changelog:
  - 1761940 iSCSI CHAP authentication not function with FIPS enabled
  - Service file improvements forward ported from RHEL 7.8
  - various static analysis fixes from upstream


author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.878-4.gitd791ce0.0.1.el8
changelog:
  - Tune TimeoutSec of iscsid service to 10 minutes
    [Orabug: 29869817]
  - Modify patches 0007 and 0032-0035 to apply cleanly.
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]
  - iSCSI CHAP authentication not function with FIPS enabled [Orabug: 1761940]


author: Chris Leech - 6.2.0.878-5.gitd791ce0
changelog:
  - 1849931, 1869438 go back to MD5 CHAP only by default
    new CHAP modes can cause issue with some targets,
    so SHA1/SHA256/SHA3-256 modes must be configured to enable now


author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.878-5.gitd791ce0.0.1
changelog:
  - iscsid - Proper disconnect of TCP connection. [Orabug: 31503159]
  - Tune TimeoutSec of iscsid service to 10 minutes
    [Orabug: 29869817]
  - Modify patches 0007 and 0032-0035 to apply cleanly.
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [Orabug: 18791695]
  - iSCSI CHAP authentication not function with FIPS enabled [Orabug: 1761940]


author: David Kubat <david.kubat@oracle.com> - 6.2.1.2-1.gita8fcb37.0.1
changelog:
  - Tune TimeoutSec of iscsid service to 10 minutes
    [Orabug: 29869817]
  - Modify patches 0007 and 0032-0035 to apply cleanly.
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [Orabug: 18791695]
  - iSCSI CHAP authentication not function with FIPS enabled [Orabug: 1761940]


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 6.2.1.4-4.git095f59c.0.1
changelog:
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Darren Archibald <darren.archibald@oracle.com> - 6.2.1.4-8.git095f59c.0.1
changelog:
  - Remove 0039-idbm-Change-mkdir-permissions-to-0770.patch
  - Change mkdir permissions to 0770 [Orabug: 35480395]
  - Log error when auth debug status is set [Orabug: 32831167]
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Akshata Konala <akshata.konala@oracle.com> - 6.2.1.4-8.git095f59c.0.1
changelog:
  - 2131090 fix idbm patch to not overwrite upstream changes in file mode
  - Remove 0039-idbm-Change-mkdir-permissions-to-0770.patch


author: Gulam Mohamed <gulam.mohamed@oracle.com> - 6.2.1.4-8.git095f59c.0.2
changelog:
  - Rate limit session reopen and initial connect log messages [Orabug: 37176222]
  - Change the log_level of log_debug message in actor_delete()


author: Chris Leech <cleech@redhat.com> - 0.94-1
changelog:
  - new upstream location, update to 0.94
  - new devel package, upstream open-iscsi is dropping it's internal copy


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:1.2.1-4
changelog:
  - Python 2 binary package renamed to python2-isomd5sum
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Brian C. Lane <bcl@redhat.com> - 1:1.2.2-1
changelog:
  - Don't put DESTDIR in the isomd5sum.pc file
  - New Version 1.2.2 (bcl)
  - Fix aligned alloc parameters and overflow on 32bit size_t (#1497458) (squimrel)
  - Fix memory leak (squimrel)
  - Add pkgconfig file (squimrel)
  - Remove line-breaks from error messages (squimrel)
  - Make library C++ compatible (squimrel)
  - Constify function signatures (squimrel)
  - Revert checkCallback function signature (squimrel)


author: Brian C. Lane <bcl@redhat.com> - 1:1.2.3-1
changelog:
  - New Version 1.2.3 (bcl)
  - Fix 32bit bug on large files (squimrel)
  - Don't put DESTDIR in the isomd5sum.pc file (bcl)


author: Xin Long <lxin@redhat.com> - 2.11-3
changelog:
  - Deal with warnings under gcc 8
  - Call va_end after va_copy in json_vsprintf
  - Fix bogus date in jansson.spec


author: Josef Ridky <jridky@redhat.com> - 2.0.14-5
changelog:
  - Fix CVE-2021-26927 (#1933860)
  - Fix CVE-2021-26926 (#1922316)
  - Fix CVE-2021-3272 (#1922283)
  - Fix CVE-2020-27828 (#1905692)


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-12
changelog:
  - Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b13.
  - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b14.
  - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-0
changelog:
  - Introduce sa_arches for architectures with sa-jdi.jar and include aarch64
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1
changelog:
  - Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-0
changelog:
  - Update to aarch64-shenandoah-jdk8u192-b12.
  - Remove patches included upstream
    - JDK-8031668/PR2842
    - JDK-8148351/PR2842
    - JDK-6260348/PR3066
    - JDK-8061305/PR3335/RH1423421
    - JDK-8188030/PR3459/RH1484079
    - JDK-8205104/PR3539/RH1548475
    - JDK-8185723/PR3553
    - JDK-8186461/PR3557
    - JDK-8201509/PR3579
    - JDK-8075942/PR3602
    - JDK-8203182/PR3603
    - JDK-8206406/PR3610/RH1597825
    - JDK-8206425
    - JDK-8036003
    - JDK-8201495/PR2415
    - JDK-8150954/PR2866/RH1176206
  - Re-generate patches (mostly due to upstream build changes)
    - JDK-8073139/PR1758/RH1191652
    - JDK-8143245/PR3548 (due to JDK-8202600)
    - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
    - JDK-8199936/PR3533
    - JDK-8199936/PR3591
    - JDK-8207057/PR3613
    - JDK-8210761/RH1632174 (due to JDK-8207402)
    - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
    - PR3593 (due to JDK-8081202)
    - RH1566890/CVE-2018-3639 (due to JDK-8189170)
    - RH1649664 (due to JDK-8196516)
  - Add 8160748 for AArch64 which is missing from upstream 8u version.
  - Add port of 8189170 to AArch64 which is missing from upstream 8u version.
  - Resolves: rhbz#1661577


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-1
changelog:
  - Add backport of JDK-8145096 (PR3693) to fix undefined behaviour issues on newer GCCs
  - Resolves: rhbz#1661577


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-4
changelog:
  - Update patch for RH1566890.
    - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
      rh1566890-CVE_2018_3639-speculative_store_bypass.patch
    - Added dependent patch,
      rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u201-b13.
  - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u202-b08.
  - Remove patches included upstream
    - JDK-8211387/PR3559
    - JDK-8207057/PR3613
    - JDK-8165852/PR3468
    - JDK-8073139/PR1758/RH1191652
    - JDK-8044235
    - JDK-8172850/RH1640127
    - JDK-8209639/RH1640127
    - JDK-8131048/PR3574/RH1498936
    - JDK-8164920/PR3574/RH1498936
  - Re-generate patches
    - JDK-8210647/RH1632174
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-0
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b02.
  - Remove patches included upstream
    - JDK-8197429/PR3546/RH153662{2,3}
    - JDK-8184309/PR3596
    - JDK-8210647/RH1632174
    - JDK-8029661/PR3642/RH1477159
    - JDK-8145096/PR3693
  - Re-generate patches
    - JDK-8203030
  - Add casts to resolve s390 ambiguity in calls to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1
changelog:
  - Add JDK-8223219 to avoid -fstack-protector overriding -fstack-protector-strong
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b04-1
changelog:
  - Remove additions to EXTRA_CFLAGS and EXTRA_CPP_FLAGS which are now made by upstream.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b02.
  - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100).
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b03.
  - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u.
  - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b04.
  - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b08.
  - Adjust PR3083/RH134640 to apply after JDK-8182999
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Drop JDK-8223219 as now upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.0.ea
changelog:
  - JDK-8226870 removed clhsdb and hdsdb from the JRE bin directory, so we should do likewise.
  - Add alternatives support for these two new SDK binaries.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05.
  - Drop upstreamed patch JDK-8141570/PR3548.
  - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-2
changelog:
  - Backport FIPS mode patch to java-1.8.0-openjdk, simplifying provider removal.
  - Resolves: rhbz#1655466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-2
changelog:
  - nss.fips.cfg needs to be moved to %{etcjavadir} and symlinked into the JDK, like nss.cfg
  - Resolves: rhbz#1655466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b10-3
changelog:
  - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
  - Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
  - Resolves: rhbz#1750752


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Drop JDK-8223219 as now upstream.
  - JDK-8226870 removed clhsdb and hdsdb from the JRE bin directory, so we should do likewise.
  - Add alternatives support for these two new SDK binaries.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-2
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.11.0 using new script
  - Resolves: rhbz#1737112


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-2
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds
  - Resolves: rhbz#1737112


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-3
changelog:
  - Add JDK-8165996/PR3506 & JDK-8195607/PR3776 to support NSS SQLite databases.
  - Resolves: rhbz#1760437


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-4
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Resolves: rhbz#1737112


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b03.
  - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Require tzdata 2020a so system tzdata matches resource updates in b07
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.0.ea
changelog:
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-0.1
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.262.b10-1
changelog:
  - ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs
  - Resolves: rhbz#1831665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u265-b01.
  - Update release notes for 8u265 release.
  - Resolves: rhbz#1860453


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.3.ea
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-2
changelog:
  - Add backport of JDK-8223482 so PKCS#11 FIPS provider does not offer unsupported ciphers.
  - Resolves: rhbz#1860965


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-3
changelog:
  - Add backport of JDK-8251117 to allow key length to be retrieved from PKCS#11 FIPS keys
  - Resolves: rhbz#1860993


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b09 (EA).
  - Switch to EA mode.
  - Add debugging output for build.
  - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default.
  - Remove JDK-8154313 backport now applied upstream.
  - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream.
  - Update tarball generation script to use PR3795, following inclusion of JDK-8177334
  - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003
  - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Remove JDK-8165996/PR3506/RH1760437 as now applied upstream.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Improve quoting of vendor name
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u272 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Delay tzdata 2020b dependency until tzdata update has shipped.
  - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
  - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1
changelog:
  - Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.3.ea
changelog:
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b06.
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Remove JDK-8165996/PR3506/RH1760437 & JDK-8251117/RH1860990 as now applied upstream.
  - Replace JDK-8223482/RH1860965 with RH1860986 (disable TLSv1.3 when using the NSS-FIPS provider)
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-4
changelog:
  - Add backport of JDK-8223940: "Private key not supported by chosen signature algorithm" to handle lack of provider RSAPSS support
  - Resolves: rhbz#1892216


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-1
changelog:
  - Update to aarch64-shenandoah-jdk8u275-b01 (GA)
  - Update release notes for 8u275.
  - Remove JDK-8223940/RH1892216 backport now included in upstream 8u275.
  - Remove JDK-8236512/RH1889414 backport now included in upstream 8u275.
  - Resolves: rhbz#1895060


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.1.ea
changelog:
  - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs.
  - Resolves: rhbz#1906862


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b03 (EA)
  - Update release notes for 8u282-b03.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b04 (EA)
  - Update release notes for 8u282-b04.
  - Remove upstreamed patch PR3519
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b05 (EA)
  - Update release notes for 8u282-b05 and make some minor corrections.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b06 (EA)
  - Update release notes for 8u282-b06.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b07 (EA)
  - Update release notes for 8u282-b07.
  - Fix placement issue in release notes, caught by comparing with vanilla version.
  - Resolves: rhbz#1903904


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908967


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1
changelog:
  - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
  - Resolves: rhbz#1913868


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - Resolves: rhbz#1908967


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - Update tarball generation script to use PR3822 which handles
      JDK-8233228 & JDK-8035166 changes
  - Remove RH1868759 patch as this is now resolved upstream by JDK-8258833.
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Require tzdata 2020f due to JDK-8259048
  - Require tzdata 2021a due to JDK-8260356
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  - Update release notes for 8u292-b09.
  - Switch to EA mode.
  - Update tarball generation script to use PR3822 which handles
      JDK-8233228 & JDK-8035166 changes
  - Remove RH1868759 patch as this is now resolved upstream by JDK-8258833.
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Require tzdata 2020f due to JDK-8259048
  - Require tzdata 2021a due to JDK-8260356
  - Resolves: rhbz#1942306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Switch to EA mode.
  - Cleanup architecture handling
  - Fixed not-including fastdebug build in case of --without fastdebug
  - Re-order source files to sync with Fedora.
  - Introduced nm based check to verify alt-java on x86_64 is patched, and no other alt-java or java is patched
  - Patch600, rh1750419-redhat_alt_java.patch, amended to die, if it is used wrongly
  - Introduced ssbd_arches with currently only valid arch of x86_64 to separate real alt-java architectures
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Fix name of javadoc debug packages in Obsoletes declarations and add version where it was removed.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b08 (EA)
  - Update release notes for 8u302-b08.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b05 (EA)
  - Update release notes for 8u302-b05.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.1.ea
changelog:
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.2.ea
changelog:
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Fix name of javadoc debug packages in Obsoletes declarations and add version where it was removed.
  - Resolves: rhbz#1966233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b06 (EA)
  - Update release notes for 8u302-b06.
  - Resolves: rhbz#1967812


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Resolves: rhbz#1967812


author: Martin Balao <mbalao@redhat.com> - 1:1.8.0.302.b08-2
changelog:
  - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
  - Resolves: rhbz#1971679


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-2
changelog:
  - Port FIPS system detection support to OpenJDK 8u
  - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
  - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
  - Resolves: rhbz#1971679


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
  - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
  - Reduce disk footprint by removing build artifacts by default.
  - Switch to EA mode.
  - Remove non-Free test and demo files from source tarball.
  - Related: rhbz#2011826


author: Martin Balao <mbalao@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
  - Resolves: rhbz#2014201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Port FIPS system detection support to OpenJDK 8u
  - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
  - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
  - Resolves: rhbz#2014201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.4.ea
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#2014193


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b07 (EA)
  - Update release notes for 8u312-b07.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#2014194


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-2
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-3
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2021263


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-4
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Introduce architecture restriction logic for the gdb test. (RH2041970)
  - Pass compiler flags to the ADLC build (JDK-8281098)
  - Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Sync minor placement differences with Fedora & RHEL 9
  - Resolves: rhbz#2022815


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-5
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052828


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.322.b06-8
changelog:
  - alternatives creation moved to posttrans
  - Thus fixing the old reisntall issue:
  - https://bugzilla.redhat.com/show_bug.cgi?id=1200302
  - https://bugzilla.redhat.com/show_bug.cgi?id=1976053
  - Resolves: rhbz#2008192


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.322.b06-11
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  - Update release notes for 8u322-b04.
  - Require tzdata 2021c as of JDK-8274407.
  - Switch to EA mode.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-2
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b06 (EA)
  - Update release notes for shenandoah-8u332-b06.
  - Switch to EA mode.
  - Remove JDK-8279077 patch now upstream.
  - Related: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-04-19 @ 1pm PT.
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-2
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Drop JDK-8279077 now included upstream.
  - Resolves: rhbz#2074645


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:1.8.0.332.b09-2
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2108566


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1
changelog:
  - Update to shenandoah-jdk8u342-b07
  - Update release notes for shenandoah-8u342-b07.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2099911
  - Resolves: rhbz#2108564
  - Resolves: rhbz#2084648
  - Resolves: rhbz#2106506


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2115457


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.2.ea
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Djava.security.disableSystemCACerts=true
  - Resolves: rhbz#2055274


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-3
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2074646


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:1.8.0.332.b09-4
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102431


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-5
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Rebase PR2888/RH2055274 cacerts patch so it applies after the current FIPS patch
  - Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2097152
  - Resolves: rhbz#2100675


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u342-b06 (EA)
  - Update release notes for shenandoah-8u342-b06.
  - Switch to EA mode for 8u342 pre-release builds.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Resolves: rhbz#2083265


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-2
changelog:
  - Update to shenandoah-jdk8u342-b07 (GA)
  - Update release notes for 8u342-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2106507


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112403


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102733


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Sync system cacerts support with RHEL 9, disabling using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Related: rhbz#2055274


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2048542


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Rebase FIPS patch against 8u352-b07
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Related: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Rebase FIPS patch against 8u352-b07
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Drop JDK-8255559/RH2124390 patch which is now upstream
  - Resolves: rhbz#2159910


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-2
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2163595


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1
changelog:
  - Update to shenandoah-jdk8u372-b07 (GA)
  - Update release notes for shenandoah-8u372-b07.
  - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Drop JDK-8275535/RH2053256 patch which is now upstream
  - Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150193


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Drop JDK-8255559/RH2124390 patch which is now upstream
  - Resolves: rhbz#2150193


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162715


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150203


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-2
changelog:
  - Update to shenandoah-jdk8u372-b07 (GA)
  - Update release notes for shenandoah-8u372-b07.
  - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Drop JDK-8275535/RH2053256 patch which is now upstream
  - Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
  - Drop hack for difference in local and portable build version
  - Replace local copies of JDK portable binaries with build dependencies
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2189328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Retain portable_build-arches with x86-32 added for reference
  - Remove NEWS.
  - Related: rhbz#2189328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-4
changelog:
  - Include the java-1.8.0-openjdk-portable.spec file with instructions on how to rebuild.
  - Remove duplicate use of README.md inside the *-src package (it is no longer about sources)
  - Related: rhbz#2189328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b01 (EA)
  - Update release notes for shenandoah-8u382-b01.
  - Switch to EA mode.
  - Remove JDK-8271199 patch which is now upstream.
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b04 (EA)
  - Update release notes for shenandoah-8u382-b04.
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1
changelog:
  - Update to shenandoah-jdk8u372-b05 (GA)
  - Update release notes for shenandoah-8u372-b05.
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 1:1.8.0.392.b08-4.0.1
changelog:
  - Update to shenandoah-jdk8u392-b08 (GA)
  - OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
  - OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
  - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)
  - A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (RHEL-13593)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b01 (EA)
  - Switch to EA mode.
  - Remove JDK-8271199 patch which is now upstream.
  - Add version of bundled zlib (bumped from 1.2.11 to 1.2.13 with this update)
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Sync the copy of the portable specfile with the latest update
  - Related: rhbz#2217710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b04 (EA)
  - Sync the copy of the portable specfile with the latest update
  - Resolves: rhbz#2217710


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1
changelog:
  - Update to shenandoah-jdk8u372-b05 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - Use tapsets from the misc tarball
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - The 'prelease' variable should refer to 'portablerelease', not 'rpmrelease'
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1
changelog:
  - For non debug subpackages, ghosted all alternatives (rhbz1649776)
  - For non system JDKs, if-outed versionless provides.
  - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Related: RHEL-13641


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2
changelog:
  - Update to shenandoah-jdk8u392-b08 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Regenerate PR2462 patch following JDK-8315135
  - Bump version of bundled libpng to 1.6.39
  - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
  - Add missing JFR, alt-java, jre-* and java-* alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12309
  - Resolves: RHEL-13600
  - Resolves: RHEL-13628
  - Resolves: RHEL-13635
  - Resolves: RHEL-13641
  - Resolves: RHEL-13612
  - Resolves: RHEL-13621


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 1:1.8.0.402.b06-0.2.0.1
changelog:
  - Update to shenandoah-jdk8u402-b06 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Add Oracle vendor bug URL [Orabug: 34340155]


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-5
changelog:
  - Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
  - Resolves: RHEL-19636


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.2.ea
changelog:
  - Update to shenandoah-jdk8u402-b06 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Drop local copy of JDK-8312489 which is now included upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-21477
  - Resolves: RHEL-20975


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.2.ea
changelog:
  - Turn off xz multi-threading on i686 as it fails with an out of memory error
  - Move to upstream tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
  - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
  - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
  - generate_source_tarball.sh: Adapt version logic to work with 8u
  - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - Remove obsolete file generate_singlerepo_source_tarball.sh
  - Remove obsolete file get_sources.sh
  - Remove obsolete file update_main_sources.sh
  - generate_source_tarball.sh: Handle an existing checkout
  - generate_source_tarball.sh: Sync indentation with java-21-openjdk version
  - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
  - Sync patch set with portable build
  - Related: RHEL-30931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u412-b07 (EA)
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-30931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-2
changelog:
  - Update to shenandoah-jdk8u412-b08 (GA)
  - Update release notes for shenandoah-8u412-b08.
  - Complete release note for Certainly roots
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32396


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.422.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u422-b01 (EA)
  - Update release notes for shenandoah-8u422-b01.
  - Switch to EA mode.
  - Sync the copy of the portable specfile with the latest update
  - Restore NEWS file and rename remove-intree-libraries.sh so portable can be rebuilt
  - Document policy repacking script and rename to correct spelling and style
  - Limit Java only tests to one architecture using jdk_test_arch
  - Related: RHEL-46866
  - Resolves: RHEL-47067
  - Resolves: RHEL-47087


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.422.b05-1.1
changelog:
  - Update to shenandoah-jdk8u422-b05 (GA)
  - Update release notes for shenandoah-8u422-b05.
  - Rebase PR2462 patch following patched hunk being removed by JDK-8322106
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Actually require tzdata 2024a now it is available in the buildroot
  - Add missing build dependencies on zlib-devel and tar
  - Update LCMS version to match JDK-8245400
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-46866
  - Resolves: RHEL-47001


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.432.b06-1
changelog:
  - Update to shenandoah-jdk8u432-b06 (GA)
  - Update release notes for shenandoah-8u432-b06.
  - Drop JDK-828109{6,7,8}/PR3836 patch following integration of upstream version
  - Regenerate JDK-8199936/PR3533 patch following JDK-828109{6,7,8} integration
  - Bump version of bundled zlib to 1.3.1 following JDK-8324632
  - Include backport of JDK-8328999 to update giflib to 5.2.2
  - Bump version of bundled giflib to 5.2.2 following JDK-8328999
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58791
  - Resolves: RHEL-62278
  - Resolves: RHEL-61285
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.2.ea
changelog:
  - Update to 8u442-b05 (EA).
  - Update release notes for 8u442-b05.
  - Switch to EA mode for pre-release.
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-73995


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.3.ea
changelog:
  - Add zero_arches to the portable_build_arches now that the portable build bundles libffi
  - Temporarily workaround libffi.so not being in lib/%{archinstall} by copying it
  - Exclude libffi.so from the debugedit run
  - Add a simple -version check on both the JDK and JRE bin/java
  - Add libffi.so to the filelist, including expanding the lib/%{archinstall} contents as with jre/lib
  - Sync the copy of the portable specfile and new patches with the latest update
  - Resolves: RHEL-74303


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-2
changelog:
  - Update to 8u442-b06 (GA)
  - Update release notes for 8u442-b06.
  - Switch to GA mode for final release
  - Revise JDK-8141590 backport to install libffi.so* in lib as well as jre/lib
  - Sync the copy of the portable specfile with the latest update
  - Remove libffi.so copying workaround now the portable build installs it in lib
  - Add bundled libffi.so to _privatelibs
  - Remove libffi.so copy if we are building on the same platform as the portable
  - Resolves: RHEL-73542
  - Related: RHEL-74303


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-1
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86973
  - Resolves: RHEL-86616


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-6
changelog:
  - Redefined linux -> __linux__ and __x86_64 -> __x86_64__ in RH1750419 patch
  - Resolves: rhbz#1784116


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-6
changelog:
  - Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
  - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
  - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
  - Resolves: rhbz#1784116


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+1
  - Update release notes to 11.0.10.0+1
  - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
  - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
  - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with RHEL version.
  - Cleanup debug package descriptions and version number placement.
  - Switch to EA mode for 11.0.10 pre-release builds.
  - Drop JDK-8222286, JDK-8236512 & JDK-8254177 as applied upstream
  - Use system harfbuzz now this is supported.
  - Use system tzdata2020b now it's available.
  - Adjust RH1842572 patch due to context change from JDK-8213400
  - Resolves: rhbz#1903908


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+8
  - Update release notes to 11.0.10.0+8.
  - Update tarball generation script to use PR3818 which handles JDK-8171279 changes
  - Drop JDK-8250861 as applied upstream.
  - Resolves: rhbz#1903908


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0
changelog:
  - Update to jdk-11.0.10.0+9
  - Update release notes to 11.0.10.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1
changelog:
  - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
  - Resolves: rhbz#1894083


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.10.0.9-2
changelog:
  - Removed lib-style provides for fastdebug_suffix_unquoted
  - Fixed missing condition for fastdebug packages being counted as debug ones
  - Fix typo in variable
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-2
changelog:
  - Fix debug and fastdebug descriptions to emphasise the difference is optimisation or no optimisation.
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-3
changelog:
  - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs.
  - Resolves: rhbz#1915071


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1
changelog:
  - Update to jdk-11.0.10.0+9
  - Update release notes to 11.0.10.0+9
  - Switch to GA mode for final release.
  - Resolves: rhbz#1908972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-7
changelog:
  - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps)
  - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
  - Resolves: rhbz#1814915


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-8
changelog:
  - Perform static library build on a separate source tree with bundled image libraries
  - Make static library build optional
  - Based on initial work by Severin Gehwolf
  - Resolves: rhbz#1930513


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.9-0
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Fixed not-including fastdebug build in case of --without fastdebug
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0
changelog:
  - Update to jdk-11.0.11.0+9
  - Update release notes to 11.0.11.0+9
  - Require tzdata 2020f to match upstream change JDK-8259048
  - Require tzdata 2021a to match upstream change JDK-8260356
  - Remove RH1868754 patch as this is now resolved upstream by JDK-8258833
  - Remove RH1868740 & RH1883849 patches as these are now resolved by JDK-8259319
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.7-0.1.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Fixed not-including fastdebug build in case of --without fastdebug
  - Resolves: rhbz#1942310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.11.0+7
  - Update release notes to 11.0.11.0+7
  - Switch to EA mode for 11.0.11 pre-release builds.
  - Require tzdata 2020f to match upstream change JDK-8259048
  - Remove RH1868754 patch as this is now resolved upstream by JDK-8258833
  - Remove RH1868740 & RH1883849 patches as these are now resolved by JDK-8259319
  - Resolves: rhbz#1942310


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1
changelog:
  - Update to jdk-11.0.11.0+9
  - Update release notes to 11.0.11.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+6
  - Update release notes to 11.0.12.0+6
  - Switch to EA mode for 11.0.12 pre-release builds.
  - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
  - Re-order source files to sync with Fedora.
  - Remove explicit compiler flags which should be handled by the upstream build
    (-std=gnu++98, -fno-delete-null-pointer-checks, -fno-lifetime-dse)
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Correct bug ID JDK-8264846 to intended ID of JDK-8264848
  - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0
changelog:
  - Update to jdk-11.0.12.0+7
  - Update release notes to 11.0.12.0+7
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.3.ea
changelog:
  - Remove explicit compiler flags which should be handled by the upstream build
    (-std=gnu++98, -fno-delete-null-pointer-checks, -fno-lifetime-dse)
  - Resolves: rhbz#1966234


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.1.ea
changelog:
  - Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
  - Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
  - Resolves: rhbz#1966234


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+4
  - Update release notes to 11.0.12.0+4
  - Correct bug ID JDK-8264846 to intended ID of JDK-8264848
  - Resolves: rhbz#1967374


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+6
  - Update release notes to 11.0.12.0+6
  - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  - Resolves: rhbz#1967374


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-1
changelog:
  - Update to jdk-11.0.12.0+7
  - Update release notes to 11.0.12.0+7
  - Switch to GA mode for final release.
  - Resolves: rhbz#1972395


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2
changelog:
  - Add patch in order to fix java.library.path issue on aarch64 (JDK-8269668)
  - Resolves: rhbz#1994104


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4
changelog:
  - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.misc.
  - Resolves: rhbz#1997357


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-1
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Reduce disk footprint by removing build artifacts by default.
  - Related: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.13.0+7
  - Update release notes to 11.0.13.0+7
  - Update tarball generation script to use git following OpenJDK 11u's move to github
  - Switch to EA mode for 11.0.13 pre-release builds.
  - Remove non-Free test from source tarball.
  - Related: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1
changelog:
  - Update to jdk-11.0.12.0+8
  - Update release notes to 11.0.12.0+8
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2012333


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.13.0+7
  - Update release notes to 11.0.13.0+7
  - Update tarball generation script to use git following OpenJDK 11u's move to github
  - Switch to EA mode for 11.0.13 pre-release builds.
  - Remove non-Free test from source tarball.
  - Drop JDK-8269668 patch which is now applied upstream.
  - Related: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-2
changelog:
  - Update to jdk-11.0.12.0+8
  - Update release notes to 11.0.12.0+8
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2012334


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-4
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#2014212


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Replaced hardcoded 11 by featurever where appropriate
  - Fixed comment of `for slowdebug` to correct `any debug`
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.14.0+8
  - Update release notes to 11.0.14.0+8
  - Switch to EA mode for 11.0.14 pre-release builds.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Rename blacklisted.certs to blocked.certs following JDK-8253866
  - Rebase RH1996182 login patch and drop redundant security policy extension after JDK-8269034
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1
changelog:
  - Update to jdk-11.0.14.0+9
  - Update release notes to 11.0.14.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-01-18 @ 1pm PT.
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-4
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2021559


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-5
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Sync gdb test with java-1.8.0-openjdk.
  - Improve architecture restrictions for the gdb test.
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Related: rhbz#2052809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-6
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052816


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1
changelog:
  - Update to jdk-11.0.14.1+1
  - Update release notes to 11.0.14.1+1
  - Require tzdata 2021e as of JDK-8275766.
  - Resolves: rhbz#2052809
  - Resolves: rhbz#1966234


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052827


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-2
changelog:
  - Update to jdk-11.0.15.0+10
  - Update release notes to 11.0.15.0+10
  - Rebase RH1996182 FIPS patch after JDK-8254410
  - Resolves: rhbz#2073592


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+8
  - Update release notes to 11.0.15.0+8
  - Switch to EA mode for 11.0.15 pre-release builds.
  - Rebase RH1996182 FIPS patch after JDK-8254410
  - Related: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1
changelog:
  - Update to jdk-11.0.15.0+9
  - Update release notes to 11.0.15.0+9
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2
changelog:
  - Remove security items from release notes that were only in 17u and N/A for 11u
  - Related: rhbz#2073422


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2108251


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2084649


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2106514
  - Resolves: rhbz#2099917
  - Resolves: rhbz#2108248
  - Resolves: rhbz#2084649


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2121184


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+8
  - Update release notes to 11.0.15.0+8
  - Rebase RH1996182 FIPS patch after JDK-8254410
  - Resolves: rhbz#2048549


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - Update to jdk-11.0.15.0+10
  - Update release notes to 11.0.15.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2073593


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-5
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102430


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-6
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099838
  - Resolves: rhbz#2090378


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083298


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083298


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106515


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119527


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121266


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2131862
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Related: rhbz#2131863


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - Related: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2157797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2157797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  - Related: rhbz#2157797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150194


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150194


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150204
  - Resolves: rhbz#2108712


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Reintroduce generate_source_tarball.sh from RHEL 9
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2189327


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Related: rhbz#2189327


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2189327


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.1.13-6
changelog:
  - fixed tck failures of arraycopy and process exec with shenandoah on
  - added patch585 rh1648995-shenandoah_array_copy_broken_by_not_always_copy_forward_for_disjoint_arrays.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.1.13-9
changelog:
  - for non debug supackages, ghosted all masters and slaves (rhbz1649776)
  - for tech-preview packages, if-outed versionless provides. Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Removed all slowdebug provides (rhbz1655938); for tech-preview packages also removed all internal provides


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.1.13-11
changelog:
  - Update to shenandoah-jdk-11.0.1+13-20190101
  - Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
  - Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
  - Remove RH1648995; fixed upstream
  - Resolves: rhbz#1659143


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-0
changelog:
  - Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
  - Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
  - Drop JDK-8209639/RH1640127 applied upstream.
  - Re-generate JDK-8210416/RH1632174 following JDK-8209786
  - Resolves: rhbz#1666532
  - Resolves: rhbz#1659143


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-1
changelog:
  - Add PR3695 to allow the system crypto policy to be turned off.
  - Correct original system crypto policy patch to refer to OpenJDK 11 bug (PR3694)
  - Resolves: rhbz#1666532


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.2.7-2
changelog:
  - Add explicit requirement for libXcomposite which is used when performing
    screenshots from Java.
  - Add explicit BR unzip required for building OpenJDK.
  - Resolves: rhbz#1666532


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 1:11.0.21.0.9-2.0.1
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Update release notes to 11.0.21+9
  - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)
  - OpenJDK: Additional zip64 files validation (8313765) (RHBZ#2237170)
  - OpenJDK: Print an exception when encountering null addresses while producing thread dumps (8243210)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-2
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224411


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236589


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 11.0.21+1 following backport of JDK-8155246
  - Re-generate SHA3 patch following backport of JDK-8242151
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12222
  - Resolves: RHEL-13546
  - Resolves: RHEL-13553
  - Resolves: RHEL-13559
  - Resolves: RHEL-13566
  - Resolves: RHEL-13572


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Drop local copy of JDK-8312489 which is now included upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20981


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1
changelog:
  - Update to jdk-11.0.23+9 (GA)
  - Update release notes to 11.0.23+9
  - Switch to GA mode for release
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-30917


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.24.0.8-1
changelog:
  - Update to jdk-11.0.24+8 (GA)
  - Update release notes to 11.0.24+8
  - Switch to GA mode for release
  - Fix Provides to reflect up to date component versions
  - Add zlib build required or bundled version (1.3.1), depending on system_libs setting
  - Resolves: RHEL-45209
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.6-0.2.ea
changelog:
  - Update to jdk-11.0.25+6 (EA)
  - Switch to EA mode
  - Update release notes to 11.0.25+6
  - Related: RHEL-58772


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.7-0.3.ea
changelog:
  - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml
  - RHJDKBP-874 - Remove 
  - Related: RHEL-58772


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.9-2
changelog:
  - Update to jdk-11.0.25+9 (GA)
  - Update release notes to 11.0.25+9
  - Switch to GA mode for release
  - Related: RHEL-58772
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.6-0
changelog:
  - Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  - Drop JDK-8210416/RH1632174 applied upstream.
  - Drop JDK-8210425/RH1632174 applied upstream.
  - Drop JDK-8210647/RH1632174 applied upstream.
  - Drop JDK-8210761/RH1632174 applied upstream.
  - Drop JDK-8210703/RH1632174 applied upstream.
  - Add cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.3.7-1
changelog:
  - Don't package lib/client and lib/client/classes.jsa which don't exist (see RH1643469)
  - Resolves: rhbz#1693468


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.3.7-2
changelog:
  - Fix requires/provides for the non-system JDK case. JDK 11 is not a system JDK at this point.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.4.6-0.0.ea
changelog:
  - Provide Javadoc debug subpackages for now, but populate them from the normal build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-0
changelog:
  - Update to shenandoah-jdk-11.0.4+11 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.7-0.2.ea
changelog:
  - Make use of Recommends and Suggests dependent on RHEL 8+ environment.
  - Drop unnecessary build requirement on gtk3-devel, as OpenJDK searches for Gtk+ at runtime.
  - Resolves: rhbz#1724452


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.7-0.2.ea
changelog:
  - Add missing build requirement for libXrender-devel, previously masked by Gtk3+ dependency
  - Resolves: rhbz#1724452


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.7-0.2.ea
changelog:
  - Add missing build requirement for libXrandr-devel, previously masked by Gtk3+ dependency
  - Resolves: rhbz#1724452


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.7-0.2.ea
changelog:
  - fontconfig build requirement should be fontconfig-devel, previously masked by Gtk3+ dependency
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.1-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.5+1 (EA)
  - Switch to EA mode for 11.0.5 pre-release builds.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-0
changelog:
  - Update to shenandoah-jdk-11.0.5+10 (GA)
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-4
changelog:
  - Backport JDK-8230923 so arguments are passed to security providers.
  - Update RH1655466 patch with changes in OpenJDK 8 version.
  - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
  - Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
  - No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
  - Resolves: rhbz#1751845


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.5+1 (EA)
  - Switch to EA mode for 11.0.5 pre-release builds.
  - Drop JDK-8223482 which is included upstream in 11.0.5+1.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.1-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.6+1 (EA)
  - Switch to EA mode for 11.0.6 pre-release builds.
  - Add support for jfr binary.
  - Drop JDK-8230923 now applied upstream.
  - Resolves: rhbz#1785753


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-1
changelog:
  - Update to shenandoah-jdk-11.0.6+10 (GA)
  - Switch to GA mode for final release.
  - Add JDK-8236039 backport to resolve OpenShift blocker
  - Resolves: rhbz#1785753


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-4
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1784116


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-5
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1784116


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-6
changelog:
  - Update generate_source_tarball.sh script to use the PR3751 patch and retain the secp256k1 curve.
  - Regenerate source tarball using the updated script and add the -'4curve' suffix.
  - Resolves: rhbz#1746875


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-2
changelog:
  - Add JDK-8237396 backport to resolve Shenandoah TCK breakage in traversal mode.
  - Resolves: rhbz#1785753


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-3
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.11.0 using new script
  - Resolves: rhbz#1737115


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-4
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Resolves: rhbz#1737115


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-0
changelog:
  - Update to shenandoah-jdk-11.0.7+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-1
changelog:
  - Build still failing with just assembler build notes option, trying with just optimisation flags.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.4-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+4 (EA)
  - Require tzdata 2020a due to resource changes in JDK-8243541
  - Resolves: rhbz#1838811


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.8.5-0.1.ea
changelog:
  - Disable stripping of debug symbols for static libraries part of
    the -static-libs sub-package.
  - Resolves: rhbz#1848701


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.7-0.1.ea
changelog:
  - java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.9-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+9 (EA)
  - Update release notes for 11.0.8 release.
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-0
changelog:
  - Update to shenandoah-jdk-11.0.8+10 (GA)
  - Switch to GA mode for final release.
  - Update release notes with last minute fix (JDK-8248505).
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.7-0.3.ea
changelog:
  - Use RSA as default for keytool, as DSA is disabled in all crypto policies except LEGACY
  - Resolves: rhbz#1842572


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.9-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+9 (EA)
  - Update release notes for 11.0.8 release.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-1
changelog:
  - Update to shenandoah-jdk-11.0.8+10 (GA)
  - Switch to GA mode for final release.
  - Update release notes with last minute fix (JDK-8248505).
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-2
changelog:
  - Backport JDK-8251117 to allow key length to be retrieved from PKCS#11 FIPS keys
  - Resolves: rhbz#1860990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-3
changelog:
  - Add JDK-8252258 to return default vendor to the original value of 'Oracle Corporation'
  - Include a test in the RPM to check the build has the correct vendor information.
  - Resolves: rhbz#1868406


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-4
changelog:
  - Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use.
  - Resolves: rhbz#1860986


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-5
changelog:
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Resolves: rhbz#1868406


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-6
changelog:
  - Add patch to cancel PKCS#11 operations on failure (RH1868754)
  - Add patch to allow the PKCS11 provider access to the SunJCE provider (RH1868740)
  - Resolves: rhbz#1868740
  - Resolves: rhbz#1868754


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.8.10-1
changelog:
  - Added scriplet to handle dir->symlink change when updating el7->el8
  - Symlink hunk moved behind the main copy logic, to be more user-friendly with multiple installs
  - Resolves: rhbz#1871709


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-2
changelog:
  - Add JDK-8252258 to return default vendor to the original value of 'Oracle Corporation'
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Resolves: rhbz#1873390


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.1-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.9+1 (EA)
  - Switch to EA mode for 11.0.9 pre-release builds.
  - JDK-8245832 increases the set of static libraries, so try and include them all with a wildcard.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.1-0.1.ea
changelog:
  - Cleanup architecture and JVM feature handling in preparation for using upstreamed Shenandoah.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.0.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Moved vendor_version_string to a better place
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea
changelog:
  - Update to jdk-11.0.9+10 (EA)
  - With Shenandoah now upstream in OpenJDK 11, we can use jdk-updates/jdk11 directly
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
  - Remove JDK-8252258/RH1868406 now applied upstream.
  - Improve quoting of vendor name
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0
changelog:
  - Update to jdk-11.0.9+11
  - Update release notes for 11.0.9 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Delay tzdata 2020b dependency until tzdata update has shipped.
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.1.ea
changelog:
  - Update to jdk-11.0.9+8 (EA)
  - Remove JDK-8252258/RH1868406 now applied upstream.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.2.ea
changelog:
  - Add patch to allow the PKCS11 provider access to the SunJCE provider with the security manager enabled
  - Resolves: rhbz#1883849


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.3.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Moved vendor_version_string to a better place
  - Resolves: rhbz#1883849


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-1
changelog:
  - Update to jdk-11.0.9+11
  - Update release notes for 11.0.9 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-3
changelog:
  - Move all license files to NVR-specific JVM directory.
  - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
  - Resolves: rhbz#1889481


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-3
changelog:
  - Update to jdk-11.0.9.1+1
  - RPM version stays at 11.0.9.11 so as to not break upgrade path.
  - Adds a single patch for JDK-8250861.
  - Resolves: rhbz#1895274


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130374


author: Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.2.ea
changelog:
  - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
  - Related: rhbz#1995150


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.2.ea
changelog:
  - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
  - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
  - Related: rhbz#1995150


author: Martin Balao <mbalao@redhat.com> - 1:17.0.0.0.33-0.3.ea
changelog:
  - Add patch to disable non-FIPS crypto in the SUN and SunEC security providers.
  - Resolves: rhbz#1995150


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.33-0.5.ea
changelog:
  - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access.
  - Resolves: rhbz#1996182


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.0.0.35-3
changelog:
  - Update release notes to document the major changes between OpenJDK 11 & 17.
  - Resolves: rhbz#1994084


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2117972


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-4
changelog:
  - Replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150205


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-6
changelog:
  - Include the java-17-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2189330


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-2
changelog:
  - Update to jdk-17.0.7.0+7
  - Update release notes to 17.0.7.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Update FIPS support against 17.0.7+6 and bring in latest changes:
  - * RH2134669: Add missing attributes when registering services in FIPS mode.
  - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
  - * RH1940064: Enable XML Signature provider in FIPS mode
  - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized
  - Fix trailing '.' in tarball name
  - Use portablerelease in vendor version to avoid inclusion of dist tag
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2186834
  - Resolves: rhbz#2186826
  - Resolves: rhbz#2186830


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 1:17.0.9.0.9-2.0.1
changelog:
  - Update to jdk-17.0.9+9 (GA)
  - Update release notes to 17.0.9+9
  - OpenJDK: memory corruption issue on x86_64 with AVX-512 (JDK-8317121) (CVE-2023-22025)
  - OpenJDK: certificate path validation issue during client authentication (JDK-8309966) (CVE-2023-22081)
  - OpenJDK: Additional zip64 files validation (JDK-8313765) (RHBZ#2237170)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.1.1-1
changelog:
  - Update to jdk-17.0.8.1+1 (GA)
  - Update release notes to 17.0.8.1+1
  - Add backport of JDK-8312489 already upstream in 17.0.10 (see OPENJDK-2095)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Resolves: rhbz#2236591


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.9.0.9-1
changelog:
  - Update to jdk-17.0.9+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 17.0.9+1 following backport of JDK-8209398
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Sync generate_tarball.sh with 11u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Apply all patches using -p1
  - Temporarily turn off 'fresh_libjvm' due to removal of JVM_IsThreadAlive (JDK-8305425)
  - Add missing JFR and jpackage alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12204
  - Resolves: RHEL-13670
  - Resolves: RHEL-13680
  - Resolves: RHEL-13689
  - Resolves: RHEL-13708
  - Resolves: RHEL-13658


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+6 (EA)
  - fips-17u-d63771ea660.patch: Regenerate from gnu-andrew branch
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash
  - generate_source_tarball.sh: shellcheck: Double-quote variable references
  - generate_source_tarball.sh: shellcheck: Do not use -a
  - generate_source_tarball.sh: shellcheck: Do not use $ in expression
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Add note on network usage of OPENJDK_LATEST
  - Related: RHEL-20969


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Move to -P<n> usage for patch macro which works on all RPM versions
  - Remove RH1648644 patch not in portable build (and so not applied to binary used)
  - Re-enable DEFAULT_PROMOTED_VERSION_PRE check disabled for the July 2023 release
  - generate_source_tarball.sh: Add --sort=name to tar invocation for reproducibility
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20969


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.6-0.2.ea
changelog:
  - Update to jdk-17.0.11+6 (EA)
  - Sync java-17-openjdk-portable.specfile
  - Update buildjdkver to match the featurever
  - Use featurever macro to specify fips patch
  - Explain patchN syntax situation in a comment
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Skip -ga tags
  - generate_source_tarball.sh: Get -ea suffix from version-numbers.conf
  - generate_source_tarball.sh: Use git archive to generate tarball
  - generate_source_tarball.sh: Update version in comment
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Require tzdata 2023d (JDK-8322725)
  - generate_source_tarball.sh: Add license
  - openjdk_news.sh: Use grep -E instead of egrep
  - Remove RH1649512 patch for libjpeg-turbo FAR macro
  - Move pcsc-lite-libs patch to in-need-of-upstreaming section
  - Related: RHEL-27137


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.7-0.2.ea
changelog:
  - Update to jdk-17.0.11+7 (EA)
  - Sync java-17-openjdk-portable.specfile
  - Sync java-17-openjdk-portable.specfile again to mention OPENJDK-2730
  - Related: RHEL-27137


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.9-2
changelog:
  - Update to jdk-17.0.11+9 (GA)
  - Add openjdk-17.0.11+9.tar.xz to .gitignore
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update buildver from 7 to 9
  - Update portablerelease from 1 to 3
  - Change is_ga from 0 to 1 to enable GA mode for release
  - Update tzdata Requires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires fro 2023c to 2023d
  - Update sources from openjdk-17.0.11+7-ea.tar.xz to openjdk-17.0.11+9.tar.xz
  - Resolves: RHEL-27137
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Update to jdk-17.0.12+6 (EA)
  - Add openjdk-17.0.12+6-ea.tar.xz to .gitignore
  - Set updatever to 12
  - Set buildver to 6
  - Set rpmrelease to 1
  - Set is_ga to 0
  - Update sources to openjdk-17.0.12+6-ea.tar.xz
  - Require tzdata-java 2024a at runtime and for build (JDK-8325150)
  - Update lcms2 bundled provides to 2.16.0
  - Add zlib 1.3.1 bundled provides and zlib-devel build requirement (OPENJDK-3065)
  - Use component in EPEL and Fedora bug URLs
  - Label as error a designator mismatch
  - Change a fix-me comment to a note instead
  - Sync generate_source_tarball.sh from Fedora rawhide


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - icedtea_sync.sh: Reinstate from rhel-8.9.0 branch
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck


author: Anton Bobrov <abobrov@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - generate_source_tarball.sh: Use tar exclude options for VCS files
  - generate_source_tarball.sh: Improve VCS exclusion


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Delete fips-17u-d63771ea660.patch
  - Add fips-17u-e893be00150.patch
  - Update fipsver to e893be00150


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Add upstream patch that removes illegal RLO Unicode characters (JDK-8332174)
  - Sync the copy of the portable specfile with the latest update


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Set portablerelease to 2
  - Related: RHEL-46638
  - Add debuginfo section to rpminspect.yaml (OPENJDK-2904)
  - Add unicode section to rpminspect.yaml (OPENJDK-2904)
  - Add contents of fips-17u-e893be00150.patch


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.7-2
changelog:
  - Update to jdk-17.0.12+7 (GA)
  - Update .gitignore to ignore openjdk-17.0.12+7.tar.xz
  - Sync java-17-openjdk-portable.specfile
  - Set buildver to 7
  - Set portablerelease 1
  - Set is_ga to 1
  - Update sources to openjdk-17.0.12+7.tar.xz
  - Resolves: RHEL-46638
  - Resolves: RHEL-46996
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.7-3
changelog:
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set rpmrelease to 3
  - Set portablerelease to 4


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.13+1 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+1-ea.tar.xz
  - Synchronize java-17-openjdk-portable.specfile
  - Set updatever to 13
  - Set buildver to 1
  - Set is_ga to 0
  - Update sources to openjdk-17.0.13+1-ea.tar.xz
  - Related: RHEL-58781
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch
  - Remove unicode section from rpminspect.yml, fixed instead by
    https://gitlab.cee.redhat.com/osci/rpminspect-data-redhat/-/merge_requests/180
    (OPENJDK-2904)
  - Related: RHEL-58781


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.9-0.1.ea
changelog:
  - Update to jdk-17.0.13+9 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+9-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 9
  - Set rpmrelease to 1
  - Set portablerelease to 1
  - Update sources to openjdk-17.0.13+9-ea.tar.xz
  - Related: RHEL-58781


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.10-0.1.ea
changelog:
  - Update to jdk-17.0.13+10 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+10-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 10
  - Update sources to openjdk-17.0.13+10-ea.tar.xz
  - Related: RHEL-58781


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58781


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58781
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Require tzdata-java 2024b at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73545
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Adapt to newest cjc to fix issue with rpm 4.17
  - Disable copy-jdk-configs for Flatpak builds
  - Remove cjc backward compatibility, to fix when both rpm 4.16 and 4.17 are in transaction
  - Resolves: rhbz#1953923
  - Resolves: RHEL-73867


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86624
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-6
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-7
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2051590


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-8
changelog:
  - alternatives creation moved to posttrans
  - Thus fixing the old reisntall issue:
  - https://bugzilla.redhat.com/show_bug.cgi?id=1200302
  - https://bugzilla.redhat.com/show_bug.cgi?id=1976053
  - Resolves: rhbz#2008200


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-10
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008200


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-12
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2051605


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.2.0.8-13
changelog:
  - Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy
    secmod.db file as part of nss
  - Resolves: rhbz#2023536


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-15
changelog:
  - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode
  - Resolves: rhbz#2052070


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-1
changelog:
  - January 2022 security update to jdk 17.0.2+8
  - Rebase RH1995150 & RH1996182 patches following JDK-8275863 addition to module-info.java
  - Rename libsvml.so to libjsvml.so following JDK-8276025
  - ** This tarball is embargoed until 2022-01-18 @ 1pm PT. **
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-3
changelog:
  - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) and @JAVA_SPEC_VER@
  - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
  - Related: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-5
changelog:
  - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
  - Resolves: rhbz#2018189


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-6
changelog:
  - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode
  - Resolves: rhbz#2055396


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.5-0.1.ea
changelog:
  - Update to jdk-17.0.3.0+5
  - Update release notes to 17.0.3.0+5
  - Switch to EA mode for 17.0.3 pre-release builds.
  - Add JDK-8283911 to fix bad DEFAULT_PROMOTED_VERSION_PRE value
  - Related: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.6-1
changelog:
  - April 2022 security update to jdk 17.0.3+6
  - Update to jdk-17.0.3.0+6 pre-release tarball (17usec.17.0.3+5-220408)
  - Add JDK-8284548 regression fix missing from pre-release tarball but in jdk-17.0.3+6/jdk-17.0.3-ga
  - Update release notes to 17.0.3.0+6
  - Add missing README.md and generate_source_tarball.sh
  - Introduce tests/tests.yml, based on the one in java-11-openjdk
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
  - Resolves: rhbz#2073575


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.6-2
changelog:
  - JDK-8275082 should be listed as also resolving JDK-8278008 & CVE-2022-21476
  - Related: rhbz#2073575


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-2
changelog:
  - April 2022 security update to jdk 17.0.3+7
  - Update to jdk-17.0.3.0+7 tarball
  - Update release notes to 17.0.3.0+7
  - Add missing README.md and generate_source_tarball.sh
  - Resolves: rhbz#2073576


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:17.0.3.0.7-2
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2108190


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:17.0.4.0.1-0.2.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Related: rhbz#2084650


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-1
changelog:
  - Update to jdk-17.0.4.0+8
  - Update release notes to 17.0.4.0+8
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Move EA designator check to prep so failures can be caught earlier
  - Make EA designator check non-fatal while upstream is not maintaining it
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Include a test in the RPM to check the build has the correct vendor information.
  - Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that repository
  - * RH2094027: SunEC runtime permission for FIPS
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Turn on system security properties as part of the build's install section
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Run tests on the installed image, rather than the build image
  - Introduce variables to refer to the static library installation directories
  - Use relative symlinks so they work within the image
  - Run debug symbols check during build stage, before the install strips them
  - Resolves: rhbz#2084650
  - Resolves: rhbz#2099913
  - Resolves: rhbz#2108206
  - Resolves: rhbz#2108209
  - Resolves: rhbz#2106521


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.4.0.8-0.2.ea
changelog:
  - Returned absolute symlinks
  - Relative symlinks are breaking cjc, and deeper investigations are necessary
  -- why cjc intentionally skips relative symllinks
  - Images have to be workarounded differently
  - Related: rhbz#2084650


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-0.2.ea
changelog:
  - Revert the following changes until copy-java-configs has adapted to relative symlinks:
  - * Move cacerts replacement to install section and retain original of this and tzdb.dat
  - * Run tests on the installed image, rather than the build image
  - * Introduce variables to refer to the static library installation directories
  - * Use relative symlinks so they work within the image
  - * Run debug symbols check during build stage, before the install strips them
  - The move of turning on system security properties is retained so we don't ship with them off
  - Related: rhbz#2084650


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-0.2.ea
changelog:
  - Add rpminspect.yaml to turn off Java bytecode inspections
  - java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode
  - Resolves: rhbz#2109106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-1
changelog:
  - Update to jdk-17.0.4.1+1
  - Update release notes to 17.0.4.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2120059


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-2
changelog:
  - Update FIPS support to bring in latest changes
  - * RH2023467: Enable FIPS keys export
  - * RH2104724: Avoid import/export of DH private keys
  - * RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode
  - * Build the systemconf library on all platforms
  - * RH2048582: Support PKCS#12 keystores
  - * RH2020290: Support TLS 1.3 in FIPS mode
  - Resolves: rhbz#2123561
  - Resolves: rhbz#2123564
  - Resolves: rhbz#2123566
  - Resolves: rhbz#2123568
  - Resolves: rhbz#2123572


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:17.0.4.0.1-0.2.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Related: rhbz#2083316


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.4.0+7
  - Update release notes to 17.0.4.0+7
  - Switch to EA mode for 17.0.4 pre-release builds.
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Move EA designator check to prep so failures can be caught earlier
  - Make EA designator check non-fatal while upstream is not maintaining it
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Include a test in the RPM to check the build has the correct vendor information.
  - Resolves: rhbz#2083316


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.4.0.7-0.2.ea
changelog:
  - retutrned absolute symlinks
  - relative symlinks are breaking cjc, and deeper investigations are necessary
  -- why cjc intentionally skips relative symllinks
  - images have to be workarounded differently
  - Related: rhbz#2100674


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.2.ea
changelog:
  - Revert the following changes until copy-java-configs has adapted to relative symlinks:
  - * Move cacerts replacement to install section and retain original of this and tzdb.dat
  - * Run tests on the installed image, rather than the build image
  - * Introduce variables to refer to the static library installation directories
  - * Use relative symlinks so they work within the image
  - * Run debug symbols check during build stage, before the install strips them
  - The move of turning on system security properties is retained so we don't ship with them off
  - Related: rhbz#2100674


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-3
changelog:
  - Update to jdk-17.0.4.0+8
  - Update release notes to 17.0.4.0+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106522


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-2
changelog:
  - Update to jdk-17.0.4.1+1
  - Update release notes to 17.0.4.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119531


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-3
changelog:
  - Update FIPS support to bring in latest changes
  - * RH2104724: Avoid import/export of DH private keys
  - * RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode
  - * Build the systemconf library on all platforms
  - * RH2048582: Support PKCS#12 keystores
  - * RH2020290: Support TLS 1.3 in FIPS mode
  - Resolves: rhbz#2104724
  - Resolves: rhbz#2092507
  - Resolves: rhbz#2048582
  - Resolves: rhbz#2020290


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.4.1.1-4
changelog:
  - Fix flatpak builds (catering for their uncompressed manual pages)
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102734


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121263


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-6
changelog:
  - Backport JDK-8288985 to enable use of ChaCha20-Poly1305 with the PKCS11 provider
  - Upstream backport in progress: https://github.com/openjdk/jdk17u-dev/pull/650
  - Resolves: rhbz#2006351


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-1
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2132502
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.5+1
  - Update release notes to 17.0.5+1
  - Switch to EA mode for 17.0.5 pre-release builds.
  - Related: rhbz#2132503


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-1
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Switch to GA mode for final release.
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-4
changelog:
  - Update FIPS support to bring in latest changes
  - * Add nss.fips.cfg support to OpenJDK tree
  - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
  - * Remove forgotten dead code from RH2020290 and RH2104724
  - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build
  - Resolves: rhbz#2147473


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.6+1
  - Update release notes to 17.0.6+1
  - Switch to EA mode for 17.0.6 pre-release builds.
  - Re-enable EA upstream status check now it is being actively maintained.
  - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
  - Drop JDK-8275535 local patch now this has been accepted and backported upstream
  - Bump tzdata requirement to 2022e now the package is available in RHEL
  - Related: rhbz#2153010


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.2.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2153010


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-2
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  - Related: rhbz#2153010


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2147473


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-1
changelog:
  - Update to jdk-17.0.7.0+7
  - Update release notes to 17.0.7.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Update FIPS support against 17.0.7+6 and bring in latest changes:
  - * RH2134669: Add missing attributes when registering services in FIPS mode.
  - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
  - * RH1940064: Enable XML Signature provider in FIPS mode
  - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2186835
  - Resolves: rhbz#2186827
  - Resolves: rhbz#2186831


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.3.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150195


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2150195


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-6
changelog:
  - Include the java-17-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2189326


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-2
changelog:
  - Update to jdk-17.0.7.0+7
  - Update release notes to 17.0.7.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Update FIPS support against 17.0.7+6 and bring in latest changes:
  - * RH2134669: Add missing attributes when registering services in FIPS mode.
  - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
  - * RH1940064: Enable XML Signature provider in FIPS mode
  - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized
  - Fix trailing '.' in tarball name
  - Use portablerelease in vendor version to avoid inclusion of dist tag
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2186803
  - Resolves: rhbz#2186810
  - Resolves: rhbz#2186806


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-4
changelog:
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Related: rhbz#2203412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.8+1 (EA)
  - Update release notes to 17.0.8+1
  - Switch to EA mode
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 17.0.8+1
  - Bump bundled LCMS version to 2.15 as in jdk-17.0.8+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-17.0.8+1
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Related: rhbz#2217716


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.6-0.1.ea
changelog:
  - Update to jdk-17.0.8+6 (EA)
  - Sync the copy of the portable specfile with the latest update
  - Resolves: rhbz#2217716


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 1:17.0.8.0.7-2.0.1
changelog:
  - OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
  - OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
  - OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
  - harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
  - OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
  - OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
  - OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)
  - Add Oracle vendor bug URL [Orabug: 34340155]


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Update to jdk-20.0.2+9
  - Update release notes to 20.0.2+9
  - Update system crypto policy & FIPS patch from new fips-20u tree
  - Update generate_tarball.sh ICEDTEA_VERSION
  - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit)
  - Related: RHEL-12997


author: Petra Alice Mikova <pmikova@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Update to jdk-21.0.0+35
  - Update system crypto policy & FIPS patch from new fips-21u tree
  - Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal
  - Drop fakefeaturever now it is no longer needed
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Re-enable tzdata tests now we are on the latest JDK and things are back in sync
  - Install jaxp.properties introduced by JDK-8303530
  - Install lible.so introduced by JDK-8306983
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-2
changelog:
  - Update documentation (README.md)
  - Replace alt-java patch with a binary separate from the JDK
  - Drop stale patches that are of little use any more:
  - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work
  - * No accessibility subpackage to warrant RH1648242 & RH1648644 patches any more
  - * No use of system libjpeg turbo to warrant RH649512 patch any more
  - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed
  - Adapt alt-java test to new binary where there is always a set_speculation function
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-1
changelog:
  - Update to jdk-21.0.1.0+12 (GA)
  - Update release notes to 21.0.1.0+12
  - Sync the copy of the portable specfile with the latest update
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise bundled versions with 21u sources (FreeType, LCMS, HarfBuzz, libpng)
  - Sync generate_tarball.sh with 11u & 17u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Fix upstream release URL for OpenJDK source
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Synchronise runtime and buildtime tzdata requirements
  - Remove ghosts for binaries not in java-21-openjdk (pack200, rmid, unpack200)
  - Add missing jfr, jpackage and jwebserver alternative ghosts
  - Move jcmd to the headless package
  - Revert alt-java binary location to being within the JDK tree
  - Resolves: RHEL-12997
  - Resolves: RHEL-14954
  - Resolves: RHEL-14962
  - Resolves: RHEL-14958
  - Related: RHEL-14946
  - Resolves: RHEL-14959
  - Resolves: RHEL-14948


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Switch to using portable binaries built on RHEL 7
  - Sync the copy of the portable specfile with the RHEL 7 version
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Switch to using portable binaries built on RHEL 7
  - Sync the copy of the portable specfile with the RHEL 7 version
  - Related: RHEL-12995


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-3
changelog:
  - Include JDK-8311630 patch to implement Foreign Function & Memory preview API on s390x
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-16378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20984


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-2
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Define portablesuffix according to whether pkgos is defined or not
  - Related: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30944


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30944


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32405


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-2
changelog:
  - Sync the copy of the portable specfile with the latest update
  - Define portablesuffix according to whether pkgos is defined or not
  - Related: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30943


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30943


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32406


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45358
  - Resolves: RHEL-46027


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45358
  - Resolves: RHEL-47398


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47009


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - Resolves: RHEL-58798
  - Resolves: RHEL-17186
  - Resolves: RHEL-61346
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61346


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61346


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74404


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73549


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86981
  - Resolves: RHEL-86632


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90306


author: - Jiri Vanek <jvanek@redhat.com> - 0.32.92-1
changelog:
  - first update ever
  - to newest wrapper 32.92 with faith to fix some issues
  - added build requirments of gtk3-devel, at-spi2-atk-devel and at-spi2-core-devel
  - introduced libver macro to avoid duplicated entry


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.5.1-8
changelog:
  - Python 2 binary package renamed to python2-lasso
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: John Dennis <jdennis@redhat.com> - 2.5.1-12
changelog:
  - Resolves: rhbz#1542126, rhbz#1556016
  - xmlsec removed SOAP support, reimplement missing xmlSecSoap* in Lasso


author: <jdennis@redhat.com> - 2.6.0-1
changelog:
  - Upgrade to latest upstream
  - Build using Python3, add python3 subpackage
  - Resolves: rhbz#1592416 Enable perl subpackage


author: <jdennis@redhat.com> - 2.6.0-2
changelog:
  - fix language bindings package names to comply with guidelines,
    instead of lasso-lang use lang-lasso
  - fix conditional logic used to build on rhel
  - Resolves: rhbz#1589856 Drop python2 subpackage from RHEL8


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-5
changelog:
  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7
changelog:
  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-8
changelog:
  - Resolves: rhbz#1730018 - lasso includes "Destination" attribute in SAML
                             AuthnRequest populated with SP
                             AssertionConsumerServiceURL when ECP workflow
                             is used which leads to IdP-side errors


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - Remove maven-surefire-provider-junit5 dependency as it doesn't exist in RHEL 8.
  - Correct some typos.
  - Unable to build until criu-devel is available in RHEL 8.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972024


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972024


author: Tomas Halman <thalman@redhat.com> - 1.6-11
changelog:
  - Fix CVE-2025-48060 AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)
  - Resolves: RHEL-92987


author: Sam Booth <sam.booth@oracle.com> - 1.6-7.0.1
changelog:
  - Update to 1.6 upstream git commit b6be13d [Orabug: 36061610]
  - pull additional patches from Decimal literal number PR #1752 [Orabug: 36061610]
  - forward port upstream patches [Orabug: 36061610]


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Anna Khaitovich <akhaitov@redhat.com> - 0.13.1-0.3
changelog:
  - Don't package empty /usr/share/doc/json-c
  - Resolves: rhbz#1741076
  - Do not use --enable-rdrand
  - Resolves: rhbz#1806532


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.0-5
changelog:
  - Bugzilla #1747987 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.0-5
changelog:
  - Red Hat Bugzilla #1747987 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.6.2-6
changelog:
  - NativeProxy never calls releaseNativeResources - Memory Leak
    Additional patch to fix SSLSocket resource freeing
    Bugzilla #1822402


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.2-1
changelog:
  - Rebase to upstream stable release JSS v4.7.2
  - Red Hat Bugzilla #1822246 - Fix SSLSocket NULL pointer deference after close


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.7.3-1
changelog:
  - Rebase to upstream stable release JSS v4.7.3
  - Red Hat Bugzilla #1873235 - Fix SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT in pki ca-user-cert-add


author: Red Hat PKI Team <rhcs-maint@redhat.com> 4.8.1-1
changelog:
  - Rebase to upstream JSS v4.8.1
  - Red Hat Bugilla #1908541 - jss broke SCEP - missing PasswordChallenge class
  - Red Hat Bugilla #1489256 - [RFE] jss should support RSA with OAEP padding


author: Ryan O'Hara <rohara@redhat.com> - 2.0.10-6
changelog:
  - Fix segfault when smtp alerts configured (#1693706)
  - Fix double free when smtp_helo_name copied from local_name (#1693706)


author: Christine Caulfield <ccaulfie@redhat.com> - 2.1.5-11
changelog:
  - ipvs: Allow real servers to be specified with a weight of 0
    Resolves: RHEL-7699
  - vrrp: Fix using VMACs with unicast peers
    Resolves: RHEL-7694
  - lvs: if lost misc check child register checker again
    Resolves: RHEL-66742


author: Natalya Naumova <natalya.naumova@oracle.com> [4.18.0-425.3.1.0.1.el8.OL8]
changelog:
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
  - mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.10.el8uek]
changelog:
  - xfs, iomap: limit individual ioend chain lengths in writeback (Dave Chinner)  [Orabug: 34085022]  
  - xfs: only bother with sync_filesystem during readonly remount (Darrick J. Wong)  [Orabug: 34085022]  
  - vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong)  [Orabug: 34085022]  
  - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (Darrick J. Wong)  [Orabug: 34085022]  
  - xfs: flush inodegc workqueue tasks before cancel (Brian Foster)  [Orabug: 34085022]  
  - xfs: prevent UAF in xfs_log_item_in_current_chkpt (Darrick J. Wong)  [Orabug: 34085022]  
  - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (Dan Carpenter)  [Orabug: 34085022]  
  - xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner)  [Orabug: 34085022]  
  - xfs: only run COW extent recovery when there are no live extents (Darrick J. Wong)  [Orabug: 34085022]  
  - x86/platform/uv: Log gap hole end size (Mike Travis)  [Orabug: 34100359]  
  - x86/platform/uv: Update TSC sync state for UV5 (Mike Travis)  [Orabug: 34100359]  
  - x86/platform/uv: Update NMI Handler for UV5 (Mike Travis)  [Orabug: 34100359]  
  - perf/x86/intel/uncore: Fix the build on !CONFIG_PHYS_ADDR_T_64BIT (Ingo Molnar)  [Orabug: 34100359]  
  - perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Steve Wahl)  [Orabug: 34100359]  
  - net/rds: Delayed DR_SOCK_CANCEL (Gerd Rausch)  [Orabug: 34105317]  
  - uek-rpm: Move needed modules to core rpm (Somasundaram Krishnasamy)  [Orabug: 34124573] [Orabug: 34130428] [Orabug: 34130346]  
  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang)  [Orabug: 34135342]  {CVE-2022-1353}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.11.el8uek]
changelog:
  - uek: kabi: Update kABI files and enable the kABI checker (Saeed Mirzamohammadi)  [Orabug: 34044324]  
  - Revert "rds/ib: recover rds connection from stuck tx path" (Nagappan Ramasamy Palaniappan)  [Orabug: 34115603]  
  - Revert "rds/ib: reap tx completions during connection shutdown" (Nagappan Ramasamy Palaniappan)  [Orabug: 34115603]  
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Nagappan Ramasamy Palaniappan)  [Orabug: 34115603]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.12.el8uek]
changelog:
  - docs: kdump: Update the crashkernel description for arm64 (Zhen Lei)  [Orabug: 34052160]  
  - of: fdt: Add memory for devices by DT property "linux,usable-memory-range" (Chen Zhou)  [Orabug: 34052160]  
  - arm64: kdump: Reimplement crashkernel=X (Chen Zhou)  [Orabug: 34052160]  
  - arm64: Use insert_resource() to simplify code (Zhen Lei)  [Orabug: 34052160]  
  - kdump: return -ENOENT if required cmdline option does not exist (Zhen Lei)  [Orabug: 34052160]  
  - Revert "x86: kdump: replace the hard-coded alignment with macro CRASH_ALIGN" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86: kdump: make the lower bound of crash kernel reservation consistent" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86: kdump: use macro CRASH_ADDR_LOW_MAX in functions reserve_crashkernel()" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86: kdump: move xen_pv_domain() check and insert_resource() to setup_arch()" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86: kdump: move reserve_crashkernel[_low]() into crash_core.c" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86/elf: Move vmcore_elf_check_arch_cross to arch/x86/include/asm/elf.h" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "arm64: kdump: introduce some macroes for crash kernel reservation" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "arm64: kdump: reimplement crashkernel=X" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86, arm64: Add ARCH_WANT_RESERVE_CRASH_KERNEL config" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "kdump: update Documentation about crashkernel" (Dave Kleikamp)  [Orabug: 34052160]  
  - uek-rpm: Add modules required to pass selinux-testsuites to core rpm (Somasundaram Krishnasamy)  [Orabug: 34129238]  
  - uek-rpm: configs: enable 9P_FS for x86_64 (Todd Vierling)  [Orabug: 34146029]  
  - uek-rpm: Add modules to allow podman tests to run on core kernel. (Somasundaram Krishnasamy)  [Orabug: 34123777]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.13.el8uek]
changelog:
  - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra)  [Orabug: 34172708]  {CVE-2022-1729} 
  - uek-rpm: Enable dependencies needed by CONFIG_SND_SOC_INTEL_HDA_DSP_COMMON (Brian Maly)  [Orabug: 33711352]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.14.el8uek]
changelog:
  - lockdown: also lock down previous kgdb use (Daniel Thompson)  [Orabug: 34152698]  {CVE-2022-21499} 
  - io_uring: fix race between timeout flush and removal (Jens Axboe)  [Orabug: 34115159]  {CVE-2022-29582} 
  - kvm/x86: Inherit userspace's core scheduling cookie (Boris Ostrovsky)  [Orabug: 34195867]  
  - vhost: Inherit userspace's core scheduling cookie (Boris Ostrovsky)  [Orabug: 34195867]  
  - sched: Add interface for copying core scheduling cookie between two tasks (Boris Ostrovsky)  [Orabug: 34195867]  
  - KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson)  [Orabug: 34205798]  {CVE-2022-1852} {CVE-2022-1852} 
  - uek-rpm: Added squashfs module to core rpm for kdump (Vijayendra Suman)  [Orabug: 34206290]  
  - uek-rpm: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Harshit Mogalapalli)  [Orabug: 34209438]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.18.el8uek]
changelog:
  - Revert "ocfs2: mount shared volume without ha stack" (Junxiao Bi)  [Orabug: 33701900]  
  - KVM: x86/speculation: Disable Fill buffer clear within guests (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/srbds: Update SRBDS mitigation selection (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation: Add a common function for MD_CLEAR mitigation update (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - Documentation: Add documentation for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.20.el8uek]
changelog:
  - floppy: use a statically allocated error counter (Willy Tarreau)  [Orabug: 34218638]  {CVE-2022-1652} 
  - x86: Disable RET on kexec (Konrad Rzeszutek Wilk)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: do not enable IBPB-on-entry when IBPB is not supported (Thadeu Lima de Souza Cascardo)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - arm64: proton-pack: provide vulnerability file value for RETBleed (James Morse)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/cpu/amd: Enumerate BTC_NO (Andrew Cooper)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/common: Stamp out the stepping madness (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - KVM: VMX: Prevent RSB underflow before vmenter (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Fill RSB on vmexit for IBRS (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - KVM: VMX: Fix IBRS handling after vmexit (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - KVM: VMX: Convert launched argument to flags (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - KVM: VMX: Flatten __vmx_vcpu_run() (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Remove x86_spec_ctrl_mask (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Fix SPEC_CTRL write on SMT state change (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Fix firmware entry SPEC_CTRL handling (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/cpu/amd: Add Spectral Chicken (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Add entry UNRET validation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Do IBPB fallback check only once (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Add retbleed=ibpb (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/xen: Rename SYS* entry points (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Update Retpoline validation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - intel_idle: Disable IBRS during long idle (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Report Intel retbleed vulnerability (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Pawan Gupta)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Optimize SPEC_CTRL MSR writes (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/entry: Add kernel IBRS implementation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Enable STIBP for JMP2RET (Kim Phillips)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Add AMD retbleed= boot parameter (Alexandre Chartre)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Report AMD retbleed vulnerability (Alexandre Chartre)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Add magic AMD return-thunk (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Treat .text.__x86.* as noinstr (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Use return-thunk in asm code (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/sev: Avoid using __x86_return_thunk (Kim Phillips)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/kvm: Fix SETcc emulation for return thunks (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bpf: Use alternative RET encoding (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/ftrace: Use alternative RET encoding (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86,static_call: Use alternative RET encoding (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86,objtool: Create .return_sites (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Undo return-thunk damage (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/retpoline: Use -mfunction-return (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/retpoline: Swizzle retpoline thunk (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/retpoline: Cleanup some #ifdefery (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/cpufeatures: Move RETPOLINE flags to word 11 (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/kvm/vmx: Make noinstr clean (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/entry: Remove skip_r11rcx (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/entry: Fix register corruption in compat syscall (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/entry: Use PUSH_AND_CLEAR_REGS for compat (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/entry: Simplify entry_INT80_compat() (Linus Torvalds)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - crypto: x86/poly1305 - Fixup SLS (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86,static_call: Fix __static_call_return0 for i386 (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - kvm/emulate: Fix SETcc emulation function offsets with SLS (Borislav Petkov)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Default ignore INT3 for unreachable (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Add straight-line-speculation mitigation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Add straight-line-speculation validation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Prepare inline-asm for straight-line-speculation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Prepare asm files for straight-line-speculation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/lib/atomic64_386_32: Rename things (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/alternative: Relax text_poke_bp() constraint (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - static_call,x86: Robustify trampoline patching (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/xen: Move hypercall_page to top of the file (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.20.1.el8uek]
changelog:
  - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg)  [Orabug: 34386636]  {CVE-2022-21505}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-1.43.1.el8uek]
changelog:
  - LTS version: v5.15.43 (Jack Vogel)   
  - mptcp: Do TCP fallback on early DSS checksum failure (Mat Martineau)   
  - LTS version: v5.15.42 (Jack Vogel)   
  - afs: Fix afs_getattr() to refetch file status if callback break occurred (David Howells)   
  - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() (Yang Yingliang)   
  - mt76: mt7921e: fix possible probe failure after reboot (Sean Wang)   
  - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group (Jae Hyun Yoo)   
  - Input: ili210x - fix reset timing (Marek Vasut)   
  - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs (Shreyas K K)   
  - net: atlantic: verify hw_head_ lies within TX buffer ring (Grant Grundler)   
  - net: atlantic: add check for MAX_SKB_FRAGS (Grant Grundler)   
  - net: atlantic: reduce scope of is_rsc_complete (Grant Grundler)   
  - net: atlantic: fix "frag[0] not initialized" (Grant Grundler)   
  - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() (Yang Yingliang)   
  - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() (Yang Yingliang)   
  - nl80211: fix locking in nl80211_set_tx_bitrate_mask() (Johannes Berg)   
  - net: fix wrong network header length (Lina Wang)   
  - fbdev: Prevent possible use-after-free in fb_release() (Daniel Vetter)   
  - Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered" (Javier Martinez Canillas)   
  - selftests: add ping test with ping_group_range tuned (Nicolas Dichtel)   
  - nl80211: validate S1G channel width (Kieran Frewen)   
  - mac80211: fix rx reordering with non explicit / psmp ack policy (Felix Fietkau)   
  - scsi: qla2xxx: Fix missed DMA unmap for aborted commands (Gleb Chesnokov)   
  - scsi: scsi_dh_alua: Properly handle the ALUA transitioning state (Brian Bunker)   
  - perf bench numa: Address compiler error on s390 (Thomas Richter)   
  - perf regs x86: Fix arch__intr_reg_mask() for the hybrid platform (Kan Liang)   
  - gpio: mvebu/pwm: Refuse requests with inverted polarity (Uwe Kleine-König)   
  - gpio: gpio-vf610: do not touch other bits when set the target bit (Haibo Chen)   
  - perf build: Fix check for btf__load_from_kernel_by_id() in libbpf (Arnaldo Carvalho de Melo)   
  - scsi: ufs: core: Fix referencing invalid rsp field (Daejun Park)   
  - riscv: dts: sifive: fu540-c000: align dma node name with dtschema (Krzysztof Kozlowski)   
  - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. (Andrew Lunn)   
  - netfilter: flowtable: move dst_check to packet path (Ritaro Takenaka)   
  - netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Pablo Neira Ayuso)   
  - netfilter: flowtable: fix TCP flow teardown (Pablo Neira Ayuso)   
  - igb: skip phy status check where unavailable (Kevin Mitchell)   
  - mptcp: fix checksum byte order (Paolo Abeni)   
  - mptcp: reuse __mptcp_make_csum in validate_data_csum (Geliang Tang)   
  - mptcp: change the parameter of __mptcp_make_csum (Geliang Tang)   
  - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 (Ard Biesheuvel)   
  - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 (Ard Biesheuvel)   
  - net: af_key: add check for pfkey_broadcast in function pfkey_process (Jiasheng Jiang)   
  - net/mlx5e: Properly block LRO when XDP is enabled (Maxim Mikityanskiy)   
  - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Maor Dickman)   
  - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc (Duoming Zhou)   
  - net/qla3xxx: Fix a test in ql_reset_work() (Christophe JAILLET)   
  - clk: at91: generated: consider range when calculating best rate (Codrin Ciubotariu)   
  - ice: Fix interrupt moderation settings getting cleared (Michal Wilczynski)   
  - ice: move ice_container_type onto ice_ring_container (Maciej Fijalkowski)   
  - ice: fix possible under reporting of ethtool Tx and Rx statistics (Paul Greenwalt)   
  - ice: fix crash when writing timestamp on RX rings (Arkadiusz Kubalewski)   
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu)   
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu)   
  - net: systemport: Fix an error handling path in bcm_sysport_probe() (Christophe JAILLET)   
  - Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler" (Pali Rohár)   
  - netfilter: nft_flow_offload: fix offload with pppoe + vlan (Felix Fietkau)   
  - net: fix dev_fill_forward_path with pppoe + bridge (Felix Fietkau)   
  - netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices (Felix Fietkau)   
  - netfilter: flowtable: fix excessive hw offload attempts after failure (Felix Fietkau)   
  - net/sched: act_pedit: sanitize shift argument before usage (Paolo Abeni)   
  - xfrm: fix "disable_policy" flag use when arriving from different devices (Eyal Birger)   
  - xfrm: rework default policy structure (Nicolas Dichtel)   
  - net: macb: Increment rx bd head after allocating skb and buffer (Harini Katakam)   
  - net: ipa: record proper RX transaction count (Alex Elder)   
  - ALSA: hda - fix unused Realtek function when PM is not enabled (Randy Dunlap)   
  - pinctrl: mediatek: mt8365: fix IES control pins (Mattijs Korpershoek)   
  - ARM: dts: aspeed: Add video engine to g6 (Howard Chiu)   
  - ARM: dts: aspeed: Add secure boot controller node (Joel Stanley)   
  - ARM: dts: aspeed: Add ADC for AST2600 and enable for Rainier and Everest (Eddie James)   
  - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group (Jae Hyun Yoo)   
  - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl (Jae Hyun Yoo)   
  - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi (Jae Hyun Yoo)   
  - dma-buf: ensure unique directory name for dmabuf stats (Charan Teja Kalla)   
  - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (Jérôme Pouiller)   
  - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() (Hangyu Hua)   
  - drm/i915/dmc: Add MMIO range restrictions (Anusha Srivatsa)   
  - drm/amd: Don't reset dGPUs if the system is going to s2idle (Mario Limonciello)   
  - libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov)   
  - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ (Ondrej Mosnacek)   
  - arm64: mte: Ensure the cleared tags are visible before setting the PTE (Catalin Marinas)   
  - arm64: paravirt: Use RCU read locks to guard stolen_time (Prakruthi Deepak Heragu)   
  - KVM: x86/mmu: Update number of zapped pages even if page list is stable (Sean Christopherson)   
  - Revert "can: m_can: pci: use custom bit timings for Elkhart Lake" (Jarkko Nikula)   
  - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold (Rafael J. Wysocki)   
  - Fix double fget() in vhost_net_set_backend() (Al Viro)   
  - selinux: fix bad cleanup on error in hashtab_duplicate() (Ondrej Mosnacek)   
  - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise (Werner Sembach)   
  - ALSA: wavefront: Proper check of get_user() error (Takashi Iwai)   
  - ALSA: usb-audio: Restore Rane SL-1 quirk (Takashi Iwai)   
  - nilfs2: fix lockdep warnings during disk space reclamation (Ryusuke Konishi)   
  - nilfs2: fix lockdep warnings in page operations for btree nodes (Ryusuke Konishi)   
  - ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() (linyujun)   
  - platform/chrome: cros_ec_debugfs: detach log reader wq from devm (Tzung-Bi Shih)   
  - drbd: remove usage of list iterator variable after loop (Jakob Koschel)   
  - MIPS: lantiq: check the return value of kzalloc() (Xiaoke Wang)   
  - fs: fix an infinite loop in iomap_fiemap (Guo Xuenan)   
  - rtc: mc146818-lib: Fix the AltCentury for AMD platforms (Mario Limonciello)   
  - nvme-multipath: fix hang when disk goes live over reconnect (Anton Eidelman)   
  - nvmet: use a private workqueue instead of the system workqueue (Sagi Grimberg)   
  - tools/virtio: compile with -pthread (Michael S. Tsirkin)   
  - vhost_vdpa: don't setup irq offloading when irq_num < 0 (Zhu Lingshan)   
  - s390/pci: improve zpci_dev reference counting (Niklas Schnelle)   
  - s390/traps: improve panic message for translation-specification exception (Heiko Carstens)   
  - ALSA: hda/realtek: Enable headset mic on Lenovo P360 (Kai-Heng Feng)   
  - crypto: x86/chacha20 - Avoid spurious jumps to other functions (Peter Zijlstra)   
  - crypto: stm32 - fix reference leak in stm32_crc_remove (Zheng Yongjun)   
  - rtc: sun6i: Fix time overflow handling (Andre Przywara)   
  - gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher)   
  - nvme-pci: add quirks for Samsung X5 SSDs (Monish Kumar R)   
  - Input: stmfts - fix reference leak in stmfts_input_open (Zheng Yongjun)   
  - Input: add bounds checking to input_set_capability() (Jeff LaBundy)   
  - um: Cleanup syscall_handler_t definition/cast, fix warning (David Gow)   
  - rtc: pcf2127: fix bug when reading alarm registers (Hugo Villeneuve)   
  - rtc: fix use-after-free on device removal (Vincent Whitchurch)   
  - Revert "drm/i915/opregion: check port number bounds for SWSCI display power state" (Greg Thelen)   
  - mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool (Hyeonggon Yoo)   
  - Watchdog: sp5100_tco: Enable Family 17h+ CPUs (Terry Bowman)   
  - Watchdog: sp5100_tco: Add initialization using EFCH MMIO (Terry Bowman)   
  - Watchdog: sp5100_tco: Refactor MMIO base address initialization (Terry Bowman)   
  - Watchdog: sp5100_tco: Move timer initialization into function (Terry Bowman)   
  - i2c: piix4: Enable EFCH MMIO for Family 17h+ (Terry Bowman)   
  - i2c: piix4: Add EFCH MMIO support for SMBus port select (Terry Bowman)   
  - i2c: piix4: Add EFCH MMIO support to SMBus base address detect (Terry Bowman)   
  - i2c: piix4: Add EFCH MMIO support to region request and release (Terry Bowman)   
  - i2c: piix4: Move SMBus port selection into function (Terry Bowman)   
  - i2c: piix4: Move SMBus controller base address detect into function (Terry Bowman)   
  - i2c: piix4: Move port I/O region request/release code into functions (Terry Bowman)   
  - i2c: piix4: Replace hardcoded memory map size with a #define (Terry Bowman)   
  - kernel/resource: Introduce request_mem_region_muxed() (Terry Bowman)   
  - io_uring: arm poll for non-nowait files (Pavel Begunkov)   
  - usb: gadget: fix race when gadget driver register via ioctl (Schspa Shi)   
  - LTS version: v5.15.41 (Jack Vogel)   
  - usb: gadget: uvc: allow for application to cleanly shutdown (Dan Vacura)   
  - usb: gadget: uvc: rename function to be more consistent (Michael Tretter)   
  - ping: fix address binding wrt vrf (Nicolas Dichtel)   
  - mm/hwpoison: use pr_err() instead of dump_page() in get_any_page() (Naoya Horiguchi)   
  - dma-buf: call dma_buf_stats_setup after dmabuf is in valid list (Charan Teja Reddy)   
  - Revert "drm/amd/pm: keep the BACO feature enabled for suspend" (Alex Deucher)   
  - drm/vmwgfx: Initialize drm_mode_fb_cmd2 (Zack Rusin)   
  - SUNRPC: Ensure that the gssproxy client can start in a connected state (Trond Myklebust)   
  - net: phy: micrel: Pass .probe for KS8737 (Fabio Estevam)   
  - net: phy: micrel: Do not use kszphy_suspend/resume for KSZ8061 (Fabio Estevam)   
  - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map (Mike Rapoport)   
  - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long)   
  - writeback: Avoid skipping inode writeback (Jing Xia)   
  - net: phy: Fix race condition on link status change (Francesco Dolcini)   
  - net: atlantic: always deep reset on pm op, fixing up my null deref regression (Manuel Ullmann)   
  - i40e: i40e_main: fix a missing check on list iterator (Xiaomeng Tong)   
  - drm/nouveau/tegra: Stop using iommu_present() (Robin Murphy)   
  - drm/vmwgfx: Disable command buffers on svga3 without gbobjects (Zack Rusin)   
  - mm/huge_memory: do not overkill when splitting huge_zero_page (Xu Yu)   
  - Revert "mm/memory-failure.c: skip huge_zero_page in memory_failure()" (Xu Yu)   
  - ceph: fix setting of xattrs on async created inodes (Jeff Layton)   
  - serial: 8250_mtk: Fix register address for XON/XOFF character (AngeloGioacchino Del Regno)   
  - serial: 8250_mtk: Fix UART_EFR register address (AngeloGioacchino Del Regno)   
  - fsl_lpuart: Don't enable interrupts too early (Indan Zupancic)   
  - slimbus: qcom: Fix IRQ check in qcom_slim_probe (Miaoqian Lin)   
  - USB: serial: option: add Fibocom MA510 modem (Sven Schwermer)   
  - USB: serial: option: add Fibocom L610 modem (Sven Schwermer)   
  - USB: serial: qcserial: add support for Sierra Wireless EM7590 (Ethan Yang)   
  - USB: serial: pl2303: add device id for HP LM930 Display (Scott Chen)   
  - usb: typec: tcpci_mt6360: Update for BMC PHY setting (ChiYuan Huang)   
  - usb: typec: tcpci: Don't skip cleanup in .remove() on error (Uwe Kleine-König)   
  - usb: cdc-wdm: fix reading stuck on device close (Sergey Ryazanov)   
  - tty: n_gsm: fix mux activation issues in gsm_config() (Daniel Starke)   
  - tty: n_gsm: fix buffer over-read in gsm_dlci_data() (Daniel Starke)   
  - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() (Yang Yingliang)   
  - x86/mm: Fix marking of unused sub-pmd ranges (Adrian-Ken Rueegsegger)   
  - usb: xhci-mtk: fix fs isoc's transfer error (Chunfeng Yun)   
  - KVM: PPC: Book3S PR: Enable MSR_DR for switch_mmu_context() (Alexander Graf)   
  - firmware_loader: use kernel credentials when reading firmware (Thiébaud Weksteen)   
  - interconnect: Restore sync state by ignoring ipa-virt in provider count (Stephen Boyd)   
  - tcp: drop the hash_32() part from the index calculation (Willy Tarreau)   
  - tcp: increase source port perturb table to 2^16 (Willy Tarreau)   
  - tcp: dynamically allocate the perturb table used by source ports (Willy Tarreau)   
  - tcp: add small random increments to the source port (Willy Tarreau)   
  - tcp: resalt the secret every 10 seconds (Eric Dumazet)   
  - tcp: use different parts of the port_offset for index and offset (Willy Tarreau)   
  - secure_seq: use the 64 bits of the siphash for port offset calculation (Willy Tarreau)   
  - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT (Matthew Hagan)   
  - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation (Shravya Kumbham)   
  - ASoC: SOF: Fix NULL pointer exception in sof_pci_probe callback (Ajit Kumar Pandey)   
  - s390: disable -Warray-bounds (Sven Schnelle)   
  - ASoC: ops: Validate input values in snd_soc_put_volsw_range() (Mark Brown)   
  - ASoC: max98090: Generate notifications on changes for custom control (Mark Brown)   
  - ASoC: max98090: Reject invalid values in custom control put() (Mark Brown)   
  - iommu: arm-smmu: disable large page mappings for Nvidia arm-smmu (Ashish Mhetre)   
  - RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() (Duoming Zhou)   
  - hwmon: (f71882fg) Fix negative temperature (Ji-Ze Hong (Peter Hong))   
  - gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher)   
  - drm/vmwgfx: Fix fencing on SVGAv3 (Zack Rusin)   
  - tls: Fix context leak on tls_device_down (Maxim Mikityanskiy)   
  - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() (Taehee Yoo)   
  - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending (Guangguan Wang)   
  - net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() (Florian Fainelli)   
  - drm/vc4: hdmi: Fix build error for implicit function declaration (Hui Tang)   
  - net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral (Florian Fainelli)   
  - net: ethernet: mediatek: ppe: fix wrong size passed to memset() (Yang Yingliang)   
  - net/sched: act_pedit: really ensure the skb is writable (Paolo Abeni)   
  - s390/lcs: fix variable dereferenced before check (Alexandra Winter)   
  - s390/ctcm: fix potential memory leak (Alexandra Winter)   
  - s390/ctcm: fix variable dereferenced before check (Alexandra Winter)   
  - virtio: fix virtio transitional ids (Shunsuke Mie)   
  - arm64: vdso: fix makefile dependency on vdso.so (Joey Gouly)   
  - selftests: vm: Makefile: rename TARGETS to VMTARGETS (Joel Savitz)   
  - procfs: prevent unprivileged processes accessing fdinfo dir (Kalesh Singh)   
  - hwmon: (ltq-cputemp) restrict it to SOC_XWAY (Randy Dunlap)   
  - dim: initialize all struct fields (Jesse Brandeburg)   
  - ionic: fix missing pci_release_regions() on error in ionic_probe() (Yang Yingliang)   
  - nfs: fix broken handling of the softreval mount option (Dan Aloni)   
  - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg)   
  - net: sfc: fix memory leak due to ptp channel (Taehee Yoo)   
  - sfc: Use swap() instead of open coding it (Jiapeng Chong)   
  - fbdev: efifb: Fix a use-after-free due early fb_info cleanup (Javier Martinez Canillas)   
  - net: chelsio: cxgb4: Avoid potential negative array offset (Kees Cook)   
  - netlink: do not reset transport header in netlink_recvmsg() (Eric Dumazet)   
  - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() (Christophe JAILLET)   
  - ipv4: drop dst in multicast routing path (Lokesh Dhoundiyal)   
  - ice: fix PTP stale Tx timestamps cleanup (Michal Michalik)   
  - ice: Fix race during aux device (un)plugging (Ivan Vecera)   
  - platform/surface: aggregator: Fix initialization order when compiling as builtin module (Maximilian Luz)   
  - fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas)   
  - fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas)   
  - fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas)   
  - net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters (Vladimir Oltean)   
  - net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 (Vladimir Oltean)   
  - net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups (Vladimir Oltean)   
  - net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted (Vladimir Oltean)   
  - net: Fix features skip in for_each_netdev_feature() (Tariq Toukan)   
  - mac80211: Reset MBSSID parameters upon connection (Manikanta Pubbisetty)   
  - hwmon: (tmp401) Add OF device ID table (Camel Guo)   
  - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing (Guenter Roeck)   
  - batman-adv: Don't skb_split skbuffs with frag_list (Sven Eckelmann)   
  - LTS version: v5.15.40 (Jack Vogel)   
  - mm: fix invalid page pointer returned with FOLL_PIN gups (Peter Xu)   
  - mm/mlock: fix potential imbalanced rlimit ucounts adjustment (Miaohe Lin)   
  - mm/hwpoison: fix error page recovered but reported "not recovered" (Naoya Horiguchi)   
  - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() (Muchun Song)   
  - mm: shmem: fix missing cache flush in shmem_mfill_atomic_pte() (Muchun Song)   
  - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() (Muchun Song)   
  - mm: fix missing cache flush for all tail pages of compound page (Muchun Song)   
  - udf: Avoid using stale lengthOfImpUse (Jan Kara)   
  - rfkill: uapi: fix RFKILL_IOCTL_MAX_SIZE ioctl request definition (Gleb Fotengauer-Malinovskiy)   
  - Bluetooth: Fix the creation of hdev->name (Itay Iellin)   
  - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' (Arnaldo Carvalho de Melo)   
  - kbuild: move objtool_args back to scripts/Makefile.build (Masahiro Yamada)   
  - LTS version: v5.15.39 (Jack Vogel)   
  - PCI: aardvark: Update comment about link going down after link-up (Marek Behún)   
  - PCI: aardvark: Drop __maybe_unused from advk_pcie_disable_phy() (Marek Behún)   
  - PCI: aardvark: Don't mask irq when mapping (Pali Rohár)   
  - PCI: aardvark: Remove irq_mask_ack() callback for INTx interrupts (Pali Rohár)   
  - PCI: aardvark: Use separate INTA interrupt for emulated root bridge (Pali Rohár)   
  - PCI: aardvark: Fix support for PME requester on emulated bridge (Pali Rohár)   
  - PCI: aardvark: Add support for PME interrupts (Pali Rohár)   
  - PCI: aardvark: Optimize writing PCI_EXP_RTCTL_PMEIE and PCI_EXP_RTSTA_PME on emulated bridge (Pali Rohár)   
  - PCI: aardvark: Add support for ERR interrupt on emulated bridge (Pali Rohár)   
  - PCI: aardvark: Enable MSI-X support (Pali Rohár)   
  - PCI: aardvark: Fix setting MSI address (Pali Rohár)   
  - PCI: aardvark: Add support for masking MSI interrupts (Pali Rohár)   
  - PCI: aardvark: Refactor unmasking summary MSI interrupt (Pali Rohár)   
  - PCI: aardvark: Use dev_fwnode() instead of of_node_to_fwnode(dev->of_node) (Marek Behún)   
  - PCI: aardvark: Make msi_domain_info structure a static driver structure (Marek Behún)   
  - PCI: aardvark: Make MSI irq_chip structures static driver structures (Marek Behún)   
  - PCI: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (Pali Rohár)   
  - PCI: aardvark: Rewrite IRQ code to chained IRQ handler (Pali Rohár)   
  - PCI: aardvark: Replace custom PCIE_CORE_INT_* macros with PCI_INTERRUPT_* (Pali Rohár)   
  - PCI: aardvark: Disable common PHY when unbinding driver (Pali Rohár)   
  - PCI: aardvark: Disable link training when unbinding driver (Pali Rohár)   
  - PCI: aardvark: Assert PERST# when unbinding driver (Pali Rohár)   
  - PCI: aardvark: Fix memory leak in driver unbind (Pali Rohár)   
  - PCI: aardvark: Mask all interrupts when unbinding driver (Pali Rohár)   
  - PCI: aardvark: Disable bus mastering when unbinding driver (Pali Rohár)   
  - PCI: aardvark: Comment actions in driver remove method (Pali Rohár)   
  - PCI: aardvark: Clear all MSIs at setup (Pali Rohár)   
  - PCI: aardvark: Add support for DEVCAP2, DEVCTL2, LNKCAP2 and LNKCTL2 registers on emulated bridge (Pali Rohár)   
  - PCI: pci-bridge-emul: Add definitions for missing capabilities registers (Pali Rohár)   
  - PCI: pci-bridge-emul: Add description for class_revision field (Pali Rohár)   
  - rcu: Apply callbacks processing time limit only on softirq (Frederic Weisbecker)   
  - rcu: Fix callbacks processing time limit retaining cond_resched() (Frederic Weisbecker)   
  - Revert "parisc: Mark sched_clock unstable only if clocks are not syncronized" (Helge Deller)   
  - mmc: rtsx: add 74 Clocks in power on flow (Ricky WU)   
  - selftest/vm: verify remap destination address in mremap_test (Sidhartha Kumar)   
  - selftest/vm: verify mmap addr in mremap_test (Sidhartha Kumar)   
  - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (Wanpeng Li)   
  - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (Paolo Bonzini)   
  - KVM: x86: Do not change ICR on write to APIC_SELF_IPI (Paolo Bonzini)   
  - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (Wanpeng Li)   
  - KVM: selftests: Silence compiler warning in the kvm_page_table_test (Thomas Huth)   
  - kvm: selftests: do not use bitfields larger than 32-bits for PTEs (Paolo Bonzini)   
  - iommu/dart: Add missing module owner to ops structure (Hector Martin)   
  - net/mlx5e: Lag, Don't skip fib events on current dst (Vlad Buslov)   
  - net/mlx5e: Lag, Fix fib_info pointer assignment (Vlad Buslov)   
  - net/mlx5e: Lag, Fix use-after-free in fib event handler (Vlad Buslov)   
  - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu (Aya Levin)   
  - fbdev: Make fb_release() return -ENODEV if fbdev was unregistered (Javier Martinez Canillas)   
  - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (Sandipan Das)   
  - gpio: mvebu: drop pwm base assignment (Baruch Siach)   
  - drm/amdgpu: Ensure HDA function is suspended before ASIC reset (Kai-Heng Feng)   
  - drm/amdgpu: don't set s3 and s0ix at the same time (Mario Limonciello)   
  - drm/amdgpu: explicitly check for s0ix when evicting resources (Mario Limonciello)   
  - drm/amdgpu: unify BO evicting method in amdgpu_ttm (Nirmoy Das)   
  - btrfs: always log symlinks in full mode (Filipe Manana)   
  - btrfs: force v2 space cache usage for subpage mount (Qu Wenruo)   
  - smsc911x: allow using IRQ0 (Sergey Shtylyov)   
  - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer (Vladimir Oltean)   
  - bnxt_en: Fix unnecessary dropping of RX packets (Michael Chan)   
  - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (Somnath Kotur)   
  - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational (Ido Schimmel)   
  - rxrpc: Enable IPv6 checksums on transport socket (David Howells)   
  - mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter() (Eric Dumazet)   
  - hinic: fix bug of wq out of bound access (Qiao Ma)   
  - btrfs: do not BUG_ON() on failure to update inode when setting xattr (Filipe Manana)   
  - drm/msm/dp: remove fail safe mode related code (Kuogee Hsieh)   
  - selftests/net: so_txtime: usage(): fix documentation of default clock (Marc Kleine-Budde)   
  - selftests/net: so_txtime: fix parsing of start time stamp on 32 bit systems (Marc Kleine-Budde)   
  - net: emaclite: Add error handling for of_address_to_resource() (Shravya Kumbham)   
  - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() (Eric Dumazet)   
  - net: cpsw: add missing of_node_put() in cpsw_probe_dt() (Yang Yingliang)   
  - net: mdio: Fix ENOMEM return value in BCM6368 mux bus controller (Niels Dossche)   
  - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() (Yang Yingliang)   
  - net: dsa: mt7530: add missing of_node_put() in mt7530_setup() (Yang Yingliang)   
  - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() (Yang Yingliang)   
  - NFSv4: Don't invalidate inode attributes on delegation return (Trond Myklebust)   
  - RDMA/irdma: Fix possible crash due to NULL netdev in notifier (Mustafa Ismail)   
  - RDMA/irdma: Reduce iWARP QP destroy time (Shiraz Saleem)   
  - RDMA/irdma: Flush iWARP QP if modified to ERR from RTR state (Tatyana Nikolova)   
  - RDMA/siw: Fix a condition race issue in MPA request processing (Cheng Xu)   
  - SUNRPC release the transport of a relocated task with an assigned transport (Olga Kornievskaia)   
  - selftests/seccomp: Don't call read() on TTY from background pgrp (Jann Horn)   
  - net/mlx5: Fix deadlock in sync reset flow (Moshe Shemesh)   
  - net/mlx5: Avoid double clear or set of sync reset requested (Moshe Shemesh)   
  - net/mlx5e: Fix the calling of update_buffer_lossy() API (Mark Zhang)   
  - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release (Paul Blakey)   
  - net/mlx5e: Don't match double-vlan packets if cvlan is not set (Vlad Buslov)   
  - net/mlx5e: Fix trust state reset in reload (Moshe Tal)   
  - iommu/dart: check return value after calling platform_get_resource() (Yang Yingliang)   
  - iommu/vt-d: Drop stop marker messages (Lu Baolu)   
  - ASoC: soc-ops: fix error handling (Pierre-Louis Bossart)   
  - ASoC: dmaengine: Restore NULL prepare_slave_config() callback (Codrin Ciubotariu)   
  - hwmon: (pmbus) disable PEC if not enabled (Adam Wujek)   
  - hwmon: (adt7470) Fix warning on module removal (Armin Wolf)   
  - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) (Puyou Lu)   
  - gpio: visconti: Fix fwnode of GPIO IRQ (Nobuhiro Iwamatsu)   
  - NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou)   
  - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou)   
  - nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou)   
  - can: grcan: only use the NAPI poll budget for RX (Andreas Larsson)   
  - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs (Andreas Larsson)   
  - can: grcan: use ofdev->dev when allocating DMA memory (Daniel Hellstrom)   
  - can: isotp: remove re-binding of bound socket (Oliver Hartkopp)   
  - can: grcan: grcan_close(): fix deadlock (Duoming Zhou)   
  - s390/dasd: Fix read inconsistency for ESE DASD devices (Jan Höppner)   
  - s390/dasd: Fix read for ESE with blksize < 4k (Jan Höppner)   
  - s390/dasd: prevent double format of tracks for ESE devices (Stefan Haberland)   
  - s390/dasd: fix data corruption for ESE devices (Stefan Haberland)   
  - ASoC: meson: Fix event generation for AUI CODEC mux (Mark Brown)   
  - ASoC: meson: Fix event generation for G12A tohdmi mux (Mark Brown)   
  - ASoC: meson: Fix event generation for AUI ACODEC mux (Mark Brown)   
  - ASoC: wm8958: Fix change notifications for DSP controls (Mark Brown)   
  - ASoC: da7219: Fix change notifications for tone generator frequency (Mark Brown)   
  - genirq: Synchronize interrupt thread startup (Thomas Pfaff)   
  - net: stmmac: disable Split Header (SPH) for Intel platforms (Tan Tee Min)   
  - firewire: core: extend card->lock in fw_core_handle_bus_reset (Niels Dossche)   
  - firewire: remove check of list iterator against head past the loop body (Jakob Koschel)   
  - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye)   
  - timekeeping: Mark NMI safe time accessors as notrace (Kurt Kanzenbach)   
  - Revert "SUNRPC: attempt AF_LOCAL connect on setup" (Trond Myklebust)   
  - RISC-V: relocate DTB if it's outside memory region (Nick Kossifidis)   
  - drm/amdgpu: do not use passthrough mode in Xen dom0 (Marek Marczykowski-Górecki)   
  - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT (Harry Wentland)   
  - iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range() (Nicolin Chen)   
  - iommu/vt-d: Calculate mask for non-aligned flushes (David Stevens)   
  - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (Kyle Huey)   
  - x86/fpu: Prevent FPU state corruption (Thomas Gleixner)   
  - gpiolib: of: fix bounds check for 'gpio-reserved-ranges' (Andrei Lalaev)   
  - mmc: core: Set HS clock speed before sending HS CMD13 (Brian Norris)   
  - mmc: sunxi-mmc: Fix DMA descriptors allocated above 32 bits (Samuel Holland)   
  - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC (Shaik Sajida Bhanu)   
  - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (Takashi Sakamoto)   
  - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers (Zihao Wang)   
  - parisc: Merge model and model name into one line in /proc/cpuinfo (Helge Deller)   
  - MIPS: Fix CP0 counter erratum detection for R4k CPUs (Maciej W. Rozycki)   
  - LTS version: v5.15.38 (Jack Vogel)   
  - powerpc/64: Add UADDR64 relocation support (Alexey Kardashevskiy)   
  - objtool: Fix type of reloc::addend (Peter Zijlstra)   
  - objtool: Fix code relocs vs weak symbols (Peter Zijlstra)   
  - eeprom: at25: Use DMA safe buffers (Christophe Leroy)   
  - perf symbol: Remove arch__symbols__fixup_end() (Namhyung Kim)   
  - tty: n_gsm: fix software flow control handling (Daniel Starke)   
  - tty: n_gsm: fix incorrect UA handling (Daniel Starke)   
  - tty: n_gsm: fix reset fifo race condition (Daniel Starke)   
  - tty: n_gsm: fix missing tty wakeup in convergence layer type 2 (Daniel Starke)   
  - tty: n_gsm: fix wrong signal octets encoding in MSC (Daniel Starke)   
  - tty: n_gsm: fix wrong command frame length field encoding (Daniel Starke)   
  - tty: n_gsm: fix wrong command retry handling (Daniel Starke)   
  - tty: n_gsm: fix missing explicit ldisc flush (Daniel Starke)   
  - tty: n_gsm: fix wrong DLCI release order (Daniel Starke)   
  - tty: n_gsm: fix insufficient txframe size (Daniel Starke)   
  - netfilter: nft_socket: only do sk lookups when indev is available (Florian Westphal)   
  - tty: n_gsm: fix malformed counter for out of frame data (Daniel Starke)   
  - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 (Daniel Starke)   
  - tty: n_gsm: fix mux cleanup after unregister tty device (Daniel Starke)   
  - tty: n_gsm: fix decoupled mux resource (Daniel Starke)   
  - tty: n_gsm: fix restart handling via CLD command (Daniel Starke)   
  - perf symbol: Update symbols__fixup_end() (Namhyung Kim)   
  - perf symbol: Pass is_kallsyms to symbols__fixup_end() (Namhyung Kim)   
  - x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov)   
  - ARM: dts: imx8mm-venice-gw{71xx,72xx,73xx}: fix OTG controller OC mode (Tim Harvey)   
  - ARM: dts: at91: sama7g5ek: enable pull-up on flexcom3 console lines (Eugen Hristev)   
  - btrfs: fix leaked plug after failure syncing log on zoned filesystems (Filipe Manana)   
  - thermal: int340x: Fix attr.show callback prototype (Kees Cook)   
  - ACPI: processor: idle: Avoid falling back to C3 type C-states (Ville Syrjälä)   
  - net: ethernet: stmmac: fix write to sgmii_adapter_base (Dinh Nguyen)   
  - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses (Imre Deak)   
  - drm/i915: Check EDID for HDR static metadata when choosing blc (Jouni Högander)   
  - netfilter: Update ip6_route_me_harder to consider L3 domain (Martin Willi)   
  - mtd: rawnand: qcom: fix memory corruption that causes panic (Md Sadre Alam)   
  - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time (Zqiang)   
  - zonefs: Clear inode information flags on inode creation (Damien Le Moal)   
  - zonefs: Fix management of open zones (Damien Le Moal)   
  - Revert "ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40" (Ville Syrjälä)   
  - selftest/vm: verify remap destination address in mremap_test (Sidhartha Kumar)   
  - selftest/vm: verify mmap addr in mremap_test (Sidhartha Kumar)   
  - powerpc/perf: Fix 32bit compile (Alexey Kardashevskiy)   
  - drivers: net: hippi: Fix deadlock in rr_close() (Duoming Zhou)   
  - cifs: destage any unwritten data to the server before calling copychunk_write (Ronnie Sahlberg)   
  - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (Mikulas Patocka)   
  - bonding: do not discard lowest hash bit for non layer3+4 hashing (suresh kumar)   
  - ksmbd: set fixed sector size to FS_SECTOR_SIZE_INFORMATION (Namjae Jeon)   
  - ksmbd: increment reference count of parent fp (Namjae Jeon)   
  - arch: xtensa: platforms: Fix deadlock in rs_close() (Duoming Zhou)   
  - ext4: fix bug_on in start_this_handle during umount filesystem (Ye Bin)   
  - ASoC: wm8731: Disable the regulator when probing fails (Zheyu Ma)   
  - ASoC: Intel: soc-acpi: correct device endpoints for max98373 (Chao Song)   
  - tcp: fix F-RTO may not work correctly when receiving DSACK (Pengcheng Yang)   
  - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" (Dany Madden)   
  - ixgbe: ensure IPsec VF<->PF compatibility (Leon Romanovsky)   
  - perf arm-spe: Fix addresses of synthesized SPE events (Timothy Hayes)   
  - gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher)   
  - gfs2: Make sure not to return short direct writes (Andreas Gruenbacher)   
  - gfs2: Minor retry logic cleanup (Andreas Gruenbacher)   
  - gfs2: Prevent endless loops in gfs2_file_buffered_write (Andreas Gruenbacher)   
  - net: fec: add missing of_node_put() in fec_enet_init_stop_mode() (Yang Yingliang)   
  - bnx2x: fix napi API usage sequence (Manish Chopra)   
  - tls: Skip tls_append_frag on zero copy size (Maxim Mikityanskiy)   
  - drm/amd/display: Fix memory leak in dcn21_clock_source_create (Miaoqian Lin)   
  - drm/amdkfd: Fix GWS queue count (David Yat Sin)   
  - netfilter: conntrack: fix udp offload timeout sysctl (Volodymyr Mytnyk)   
  - io_uring: check reserved fields for recv/recvmsg (Jens Axboe)   
  - io_uring: check reserved fields for send/sendmsg (Jens Axboe)   
  - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK (Martin Blumenstingl)   
  - drm/sun4i: Remove obsolete references to PHYS_OFFSET (Samuel Holland)   
  - net: dsa: mv88e6xxx: Fix port_hidden_wait to account for port_base_addr (Nathan Rossi)   
  - net: phy: marvell10g: fix return value on error (Baruch Siach)   
  - net: bcmgenet: hide status block before TX timestamping (Jonathan Lemon)   
  - cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts (Vladimir Zapolskiy)   
  - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() (Yang Yingliang)   
  - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() (Christophe JAILLET)   
  - tcp: make sure treq->af_specific is initialized (Eric Dumazet)   
  - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT (Eric Dumazet)   
  - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye)   
  - ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye)   
  - ip_gre: Make o_seqno start from 0 in native mode (Peilin Ye)   
  - net/smc: sync err code when tcp connection was refused (liuyacan)   
  - net: hns3: add return value for mailbox handling in PF (Jian Shen)   
  - net: hns3: add validity check for message data length (Jian Shen)   
  - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx (Jie Wang)   
  - net: hns3: clear inited state and stop client after failed to register netdev (Jian Shen)   
  - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe (Xiaobing Luo)   
  - pinctrl: pistachio: fix use of irq_of_parse_and_map() (Lv Ruyi)   
  - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock (Fabio Estevam)   
  - ARM: dts: imx6ull-colibri: fix vqmmc regulator (Max Krummenacher)   
  - sctp: check asoc strreset_chunk in sctp_generate_reconf_event (Xin Long)   
  - wireguard: device: check for metadata_dst with skb_valid_dst() (Nikolay Aleksandrov)   
  - tcp: ensure to use the most recently sent skb when filling the rate sample (Pengcheng Yang)   
  - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested (Marek Vasut)   
  - tcp: md5: incorrect tcp_header_len for incoming connections (Francesco Ruggeri)   
  - pinctrl: rockchip: fix RK3308 pinmux bits (Luca Ceresoli)   
  - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook (Eyal Birger)   
  - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion (Pablo Neira Ayuso)   
  - net: dsa: Add missing of_node_put() in dsa_port_link_register_of (Miaoqian Lin)   
  - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode (Geert Uytterhoeven)   
  - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI (Marek Vasut)   
  - mtd: fix 'part' field data corruption in mtd_info (Oleksandr Ocheretnyi)   
  - mtd: rawnand: Fix return value check of wait_for_completion_timeout (Miaoqian Lin)   
  - pinctrl: mediatek: moore: Fix build error (YueHaibing)   
  - phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe() (Heiner Kallweit)   
  - ipvs: correctly print the memory size of ip_vs_conn_tab (Pengcheng Yang)   
  - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (Adam Ford)   
  - ARM: dts: am3517-evm: Fix misc pinmuxing (Adam Ford)   
  - ARM: dts: Fix mmc order for omap3-gta04 (H. Nikolaus Schaller)   
  - interconnect: qcom: sdx55: Drop IP0 interconnects (Stephen Boyd)   
  - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe (Miaoqian Lin)   
  - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe (Miaoqian Lin)   
  - ARM: dts: at91: fix pinctrl phandles (Claudiu Beznea)   
  - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name (Claudiu Beznea)   
  - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (Mark Brown)   
  - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks (Miaoqian Lin)   
  - ARM: dts: dra7: Fix suspend warning for vpe powerdomain (Tony Lindgren)   
  - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific (Tony Lindgren)   
  - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init (Miaoqian Lin)   
  - phy: samsung: exynos5250-sata: fix missing device put in probe error paths (Krzysztof Kozlowski)   
  - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe (Miaoqian Lin)   
  - arm64: dts: meson-sm1-bananapi-m5: fix wrong GPIO pin labeling for CON1 (Guillaume Giraudon)   
  - arm64: dts: imx8mn: Fix SAI nodes (Marek Vasut)   
  - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (Fabio Estevam)   
  - USB: Fix xhci event ring dequeue pointer ERDP update issue (Weitao Wang)   
  - arm64: dts: imx8qm: Correct SCU clock controller's compatible property (Liu Ying)   
  - xsk: Fix l2fwd for copy mode + busy poll combo (Maciej Fijalkowski)   
  - mtd: rawnand: fix ecc parameters for mt7622 (Chuanhong Guo)   
  - iio:imu:bmi160: disable regulator in error path (Tong Zhang)   
  - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards (Christian Hewitt)   
  - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards (Christian Hewitt)   
  - video: fbdev: udlfb: properly check endpoint type (Pavel Skripkin)   
  - cpufreq: qcom-cpufreq-hw: Fix throttle frequency value on EPSS platforms (Vladimir Zapolskiy)   
  - cpufreq: qcom-hw: fix the race between LMH worker and cpuhp (Dmitry Baryshkov)   
  - virtio_net: fix wrong buf address calculation when using xdp (Nikolay Aleksandrov)   
  - iocost: don't reset the inuse weight of under-weighted debtors (Tejun Heo)   
  - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests (Thomas Gleixner)   
  - riscv: patch_text: Fixup last cpu should be master (Guo Ren)   
  - hex2bin: fix access beyond string end (Mikulas Patocka)   
  - hex2bin: make the function hex_to_bin constant-time (Mikulas Patocka)   
  - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config (Krzysztof Kozlowski)   
  - arm64: dts: imx8mm-venice: fix spi2 pin configuration (Johan Hovold)   
  - bus: mhi: host: pci_generic: Flush recovery worker during freeze (Manivannan Sadhasivam)   
  - bus: mhi: host: pci_generic: Add missing poweroff() PM callback (Manivannan Sadhasivam)   
  - ceph: fix possible NULL pointer dereference for req->r_session (Xiubo Li)   
  - arch_topology: Do not set llc_sibling if llc_id is invalid (Wang Qing)   
  - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device (Maciej W. Rozycki)   
  - serial: 8250: Also set sticky MCR bits in console restoration (Maciej W. Rozycki)   
  - serial: amba-pl011: do not time out prematurely when draining tx fifo (Lino Sanfilippo)   
  - serial: imx: fix overrun interrupts in DMA mode (Johan Hovold)   
  - usb: phy: generic: Get the vbus supply (Sean Anderson)   
  - usb: cdns3: Fix issue for clear halt endpoint (Pawel Laszczak)   
  - usb: dwc3: pci: add support for the Intel Meteor Lake-P (Heikki Krogerus)   
  - usb: dwc3: gadget: Return proper request status (Thinh Nguyen)   
  - usb: dwc3: core: Only handle soft-reset in DCTL (Thinh Nguyen)   
  - usb: dwc3: core: Fix tx/rx threshold settings (Thinh Nguyen)   
  - usb: dwc3: Try usb-role-switch first in dwc3_drd_init (Sven Peter)   
  - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() (Vijayavardhan Vennapusa)   
  - usb: gadget: uvc: Fix crash when encoding data for usb request (Dan Vacura)   
  - usb: typec: ucsi: Fix role swapping (Heikki Krogerus)   
  - usb: typec: ucsi: Fix reuse of completion structure (Heikki Krogerus)   
  - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Tasos Sahanidis)   
  - usb: misc: fix improper handling of refcount in uss720_probe() (Hangyu Hua)   
  - iio: imu: inv_icm42600: Fix I2C init possible nack (Fawzi Khaber)   
  - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() (Zheyu Ma)   
  - iio: dac: ad5446: Fix read_raw not returning set value (Michael Hennerich)   
  - iio: dac: ad5592r: Fix the missing return value. (Zizhuang Deng)   
  - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms (Mathias Nyman)   
  - xhci: stop polling roothubs after shutdown (Henry Lin)   
  - xhci: Enable runtime PM on second Alderlake controller (Evan Green)   
  - usb: xhci: tegra:Fix PM usage reference leak of tegra_xusb_unpowergate_partitions (zhangqilong)   
  - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions (Daniele Palmas)   
  - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB (Slark Xiao)   
  - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader (Bruno Thomsen)   
  - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS (Kees Cook)   
  - USB: quirks: add STRING quirk for VCOM device (Oliver Neukum)   
  - USB: quirks: add a Realtek card reader (Oliver Neukum)   
  - usb: mtu3: fix USB 3.0 dual-role-switch from device to host (Macpaul Lin)   
  - LTS version: v4.15.37 (Jack Vogel)   
  - selftests/bpf: Add test for reg2btf_ids out of bounds access (Kumar Kartikeya Dwivedi)   
  - mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Linus Torvalds)   
  - btrfs: fallback to blocking mode when doing async dio over multiple extents (Filipe Manana)   
  - btrfs: fix deadlock due to page faults during direct IO reads and writes (Filipe Manana)   
  - gfs2: Fix mmap + page fault deadlocks for direct I/O (Andreas Gruenbacher)   
  - iomap: Add done_before argument to iomap_dio_rw (Andreas Gruenbacher)   
  - iomap: Support partial direct I/O on user copy failures (Andreas Gruenbacher)   
  - iomap: Fix iomap_dio_rw return value for user copies (Andreas Gruenbacher)   
  - gfs2: Fix mmap + page fault deadlocks for buffered I/O (Andreas Gruenbacher)   
  - gfs2: Eliminate ip->i_gh (Andreas Gruenbacher)   
  - gfs2: Move the inode glock locking to gfs2_file_buffered_write (Andreas Gruenbacher)   
  - gfs2: Introduce flag for glock holder auto-demotion (Bob Peterson)   
  - gfs2: Clean up function may_grant (Andreas Gruenbacher)   
  - gfs2: Add wrapper for iomap_file_buffered_write (Andreas Gruenbacher)   
  - iov_iter: Introduce fault_in_iov_iter_writeable (Andreas Gruenbacher)   
  - iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable (Andreas Gruenbacher)   
  - gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} (Andreas Gruenbacher)   
  - mm: kfence: fix objcgs vector allocation (Muchun Song)   
  - ARM: dts: socfpga: change qspi to "intel,socfpga-qspi" (Dinh Nguyen)   
  - spi: cadence-quadspi: fix write completion support (Dinh Nguyen)   
  - floppy: disable FDRAWCMD by default (Willy Tarreau)   
  - LTS version: v5.15.36 (Jack Vogel)   
  - arm64: dts: qcom: add IPA qcom,qmp property (Alex Elder)   
  - block/compat_ioctl: fix range check in BLKGETSIZE (Khazhismel Kumykov)   
  - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller (Tudor Ambarus)   
  - jbd2: fix a potential race while discarding reserved buffers after an abort (Ye Bin)   
  - netfilter: nft_ct: fix use after free when attaching zone template (Florian Westphal)   
  - ext4: force overhead calculation if the s_overhead_cluster makes no sense (Theodore Ts'o)   
  - ext4: fix overhead calculation to account for the reserved gdt blocks (Theodore Ts'o)   
  - ext4, doc: fix incorrect h_reserved size (wangjianjian (C))   
  - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (Tadeusz Struk)   
  - ext4: fix use-after-free in ext4_search_dir (Ye Bin)   
  - ext4: fix symlink file size not match to file content (Ye Bin)   
  - ext4: fix fallocate to use file_modified to update permissions consistently (Darrick J. Wong)   
  - netfilter: conntrack: avoid useless indirection during conntrack destruction (Florian Westphal)   
  - netfilter: conntrack: convert to refcount_t api (Florian Westphal)   
  - KVM: SVM: Flush when freeing encrypted pages even on SME_COHERENT CPUs (Mingwei Zhang)   
  - KVM: nVMX: Defer APICv updates while L2 is active until L1 is active (Sean Christopherson)   
  - KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race (Sean Christopherson)   
  - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu)   
  - arm_pmu: Validate single/group leader events (Rob Herring)   
  - ARC: entry: fix syscall_trace_exit argument (Sergey Matyukevich)   
  - e1000e: Fix possible overflow in LTR decoding (Sasha Neftin)   
  - ASoC: soc-dapm: fix two incorrect uses of list iterator (Xiaomeng Tong)   
  - gpio: Request interrupts after IRQ is initialized (Mario Limonciello)   
  - openvswitch: fix OOB access in reserve_sfa_size() (Paolo Valerio)   
  - xtensa: fix a7 clobbering in coprocessor context load/store (Max Filippov)   
  - xtensa: patch_text: Fixup last cpu should be master (Guo Ren)   
  - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event (Leo Yan)   
  - perf script: Always allow field 'data_src' for auxtrace (Leo Yan)   
  - powerpc/perf: Fix power10 event alternatives (Athira Rajeev)   
  - powerpc/perf: Fix power9 event alternatives (Athira Rajeev)   
  - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage (Miaoqian Lin)   
  - KVM: PPC: Fix TCE handling for VFIO (Alexey Kardashevskiy)   
  - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare (Dave Stevenson)   
  - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised (Dave Stevenson)   
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled (Zhipeng Xie)   
  - sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang)   
  - scsi: sr: Do not leak information in ioctl (Tom Rix)   
  - Input: omap4-keypad - fix pm_runtime_get_sync() error checking (Miaoqian Lin)   
  - net: atlantic: invert deep par in pm functions, preventing null derefs (Manuel Ullmann)   
  - dmaengine: imx-sdma: fix init of uart scripts (Kevin Groeneveld)   
  - dma: at_xdmac: fix a missing check on list iterator (Xiaomeng Tong)   
  - ata: pata_marvell: Check the 'bmdma_addr' beforing reading (Zheyu Ma)   
  - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (Alistair Popple)   
  - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup (Nico Pache)   
  - mm, hugetlb: allow for "high" userspace addresses (Christophe Leroy)   
  - memcg: sync flush only if periodic flush is delayed (Shakeel Butt)   
  - mm/memory-failure.c: skip huge_zero_page in memory_failure() (Xu Yu)   
  - EDAC/synopsys: Read the error count from the correct register (Shubhrajyoti Datta)   
  - nvme-pci: disable namespace identifiers for Qemu controllers (Christoph Hellwig)   
  - nvme-pci: disable namespace identifiers for the MAXIO MAP1002/1202 (Christoph Hellwig)   
  - nvme: add a quirk to disable namespace identifiers (Christoph Hellwig)   
  - VFS: filename_create(): fix incorrect intent. (NeilBrown)   
  - stat: fix inconsistency between struct stat and struct compat_stat (Mikulas Patocka)   
  - scsi: qedi: Fix failed disconnect handling (Mike Christie)   
  - scsi: iscsi: Fix NOP handling during conn recovery (Mike Christie)   
  - scsi: iscsi: Merge suspend fields (Mike Christie)   
  - scsi: iscsi: Release endpoint ID when its freed (Mike Christie)   
  - net: macb: Restart tx only if queue pointer is lagging (Tomas Melin)   
  - drm/msm/mdp5: check the return of kzalloc() (Xiaoke Wang)   
  - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() (Lv Ruyi)   
  - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)   
  - mt76: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)   
  - net: atlantic: Avoid out-of-bounds indexing (Kai-Heng Feng)   
  - cifs: Check the IOCB_DIRECT flag, not O_DIRECT (David Howells)   
  - vxlan: fix error return code in vxlan_fdb_append (Hongbin Wang)   
  - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes (Rob Herring)   
  - drm/msm/disp: check the return value of kzalloc() (Xiaoke Wang)   
  - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)   
  - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (Jiapeng Chong)   
  - reset: tegra-bpmp: Restore Handle errors in BPMP response (Sameer Pujar)   
  - reset: renesas: Check return value of reset_control_deassert() (Heiner Kallweit)   
  - ARM: vexpress/spc: Avoid negative array index when !SMP (Kees Cook)   
  - arm64: mm: fix p?d_leaf() (Muchun Song)   
  - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets (Ido Schimmel)   
  - dmaengine: idxd: skip clearing device context when device is read-only (Dave Jiang)   
  - dmaengine: idxd: add RO check for wq max_transfer_size write (Dave Jiang)   
  - dmaengine: idxd: add RO check for wq max_batch_size write (Dave Jiang)   
  - net: stmmac: Use readl_poll_timeout_atomic() in atomic state (Kevin Hao)   
  - drm/i915/display/psr: Unset enable_psr2_sel_fetch if other checks in intel_psr2_config_valid() fails (José Roberto de Souza)   
  - netlink: reset network and mac headers in netlink_dump() (Eric Dumazet)   
  - net: mscc: ocelot: fix broken IP multicast flooding (Vladimir Oltean)   
  - net: dsa: hellcreek: Calculate checksums in tagger (Kurt Kanzenbach)   
  - can: isotp: stop timeout monitoring when no first frame was sent (Oliver Hartkopp)   
  - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet)   
  - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu (David Ahern)   
  - net/sched: cls_u32: fix possible leak in u32_init_knode() (Eric Dumazet)   
  - net: restore alpha order to Ethernet devices in config (Stephen Hemminger)   
  - ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye)   
  - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() (Peilin Ye)   
  - net/packet: fix packet_sock xmit return value checking (Hangbin Liu)   
  - net/smc: Fix sock leak when release after smc_shutdown() (Tony Lu)   
  - rxrpc: Restore removed timer deletion (David Howells)   
  - ALSA: hda/hdmi: fix warning about PCM count when used with SOF (Kai Vehmanen)   
  - igc: Fix suspending when PTM is active (Vinicius Costa Gomes)   
  - igc: Fix BUG: scheduling while atomic (Sasha Neftin)   
  - igc: Fix infinite loop in release_swfw_sync (Sasha Neftin)   
  - spi: cadence-quadspi: fix incorrect supports_op() return value (Matthias Schiffer)   
  - esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca)   
  - spi: spi-mtk-nor: initialize spi controller after resume (Allen-KH Cheng)   
  - dmaengine: dw-edma: Fix unaligned 64bit access (Herve Codina)   
  - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources (zhangqilong)   
  - dmaengine: imx-sdma: Fix error checking in sdma_event_remap (Miaoqian Lin)   
  - dmaengine: idxd: fix device cleanup on disable (Dave Jiang)   
  - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use (Srinivas Kandagatla)   
  - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component (Miaoqian Lin)   
  - ASoC: rk817: Use devm_clk_get() in rk817_platform_probe (Miaoqian Lin)   
  - ASoC: topology: Correct error handling in soc_tplg_dapm_widget_create() (Peter Ujfalusi)   
  - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek (Mark Brown)   
  - ALSA: hda/realtek: Add quirk for Clevo NP70PNP (Tim Crawford)   
  - ALSA: usb-audio: Clear MIDI port active flag after draining (Takashi Iwai)   
  - net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet)   
  - scsi: ufs: core: scsi_get_lba() error fix (Peter Wang)   
  - gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson)   
  - mm, kfence: support kmem_dump_obj() for KFENCE objects (Marco Elver)   
  - perf tools: Fix segfault accessing sample_id xyarray (Adrian Hunter)   
  - mm: page_alloc: fix building error on -Werror=array-compare (Xiongwei Song)   
  - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead (Kees Cook)   
  - arm64/mm: drop HAVE_ARCH_PFN_VALID (Anshuman Khandual)   
  - dma-mapping: remove bogus test for pfn_valid from dma_map_resource (Mike Rapoport)   
  - xfs: return errors in xfs_fs_sync_fs (Darrick J. Wong)   
  - vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong)   
  - block: simplify the block device syncing code (Christoph Hellwig)   
  - block: remove __sync_blockdev (Christoph Hellwig)   
  - fs: remove __sync_filesystem (Christoph Hellwig)   
  - LTS version: v5.15.35 (Jack Vogel)   
  - ax25: Fix UAF bugs in ax25 timers (Duoming Zhou)   
  - ax25: Fix NULL pointer dereferences in ax25 timers (Duoming Zhou)   
  - ax25: fix NPD bug in ax25_disconnect (Duoming Zhou)   
  - ax25: fix UAF bug in ax25_send_control() (Duoming Zhou)   
  - ax25: Fix refcount leaks caused by ax25_cb_del() (Duoming Zhou)   
  - ax25: fix UAF bugs of net_device caused by rebinding operation (Duoming Zhou)   
  - ax25: fix reference count leaks of ax25_dev (Duoming Zhou)   
  - ax25: add refcount in ax25_dev to avoid UAF bugs (Duoming Zhou)   
  - cpufreq: intel_pstate: ITMT support for overclocked system (Srinivas Pandruvada)   
  - net: ipa: fix a build dependency (Alex Elder)   
  - soc: qcom: aoss: Fix missing put_device call in qmp_get (Miaoqian Lin)   
  - cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state (Steven Price)   
  - drm/i915: Sunset igpu legacy mmap support based on GRAPHICS_VER_FULL (Matt Roper)   
  - dma-direct: avoid redundant memory sync for swiotlb (Chao Gao)   
  - timers: Fix warning condition in __run_timers() (Anna-Maria Behnsen)   
  - dt-bindings: net: snps: remove duplicate name (Dongjin Yang)   
  - i2c: pasemi: Wait for write xfers to finish (Martin Povišer)   
  - smp: Fix offline cpu check in flush_smp_call_function_queue() (Nadav Amit)   
  - i2c: dev: check return value when calling dev_set_name() (Andy Shevchenko)   
  - dm integrity: fix memory corruption when tag_size is less than digest size (Mikulas Patocka)   
  - ARM: davinci: da850-evm: Avoid NULL pointer dereference (Nathan Chancellor)   
  - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation (Paul Gortmaker)   
  - genirq/affinity: Consider that CPUs on nodes can be unbalanced (Rei Yamamoto)   
  - x86/tsx: Disable TSX development mode at boot (Pawan Gupta)   
  - x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Pawan Gupta)   
  - drm/amdgpu: Enable gfxoff quirk on MacBook Pro (Tomasz Moń)   
  - drm/amd/display: don't ignore alpha property on pre-multiplied mode (Melissa Wen)   
  - ipv6: fix panic when forwarding a pkt with no in6 dev (Nicolas Dichtel)   
  - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size (Johannes Berg)   
  - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (Fabio M. De Francesco)   
  - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers (Tao Jin)   
  - ALSA: hda/realtek: Add quirk for Clevo PD50PNT (Tim Crawford)   
  - btrfs: mark resumed async balance as writing (Naohiro Aota)   
  - btrfs: fix root ref counts in error handling in btrfs_get_root_ref (Jia-Ju Bai)   
  - ath9k: Fix usage of driver-private space in tx_info (Toke Høiland-Jørgensen)   
  - ath9k: Properly clear TX status area before reporting to mac80211 (Toke Høiland-Jørgensen)   
  - cifs: verify that tcon is valid before dereference in cifs_kill_sb (Ronnie Sahlberg)   
  - gcc-plugins: latent_entropy: use /dev/urandom (Jason A. Donenfeld)   
  - memory: renesas-rpc-if: fix platform-device leak in error path (Johan Hovold)   
  - SUNRPC: Fix NFSD's request deferral on RDMA transports (Chuck Lever)   
  - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded (Sean Christopherson)   
  - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Patrick Wang)   
  - mm: fix unexpected zeroed page mapping with zram swap (Minchan Kim)   
  - mm, page_alloc: fix build_zonerefs_node() (Juergen Gross)   
  - mm/secretmem: fix panic when growing a memfd_secret (Axel Rasmussen)   
  - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)   
  - io_uring: use nospec annotation for more indexes (Pavel Begunkov)   
  - io_uring: zero tag on rsrc removal (Pavel Begunkov)   
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou)   
  - scsi: mvsas: Add PCI ID of RocketRaid 2640 (Alexey Galakhov)   
  - scsi: mpt3sas: Fail reset operation if config request timed out (Sreekanth Reddy)   
  - drbd: set QUEUE_FLAG_STABLE_WRITES (Christoph Böhmwalder)   
  - drm/amd/display: Fix allocate_mst_payload assert on resume (Roman Li)   
  - drm/amd/display: Revert FEC check in validation (Martin Leung)   
  - drm/amd/display: Enable power gating before init_pipes (Roman Li)   
  - spi: cadence-quadspi: fix protocol setup for non-1-1-X operations (Matthias Schiffer)   
  - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso (Xiaomeng Tong)   
  - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (Marcin Kozlowski)   
  - Drivers: hv: balloon: Disable balloon and hot-add accordingly (Boqun Feng)   
  - net: axienet: setup mdio unconditionally (Andy Chiu)   
  - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry (Steve Capper)   
  - arm64: alternatives: mark patch_alternative() as `noinstr` (Joey Gouly)   
  - regulator: wm8994: Add an off-on delay for WM8994 variant (Jonathan Bakker)   
  - gpu: ipu-v3: Fix dev_dbg frequency output (Leo Ruan)   
  - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs (Christian Lamparter)   
  - net: micrel: fix KS8851_MLL Kconfig (Randy Dunlap)   
  - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (Tyrel Datwyler)   
  - scsi: lpfc: Fix queue failures when recovering from PCI parity error (James Smart)   
  - scsi: target: tcmu: Fix possible page UAF (Xiaoguang Wang)   
  - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (Michael Kelley)   
  - PCI: hv: Propagate coherence from VMbus device to PCI device (Michael Kelley)   
  - Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests (Andrea Parri (Microsoft))   
  - drm/amdkfd: Check for potential null return of kmalloc_array() (QintaoShen)   
  - drm/amdgpu/vcn: improve vcn dpg stop procedure (Tianci Yin)   
  - drm/amdkfd: Fix Incorrect VMIDs passed to HWS (Tushar Patel)   
  - drm/amd/display: Update VTEM Infopacket definition (Leo (Hanghong) Ma)   
  - drm/amd/display: FEC check in timing validation (Chiawen Huang)   
  - drm/amd/display: fix audio format not updated after edid updated (Charlene Liu)   
  - drm/amdgpu/gmc: use PCI BARs for APUs in passthrough (Alex Deucher)   
  - drm/amdgpu: conduct a proper cleanup of PDB bo (Guchun Chen)   
  - btrfs: do not warn for free space inode in cow_file_range (Josef Bacik)   
  - btrfs: fix fallocate to use file_modified to update permissions consistently (Darrick J. Wong)   
  - drm/amd: Add USBC connector ID (Aurabindo Pillai)   
  - block: fix offset/size check in bio_trim() (Ming Lei)   
  - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" (Jeremy Linton)   
  - vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used (Jason Gunthorpe)   
  - dm mpath: only use ktime_get_ns() in historical selector (Khazhismel Kumykov)   
  - cifs: potential buffer overflow in handling symlinks (Harshit Mogalapalli)   
  - nfc: nci: add flush_workqueue to prevent uaf (Lin Ma)   
  - net: ftgmac100: access hardware register after clock ready (Dylan Hung)   
  - macvlan: Fix leaking skb in source mode with nodst option (Martin Willi)   
  - perf tools: Fix misleading add event PMU debug message (Adrian Hunter)   
  - ALSA: usb-audio: Limit max buffer and period sizes per time (Takashi Iwai)   
  - ALSA: usb-audio: Increase max buffer size (Takashi Iwai)   
  - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set (Athira Rajeev)   
  - io_uring: verify pad field is 0 in io_get_ext_arg (Dylan Yudaken)   
  - io_uring: verify that resv2 is 0 in io_uring_rsrc_update2 (Dylan Yudaken)   
  - io_uring: move io_uring_rsrc_update2 validation (Dylan Yudaken)   
  - ALSA: mtpav: Don't call card private_free at probe error path (Takashi Iwai)   
  - ALSA: ad1889: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - netfilter: nf_tables: nft_parse_register can return a negative value (Antoine Tenart)   
  - sctp: Initialize daddr on peeled off socket (Petr Malat)   
  - scsi: iscsi: Fix unbound endpoint error handling (Mike Christie)   
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Mike Christie)   
  - scsi: iscsi: Fix endpoint reuse regression (Mike Christie)   
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Mike Christie)   
  - scsi: iscsi: Move iscsi_ep_disconnect() (Mike Christie)   
  - scsi: pm80xx: Enable upper inbound, outbound queues (Ajish Koshy)   
  - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 (Ajish Koshy)   
  - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (Karsten Graul)   
  - drm/msm/dp: add fail safe mode outside of event_mutex context (Kuogee Hsieh)   
  - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() (Stephen Boyd)   
  - drm/msm: Fix range size vs end confusion (Rob Clark)   
  - netfilter: nft_socket: make cgroup match work in input too (Florian Westphal)   
  - cfg80211: hold bss_lock while updating nontrans_list (Rameshkumar Sundaram)   
  - net/sched: taprio: Check if socket flags are valid (Benedikt Spranger)   
  - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen)   
  - net: dsa: felix: suppress -EPROBE_DEFER errors (Michael Walle)   
  - net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner)   
  - mlxsw: i2c: Fix initialization error flow (Vadim Pasternak)   
  - net: mdio: don't defer probe forever if PHY IRQ provider is missing (Vladimir Oltean)   
  - cifs: release cached dentries only if mount is complete (Shyam Prasad N)   
  - gpiolib: acpi: use correct format characters (Linus Torvalds)   
  - veth: Ensure eth header is in skb's linear part (Guillaume Nault)   
  - net/sched: flower: fix parsing of ethertype following VLAN header (Vlad Buslov)   
  - SUNRPC: Fix the svc_deferred_event trace class (Chuck Lever)   
  - media: rockchip/rga: do proper error checking in probe (Kyle Copperfield)   
  - firmware: arm_scmi: Fix sorting of retrieved clock rates (Cristian Marussi)   
  - Revert "ath11k: mesh: add support for 256 bitmap in blockack frames in 11ax" (Anilkumar Kolli)   
  - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe (Miaoqian Lin)   
  - firmware: arm_scmi: Remove clear channel call on the TX channel (Cristian Marussi)   
  - drm/msm: Add missing put_task_struct() in debugfs path (Rob Clark)   
  - ALSA: nm256: Don't call card private_free at probe error path (Takashi Iwai)   
  - ALSA: usb-audio: Cap upper limits of buffer/period bytes for implicit fb (Takashi Iwai)   
  - ALSA: via82xx: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: sonicvibes: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: sc6000: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: rme96: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: rme9652: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: rme32: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: riptide: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: oxygen: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: maestro3: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: lx6464es: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: lola: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: korg1212: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: intel_hdmi: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: intel8x0: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: ice1724: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: hdspm: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: hdsp: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: galaxy: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: fm801: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: es1968: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: es1938: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: ens137x: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: emu10k1x: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: echoaudio: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: cs5535audio: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: cs4281: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: cmipci: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: ca0106: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: bt87x: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: azt3328: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: aw2: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: au88x0: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: atiixp: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: als4000: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: als300: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: ali5451: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: sis7019: Fix the missing error handling (Takashi Iwai)   
  - ALSA: core: Add snd_card_free_on_error() helper (Takashi Iwai)   
  - btrfs: release correct delalloc amount in direct IO write path (Naohiro Aota)   
  - net: ipa: request IPA register values be retained (Alex Elder)   
  - dt-bindings: net: qcom,ipa: add optional qcom,qmp property (Alex Elder)   
  - soc: qcom: aoss: Expose send for generic usecase (Deepak Kumar Singh)   
  - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() (Nathan Chancellor)   
  - btrfs: remove no longer used counter when reading data page (Filipe Manana)   
  - btrfs: remove unused parameter nr_pages in add_ra_bio_pages() (Qu Wenruo)   
  - ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40 (Woody Suwalski)   
  - ACPI: processor idle: Allow playing dead in C3 state (Richard Gong)   
  - ACPI: processor idle: Check for architectural support for LPI (Mario Limonciello)   
  - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function (Mario Limonciello)   
  - hamradio: remove needs_free_netdev to avoid UAF (Lin Ma)   
  - hamradio: defer 6pack kfree after unregister_netdev (Lin Ma)   
  - drm/amd/display: Fix p-state allow debug index on dcn31 (Nicholas Kazlauskas)   
  - drm/amd/display: Add pstate verification and recovery for DCN31 (Nicholas Kazlauskas)   
  - LTS version: v5.15.34 (Jack Vogel)   
  - stacktrace: move filter_irq_stacks() to kernel/stacktrace.c (Marco Elver)   
  - powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit (Kefeng Wang)   
  - static_call: Don't make __static_call_return0 static (Christophe Leroy)   
  - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (Waiman Long)   
  - irqchip/gic, gic-v3: Prevent GSI to SGI translations (Andre Przywara)   
  - powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S (Christophe Leroy)   
  - irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling (Marc Zyngier)   
  - sched: Teach the forced-newidle balancer about CPU affinity limitation. (Sebastian Andrzej Siewior)   
  - x86/bug: Prevent shadowing in __WARN_FLAGS (Vincent Mailhol)   
  - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() (Andrea Parri (Microsoft))   
  - mm: don't skip swap entry even if zap_details specified (Peter Xu)   
  - selftests: cgroup: Test open-time cgroup namespace usage for migration checks (Tejun Heo)   
  - selftests: cgroup: Test open-time credential usage for migration checks (Tejun Heo)   
  - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 (Tejun Heo)   
  - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE (Kees Cook)   
  - Revert "net/mlx5: Accept devlink user input after driver initialization complete" (dann frazier)   
  - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" (Vinod Koul)   
  - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts (Arnaldo Carvalho de Melo)   
  - tools build: Filter out options and warnings not supported by clang (Arnaldo Carvalho de Melo)   
  - perf python: Fix probing for some clang command line options (Arnaldo Carvalho de Melo)   
  - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 (Arnaldo Carvalho de Melo)   
  - Revert "nbd: fix possible overflow on 'first_minor' in nbd_dev_add()" (Jens Axboe)   
  - SUNRPC: Don't call connect() more than once on a TCP socket (Trond Myklebust)   
  - rtc: mc146818-lib: fix signedness bug in mc146818_get_time() (Dan Carpenter)   
  - selftests/bpf: Fix u8 narrow load checks for bpf_sk_lookup remote_port (Jakub Sitnicki)   
  - bpf: Make remote_port field in struct bpf_sk_lookup 16-bit wide (Jakub Sitnicki)   
  - Revert "selftests: net: Add tls config dependency for tls selftests" (Jakub Kicinski)   
  - net/smc: send directly on setting TCP_NODELAY (Dust Li)   
  - KVM: SVM: Allow AVIC support on system w/ physical APIC ID > 255 (Suravee Suthikulpanit)   
  - drm/amdgpu: don't use BACO for reset in S3 (Alex Deucher)   
  - drm/amdkfd: Create file descriptor after client is added to smi_clients list (Lee Jones)   
  - drm/nouveau/pmu: Add missing callbacks for Tegra devices (Karol Herbst)   
  - drm/amdgpu/vcn: Fix the register setting for vcn1 (Emily Deng)   
  - drm/amdgpu/smu10: fix SoC/fclk units in auto mode (Alex Deucher)   
  - drm/amdgpu/display: change pipe policy for DCN 2.1 (Benjamin Marty)   
  - drm/panel: ili9341: fix optional regulator handling (Daniel Mack)   
  - SUNRPC: Prevent immediate close+reconnect (Trond Myklebust)   
  - amd/display: set backlight only if required (Shirish S)   
  - fbdev: Fix unregistering of framebuffers without device (Thomas Zimmermann)   
  - irqchip/gic-v3: Fix GICR_CTLR.RWP polling (Marc Zyngier)   
  - perf/core: Inherit event_caps (Namhyung Kim)   
  - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - ata: sata_dwc_460ex: Fix crash due to OOB write (Christian Lamparter)   
  - perf/x86/intel: Don't extend the pseudo-encoding to GP counters (Kan Liang)   
  - x86/mm/tlb: Revert retpoline avoidance approach (Dave Hansen)   
  - x86/msi: Fix msi message data shadow struct (Reto Buerki)   
  - gpio: Restrict usage of GPIO chip irq members before initialization (Shreeya Patel)   
  - RDMA/hfi1: Fix use-after-free bug for mm struct (Douglas Miller)   
  - arm64: patch_text: Fixup last cpu should be master (Guo Ren)   
  - spi: core: add dma_map_dev for __spi_unmap_msg() (Vinod Koul)   
  - btrfs: prevent subvol with swapfile from being deleted (Kaiwen Hu)   
  - btrfs: fix qgroup reserve overflow the qgroup limit (Ethan Lien)   
  - perf/x86/intel: Update the FRONTEND MSR mask on Sapphire Rapids (Kan Liang)   
  - x86/pm: Save the MSR validity status at context setup (Pawan Gupta)   
  - io_uring: implement compat handling for IORING_REGISTER_IOWQ_AFF (Eugene Syromiatnikov)   
  - io_uring: defer splice/tee file validity check until command issue (Jens Axboe)   
  - io_uring: don't check req->file in io_fsync_prep() (Jens Axboe)   
  - mm/mempolicy: fix mpol_new leak in shared_policy_replace (Miaohe Lin)   
  - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (Paolo Bonzini)   
  - highmem: fix checks in __kmap_local_sched_{in,out} (Max Filippov)   
  - lz4: fix LZ4_decompress_safe_partial read out of bound (Guo Xuenan)   
  - mmc: core: Fixup support for writeback-cache for eMMC and SD (Michael Wu)   
  - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete (Wolfram Sang)   
  - mmc: mmci: stm32: correctly check all elements of sg list (Yann Gautier)   
  - mmc: block: Check for errors after write on SPI (Christian Löhle)   
  - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" (Pali Rohár)   
  - scsi: ufs: ufs-pci: Add support for Intel MTL (Adrian Hunter)   
  - scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove() (Damien Le Moal)   
  - arm64: Add part number for Arm Cortex-A78AE (Chanho Park)   
  - perf session: Remap buf if there is no space for event (Denis Nikitin)   
  - perf tools: Fix perf's libperf_print callback (Adrian Hunter)   
  - perf: arm-spe: Fix perf report --mem-mode (James Clark)   
  - iommu/omap: Fix regression in probe for NULL pointer dereference (Tony Lindgren)   
  - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() (Trond Myklebust)   
  - SUNRPC: Handle low memory situations in call_status() (Trond Myklebust)   
  - SUNRPC: Handle ENOMEM in call_transmit_status() (Trond Myklebust)   
  - io_uring: don't touch scm_fp_list after queueing skb (Pavel Begunkov)   
  - io_uring: nospec index for tags on files update (Pavel Begunkov)   
  - scsi: ufs: ufshpb: Fix a NULL check on list iterator (Xiaomeng Tong)   
  - drbd: Fix five use after free bugs in get_initial_state (Lv Yunlong)   
  - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie (Maxim Mikityanskiy)   
  - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() (Kamal Dasu)   
  - qede: confirm skb is allocated before using (Jamie Bainbridge)   
  - net: phy: mscc-miim: reject clause 45 register accesses (Michael Walle)   
  - net: sfc: fix using uninitialized xdp tx_queue (Taehee Yoo)   
  - rxrpc: fix a race in rxrpc_exit_net() (Eric Dumazet)   
  - net: openvswitch: fix leak of nested actions (Ilya Maximets)   
  - net: ethernet: mv643xx: Fix over zealous checking of_get_mac_address() (Andrew Lunn)   
  - net: openvswitch: don't send internal clone attribute to the userspace. (Ilya Maximets)   
  - ice: xsk: fix VSI state check in ice_xsk_wakeup() (Maciej Fijalkowski)   
  - ice: synchronize_rcu() when terminating rings (Maciej Fijalkowski)   
  - ipv6: Fix stats accounting in ip6_pkt_drop (David Ahern)   
  - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Anatolii Gerasymenko)   
  - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Anatolii Gerasymenko)   
  - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (Miaoqian Lin)   
  - sctp: count singleton chunks in assoc user stats (Jamie Bainbridge)   
  - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (Niels Dossche)   
  - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang)   
  - RDMA/mlx5: Add a missing update of cache->last_add (Aharon Landau)   
  - RDMA/mlx5: Don't remove cache MRs when a delay is needed (Aharon Landau)   
  - sfc: Do not free an empty page_ring (Martin Habets)   
  - bnxt_en: Prevent XDP redirect from running when stopping TX queue (Ray Jui)   
  - bnxt_en: reserve space inside receive page for skb_shared_info (Andy Gospodarek)   
  - bnxt_en: Synchronize tx when xdp redirects happen on same ring (Pavan Chebbi)   
  - arch/arm64: Fix topology initialization for core scheduling (Phil Auld)   
  - regulator: atc260x: Fix missing active_discharge_on setting (Axel Lin)   
  - regulator: rtq2134: Fix missing active_discharge_on setting (Axel Lin)   
  - drm/imx: dw_hdmi-imx: Fix bailout in error cases of probe (Liu Ying)   
  - drm/imx: Fix memory leak in imx_pd_connector_get_modes (José Expósito)   
  - drm/imx: imx-ldb: Check for null pointer after calling kmemdup (Jiasheng Jiang)   
  - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (Chen-Yu Tsai)   
  - net: ipv4: fix route with nexthop object delete warning (Nikolay Aleksandrov)   
  - mctp: Fix check for dev_hard_header() result (Matt Johnston)   
  - ice: Clear default forwarding VSI during VSI release (Ivan Vecera)   
  - skbuff: fix coalescing for page_pool fragment recycling (Jean-Philippe Brucker)   
  - vrf: fix packet sniffing for traffic originating from ip tunnels (Eyal Birger)   
  - net/tls: fix slab-out-of-bounds bug in decrypt_internal (Ziyang Xuan)   
  - net: sfc: add missing xdp queue reinitialization (Taehee Yoo)   
  - vdpa: mlx5: prevent cvq work from hogging CPU (Jason Wang)   
  - vdpa/mlx5: Propagate link status from device to vdpa driver (Eli Cohen)   
  - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (Christophe JAILLET)   
  - scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (John Garry)   
  - scsi: sr: Fix typo in CDROM(CLOSETRAY|EJECT) handling (Kevin Groeneveld)   
  - NFSv4: fix open failure with O_ACCMODE flag (ChenXiaoSong)   
  - Revert "NFSv4: Handle the special Linux file open access mode" (ChenXiaoSong)   
  - Drivers: hv: vmbus: Fix potential crash on module unload (Guilherme G. Piccoli)   
  - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (Dan Carpenter)   
  - rtc: mc146818-lib: fix RTC presence check (Mateusz Jończyk)   
  - rtc: Check return value from mc146818_get_time() (Mateusz Jończyk)   
  - rtc: mc146818-lib: change return values of mc146818_get_time() (Mateusz Jończyk)   
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira)   
  - parisc: Fix patch code locking and flushing (John David Anglin)   
  - parisc: Fix CPU affinity for Lasi, WAX and Dino chips (Helge Deller)   
  - selftests: net: Add tls config dependency for tls selftests (Naresh Kamboju)   
  - NFS: Avoid writeback threads getting stuck in mempool_alloc() (Trond Myklebust)   
  - NFS: nfsiod should not block forever in mempool_alloc() (Trond Myklebust)   
  - SUNRPC: Fix socket waits for write buffer space (Trond Myklebust)   
  - jfs: prevent NULL deref in diFree (Haimin Zhang)   
  - virtio_console: eliminate anonymous module_init & module_exit (Randy Dunlap)   
  - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() (Jiri Slaby)   
  - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy (Nathan Chancellor)   
  - x86: Annotate call_on_stack() (Peter Zijlstra)   
  - NFS: swap-out must always use STABLE writes. (NeilBrown)   
  - NFS: swap IO handling is slightly different for O_DIRECT IO (NeilBrown)   
  - SUNRPC: remove scheduling boost for "SWAPPER" tasks. (NeilBrown)   
  - SUNRPC/xprt: async tasks mustn't block waiting for memory (NeilBrown)   
  - SUNRPC/call_alloc: async tasks mustn't block waiting for memory (NeilBrown)   
  - clk: Enforce that disjoints limits are invalid (Maxime Ripard)   
  - clk: ti: Preserve node in ti_dt_clocks_register() (Tony Lindgren)   
  - habanalabs: fix possible memory leak in MMU DR fini (Ohad Sharabi)   
  - NFSv4: Protect the state recovery thread against direct reclaim (Trond Myklebust)   
  - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (Xin Xiong)   
  - w1: w1_therm: fixes w1_seq for ds28ea00 sensors (Lucas Denefle)   
  - staging: wfx: fix an error handling in wfx_init_common() (Xiaoke Wang)   
  - opp: Expose of-node's name in debugfs (Viresh Kumar)   
  - cpufreq: CPPC: Fix performance/frequency conversion (Pierre Gondois)   
  - clk: rockchip: drop CLK_SET_RATE_PARENT from dclk_vop* on rk3568 (Sascha Hauer)   
  - phy: amlogic: meson8b-usb2: fix shared reset control use (Amjad Ouled-Ameur)   
  - phy: amlogic: meson8b-usb2: Use dev_err_probe() (Amjad Ouled-Ameur)   
  - phy: amlogic: phy-meson-gxl-usb2: fix shared reset controller use (Amjad Ouled-Ameur)   
  - staging: vchiq_core: handle NULL result of find_service_by_handle (Stefan Wahren)   
  - staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances (Stefan Wahren)   
  - clk: si5341: fix reported clk_rate when output divider is 2 (Adam Wujek)   
  - minix: fix bug when opening a file with O_DIRECT (Qinghua Jin)   
  - init/main.c: return 1 from handled __setup() functions (Randy Dunlap)   
  - lib/Kconfig.debug: add ARCH dependency for FUNCTION_ALIGN option (Feng Tang)   
  - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (Xiubo Li)   
  - ceph: fix inode reference leakage in ceph_get_snapdir() (Xiubo Li)   
  - netlabel: fix out-of-bounds memory accesses (Wang Yufen)   
  - netfilter: conntrack: revisit gc autotuning (Florian Westphal)   
  - Bluetooth: Fix use after free in hci_send_acl (Luiz Augusto von Dentz)   
  - MIPS: ingenic: correct unit node address (Krzysztof Kozlowski)   
  - xtensa: fix DTC warning unit_address_format (Max Filippov)   
  - mt76: fix monitor mode crash with sdio driver (Deren Wu)   
  - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm (H. Nikolaus Schaller)   
  - net: sfp: add 2500base-X quirk for Lantech SFP module (Michael Walle)   
  - net/mlx5e: Remove overzealous validations in netlink EEPROM query (Gal Pressman)   
  - net: limit altnames to 64k total (Jakub Kicinski)   
  - net: account alternate interface name memory (Jakub Kicinski)   
  - riscv: Fixed misaligned memory access. Fixed pointer comparison. (Michael T. Kloos)   
  - can: etas_es58x: es58x_fd_rx_event_msg(): initialize rx_event_msg before calling es58x_check_msg_len() (Vincent Mailhol)   
  - can: isotp: set default value for N_As to 50 micro seconds (Oliver Hartkopp)   
  - scsi: libfc: Fix use after free in fc_exch_abts_resp() (Jianglei Nie)   
  - powerpc/secvar: fix refcount leak in format_show() (Hangyu Hua)   
  - powerpc/64e: Tie PPC_BOOK3E_64 to PPC_FSL_BOOK3E (Michael Ellerman)   
  - MIPS: fix fortify panic when copying asm exception handlers (Alexander Lobakin)   
  - PCI: endpoint: Fix misused goto label (Li Chen)   
  - bnxt_en: Eliminate unintended link toggle during FW reset (Michael Chan)   
  - Bluetooth: use memset avoid memory leaks (Minghao Chi (CGEL ZTE))   
  - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} (Luiz Augusto von Dentz)   
  - tuntap: add sanity checks about msg_controllen in sendmsg (Harold Huang)   
  - macvtap: advertise link netns via netlink (Sven Eckelmann)   
  - mips: ralink: fix a refcount leak in ill_acc_of_setup() (Hangyu Hua)   
  - net/smc: correct settings of RMB window update limit (Dust Li)   
  - scsi: hisi_sas: Limit users changing debugfs BIST count value (Xiang Chen)   
  - scsi: hisi_sas: Free irq vectors in order for v3 HW (Qi Liu)   
  - scsi: aha152x: Fix aha152x_setup() __setup handler return value (Randy Dunlap)   
  - mt76: mt7615: Fix assigning negative values to unsigned variable (Yang Li)   
  - powerpc/64s/hash: Make hash faults work in NMI context (Nicholas Piggin)   
  - mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU (Johan Almbladh)   
  - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() (Damien Le Moal)   
  - scsi: pm8001: Fix tag leaks on error (Damien Le Moal)   
  - scsi: pm8001: Fix task leak in pm8001_send_abort_all() (Damien Le Moal)   
  - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() (Damien Le Moal)   
  - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface (Damien Le Moal)   
  - vfio/pci: Stub vfio_pci_vga_rw when !CONFIG_VFIO_PCI_VGA (Alex Williamson)   
  - drm/amdkfd: make CRAT table missing message informational only (Alex Deucher)   
  - dm: requeue IO if mapping table not yet available (Mike Snitzer)   
  - dm ioctl: prevent potential spectre v1 gadget (Jordy Zomer)   
  - ipv4: Invalidate neighbour for broadcast address upon address addition (Ido Schimmel)   
  - drm/msm/dsi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson)   
  - iwlwifi: mvm: move only to an enabled channel (Miri Korenblit)   
  - iwlwifi: mvm: Correctly set fragmented EBS (Ilan Peer)   
  - usb: dwc3: pci: Set the swnode from inside dwc3_pci_quirks() (Hans de Goede)   
  - net/mlx5e: Disable TX queues before registering the netdev (Maxim Mikityanskiy)   
  - power: supply: axp288-charger: Set Vhold to 4.4V (Hans de Goede)   
  - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (Christophe Leroy)   
  - scsi: mpi3mr: Fix memory leaks (Sreekanth Reddy)   
  - scsi: mpi3mr: Fix reporting of actual data transfer size (Sreekanth Reddy)   
  - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum (Manivannan Sadhasivam)   
  - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. (Sebastian Andrzej Siewior)   
  - PCI: endpoint: Fix alignment fault error in copy tests (Hou Zhiqiang)   
  - usb: ehci: add pci device support for Aspeed platforms (Neal Liu)   
  - iommu/arm-smmu-v3: fix event handling soft lockup (Zhou Guanghui)   
  - PCI: aardvark: Fix support for MSI interrupts (Pali Rohár)   
  - scsi: smartpqi: Fix kdump issue when controller is locked up (Mahesh Rajashekhara)   
  - drm/amdgpu: Fix recursive locking warning (Rajneesh Bhardwaj)   
  - powerpc: Set crashkernel offset to mid of RMA region (Sourabh Jain)   
  - net: initialize init_net earlier (Eric Dumazet)   
  - ipv6: make mc_forwarding atomic (Eric Dumazet)   
  - libbpf: Fix build issue with llvm-readelf (Yonghong Song)   
  - cfg80211: don't add non transmitted BSS to 6GHz scanned channels (Avraham Stern)   
  - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill (Lorenzo Bianconi)   
  - mt76: mt7921: fix crash when startup fails. (Ben Greear)   
  - power: supply: axp20x_battery: properly report current when discharging (Evgeny Boger)   
  - drm/v3d: fix missing unlock (Yongzhi Liu)   
  - scsi: bfa: Replace snprintf() with sysfs_emit() (Yang Guang)   
  - scsi: mvsas: Replace snprintf() with sysfs_emit() (Yang Guang)   
  - bpf: Make dst_port field in struct bpf_sock 16-bit wide (Jakub Sitnicki)   
  - drm/bridge: Add missing pm_runtime_put_sync (Yongzhi Liu)   
  - net/smc: Send directly when TCP_CORK is cleared (Tony Lu)   
  - ath11k: mhi: use mhi_sync_power_up() (Kalle Valo)   
  - ath11k: pci: fix crash on suspend if board file is not found (Kalle Valo)   
  - ath11k: fix kernel panic during unload/load ath11k modules (Venkateswara Naralasetty)   
  - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 (Maxim Kiselev)   
  - drm/amdkfd: Don't take process mutex for svm ioctls (Philip Yang)   
  - ptp: replace snprintf with sysfs_emit (Yang Guang)   
  - usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value (Pawel Laszczak)   
  - usb: gadget: tegra-xudc: Fix control endpoint's definitions (Wayne Chang)   
  - usb: gadget: tegra-xudc: Do not program SPARAM (Wayne Chang)   
  - drm/amd/display: Use PSR version selected during set_psr_caps (Nicholas Kazlauskas)   
  - drm/amd/display: Fix memory leak (Yongzhi Liu)   
  - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (Xin Xiong)   
  - drm/amd/display: Add signal type check when verify stream backends same (Dale Zhao)   
  - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (Zekun Shen)   
  - drm: Add orientation quirk for GPD Win Max (Anisse Astier)   
  - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (Hou Wenlong)   
  - KVM: x86/pmu: Fix and isolate TSX-specific performance event logic (Like Xu)   
  - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs (Jim Mattson)   
  - KVM: SVM: Fix kvm_cache_regs.h inclusions for is_guest_mode() (Peter Gonda)   
  - KVM: x86/pmu: Use different raw event masks for AMD and Intel (Jim Mattson)   
  - kfence: limit currently covered allocations when pool nearly full (Marco Elver)   
  - kfence: move saving stack trace of allocations into __kfence_alloc() (Marco Elver)   
  - kfence: count unexpectedly skipped allocations (Marco Elver)   
  - nbd: fix possible overflow on 'first_minor' in nbd_dev_add() (Zhang Wensheng)   
  - nbd: Fix hungtask when nbd_config_put (Ye Bin)   
  - nbd: Fix incorrect error handle when first_minor is illegal in nbd_dev_add (Ye Bin)   
  - nbd: add error handling support for add_disk() (Luis Chamberlain)   
  - rtc: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang)   
  - um: fix and optimize xor select template for CONFIG64 and timetravel mode (Benjamin Beichler)   
  - lib/logic_iomem: correct fallback config references (Johannes Berg)   
  - LTS version: v5.15.33 (Jack Vogel)   
  - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" (Marc Zyngier)   
  - coredump: Use the vma snapshot in fill_files_note (Eric W. Biederman)   
  - coredump/elf: Pass coredump_params into fill_note_info (Eric W. Biederman)   
  - coredump: Remove the WARN_ON in dump_vma_snapshot (Eric W. Biederman)   
  - coredump: Snapshot the vmas in do_coredump (Eric W. Biederman)   
  - iommu/dma: Account for min_align_mask w/swiotlb (David Stevens)   
  - swiotlb: Support aligned swiotlb buffers (David Stevens)   
  - iommu/dma: Check CONFIG_SWIOTLB more broadly (David Stevens)   
  - iommu/dma: Fold _swiotlb helpers into callers (David Stevens)   
  - iommu/dma: Skip extra sync during unmap w/swiotlb (David Stevens)   
  - mmc: rtsx: Fix build errors/warnings for unused variable (Ulf Hansson)   
  - mmc: rtsx: Let MMC core handle runtime PM (Kai-Heng Feng)   
  - n64cart: convert bi_disk to bi_bdev->bd_disk fix build (Jackie Liu)   
  - torture: Make torture.sh help message match reality (Paul E. McKenney)   
  - openvswitch: Fixed nd target mask field in the flow dump. (Martin Varghese)   
  - docs: sysctl/kernel: add missing bit to panic_print (Guilherme G. Piccoli)   
  - um: Fix uml_mconsole stop/go (Anton Ivanov)   
  - arm64: dts: ls1046a: Update i2c node dma properties (Kuldeep Singh)   
  - arm64: dts: ls1043a: Update i2c dma properties (Kuldeep Singh)   
  - ARM: dts: spear13xx: Update SPI dma properties (Kuldeep Singh)   
  - ARM: dts: spear1340: Update serial node properties (Kuldeep Singh)   
  - spi: mediatek: support tick_delay without enhance_timing (Leilk Liu)   
  - media: ov6650: Fix crop rectangle affected by set format (Janusz Krzysztofik)   
  - media: ov6650: Add try support to selection API operations (Janusz Krzysztofik)   
  - perf vendor events: Update metrics for SkyLake Server (Ian Rogers)   
  - ASoC: topology: Allow TLV control to be either read or write (Amadeusz Sławiński)   
  - ASoC: SOF: Intel: Fix build error without SND_SOC_SOF_PCI_DEV (Zheng Bin)   
  - ubi: fastmap: Return error code if memory allocation fails in add_aeb() (Zhihao Cheng)   
  - dt-bindings: pinctrl: pinctrl-microchip-sgpio: Fix example (Horatiu Vultur)   
  - dt-bindings: memory: mtk-smi: No need mediatek,larb-id for mt8167 (Yong Wu)   
  - dt-bindings: spi: mxic: The interrupt property is not mandatory (Miquel Raynal)   
  - dt-bindings: mtd: nand-controller: Fix a comment in the examples (Miquel Raynal)   
  - dt-bindings: mtd: nand-controller: Fix the reg property description (Miquel Raynal)   
  - mmc: rtsx: Use pm_runtime_{get,put}() to handle runtime PM (Kai-Heng Feng)   
  - bpf: Fix comment for helper bpf_current_task_under_cgroup() (Hengqi Chen)   
  - bpf: Adjust BPF stack helper functions to accommodate skip > 0 (Namhyung Kim)   
  - af_unix: Support POLLPRI for OOB. (Kuniyuki Iwashima)   
  - mm/usercopy: return 1 from hardened_usercopy __setup() handler (Randy Dunlap)   
  - mm/memcontrol: return 1 from cgroup.memory __setup() handler (Randy Dunlap)   
  - ARM: 9187/1: JIVE: fix return value of __setup handler (Randy Dunlap)   
  - mm/mmap: return 1 from stack_guard_gap __setup() handler (Randy Dunlap)   
  - net: preserve skb_end_offset() in skb_unclone_keeptruesize() (Eric Dumazet)   
  - net: add skb_set_end_offset() helper (Eric Dumazet)   
  - tracing: Have type enum modifications copy the strings (Steven Rostedt (Google))   
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds)   
  - ASoC: soc-compress: Change the check for codec_dai (Jiasheng Jiang)   
  - arm64: mm: Drop 'const' from conditional arm64_dma_phys_limit definition (Will Deacon)   
  - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet (Arınç ÜNAL)   
  - scsi: qla2xxx: Add qla2x00_async_done() for async routines (Saurav Kashyap)   
  - drm/connector: Fix typo in documentation (Maxime Ripard)   
  - proc: bootconfig: Add null pointer check (Lv Ruyi)   
  - can: isotp: restore accidentally removed MSG_PEEK feature (Oliver Hartkopp)   
  - platform/chrome: cros_ec_typec: Check for EC device (Prashant Malani)   
  - spi: Fix Tegra QSPI example (Jon Hunter)   
  - vhost: handle error while adding split ranges to iotlb (Anirudh Rayabharam)   
  - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (Rafael J. Wysocki)   
  - riscv module: remove (NOLOAD) (Fangrui Song)   
  - io_uring: fix memory leak of uid in files registration (Pavel Begunkov)   
  - block: Fix the maximum minor value is blk_alloc_ext_minor() (Christophe JAILLET)   
  - ARM: iop32x: offset IRQ numbers by 1 (Arnd Bergmann)   
  - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (Baokun Li)   
  - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs (Jiaxin Yu)   
  - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() (Jonathan Neuschäfer)   
  - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() (Jonathan Neuschäfer)   
  - net: sparx5: uses, depends on BRIDGE or !BRIDGE (Randy Dunlap)   
  - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function (Miaoqian Lin)   
  - pinctrl: pinconf-generic: Print arguments for bias-pull-* (Chen-Yu Tsai)   
  - watch_queue: Free the page array when watch_queue is dismantled (Eric Dumazet)   
  - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes (Herbert Xu)   
  - mailbox: imx: fix wakeup failure from freeze mode (Robin Gong)   
  - rxrpc: Fix call timer start racing with call destruction (David Howells)   
  - rxrpc: fix some null-ptr-deref bugs in server_key.c (Xiaolong Huang)   
  - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware (Guangbin Huang)   
  - net: hns3: fix the concurrency between functions reading debugfs (Yufeng Mo)   
  - gfs2: Make sure FITRIM minlen is rounded up to fs block size (Andrew Price)   
  - gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher)   
  - rtc: check if __rtc_read_time was successful (Tom Rix)   
  - modpost: restore the warning message for missing symbol versions (Masahiro Yamada)   
  - XArray: Update the LRU list in xas_split() (Matthew Wilcox (Oracle))   
  - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value (Tom Rix)   
  - can: mcba_usb: properly check endpoint type (Pavel Skripkin)   
  - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path (Hangyu Hua)   
  - XArray: Fix xas_create_range() when multi-order entry present (Matthew Wilcox (Oracle))   
  - wireguard: socket: ignore v6 endpoints when ipv6 is disabled (Jason A. Donenfeld)   
  - wireguard: socket: free skb in send6 when ipv6 is disabled (Wang Hai)   
  - wireguard: queueing: use CFI-safe ptr_ring cleanup function (Jason A. Donenfeld)   
  - nvme: fix the read-only state for zoned namespaces with unsupposed features (Pankaj Raghav)   
  - nvme: allow duplicate NSIDs for private namespaces (Sungup Moon)   
  - ubifs: rename_whiteout: correct old_dir size computing (Baokun Li)   
  - ubifs: Fix to add refcount once page is set private (Zhihao Cheng)   
  - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (Zhihao Cheng)   
  - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (Zhihao Cheng)   
  - ubifs: Rectify space amount budget for mkdir/tmpfile operations (Zhihao Cheng)   
  - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (Zhihao Cheng)   
  - ubifs: Rename whiteout atomically (Zhihao Cheng)   
  - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (Zhihao Cheng)   
  - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (Zhihao Cheng)   
  - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (Zhihao Cheng)   
  - KVM: SVM: fix panic on out-of-bounds guest IRQ (Yi Wang)   
  - KVM: x86: fix sending PV IPI (Li RongQing)   
  - KVM: Prevent module exit until all VMs are freed (David Matlack)   
  - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated (Vitaly Kuznetsov)   
  - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov)   
  - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq (Vitaly Kuznetsov)   
  - platform: chrome: Split trace include file (Gwendal Grignou)   
  - scsi: qla2xxx: Use correct feature type field during RFF_ID processing (Manish Rangankar)   
  - scsi: qla2xxx: Reduce false trigger to login (Quinn Tran)   
  - scsi: qla2xxx: Fix stuck session of PRLI reject (Quinn Tran)   
  - scsi: qla2xxx: Fix N2N inconsistent PLOGI (Quinn Tran)   
  - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests (Arun Easi)   
  - scsi: qla2xxx: Fix hang due to session stuck (Quinn Tran)   
  - scsi: qla2xxx: Fix incorrect reporting of task management failure (Quinn Tran)   
  - scsi: qla2xxx: Fix disk failure to rediscover (Quinn Tran)   
  - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (Saurav Kashyap)   
  - scsi: qla2xxx: Check for firmware dump already collected (Joe Carnuccio)   
  - scsi: qla2xxx: Add devids and conditionals for 28xx (Joe Carnuccio)   
  - scsi: qla2xxx: Fix T10 PI tag escape and IP guard options for 28XX adapters (Joe Carnuccio)   
  - scsi: qla2xxx: edif: Fix clang warning (Quinn Tran)   
  - scsi: qla2xxx: Fix device reconnect in loop topology (Arun Easi)   
  - scsi: qla2xxx: Fix warning for missing error code (Nilesh Javali)   
  - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter (Bikash Hazarika)   
  - scsi: qla2xxx: Fix premature hw access after PCI error (Quinn Tran)   
  - scsi: qla2xxx: Fix scheduling while atomic (Quinn Tran)   
  - scsi: qla2xxx: Fix warning message due to adisc being flushed (Quinn Tran)   
  - scsi: qla2xxx: Fix stuck session in gpdb (Quinn Tran)   
  - scsi: qla2xxx: Implement ref count for SRB (Saurav Kashyap)   
  - scsi: qla2xxx: Refactor asynchronous command initialization (Daniel Wagner)   
  - drm/i915: Reject unsupported TMDS rates on ICL+ (Ville Syrjälä)   
  - drm/i915: Fix PSF GV point mask when SAGV is not possible (Ville Syrjälä)   
  - drm/i915: Treat SAGV block time 0 as SAGV disabled (Ville Syrjälä)   
  - drm/dp: Fix off-by-one in register cache size (Kees Cook)   
  - powerpc: Fix build errors with newer binutils (Anders Roxell)   
  - powerpc: Add set_memory_{p/np}() and remove set_memory_attr() (Christophe Leroy)   
  - powerpc/lib/sstep: Fix build errors with newer binutils (Anders Roxell)   
  - powerpc/lib/sstep: Fix 'sthcx' instruction (Anders Roxell)   
  - powerpc/kasan: Fix early region not updated correctly (Chen Jingwen)   
  - KVM: x86: hyper-v: HVCALL_SEND_IPI_EX is an XMM fast hypercall (Vitaly Kuznetsov)   
  - KVM: x86: hyper-v: Fix the maximum number of sparse banks for XMM fast TLB flush hypercalls (Vitaly Kuznetsov)   
  - KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_flush_tlb() (Vitaly Kuznetsov)   
  - KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_send_ipi() (Vitaly Kuznetsov)   
  - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU (Sean Christopherson)   
  - KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU (Sean Christopherson)   
  - KVM: x86/mmu: Move "invalid" check out of kvm_tdp_mmu_get_root() (Sean Christopherson)   
  - KVM: x86: Reinitialize context if host userspace toggles EFER.LME (Paolo Bonzini)   
  - ALSA: hda/realtek: Add alc256-samsung-headphone fixup (Matt Kramer)   
  - media: atomisp: fix bad usage at error handling logic (Mauro Carvalho Chehab)   
  - mmc: host: Return an error when ->enable_sdio_irq() ops is missing (Ulf Hansson)   
  - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (Steven Rostedt (Google))   
  - ASoC: Intel: sof_sdw: fix quirks for 2022 HP Spectre x360 13" (Anthony I Gilea)   
  - media: hdpvr: initialize dev->worker at hdpvr_register_videodev (Dongliang Mu)   
  - media: Revert "media: em28xx: add missing em28xx_close_extension" (Pavel Skripkin)   
  - media: i2c: ov5648: Fix lockdep error (Hans de Goede)   
  - video: fbdev: sm712fb: Fix crash in smtcfb_write() (Zheyu Ma)   
  - ASoC: amd: vg: fix for pm resume callback sequence (Vijendar Mukunda)   
  - ARM: mmp: Fix failure to remove sram device (Uwe Kleine-König)   
  - ARM: tegra: tamonten: Fix I2C3 pad setting (Richard Leitner)   
  - lib/test_lockup: fix kernel pointer check for separate address spaces (Arnd Bergmann)   
  - uaccess: fix type mismatch warnings from access_ok() (Arnd Bergmann)   
  - media: cx88-mpeg: clear interrupt status register before streaming video (Daniel González Cabanelas)   
  - media: imx-jpeg: fix a bug of accessing array out of bounds (Ming Qian)   
  - ASoC: soc-core: skip zero num_dai component in searching dai name (Shengjiu Wang)   
  - ARM: dts: bcm2711: Add the missing L1/L2 cache information (Richard Schleich)   
  - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit (Jing Yao)   
  - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() (Jing Yao)   
  - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() (Jing Yao)   
  - arm64: defconfig: build imx-sdma as a module (Marcel Ziswiler)   
  - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk (Abel Vesa)   
  - ARM: ftrace: avoid redundant loads or clobbering IP (Ard Biesheuvel)   
  - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo (Tsuchiya Yuto)   
  - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards (Hans de Goede)   
  - ASoC: madera: Add dependencies on MFD (Charles Keepax)   
  - ARM: dts: bcm2837: Add the missing L1/L2 cache information (Richard Schleich)   
  - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 (David Heidelberg)   
  - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit (Yang Guang)   
  - video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy)   
  - video: fbdev: w100fb: Reset global state (Evgeny Novikov)   
  - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (Tim Gardner)   
  - media: iommu/mediatek: Add device_link between the consumer and the larb devices (Yong Wu)   
  - media: iommu/mediatek: Return ENODEV if the device is NULL (Yong Wu)   
  - media: iommu/mediatek-v1: Free the existed fwspec if the master dev already has (Yong Wu)   
  - media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers (Mirela Rabulea)   
  - ASoC: SOF: Intel: match sdw version on link_slaves_found (Bard Liao)   
  - ASoC: sh: rz-ssi: Make the data structures available before registering the handlers (Lad Prabhakar)   
  - media: ir_toy: free before error exiting (Peiwei Hu)   
  - media: atmel: atmel-isc-base: report frame sizes as full supported range (Eugen Hristev)   
  - media: staging: media: zoran: fix various V4L2 compliance errors (Hans Verkuil)   
  - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com (Corentin Labbe)   
  - media: staging: media: zoran: move videodev alloc (Corentin Labbe)   
  - ntfs: add sanity check on allocation size (Dongliang Mu)   
  - Adjust cifssb maximum read size (Rohith Surabattula)   
  - f2fs: compress: fix to print raw data size in error path of lz4 decompression (Chao Yu)   
  - f2fs: use spin_lock to avoid hang (Jaegeuk Kim)   
  - btrfs: make search_csum_tree return 0 if we get -EFBIG (Josef Bacik)   
  - btrfs: harden identification of a stale device (Anand Jain)   
  - f2fs: don't get FREEZE lock in f2fs_evict_inode in frozen fs (Jaegeuk Kim)   
  - NFSD: Fix nfsd_breaker_owns_lease() return values (Chuck Lever)   
  - f2fs: fix to do sanity check on curseg->alloc_type (Chao Yu)   
  - ext4: don't BUG if someone dirty pages without asking ext4 first (Theodore Ts'o)   
  - sched/tracing: Report TASK_RTLOCK_WAIT tasks as TASK_UNINTERRUPTIBLE (Valentin Schneider)   
  - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (Ritesh Harjani)   
  - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (Ritesh Harjani)   
  - locking/lockdep: Iterate lock_classes directly when reading lockdep files (Waiman Long)   
  - atomics: Fix atomic64_{read_acquire,set_release} fallbacks (Mark Rutland)   
  - spi: tegra20: Use of_device_get_match_data() (Minghao Chi)   
  - nvme-tcp: lockdep: annotate in-kernel sockets (Chris Leech)   
  - parisc: Fix handling off probe non-access faults (John David Anglin)   
  - PM: core: keep irq flags in device_pm_check_callbacks() (Dmitry Baryshkov)   
  - ACPI/APEI: Limit printable size of BERT table data (Darren Hart)   
  - Revert "Revert "block, bfq: honor already-setup queue merges"" (Paolo Valente)   
  - lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 (Paul Menzel)   
  - ACPICA: Avoid walking the ACPI Namespace if it is not there (Rafael J. Wysocki)   
  - bfq: fix use-after-free in bfq_dispatch_request (Zhang Wensheng)   
  - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files (Akira Kawata)   
  - irqchip/nvic: Release nvic_base upon failure (Souptick Joarder (HPE))   
  - irqchip/qcom-pdc: Fix broken locking (Marc Zyngier)   
  - Fix incorrect type in assignment of ipv6 port for audit (Casey Schaufler)   
  - loop: use sysfs_emit() in the sysfs xxx show() (Chaitanya Kulkarni)   
  - selinux: allow FIOCLEX and FIONCLEX with policy capability (Richard Haines)   
  - arm64: module: remove (NOLOAD) from linker script (Fangrui Song)   
  - selinux: use correct type for context length (Christian Göttsche)   
  - block, bfq: don't move oom_bfqq (Yu Kuai)   
  - crypto: hisilicon/sec - not need to enable sm4 extra mode at HW V3 (Kai Ye)   
  - crypto: xts - Add softdep on ecb (Herbert Xu)   
  - block/bfq_wf2q: correct weight to ioprio (Yahu Gao)   
  - rcu: Mark writes to the rcu_segcblist structure's ->flags field (Paul E. McKenney)   
  - pinctrl: npcm: Fix broken references to chip->parent_device (Marc Zyngier)   
  - gcc-plugins/stackleak: Exactly match strings instead of prefixes (Kees Cook)   
  - crypto: hisilicon/qm - cleanup warning in qm_vf_read_qos (Kai Ye)   
  - regulator: rpi-panel: Handle I2C errors/timing to the Atmel (Dave Stevenson)   
  - LSM: general protection fault in legacy_parse_param (Casey Schaufler)   
  - fs: fix fd table size alignment properly (Linus Torvalds)   
  - lib/test: use after free in register_test_dev_kmod() (Dan Carpenter)   
  - fs: fd tables have to be multiples of BITS_PER_LONG (Linus Torvalds)   
  - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head (Trond Myklebust)   
  - net/sched: act_ct: fix ref leak when switching zones (Marcelo Ricardo Leitner)   
  - net: prefer nf_ct_put instead of nf_conntrack_put (Florian Westphal)   
  - octeontx2-af: initialize action variable (Tom Rix)   
  - net: sparx5: switchdev: fix possible NULL pointer dereference (Zheng Yongjun)   
  - net/x25: Fix null-ptr-deref caused by x25_disconnect (Duoming Zhou)   
  - qlcnic: dcb: default to returning -EOPNOTSUPP (Tom Rix)   
  - net: sparx5: depends on PTP_1588_CLOCK_OPTIONAL (Randy Dunlap)   
  - net: hns3: clean residual vf config after disable sriov (Peng Li)   
  - NFS: Don't loop forever in nfs_do_recoalesce() (Trond Myklebust)   
  - selftests: test_vxlan_under_vrf: Fix broken test case (Ido Schimmel)   
  - net: phy: broadcom: Fix brcm_fet_config_init() (Florian Fainelli)   
  - net: hns3: refine the process when PF set VF VLAN (Jian Shen)   
  - net: hns3: format the output of the MAC address (Yufeng Mo)   
  - net: hns3: add vlan list lock to protect vlan list (Jian Shen)   
  - net: hns3: fix port base vlan add fail when concurrent with reset (Jian Shen)   
  - net: hns3: fix bug when PF set the duplicate MAC address for VFs (Jian Shen)   
  - net: enetc: report software timestamping via SO_TIMESTAMPING (Vladimir Oltean)   
  - xen: fix is_xen_pmu() (Juergen Gross)   
  - clk: Initialize orphan req_rate (Maxime Ripard)   
  - vsock/virtio: enable VQs early on probe (Stefano Garzarella)   
  - vsock/virtio: read the negotiated features before using VQs (Stefano Garzarella)   
  - vsock/virtio: initialize vdev->priv before using VQs (Stefano Garzarella)   
  - clk: qcom: gcc-msm8994: Fix gpll4 width (Konrad Dybcio)   
  - perf stat: Fix forked applications enablement of counters (Thomas Richter)   
  - kdb: Fix the putarea helper function (Daniel Thompson)   
  - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error (Olga Kornievskaia)   
  - SUNRPC don't resend a task on an offlined transport (Olga Kornievskaia)   
  - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Pablo Neira Ayuso)   
  - jfs: fix divide error in dbNextAG (Pavel Skripkin)   
  - driver core: dd: fix return value of __setup handler (Randy Dunlap)   
  - firmware: google: Properly state IOMEM dependency (David Gow)   
  - kgdbts: fix return value of __setup handler (Randy Dunlap)   
  - virt: acrn: fix a memory leak in acrn_dev_ioctl() (Xiaolong Huang)   
  - virt: acrn: obtain pa from VMA with PFNMAP flag (Yonghua Huang)   
  - serial: 8250: fix XOFF/XON sending when DMA is used (Ilpo Järvinen)   
  - kgdboc: fix return value of __setup handler (Randy Dunlap)   
  - tty: hvc: fix return value of __setup handler (Randy Dunlap)   
  - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe (Miaoqian Lin)   
  - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe (Miaoqian Lin)   
  - pinctrl: microchip-sgpio: lock RMW access (Michael Walle)   
  - pinctrl: microchip sgpio: use reset driver (Horatiu Vultur)   
  - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Fix pingroup pin config state readback (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai)   
  - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init (Miaoqian Lin)   
  - staging: mt7621-dts: fix GB-PC2 devicetree (Arınç ÜNAL)   
  - staging: mt7621-dts: fix pinctrl properties for ethernet (Arınç ÜNAL)   
  - staging: mt7621-dts: fix formatting (Arınç ÜNAL)   
  - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree (Arınç ÜNAL)   
  - NFS: remove unneeded check in decode_devicenotify_args() (Alexey Khoroshilov)   
  - mailbox: imx: fix crash in resume on i.mx8ulp (Robin Gong)   
  - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver (Miaoqian Lin)   
  - clk: Fix clk_hw_get_clk() when dev is NULL (Maxime Ripard)   
  - clk: clps711x: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer)   
  - clk: hisilicon: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer)   
  - clk: loongson1: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer)   
  - clk: actions: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer)   
  - nvdimm/region: Fix default alignment for small regions (Dan Williams)   
  - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (Miaoqian Lin)   
  - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region (Miaoqian Lin)   
  - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region (Miaoqian Lin)   
  - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma (Jie Hai)   
  - clk: qcom: clk-rcg2: Update the frac table for pixel clock (Taniya Das)   
  - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (Taniya Das)   
  - clk: at91: sama7g5: fix parents of PDMCs' GCLK (Codrin Ciubotariu)   
  - clk: imx: off by one in imx_lpcg_parse_clks_from_dt() (Dan Carpenter)   
  - clk: imx7d: Remove audio_mclk_root_clk (Abel Vesa)   
  - dma-debug: fix return value of __setup handlers (Randy Dunlap)   
  - staging: r8188eu: fix endless loop in recv_func (Martin Kaiser)   
  - NFS: Return valid errors from nfs2/3_decode_dirent() (Trond Myklebust)   
  - habanalabs: Add check for pci_enable_device (Jiasheng Jiang)   
  - iio: adc: Add check for devm_request_threaded_irq (Jiasheng Jiang)   
  - serial: 8250: Fix race condition in RTS-after-send handling (Uwe Kleine-König)   
  - NFS: Use of mapping_set_error() results in spurious errors (Trond Myklebust)   
  - serial: 8250_lpss: Balance reference count for PCI DMA device (Andy Shevchenko)   
  - serial: 8250_mid: Balance reference count for PCI DMA device (Andy Shevchenko)   
  - phy: phy-brcm-usb: fixup BCM4908 support (Rafał Miłecki)   
  - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) (Liu Ying)   
  - clk: qcom: ipq8074: Use floor ops for SDCC1 clock (Dirk Buchwalder)   
  - pinctrl: renesas: checker: Fix miscalculation of number of states (Geert Uytterhoeven)   
  - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel (Geert Uytterhoeven)   
  - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. (Jonathan Cameron)   
  - serial: 8250_aspeed_vuart: add PORT_ASPEED_VUART port type (Zev Weiss)   
  - iio: mma8452: Fix probe failing when an i2c_device_id is used (Hans de Goede)   
  - dmaengine: idxd: restore traffic class defaults after wq reset (Dave Jiang)   
  - dmaengine: idxd: change bandwidth token to read buffers (Dave Jiang)   
  - dmaengine: idxd: check GENCAP config support for gencfg register (Dave Jiang)   
  - clk: qcom: ipq8074: fix PCI-E clock oops (Robert Marko)   
  - soundwire: intel: fix wrong register name in intel_shim_wake (Libin Yang)   
  - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse (Luca Weiss)   
  - misc: alcor_pci: Fix an error handling path (Christophe JAILLET)   
  - fsi: Aspeed: Fix a potential double free (Christophe JAILLET)   
  - pps: clients: gpio: Propagate return value from pps_gpio_probe (Robert Hancock)   
  - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() (Uwe Kleine-König)   
  - fsi: scom: Remove retries in indirect scoms (Joel Stanley)   
  - fsi: scom: Fix error handling (Joel Stanley)   
  - mxser: fix xmit_buf leak in activate when LSR == 0xff (Jiri Slaby)   
  - staging: r8188eu: release_firmware is not called if allocation fails (Michael Straube)   
  - staging: r8188eu: convert DBG_88E_LEVEL call in hal/rtl8188e_hal_init.c (Phillip Potter)   
  - kernel/resource: fix kfree() of bootmem memory again (Miaohe Lin)   
  - drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool (Sondhauß, Jan)   
  - ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Alexander Lobakin)   
  - ice: fix 'scheduling while atomic' on aux critical err interrupt (Alexander Lobakin)   
  - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe (Miaoqian Lin)   
  - tipc: fix the timer expires after interval 100ms (Hoang Le)   
  - net: dsa: fix panic on shutdown if multi-chip tree failed to probe (Vladimir Oltean)   
  - openvswitch: always update flow key after nat (Aaron Conole)   
  - tcp: ensure PMTU updates are processed during fastopen (Jakub Kicinski)   
  - net: bcmgenet: Use stronger register read/writes to assure ordering (Jeremy Linton)   
  - PCI: Avoid broken MSI on SB600 USB devices (Bjorn Helgaas)   
  - selftests/bpf/test_lirc_mode2.sh: Exit with proper code (Hangbin Liu)   
  - powerpc/pseries: Fix use after free in remove_phb_dynamic() (Michael Ellerman)   
  - i2c: mux: demux-pinctrl: do not deactivate a master that is not active (Peter Rosin)   
  - netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned() (Phil Sutter)   
  - i2c: meson: Fix wrong speed use from probe (Lucas Tanure)   
  - af_netlink: Fix shift out of bounds in group mask calculation (Petr Machata)   
  - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates (Guillaume Nault)   
  - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt (Yake Yang)   
  - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (Niels Dossche)   
  - Bluetooth: hci_uart: add missing NULL check in h5_enqueue (Pavel Skripkin)   
  - selftests/bpf: Fix error reporting from sock_fields programs (Jakub Sitnicki)   
  - af_unix: Fix some data-races around unix_sk(sk)->oob_skb. (Kuniyuki Iwashima)   
  - ibmvnic: fix race between xmit and reset (Sukadev Bhattiprolu)   
  - bareudp: use ipv6_mod_enabled to check if IPv6 enabled (Hangbin Liu)   
  - can: isotp: support MSG_TRUNC flag when reading from socket (Oliver Hartkopp)   
  - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket (Oliver Hartkopp)   
  - can: isotp: sanitize CAN ID checks in isotp_bind() (Oliver Hartkopp)   
  - mt76: mt7921: fix mt7921_queues_acq implementation (Lorenzo Bianconi)   
  - netfilter: flowtable: Fix QinQ and pppoe support for inet table (Pablo Neira Ayuso)   
  - drm/i915/display: Fix HPD short pulse handling for eDP (José Roberto de Souza)   
  - USB: storage: ums-realtek: fix error code in rts51x_read_mem() (Dan Carpenter)   
  - samples/bpf, xdpsock: Fix race when running for fix duration of time (Niklas Söderlund)   
  - bpf, sockmap: Fix double uncharge the mem of sk_msg (Wang Yufen)   
  - bpf, sockmap: Fix more uncharged while msg has more_data (Wang Yufen)   
  - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full (Wang Yufen)   
  - bpf, sockmap: Fix memleak in sk_psock_queue_msg (Wang Yufen)   
  - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine (Yongzhi Liu)   
  - Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error" (Leon Romanovsky)   
  - RDMA/irdma: Prevent some integer underflows (Dan Carpenter)   
  - power: ab8500_chargalg: Use CLOCK_MONOTONIC (Linus Walleij)   
  - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (Xin Xiong)   
  - MIPS: pgalloc: fix memory leak caused by pgd_free() (Yaliang Wang)   
  - MIPS: RB532: fix return value of __setup handler (Randy Dunlap)   
  - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base (Miaoqian Lin)   
  - ath10k: Fix error handling in ath10k_setup_msa_resources (Miaoqian Lin)   
  - vxcan: enable local echo for sent CAN frames (Oliver Hartkopp)   
  - powerpc: 8xx: fix a return value error in mpc8xx_pic_init (Hangyu Hua)   
  - scsi: mpt3sas: Fix incorrect 4GB boundary check (Sreekanth Reddy)   
  - platform/x86: huawei-wmi: check the return value of device_create_file() (Jia-Ju Bai)   
  - selftests/bpf: Make test_lwt_ip_encap more stable and faster (Felix Maurer)   
  - libbpf: Unmap rings when umem deleted (lic121)   
  - mfd: mc13xxx: Add check for mc13xxx_irq_request (Jiasheng Jiang)   
  - powerpc/64s: Don't use DSISR for SLB faults (Michael Ellerman)   
  - powerpc/sysdev: fix incorrect use to determine if list is empty (Jakob Koschel)   
  - MIPS: Sanitise Cavium switch cases in TLB handler synthesizers (Maciej W. Rozycki)   
  - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n (Randy Dunlap)   
  - drm/msm/a6xx: Fix missing ARRAY_SIZE() check (Rob Clark)   
  - net: axienet: fix RX ring refill allocation failure handling (Robert Hancock)   
  - PCI: Reduce warnings on possible RW1C corruption (Mark Tomlinson)   
  - RDMA/core: Fix ib_qp_usecnt_dec() called when error (Yajun Deng)   
  - IB/hfi1: Allow larger MTU without AIP (Mike Marciniszyn)   
  - power: supply: wm8350-power: Add missing free in free_charger_irq (Jiasheng Jiang)   
  - power: supply: wm8350-power: Handle error for wm8350_register_irq (Jiasheng Jiang)   
  - i2c: xiic: Make bus names unique (Robert Hancock)   
  - hv_balloon: rate-limit "Unhandled message" warning (Anssi Hannula)   
  - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() (Hou Wenlong)   
  - KVM: x86: Fix emulation in writing cr8 (Zhenzhong Duan)   
  - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit (Michael Ellerman)   
  - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() (Daniel Henrique Barboza)   
  - libbpf: Skip forward declaration when counting duplicated type names (Xu Kuohai)   
  - gpu: host1x: Fix a memory leak in 'host1x_remove()' (Christophe JAILLET)   
  - RDMA/irdma: Remove incorrect masking of PD (Mustafa Ismail)   
  - RDMA/irdma: Fix Passthrough mode in VM (Mustafa Ismail)   
  - RDMA/irdma: Fix netdev notifications for vlan's (Mustafa Ismail)   
  - xsk: Fix race at socket teardown (Magnus Karlsson)   
  - bpf, arm64: Feed byte-offset into bpf line info (Hou Tao)   
  - bpf, arm64: Call build_prologue() first in first JIT pass (Hou Tao)   
  - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt (Nishanth Menon)   
  - scsi: hisi_sas: Change permission of parameter prot_mask (Xiang Chen)   
  - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return (Hans de Goede)   
  - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (Miaoqian Lin)   
  - ext2: correct max file size computing (Zhang Yi)   
  - power: supply: sbs-charger: Don't cancel work that is not initialized (Christophe JAILLET)   
  - TOMOYO: fix __setup handlers return values (Randy Dunlap)   
  - drm/amd/display: Remove vupdate_int_entry definition (Maíra Canal)   
  - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR (Aharon Landau)   
  - scsi: pm8001: Fix abort all task initialization (Damien Le Moal)   
  - scsi: pm8001: Fix NCQ NON DATA command completion handling (Damien Le Moal)   
  - scsi: pm8001: Fix NCQ NON DATA command task initialization (Damien Le Moal)   
  - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() (Damien Le Moal)   
  - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() (Damien Le Moal)   
  - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() (Damien Le Moal)   
  - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() (Damien Le Moal)   
  - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() (Damien Le Moal)   
  - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() (Damien Le Moal)   
  - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() (Damien Le Moal)   
  - scsi: fnic: Fix a tracing statement (Bart Van Assche)   
  - vfio/pci: wake-up devices around reset functions (Abhishek Sahu)   
  - vfio/pci: fix memory leak during D3hot to D0 transition (Abhishek Sahu)   
  - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS (Aashish Sharma)   
  - drm/msm/dpu: fix dp audio condition (Dmitry Baryshkov)   
  - drm/msm/dpu: add DSPP blocks teardown (Dmitry Baryshkov)   
  - drm/msm/dsi/phy: fix 7nm v4.0 settings for C-PHY mode (Dmitry Baryshkov)   
  - drm/msm/dsi: Use "ref" fw clock instead of global name for VCO parent (Marijn Suijten)   
  - drm/msm/dp: always add fail-safe mode into connector mode list (Kuogee Hsieh)   
  - drm/msm/dp: stop link training after link training 2 failed (Kuogee Hsieh)   
  - drm/msm/dp: populate connector of struct dp_panel (Kuogee Hsieh)   
  - mtd: rawnand: pl353: Set the nand chip node as the flash node (Amit Kumar Mahapatra)   
  - iwlwifi: mvm: Fix an error code in iwl_mvm_up() (Dan Carpenter)   
  - iwlwifi: Fix -EIO error code that is never returned (Colin Ian King)   
  - iwlwifi: yoyo: remove DBGI_SRAM address reset writing (Rotem Saado)   
  - iwlwifi: mvm: align locking in D3 test debugfs (Johannes Berg)   
  - iwlwifi: mvm: don't iterate unadded vifs when handling FW SMPS req (Luca Coelho)   
  - iwlwifi: mvm: Don't call iwl_mvm_sta_from_mac80211() with NULL sta (Takashi Iwai)   
  - selftests: mptcp: add csum mib check for mptcp_connect (Geliang Tang)   
  - dax: make sure inodes are flushed before destroy cache (Tong Zhang)   
  - libbpf: Fix memleak in libbpf_netlink_recv() (Andrii Nakryiko)   
  - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug (Roman Li)   
  - drm/amd/pm: enable pm sysfs write for one VF mode (Yiqing Yao)   
  - bpftool: Fix the error when lookup in no-btf maps (Yinjun Zhang)   
  - drm/bridge: anx7625: Fix overflow issue on reading EDID (Pin-Yen Lin)   
  - iommu/ipmmu-vmsa: Check for error num after setting mask (Jiasheng Jiang)   
  - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports (Dmitry Torokhov)   
  - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init (Miaoqian Lin)   
  - libbpf: Use dynamically allocated buffer when receiving netlink messages (Toke Høiland-Jørgensen)   
  - drm/bridge: dw-hdmi: use safe format when first in bridge chain (Neil Armstrong)   
  - libbpf: Fix compilation warning due to mismatched printf format (Andrii Nakryiko)   
  - net:enetc: allocate CBD ring data memory using DMA coherent methods (Po Liu)   
  - cxl/regs: Fix size of CXL Capability Header Register (Jonathan Cameron)   
  - cxl/core: Fix cxl_probe_component_regs() error message (Dan Williams)   
  - libbpf: Fix signedness bug in btf_dump_array_data() (Dan Carpenter)   
  - RDMA/rxe: Check the last packet by RXE_END_MASK (Xiao Yang)   
  - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge (Pali Rohár)   
  - PCI: aardvark: Fix reading MSI interrupt number (Pali Rohár)   
  - igb: refactor XDP registration (Corinna Vinschen)   
  - igc: avoid kernel warning when changing RX ring parameters (Corinna Vinschen)   
  - mtd: mchp48l640: Add SPI ID table (Mark Brown)   
  - mtd: mchp23k256: Add SPI ID table (Mark Brown)   
  - i2c: bcm2835: Fix the error handling in 'bcm2835_i2c_probe()' (Christophe JAILLET)   
  - i2c: bcm2835: Use platform_get_irq() to get the interrupt (Lad Prabhakar)   
  - net: asix: add proper error handling of usb read errors (Pavel Skripkin)   
  - livepatch: Fix build failure on 32 bits processors (Christophe Leroy)   
  - scripts/dtc: Call pkg-config POSIXly correct (Thomas Bracht Laumann Jespersen)   
  - mac80211: limit bandwidth in HE capabilities (Johannes Berg)   
  - mac80211: Remove a couple of obsolete TODO (Ilan Peer)   
  - net: dsa: mv88e6xxx: Enable port policy support on 6097 (Tobias Waldekranz)   
  - ptp: unregister virtual clocks when unregistering physical clock. (Miroslav Lichvar)   
  - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update (Lorenzo Bianconi)   
  - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update (Lorenzo Bianconi)   
  - mt76: mt7615: fix a leftover race in runtime-pm (Lorenzo Bianconi)   
  - mt76: mt7921: fix a leftover race in runtime-pm (Lorenzo Bianconi)   
  - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv (Lorenzo Bianconi)   
  - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode (Lorenzo Bianconi)   
  - mt76: connac: fix sta_rec_wtbl tag len (Lorenzo Bianconi)   
  - powerpc/perf: Don't use perf_hw_context for trace IMC PMU (Athira Rajeev)   
  - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init (Fabiano Rosas)   
  - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch (Maxim Kiselev)   
  - ray_cs: Check ioremap return value (Jiasheng Jiang)   
  - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe (Miaoqian Lin)   
  - ixgbe: respect metadata on XSK Rx to skb (Alexander Lobakin)   
  - ixgbe: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin)   
  - ixgbe: pass bi->xdp to ixgbe_construct_skb_zc() directly (Alexander Lobakin)   
  - igc: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin)   
  - i40e: respect metadata on XSK Rx to skb (Alexander Lobakin)   
  - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin)   
  - selftests/net: timestamping: Fix bind_phc check (Gerhard Engleder)   
  - KVM: PPC: Fix vmx/vsx mixup in mmio emulation (Fabiano Rosas)   
  - RDMA/core: Set MR type in ib_reg_user_mr (Maor Gottlieb)   
  - ath9k_htc: fix uninit value bugs (Pavel Skripkin)   
  - selftests/bpf/test_xdp_redirect_multi: use temp netns for testing (Hangbin Liu)   
  - selftests/bpf: Normalize XDP section names in selftests (Andrii Nakryiko)   
  - net: phy: at803x: move page selection fix to config_init (Robert Hancock)   
  - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function (Tom Rix)   
  - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() (Zhou Qingyang)   
  - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() (Zhou Qingyang)   
  - ionic: Don't send reset commands if FW isn't running (Brett Creeley)   
  - ionic: start watchdog after all is setup (Shannon Nelson)   
  - ionic: fix type complaint in ionic_dev_cmd_clean() (Shannon Nelson)   
  - drm/edid: Split deep color modes between RGB and YUV444 (Maxime Ripard)   
  - drm/edid: Don't clear formats if using deep color (Maxime Ripard)   
  - mtd: rawnand: gpmi: fix controller timings setting (Dario Binacchi)   
  - mtd: onenand: Check for error irq (Jiasheng Jiang)   
  - Bluetooth: hci_serdev: call init_rwsem() before p->open() (Pavel Skripkin)   
  - Bluetooth: btintel: Fix WBS setting for Intel legacy ROM products (Tedd Ho-Jeong An)   
  - selftests: bpf: Fix bind on used port (Felix Maurer)   
  - drm/selftests/test-drm_dp_mst_helper: Fix memory leak in sideband_msg_req_encode_decode (José Expósito)   
  - bpf: Fix UAF due to race between btf_try_get_module and load_module (Kumar Kartikeya Dwivedi)   
  - udmabuf: validate ubuf->pagecount (Pavel Skripkin)   
  - bpftool: Only set obj->skeleton on complete success (Wei Fu)   
  - libbpf: Fix possible NULL pointer dereference when destroying skeleton (Yafang Shao)   
  - drm/panfrost: Check for error num after setting mask (Jiasheng Jiang)   
  - drm/v3d/v3d_drv: Check for error num after setting mask (Jiasheng Jiang)   
  - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern (Wen Gong)   
  - drm: bridge: adv7511: Fix ADV7535 HPD enablement (Jagan Teki)   
  - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe (Miaoqian Lin)   
  - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe (Miaoqian Lin)   
  - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev (Miaoqian Lin)   
  - drm/meson: Fix error handling when afbcd.ops->init fails (Martin Blumenstingl)   
  - drm/meson: split out encoder from meson_dw_hdmi (Neil Armstrong)   
  - drm/meson: Make use of the helper function devm_platform_ioremap_resourcexxx() (Cai Huoqing)   
  - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops (Martin Blumenstingl)   
  - ARM: configs: multi_v5_defconfig: re-enable DRM_PANEL and FB_xxx (Andre Przywara)   
  - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS (Andre Przywara)   
  - ASoC: amd: Fix reference to PCM buffer address (Meng Tang)   
  - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data (Miaoqian Lin)   
  - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe (Miaoqian Lin)   
  - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe (Miaoqian Lin)   
  - mmc: davinci_mmc: Handle error for clk_enable (Jiasheng Jiang)   
  - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe (Miaoqian Lin)   
  - ASoC: SOF: Intel: enable DMI L1 for playback streams (Kai Vehmanen)   
  - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() (Wang Wensheng)   
  - ASoC: fsl_spdif: Disable TX clock when stop (Shengjiu Wang)   
  - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe (Miaoqian Lin)   
  - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback (Codrin Ciubotariu)   
  - ASoC: rk817: Fix missing clk_disable_unprepare() in rk817_platform_probe (Miaoqian Lin)   
  - ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe (Miaoqian Lin)   
  - ASoC: mediatek: use of_device_get_match_data() (Tzung-Bi Shih)   
  - ASoC: SOF: Add missing of_node_put() in imx8m_probe (Miaoqian Lin)   
  - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe (Miaoqian Lin)   
  - ASoC: atmel: Fix error handling in snd_proto_probe (Miaoqian Lin)   
  - ivtv: fix incorrect device_caps for ivtvfb (Hans Verkuil)   
  - media: saa7134: fix incorrect use to determine if list is empty (Jakob Koschel)   
  - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of (Miaoqian Lin)   
  - ASoC: fsi: Add check for clk_enable (Jiasheng Jiang)   
  - ASoC: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang)   
  - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe (Miaoqian Lin)   
  - media: vidtv: Check for null return of vzalloc (Jiasheng Jiang)   
  - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED (Dafna Hirschfeld)   
  - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined (Randy Dunlap)   
  - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly (Rob Herring)   
  - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (Takashi Sakamoto)   
  - memory: emif: check the pointer temp in get_device_details() (Jia-Ju Bai)   
  - memory: emif: Add check for setup_interrupts (Jiasheng Jiang)   
  - ASoC: soc-compress: prevent the potentially use of null pointer (Jiasheng Jiang)   
  - ASoC: dwc-i2s: Handle errors for clk_enable (Jiasheng Jiang)   
  - ASoC: atmel_ssc_dai: Handle errors for clk_enable (Jiasheng Jiang)   
  - ASoC: mxs-saif: Handle errors for clk_enable (Jiasheng Jiang)   
  - printk: fix return value of printk.devkmsg __setup handler (Randy Dunlap)   
  - arm64: dts: broadcom: Fix sata nodename (Frank Wunderlich)   
  - arm64: dts: ns2: Fix spi-cpol and spi-cpha property (Kuldeep Singh)   
  - ALSA: spi: Add check for clk_enable() (Jiasheng Jiang)   
  - ASoC: ti: davinci-i2s: Add check for clk_enable() (Jiasheng Jiang)   
  - mmc: sdhci_am654: Fix the driver data of AM64 SoC (Aswath Govindraju)   
  - soc: mediatek: pm-domains: Add wakeup capacity support in power domain (Chun-Jie Chen)   
  - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() (Jia-Ju Bai)   
  - uaccess: fix nios2 and microblaze get_user_8() (Arnd Bergmann)   
  - vsprintf: Fix %pK with kptr_restrict == 0 (Christophe Leroy)   
  - lib: uninline simple_strntoull() as well (Alexey Dobriyan)   
  - selftests/lkdtm: Add UBSAN config (Muhammad Usama Anjum)   
  - media: ov5640: Fix set format, v4l2_mbus_pixelcode not updated (Mirela Rabulea)   
  - media: v4l2-core: Initialize h264 scaling matrix (Nicolas Dufresne)   
  - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put (Srinivas Kandagatla)   
  - ASoC: codecs: wcd934x: fix kcontrol max values (Srinivas Kandagatla)   
  - ASoC: codecs: wcd938x: fix kcontrol max values (Srinivas Kandagatla)   
  - ASoC: codecs: wc938x: fix accessing array out of bounds for enum type (Srinivas Kandagatla)   
  - ASoC: codecs: va-macro: fix accessing array out of bounds for enum type (Srinivas Kandagatla)   
  - ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type (Srinivas Kandagatla)   
  - ASoC: codecs: rx-macro: fix accessing compander for aux (Srinivas Kandagatla)   
  - media: cedrus: h264: Fix neighbour info buffer size (Jernej Skrabec)   
  - media: cedrus: H265: Fix neighbour info buffer size (Jernej Skrabec)   
  - media: usb: go7007: s2250-board: fix leak in probe() (Dan Carpenter)   
  - media: em28xx: initialize refcount before kref_get (Dongliang Mu)   
  - media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() (Zhou Qingyang)   
  - media: video/hdmi: handle short reads of hdmi info frame. (Tom Rix)   
  - media: mexon-ge2d: fixup frames size in registers (Neil Armstrong)   
  - ARM: dts: imx: Add missing LVDS decoder on M53Menlo (Marek Vasut)   
  - vsprintf: Fix potential unaligned access (Andy Shevchenko)   
  - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order (Paul Kocialkowski)   
  - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe (Miaoqian Lin)   
  - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined (Christophe JAILLET)   
  - arm64: dts: qcom: sm8350: Correct TCS configuration for apps rsc (Maulik Shah)   
  - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc (Maulik Shah)   
  - arm64: dts: broadcom: bcm4908: use proper TWD binding (Rafał Miłecki)   
  - arm64: dts: qcom: sm8250: fix PCIe bindings to follow schema (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm845: fix microphone bias properties and values (David Heidelberg)   
  - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags (Daniel Thompson)   
  - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem (Miaoqian Lin)   
  - soc: qcom: rpmpd: Check for null return of devm_kcalloc (Jiasheng Jiang)   
  - ARM: dts: qcom: ipq4019: fix sleep clock (Pavel Kubelun)   
  - firmware: qcom: scm: Remove reassignment to desc following initializer (Marijn Suijten)   
  - ARM: dts: Fix OpenBMC flash layout label addresses (Zev Weiss)   
  - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() (Dan Carpenter)   
  - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() (Dan Carpenter)   
  - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() (Wang Hai)   
  - video: fbdev: controlfb: Fix COMPILE_TEST build (YueHaibing)   
  - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen (Z. Liu)   
  - media: aspeed: Correct value for h-total-pixels (Jammy Huang)   
  - media: ov5648: Don't pack controls struct (Sakari Ailus)   
  - media: v4l: Avoid unaligned access warnings when printing 4cc modifiers (Sakari Ailus)   
  - media: ov6650: Fix set format try processing path (Janusz Krzysztofik)   
  - media: hantro: Fix overfill bottom register field name (Chen-Yu Tsai)   
  - media: meson: vdec: potential dereference of null pointer (Jiasheng Jiang)   
  - media: coda: Fix missing put_device() call in coda_get_vdoa_data (Miaoqian Lin)   
  - ASoC: simple-card-utils: Set sysclk on all components (Robert Hancock)   
  - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting (Robert Hancock)   
  - ASoC: codecs: Check for error pointer after calling devm_regmap_init_mmio (Jiasheng Jiang)   
  - ASoC: sh: rz-ssi: Drop calling rz_ssi_pio_recv() recursively (Lad Prabhakar)   
  - media: atmel: atmel-sama7g5-isc: fix ispck leftover (Eugen Hristev)   
  - media: bttv: fix WARNING regression on tunerless devices (Ondrej Zary)   
  - media: imx: imx8mq-mipi_csi2: fix system resume (Martin Kepplinger)   
  - media: imx: imx8mq-mipi-csi2: remove wrong irq config write operation (Martin Kepplinger)   
  - media: mtk-vcodec: potential dereference of null pointer (Jiasheng Jiang)   
  - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls (Chen-Yu Tsai)   
  - media: staging: media: imx: imx7-mipi-csis: Make subdev name unique (Laurent Pinchart)   
  - media: camss: vfe-170: fix "VFE halt timeout" error (Jonathan Marek)   
  - media: camss: csid-170: set the right HALT_CMD when disabled (Jonathan Marek)   
  - media: camss: csid-170: don't enable unused irqs (Jonathan Marek)   
  - media: camss: csid-170: fix non-10bit formats (Jonathan Marek)   
  - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size (Corentin Labbe)   
  - pinctrl: samsung: Remove EINT handler for Exynos850 ALIVE and CMGP gpios (Sam Protsenko)   
  - kunit: make kunit_test_timeout compatible with comment (Peng Liu)   
  - drivers/base/memory: add memory block to memory group after registration succeeded (David Hildenbrand)   
  - selftests, x86: fix how check_cc.sh is being invoked (Guillaume Tucker)   
  - f2fs: fix compressed file start atomic write may cause data corruption (Fengnan Chang)   
  - btrfs: fix unexpected error path when reflinking an inline extent (Filipe Manana)   
  - f2fs: fix to avoid potential deadlock (Chao Yu)   
  - sched/rt: Plug rt_mutex_setprio() vs push_rt_task() race (Valentin Schneider)   
  - sched/cpuacct: Fix charge percpu cpuusage (Chengming Zhou)   
  - nfsd: more robust allocation failure handling in nfsd_file_cache_init (Amir Goldstein)   
  - f2fs: fix missing free nid in f2fs_handle_failed_inode (Jaegeuk Kim)   
  - sched/fair: Improve consistency of allowed NUMA balance calculations (Mel Gorman)   
  - perf/x86/intel/pt: Fix address filter config for 32-bit kernel (Adrian Hunter)   
  - perf/core: Fix address filter parser for multiple filters (Adrian Hunter)   
  - rseq: Remove broken uapi field layout on 32-bit little endian (Mathieu Desnoyers)   
  - sched/uclamp: Fix iowait boost escaping uclamp restriction (Qais Yousef)   
  - sched/core: Export pelt_thermal_tp (Qais Yousef)   
  - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa (Bharata B Rao)   
  - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface (Chao Yu)   
  - watch_queue: Actually free the watch (David Howells)   
  - watch_queue: Fix NULL dereference in error cleanup (David Howells)   
  - io_uring: terminate manual loop iterator loop correctly for non-vecs (Jens Axboe)   
  - io_uring: don't check unrelated req->open.how in accept request (Jens Axboe)   
  - clocksource: acpi_pm: fix return value of __setup handler (Randy Dunlap)   
  - hwmon: (pmbus) Add Vin unit off handling (Brandon Wyman)   
  - hwrng: nomadik - Change clk_disable to clk_disable_unprepare (Miaoqian Lin)   
  - crypto: ccree - Fix use after free in cc_cipher_exit() (Jianglei Nie)   
  - crypto: ccp - ccp_dmaengine_unregister release dma channels (Dāvis Mosāns)   
  - ACPI: APEI: fix return value of __setup handlers (Randy Dunlap)   
  - KEYS: trusted: Fix trusted key backends when building as module (Andreas Rammhold)   
  - arm64: prevent instrumentation of bp hardening callbacks (Mark Rutland)   
  - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() (Guillaume Ranquet)   
  - clocksource/drivers/timer-microchip-pit64b: Use notrace (Claudiu Beznea)   
  - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts (Krzysztof Kozlowski)   
  - clocksource/drivers/exynos_mct: Refactor resources allocation (Marek Szyprowski)   
  - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix (Drew Fustini)   
  - crypto: vmx - add missing dependencies (Petr Vorel)   
  - crypto: gemini - call finalize with bh disabled (Corentin Labbe)   
  - crypto: amlogic - call finalize with bh disabled (Corentin Labbe)   
  - crypto: sun8i-ce - call finalize with bh disabled (Corentin Labbe)   
  - crypto: sun8i-ss - call finalize with bh disabled (Corentin Labbe)   
  - hwrng: atmel - disable trng on failure path (Claudiu Beznea)   
  - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask (Jiasheng Jiang)   
  - PM: suspend: fix return value of __setup handler (Randy Dunlap)   
  - PM: hibernate: fix __setup handler error handling (Randy Dunlap)   
  - block: don't delete queue kobject before its children (Eric Biggers)   
  - nvme: fix the check for duplicate unique identifiers (Christoph Hellwig)   
  - nvme: cleanup __nvme_check_ids (Christoph Hellwig)   
  - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING (Armin Wolf)   
  - hwmon: (pmbus) Add mutex to regulator ops (Patrick Rudolph)   
  - spi: pxa2xx-pci: Balance reference count for PCI DMA device (Andy Shevchenko)   
  - crypto: hisilicon/sec - fix the aead software fallback for engine (Kai Ye)   
  - crypto: ccree - don't attempt 0 len DMA mappings (Gilad Ben-Yossef)   
  - EVM: fix the evm= __setup handler return value (Randy Dunlap)   
  - audit: log AUDIT_TIME_* records only from rules (Richard Guy Briggs)   
  - crypto: rockchip - ECB does not need IV (Corentin Labbe)   
  - selftests/sgx: Treat CC as one argument (Muhammad Usama Anjum)   
  - selftests/x86: Add validity check and allow field splitting (Muhammad Usama Anjum)   
  - blk-cgroup: set blkg iostat after percpu stat aggregation (Chengming Zhou)   
  - arm64/mm: avoid fixmap race condition when create pud mapping (Jianyong Wu)   
  - stack: Constrain and fix stack offset randomization with Clang builds (Marco Elver)   
  - spi: tegra210-quad: Fix missin IRQ check in tegra_qspi_probe (Miaoqian Lin)   
  - spi: tegra114: Add missing IRQ check in tegra_spi_probe (Miaoqian Lin)   
  - crypto: octeontx2 - remove CONFIG_DM_CRYPT check (Shijith Thotton)   
  - thermal: int340x: Check for NULL after calling kmemdup() (Jiasheng Jiang)   
  - selinux: Fix selinux_sb_mnt_opts_compat() (Scott Mayhew)   
  - crypto: mxs-dcp - Fix scatterlist processing (Tomas Paukrt)   
  - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Herbert Xu)   
  - crypto: sun8i-ss - really disable hash on A80 (Corentin Labbe)   
  - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER (Geert Uytterhoeven)   
  - hwrng: cavium - Check health status while reading random data (Sunil Goutham)   
  - crypto: ccp - Ensure psp_ret is always init'd in __sev_platform_init_locked() (Peter Gonda)   
  - selinux: check return value of sel_make_avc_files (Christian Göttsche)   
  - selinux: access superblock_security_struct in LSM blob way (GONG, Ruiqi)   
  - regulator: qcom_smd: fix for_each_child.cocci warnings (kernel test robot)   
  - PCI: xgene: Revert "PCI: xgene: Fix IB window setup" (Marc Zyngier)   
  - PCI: pciehp: Clear cmd_busy bit in polling mode (Liguang Zhang)   
  - PCI: imx6: Allow to probe when dw_pcie_wait_for_link() fails (Fabio Estevam)   
  - drm/i915/gem: add missing boundary check in vm_access (Mastan Katragadda)   
  - drm/i915/opregion: check port number bounds for SWSCI display power state (Jani Nikula)   
  - brcmfmac: pcie: Fix crashes due to early IRQs (Hector Martin)   
  - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio (Hector Martin)   
  - brcmfmac: pcie: Declare missing firmware files in pcie.c (Hector Martin)   
  - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path (Hector Martin)   
  - brcmfmac: firmware: Allocate space for default boardrev in nvram (Hector Martin)   
  - drm/fb-helper: Mark screen buffers in system memory with FBINFO_VIRTFB (Thomas Zimmermann)   
  - drm/nouveau/backlight: Just set all backlight types as RAW (Lyude Paul)   
  - drm/nouveau/backlight: Fix LVDS backlight detection on some laptops (Lyude Paul)   
  - drm/syncobj: flatten dma_fence_chains on transfer (Christian König)   
  - xtensa: fix xtensa_wsr always writing 0 (Max Filippov)   
  - xtensa: fix stop_machine_cpuslocked call in patch_text (Max Filippov)   
  - xtensa: define update_mmu_tlb function (Max Filippov)   
  - btrfs: verify the tranisd of the to-be-written dirty extent buffer (Qu Wenruo)   
  - btrfs: extend locking to all space_info members accesses (Niels Dossche)   
  - btrfs: zoned: mark relocation as writing (Naohiro Aota)   
  - media: davinci: vpif: fix unbalanced runtime PM enable (Johan Hovold)   
  - media: davinci: vpif: fix unbalanced runtime PM get (Johan Hovold)   
  - media: venus: venc: Fix h264 8x8 transform control (Stanimir Varbanov)   
  - media: venus: hfi_cmds: List HDR10 property as unsupported for v1 and v3 (Stanimir Varbanov)   
  - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC (Sean Young)   
  - DEC: Limit PMAX memory probing to R3k systems (Maciej W. Rozycki)   
  - PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove() (Shawn Guo)   
  - bcache: fixup multiple threads crash (Mingzhe Zou)   
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() (Eric Biggers)   
  - crypto: rsa-pkcs1pad - restore signature length check (Eric Biggers)   
  - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist (Eric Biggers)   
  - crypto: rsa-pkcs1pad - only allow with rsa (Eric Biggers)   
  - exec: Force single empty string when argv is empty (Kees Cook)   
  - lib/raid6/test: fix multiple definition linking error (Dirk Müller)   
  - thermal: int340x: Increase bitmap size (Srinivas Pandruvada)   
  - pstore: Don't use semaphores in always-atomic-context code (Jann Horn)   
  - carl9170: fix missing bit-wise or operator for tx_params (Colin Ian King)   
  - mgag200 fix memmapsl configuration in GCTL6 register (Jocelyn Falempe)   
  - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 (Krzysztof Kozlowski)   
  - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size (Tudor Ambarus)   
  - ARM: dts: at91: sama7g5: Remove unused properties in i2c nodes (Tudor Ambarus)   
  - rfkill: make new event layout opt-in (Johannes Berg)   
  - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix (Michael Schmitz)   
  - video: fbdev: sm712fb: Fix crash in smtcfb_read() (Helge Deller)   
  - fbdev: Hot-unplug firmware fb devices on forced removal (Thomas Zimmermann)   
  - drm/edid: check basic audio support on CEA extension block (Cooper Chiou)   
  - block: don't merge across cgroup boundaries if blkcg is enabled (Tejun Heo)   
  - block: limit request dispatch loop duration (Shin'ichiro Kawasaki)   
  - mailbox: tegra-hsp: Flush whole channel (Pekka Pessi)   
  - landlock: Use square brackets around "landlock-ruleset" (Christian Brauner)   
  - samples/landlock: Fix path_list memory leak (Tom Rix)   
  - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() (Duoming Zhou)   
  - ext4: make mb_optimize_scan performance mount option work with extents (Ojaswin Mujoo)   
  - ext4: fix fs corruption when tring to remove a non-empty directory with IO error (Ye Bin)   
  - ext4: fix ext4_fc_stats trace point (Ritesh Harjani)   
  - coredump: Also dump first pages of non-executable ELF libraries (Jann Horn)   
  - ACPI: properties: Consistently return -ENOENT if there are no more references (Sakari Ailus)   
  - Revert "ACPI: Pass the same capabilities to the _OSC regardless of the query flag" (Rafael J. Wysocki)   
  - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM (Ammar Faizi)   
  - arm64: dts: ti: k3-am64: Fix gic-v3 compatible regs (Nishanth Menon)   
  - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs (Nishanth Menon)   
  - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs (Nishanth Menon)   
  - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs (Nishanth Menon)   
  - arm64: dts: qcom: sm8250: Fix MSI IRQ for PCIe1 and PCIe2 (Manivannan Sadhasivam)   
  - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones (Vijay Balakrishna)   
  - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available (David Engraf)   
  - PCI: fu740: Force 2.5GT/s for initial device probe (Ben Dooks)   
  - powerpc/kvm: Fix kvm_use_magic_page (Andreas Gruenbacher)   
  - drbd: fix potential silent data corruption (Lars Ellenberg)   
  - tracing: Have trace event string test handle zero length strings (Steven Rostedt (Google))   
  - dm integrity: set journal entry unused when shrinking device (Mikulas Patocka)   
  - dm: fix double accounting of flush with data (Mike Snitzer)   
  - dm: interlock pending dm_io and dm_wait_for_bios_completion (Mike Snitzer)   
  - dm: fix use-after-free in dm_cleanup_zoned_dev() (Kirill Tkhai)   
  - dm stats: fix too short end duration_ns when using precise_timestamps (Mike Snitzer)   
  - mm/kmemleak: reset tag when compare object pointer (Kuan-Ying Lee)   
  - mm,hwpoison: unmap poisoned page before invalidation (Rik van Riel)   
  - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" (Charan Teja Kalla)   
  - mm: madvise: return correct bytes advised with process_madvise (Charan Teja Kalla)   
  - mm: madvise: skip unmapped vma holes passed to process_madvise (Charan Teja Kalla)   
  - drm/simpledrm: Add "panel orientation" property on non-upright mounted LCD panels (Hans de Goede)   
  - ocfs2: fix crash when mount with quota enabled (Joseph Qi)   
  - rtc: pl031: fix rtc features null pointer dereference (Ali Pouladi)   
  - rtc: mc146818-lib: fix locking in mc146818_set_time (Mateusz Jończyk)   
  - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 (Kai-Heng Feng)   
  - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai)   
  - ALSA: hda: Avoid unsol event during RPM suspending (Mohan Kumar)   
  - ALSA: cs4236: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - cifs: fix NULL ptr dereference in smb2_ioctl_query_info() (Paulo Alcantara)   
  - cifs: prevent bad output lengths in smb2_ioctl_query_info() (Paulo Alcantara)   
  - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" (José Expósito)   
  - riscv: Increase stack size under KASAN (Dmitry Vyukov)   
  - riscv: Fix fill_callchain return value (Nikita Shubin)   
  - riscv: dts: canaan: Fix SPI3 bus width (Niklas Cassel)   
  - qed: validate and restrict untrusted VFs vlan promisc mode (Manish Chopra)   
  - qed: display VF trust config (Manish Chopra)   
  - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands (Damien Le Moal)   
  - scsi: scsi_transport_fc: Fix FPIN Link Integrity statistics counters (James Smart)   
  - scsi: ufs: Fix runtime PM messages never-ending cycle (Adrian Hunter)   
  - scsi: core: sd: Add silence_suspend flag to suppress some PM messages (Adrian Hunter)   
  - mempolicy: mbind_range() set_policy() after vma_merge() (Hugh Dickins)   
  - mm: invalidate hwpoison page cache page in fault path (Rik van Riel)   
  - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node (Alistair Popple)   
  - mm: fs: fix lru_cache_disabled race in bh_lru (Minchan Kim)   
  - jffs2: fix memory leak in jffs2_scan_medium (Baokun Li)   
  - jffs2: fix memory leak in jffs2_do_mount_fs (Baokun Li)   
  - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (Baokun Li)   
  - can: m_can: m_can_tx_handler(): fix use after free of skb (Marc Kleine-Budde)   
  - mtd: rawnand: protect access to rawnand devices while in suspend (Sean Nyekjaer)   
  - spi: mxic: Fix the transmit path (Miquel Raynal)   
  - net: bnxt_ptp: fix compilation error (Damien Le Moal)   
  - pinctrl: samsung: drop pin banks references on error paths (Krzysztof Kozlowski)   
  - pinctrl: ingenic: Fix regmap on X series SoCs (Aidan MacDonald)   
  - mm/mlock: fix two bugs in user_shm_lock() (Miaohe Lin)   
  - remoteproc: Fix count check in rproc_coredump_write() (Alistair Delva)   
  - f2fs: fix to do sanity check on .cp_pack_total_block_count (Chao Yu)   
  - f2fs: quota: fix loop condition at f2fs_quota_sync() (Juhyung Park)   
  - f2fs: fix to unlock page correctly in error path of is_alive() (Chao Yu)   
  - NFSD: prevent integer overflow on 32 bit systems (Dan Carpenter)   
  - NFSD: prevent underflow in nfssvc_decode_writeargs() (Dan Carpenter)   
  - NFS: NFSv2/v3 clients should never be setting NFS_CAP_XATTR (Trond Myklebust)   
  - SUNRPC: avoid race between mod_timer() and del_timer_sync() (NeilBrown)   
  - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update (Gwendal Grignou)   
  - firmware: sysfb: fix platform-device leak in error path (Johan Hovold)   
  - firmware: stratix10-svc: add missing callback parameter on RSU (Ang Tien Sung)   
  - Documentation: update stable tree link (Bagas Sanjaya)   
  - Documentation: add link to stable release candidate tree (Bagas Sanjaya)   
  - KEYS: asymmetric: properly validate hash_algo and encoding (Eric Biggers)   
  - KEYS: asymmetric: enforce that sig algo matches key algo (Eric Biggers)   
  - KEYS: fix length validation in keyctl_pkey_params_get_2() (Eric Biggers)   
  - cifs: we do not need a spinlock around the tree access during umount (Ronnie Sahlberg)   
  - cifs: fix handlecache and multiuser (Ronnie Sahlberg)   
  - clk: uniphier: Fix fixed-rate initialization (Kunihiko Hayashi)   
  - clk: rockchip: re-add rational best approximation algorithm to the fractional divider (Quentin Schulz)   
  - greybus: svc: fix an error handling bug in gb_svc_hello() (Dan Carpenter)   
  - iio: inkern: make a best effort on offset calculation (Liam Beguin)   
  - iio: inkern: apply consumer scale when no channel scale is available (Liam Beguin)   
  - iio: inkern: apply consumer scale on IIO_VAL_INT cases (Liam Beguin)   
  - iio: afe: rescale: use s64 for temporary scale calculations (Liam Beguin)   
  - coresight: syscfg: Fix memleak on registration failure in cscfg_create_device (Miaoqian Lin)   
  - coresight: Fix TRCCONFIGR.QE sysfs interface (James Clark)   
  - docs: sphinx/requirements: Limit jinja2<3.1 (Akira Yokosawa)   
  - bus: mhi: Fix MHI DMA structure endianness (Paul Davey)   
  - bus: mhi: pci_generic: Add mru_default for Quectel EM1xx series (Yonglin Tan)   
  - mei: avoid iterator usage outside of list_for_each_entry (Alexander Usyskin)   
  - mei: me: add Alder Lake N device id. (Alexander Usyskin)   
  - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() (Anssi Hannula)   
  - xhci: make xhci_handshake timeout for xhci_reset() adjustable (Mathias Nyman)   
  - xhci: fix runtime PM imbalance in USB2 resume (Henry Lin)   
  - xhci: fix garbage USBSTS being logged in some cases (Anssi Hannula)   
  - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c (Alan Stern)   
  - usb: typec: tipd: Forward plug orientation to typec subsystem (Sven Peter)   
  - tpm: fix reference counting for struct tpm_chip (Lino Sanfilippo)   
  - virtio-blk: Use blk_validate_block_size() to validate block size (Xie Yongji)   
  - iommu/iova: Improve 32-bit free space estimate (Robin Murphy)   
  - drm/amdgpu: only check for _PR3 on dGPUs (Alex Deucher)   
  - drm/amdgpu: move PX checking into amdgpu_device_ip_early_init (Alex Deucher)   
  - locking/lockdep: Avoid potential access of invalid memory in lock_class (Waiman Long)   
  - selftests: vm: fix clang build error multiple output files (Yosry Ahmed)   
  - net: dsa: microchip: add spi_device_id tables (Claudiu Beznea)   
  - Input: zinitix - do not report shadow fingers (Linus Walleij)   
  - spi: Fix erroneous sgs value with min_t() (Biju Das)   
  - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" (Bartosz Golaszewski)   
  - net:mcf8390: Use platform_get_irq() to get the interrupt (Minghao Chi (CGEL ZTE))   
  - spi: Fix invalid sgs value (Biju Das)   
  - gpio: Revert regression in sysfs-gpio (gpiolib.c) (Marcelo Roberto Jimenez)   
  - ethernet: sun: Free the coherent when failing in probing (Zheyu Ma)   
  - tools/virtio: fix virtio_test execution (Stefano Garzarella)   
  - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ (Si-Wei Liu)   
  - virtio_console: break out of buf poll on remove (Michael S. Tsirkin)   
  - ARM: mstar: Select HAVE_ARM_ARCH_TIMER (Daniel Palmer)   
  - xfrm: fix tunnel model fragmentation behavior (Lina Wang)   
  - HID: Add support for open wheel and no attachment to T300 (Michael Hübner)   
  - HID: logitech-dj: add new lightspeed receiver id (Lucas Zampieri)   
  - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build (Randy Dunlap)   
  - mm: kfence: fix missing objcg housekeeping for SLAB (Muchun Song)   
  - USB: serial: simple: add Nokia phone driver (Johan Hovold)   
  - USB: serial: pl2303: fix GS type detection (Johan Hovold)   
  - dt-bindings: usb: hcd: correct usb-device path (Krzysztof Kozlowski)   
  - USB: serial: pl2303: add IBM device IDs (Eddie James)   
  - Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds)   
  - LTS version: v5.15.32 (Jack Vogel)   
  - llc: only change llc->dev when bind() succeeds (Eric Dumazet)   
  - nds32: fix access_ok() checks in get/put_user (Arnd Bergmann)   
  - m68k: fix access_ok for coldfire (Arnd Bergmann)   
  - wcn36xx: Differentiate wcn3660 from wcn3620 (Bryan O'Donoghue)   
  - tpm: use try_get_ops() in tpm-space.c (James Bottomley)   
  - mac80211: fix potential double free on mesh join (Linus Lüssing)   
  - uaccess: fix integer overflow on access_ok() (Arnd Bergmann)   
  - rcu: Don't deboost before reporting expedited quiescent state (Paul E. McKenney)   
  - drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() (Roberto Sassu)   
  - Revert "ath: add support for special 0x0 regulatory domain" (Brian Norris)   
  - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE (Larry Finger)   
  - crypto: qat - disable registration of algorithms (Giovanni Cabiddu)   
  - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU (Werner Sembach)   
  - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 (Maximilian Luz)   
  - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board (Mark Cilissen)   
  - drivers: net: xgene: Fix regression in CRC stripping (Stephane Graber)   
  - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec (Giacomo Guiduzzi)   
  - ALSA: cmipci: Restore aux vol on suspend/resume (Jonathan Teh)   
  - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB (Lars-Peter Clausen)   
  - ALSA: pcm: Add stream lock during PCM reset ioctl operations (Takashi Iwai)   
  - ALSA: hda/realtek: Add quirk for ASUS GA402 (Jason Zheng)   
  - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (huangwenhui)   
  - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ (Tim Crawford)   
  - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ (Tim Crawford)   
  - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE (Reza Jahanbakhshi)   
  - ALSA: oss: Fix PCM OSS buffer allocation overflow (Takashi Iwai)   
  - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call (Takashi Iwai)   
  - llc: fix netdevice reference leaks in llc_ui_bind() (Eric Dumazet)   
  - Bluetooth: btusb: Add another Realtek 8761BU (Helmut Grohne)   
  - tpm: Fix error handling in async work (Tadeusz Struk)   
  - net: ipv6: fix skb_over_panic in __ip6_append_data (Tadeusz Struk)   
  - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (Jordy Zomer)   
  - LTS version: v5.15.31 (Jack Vogel)   
  - perf symbols: Fix symbol size calculation condition (Michael Petlan)   
  - Input: aiptek - properly check endpoint type (Pavel Skripkin)   
  - scsi: mpt3sas: Page fault in reply q processing (Matt Lupfer)   
  - usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern)   
  - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver (Alan Stern)   
  - usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Dan Carpenter)   
  - arm64: fix clang warning about TRAMP_VALIAS (Arnd Bergmann)   
  - iavf: Fix hang during reboot/shutdown (Ivan Vecera)   
  - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload (Vladimir Oltean)   
  - net: bcmgenet: skip invalid partial checksums (Doug Berger)   
  - bnx2x: fix built-in kernel driver load failure (Manish Chopra)   
  - net: phy: mscc: Add MODULE_FIRMWARE macros (Juerg Haefliger)   
  - net: dsa: Add missing of_node_put() in dsa_port_parse_of (Miaoqian Lin)   
  - drm: Don't make DRM_PANEL_BRIDGE dependent on DRM_KMS_HELPERS (Thomas Zimmermann)   
  - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() (Nicolas Dichtel)   
  - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings (Marek Vasut)   
  - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() (Christoph Niedermaier)   
  - hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang)   
  - iavf: Fix double free in iavf_reset_task (Przemyslaw Patynowski)   
  - atm: eni: Add check for dma_map_single (Jiasheng Jiang)   
  - net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Eric Dumazet)   
  - net: phy: marvell: Fix invalid comparison in the resume and suspend functions (Kurt Cancemi)   
  - esp6: fix check on ipv6_skip_exthdr's return value (Sabrina Dubroca)   
  - vsock: each transport cycles only on its own sockets (Jiyong Park)   
  - alx: acquire mutex for alx_reinit in alx_change_mtu (Niels Dossche)   
  - efi: fix return value of __setup handlers (Randy Dunlap)   
  - drm/mgag200: Fix PLL setup for g200wb and g200ew (Jocelyn Falempe)   
  - block: release rq qos structures for queue without disk (Ming Lei)   
  - mm: swap: get rid of livelock in swapin readahead (Guo Ziliang)   
  - ocfs2: fix crash when initialize filecheck kobj fails (Joseph Qi)   
  - crypto: qcom-rng - ensure buffer for generate is completely filled (Brian Masney)   
  - bpf/selftests: Test PTR_TO_RDONLY_MEM (Hao Luo)  [Orabug: 34358256]  
  - bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. (Hao Luo)  [Orabug: 34358256]  
  - bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. (Hao Luo)  [Orabug: 34358256]  
  - bpf: Convert PTR_TO_MEM_OR_NULL to composable types. (Hao Luo)  [Orabug: 34358256]  
  - bpf: Introduce MEM_RDONLY flag (Hao Luo)  [Orabug: 34358256]  
  - bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL (Hao Luo)  [Orabug: 34358256]  
  - bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL (Hao Luo)  [Orabug: 34358256]  
  - bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL (Hao Luo)  [Orabug: 34358256]  
  - bpf: Introduce composable reg, ret and arg types. (Hao Luo)  [Orabug: 34358256]  
  - RDS/IB:  Fix RDS IB SRQ implementation and tune it (Hans Westgaard Ry)  [Orabug: 34351577]  
  - RDS/IB: Introduce bit_flag routines with memory-barrier for bit flags (Hans Westgaard Ry)  [Orabug: 34351577]  
  - rds: ib: Qualify RNR Retry Timer check with firmware version (Freddy Carrillo)  [Orabug: 34330921]  
  - mm/page_alloc: reuse tail struct pages for compound devmaps (Joao Martins)  [Orabug: 34319096]  
  - mm/sparse-vmemmap: improve memory savings for compound devmaps (Joao Martins)  [Orabug: 34319096]  
  - mm/sparse-vmemmap: refactor core of vmemmap_populate_basepages() to helper (Joao Martins)  [Orabug: 34319096]  
  - mm/sparse-vmemmap: add a pgmap argument to section activation (Joao Martins)  [Orabug: 34319096]  
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso)  [Orabug: 34247340]  {CVE-2022-32250} 
  - uek-rpm/ol/config-aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar)  [Orabug: 33832414]  
  - topology/sysfs: Hide PPIN on systems that do not support it. (Tony Luck)  [Orabug: 34018367]  
  - topology/sysfs: Add PPIN in sysfs under cpu topology (Tony Luck)  [Orabug: 34018367]  
  - topology/sysfs: Add format parameter to macro defining "show" functions for proc (Tony Luck)  [Orabug: 34018367]  
  - topology/sysfs: rework book and drawer topology ifdefery (Heiko Carstens)  [Orabug: 34018367]  
  - x86/cpu: Read/save PPIN MSR during initialization (Tony Luck)  [Orabug: 34018367]  
  - x86/cpu: X86_FEATURE_INTEL_PPIN finally has a CPUID bit (Tony Luck)  [Orabug: 34018367]  
  - x86/cpu: Merge Intel and AMD ppin_init() functions (Tony Luck)  [Orabug: 34018367]  
  - SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() (Trond Myklebust)  [Orabug: 34064432]  {CVE-2022-28893} 
  - selftests/bpf: add tests verifying unprivileged bpf behaviour (Alan Maguire)  [Orabug: 34088278]  
  - bpf: refine kernel.unprivileged_bpf_disabled behaviour (Alan Maguire)  [Orabug: 34088278]  
  - uek-rpm: Add modules to core rpm to allow kselftest rtnetlink tests pass (Somasundaram Krishnasamy)  [Orabug: 34124398]  
  - net/rds: Fix "use-after-free" warning (Gerd Rausch)  [Orabug: 34137931]  
  - assoc_array: Fix BUG_ON during garbage collect (Stephen Brennan)  [Orabug: 34162062]  
  - uek-rpm: Enable prerequisites for Secure Boot support (Eric Snowberg)  [Orabug: 34206120]  
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Jann Horn)  [Orabug: 34223453]  {CVE-2022-30594} 
  - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil)  [Orabug: 34242799]  
  - mm/memcontrol: export memcg->watermark via sysfs for v2 memcg (Kamalesh Babulal)  [Orabug: 34250986]  
  - rds: Include congested flag in rds_sock struct. (Rohit Nair)  [Orabug: 34261489]  
  - cpu/hotplug: Allow the CPU in CPU_UP_PREPARE state to be brought up again. (Longpeng(Mike))  [Orabug: 34271922]  
  - x86/xen: Allow to retry if cpu_initialize_context() failed. (Boris Ostrovsky)  [Orabug: 34271922]  
  - mstflint_access: Update driver code to v4.20.1-1 from Github (Qing Huang)  [Orabug: 34286146]  
  - net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch)  [Orabug: 34276062]  
  - net/rds: Don't force state RDS_CONN_RESETTING (Gerd Rausch)  [Orabug: 34276062]  
  - net/rds: Preserve essential connection state flags (Gerd Rausch)  [Orabug: 34276062]  
  - Revert "uek-rpm: Add crashkernel.default file" (John Donnelly)  [Orabug: 34280005]  
  - A/A Bonding: Add support for NETDEV_CHANGEADDR notifiers (Gerd Rausch)  [Orabug: 34285239]  
  - rdmaip: Flush ARP cache after address has been cleared (Gerd Rausch)  [Orabug: 34285239]


