# changelog

author: Rhythm Mahajan <rhythm.m.mahajan@oracle.com> [6.9.0-2.20240531.el9uek]
changelog:
  - uek-rpm: add libie.ko + dimlib.ko to ol8/core-emb3-aarch64.list (Vegard Nossum)   
  - ml-rpm: Add few modules to core for build ML kernel (Harshit Mogalapalli)   
  - uek-rpm: enable CONFIG_SCHED_CLASS_EXT (sched_ext) (Vegard Nossum)   
  - scx: Fix typos (I Hsin Cheng)   
  - scx: Sync from the SCx repo (Tejun Heo)   
  - scx: Close a small race window in the enable path which can lead to use-after-free (Tejun Heo)   
  - scx/common.bpf.h: Sync from SCX repo (Tejun Heo)   
  - scx: Allocate scx_dsp_ctx together with scx_dsp_buf (From: Tejun Heo)   
  - scx: Replace scx_cpu_online percpu var with SCX_RQ_ONLINE flag (Tejun Heo)   
  - scx: Always use rq->scx instead of scx_rq (Tejun Heo)   
  - net: revert partially applied PHY topology series (Jakub Kicinski)   
  - net: stmmac: move the EST structure to struct stmmac_priv (Xiaolei Wang)   
  - net: stmmac: move the EST lock to struct stmmac_priv (Xiaolei Wang)   
  - mptcp: include inet_common in mib.h (Matthieu Baerts (NGI0))   
  - mptcp: move mptcp_pm_gen.h's include (Matthieu Baerts (NGI0))   
  - mptcp: remove unnecessary else statements (Matthieu Baerts (NGI0))   
  - mptcp: prefer strscpy over strcpy (Matthieu Baerts (NGI0))   
  - mptcp: add net.mptcp.available_schedulers (Gregory Detal)   
  - mptcp: sockopt: info: stop early if no buffer (Matthieu Baerts (NGI0))   
  - mptcp: fix full TCP keep-alive support (Matthieu Baerts (NGI0))   
  - mptcp: SO_KEEPALIVE: fix getsockopt support (Matthieu Baerts (NGI0))   
  - net: mana: Enable MANA driver on ARM64 with 4K page size (Haiyang Zhang)   
  - net: prestera: Add flex arrays to some structs (Erick Archer)   
  - tcp: rstreason: fully support in tcp_check_req() (Jason Xing)   
  - tcp: rstreason: handle timewait cases in the receive path (Jason Xing)   
  - tcp: rstreason: fully support in tcp_rcv_state_process() (Jason Xing)   
  - tcp: rstreason: fully support in tcp_ack() (Jason Xing)   
  - tcp: rstreason: fully support in tcp_rcv_synsent_state_process() (Jason Xing)   
  - net: stmmac: add support for RZ/N1 GMAC (Clément Léger)   
  - net: stmmac: dwmac-socfpga: use pcs_init/pcs_exit (Russell King (Oracle))   
  - net: stmmac: introduce pcs_init/pcs_exit stmmac operations (Russell King (Oracle))   
  - net: stmmac: Make stmmac_xpcs_setup() generic to all PCS devices (Serge Semin)   
  - net: stmmac: Add dedicated XPCS cleanup method (Serge Semin)   
  - dt-bindings: net: renesas,rzn1-gmac: Document RZ/N1 GMAC support (Clément Léger)   
  - net: qede: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - virtio_net: remove the misleading comment (Xuan Zhuo)   
  - virtio_net: rx remove premapped failover code (Xuan Zhuo)   
  - virtio_net: big mode skip the unmap check (Xuan Zhuo)   
  - virtio_ring: enable premapped mode whatever use_dma_api (Xuan Zhuo)   
  - net: pcs: lynx: no need to read LPA in lynx_pcs_get_state_2500basex() (Vladimir Oltean)   
  - net/mlx5: Remove unused msix related exported APIs (Parav Pandit)   
  - net/mlx5e: Modifying channels number and updating TX queues (Carolina Jubran)   
  - net/mlx5: Enable 8 ports LAG (Shay Drory)   
  - test: hsr: Extend the hsr_redbox.sh to have more SAN devices connected (Lukasz Majewski)   
  - net: dsa: microchip: dcb: set default apptrust to PCP only (Oleksij Rempel)   
  - net: dsa: microchip: dcb: add comments for DSCP related functions (Oleksij Rempel)   
  - net: dsa: microchip: dcb: rename IPV to IPM (Oleksij Rempel)   
  - l2tp: Support different protocol versions with same IP/port quadruple (Samuel Thibault)   
  - ynl: ensure exact-len value is resolved (Antonio Quartulli)   
  - virtio_net: Add TX stopped and wake counters (Daniel Jurgens)   
  - netdev: Add queue stats for TX stop and wake (Daniel Jurgens)   
  - tcp: socket option to check for MPTCP fallback to TCP (Matthieu Baerts (NGI0))   
  - selftests/net: add flush id selftests (Richard Gobert)   
  - net: gro: move L3 flush checks to tcp_gro_receive and udp_gro_receive_segment (Richard Gobert)   
  - net: gro: use cb instead of skb->network_header (Richard Gobert)   
  - net: ena: Change initial rx_usec interval (David Arinzon)   
  - net: ena: Changes around strscpy calls (David Arinzon)   
  - net: ena: Add validation for completion descriptors consistency (David Arinzon)   
  - net: ena: Reduce holes in ena_com structures (David Arinzon)   
  - net: ena: Add a counter for driver's reset failures (David Arinzon)   
  - selftests: netfilter: nft_flowtable.sh: bump socat timeout to 1m (Florian Westphal)   
  - selftests: net: use upstream mtools (Vladimir Oltean)   
  - selftest: epoll_busy_poll: Fix spelling mistake "couldnt" -> "couldn't" (Colin Ian King)   
  - net: phy: air_en8811h: reset netdev rules when LED is set manually (Daniel Golle)   
  - bpf: make list_for_each_entry portable (Jose E. Marchesi)   
  - bpf: ignore expected GCC warning in test_global_func10.c (Jose E. Marchesi)   
  - bpf: disable strict aliasing in test_global_func9.c (Jose E. Marchesi)   
  - selftests/bpf: Free strdup memory in xdp_hw_metadata (Geliang Tang)   
  - selftests/bpf: Fix a few tests for GCC related warnings. (Cupertino Miranda)   
  - bpf: avoid gcc overflow warning in test_xdp_vlan.c (David Faust)   
  - tools: remove redundant ethtool.h from tooling infra (Tushar Vyavahare)   
  - selftests/bpf: Expand ATTACH_REJECT tests (Jordan Rife)   
  - selftests/bpf: Expand getsockname and getpeername tests (Jordan Rife)   
  - sefltests/bpf: Expand sockaddr hook deny tests (Jordan Rife)   
  - selftests/bpf: Expand sockaddr program return value tests (Jordan Rife)   
  - selftests/bpf: Retire test_sock_addr.(c|sh) (Jordan Rife)   
  - selftests/bpf: Remove redundant sendmsg test cases (Jordan Rife)   
  - selftests/bpf: Migrate ATTACH_REJECT test cases (Jordan Rife)   
  - selftests/bpf: Migrate expected_attach_type tests (Jordan Rife)   
  - selftests/bpf: Migrate wildcard destination rewrite test (Jordan Rife)   
  - selftests/bpf: Migrate sendmsg6 v4 mapped address tests (Jordan Rife)   
  - selftests/bpf: Migrate sendmsg deny test cases (Jordan Rife)   
  - selftests/bpf: Migrate WILDCARD_IP test (Jordan Rife)   
  - selftests/bpf: Handle SYSCALL_EPERM and SYSCALL_ENOTSUPP test cases (Jordan Rife)   
  - selftests/bpf: Handle ATTACH_REJECT test cases (Jordan Rife)   
  - selftests/bpf: Handle LOAD_REJECT test cases (Jordan Rife)   
  - selftests/bpf: Use program name for skel load/destroy functions (Jordan Rife)   
  - selftests/bpf: Migrate recvmsg* return code tests to verifier_sock_addr.c (Jordan Rife)   
  - riscv, bpf: make some atomic operations fully ordered (Puranjay Mohan)   
  - riscv, bpf: Fix typo in comment (Xiao Wang)   
  - s390/bpf: Emit a barrier for BPF_FETCH instructions (Ilya Leoshkevich)   
  - bpf, arm64: inline bpf_get_smp_processor_id() helper (Puranjay Mohan)   
  - arm64, bpf: add internal-only MOV instruction to resolve per-CPU addrs (Puranjay Mohan)   
  - riscv, bpf: inline bpf_get_smp_processor_id() (Puranjay Mohan)   
  - riscv, bpf: add internal-only MOV instruction to resolve per-CPU addrs (Puranjay Mohan)   
  - ARC: Add eBPF JIT support (Shahab Vahedi)   
  - net: qede: use extack in qede_parse_actions() (Asbjørn Sloth Tønnesen)   
  - net: qede: propagate extack through qede_flow_spec_validate() (Asbjørn Sloth Tønnesen)   
  - net: qede: use faked extack in qede_flow_spec_to_rule() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_parse_flow_attr() (Asbjørn Sloth Tønnesen)   
  - net: qede: add extack in qede_add_tc_flower_fltr() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_udp_v4() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_udp_v6() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_tcp_v4() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_tcp_v6() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_v4_common() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_v6_common() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_set_v4_tuple_to_profile() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_set_v6_tuple_to_profile() (Asbjørn Sloth Tønnesen)   
  - net: qede: use extack in qede_flow_parse_ports() (Asbjørn Sloth Tønnesen)   
  - net: usb: smsc95xx: stop lying about skb->truesize (Eric Dumazet)   
  - net: dsa: microchip: Fix spellig mistake "configur" -> "configure" (Colin Ian King)   
  - af_unix: Add dead flag to struct scm_fp_list. (Kuniyuki Iwashima)   
  - net: ethernet: adi: adin1110: Replace linux/gpio.h by proper one (Andy Shevchenko)   
  - octeontx2-pf: Reuse Transmit queue/Send queue index of HTB class (Hariprasad Kelam)   
  - gve: Use ethtool_sprintf/puts() to fill stats strings (Simon Horman)   
  - gve: Avoid unnecessary use of comma operator (Simon Horman)   
  - selftests: net: increase the delay for relative cmsg_time.sh test (Jakub Kicinski)   
  - selftests: net: fix timestamp not arriving in cmsg_time.sh (Jakub Kicinski)   
  - virtio_net: Fix memory leak in virtnet_rx_mod_work (Daniel Jurgens)   
  - bnxt_en: silence clang build warning (Vadim Fedorenko)   
  - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal)   
  - selftests: netfilter: add packetdrill based conntrack tests (Florian Westphal)   
  - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal)   
  - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal)   
  - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal)   
  - net: ipv6: fix wrong start position when receive hop-by-hop fragment (gaoxingwang)   
  - tcp: get rid of twsk_unique() (Eric Dumazet)   
  - net/sched: adjust device watchdog timer to detect stopped queue at right time (Praveen Kumar Kannoju)   
  - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (Alan Maguire)   
  - selftests/bpf: Drop get_port in test_tcp_check_syncookie (Geliang Tang)   
  - selftests/bpf: Use connect_to_fd in test_tcp_check_syncookie (Geliang Tang)   
  - selftests/bpf: Use connect_to_fd in sockopt_inherit (Geliang Tang)   
  - selftests/bpf: Use start_server_addr in test_tcp_check_syncookie (Geliang Tang)   
  - selftests/bpf: Use start_server_addr in sockopt_inherit (Geliang Tang)   
  - selftests/bpf: Add post_socket_cb for network_helper_opts (Geliang Tang)   
  - scx: Include dsq_vtime in dump (Tejun Heo)   
  - scx: Trigger debug dump with sysrq-D (Tejun Heo)   
  - scx: Send dump output through a tracepoint too (Tejun Heo)   
  - scx: Fix short dump buf handling (Tejun Heo)   
  - scx: Implicitly output newline from dump_line() (Tejun Heo)   
  - scx: Assemble ops dump output into lines before calling dump_line() (Tejun Heo)   
  - scx: Refactor bstr_format() and make dump path use its own buffers (Tejun Heo)   
  - scx: Add dump_stack_trace() (Tejun Heo)   
  - scx: Add dump_line() (Tejun Heo)   
  - scx: Package dump related fields into struct scx_dump_data (Tejun Heo)   
  - scx: Use a global bstr formatting buffer instead of percpu (Tejun Heo)   
  - scx/compat.bpf.h: Add __COMPAT_scx_bpf_dump() and fix __COMPAT_scx_bpf_exit() (Tejun Heo)   
  - selftest: epoll_busy_poll: epoll busy poll tests (Joe Damato)   
  - selftests/bpf: Retire bpf_tcp_helpers.h (Martin KaFai Lau)   
  - selftests/bpf: Remove the bpf_tcp_helpers.h usages from other non tcp-cc tests (Martin KaFai Lau)   
  - selftests/bpf: Remove bpf_tcp_helpers.h usages from other misc bpf tcp-cc tests (Martin KaFai Lau)   
  - selftests/bpf: Use bpf_tracing_net.h in bpf_dctcp (Martin KaFai Lau)   
  - selftests/bpf: Use bpf_tracing_net.h in bpf_cubic (Martin KaFai Lau)   
  - selftests/bpf: Rename tcp-cc private struct in bpf_cubic and bpf_dctcp (Martin KaFai Lau)   
  - selftests/bpf: Sanitize the SEC and inline usages in the bpf-tcp-cc tests (Martin KaFai Lau)   
  - selftests/bpf: Reuse the tcp_sk() from the bpf_tracing_net.h (Martin KaFai Lau)   
  - selftests/bpf: Add a few tcp helper functions and macros to bpf_tracing_net.h (Martin KaFai Lau)   
  - selftests/bpf: Remove bpf_tracing_net.h usages from two networking tests (Martin KaFai Lau)   
  - l2tp: Support several sockets with same IP/port quadruple (Samuel Thibault)   
  - net: selftest: add test for netdev netlink queue-get API (David Wei)   
  - netdevsim: add NAPI support (David Wei)   
  - selftests: drv-net: add checksum tests (Willem de Bruijn)   
  - phonet: no longer hold RTNL in route_dumpit() (Eric Dumazet)   
  - net: annotate data-races around dev->if_port (Eric Dumazet)   
  - net: dst_cache: minor optimization in dst_cache_set_ip6() (Eric Dumazet)   
  - net: dst_cache: annotate data-races around dst_cache->reset_ts (Eric Dumazet)   
  - netlink/specs: Add VF attributes to rt_link spec (Donald Hunter)   
  - dt-bindings: net: ipq4019-mdio: add IPQ9574 compatible (Alexandru Gagniuc)   
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (Jose E. Marchesi)   
  - bpf: guard BPF_NO_PRESERVE_ACCESS_INDEX in skb_pkt_end.c (Jose E. Marchesi)   
  - bpf: avoid UB in usages of the __imm_insn macro (Jose E. Marchesi)   
  - bpf: avoid uninitialized warnings in verifier_global_subprogs.c (Jose E. Marchesi)   
  - net: e1000e & ixgbe: Remove PCI_HEADER_TYPE_MFD duplicates (Ilpo Järvinen)   
  - igc: fix a log entry using uninitialized netdev (Corinna Vinschen)   
  - ice: remove correct filters during eswitch release (Michal Swiatkowski)   
  - igb: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - ice: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - iavf: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - i40e: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - bpf, arm64: Add support for lse atomics in bpf_arena (Puranjay Mohan)   
  - test: hsr: Call cleanup_all_ns when hsr_redbox.sh script exits (Lukasz Majewski)   
  - ax25: Remove superfuous "return" from ax25_ds_set_timer (Joel Granados)   
  - ipvs: allow some sysctls in non-init user namespaces (Alexander Mikhalitsyn)   
  - ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthresh (Alexander Mikhalitsyn)   
  - net: stmmac: dwmac-ipq806x: account for rgmii-txid/rxid/id phy-mode (Christian Marangi)   
  - net: bridge: switchdev: Improve error message for port_obj_add/del functions (Oleksij Rempel)   
  - net/ipv4: add tracepoint for icmp_send (Peilin He)   
  - selftests: microchip: add test for QoS support on KSZ9477 switch family (Oleksij Rempel)   
  - net: dsa: microchip: add support DSCP priority mapping (Oleksij Rempel)   
  - net: dsa: add support switches global DSCP priority mapping (Oleksij Rempel)   
  - net: dsa: microchip: let DCB code do PCP and DSCP policy configuration (Oleksij Rempel)   
  - net: dsa: microchip: init predictable IPV to queue mapping for all non KSZ8xxx variants (Oleksij Rempel)   
  - net: dsa: microchip: enable ETS support for KSZ989X variants (Oleksij Rempel)   
  - net: dsa: microchip: dcb: add special handling for KSZ88X3 family (Oleksij Rempel)   
  - net: dsa: microchip: add support for different DCB app configurations (Oleksij Rempel)   
  - net: dsa: microchip: add multi queue support for KSZ88X3 variants (Oleksij Rempel)   
  - net: add IEEE 802.1q specific helpers (Oleksij Rempel)   
  - net: dsa: microchip: add IPV information support (Oleksij Rempel)   
  - net: dsa: add support for DCB get/set apptrust configuration (Oleksij Rempel)   
  - net: usb: sr9700: stop lying about skb->truesize (Eric Dumazet)   
  - net: usb: smsc75xx: stop lying about skb->truesize (Eric Dumazet)   
  - usb: aqc111: stop lying about skb->truesize (Eric Dumazet)   
  - selftests/net: fix uninitialized variables (John Hubbard)   
  - lib: Allow for the DIM library to be modular (Florian Fainelli)   
  - mptcp: fix possible NULL dereferences (Eric Dumazet)   
  - selftests: netfilter: conntrack_tcp_unreplied.sh: wait for initial connection attempt (Florian Westphal)   
  - selftests/bpf: shorten subtest names for struct_ops_module test (Andrii Nakryiko)   
  - selftests/bpf: validate struct_ops early failure detection logic (Andrii Nakryiko)   
  - libbpf: improve early detection of doomed-to-fail BPF program loading (Andrii Nakryiko)   
  - libbpf: fix libbpf_strerror_r() handling unknown errors (Andrii Nakryiko)   
  - selftests/bpf: add another struct_ops callback use case test (Andrii Nakryiko)   
  - libbpf: handle yet another corner case of nulling out struct_ops program (Andrii Nakryiko)   
  - libbpf: remove unnecessary struct_ops prog validity check (Andrii Nakryiko)   
  - net: annotate writes on dev->mtu from ndo_change_mtu() (Eric Dumazet)   
  - net: dccp: Fix ccid2_rtt_estimator() kernel-doc (Jeff Johnson)   
  - net: phy: marvell: add support for MV88E6250 family internal PHYs (Matthias Schiffer)   
  - net: phy: marvell: constify marvell_hw_stats (Matthias Schiffer)   
  - selftests/bpf: Change functions definitions to support GCC (Cupertino Miranda)   
  - selftests/bpf: Add CFLAGS per source file and runner (Cupertino Miranda)   
  - bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC (Jose E. Marchesi)   
  - bpf: Disable some `attribute ignored' warnings in GCC (Jose E. Marchesi)   
  - bpf: Avoid __hidden__ attribute in static object (Jose E. Marchesi)   
  - bpf: Remove redundant page mask of vmf->address (Haiyue Wang)   
  - wifi: mwl8k: initialize cmd->addr[] properly (Dan Carpenter)   
  - virtio_net: Remove rtnl lock protection of command buffers (Daniel Jurgens)   
  - virtio_net: Add a lock for per queue RX coalesce (Daniel Jurgens)   
  - virtio_net: Do DIM update for specified queue only (Daniel Jurgens)   
  - virtio_net: Add a lock for the command VQ. (Daniel Jurgens)   
  - virtio_net: Remove command data from control_buf (Daniel Jurgens)   
  - virtio_net: Store RSS setting in virtnet_info (Daniel Jurgens)   
  - net: dsa: mt7530: detect PHY muxing when PHY is defined on switch MDIO bus (Arınç ÜNAL)   
  - rtnetlink: allow rtnl_fill_link_netnsid() to run under RCU protection (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL in rtnl_xdp_prog_skb() (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL in rtnl_fill_proto_down() (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL for many attributes (Eric Dumazet)   
  - net: write once on dev->allmulti and dev->promiscuity (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL for IFLA_TXQLEN output (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL for IFLA_IFNAME output (Eric Dumazet)   
  - rtnetlink: do not depend on RTNL for IFLA_QDISC output (Eric Dumazet)   
  - net: qede: use return from qede_flow_parse_ports() (Asbjørn Sloth Tønnesen)   
  - net: qede: use return from qede_flow_spec_validate_unused() (Asbjørn Sloth Tønnesen)   
  - net: qede: use return from qede_parse_actions() for flow_spec (Asbjørn Sloth Tønnesen)   
  - mptcp: fix typos in comments (Shi-Sheng Yang)   
  - octeontx2-pf: Treat truncation of IRQ name as an error (Simon Horman)   
  - atm/fore200e: Delete unused 'fore200e_boards' (Dr. David Alan Gilbert)   
  - gve: Implement queue api (Shailend Chand)   
  - selftests/bpf: MUL range computation tests. (Cupertino Miranda)   
  - bpf/verifier: relax MUL range computation check (Cupertino Miranda)   
  - selftests/bpf: XOR and OR range computation tests. (Cupertino Miranda)   
  - bpf/verifier: improve XOR and OR range computation (Cupertino Miranda)   
  - bpf/verifier: refactor checks for range computation (Cupertino Miranda)   
  - bpf/verifier: replace calls to mark_reg_unknown. (Cupertino Miranda)   
  - gtp: identify tunnel via GTP device + GTP version + TEID + family (Pablo Neira Ayuso)   
  - gtp: support for IPv4-in-IPv6-GTP and IPv6-in-IPv4-GTP (Pablo Neira Ayuso)   
  - gtp: add helper function to build GTP packets from an IPv6 packet (Pablo Neira Ayuso)   
  - gtp: add helper function to build GTP packets from an IPv4 packet (Pablo Neira Ayuso)   
  - gtp: remove IPv4 and IPv6 header from context object (Pablo Neira Ayuso)   
  - gtp: move debugging to skbuff build helper function (Pablo Neira Ayuso)   
  - gtp: pass up link local traffic to userspace socket (Pablo Neira Ayuso)   
  - gtp: use IPv6 address /64 prefix for UE/MS (Pablo Neira Ayuso)   
  - gtp: add IPv6 support (Pablo Neira Ayuso)   
  - gtp: prepare for IPv6 support (Pablo Neira Ayuso)   
  - gtp: properly parse extension headers (Pablo Neira Ayuso)   
  - gtp: remove useless initialization (Pablo Neira Ayuso)   
  - bpftool, selftests/hid/bpf: Fix 29 clang warnings (John Hubbard)   
  - scx: Document semantics for ops during hotplug events (David Vernet)   
  - scx: Use per-cpu vars to CPU lifecycle (David Vernet)   
  - scx: Fix exit/error bstr formatting (David Vernet)   
  - selftests/bpf: Fix pointer arithmetic in test_xdp_do_redirect (Michal Schmidt)   
  - selftests/bpf: Use bpf_tracing.h instead of bpf_tcp_helpers.h (Martin KaFai Lau)   
  - ice: refactor struct ice_vsi_cfg_params to be inside of struct ice_vsi (Mateusz Polchlopek)   
  - ice: Deduplicate tc action setup (Marcin Szycik)   
  - ice: update E830 device ids and comments (Paul Greenwalt)   
  - ice: add additional E830 device ids (Paul Greenwalt)   
  - wifi: iwlwifi: Ensure prph_mac dump includes all addresses (Daniel Gabay)   
  - wifi: iwlwifi: mvm: don't request statistics in restart (Miri Korenblit)   
  - wifi: iwlwifi: mvm: exit EMLSR if secondary link is not used (Miri Korenblit)   
  - wifi: iwlwifi: mvm: add beacon template version 14 (striebit)   
  - wifi: iwlwifi: mvm: align UATS naming with firmware (Johannes Berg)   
  - wifi: iwlwifi: Force SCU_ACTIVE for specific platforms (Daniel Gabay)   
  - wifi: iwlwifi: mvm: record and return channel survey information (Benjamin Berg)   
  - wifi: iwlwifi: mvm: add the firmware API for channel survey (Benjamin Berg)   
  - wifi: iwlwifi: mvm: Fix race in scan completion (Ilan Peer)   
  - wifi: iwlwifi: mvm: Add a print for invalid link pair due to bandwidth (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: add a debugfs for reading EMLSR blocking reasons (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: Add active EMLSR blocking reasons prints (Yedidya Benshimol)   
  - wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (Miri Korenblit)   
  - wifi: iwlwifi: mvm: fix primary link setting (Miri Korenblit)   
  - wifi: iwlwifi: mvm: use already determined cmd_id (Johannes Berg)   
  - wifi: iwlwifi: mvm: don't reset link selection during restart (Johannes Berg)   
  - wifi: iwlwifi: Print EMLSR states name (Daniel Gabay)   
  - wifi: iwlwifi: mvm: Block EMLSR when a p2p/softAP vif is active (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: fix typo in debug print (Miri Korenblit)   
  - wifi: iwlwifi: mvm: exit EMLSR when CSA happens (Johannes Berg)   
  - wifi: iwlwifi: mvm: Disable/enable EMLSR due to link's bandwidth/band (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: avoid always prefering single-link (Miri Korenblit)   
  - wifi: iwlwifi: mvm: trigger link selection upon TTLM start/end (Miri Korenblit)   
  - wifi: iwlwifi: mvm: consider FWs recommendation for EMLSR (Miri Korenblit)   
  - wifi: iwlwifi: mvm: Activate EMLSR based on traffic volume (Miri Korenblit)   
  - wifi: iwlwifi: mvm: don't always unblock EMLSR (Miri Korenblit)   
  - wifi: iwlwifi: mvm: Always allow entering EMLSR from debugfs (Miri Korenblit)   
  - wifi: iwlwifi: mvm: add a debugfs for (un)blocking EMLSR (Miri Korenblit)   
  - wifi: iwlwifi: mvm: trigger link selection after exiting EMLSR (Miri Korenblit)   
  - wifi: iwlwifi: cleanup EMLSR when BT is active handling (Miri Korenblit)   
  - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal)   
  - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal)   
  - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal)   
  - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal)   
  - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal)   
  - netfilter: conntrack: remove flowtable early-drop test (Florian Westphal)   
  - netfilter: conntrack: documentation: remove reference to non-existent sysctl (Florian Westphal)   
  - netfilter: use NF_DROP instead of -NF_DROP (Jason Xing)   
  - net: add heuristic for enabling TCP fraglist GRO (Felix Fietkau)   
  - net: create tcp_gro_header_pull helper function (Felix Fietkau)   
  - net: create tcp_gro_lookup helper function (Felix Fietkau)   
  - net: add code for TCP fraglist GRO (Felix Fietkau)   
  - net: add support for segmenting TCP fraglist GSO packets (Felix Fietkau)   
  - net: move skb_gro_receive_list from udp to core (Felix Fietkau)   
  - net: microchip: lan743x: Reduce PTP timeout on HW failure (Rengarajan S)   
  - netfilter: conntrack: dccp: try not to drop skb in conntrack (Jason Xing)   
  - netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery (Linus Lüssing)   
  - netfilter: nf_tables: remove NETDEV_CHANGENAME from netdev chain event handler (Pablo Neira Ayuso)   
  - netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)   
  - gve: Alloc and free QPLs with the rings (Shailend Chand)   
  - gve: Account for stopped queues when reading NIC stats (Shailend Chand)   
  - gve: Reset Rx ring state in the ring-stop funcs (Shailend Chand)   
  - gve: Avoid rescheduling napi if on wrong cpu (Shailend Chand)   
  - gve: Make gve_turnup work for nonempty queues (Shailend Chand)   
  - gve: Make gve_turn(up|down) ignore stopped queues (Shailend Chand)   
  - gve: Add adminq funcs to add/remove a single Rx queue (Shailend Chand)   
  - gve: Make the GQ RX free queue funcs idempotent (Shailend Chand)   
  - queue_api: define queue api (Mina Almasry)   
  - scx: Dispatch locally until ops.cpu_online() invoked (David Vernet)   
  - [PATCH] SCX: scx_ops_bypass() can't grab a mutex (Tejun Heo)   
  - wifi: rtlwifi: 8192d: initialize rate_mask in rtl92de_update_hal_rate_mask() (Ping-Ke Shih)   
  - wifi: rtlwifi: Remove unused structs and avoid multiple -Wfamnae warnings (Gustavo A. R. Silva)   
  - wifi: rtw89: correct aSIFSTime for 6GHz band (Ping-Ke Shih)   
  - wifi: rtw89: wow: add ARP offload feature (Chin-Yen Lee)   
  - wifi: rtw89: wow: support WEP cipher on WoWLAN (Chih-Kang Chang)   
  - wifi: rtw89: wow: support 802.11w PMF IGTK rekey (Chih-Kang Chang)   
  - wifi: rtw89: wow: update latest PTK GTK info to mac80211 after resume (Chih-Kang Chang)   
  - wifi: rtw89: wow: add GTK rekey feature related H2C commands (Chih-Kang Chang)   
  - wifi: rtw89: wow: construct EAPoL packet for GTK rekey offload (Chih-Kang Chang)   
  - wifi: rtw89: use struct to fill H2C of WoWLAN global configuration (Chih-Kang Chang)   
  - wifi: rtw89: use struct to access firmware command h2c_dctl_sec_cam_v1 (Chih-Kang Chang)   
  - wifi: rtw89: wow: prepare PTK GTK info from mac80211 (Chih-Kang Chang)   
  - wifi: rtw89: wow: parsing Auth Key Management from associate request (Chih-Kang Chang)   
  - wifi: rtw89: wow: refine WoWLAN flows of HCI interrupts and low power mode (Chih-Kang Chang)   
  - wifi: rtw89: wow: send RFK pre-nofity H2C command in WoWLAN mode (Chin-Yen Lee)   
  - Revert "net: mirror skb frag ref/unref helpers" (Mina Almasry)   
  - bnxt: fix bnxt_get_avail_msix() returning negative values (David Wei)   
  - net: no longer acquire RTNL in threaded_show() (Eric Dumazet)   
  - tools: ynl: add --list-ops and --list-msgs to CLI (Jakub Kicinski)   
  - rtnetlink: use for_each_netdev_dump() in rtnl_stats_dump() (Eric Dumazet)   
  - rtnetlink: change rtnl_stats_dump() return value (Eric Dumazet)   
  - ci: enable kvm support in the github workflow (Andrea Righi)   
  - ax.25: x.25: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - appletalk: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - netfilter: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - net: Remove ctl_table sentinel elements from several networking subsystems (Joel Granados)   
  - net: sunrpc: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - net: rds: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - net: ipv{6,4}: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - net: Remove the now superfluous sentinel elements from ctl_table array (Joel Granados)   
  - wifi: mac80211_hwsim: add support for BSS color (Aditya Kumar Singh)   
  - wifi: mac80211: handle color change per link (Aditya Kumar Singh)   
  - wifi: cfg80211: handle color change per link (Aditya Kumar Singh)   
  - wifi: cfg80211: Clear mlo_links info when STA disconnects (Xin Deng)   
  - wifi: iwlwifi: pcie: allocate dummy net_device dynamically (Breno Leitao)   
  - wifi: nl80211: Avoid address calculations via out of bounds array indexing (Kees Cook)   
  - wifi: iwlwifi: Use request_module_nowait (Ben Greear)   
  - libbpf: Avoid casts from pointers to enums in bpf_tracing.h (Jose E. Marchesi)   
  - libbpf: Fix bpf_ksym_exists() in GCC (Jose E. Marchesi)   
  - net_sched: sch_sfq: annotate data-races around q->perturb_period (Eric Dumazet)   
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman)   
  - selftests/net: skip partial checksum packets in csum test (Willem de Bruijn)   
  - selftests: net: py: check process exit code in bkg() and background cmd() (Jakub Kicinski)   
  - IB/hfi1: allocate dummy net_device dynamically (Breno Leitao)   
  - net/mlx5e: flower: check for unsupported control flags (Asbjørn Sloth Tønnesen)   
  - libbpf: fix ring_buffer__consume_n() return result logic (Andrii Nakryiko)   
  - libbpf: fix potential overflow in ring__consume_n() (Andrii Nakryiko)   
  - selftests/bpf: Add test for the use of new args in cong_control (Miao Xu)   
  - bpf: tcp: Allow to write tp->snd_cwnd_stamp in bpf_tcp_ca (Miao Xu)   
  - tcp: Add new args for cong_control in tcp_congestion_ops (Miao Xu)   
  - selftests/bpf: Add kernel socket operation tests (Jordan Rife)   
  - selftests/bpf: Make sock configurable for each test case (Jordan Rife)   
  - selftests/bpf: Move IPv4 and IPv6 sockaddr test cases (Jordan Rife)   
  - selftests/bpf: Implement BPF programs for kernel socket operations (Jordan Rife)   
  - selftests/bpf: Implement socket kfuncs for bpf_testmod (Jordan Rife)   
  - selftests/bpf: Fix bind program for big endian systems (Jordan Rife)   
  - bpf: Missing trailing slash in tools/testing/selftests/bpf/Makefile (Jose E. Marchesi)   
  - libbpf: Fix error message in attach_kprobe_multi (Jiri Olsa)   
  - libbpf: Fix error message in attach_kprobe_session (Jiri Olsa)   
  - bnxt_en: Add VF PCI ID for 5760X (P7) chips (Ajit Khaparde)   
  - bnxt_en: Optimize recovery path ULP locking in the driver (Kalesh AP)   
  - bnxt_en: Add a mutex to synchronize ULP operations (Kalesh AP)   
  - bnxt_en: Don't call ULP_STOP/ULP_START during L2 reset (Michael Chan)   
  - bnxt_en: Don't support offline self test when RoCE driver is loaded (Kalesh AP)   
  - bnxt_en: share NQ ring sw_stats memory with subrings (Edwin Peer)   
  - net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path (Davide Caratti)   
  - wifi: mt76: enable spectrum management (Felix Fietkau)   
  - wifi: mt76: mt7925: add EHT radiotap support in monitor mode (Deren Wu)   
  - wifi: mt76: mt7921e: add LED control support (Hao Zhang)   
  - wifi: mt76: mt7996: let upper layer handle MGMT frame protection (Michael-CY Lee)   
  - wifi: mt76: mt7921: cqm rssi low/high event notify (Rong Yan)   
  - wifi: mt76: make const arrays in functions static (Felix Fietkau)   
  - wifi: mt76: connac: use muar idx 0xe for non-mt799x as well (Felix Fietkau)   
  - wifi: mt76: mt7996: add sanity checks for background radar trigger (StanleyYP Wang)   
  - wifi: mt76: connac: enable critical packet mode support for mt7992 (Howard Hsu)   
  - wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature (Howard Hsu)   
  - wifi: mt76: mt7996: fix non-main BSS no beacon issue for MBSS scenario (Henry Yen)   
  - wifi: mt76: connac: enable HW CSO module for mt7996 (Howard Hsu)   
  - wifi: mt76: mt7996: set RCPI value in rate control command (Peter Chiu)   
  - wifi: mt76: connac: use peer address for station BMC entry (Shayne Chen)   
  - wifi: mt76: mt7996: disable rx header translation for BMC entry (Shayne Chen)   
  - wifi: mt76: mt7915: Remove unused of_gpio.h (Andy Shevchenko)   
  - wifi: mt76: mt7915: add missing chanctx ops (Ben Greear)   
  - wifi: mt76: sdio: move mcu queue size check inside critical section (Lorenzo Bianconi)   
  - wifi: mt76: mt7996: fix uninitialized variable in mt7996_irq_tasklet() (Lorenzo Bianconi)   
  - wifi: mt76: mt7925: ensure 4-byte alignment for suspend & wow command (Ming Yen Hsieh)   
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (Leon Yen)   
  - wifi: mt76: mt7921: introduce mt7920 PCIe support (Deren Wu)   
  - wifi: mt76: mt7996: fix size of txpower MCU command (Chad Monroe)   
  - wifi: mt76: connac: check for null before dereferencing (Muhammad Usama Anjum)   
  - wifi: mt76: mt7603: add wpdma tx eof flag for PSE client reset (Felix Fietkau)   
  - wifi: mt76: mt7603: fix tx queue of loopback packets (Felix Fietkau)   
  - wifi: mt76: mt7915: add fallback in case of missing precal data (Felix Fietkau)   
  - wifi: mt76: mt7915: add mt7986, mt7916 and mt7981 pre-calibration (Peter Chiu)   
  - wifi: mt76: mt7915: add support for disabling in-band discovery (MeiChia Chiu)   
  - wifi: mt76: mt7996: only set MT76_MCU_RESET for the main phy (Felix Fietkau)   
  - wifi: mt76: mt7915: only set MT76_MCU_RESET for the main phy (Bo Jiao)   
  - wifi: mt76: mt7915: fix HE PHY capabilities IE for station mode (Howard Hsu)   
  - wifi: mt76: mt7915: fix bogus Tx/Rx airtime duration values (Henry Yen)   
  - wifi: mt76: mt7915: fix mcu command format for mt7915 tx stats (Peter Chiu)   
  - wifi: mt76: fix tx packet loss when scanning on DBDC (Felix Fietkau)   
  - wifi: mt76: replace skb_put with skb_put_zero (Felix Fietkau)   
  - wifi: mt76: mt7915: initialize rssi on adding stations (Felix Fietkau)   
  - wifi: ath12k: fix the problem that down grade phy mode operation (Lingbo Kong)   
  - wifi: qtnfmac: Remove generic .ndo_get_stats64 (Breno Leitao)   
  - wifi: qtnfmac: Move stats allocation to core (Breno Leitao)   
  - wifi: rtl8xxxu: cleanup includes (Ping-Ke Shih)   
  - wifi: rtl8xxxu: remove rtl8xxxu_ prefix from filenames (Kalle Valo)   
  - wifi: rtl8xxxu: remove some unused includes (Kalle Valo)   
  - wifi: rtw89: 8852c: refine power sequence to imporve power consumption (Chia-Yuan Li)   
  - wifi: rtw89: reset AFEDIG register in power off sequence (Chin-Yen Lee)   
  - wifi: rtlwifi: Adjust rtl8192d-common for USB (Bitterblue Smith)   
  - wifi: rtlwifi: Clean up rtl8192d-common a bit (Bitterblue Smith)   
  - wifi: rtlwifi: Move code from rtl8192de to rtl8192d-common (Bitterblue Smith)   
  - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path (Bitterblue Smith)   
  - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE (Bitterblue Smith)   
  - wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power (Bitterblue Smith)   
  - net: dsa: Remove adjust_link paths (Florian Fainelli)   
  - net: dsa: Remove fixed_link_update member (Florian Fainelli)   
  - net: ti: icssg_prueth: Add SW TX / RX Coalescing based on hrtimers (MD Danish Anwar)   
  - arp: Convert ioctl(SIOCGARP) to RCU. (Kuniyuki Iwashima)   
  - net: Protect dev->name by seqlock. (Kuniyuki Iwashima)   
  - arp: Get dev after calling arp_req_(delete|set|get)(). (Kuniyuki Iwashima)   
  - arp: Remove a nest in arp_req_get(). (Kuniyuki Iwashima)   
  - arp: Factorise ip_route_output() call in arp_req_set() and arp_req_delete(). (Kuniyuki Iwashima)   
  - arp: Validate netmask earlier for SIOCDARP and SIOCSARP in arp_ioctl(). (Kuniyuki Iwashima)   
  - arp: Move ATF_COM setting in arp_req_set(). (Kuniyuki Iwashima)   
  - implement-ops (Tejun Heo)   
  - bstr (Tejun Heo)   
  - selftests: netfilter: nft_concat_range.sh: reduce debug kernel run time (Florian Westphal)   
  - bpf: crypto: fix build when CONFIG_CRYPTO=m (Vadim Fedorenko)   
  - libbpf: better fix for handling nulled-out struct_ops program (Andrii Nakryiko)   
  - selftests/bpf: add tests for the "module: Function" syntax (Viktor Malik)   
  - libbpf: support "module: Function" syntax for tracing programs (Viktor Malik)   
  - scx_qmap: monitor_cpuperf() also needs __COMPAT_HAS_CPUMASKS test (Tejun Heo)   
  - ipv6: anycast: use call_rcu_hurry() in aca_put() (Eric Dumazet)   
  - xfrm: Restrict SA direction attribute to specific netlink message types (Antony Antony)   
  - xfrm: Add dir validation to "in" data path lookup (Antony Antony)   
  - xfrm: Add dir validation to "out" data path lookup (Antony Antony)   
  - xfrm: Add Direction to the SA in or out (Antony Antony)   
  - netpoll: Fix race condition in netpoll_owner_active (Breno Leitao)   
  - net: loopback: Do not allocate lstats explicitly (Breno Leitao)   
  - dt-bindings: net: snps, dwmac: remove tx-sched-sp property (Flavio Suligoi)   
  - net: move sysctl_mem_pcpu_rsv to net_hotdata (Eric Dumazet)   
  - net: add <net/proto_memory.h> (Eric Dumazet)   
  - tcp: move tcp_out_of_memory() to net/ipv4/tcp.c (Eric Dumazet)   
  - net: move sysctl_skb_defer_max to net_hotdata (Eric Dumazet)   
  - net: move sysctl_max_skb_frags to net_hotdata (Eric Dumazet)   
  - inet: introduce dst_rtable() helper (Eric Dumazet)   
  - selftests/bpf: Drop start_server_proto helper (Geliang Tang)   
  - selftests/bpf: Make start_mptcp_server static (Geliang Tang)   
  - selftests/bpf: Add opts argument for __start_server (Geliang Tang)   
  - MAINTAINERS: Add link to SCX repo (Tejun Heo)   
  - MAINTAINERS: Separate out sched_ext tree (Tejun Heo)   
  - selftests/bpf: Add kprobe session cookie test (Jiri Olsa)   
  - selftests/bpf: Add kprobe session test (Jiri Olsa)   
  - libbpf: Add kprobe session attach type name to attach_type_name (Jiri Olsa)   
  - libbpf: Add support for kprobe session attach (Jiri Olsa)   
  - bpf: Add support for kprobe session cookie (Jiri Olsa)   
  - bpf: Add support for kprobe session context (Jiri Olsa)   
  - bpf: Add support for kprobe session attach (Jiri Olsa)   
  - i40e: Add and use helper to reconfigure TC for given VSI (Ivan Vecera)   
  - i40e: Add helper to access main VEB (Ivan Vecera)   
  - i40e: Consolidate checks whether given VSI is main (Ivan Vecera)   
  - i40e: Add helper to access main VSI (Ivan Vecera)   
  - i40e: Refactor argument of i40e_detect_recover_hung() (Ivan Vecera)   
  - i40e: Refactor argument of several client notification functions (Ivan Vecera)   
  - i40e: Remove flags field from i40e_veb (Ivan Vecera)   
  - scx: Run selftests in scx CI (David Vernet)   
  - scx: Fix selftests (David Vernet)   
  - scx: Refactor binary run logic in scx CI (David Vernet)   
  - scx: Download missing CI packages (David Vernet)   
  - selftests: drv-net-hw: add test for memory allocation failures with page pool (Jakub Kicinski)   
  - selftests: drv-net: support generating iperf3 load (Jakub Kicinski)   
  - selftests: net: py: avoid all ports < 10k (Jakub Kicinski)   
  - selftests: net: py: extract tool logic (Jakub Kicinski)   
  - selftests: drv-net-hw: support using Python from net hw tests (Jakub Kicinski)   
  - net: page_pool: support error injection (Jakub Kicinski)   
  - selftests: netfilter: avoid test timeouts on debug kernels (Florian Westphal)   
  - selftests/bpf: Drop an unused local variable (Benjamin Tissoires)   
  - bpf: Do not walk twice the hash map on free (Benjamin Tissoires)   
  - bpf: Do not walk twice the map on free (Benjamin Tissoires)   
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich)   
  - wifi: ath12k: fix flush failure in recovery scenarios (Baochen Qiang)   
  - wifi: ath12k: check M3 buffer size as well whey trying to reuse it (Baochen Qiang)   
  - net: sfp-bus: constify link_modes to sfp_select_interface() (Russell King (Oracle))   
  - net: sfp: allow use 2500base-X for 2500base-T modules (Russell King (Oracle))   
  - net: phylink: add debug print for empty posssible_interfaces (Russell King (Oracle))   
  - net: dsa: realtek: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: mt7530: do not set MT7530_P5_DIS when PHY muxing is being used (Arınç ÜNAL)   
  - net/smc: implement DMB-merged operations of loopback-ism (Wen Gu)   
  - net/smc: adapt cursor update when sndbuf and peer DMB are merged (Wen Gu)   
  - net/smc: {at|de}tach sndbuf to peer DMB if supported (Wen Gu)   
  - net/smc: add operations to merge sndbuf with peer DMB (Wen Gu)   
  - net/smc: register loopback-ism into SMC-D device list (Wen Gu)   
  - net/smc: ignore loopback-ism when dumping SMC-D devices (Wen Gu)   
  - net/smc: mark optional smcd_ops and check for support when called (Wen Gu)   
  - net/smc: implement DMB-related operations of loopback-ism (Wen Gu)   
  - net/smc: implement ID-related operations of loopback-ism (Wen Gu)   
  - net/smc: introduce loopback-ism for SMC intra-OS shortcut (Wen Gu)   
  - net/smc: decouple ism_client from SMC-D DMB registration (Wen Gu)   
  - sctp: prefer struct_size over open coded arithmetic (Erick Archer)   
  - virtio-net: support queue stat (Xuan Zhuo)   
  - netdev: add queue stats (Xuan Zhuo)   
  - virtio_net: add the total stats field (Xuan Zhuo)   
  - virtio_net: device stats helpers support driver stats (Xuan Zhuo)   
  - virtio_net: support device stats (Xuan Zhuo)   
  - virtio_net: remove "_queue" from ethtool -S (Xuan Zhuo)   
  - virtio_net: introduce device stats feature and structures (Xuan Zhuo)   
  - virtio_net: introduce ability to get reply info from device (Xuan Zhuo)   
  - net: txgbe: use phylink_pcs_change() to report PCS link change events (Russell King (Oracle))   
  - net: prestera: use phylink_pcs_change() to report PCS link change events (Russell King (Oracle))   
  - net: mvneta: use phylink_pcs_change() to report PCS link change events (Russell King (Oracle))   
  - net: mvpp2: use phylink_pcs_change() to report PCS link change events (Russell King (Oracle))   
  - net: hsr: init prune_proxy_timer sooner (Eric Dumazet)   
  - net: dsa: ksz_common: use separate phylink_mac_ops for ksz8830 (Russell King (Oracle))   
  - net: dsa: ksz_common: sub-driver phylink ops (Russell King (Oracle))   
  - net: dsa: ksz_common: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: ksz_common: remove phylink_mac_config from ksz_dev_ops (Russell King (Oracle))   
  - selftests/bpf: validate nulled-out struct_ops program is handled properly (Andrii Nakryiko)   
  - libbpf: handle nulled-out program in struct_ops correctly (Andrii Nakryiko)   
  - bpf: Include linux/types.h for u32 (Dmitrii Bundin)   
  - selftests/bpf: Free strdup memory in veristat (Geliang Tang)   
  - selftests/bpf: Free strdup memory in test_sockmap (Geliang Tang)   
  - selftests/bpf: Run cgroup1_hierarchy test in own mount namespace (Viktor Malik)   
  - bpf: Switch to krealloc_array() (Andy Shevchenko)   
  - bpf: Use struct_size() (Andy Shevchenko)   
  - samples/bpf: Add valid info for VMLINUX_BTF (Tao Chen)   
  - bpf: Fix verifier assumptions about socket->sk (Alexei Starovoitov)   
  - tools/sched_ext: Add __COMPAT_scx_bpf_exit() (Tejun Heo)   
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich)   
  - net: phy: micrel: Add support for PTP_PF_EXTTS for lan8814 (Horatiu Vultur)   
  - net: dsa: realtek: add LED drivers for rtl8366rb (Luiz Angelo Daros de Luca)   
  - net: dsa: realtek: do not assert reset on remove (Luiz Angelo Daros de Luca)   
  - net: dsa: realtek: keep default LED state in rtl8366rb (Luiz Angelo Daros de Luca)   
  - ipv6: introduce dst_rt6_info() helper (Eric Dumazet)   
  - bpf, docs: Clarify PC use in instruction-set.rst (Dave Thaler)   
  - mlxsw: pci: Use NAPI for event processing (Amit Cohen)   
  - mlxsw: pci: Reorganize 'mlxsw_pci_queue' structure (Amit Cohen)   
  - mlxsw: pci: Initialize dummy net devices for NAPI (Amit Cohen)   
  - mlxsw: pci: Ring RDQ and CQ doorbells once per several completions (Amit Cohen)   
  - mlxsw: pci: Handle up to 64 Rx completions in tasklet (Amit Cohen)   
  - ipv6: use call_rcu_hurry() in fib6_info_release() (Eric Dumazet)   
  - inet: use call_rcu_hurry() in inet_free_ifa() (Eric Dumazet)   
  - net: give more chances to rcu in netdev_wait_allrefs_any() (Eric Dumazet)   
  - net: ethernet: ti: am65-cpsw-qos: Add support to taprio for past base_time (Tanmay Patil)   
  - wifi: rtlwifi: rtl8723be: Make read-only arrays static const (Colin Ian King)   
  - wifi: rtw89: Remove the redundant else branch in the function rtw89_phy_get_kpath (Jiapeng Chong)   
  - wifi: rtw89: coex: Check and enable reports after run coex (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Wi-Fi role v8 condition when set BTG control (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Wi-Fi role v8 condition when set Bluetooth channel (Ching-Te Ku)   
  - wifi: rtw89: coex: Fix unexpected value in version 7 slot parameter (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Bluetooth version report version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Bluetooth frequency hopping map version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Bluetooth scan parameter report version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add Wi-Fi null data status version 7 (Ching-Te Ku)   
  - wifi: rtw89: 8852b: update hardware parameters for RFE type 5 (Ping-Ke Shih)   
  - wifi: rtw89: fix CTS transmission issue with center frequency deviation (Kuan-Chung Chen)   
  - scx: Build fixes for UP and SCX off (Tejun Heo)   
  - scx: Check for 0 slice after set_next_task_scx() (Tejun Heo)   
  - tools/sched_ext: Add -v option to example schedulers to aid debugging libbpf issues (Tejun Heo)   
  - tools: ynl: don't append doc of missing type directly to the type (Jakub Kicinski)   
  - tools/sched_ext: Drop libbpf_set_strict_mode() calls (Tejun Heo)   
  - scx: Cosmetic changes (Tejun Heo)   
  - selftests: drv-net: validate the environment (Jakub Kicinski)   
  - selftests: drv-net: reimplement the config parser (Jakub Kicinski)   
  - selftests: drv-net: extend the README with more info and example (Jakub Kicinski)   
  - scx/compat.h: Add backward compat support for missing ops.tick() (Tejun Heo)   
  - tools/sched_ext: Add compat helpers for the new features (Tejun Heo)   
  - tcp: fix tcp_grow_skb() vs tstamps (Eric Dumazet)   
  - scx/compat.h: Fix inversed struct_has_field test in SCX_OPS_LOAD() (Tejun Heo)   
  - net: dsa: lan9303: use ethtool_puts() for lan9303_get_strings() (Justin Stitt)   
  - user_exit_info: Fix and clean up ECODE handling and apply to the example schedulers (Tejun Heo)   
  - scx: Don't do debug dump on non-error exits (Tejun Heo)   
  - bpf_helpers.h: Define bpf_tail_call_static when building with GCC (Jose E. Marchesi)   
  - rstreason: make it work in trace world (Jason Xing)   
  - mptcp: introducing a helper into active reset logic (Jason Xing)   
  - mptcp: support rstreason for passive reset (Jason Xing)   
  - tcp: support rstreason for passive reset (Jason Xing)   
  - rstreason: prepare for active reset (Jason Xing)   
  - rstreason: prepare for passive reset (Jason Xing)   
  - net: introduce rstreason to detect why the RST is sent (Jason Xing)   
  - igc: Add Tx hardware timestamp request for AF_XDP zero-copy packet (Song Yoong Siang)   
  - selftests: virtio_net: add initial tests (Jiri Pirko)   
  - selftests: forwarding: add wait_for_dev() helper (Jiri Pirko)   
  - selftests: forwarding: add check_driver() helper (Jiri Pirko)   
  - selftests: forwarding: add ability to assemble NETIFS array by driver name (Jiri Pirko)   
  - virtio: add debugfs infrastructure to allow to debug virtio features (Jiri Pirko)   
  - wifi: brcmfmac: remove unused brcmf_usb_image struct (Christophe JAILLET)   
  - wifi: brcmsmac: ampdu: remove unused cb_del_ampdu_pars struct (Christophe JAILLET)   
  - test: hsr: Add test for HSR RedBOX (HSR-SAN) mode of operation (Lukasz Majewski)   
  - test: hsr: Extract version agnostic information from ping command output (Lukasz Majewski)   
  - test: hsr: Move common code to hsr_common.sh file (Lukasz Majewski)   
  - test: hsr: Remove script code already implemented in lib.sh (Lukasz Majewski)   
  - net: hsr: Provide RedBox support (HSR-SAN) (Lukasz Majewski)   
  - net/sched: fix false lockdep warning on qdisc root lock (Davide Caratti)   
  - net: lan966x: flower: check for unsupported control flags (Asbjørn Sloth Tønnesen)   
  - net: lan966x: flower: rename goto in lan966x_tc_flower_handler_control_usage() (Asbjørn Sloth Tønnesen)   
  - net: lan966x: flower: add extack to lan966x_tc_flower_handler_control_usage() (Asbjørn Sloth Tønnesen)   
  - net: sparx5: flower: check for unsupported control flags (Asbjørn Sloth Tønnesen)   
  - net: sparx5: flower: remove goto in sparx5_tc_flower_handler_control_usage() (Asbjørn Sloth Tønnesen)   
  - net: sparx5: flower: add extack to sparx5_tc_flower_handler_control_usage() (Asbjørn Sloth Tønnesen)   
  - net: sparx5: flower: only do lookup if fragment flags are set (Asbjørn Sloth Tønnesen)   
  - net: wwan: t7xx: Un-embed dummy device (Breno Leitao)   
  - bpf, docs: Add introduction for use in the ISA Internet Draft (Dave Thaler)   
  - net: sparx5: Correct spelling in comments (Simon Horman)   
  - net: encx24j600: Correct spelling in comments (Simon Horman)   
  - net: lan966x: Correct spelling in comments (Simon Horman)   
  - net: lan743x: Correct spelling in comments (Simon Horman)   
  - r8152: replace dev_info with dev_dbg for loading firmware (Hayes Wang)   
  - net: usb: ax88179_178a: Add check for usbnet_get_endpoints() (Ma Ke)   
  - net: sfp: add quirk for ATS SFP-GE-T 1000Base-TX module (Daniel Golle)   
  - net: sfp: enhance quirk for Fibrestore 2.5G copper SFP module (Marek Behún)   
  - net: sfp: update comment for FS SFP-10G-T quirk (Marek Behún)   
  - net: add two more call_rcu_hurry() (Eric Dumazet)   
  - selftests/bpf: extend BPF_SOCK_OPS_RTT_CB test for srtt and mrtt_us (Philo Lu)   
  - bpf: add mrtt and srtt as BPF_SOCK_OPS_RTT_CB args (Philo Lu)   
  - selftests/bpf: dummy_st_ops should reject 0 for non-nullable params (Eduard Zingerman)   
  - bpf: check bpf_dummy_struct_ops program params for test runs (Eduard Zingerman)   
  - selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops (Eduard Zingerman)   
  - selftests/bpf: adjust dummy_st_ops_success to detect additional error (Eduard Zingerman)   
  - bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable (Eduard Zingerman)   
  - tcp: avoid premature drops in tcp_add_backlog() (Eric Dumazet)   
  - net: dsa: b53: provide own phylink MAC operations (Florian Fainelli)   
  - net: dsa: b53: Remove b53_adjust_link() (Florian Fainelli)   
  - net: dsa: b53: Call b53_eee_init() from b53_mac_link_up() (Florian Fainelli)   
  - net: dsa: b53: Configure RGMII for 531x5 and MII for 5325 (Florian Fainelli)   
  - net: dsa: b53: Force flow control for BCM5301X CPU port(s) (Florian Fainelli)   
  - net: dsa: b53: Introduce b53_adjust_5325_mii() (Florian Fainelli)   
  - net: dsa: b53: Introduce b53_adjust_531x5_rgmii() (Florian Fainelli)   
  - net: dsa: b53: Stop exporting b53_phylink_* routines (Florian Fainelli)   
  - selftests/bpf: Add ring_buffer__consume_n test. (Andrea Righi)   
  - bpf: Add bpf_guard_preempt() convenience macro (Alexei Starovoitov)   
  - tools: testing: selftests: prefer TEST_PROGS for conntrack_dump_flush (Florian Westphal)   
  - net: bridge: remove redundant check of f->dst (linke li)   
  - net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family switches (Matthias Schiffer)   
  - net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset handlers (Matthias Schiffer)   
  - wifi: ath10k: drop fw.eboard file name (Dmitry Baryshkov)   
  - wifi: ath10k: drop chip-specific board data file name (Dmitry Baryshkov)   
  - wifi: ath10k: populate board data for WCN3990 (Dmitry Baryshkov)   
  - enic: Replace hardcoded values for vnic descriptor by defines (Satish Kharat)   
  - tcp: update sacked after tracepoint in __tcp_retransmit_skb (Philo Lu)   
  - tcp: move tcp_skb_cb->sacked flags to enum (Philo Lu)   
  - selftests: net: extract BPF building logic from the Makefile (Jakub Kicinski)   
  - selftests: net: name bpf objects consistently and simplify Makefile (Jakub Kicinski)   
  - net: pse-pd: Kconfig: Add missing Regulator API dependency (Kory Maincent (Dent Project))   
  - net: pse-pd: pse_core: Fix pse regulator type (Kory Maincent (Dent Project))   
  - net: pse-pd: pse_core: Add missing kdoc return description (Kory Maincent (Dent Project))   
  - octeontx2-pf: flower: check for unsupported control flags (Asbjørn Sloth Tønnesen)   
  - net: hns3: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: ethernet: ti: cpsw: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: ethernet: ti: am65-cpsw: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - bnxt_en: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: ethernet: ti: am65-cpsw-nuss: Enable SGMII mode for J784S4 CPSW9G (Chintan Vankar)   
  - scx: Cosmetic changes from patch split (Tejun Heo)   
  - selftests: netfilter: fix conntrack_dump_flush retval on unsupported kernel (Florian Westphal)   
  - selftests: netfilter: nft_zones_many.sh: set ct sysctl after ruleset load (Florian Westphal)   
  - selftests: netfilter: conntrack_vrf.sh: prefer socat, not iperf3 (Florian Westphal)   
  - selftests: netfilter: skip tests on early errors (Florian Westphal)   
  - selftests: netfilter: nft_flowtable.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: nft_flowtable.sh: re-run with random mtu sizes (Florian Westphal)   
  - selftests: netfilter: nft_concat_range.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: nft_concat_range.sh: drop netcat support (Florian Westphal)   
  - selftests: netfilter: nft_concat_range.sh: move to lib.sh infra (Florian Westphal)   
  - net: openvswitch: Release reference to netdev (Jun Gu)   
  - selftests: bpf: crypto: add benchmark for crypto functions (Vadim Fedorenko)   
  - selftests: bpf: crypto skcipher algo selftests (Vadim Fedorenko)   
  - bpf: crypto: add skcipher to bpf crypto (Vadim Fedorenko)   
  - bpf: make common crypto API for TC/XDP programs (Vadim Fedorenko)   
  - bpf: update the comment for BTF_FIELDS_MAX (Haiyue Wang)   
  - selftests/bpf: Fix wq test. (Alexei Starovoitov)   
  - selftests/bpf: Use make_sockaddr in test_sock_addr (Geliang Tang)   
  - selftests/bpf: Use connect_to_addr in test_sock_addr (Geliang Tang)   
  - selftests/bpf: Use start_server_addr in test_sock_addr (Geliang Tang)   
  - selftests/bpf: Use log_err in open_netns/close_netns (Geliang Tang)   
  - selftests/bpf: Fix a fd leak in error paths in open_netns (Geliang Tang)   
  - MAINTAINERS: add entry for libeth and libie (Alexander Lobakin)   
  - iavf: switch to Page Pool (Alexander Lobakin)   
  - iavf: pack iavf_ring more efficiently (Alexander Lobakin)   
  - libeth: add Rx buffer management (Alexander Lobakin)   
  - page_pool: add DMA-sync-for-CPU inline helper (Alexander Lobakin)   
  - page_pool: constify some read-only function arguments (Alexander Lobakin)   
  - slab: introduce kvmalloc_array_node() and kvcalloc_node() (Alexander Lobakin)   
  - iavf: drop page splitting and recycling (Alexander Lobakin)   
  - iavf: kill "legacy-rx" for good (Alexander Lobakin)   
  - net: intel: introduce {, Intel} Ethernet common library (Alexander Lobakin)   
  - selftests/bpf: Add tests for preempt kfuncs (Kumar Kartikeya Dwivedi)   
  - bpf: Introduce bpf_preempt_[disable,enable] kfuncs (Kumar Kartikeya Dwivedi)   
  - bpf: Don't check for recursion in bpf_wq_work. (Alexei Starovoitov)   
  - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (Su Hui)   
  - wifi: ath12k: set mlo_capable_flags based on QMI PHY capability (Raj Kumar Bhagat)   
  - wifi: ath12k: read single_chip_mlo_support parameter from QMI PHY capability (Raj Kumar Bhagat)   
  - wifi: ath12k: add support to handle beacon miss for WCN7850 (Kang Yang)   
  - net: sparx5: add support for matchall mirror stats (Daniel Machon)   
  - net: sparx5: add the tc glue to support port mirroring (Daniel Machon)   
  - net: sparx5: add port mirroring implementation (Daniel Machon)   
  - net: sparx5: add bookkeeping code for matchall rules (Daniel Machon)   
  - net: sparx5: add new register definitions (Daniel Machon)   
  - wifi: ath11k: allocate dummy net_device dynamically (Breno Leitao)   
  - wifi: ath10k: allocate dummy net_device dynamically (Breno Leitao)   
  - wifi: qtnfmac: Use netdev dummy allocator helper (Breno Leitao)   
  - net: ibm/emac: allocate dummy net_device dynamically (Breno Leitao)   
  - net: ipa: allocate dummy net_device dynamically (Breno Leitao)   
  - net: mediatek: mtk_eth_sock: allocate dummy net_device dynamically (Breno Leitao)   
  - net: marvell: prestera: allocate dummy net_device dynamically (Breno Leitao)   
  - net: create a dummy net_device allocator (Breno Leitao)   
  - net: free_netdev: exit earlier if dummy (Breno Leitao)   
  - net: core: Fix documentation (Breno Leitao)   
  - net: dsa: mt7530: explain exposing MDIO bus of MT7531AE better (Arınç ÜNAL)   
  - net: dsa: mt7530: do not pass port variable to mt7531_rgmii_setup() (Arınç ÜNAL)   
  - net: dsa: mt7530: use priv->ds->num_ports instead of MT7530_NUM_PORTS (Arınç ÜNAL)   
  - net: dsa: mt7530: get rid of mac_port_validate member of mt753x_info (Arınç ÜNAL)   
  - net: dsa: mt7530: refactor MT7530_PMEEECR_P() (Arınç ÜNAL)   
  - net: dsa: mt7530: get rid of function sanity check (Arınç ÜNAL)   
  - net: dsa: mt7530: define MAC speed capabilities per switch model (Arınç ÜNAL)   
  - net: dsa: mt7530: return mt7530_setup_mdio & mt7531_setup_common on error (Arınç ÜNAL)   
  - net: dsa: mt7530: move MT753X_MTRAP operations for MT7530 (Arınç ÜNAL)   
  - net: dsa: mt7530: refactor MT7530_HWTRAP and MT7530_MHWTRAP (Arınç ÜNAL)   
  - net: dsa: mt7530: refactor MT7530_MFC and MT7531_CFC, add MT7531_QRY_FFP (Arınç ÜNAL)   
  - net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw (Arınç ÜNAL)   
  - net: dsa: mt7530: rename p5_intf_sel and use only for MT7530 switch (Arınç ÜNAL)   
  - net: dsa: mt7530: refactor MT7530_PMCR_P() (Arınç ÜNAL)   
  - net: dsa: mt7530: disable EEE abilities on failure on MT7531 and MT7988 (Arınç ÜNAL)   
  - selftests/bpf: wq: add bpf_wq_start() checks (Benjamin Tissoires)   
  - bpf: add bpf_wq_start (Benjamin Tissoires)   
  - selftests/bpf: add checks for bpf_wq_set_callback() (Benjamin Tissoires)   
  - bpf: wq: add bpf_wq_set_callback_impl (Benjamin Tissoires)   
  - selftests/bpf: wq: add bpf_wq_init() checks (Benjamin Tissoires)   
  - bpf: wq: add bpf_wq_init (Benjamin Tissoires)   
  - selftests/bpf: add bpf_wq tests (Benjamin Tissoires)   
  - neighbour: fix neigh_master_filtered() (Eric Dumazet)   
  - bpf: allow struct bpf_wq to be embedded in arraymaps and hashmaps (Benjamin Tissoires)   
  - bpf: add support for KF_ARG_PTR_TO_WORKQUEUE (Benjamin Tissoires)   
  - bpf: verifier: bail out if the argument is not a map (Benjamin Tissoires)   
  - tools: sync include/uapi/linux/bpf.h (Benjamin Tissoires)   
  - bpf: add support for bpf_wq user type (Benjamin Tissoires)   
  - bpf: replace bpf_timer_cancel_and_free with a generic helper (Benjamin Tissoires)   
  - bpf: replace bpf_timer_set_callback with a generic helper (Benjamin Tissoires)   
  - bpf: replace bpf_timer_init with a generic helper (Benjamin Tissoires)   
  - bpf: make timer data struct more generic (Benjamin Tissoires)   
  - scx: Implement scx_bpf_consume_task() (Tejun Heo)   
  - scx_qmap: Use a user DSQ instead of DSQ_GLOBAL (Tejun Heo)   
  - scx: Better task_can_run_on_remote_rq() (Tejun Heo)   
  - scx: Refactor consume_dispatch_q() (Tejun Heo)   
  - scx: Implement BPF DSQ iterator (Tejun Heo)   
  - scx: Introduce nldsq_next_task() and nldsq_for_each_task() (Tejun Heo)   
  - scx: Move p->scx.dsq_flags into p->scx.dsq_node (Tejun Heo)   
  - scx: Always keep tasks on dsq->list (Tejun Heo)   
  - scx: Use uncached rbtree for dsq priq (Tejun Heo)   
  - scx: Rename scx_dispatch_q node field names (Tejun Heo)   
  - scx: Use WRITE_ONCE/READ_ONCE() on dsq->nr (Tejun Heo)   
  - scx: Remove scx_kfunc_set_ops_only (Tejun Heo)   
  - scx: Make scx_bpf_dsq_nr_queued() safe to call from any context (Tejun Heo)   
  - scx: Make scx_kf_allowed_on_arg_tasks() actually use @mask (Tejun Heo)   
  - scx: Cosmetic / trivial changes (Tejun Heo)   
  - scx: Add init_scx_entity() and initialize scx->tasks_node too (Tejun Heo)   
  - scx: Add barrier() to scx_kf_[dis]allow() (Tejun Heo)   
  - selftests: drv-net: add require_XYZ() helpers for validating env (Jakub Kicinski)   
  - selftests: drv-net: add a TCP ping test case (and useful helpers) (Jakub Kicinski)   
  - selftests: net: support matching cases by name prefix (Jakub Kicinski)   
  - selftests: drv-net: add a trivial ping test (Jakub Kicinski)   
  - selftests: drv-net: construct environment for running tests which require an endpoint (Jakub Kicinski)   
  - selftests: drv-net: factor out parsing of the env (Jakub Kicinski)   
  - selftests: drv-net: define endpoint structures (Jakub Kicinski)   
  - selftests: drv-net: test dumping qstats per device (Jakub Kicinski)   
  - netlink: support all extack types in dumps (Jakub Kicinski)   
  - netlink: move extack writing helpers (Jakub Kicinski)   
  - netdev: support dumping a single netdev in qstats (Jakub Kicinski)   
  - af_unix: Don't access successor in unix_del_edges() during GC. (Kuniyuki Iwashima)   
  - wifi: rtw89: coex: Re-order the index for the report from firmware (Ching-Te Ku)   
  - wifi: rtw89: coex: Add coexistence firmware control report version 8 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add GPIO signal control version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add register monitor report v7 format (Ching-Te Ku)   
  - wifi: rtw89: coex: Update Bluetooth polluted Wi-Fi TX logic (Ching-Te Ku)   
  - wifi: rtw89: coex: Add PTA path control condition for chip RTL8922A (Ching-Te Ku)   
  - wifi: rtw89: coex: Add version 3 report map of H2C command (Ching-Te Ku)   
  - wifi: rtw89: coex: Add v7 firmware cycle status report (Ching-Te Ku)   
  - wifi: rtw89: coex: Allow Bluetooth doing traffic during Wi-Fi scan (Ching-Te Ku)   
  - wifi: rtl8xxxu: Add LED control code for RTL8723BU (Bitterblue Smith)   
  - net: ipa: kill ipa_version_supported() (Alex Elder)   
  - net: ipa: fix two minor ipa_cmd problems (Alex Elder)   
  - net: ipa: fix two bogus argument names (Alex Elder)   
  - net: ipa: make ipa_table_hash_support() a real function (Alex Elder)   
  - net: ipa: remove unneeded FILT_ROUT_HASH_EN definitions (Alex Elder)   
  - net: ipa: call device_init_wakeup() earlier (Alex Elder)   
  - net: ipa: only enable the SUSPEND IPA interrupt when needed (Alex Elder)   
  - net: ipa: maintain bitmap of suspend-enabled endpoints (Alex Elder)   
  - wifi: rtl8xxxu: Add LED control code for RTL8192CU family (Bitterblue Smith)   
  - wifi: rtl8xxxu: Add separate MAC init table for RTL8192CU (Bitterblue Smith)   
  - net: stmmac: Move MAC caps init to phylink MAC caps getter (Serge Semin)   
  - net: stmmac: Rename phylink_get_caps() callback to update_caps() (Serge Semin)   
  - net: ethernet: ti: am65-cpsw/ethtool: Enable RX HW timestamp only for PTP packets (Chintan Vankar)   
  - net: ethernet: ti: am65-cpts: Enable RX HW timestamp for PTP packets using CPTS FIFO (Chintan Vankar)   
  - wifi: ath12k: ACPI band edge channel power support (Lingbo Kong)   
  - wifi: ath12k: ACPI CCA threshold support (Lingbo Kong)   
  - wifi: ath12k: ACPI SAR support (Lingbo Kong)   
  - wifi: ath12k: ACPI TAS support (Lingbo Kong)   
  - wifi: ath12k: change supports_suspend to true for WCN7850 (Baochen Qiang)   
  - wifi: ath12k: support suspend/resume (Baochen Qiang)   
  - wifi: ath12k: avoid stopping mac80211 queues in ath12k_core_restart() (Baochen Qiang)   
  - wifi: ath12k: no need to handle pktlog during suspend/resume (Baochen Qiang)   
  - wifi: ath12k: flush all packets before suspend (Baochen Qiang)   
  - wifi: ath12k: decrease MHI channel buffer length to 8KB (Baochen Qiang)   
  - wifi: ath12k: fix warning on DMA ring capabilities event (Baochen Qiang)   
  - wifi: ath12k: do not dump SRNG statistics during resume (Baochen Qiang)   
  - wifi: ath12k: remove MHI LOOPBACK channels (Baochen Qiang)   
  - wifi: ath12k: rearrange IRQ enable/disable in reset path (Baochen Qiang)   
  - wifi: ath12k: fix kernel crash during resume (Baochen Qiang)   
  - net: dsa: mt7530: simplify core operations (Arınç ÜNAL)   
  - net: dsa: mt7530-mdio: read PHY address of switch from device tree (Arınç ÜNAL)   
  - net: ethernet: mtk_eth_soc: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - dpaa2-switch: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - cxgb4: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: openvswitch: Check vport netdev name (Jun Gu)   
  - netfilter: nfnetlink: Handle ACK flags for batch messages (Donald Hunter)   
  - tools/net/ynl: Add multi message support to ynl (Donald Hunter)   
  - tools/net/ynl: Fix extack decoding for directional ops (Donald Hunter)   
  - doc/netlink/specs: Add draft nftables spec (Donald Hunter)   
  - net: add callback for setting a ubuf_info to skb (Pavel Begunkov)   
  - net: extend ubuf_info callback to ops structure (Pavel Begunkov)   
  - tcp: try to send bigger TSO packets (Eric Dumazet)   
  - tcp: call tcp_set_skb_tso_segs() from tcp_write_xmit() (Eric Dumazet)   
  - tcp: remove dubious FIN exception from tcp_cwnd_test() (Eric Dumazet)   
  - net/mlx5e: Implement ethtool callbacks for supporting per-queue coalescing (Rahul Rameshbabu)   
  - net/mlx5e: Support updating coalescing configuration without resetting channels (Rahul Rameshbabu)   
  - net/mlx5e: Dynamically allocate DIM structure for SQs/RQs (Rahul Rameshbabu)   
  - net/mlx5e: Use DIM constants for CQ period mode parameter (Rahul Rameshbabu)   
  - net/mlx5e: Move DIM function declarations to en/dim.h (Rahul Rameshbabu)   
  - net: dsa: vsc73xx: add structure descriptions (Pawel Dembicki)   
  - net: dsa: vsc73xx: Add define for max num of ports (Pawel Dembicki)   
  - net: dsa: vsc73xx: use macros for rgmii recognition (Pawel Dembicki)   
  - net: dsa: vsc73xx: convert to PHYLINK (Pawel Dembicki)   
  - net: dsa: vsc73xx: use read_poll_timeout instead delay loop (Pawel Dembicki)   
  - ice: Document tx_scheduling_layers parameter (Michal Wilczynski)   
  - ice: Add tx_scheduling_layers devlink param (Lukasz Czapnik)   
  - ice: Enable switching default Tx scheduler topology (Michal Wilczynski)   
  - ice: Adjust the VSI/Aggregator layers (Raj Victor)   
  - ice: Support 5 layer topology (Raj Victor)   
  - devlink: extend devlink_param *set pointer (Mateusz Polchlopek)   
  - bpf: Fix typos in comments (Rafael Passos)   
  - bpf: Fix typo in function save_aux_ptr_type (Rafael Passos)   
  - wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() (Karthikeyan Kathirvel)   
  - wifi: ath12k: Refactor data path cmem init (Karthikeyan Periyasamy)   
  - wifi: ath12k: displace the Tx and Rx descriptor in cookie conversion table (Karthikeyan Periyasamy)   
  - wifi: ath12k: Refactor the hardware cookie conversion init (Karthikeyan Periyasamy)   
  - wifi: ath12k: avoid redundant code in Rx cookie conversion init (Karthikeyan Periyasamy)   
  - tcp: do not export tcp_twsk_purge() (Eric Dumazet)   
  - octeontx2-pf: Add support for offload tc with skbedit mark action (Geetha sowjanya)   
  - net: ethernet: ti: am65-cpsw: Fix xdp_rxq error for disabled port (Julien Panis)   
  - sysctl: treewide: constify ctl_table_header::ctl_table_arg (Thomas Weißschuh)   
  - wifi: rtl8xxxu: enable MFP support with security flag of RX descriptor (Martin Kaistra)   
  - Revert "wifi: rtl8xxxu: enable MFP support" (Martin Kaistra)   
  - wifi: rtw88: suppress messages of failed to flush queue (Ping-Ke Shih)   
  - wifi: rtw89: 8922a: fix argument to hal_reset in bb_cfg_txrx_path (Zong-Zhe Yang)   
  - wifi: rtw89: set WIPHY_FLAG_DISABLE_WEXT before MLO (Zong-Zhe Yang)   
  - bpf, docs: Fix formatting nit in instruction-set.rst (Dave Thaler)   
  - bpf, docs: Clarify helper ID and pointer terms in instruction-set.rst (Dave Thaler)   
  - selftests: netfilter: update makefiles and kernel config (Florian Westphal)   
  - selftests: netfilter: nft_audit.sh: add more skip checks (Florian Westphal)   
  - selftests: netfilter: nft_meta.sh: small shellcheck cleanup (Florian Westphal)   
  - selftests: netfilter: nft_fib.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: conntrack_ipip_mtu.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: nft_nat_zones.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: xt_string.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: xt_string.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_zones_many.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_synproxy.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_queue.sh: shellcheck cleanups (Florian Westphal)   
  - selftests: netfilter: nft_queue.sh: move to lib.sh infra (Florian Westphal)   
  - selftests/bpf: Use connect_to_addr in sk_assign (Geliang Tang)   
  - selftests/bpf: Use connect_to_addr in cls_redirect (Geliang Tang)   
  - selftests/bpf: Update arguments of connect_to_addr (Geliang Tang)   
  - selftests/bpf: Use start_server_addr in sk_assign (Geliang Tang)   
  - selftests/bpf: Use start_server_addr in cls_redirect (Geliang Tang)   
  - selftests/bpf: Add start_server_addr helper (Geliang Tang)   
  - neighbour: no longer hold RTNL in neigh_dump_info() (Eric Dumazet)   
  - neighbour: fix neigh_dump_info() return value (Eric Dumazet)   
  - neighbour: add RCU protection to neigh_tables[] (Eric Dumazet)   
  - net: dsa: xrs700x: fix missing initialisation of ds->phylink_mac_ops (Russell King (Oracle))   
  - net: rps: locklessly access rflow->cpu (Jason Xing)   
  - net: rps: protect filter locklessly (Jason Xing)   
  - net: rps: protect last_qtail with rps_input_queue_tail_save() helper (Jason Xing)   
  - net_sched: sch_skbprio: implement lockless skbprio_dump() (Eric Dumazet)   
  - net_sched: sch_pie: implement lockless pie_dump() (Eric Dumazet)   
  - net_sched: sch_hhf: implement lockless hhf_dump() (Eric Dumazet)   
  - net_sched: sch_hfsc: implement lockless accesses to q->defcls (Eric Dumazet)   
  - net_sched: sch_fq_pie: implement lockless fq_pie_dump() (Eric Dumazet)   
  - net_sched: sch_fq_codel: implement lockless fq_codel_dump() (Eric Dumazet)   
  - net_sched: sch_fifo: implement lockless __fifo_dump() (Eric Dumazet)   
  - net_sched: sch_ets: implement lockless ets_dump() (Eric Dumazet)   
  - net_sched: sch_tfs: implement lockless etf_dump() (Eric Dumazet)   
  - net_sched: sch_codel: implement lockless codel_dump() (Eric Dumazet)   
  - net_sched: sch_choke: implement lockless choke_dump() (Eric Dumazet)   
  - net_sched: sch_cbs: implement lockless cbs_dump() (Eric Dumazet)   
  - net_sched: cake: implement lockless cake_dump() (Eric Dumazet)   
  - net_sched: sch_fq: implement lockless fq_dump() (Eric Dumazet)   
  - wifi: mac80211: handle link ID during management Tx (Sriram R)   
  - wifi: mac80211: handle sdata->u.ap.active flag with MLO (Aditya Kumar Singh)   
  - wifi: cfg80211: add return docs for regulatory functions (Johannes Berg)   
  - wifi: cfg80211: make some regulatory functions void (Johannes Berg)   
  - wifi: mac80211: add return docs for sta_info_flush() (Johannes Berg)   
  - wifi: mac80211: keep mac80211 consistent on link activation failure (Benjamin Berg)   
  - wifi: mac80211: simplify ieee80211_assign_link_chanctx() (Johannes Berg)   
  - wifi: mac80211: reserve chanctx during find (Johannes Berg)   
  - wifi: cfg80211: fix cfg80211 function kernel-doc (Jeff Johnson)   
  - wifi: mac80211_hwsim: Use wider regulatory for custom for 6GHz tests (Chaitanya Tata)   
  - wifi: iwlwifi: mvm: Don't allow EMLSR when the RSSI is low (Miri Korenblit)   
  - wifi: iwlwifi: mvm: disable EMLSR when we suspend with wowlan (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: get periodic statistics in EMLSR (Miri Korenblit)   
  - wifi: iwlwifi: mvm: don't recompute EMLSR mode in can_activate_links (Miri Korenblit)   
  - wifi: iwlwifi: mvm: implement EMLSR prevention mechanism. (Miri Korenblit)   
  - wifi: iwlwifi: mvm: exit EMLSR upon missed beacon (Miri Korenblit)   
  - wifi: iwlwifi: mvm: init vif works only once (Johannes Berg)   
  - wifi: iwlwifi: mvm: Add helper functions to update EMLSR status (Miri Korenblit)   
  - wifi: iwlwifi: mvm: Implement new link selection algorithm (Miri Korenblit)   
  - wifi: iwlwifi: mvm: move EMLSR/links code (Miri Korenblit)   
  - wifi: iwlwifi: mvm: check if EMLSR is allowed before selecting links (Miri Korenblit)   
  - wifi: iwlwifi: mvm: don't always disable EMLSR due to BT coex (Miri Korenblit)   
  - wifi: iwlwifi: mvm: calculate EMLSR mode after connection (Miri Korenblit)   
  - wifi: iwlwifi: mvm: implement link grading (Miri Korenblit)   
  - wifi: iwlwifi: mvm: send ap_tx_power_constraints cmd to FW in AP mode (Mukesh Sisodiya)   
  - wifi: iwlwifi: mvm: introduce esr_disable_reason (Emmanuel Grumbach)   
  - wifi: iwlwifi: Add support for LARI_CONFIG_CHANGE_CMD v10 (Anjaneyulu)   
  - wifi: iwlwifi: mvm: Add support for PPAG cmd v6 (Anjaneyulu)   
  - wifi: iwlwifi: move lari_config handlig to regulatory (Anjaneyulu)   
  - wifi: iwlwifi: add a device ID for BZ-W (Emmanuel Grumbach)   
  - wifi: iwlwifi: move WTAS macro to api file (Anjaneyulu)   
  - wifi: iwlwifi: mvm: extend STEP URM workaround for new devices (Johannes Berg)   
  - wifi: iwlwifi: mvm: move phy band to nl80211 band helper (Benjamin Berg)   
  - wifi: iwlwifi: mvm: Refactor tracking of scan UIDs (Ilan Peer)   
  - wifi: mac80211: defer link switch work in reconfig (Miri Korenblit)   
  - wifi: mac80211: transmit deauth only if link is available (Johannes Berg)   
  - scx: Fix build when !CONFIG_SCHED_CLASS_EXT (Tejun Heo)   
  - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (Bitterblue Smith)   
  - gve: Remove qpl_cfg struct since qpl_ids map with queues respectively (Ziwei Xiao)   
  - net: pse-pd: Add TI TPS23881 PSE controller driver (Kory Maincent (Dent Project))   
  - dt-bindings: net: pse-pd: Add bindings for TPS23881 PSE controller (Kory Maincent (Dent Project))   
  - net: pse-pd: Add PD692x0 PSE controller driver (Kory Maincent (Dent Project))   
  - dt-bindings: net: pse-pd: Add bindings for PD692x0 PSE controller (Kory Maincent (Dent Project))   
  - net: pse-pd: Use regulator framework within PSE framework (Kory Maincent (Dent Project))   
  - net: pse-pd: Add support for setup_pi_matrix callback (Kory Maincent (Dent Project))   
  - dt-bindings: net: pse-pd: Add another way of describing several PSE PIs (Kory Maincent (Dent Project))   
  - net: pse-pd: Add support for PSE PIs (Kory Maincent (Dent Project))   
  - MAINTAINERS: Add myself to pse networking maintainer (Kory Maincent (Dent Project))   
  - netlink: specs: Expand the pse netlink command with PoE interface (Kory Maincent (Dent Project))   
  - netlink: specs: Modify pse attribute prefix (Kory Maincent (Dent Project))   
  - net: ethtool: pse-pd: Expand pse commands with the PSE PoE interface (Kory Maincent (Dent Project))   
  - net: pse-pd: Introduce PSE types enumeration (Kory Maincent (Dent Project))   
  - ethtool: Expand Ethernet Power Equipment with c33 (PoE) alongside PoDL (Kory Maincent (Dent Project))   
  - net: dsa: sja1105: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: dsa: felix: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: mscc: ocelot: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - sfc: use flow_rule_is_supp_control_flags() (Asbjørn Sloth Tønnesen)   
  - mlxsw: spectrum_flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - selftests: net: set the exit code correctly in Python tests (Jakub Kicinski)   
  - selftests: net: fix counting totals when some checks fail (Jakub Kicinski)   
  - bpf: Fix JIT of is_mov_percpu_addr instruction. (Alexei Starovoitov)   
  - wifi: ath12k: don't use %pK in dmesg format strings (Jeff Johnson)   
  - wifi: ath12k: enable service flag for survey dump stats (Thiraviyam Mariyappan)   
  - wifi: ath12k: enable WIPHY_FLAG_DISABLE_WEXT (Kalle Valo)   
  - wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (Christophe JAILLET)   
  - wifi: ath11k: add support DT ieee80211-freq-limit (Christian Lamparter)   
  - dt-bindings: net: wireless: ath11k: add ieee80211-freq-limit property (Christian Lamparter)   
  - virtio_net: Support RX hash XDP hint (Liang Chen)   
  - net: ipa: sort all includes (Alex Elder)   
  - net: ipa: more include file cleanup (Alex Elder)   
  - net: ipa: eliminate unneeded struct declarations (Alex Elder)   
  - net: ipa: add some needed struct declarations (Alex Elder)   
  - net: ipa: include "ipa_interrupt.h" where needed (Alex Elder)   
  - net: ipa: remove unneeded standard includes (Alex Elder)   
  - net: ipa: include some standard header files (Alex Elder)   
  - ibmvnic: Return error code on TX scrq flush fail (Nick Child)   
  - neighbour: guarantee the localhost connections be established successfully even the ARP table is full (Zheng Li)   
  - udpencap: Remove Obsolete UDP_ENCAP_ESPINUDP_NON_IKE Support (Antony Antony)   
  - tcp_metrics: use parallel_ops for tcp_metrics_nl_family (Eric Dumazet)   
  - tcp_metrics: fix tcp_metrics_nl_dump() return value (Eric Dumazet)   
  - netns: no longer hold RTNL in rtnl_net_dumpid() (Eric Dumazet)   
  - net: dsa: xrs700x: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: rzn1_a5psw: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: lan9303: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: bcm_sf2: provide own phylink MAC operations (Russell King (Oracle))   
  - selftests: openvswitch: Fix escape chars in regexp. (Adrian Moreno)   
  - net: netdevsim: select PAGE_POOL in Kconfig (Jakub Kicinski)   
  - net: usb: qmi_wwan: add Lonsung U8300/U9300 product (Coia Prant)   
  - selftests: adopt BPF's approach to quieter builds (Jakub Kicinski)   
  - wifi: rtw89: regd: handle policy of 6 GHz SP according to BIOS (Zong-Zhe Yang)   
  - wifi: rtw89: acpi: process 6 GHz SP policy from ACPI DSM (Zong-Zhe Yang)   
  - wifi: rtw89: regd: extend policy of UNII-4 for IC regulatory (Zong-Zhe Yang)   
  - wifi: rtw89: regd: block 6 GHz by policy if not specific country (Zong-Zhe Yang)   
  - wifi: rtw89: 8852c: update TX power tables to R69.1 (2 of 2) (Zong-Zhe Yang)   
  - wifi: rtw89: 8852c: update TX power tables to R69.1 (1 of 2) (Zong-Zhe Yang)   
  - wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband (Zong-Zhe Yang)   
  - wifi: rtw89: sar: correct TX power boundary for MAC domain (Zong-Zhe Yang)   
  - wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of firmware command (Ping-Ke Shih)   
  - ice: Remove ndo_get_phys_port_name (Dariusz Aftanski)   
  - ice: Add automatic VF reset on Tx MDD events (Marcin Szycik)   
  - libbpf: Fix dump of subsequent char arrays (Quentin Deslandes)   
  - libbpf: Fix misaligned array closing bracket (Quentin Deslandes)   
  - tcp: accept bare FIN packets under memory pressure (Eric Dumazet)   
  - selftests: fix netfilter path in Makefile (Yujie Liu)   
  - net: phy: mediatek-ge: do not disable EEE advertisement (Arınç ÜNAL)   
  - net: pse-pd: Rectify and adapt the naming of admin_cotrol member of struct pse_control_config (Kory Maincent (Dent Project))   
  - of: property: Add fw_devlink support for pse parent (Kory Maincent (Dent Project))   
  - MAINTAINERS: net: Add Oleksij to pse-pd maintainers (Kory Maincent (Dent Project))   
  - selftests: drv-net: add config for netdevsim (Jakub Kicinski)   
  - selftests: drv-net: add stdout to the command failed exception (Jakub Kicinski)   
  - ip6_vti: fix memleak on netns dismantle (Florian Westphal)   
  - dt-bindings: net: nxp,dwmac-imx: allow nvmem cells property (Peng Fan)   
  - net: ipa: Remove unnecessary print function dev_err() (Jiapeng Chong)   
  - net/handshake: remove redundant assignment to variable ret (Colin Ian King)   
  - net: dsa: microchip: drop unneeded MODULE_ALIAS (Krzysztof Kozlowski)   
  - bpftool: Address minor issues in bash completion (Quentin Monnet)   
  - bpftool: Update documentation where progs/maps can be passed by name (Quentin Monnet)   
  - bpf: Harden and/or/xor value tracking in verifier (Harishankar Vishwanathan)   
  - wifi: wilc1000: convert list management to RCU (Alexis Lothoré)   
  - wifi: wilc1000: set atomic flag on kmemdup in srcu critical section (Alexis Lothoré)   
  - bpf, tests: Fix typos in comments (Chen Pei)   
  - btf: Avoid weak external references (Ard Biesheuvel)   
  - af_unix: Try not to hold unix_gc_lock during accept(). (Kuniyuki Iwashima)   
  - selftests: forwarding: router_nh: Add a diagram (Petr Machata)   
  - selftests: forwarding: router_mpath_nh_res: Add a diagram (Petr Machata)   
  - selftests: forwarding: router_mpath_nh: Add a diagram (Petr Machata)   
  - selftests: mlxsw: ethtool_lanes: Wait for lanes parameter dump explicitly (Danielle Ratson)   
  - selftests: drivers: hw: Include tc_common.sh in hw_stats_l3 (Petr Machata)   
  - selftests: drivers: hw: ethtool.sh: Adjust output (Petr Machata)   
  - selftests: drivers: hw: Fix ethtool_rmon (Petr Machata)   
  - selftests: forwarding: bail_on_lldpad() should SKIP (Petr Machata)   
  - selftests: forwarding: lib.sh: Validate NETIFS (Petr Machata)   
  - selftests: net: Unify code of busywait() and slowwait() (Petr Machata)   
  - net: dsa: mt7530: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: lantiq_gswip: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: qca8k: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: ar9331: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: sja1105: provide own phylink MAC operations (Russell King (Oracle))   
  - wifi: ath12k: dynamically update peer puncturing bitmap for STA (Kang Yang)   
  - wifi: ath12k: fix mac id extraction when MSDU spillover in rx error path (Karthikeyan Periyasamy)   
  - selftests: net: exercise page pool reporting via netlink (Jakub Kicinski)   
  - selftests: net: support use of NetdevSimDev under "with" in python (Jakub Kicinski)   
  - selftests: net: print full exception on failure (Jakub Kicinski)   
  - selftests: net: print report check location in python tests (Jakub Kicinski)   
  - tools: ynl: don't return None for dumps (Jakub Kicinski)   
  - net: netdevsim: add some fake page pool use (Jakub Kicinski)   
  - net: dqs: make struct dql more cache efficient (Breno Leitao)   
  - net: dql: Optimize stall information population (Breno Leitao)   
  - net: dql: Separate queue function responsibilities (Breno Leitao)   
  - net: dql: Avoid calling BUG() when WARN() is enough (Breno Leitao)   
  - net: ethernet: ti: am65-cpsw: Add minimal XDP support (Julien Panis)   
  - net: ethernet: ti: Add desc_infos member to struct k3_cppi_desc_pool (Julien Panis)   
  - net: ethernet: ti: Add accessors for struct k3_cppi_desc_pool members (Julien Panis)   
  - udp: Avoid call to compute_score on multiple sites (Gabriel Krisman Bertazi)   
  - net: ip6_gre: Remove generic .ndo_get_stats64 (Breno Leitao)   
  - net: ipv6_gre: Do not use custom stat allocator (Breno Leitao)   
  - net: dsa: convert dsa_user_phylink_fixed_state() to use dsa_phylink_to_port() (Russell King (Oracle))   
  - net: constify net_class (Heiner Kallweit)   
  - gve: Correctly report software timestamping capabilities (John Fraker)   
  - net: save some cycles when doing skb_attempt_defer_free() (Jason Xing)   
  - net: dsa: microchip: ksz9477: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - net: prestera: flower: validate control flags (Asbjørn Sloth Tønnesen)   
  - nfp: flower: fix check for unsupported control flags (Asbjørn Sloth Tønnesen)   
  - flow_offload: add control flag checking helpers (Asbjørn Sloth Tønnesen)   
  - net: dev_addr_lists: move locking out of init/exit in kunit (Jakub Kicinski)   
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa)   
  - fib: rules: no longer hold RTNL in fib_nl_dumprule() (Eric Dumazet)   
  - tipc: remove redundant assignment to ret, simplify code (Colin Ian King)   
  - tcp: small optimization when TCP_TW_SYN is processed (Eric Dumazet)   
  - net: hns3: add support to query scc version by devlink info (Hao Chen)   
  - net: hns3: dump more reg info based on ras mod (Peiyang Wang)   
  - net: hns3: move constants from hclge_debugfs.h to hclge_debugfs.c (Jijie Shao)   
  - net: hns3: add command queue trace for hns3 (Hao Lan)   
  - net: nfc: remove inappropriate attrs check (Lin Ma)   
  - ptp: ptp_qoriq: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - ptp: ptp_ines: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - ptp: ptp_idt82p33: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - ptp: ptp_dte: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - ptp: ptp_clockmatrix: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - selftests: netfilter: nft_nat.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_flowtable.sh: move test to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_fib.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nft_conntrack_helper.sh: test to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: nf_nat_edemux.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: ipvs.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: place checktool helper in lib.sh (Florian Westphal)   
  - selftests: netfilter: conntrack_ipip_mtu.sh" move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: conntrack_vrf.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: conntrack_sctp_collision.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: conntrack_tcp_unreplied.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: conntrack_icmp_related.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: br_netfilter.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: bridge_brouter.sh: move to lib.sh infra (Florian Westphal)   
  - selftests: netfilter: move to net subdir (Florian Westphal)   
  - ice: store VF relative MSI-X index in q_vector->vf_reg_idx (Jacob Keller)   
  - ice: set vf->num_msix in ice_initialize_vf_entry() (Jacob Keller)   
  - ice: Implement 'flow-type ether' rules (Jakub Buchocki)   
  - ice: Remove unnecessary argument from ice_fdir_comp_rules() (Lukasz Plachno)   
  - scx: Mark sched_ext uclamp enabled (Tejun Heo)   
  - selftests/bpf: Add read_trace_pipe_iter function (Jiri Olsa)   
  - bpftool: Fix typo in error message (Thorsten Blum)   
  - nfp: update devlink device info output (Fei Qin)   
  - devlink: add a new info version tag (Fei Qin)   
  - tcp: increase the default TCP scaling ratio (Hechao Li)   
  - net: sfp: add quirk for another multigig RollBall transceiver (Marek Behún)   
  - net: phy: realtek: add rtl822x_c45_get_features() to set supported port (Eric Woudstra)   
  - net: phy: realtek: Change rtlgen_get_speed() to rtlgen_decode_speed() (Eric Woudstra)   
  - net: phy: realtek: Add driver instances for rtl8221b via Clause 45 (Marek Behún)   
  - net: phy: realtek: add get_rate_matching() for rtl822xb PHYs (Eric Woudstra)   
  - net: phy: realtek: configure SerDes mode for rtl822xb PHYs (Alexander Couzens)   
  - scx: Implement scx_bpf_cpuperf_set() (Tejun Heo)   
  - scx: Implement scx_bpf_cpuperf_cap() and scx_bpf_cpuperf_cur() (Tejun Heo)   
  - scx: Implement sched_ext_ops.tick() (Tejun Heo)   
  - cpufreq_schedutil: Refactor sugov_cpu_is_busy() (Tejun Heo)   
  - scx: Should update load avg and util metrics for other classes and mechanisms (Tejun Heo)   
  - sched: Factor out update_other_load_avgs() from __update_blocked_others() (Tejun Heo)   
  - scx: Uninline scx_notify_sched_tick() and scx_notify_pick_next_task() (Tejun Heo)   
  - scx_qmap: Add struct cpu_ctx (Tejun Heo)   
  - net: dsa: mv88e6xxx: provide own phylink MAC operations (Russell King (Oracle))   
  - net: dsa: allow DSA switch drivers to provide their own phylink mac ops (Russell King (Oracle))   
  - net: dsa: introduce dsa_phylink_to_port() (Russell King (Oracle))   
  - tls: remove redundant assignment to variable decrypted (Colin Ian King)   
  - ipv4: Remove RTO_ONLINK. (Guillaume Nault)   
  - tcp: add support for SO_PEEK_OFF socket option (Jon Maloy)   
  - net: usb: qmi_wwan: Remove generic .ndo_get_stats64 (Breno Leitao)   
  - net: usb: qmi_wwan: Leverage core stats allocator (Breno Leitao)   
  - mpls: no longer hold RTNL in mpls_netconf_dump_devconf() (Eric Dumazet)   
  - flow_offload: fix flow_offload_has_one_action() kdoc (Asbjørn Sloth Tønnesen)   
  - net/mlx5e: Expose the VF/SF RX drop counter on the representor (Carolina Jubran)   
  - net: mirror skb frag ref/unref helpers (Mina Almasry)   
  - net: move skb ref helpers to new header (Mina Almasry)   
  - scx: Add selftests for validating hotplug seq checks (David Vernet)   
  - scx: Add new macros to compat.h (David Vernet)   
  - scx: Add hotplug seq to sched_ext_ops (David Vernet)   
  - scx: Add hotplug sequence number (David Vernet)   
  - selftests/bpf: Export send_recv_data helper (Geliang Tang)   
  - selftests/bpf: Add struct send_recv_arg (Geliang Tang)   
  - selftests/bpf: Fix umount cgroup2 error in test_sockmap (Geliang Tang)   
  - selftests: mptcp: test last time mptcp_info (Geliang Tang)   
  - mptcp: add last time fields in mptcp_info (Geliang Tang)   
  - net: mana: Avoid open coded arithmetic (Erick Archer)   
  - RDMA/mana_ib: Prefer struct_size over open coded arithmetic (Erick Archer)   
  - net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (Erick Archer)   
  - selftests/bpf: Enable tests for atomics with cpuv4 (Yonghong Song)   
  - bnxt_en: Update MODULE_DESCRIPTION (Michael Chan)   
  - bnxt_en: Utilize ulp client resources if RoCE is not registered (Vikas Gupta)   
  - bnxt_en: Change MSIX/NQs allocation policy (Vikas Gupta)   
  - bnxt_en: Refactor bnxt_rdma_aux_device_init/uninit functions (Vikas Gupta)   
  - bnxt_en: Remove unneeded MSIX base structure fields and code (Vikas Gupta)   
  - bnxt_en: Remove a redundant NULL check in bnxt_register_dev() (Kalesh AP)   
  - bnxt_en: Skip ethtool RSS context configuration in ifdown state (Pavan Chebbi)   
  - selftests/bpf: Add some tests with new bpf_program__attach_sockmap() APIs (Yonghong Song)   
  - selftests/bpf: Refactor out helper functions for a few tests (Yonghong Song)   
  - bpftool: Add link dump support for BPF_LINK_TYPE_SOCKMAP (Yonghong Song)   
  - libbpf: Add bpf_link support for BPF_PROG_TYPE_SOCKMAP (Yonghong Song)   
  - bpf: Add bpf_link support for sk_msg and sk_skb progs (Yonghong Song)   
  - mlxsw: spectrum_ethtool: Add support for 100Gb/s per lane link modes (Ido Schimmel)   
  - selftests: fib_rule_tests: Add VRF tests (Ido Schimmel)   
  - net: team: fix incorrect maxattr (Hangbin Liu)   
  - net: wan: fsl_qmc_hdlc: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - doc/netlink/specs: Add bond support to rt_link.yaml (Hangbin Liu)   
  - ethtool: update tsinfo statistics attribute docs with correct type (Rahul Rameshbabu)   
  - net: use SKB_CONSUMED in skb_attempt_defer_free() (Pavel Begunkov)   
  - net: cache for same cpu skb_attempt_defer_free (Pavel Begunkov)   
  - tcp: tweak tcp_sock_write_txrx size assertion (Eric Dumazet)   
  - selftests: net: reuse common code in bpf_offload (Jakub Kicinski)   
  - selftests: net: declare section names for bpf_offload (Jakub Kicinski)   
  - selftests: net: bpf_offload: wait for maps (Jakub Kicinski)   
  - selftests: move bpf-offload test from bpf to net (Jakub Kicinski)   
  - scx: Fix a few typos (David Vernet)   
  - scx: Add scx_bpf_nr_cpu_ids(), scx_bpf_get_possible/online_cpumask() and scx_put_cpumask() (Tejun Heo)   
  - scx: Move defs of sched_ext_ops and friends to ext.c (Tejun Heo)   
  - scx: Make ops_cpu_valid() invoke scx_ops_error() automtically (Tejun Heo)   
  - scx: Reorder kfunc decls in common.bpf.h (Tejun Heo)   
  - scx: Fix allocation of scx_kick_cpus_pnt_seqs[] (Tejun Heo)   
  - wifi: ath12k: support get_survey mac op for single wiphy (Sriram R)   
  - wifi: ath12k: Modify rts threshold mac op for single wiphy (Sriram R)   
  - wifi: ath12k: Modify set and get antenna mac ops for single wiphy (Sriram R)   
  - wifi: ath12k: modify regulatory support for single wiphy architecture (Sriram R)   
  - wifi: ath12k: Add additional checks for vif and sta iterators (Sriram R)   
  - wifi: ath12k: Cache vdev configs before vdev create (Sriram R)   
  - wifi: ath12k: fetch correct radio based on vdev status (Sriram R)   
  - wifi: ath12k: scan statemachine changes for single wiphy (Sriram R)   
  - wifi: ath12k: vdev statemachine changes for single wiphy (Sriram R)   
  - wifi: ath12k: modify ath12k mac start/stop ops for single wiphy (Sriram R)   
  - wifi: ath12k: Modify add and remove chanctx ops for single wiphy support (Sriram R)   
  - wifi: ath12k: add multiple radio support in a single MAC HW un/register (Karthikeyan Periyasamy)   
  - wifi: brcmfmac: Fix spelling mistake "ivalid" -> "invalid" (Colin Ian King)   
  - net: sched: cls_api: fix slab-use-after-free in fl_dump_key (Jianbo Liu)   
  - scx: Add selftests for hotplug operations (David Vernet)   
  - scx: Add more user_exit_info macros for exit code (David Vernet)   
  - scx: Exit a scheduler for unhandled hotplug events (David Vernet)   
  - net: remove napi_frag_unref (Mina Almasry)   
  - net: make napi_frag_unref reuse skb_page_unref (Mina Almasry)   
  - bonding: no longer use RTNL in bonding_show_queue_id() (Eric Dumazet)   
  - bonding: no longer use RTNL in bonding_show_slaves() (Eric Dumazet)   
  - bonding: no longer use RTNL in bonding_show_bonds() (Eric Dumazet)   
  - net: sched: cake: Optimize the number of function calls and branches in heap construction (Kuan-Wei Chiu)   
  - cxgb4: flower: use NL_SET_ERR_MSG_MOD for validation errors (Asbjørn Sloth Tønnesen)   
  - net: phy: dp8382x: keep WOL settings across suspends (Catalin Popescu)   
  - selftests/bpf: Add tests for atomics in bpf_arena. (Alexei Starovoitov)   
  - bpf: Add support for certain atomics in bpf_arena to x86 JIT (Alexei Starovoitov)   
  - wifi: ath12k: correct the capital word typo (Karthikeyan Periyasamy)   
  - wifi: ath11k: support hibernation (Baochen Qiang)   
  - net: qrtr: support suspend/hibernation (Baochen Qiang)   
  - net: phy: micrel: lan8814: Add support for PTP_PF_PEROUT (Horatiu Vultur)   
  - net: phy: micrel: lan8814: Enable LTC at probe time (Horatiu Vultur)   
  - dt-bindings: net: rockchip-dwmac: use rgmii-id in example (Sascha Hauer)   
  - tcp: replace TCP_SKB_CB(skb)->tcp_tw_isn with a per-cpu field (Eric Dumazet)   
  - tcp: propagate tcp_tw_isn via an extra parameter to ->route_req() (Eric Dumazet)   
  - net: sparx5: add support for tc flower redirect action (Daniel Machon)   
  - net: sparx5: add support for tc flower mirred action. (Daniel Machon)   
  - net: ti: icssg-prueth: Add ICSSG Ethernet driver for AM65x SR1.0 platforms (Diogo Ivo)   
  - net: ti: icssg-prueth: Modify common functions for SR1.0 (Diogo Ivo)   
  - net: ti: icssg-prueth: Add functions to configure SR1.0 packet classifier (Diogo Ivo)   
  - net: ti: icssg-prueth: Adjust the number of TX channels for SR1.0 (Diogo Ivo)   
  - net: ti: icssg-prueth: Adjust IPG configuration for SR1.0 (Diogo Ivo)   
  - net: ti: icssg-prueth: Add SR1.0-specific description bits (Diogo Ivo)   
  - net: ti: icssg-prueth: Add SR1.0-specific configuration bits (Diogo Ivo)   
  - net: ti: icssg-prueth: Move common functions into a separate file (Diogo Ivo)   
  - eth: Move IPv4/IPv6 multicast address bases to their own symbols (Diogo Ivo)   
  - dt-bindings: net: Add support for AM65x SR1.0 in ICSSG (Diogo Ivo)   
  - net: phy: air_en8811h: fix some error codes (Dan Carpenter)   
  - archnet: Convert from tasklet to BH workqueue (Allen Pais)   
  - scx: Add scx_ops_exit() macro for exiting from ext.c (David Vernet)   
  - selftests/bpf: eliminate warning of get_cgroup_id_from_path() (Jason Xing)   
  - igc: Remove redundant runtime resume for ethtool ops (Bjorn Helgaas)   
  - igb: Remove redundant runtime resume for ethtool_ops (Bjorn Helgaas)   
  - e1000e: Remove redundant runtime resume for ethtool_ops (Bjorn Helgaas)   
  - wifi: mac80211: extend IEEE80211_KEY_FLAG_GENERATE_MMIE to other ciphers (Michael-CY Lee)   
  - wifi: mac80211: Add missing return value documentation (Jeff Johnson)   
  - wifi: mac80211: remove ieee80211_set_hw_80211_encap() (Jeff Johnson)   
  - wifi: mac80211: correctly document struct mesh_table (Jeff Johnson)   
  - wifi: ath12k: fix link capable flags (Karthikeyan Periyasamy)   
  - wifi: ath12k: extend the link capable flag (Karthikeyan Periyasamy)   
  - r8169: add support for RTL8168M (Heiner Kallweit)   
  - mlx5/core: Support max_io_eqs for a function (Parav Pandit)   
  - devlink: Support setting max_io_eqs (Parav Pandit)   
  - net: display more skb fields in skb_dump() (Eric Dumazet)   
  - net: lan743x: Fixup EEE (Andrew Lunn)   
  - net: usb: lan78xx: Fixup EEE (Andrew Lunn)   
  - mptcp: add reset reason options in some places (Jason Xing)   
  - ipv4: Set scope explicitly in ip_route_output(). (Guillaume Nault)   
  - ipvlan: handle NETDEV_DOWN event (Venkat Venkatsubra)   
  - af_packet: avoid a false positive warning in packet_setsockopt() (Eric Dumazet)   
  - net: handle HAS_IOPORT dependencies (Niklas Schnelle)   
  - selftests: mptcp: netlink: drop disable=SC2086 (Geliang Tang)   
  - selftests: mptcp: ip_mptcp option for more scripts (Geliang Tang)   
  - selftests: mptcp: use pm_nl endpoint ops (Geliang Tang)   
  - selftests: mptcp: export pm_nl endpoint ops (Geliang Tang)   
  - selftests: mptcp: join: update endpoint ops (Geliang Tang)   
  - selftests: mptcp: netlink: add change_address helper (Geliang Tang)   
  - selftests: mptcp: add {get,format}_endpoint(s) helpers (Geliang Tang)   
  - selftests: mptcp: netlink: add 'limits' helpers (Geliang Tang)   
  - selftests: mptcp: export ip_mptcp to mptcp_lib (Geliang Tang)   
  - selftests: mptcp: add ms units for tc-netem delay (Geliang Tang)   
  - selftests: mptcp: add tc check for check_tools (Geliang Tang)   
  - tcp: more struct tcp_sock adjustments (Eric Dumazet)   
  - net: usb: ax88179_178a: non necessary second random mac address (Jose Ignacio Tornos Martinez)   
  - pfcp: avoid copy warning by simplifing code (Michal Swiatkowski)   
  - testing: net-drv: add a driver test for stats reporting (Jakub Kicinski)   
  - selftests: drivers: add scaffolding for Netlink tests in Python (Jakub Kicinski)   
  - netdevsim: report stats by default, like a real device (Jakub Kicinski)   
  - selftests: nl_netdev: add a trivial Netlink netdev test (Jakub Kicinski)   
  - selftests: net: add scaffolding for Netlink tests in Python (Jakub Kicinski)   
  - net: mdio-gpio: Use device_is_compatible() (Andy Shevchenko)   
  - net: dqs: use sysfs_emit() in favor of sprintf() (Eric Dumazet)   
  - ip_tunnel: harden copying IP tunnel params to userspace (Alexander Lobakin)   
  - ipv6: remove RTNL protection from ip6addrlbl_dump() (Eric Dumazet)   
  - inet: frags: delay fqdir_free_fn() (Eric Dumazet)   
  - ip6_vti: Remove generic .ndo_get_stats64 (Breno Leitao)   
  - ip6_vti: Do not use custom stat allocator (Breno Leitao)   
  - scx: Spaces -> tabs in a couple places (David Vernet)   
  - net: ethtool: Allow passing a phy index for some commands (Maxime Chevallier)   
  - net: sfp: Add helper to return the SFP bus name (Maxime Chevallier)   
  - net: phy: add helpers to handle sfp phy connect/disconnect (Maxime Chevallier)   
  - net: sfp: pass the phy_device when disconnecting an sfp module's PHY (Maxime Chevallier)   
  - net: phy: Introduce ethernet link topology representation (Maxime Chevallier)   
  - net: phy: marvell: implement cable test for 88E1111 (Pawel Dembicki)   
  - netlink: add nlmsg_consume() and use it in devlink compat (Jakub Kicinski)   
  - net: skbuff: generalize the skb->decrypted bit (Jakub Kicinski)   
  - libbpf: Add ring__consume_n / ring_buffer__consume_n (Andrea Righi)   
  - libbpf: ringbuf: Allow to consume up to a certain amount of items (Andrea Righi)   
  - libbpf: Start v1.5 development cycle (Andrea Righi)   
  - ynl: support binary and integer sub-type for indexed-array (Hangbin Liu)   
  - ynl: rename array-nest to indexed-array (Hangbin Liu)   
  - tcp: annotate data-races around tp->window_clamp (Eric Dumazet)   
  - tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get operation (Rahul Rameshbabu)   
  - netlink: specs: ethtool: define header-flags as an enum (Jakub Kicinski)   
  - net/mlx5e: Implement ethtool hardware timestamping statistics (Rahul Rameshbabu)   
  - net/mlx5e: Introduce timestamps statistic counter for Tx DMA layer (Rahul Rameshbabu)   
  - net/mlx5e: Introduce lost_cqe statistic counter for PTP Tx port timestamping CQ (Rahul Rameshbabu)   
  - ethtool: add interface to read Tx hardware timestamping statistics (Rahul Rameshbabu)   
  - net: xgbe: remove extraneous #ifdef checks (Arnd Bergmann)   
  - isdn: kcapi: don't build unused procfs code (Arnd Bergmann)   
  - 3c515: remove unused 'mtu' variable (Arnd Bergmann)   
  - trace: events: cleanup deprecated strncpy uses (Justin Stitt)   
  - net/mlx5e: Un-expose functions in en.h (Tariq Toukan)   
  - net/mlx5e: Support FEC settings for 100G/lane modes (Cosmin Ratiu)   
  - net/mlx5e: Extract checking of FEC support for a link mode (Cosmin Ratiu)   
  - bnxt_en: Fix PTP firmware timeout parameter (Michael Chan)   
  - selftests/bpf: Verify calling core kfuncs from BPF_PROG_TYPE_SYCALL (David Vernet)   
  - bpf: Allow invoking kfuncs from BPF_PROG_TYPE_SYSCALL progs (David Vernet)   
  - bpf, docs: Editorial nits in instruction-set.rst (Dave Thaler)   
  - selftests/bpf: Make sure libbpf doesn't enforce the signature of a func pointer. (Kui-Feng Lee)   
  - selftests/bpf: add test for bpf_for_each_map_elem() with different maps (Philo Lu)   
  - bpf: allow invoking bpf_for_each_map_elem with different maps (Philo Lu)   
  - bpf: store both map ptr and state in bpf_insn_aux_data (Philo Lu)   
  - scx: Fix trivial grammatical typo (David Vernet)   
  - scx: Cosmetic changes to kfuncs (Tejun Heo)   
  - bpf: fix perf_snapshot_branch_stack link failure (Arnd Bergmann)   
  - wifi: ath10k: support board-specific firmware overrides (Dmitry Baryshkov)   
  - dt-bindings: net: wireless: ath10k: describe firmware-name property (Dmitry Baryshkov)   
  - wifi: mwifiex: replace open-coded module_sdio_driver() (Krzysztof Kozlowski)   
  - wifi: wilc1000: replace open-coded module_sdio_driver() (Krzysztof Kozlowski)   
  - wifi: wl1251: simplify module initialization (Krzysztof Kozlowski)   
  - wifi: rsi: sdio: simplify module initialization (Krzysztof Kozlowski)   
  - net: dsa: microchip: ksz8_r_dyn_mac_table(): use entries variable to signal 0 entries (Oleksij Rempel)   
  - net: dsa: microchip: ksz8_r_dyn_mac_table(): return read/write error if we got any (Oleksij Rempel)   
  - net: dsa: microchip: ksz8_r_dyn_mac_table(): ksz: do not return EAGAIN on timeout (Oleksij Rempel)   
  - net: dsa: microchip: ksz8: Unify variable naming in ksz8_r_dyn_mac_table() (Oleksij Rempel)   
  - net: dsa: microchip: ksz8: Refactor ksz8_r_dyn_mac_table() for readability (Oleksij Rempel)   
  - net: dsa: microchip: ksz8: Refactor ksz8_fdb_dump() (Oleksij Rempel)   
  - net: dsa: microchip: Make ksz8_r_dyn_mac_table() static (Oleksij Rempel)   
  - net: dsa: microchip: Remove unused FDB timestamp support in ksz8_r_dyn_mac_table() (Oleksij Rempel)   
  - dt-bindings: net: starfive,jh7110-dwmac: Add StarFive JH8100 support (Tan Chun Hau)   
  - selftests/bpf: add fp-leaking precise subprog result tests (Andrii Nakryiko)   
  - bpf: prevent r10 register from being marked as precise (Andrii Nakryiko)   
  - bpf: Pack struct bpf_fib_lookup (Anton Protopopov)   
  - bpftool: Mount bpffs on provided dir instead of parent dir (Sahil Siddiq)   
  - scx: Use __COMPAT_ENUM_OR_ZERO for reading exit values (David Vernet)   
  - bpf: inline bpf_get_branch_snapshot() helper (Andrii Nakryiko)   
  - bpf: make bpf_get_branch_snapshot() architecture-agnostic (Andrii Nakryiko)   
  - scx: Update minimal testcase to be completely minimal (David Vernet)   
  - scx: Add a few missing config options from selftests (David Vernet)   
  - tools: ynl: copy netlink error to NlError (Jakub Kicinski)   
  - netlink: specs: define ethtool header flags (Jakub Kicinski)   
  - bnxt_en: Add warning message about disallowed speed change (Sreekanth Reddy)   
  - bnxt_en: Update firmware interface to 1.10.3.39 (Pavan Chebbi)   
  - bnxt_en: Add XDP Metadata support (Somnath Kotur)   
  - bnxt_en: Change bnxt_rx_xdp function prototype (Somnath Kotur)   
  - bnxt_en: Allocate page pool per numa node (Somnath Kotur)   
  - bnxt_en: Enable XPS by default on driver load (Somnath Kotur)   
  - bnxt_en: Add delay to handle Downstream Port Containment (DPC) AER (Vikas Gupta)   
  - bpf, riscv: Implement bpf_addr_space_cast instruction (Puranjay Mohan)   
  - bpf, riscv: Implement PROBE_MEM32 pseudo instructions (Puranjay Mohan)   
  - bpf: Optimize emit_mov_imm64(). (Alexei Starovoitov)   
  - net: ethernet: mtk_eth_soc: Reuse value using READ_ONCE instead of re-rereading it (linke li)   
  - wifi: ath6kl: sdio: simplify module initialization (Krzysztof Kozlowski)   
  - wifi: wil6210: wmi: Use __counted_by() in struct wmi_set_link_monitor_cmd and avoid -Wfamnae warning (Gustavo A. R. Silva)   
  - wifi: wil6210: cfg80211: Use __counted_by() in struct wmi_start_scan_cmd and avoid some -Wfamnae warnings (Gustavo A. R. Silva)   
  - wifi: ath12k: fix hal_rx_buf_return_buf_manager documentation (Jeff Johnson)   
  - wifi: ath11k: fix hal_rx_buf_return_buf_manager documentation (Jeff Johnson)   
  - wifi: ath9k: work around memset overflow warning (Arnd Bergmann)   
  - wifi: carl9170: re-fix fortified-memset warning (Arnd Bergmann)   
  - wifi: ath12k: fix missing endianness conversion in wmi_vdev_create_cmd() (Miaoqing Pan)   
  - wifi: ath12k: debugfs: radar simulation support (Ramya Gnanasekar)   
  - wifi: ath12k: initial debugfs support (Ramasamy Kaliappan)   
  - tg3: Remove residual error handling in tg3_suspend (Nikita Kiryushin)   
  - wifi: rtw89: 8922a: configure UL MU/OFDMA power setting (Kuan-Chung Chen)   
  - wifi: rtw88: Set default CQM config if not present (Po-Hao Huang)   
  - bpf: handle CONFIG_SMP=n configuration in x86 BPF JIT (Andrii Nakryiko)   
  - mlxsw: pci: Store DQ pointer as part of CQ structure (Amit Cohen)   
  - mlxsw: pci: Remove mlxsw_pci_cq_count() (Amit Cohen)   
  - mlxsw: pci: Remove mlxsw_pci_sdq_count() (Amit Cohen)   
  - mlxsw: pci: Break mlxsw_pci_cq_tasklet() into tasklets per queue type (Amit Cohen)   
  - mlxsw: pci: Make style change in mlxsw_pci_cq_tasklet() (Amit Cohen)   
  - mlxsw: pci: Remove unused wait queue (Amit Cohen)   
  - mlxsw: pci: Use only one event queue (Amit Cohen)   
  - mlxsw: pci: Rename MLXSW_PCI_EQS_COUNT (Amit Cohen)   
  - mlxsw: pci: Poll command interface for each cmd_exec() (Amit Cohen)   
  - mlxsw: pci: Make style changes in mlxsw_pci_eq_tasklet() (Amit Cohen)   
  - mlxsw: pci: Remove unused counters (Amit Cohen)   
  - mlxsw: pci: Arm CQ doorbell regardless of number of completions (Amit Cohen)   
  - mlxsw: pci: Do not setup tasklet from operation (Amit Cohen)   
  - mlxsw: pci: Move mlxsw_pci_cq_{init, fini}() (Amit Cohen)   
  - mlxsw: pci: Move mlxsw_pci_eq_{init, fini}() (Amit Cohen)   
  - net/mlx5: Don't call give_pages() if request 0 page (Jianbo Liu)   
  - net/mlx5: Skip pages EQ creation for non-page supplier function (Jianbo Liu)   
  - net/mlx5: Support matching on l4_type for ttc_table (Jianbo Liu)   
  - net/mlx5e: Add support for 800Gbps link modes (Gal Pressman)   
  - net/mlx5: Convert uintX_t to uX (Gal Pressman)   
  - net/mlx5e: XDP, Fix an inconsistent comment (Carolina Jubran)   
  - net/mlx5e: debugfs, Add reset option for command interface stats (Tariq Toukan)   
  - net/mlx5e: Make stats group fill_stats callbacks consistent with the API (Gal Pressman)   
  - net/mlx5e: Use ethtool_sprintf/puts() to fill stats strings (Gal Pressman)   
  - net/mlx5e: Use ethtool_sprintf/puts() to fill selftests strings (Gal Pressman)   
  - net/mlx5e: Use ethtool_sprintf/puts() to fill priv flags strings (Gal Pressman)   
  - tools: ynl: ethtool.py: Make tool invokable from any CWD (Rahul Rameshbabu)   
  - net: phy: marvell: implement cable-test for 88E308X/88E609X family (Pawel Dembicki)   
  - net: ethtool: Add impedance mismatch result code to cable test (Pawel Dembicki)   
  - net: phy: marvell: add basic support of 88E308X/88E609X family (Pawel Dembicki)   
  - net: fman: Remove some unused fields in some structure (Christophe JAILLET)   
  - af_unix: Remove lock dance in unix_peek_fds(). (Kuniyuki Iwashima)   
  - af_unix: Remove scm_fp_dup() in unix_attach_fds(). (Kuniyuki Iwashima)   
  - trace: tcp: fully support trace_tcp_send_reset (Jason Xing)   
  - trace: adjust TP_STORE_ADDR_PORTS_SKB() parameters (Jason Xing)   
  - net: enable timestamp static key if CPU (Marcelo Tosatti)   
  - scx/selftest: Add testcase invoking a kfunc with BPF_PROG_RUN (David Vernet)   
  - scx: Allow calling scx kfuncs from BPF_PROG_TYPE_SYSCALL (David Vernet)   
  - bpf: inline bpf_map_lookup_elem() helper for PERCPU_HASH map (Andrii Nakryiko)   
  - bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps (Andrii Nakryiko)   
  - bpf: inline bpf_get_smp_processor_id() helper (Andrii Nakryiko)   
  - bpf: add special internal-only MOV instruction to resolve per-CPU addrs (Andrii Nakryiko)   
  - bpf: Replace deprecated strncpy with strscpy (Justin Stitt)   
  - selftests/xsk: Add new test case for AF_XDP under max ring sizes (Tushar Vyavahare)   
  - selftests/xsk: Test AF_XDP functionality under minimal ring configurations (Tushar Vyavahare)   
  - selftests/xsk: Introduce set_ring_size function with a retry mechanism for handling AF_XDP socket closures (Tushar Vyavahare)   
  - selftests/bpf: Implement set_hw_ring_size function to configure interface ring size (Tushar Vyavahare)   
  - selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size (Tushar Vyavahare)   
  - selftests/xsk: Make batch size variable (Tushar Vyavahare)   
  - tools: Add ethtool.h header to tooling infra (Tushar Vyavahare)   
  - gve: add support to change ring size via ethtool (Harshitha Ramamurthy)   
  - gve: add support to read ring size ranges from the device (Harshitha Ramamurthy)   
  - gve: set page count for RX QPL for GQI and DQO queue formats (Harshitha Ramamurthy)   
  - gve: make the completion and buffer ring size equal for DQO (Harshitha Ramamurthy)   
  - gve: simplify setting decriptor count defaults (Harshitha Ramamurthy)   
  - octeontx2-pf: Reset MAC stats during probe (Sai Krishna)   
  - net/smc: Avoid -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva)   
  - netdevice: add DEFINE_FREE() for dev_put (Johannes Berg)   
  - rtnetlink: add guard for RTNL (Johannes Berg)   
  - wifi: rtw88: remove unsupported interface type of mesh point (Ping-Ke Shih)   
  - bpf: Add arm64 JIT support for bpf_addr_space_cast instruction. (Puranjay Mohan)   
  - bpf: Add arm64 JIT support for PROBE_MEM32 pseudo instructions. (Puranjay Mohan)   
  - wifi: rtw89: 8852c: disable PCI PHY EQ to improve compatibility (Ping-Ke Shih)   
  - wifi: rtw89: 8852c: add quirk to set PCI BER for certain platforms (Ping-Ke Shih)   
  - wifi: rtw89: 8852c: update TX power tables to R69 (Zong-Zhe Yang)   
  - wifi: rtw89: download firmware with five times retry (Chia-Yuan Li)   
  - wifi: rtw89: 8922a: add beacon filter and CQM support (Po-Hao Huang)   
  - wifi: rtw89: 8922a: download template probe requests for 6 GHz band (Po-Hao Huang)   
  - wifi: rtw89: 8922a: update scan offload H2C fields (Chih-Kang Chang)   
  - dt-bindings: net: snps,dwmac: Align 'snps,priority' type definition (Rob Herring)   
  - uapi: team: use header file generated from YAML spec (Hangbin Liu)   
  - net: team: use policy generated by YAML spec (Hangbin Liu)   
  - net: team: rename team to team_core for linking (Hangbin Liu)   
  - Documentation: netlink: add a YAML spec for team (Hangbin Liu)   
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog (Jason Xing)   
  - caif: Use UTILITY_NAME_LENGTH instead of hard-coding 16 (Christophe JAILLET)   
  - net/dpaa2: Avoid explicit cpumask var allocation on stack (Dawei Li)   
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li)   
  - net: dsa: sja1105: drop driver owner assignment (Krzysztof Kozlowski)   
  - net: dsa: microchip: drop driver owner assignment (Krzysztof Kozlowski)   
  - dt-bindings: net: renesas,ethertsn: Create child-node for MDIO bus (Niklas Söderlund)   
  - page_pool: try direct bulk recycling (Alexander Lobakin)   
  - page_pool: check for PP direct cache locality later (Alexander Lobakin)   
  - rhashtable: Improve grammar (Jonathan Neuschäfer)   
  - tools: ynl: add ynl_dump_empty() helper (Jakub Kicinski)   
  - nfp: Avoid -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva)   
  - net: phy: aquantia: add support for AQR114C PHY ID (Paweł Owoc)   
  - scx/compat.h: __COMPAT_read_enum() should use btf__find_by_name() (Tejun Heo)   
  - scx: Reorder scx_ops_flags enums to restore backward compatibility (Tejun Heo)   
  - selftests/bpf: Add pid limit for mptcpify prog (Geliang Tang)   
  - libbpf: Use local bpf_helpers.h include (Tobias Böhm)   
  - bpf: Improve program stats run-time calculation (Jose Fernandez)   
  - selftests/bpf: Skip test when perf_event_open returns EOPNOTSUPP (Pu Lehui)   
  - bpftool: Use __typeof__() instead of typeof() in BPF skeleton (Andrii Nakryiko)   
  - selftests/bpf: Using llvm may_goto inline asm for cond_break macro (Yonghong Song)   
  - bpf: Add a verbose message if map limit is reached (Anton Protopopov)   
  - bpf: Fix typo in uapi doc comments (David Lechner)   
  - bpftool: Clean-up typos, punctuation, list formatting in docs (Rameez Rehman)   
  - bpftool: Remove useless emphasis on command description in man pages (Rameez Rehman)   
  - bpftool: Use simpler indentation in source rST for documentation (Rameez Rehman)   
  - ipv6: remove RTNL protection from inet6_dump_fib() (Eric Dumazet)   
  - genetlink: remove linux/genetlink.h (Jakub Kicinski)   
  - net: openvswitch: remove unnecessary linux/genetlink.h include (Jakub Kicinski)   
  - netlink: create a new header for internal genetlink symbols (Jakub Kicinski)   
  - tcp/dccp: do not care about families in inet_twsk_purge() (Eric Dumazet)   
  - inet: preserve const qualifier in inet_csk() (Eric Dumazet)   
  - doc: netlink: Update tc spec with missing definitions (Donald Hunter)   
  - doc: netlink: Add hyperlinks to generated Netlink docs (Donald Hunter)   
  - doc: netlink: Change generated docs to limit TOC to depth 3 (Donald Hunter)   
  - ice: hold devlink lock for whole init/cleanup (Michal Swiatkowski)   
  - ice: move devlink port code to a separate file (Piotr Raczynski)   
  - ice: move ice_devlink.[ch] to devlink folder (Michal Swiatkowski)   
  - ice: Remove newlines in NL_SET_ERR_MSG_MOD (Thorsten Blum)   
  - ice: Add switch recipe reusing feature (Steven Zou)   
  - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt)   
  - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt)   
  - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt)   
  - bus: mhi: host: Add mhi_power_down_keep_dev() API to support system suspend/hibernation (Baochen Qiang)   
  - net: rps: move received_rps field to a better location (Eric Dumazet)   
  - net: rps: add rps_input_queue_head_add() helper (Eric Dumazet)   
  - net: rps: change input_queue_tail_incr_save() (Eric Dumazet)   
  - net: enqueue_to_backlog() cleanup (Eric Dumazet)   
  - net: make softnet_data.dropped an atomic_t (Eric Dumazet)   
  - net: enqueue_to_backlog() change vs not running device (Eric Dumazet)   
  - net: move dev_xmit_recursion() helpers to net/core/dev.h (Eric Dumazet)   
  - net: move kick_defer_list_purge() to net/core/dev.h (Eric Dumazet)   
  - ice: Add support for PFCP hardware offload in switchdev (Marcin Szycik)   
  - ice: refactor ICE_TC_FLWR_FIELD_ENC_OPTS (Marcin Szycik)   
  - pfcp: always set pfcp metadata (Michal Swiatkowski)   
  - pfcp: add PFCP module (Wojciech Drewek)   
  - net: net_test: add tests for IP tunnel flags conversion helpers (Alexander Lobakin)   
  - ip_tunnel: convert __be16 tunnel flags to bitmaps (Alexander Lobakin)   
  - ip_tunnel: use a separate struct to store tunnel params in the kernel (Alexander Lobakin)   
  - lib/bitmap: add compile-time test for __assign_bit() optimization (Alexander Lobakin)   
  - bitmap: make bitmap_{get,set}_value8() use bitmap_{read,write}() (Alexander Lobakin)   
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin)   
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin)   
  - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() (Alexander Lobakin)   
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() (Alexander Lobakin)   
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin)   
  - linkmode: convert linkmode_{test,set,clear,mod}_bit() to macros (Alexander Lobakin)   
  - bitops: let the compiler optimize {__,}assign_bit() (Alexander Lobakin)   
  - bitops: make BYTES_TO_BITS() treewide-available (Alexander Lobakin)   
  - bitops: add missing prototype check (Alexander Lobakin)   
  - lib/test_bitmap: use pr_info() for non-error messages (Alexander Potapenko)   
  - lib/test_bitmap: add tests for bitmap_{read,write}() (Alexander Potapenko)   
  - lib/bitmap: add bitmap_{read,write}() (Syed Nayyar Waris)   
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet)   
  - selftests/bpf: make multi-uprobe tests work in RELEASE=1 mode (Andrii Nakryiko)   
  - dt-bindings: net: dwmac: Document STM32 property st,ext-phyclk (Christophe Roullier)   
  - netlink: introduce type-checking attribute iteration (Johannes Berg)   
  - net: add sk_wake_async_rcu() helper (Eric Dumazet)   
  - udp: avoid calling sock_def_readable() if possible (Eric Dumazet)   
  - udp: relax atomic operation on sk->sk_rmem_alloc (Eric Dumazet)   
  - udp: annotate data-race in __udp_enqueue_schedule_skb() (Eric Dumazet)   
  - mlx5: stop warning for 64KB pages (Arnd Bergmann)   
  - net: axienet: Fix kernel doc warnings (Suraj Gupta)   
  - octeontx2-pf: remove unused variables req_hdr and rsp_hdr (Su Hui)   
  - nfc: st95hf: drop driver owner assignment (Krzysztof Kozlowski)   
  - nfc: mrvl: spi: drop driver owner assignment (Krzysztof Kozlowski)   
  - net: wwan: mhi: drop driver owner assignment (Krzysztof Kozlowski)   
  - net: microchip: encx24j600: drop driver owner assignment (Krzysztof Kozlowski)   
  - tools/net/ynl: Add extack policy attribute decoding (Donald Hunter)   
  - devlink: use kvzalloc() to allocate devlink instance resources (Jian Wen)   
  - mlx5: avoid truncating error message (Arnd Bergmann)   
  - qed: avoid truncating work queue length (Arnd Bergmann)   
  - enetc: avoid truncating error message (Arnd Bergmann)   
  - octeontx2-af: Increase maximum BPID channels (Radha Mohan Chintakuntla)   
  - net: udp: add IP/port data to the tracepoint udp/udp_fail_queue_rcv_skb (Balazs Scheidler)   
  - net: port TP_STORE_ADDR_PORTS_SKB macro to be tcp/udp independent (Balazs Scheidler)   
  - batman-adv: prefer kfree_rcu() over call_rcu() with free-only callbacks (Dmitry Antipov)   
  - batman-adv: Start new development cycle (Simon Wunderlich)   
  - nfc: st95hf: Switch to using gpiod API (Andy Shevchenko)   
  - net: phy: air_en8811h: Add the Airoha EN8811H PHY driver (Eric Woudstra)   
  - dt-bindings: net: airoha,en8811h: Add en8811h (Eric Woudstra)   
  - bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie. (Alexei Starovoitov)   
  - i40e: avoid forward declarations in i40e_nvm.c (Maciej Fijalkowski)   
  - igc: Refactor runtime power management flow (Sasha Neftin)   
  - net: intel: implement modern PM ops declarations (Jesse Brandeburg)   
  - igb: simplify pci ops declaration (Jesse Brandeburg)   
  - selftest: af_unix: Test GC for SCM_RIGHTS. (Kuniyuki Iwashima)   
  - af_unix: Replace garbage collection algorithm. (Kuniyuki Iwashima)   
  - af_unix: Detect dead SCC. (Kuniyuki Iwashima)   
  - af_unix: Assign a unique index to SCC. (Kuniyuki Iwashima)   
  - af_unix: Avoid Tarjan's algorithm if unnecessary. (Kuniyuki Iwashima)   
  - af_unix: Skip GC if no cycle exists. (Kuniyuki Iwashima)   
  - af_unix: Save O(n) setup of Tarjan's algo. (Kuniyuki Iwashima)   
  - af_unix: Fix up unix_edge.successor for embryo socket. (Kuniyuki Iwashima)   
  - af_unix: Save listener for embryo socket. (Kuniyuki Iwashima)   
  - af_unix: Detect Strongly Connected Components. (Kuniyuki Iwashima)   
  - af_unix: Iterate all vertices by DFS. (Kuniyuki Iwashima)   
  - af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb. (Kuniyuki Iwashima)   
  - af_unix: Link struct unix_edge when queuing skb. (Kuniyuki Iwashima)   
  - af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd. (Kuniyuki Iwashima)   
  - af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd. (Kuniyuki Iwashima)   
  - tcp/dccp: bypass empty buckets in inet_twsk_purge() (Eric Dumazet)   
  - net: dsa: hellcreek: Convert to gettimex64() (Kurt Kanzenbach)   
  - net/smc: make smc_hash_sk/smc_unhash_sk static (Zhengchao Shao)   
  - net: sched: make skip_sw actually skip software (Asbjørn Sloth Tønnesen)   
  - net: sched: cls_api: add filter counter (Asbjørn Sloth Tønnesen)   
  - net: sched: cls_api: add skip_sw counter (Asbjørn Sloth Tønnesen)   
  - bnxt_en: Support adding ntuple rules on RSS contexts (Pavan Chebbi)   
  - bnxt_en: Refactor bnxt_cfg_rfs_ring_tbl_idx() (Pavan Chebbi)   
  - bnxt_en: Support RSS contexts in ethtool .{get|set}_rxfh() (Pavan Chebbi)   
  - bnxt_en: Refactor bnxt_set_rxfh() (Michael Chan)   
  - bnxt_en: Add a new_rss_ctx parameter to bnxt_rfs_capable() (Pavan Chebbi)   
  - bnxt_en: Simplify bnxt_rfs_capable() (Michael Chan)   
  - bnxt_en: Refactor RSS indir alloc/set functions (Pavan Chebbi)   
  - bnxt_en: Introduce rss ctx structure, alloc/free functions (Pavan Chebbi)   
  - bnxt_en: Refactor VNIC alloc and cfg functions (Pavan Chebbi)   
  - bnxt_en: Add helper function bnxt_hwrm_vnic_rss_cfg_p5() (Pavan Chebbi)   
  - bnxt_en: Retry PTP TX timestamp from FW for 1 second (Pavan Chebbi)   
  - bnxt_en: Add a timeout parameter to bnxt_hwrm_port_ts_query() (Michael Chan)   
  - net: pcs: rzn1-miic: Init RX clock early if MAC requires it (Romain Gantois)   
  - net: phy: qcom: at803x: Avoid hibernating if MAC requires RX clock (Russell King (Oracle))   
  - net: stmmac: Signal to PHY/PCS drivers to keep RX clock on (Romain Gantois)   
  - net: stmmac: Support a generic PCS field in mac_device_info (Romain Gantois)   
  - net: stmmac: don't rely on lynx_pcs presence to check for a PHY (Maxime Chevallier)   
  - net: phylink: add rxc_always_on flag to phylink_pcs (Romain Gantois)   
  - net: phylink: add PHY_F_RXC_ALWAYS_ON to PHY dev flags (Russell King (Oracle))   
  - scx: Use the new struct_ops compatibililty mechanism (Tejun Heo)   
  - selftests/bpf: Drop settimeo in do_test (Geliang Tang)   
  - selftests/bpf: Use connect_fd_to_fd in bpf_tcp_ca (Geliang Tang)   
  - scx: Build fix after pulling bpf/for-next (Tejun Heo)   
  - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode (Martin KaFai Lau)   
  - idpf: sprinkle __counted_by{,_le}() in the virtchnl2 header (Alexander Lobakin)   
  - idpf: make virtchnl2.h self-contained (Alexander Lobakin)   
  - compiler_types: add Endianness-dependent __counted_by_{le,be} (Alexander Lobakin)   
  - selftests/bpf: Add a kprobe_multi subtest to use addrs instead of syms (Yonghong Song)   
  - selftests/bpf: Fix kprobe_multi_bench_attach test failure with LTO kernel (Yonghong Song)   
  - selftests/bpf: Add {load,search}_kallsyms_custom_local() (Yonghong Song)   
  - selftests/bpf: Refactor trace helper func load_kallsyms_local() (Yonghong Song)   
  - selftests/bpf: Refactor some functions for kprobe_multi_test (Yonghong Song)   
  - libbpf: Handle <orig_name>.llvm.<hash> symbol properly (Yonghong Song)   
  - libbpf: Mark libbpf_kallsyms_parse static function (Yonghong Song)   
  - selftests/bpf: Replace CHECK with ASSERT macros for ksyms test (Yonghong Song)   
  - selftests/bpf: Test loading bpf-tcp-cc prog calling the kernel tcp-cc kfuncs (Martin KaFai Lau)   
  - bpf: Remove CONFIG_X86 and CONFIG_DYNAMIC_FTRACE guard from the tcp-cc kfuncs (Martin KaFai Lau)   
  - bpf: Mitigate latency spikes associated with freeing non-preallocated htab (Yafang Shao)   
  - selftests/bpf: add batched tp/raw_tp/fmodret tests (Andrii Nakryiko)   
  - bpf: add bpf_modify_return_test_tp() kfunc triggering tracepoint (Andrii Nakryiko)   
  - selftests/bpf: lazy-load trigger bench BPF programs (Andrii Nakryiko)   
  - selftests/bpf: remove syscall-driven benchs, keep syscall-count only (Andrii Nakryiko)   
  - selftests/bpf: add batched, mostly in-kernel BPF triggering benchmarks (Andrii Nakryiko)   
  - selftests/bpf: rename and clean up userspace-triggered benchmarks (Andrii Nakryiko)   
  - bpf,arena: Use helper sizeof_field in struct accessors (Haiyue Wang)   
  - bpf: improve error message for unsupported helper (Mykyta Yatsenko)   
  - bpf: Add a check for struct bpf_fib_lookup size (Anton Protopopov)   
  - selftests/bpf: Add BPF_FIB_LOOKUP_MARK tests (Anton Protopopov)   
  - bpf: Add support for passing mark with bpf_fib_lookup (Anton Protopopov)   
  - net: remove gfp_mask from napi_alloc_skb() (Jakub Kicinski)   
  - qed: Drop useless pci_params.pm_cap (Bjorn Helgaas)   
  - gve: Add counter adminq_get_ptype_map_cnt to stats report (John Fraker)   
  - ravb: Add support for an optional MDIO mode (Niklas Söderlund)   
  - dt-bindings: net: renesas,etheravb: Add optional MDIO bus node (Niklas Söderlund)   
  - wifi: rtw88: station mode only for SDIO chips (Ping-Ke Shih)   
  - doc/netlink/specs: Add vlan attr in rt_link spec (Hangbin Liu)   
  - ynl: support hex display_hint for integer (Hangbin Liu)   
  - selftests: forwarding: Add a test for testing lib.sh functionality (Petr Machata)   
  - selftests: forwarding: router_mpath_nh_lib: Don't skip, xfail on veth (Petr Machata)   
  - selftests: forwarding: Mark performance-sensitive tests (Petr Machata)   
  - selftests: forwarding: Support for performance sensitive tests (Petr Machata)   
  - selftests: forwarding: Convert log_test() to recognize RET values (Petr Machata)   
  - selftests: forwarding: Have RET track kselftest framework constants (Petr Machata)   
  - selftests: lib: Define more kselftest exit codes (Petr Machata)   
  - selftests: forwarding: Change inappropriate log_test_skip() calls (Petr Machata)   
  - selftests: forwarding: Ditch skip_on_veth() (Petr Machata)   
  - selftests: forwarding: Move several selftests (Petr Machata)   
  - selftests: forwarding: ipip_lib: Do not import lib.sh (Petr Machata)   
  - selftests: forwarding: README: Document customization (Petr Machata)   
  - selftests: forwarding.config.sample: Move overrides to lib.sh (Petr Machata)   
  - selftests: net: libs: Change variable fallback syntax (Petr Machata)   
  - scx: Add selftests for scx_bpf_exit() (David Vernet)   
  - scx: Fix init_enable_count (David Vernet)   
  - scx: Add scx_bpf_exit() macro to scx/common.bpf.h (David Vernet)   
  - scx: Allow clean exits from the scheduler with scx_bpf_exit() (David Vernet)   
  - scx_flatcg: Keep cgroup rb nodes stashed (Dave Marchevsky)   
  - scx: Update conditions for WAKE_SYNC migration (David Vernet)   
  - wifi: mt76: mt7915: workaround dubious x | !y warning (Kalle Valo)   
  - wifi: mwl8k: Avoid -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva)   
  - wifi: ti: Avoid a hundred -Wflex-array-member-not-at-end warnings (Gustavo A. R. Silva)   
  - net: amd8111e: Drop unused copy of pm_cap (Bjorn Helgaas)   
  - net: pin system percpu page_pools to the corresponding NUMA nodes (Alexander Lobakin)   
  - net: remove skb_free_datagram_locked() (Eric Dumazet)   
  - net: Rename rps_lock to backlog_lock. (Sebastian Andrzej Siewior)   
  - net: Use backlog-NAPI to clean up the defer_list. (Sebastian Andrzej Siewior)   
  - net: Allow to use SMP threads for backlog NAPI. (Sebastian Andrzej Siewior)   
  - net: Remove conditional threaded-NAPI wakeup based on task state. (Sebastian Andrzej Siewior)   
  - trace: use TP_STORE_ADDRS() macro in inet_sock_set_state() (Jason Xing)   
  - trace: use TP_STORE_ADDRS() macro in inet_sk_error_report() (Jason Xing)   
  - trace: move to TP_STORE_ADDRS related macro to net_probe_common.h (Jason Xing)   
  - dns_resolver: correct module name in dns resolver documentation (Bharath SM)   
  - wifi: rtw89: disable txptctrl IMR to avoid flase alarm (Chia-Yuan Li)   
  - wifi: rtw88: coex: Prevent doing I/O during Wi-Fi power saving (Ching-Te Ku)   
  - ice: count representor stats (Michal Swiatkowski)   
  - ice: do switchdev slow-path Rx using PF VSI (Michal Swiatkowski)   
  - ice: change repr::id values (Michal Swiatkowski)   
  - ice: remove switchdev control plane VSI (Michal Swiatkowski)   
  - ice: control default Tx rule in lag (Michal Swiatkowski)   
  - ice: default Tx rule instead of to queue (Michal Swiatkowski)   
  - ice: do Tx through PF netdev in slow-path (Michal Swiatkowski)   
  - ice: remove eswitch changing queues algorithm (Michal Swiatkowski)   
  - wifi: iwlwifi: mvm: fix check in iwl_mvm_sta_fw_id_mask (Johannes Berg)   
  - selftests/bpf: Fix flaky test btf_map_in_map/lookup_update (Yonghong Song)   
  - bpf: implement insn_is_cast_user() helper for JITs (Puranjay Mohan)   
  - bpf: Avoid get_kernel_nofault() to fetch kprobe entry IP (Andrii Nakryiko)   
  - selftests/bpf: Use start_server in bpf_tcp_ca (Geliang Tang)   
  - bpf: Sync uapi bpf.h to tools directory (Yonghong Song)   
  - net: rfkill: gpio: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - wifi: mac80211: use kvcalloc() for codel vars (Johannes Berg)   
  - wifi: iwlwifi: reconfigure TLC during HW restart (Johannes Berg)   
  - wifi: iwlwifi: mvm: don't change BA sessions during restart (Johannes Berg)   
  - wifi: iwlwifi: mvm: select STA mask only for active links (Johannes Berg)   
  - wifi: iwlwifi: mvm: set wider BW OFDMA ignore correctly (Johannes Berg)   
  - wifi: iwlwifi: Add support for LARI_CONFIG_CHANGE_CMD cmd v9 (Anjaneyulu)   
  - wifi: iwlwifi: mvm: Declare HE/EHT capabilities support for P2P interfaces (Ilan Peer)   
  - wifi: iwlwifi: mvm: Remove outdated comment (Miri Korenblit)   
  - wifi: iwlwifi: add support for BZ_W (Emmanuel Grumbach)   
  - wifi: iwlwifi: Print a specific device name. (Daniel Amosi)   
  - wifi: iwlwifi: remove wrong CRF_IDs (Emmanuel Grumbach)   
  - wifi: iwlwifi: remove devices that never came out (Emmanuel Grumbach)   
  - wifi: iwlwifi: mvm: mark EMLSR disabled in cleanup iterator (Benjamin Berg)   
  - wifi: iwlwifi: mvm: fix active link counting during recovery (Benjamin Berg)   
  - wifi: iwlwifi: mvm: assign link STA ID lookups during restart (Benjamin Berg)   
  - wifi: mac80211: reactivate multi-link later in restart (Johannes Berg)   
  - wifi: mac80211: improve drop for action frame return (Johannes Berg)   
  - wifi: mac80211: don't ask driver about no-op link changes (Johannes Berg)   
  - wifi: mac80211: don't select link ID if not provided in scan request (Ayala Beker)   
  - wifi: mac80211_hwsim: Declare HE/EHT capabilities support for P2P interfaces (Ilan Peer)   
  - wifi: mac80211: clarify IEEE80211_STATUS_SUBDATA_MASK (Johannes Berg)   
  - wifi: mac80211: don't enter idle during link switch (Johannes Berg)   
  - wifi: iwlwifi: mvm: allocate STA links only for active links (Johannes Berg)   
  - wifi: iwlwifi: enable monitor on passive/inactive channels (Johannes Berg)   
  - wifi: iwlwifi: mvm: Do not warn on invalid link on scan complete (Ilan Peer)   
  - wifi: iwlwifi: remove 6 GHz NVM override (Johannes Berg)   
  - wifi: iwlwifi: mvm: don't support puncturing in 5 GHz (Johannes Berg)   
  - wifi: iwlwifi: fw: add clarifying comments about iwl_fwrt_dump_data (Johannes Berg)   
  - wifi: iwlwifi: mvm: always apply 6 GHz probe limitations (Benjamin Berg)   
  - wifi: iwlwifi: mvm: support iwl_dev_tx_power_cmd_v8 (Emmanuel Grumbach)   
  - wifi: iwlwifi: add a kunit test for PCI table duplicates (Johannes Berg)   
  - wifi: iwlwifi: mvm: add debugfs for forcing unprotected ranging request (Avraham Stern)   
  - wifi: iwlwifi: mvm: Add debugfs entry for triggering internal MLO scan (Ilan Peer)   
  - wifi: iwlwifi: mvm: Introduce internal MLO passive scan (Ilan Peer)   
  - wifi: mac80211: add support for tearing down negotiated TTLM (Ayala Beker)   
  - wifi: cfg80211: ignore non-TX BSSs in per-STA profile (Benjamin Berg)   
  - wifi: cfg80211: check BSSID Index against MaxBSSID (Benjamin Berg)   
  - wifi: mac80211: improve association error reporting slightly (Benjamin Berg)   
  - wifi: mac80211: add flag to disallow puncturing in 5 GHz (Johannes Berg)   
  - wifi: cfg80211: handle indoor AFC/LPI AP in probe response and beacon (Anjaneyulu)   
  - wifi: mac80211: handle indoor AFC/LPI AP on assoc success (Anjaneyulu)   
  - wifi: mac80211: fix BSS_CHANGED_MLD_TTLM description (Ayala Beker)   
  - wifi: mac80211: clarify the dormant/suspended links docs (Johannes Berg)   
  - wifi: mac80211_hwsim: move skip_beacons to be per link (Johannes Berg)   
  - wifi: ieee80211: fix ieee80211_mle_basic_sta_prof_size_ok() (Johannes Berg)   
  - wifi: ieee80211: check for NULL in ieee80211_mle_size_ok() (Johannes Berg)   
  - wifi: mac80211_hwsim: set link ID information during Rx (Aditya Kumar Singh)   
  - wifi: nl80211: cleanup nl80211.h kernel-doc (Jeff Johnson)   
  - wifi: nl80211: fix nl80211 uapi comment style issues (Jeff Johnson)   
  - wifi: nl80211: rename enum plink_actions (Jeff Johnson)   
  - wifi: mac80211: spectmgmt: simplify 6 GHz HE/EHT handling (Johannes Berg)   
  - wifi: mac80211: supplement parsing of puncturing bitmap (Kang Yang)   
  - wifi: iwlwifi: pcie: remove duplicate PCI IDs entry (Johannes Berg)   
  - wifi: iwlwifi: mvm: Refactor scan start (Ilan Peer)   
  - wifi: iwlwifi: mvm: advertise IEEE80211_HW_HANDLES_QUIET_CSA (Johannes Berg)   
  - wifi: iwlwifi: mvm: fix flushing during quiet CSA (Johannes Berg)   
  - wifi: iwlwifi: mvm: support wowlan notif version 4 (Shaul Triebitz)   
  - wifi: iwlwifi: mvm: skip keys of other links (Shaul Triebitz)   
  - wifi: iwlwifi: mvm: stop assuming sta id 0 in d3 (Shaul Triebitz)   
  - wifi: iwlwifi: mvm: fix the sta id in offload (Shaul Triebitz)   
  - wifi: iwlwifi: mvm: Move beacon filtering to be per link (Ilan Peer)   
  - wifi: iwlwifi: fix firmware API kernel doc (Shaul Triebitz)   
  - wifi: ath9k: eeprom: fix sparse endian warnings (Kalle Valo)   
  - wifi: ath9k: fix ath9k_use_msi declaration (Kalle Valo)   
  - wifi: ath9k: ath9k_set_moredata(): fix sparse warnings (Kalle Valo)   
  - wifi: wil6210: fix sparse warnings (Kalle Valo)   
  - wifi: wcn36xx: main: fix sparse warnings (Kalle Valo)   
  - wifi: wcn36xx: buff_to_be(): fix sparse warnings (Kalle Valo)   
  - wifi: ath6kl: fix sparse warnings (Kalle Valo)   
  - wifi: ath: Convert sprintf/snprintf to sysfs_emit (Li Zhijian)   
  - libbpf: Add new sec_def "sk_skb/verdict" (Yonghong Song)   
  - selftests/bpf: Mark uprobe trigger functions with nocf_check attribute (Jiri Olsa)   
  - selftests/bpf: Use syscall(SYS_gettid) instead of gettid() wrapper in bench (Alan Maguire)   
  - wifi: rtlwifi: always assume QoS mode in rtl8192cu (Dmitry Antipov)   
  - wifi: rtlwifi: drop WMM stubs from rtl8192cu (Dmitry Antipov)   
  - bpf-next: Avoid goto in regs_refine_cond_op() (Harishankar Vishwanathan)   
  - wifi: qtnfmac: allocate dummy net_device dynamically (Breno Leitao)   
  - wifi: mt76: mt7915: workaround too long expansion sparse warnings (Lorenzo Bianconi)   
  - wifi: ti: Convert sprintf/snprintf to sysfs_emit (Li Zhijian)   
  - wifi: b43: Convert sprintf/snprintf to sysfs_emit (Li Zhijian)   
  - wifi: ath11k: remove duplicate definitions in wmi.h (Kang Yang)   
  - wifi: ath11k: do not process consecutive RDDM event (Baochen Qiang)   
  - wifi: ath12k: Refactor error handler of Rxdma replenish (Karthikeyan Periyasamy)   
  - wifi: ath12k: Optimize the lock contention of used list in Rx data path (Karthikeyan Periyasamy)   
  - wifi: ath12k: Refactor Rxdma buffer replinish argument (Karthikeyan Periyasamy)   
  - bpftool: Clean up HOST_CFLAGS, HOST_LDFLAGS for bootstrap bpftool (Quentin Monnet)   
  - wifi: ath12k: use correct flag field for 320 MHz channels (Aloka Dixit)   
  - wifi: ath12k: remove duplicate definitions in wmi.h (Kang Yang)   
  - wifi: ath12k: fix desc address calculation in wbm tx completion (Thiraviyam Mariyappan)   
  - selftests/bpf: scale benchmark counting by using per-CPU counters (Andrii Nakryiko)   
  - bpftool: Remove unnecessary source files from bootstrap version (Quentin Monnet)   
  - bpftool: Enable libbpf logs when loading pid_iter in debug mode (Quentin Monnet)   
  - selftests/bpf: add raw_tp/tp_btf BPF cookie subtests (Andrii Nakryiko)   
  - libbpf: add support for BPF cookie for raw_tp/tp_btf programs (Andrii Nakryiko)   
  - bpf: support BPF cookie in raw tracepoint (raw_tp, tp_btf) programs (Andrii Nakryiko)   
  - bpf: pass whole link instead of prog when triggering raw tracepoint (Andrii Nakryiko)   
  - bpf: flatten bpf_probe_register call chain (Andrii Nakryiko)   
  - wifi: rtl8xxxu: enable MFP support (Martin Kaistra)   
  - selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh (Alessandro Carminati (Red Hat))   
  - selftests/bpf: Add a sk_msg prog bpf_get_ns_current_pid_tgid() test (Yonghong Song)   
  - selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test (Yonghong Song)   
  - selftests/bpf: Refactor out some functions in ns_current_pid_tgid test (Yonghong Song)   
  - selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test (Yonghong Song)   
  - bpf: Allow helper bpf_get_[ns_]current_pid_tgid() for all prog types (Yonghong Song)   
  - bpf/lpm_trie: Inline longest_prefix_match for fastpath (Jesper Dangaard Brouer)   
  - scx: Fix ops.cgroup_move() not being called on a task which went through ops.cgroup_prep_move() (Tejun Heo)   
  - scx: Improve error behavior when p->scx.cgrp_moving_from is unexpectedly NULL (Tejun Heo)   
  - bpf: Check return from set_memory_rox() (Christophe Leroy)   
  - bpf: Remove arch_unprotect_bpf_trampoline() (Christophe Leroy)   
  - libbpbpf: Check bpf_map/bpf_program fd validity (Mykyta Yatsenko)   
  - bpf: Remove unnecessary err < 0 check in bpf_struct_ops_map_update_elem (Martin KaFai Lau)   
  - wifi: mwifiex: Add missing MODULE_FIRMWARE() for SD8801 (Víctor Gonzalo)   
  - cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (Mikhail Lobanov)   
  - selftests/bpf: Remove second semicolon (Colin Ian King)   
  - net: stmmac: dwmac-rk: Remove unused of_gpio.h (Andy Shevchenko)   
  - bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() (Christophe Leroy)   
  - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() (Christophe Leroy)   
  - bpf: preserve sleepable bit in subprog info (Andrii Nakryiko)   
  - scx: Add newline after test error output (David Vernet)   
  - scx: Update selftests to use new UEI macros (David Vernet)   
  - selftests/bpf: Ensure libbpf skip all-zeros fields of struct_ops maps. (Kui-Feng Lee)   
  - libbpf: Skip zeroed or null fields if not found in the kernel type. (Kui-Feng Lee)   
  - libbpf: Prevent null-pointer dereference when prog to load has no BTF (Quentin Monnet)   
  - bpftool: Fix missing pids during link show (Yonghong Song)   
  - bpftool: Cast pointers for shadow types explicitly. (Kui-Feng Lee)   
  - wifi: ath11k: advertise P2P dev support for QCA6390/WCN6855/QCA2066 (Kang Yang)   
  - wifi: ath11k: change scan flag scan_f_filter_prb_req for QCA6390/WCN6855/QCA2066 (Kang Yang)   
  - wifi: ath11k: change WLAN_SCAN_PARAMS_MAX_IE_LEN from 256 to 512 (Kang Yang)   
  - wifi: ath11k: implement handling of P2P NoA event (Kang Yang)   
  - wifi: ath11k: add P2P IE in beacon template (Kang Yang)   
  - wifi: ath11k: change interface combination for P2P mode (Kang Yang)   
  - wifi: rtw88: SDIO device driver for RTL8723CS (Fiona Klute)   
  - wifi: rtw88: Reset 8703b firmware before download (Fiona Klute)   
  - wifi: rtw88: Add rtw8703b_tables.c (Fiona Klute)   
  - wifi: rtw88: Add rtw8703b_tables.h (Fiona Klute)   
  - wifi: rtw88: Add rtw8703b.c (Fiona Klute)   
  - wifi: rtw88: Add rtw8703b.h (Fiona Klute)   
  - wifi: rtw88: Add definitions for 8703b chip (Fiona Klute)   
  - wifi: rtw88: Debug output for rtw8723x EFUSE (Fiona Klute)   
  - wifi: rtw88: Shared module for rtw8723x devices (Fiona Klute)   
  - wifi: rtw89: 8922a: add 8922ae to Makefile and Kconfig (Ping-Ke Shih)   
  - wifi: rtw89: 8922a: update chip parameter for coex (Ching-Te Ku)   
  - wifi: rtw89: coex: Add TDMA slot parameter setting version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add TDMA version 7 (Ching-Te Ku)   
  - wifi: rtw89: coex: Add antenna setting function for RTL8922A (Ching-Te Ku)   
  - wifi: rtw89: coex: Add WiFi role info format version 8 (Ching-Te Ku)   
  - ssb: use "break" on default case to prevent warning (Randy Dunlap)   
  - scx: Use cpu_online_mask when resetting idle masks (Tejun Heo)   
  - wifi: ath11k: don't force enable power save on non-running vdevs (Baochen Qiang)   
  - ssb: drop use of non-existing CONFIG_SSB_DEBUG symbol (Randy Dunlap)   
  - dt-bindings: net: wireless: brcm,bcm4329-fmac: Add CYW43439 DT binding (Marek Vasut)   
  - bcma: convert to platform remove callback returning void (Uwe Kleine-König)   
  - wifi: brcmfmac: pcie: handle randbuf allocation failure (Duoming Zhou)   
  - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (Rand Deeb)   
  - wifi: rtw89: Correct EHT TX rate on 20MHz connection (Dian-Syuan Yang)   
  - wifi: ath11k: adjust a comment to reflect reality (Kevin Lo)   
  - scx: Trivial updates from patch splitting (Tejun Heo)   
  - wifi: ath10k: poll service ready message before failing (Baochen Qiang)   
  - wifi: ath11k: fix soc_dp_stats debugfs file permission (Jeff Johnson)   
  - wifi: ath11k: remove obsolete struct wmi_start_scan_arg (Jeff Johnson)   
  - wifi: ath12k: remove obsolete struct wmi_start_scan_arg (Jeff Johnson)   
  - scx examples: Drop stray "[-p]" from usage help messages (Tejun Heo)   
  - scx: Update .github workflow link (David Vernet)   
  - scx: Implement configurable user_exit_info dump buffer size (Tejun Heo)   
  - compat: Introduce SCX_LOAD/ATTACH() and apply to all example schedulers (Tejun Heo)   
  - compat.bpf.h: Add DEFINE_SCX_OPS() (Tejun Heo)   
  - scx: Add sched_ext_ops.exit_dump_len and add userspace plumbing (Tejun Heo)   
  - scx/compat: Apply David's suggestions (Tejun Heo)   
  - selftests/bpf: Test cases for '?' in BTF names (Eduard Zingerman)   
  - bpf: Allow all printable characters in BTF DATASEC names (Eduard Zingerman)   
  - selftests/bpf: Test case for SEC("?.struct_ops") (Eduard Zingerman)   
  - libbpf: Rewrite btf datasec names starting from '?' (Eduard Zingerman)   
  - libbpf: Struct_ops in SEC("?.struct_ops") / SEC("?.struct_ops.link") (Eduard Zingerman)   
  - libbpf: Replace elf_state->st_ops_* fields with SEC_ST_OPS sec_type (Eduard Zingerman)   
  - selftests/bpf: Verify struct_ops autoload/autocreate sync (Eduard Zingerman)   
  - libbpf: Sync progs autoload with maps autocreate for struct_ops maps (Eduard Zingerman)   
  - selftests/bpf: Test autocreate behavior for struct_ops maps (Eduard Zingerman)   
  - selftests/bpf: Bad_struct_ops test (Eduard Zingerman)   
  - selftests/bpf: Utility functions to capture libbpf log in test_progs (Eduard Zingerman)   
  - selftests/bpf: Test struct_ops map definition with type suffix (Eduard Zingerman)   
  - libbpf: Honor autocreate flag for struct_ops maps (Eduard Zingerman)   
  - libbpf: Tie struct_ops programs to kernel BTF ids, not to local ids (Eduard Zingerman)   
  - libbpf: Allow version suffixes (___smth) for struct_ops types (Eduard Zingerman)   
  - selftests/bpf: Test may_goto (Alexei Starovoitov)   
  - bpf: Add cond_break macro (Alexei Starovoitov)   
  - bpf: Recognize that two registers are safe when their ranges match (Alexei Starovoitov)   
  - bpf: Introduce may_goto instruction (Alexei Starovoitov)   
  - mm: Introduce VM_SPARSE kind and vm_area_[un]map_pages(). (Alexei Starovoitov)   
  - scx/compat.bpf.h: Replace __COMPAT_scx_bpf_kick_cpu_IDLE() with __COMPAT_SCX_KICK_IDLE (Tejun Heo)   
  - scx: Add __COMPAT_SCX_OPS_SWITCH_PARTIAL and convert scx_qmap (Tejun Heo)   
  - tools/sched_ext: Remove -p option from three schedulers (Tejun Heo)   
  - tools/sched_ext, tools/testing/selftests/sched_ext: Fix build after scx_bpf_switch_all() removal (Tejun Heo)   
  - scx: Replace scx_bpf_switch_all() with an ops flag (Tejun Heo)   
  - scx: Fix scx_ops_bypass_depth going out of sync (Tejun Heo)   
  - scx: Ignore WF_EXEC (Tejun Heo)   
  - scx: Move tools/sched_ext/Kconfig content into sched-ext.rst (Tejun Heo)   
  - scx: Improve error reporting after an early scx_bpf_error() (Tejun Heo)   
  - tools/sched_ext: Drop unnecessary stuff from .gitignore (Tejun Heo)   
  - scx: Fix spurious ops verification failure due to missing jiffies conversion (Tejun Heo)   
  - tools/sched_ext: Bring back scx_central and scx_flatcg and simplify README (Tejun Heo)   
  - scx: More cosmetics (Tejun Heo)   
  - selftests/sched_ext: Make status_to_result() never return NULL (Tejun Heo)   
  - selftests/sched_ext: Rename scx to sched_ext for consistency (Tejun Heo)   
  - scx: Cosmetic changes and comment update (Tejun Heo)   
  - scx: Reorder the two fields in scx_init_task_args (Tejun Heo)   
  - scx: Include cpu_to_kick_if_idle in debug dump (Tejun Heo)   
  - scx: Cosmetic (Tejun Heo)   
  - scx: Initialize p->scx.runnable_at to jiffies instead of INITIAL_JIFFIES (Tejun Heo)   
  - scx_sync: Sync scheduler changes from https://github.com/sched-ext/scx (Tejun Heo)   
  - tools/sched_ext: Add missing dispatch_cancel decl and drop unused ravg headers (Tejun Heo)   
  - tools/sched_ext: Drop unused stuff from .gitignore and Makefile (Tejun Heo)   
  - scx: Cosmetic (Tejun Heo)   
  - scx: Tabify (Tejun Heo)   
  - scx: Fix kfunc registration (Tejun Heo)   
  - scx: Build fixes after pulling linus#main + bpf/for-next (Tejun Heo)   
  - scx: Avoid memory leak of scx_root_kobj (David Vernet)   
  - scx: Don't wait for a work item before scheduling is restored in scx_ops_disable_workfn() (Tejun Heo)   
  - scx: Fix invalid state transition while scheduler is loaded (Tejun Heo)   
  - scx: Better invalid state transition warnings (Tejun Heo)   
  - scx: Actually allocate rq->scx.cpus_to_kick_if_idle (Tejun Heo)   
  - scx: Implement SCX_KICK_IDLE (Tejun Heo)   
  - scx: Factor out kick_one_cpu() from kick_cpus_irq_workfn() (Tejun Heo)   
  - scx: Clear scx_rq->cpus_* bits selectively and reduce memory access (Tejun Heo)   
  - scx: Use BPF macros for sched_ext kfuncs (David Vernet)   
  - scx: Only do CI runs for PRs (David Vernet)   
  - scx: Implement scx_bpf_dispatch_cancel() (Tejun Heo)   
  - scx: Print p->cpus_ptr when dumping scheduler state (Tejun Heo)   
  - scx_sync: Sync scheduler changes from https://github.com/sched-ext/scx (Tejun Heo)   
  - scx: Purge most schedulers from tools/sched_ext (Tejun Heo)   
  - scx: Update spaces -> tabs for maybe_null testcase (David Vernet)   
  - scx: Add stress-test for loading schedulers in a tight loop (David Vernet)   
  - scx: Add "maximal" scheduler testcase (David Vernet)   
  - scx: Don't print skipped tests by default (David Vernet)   
  - scx: Add testcases for transitioning in struct scx_init_task_args (David Vernet)   
  - scx: Add fork field to struct scx_init_task_args (David Vernet)   
  - scx: fix NULL pointer dereference with scx_exit_info (Andrea Righi)   
  - kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in kernfs_find_and_get_node_by_id() (Tejun Heo)   
  - kernfs: Rearrange kernfs_node fields to reduce its size on 64bit (Tejun Heo)   
  - Revert "kernfs: convert kernfs_idr_lock to an irq safe raw spinlock" (Tejun Heo)   
  - scx: rq should be locked when calling scx_ops_exit_task() from scx_cancel_fork() (Tejun Heo)   
  - scx: Dump debug info after an abort (Tejun Heo)   
  - scx: Misc scx_exit_info related updates (Tejun Heo)   
  - scx: Make scx_exit_info fields dynamically allocated (Tejun Heo)   
  - scx: Fix a couple follow ups to recent struct_ops changes (David Vernet)   
  - scx: Replace /sys/kernel/debug/sched/ext with tools/sched_ext/scx_show_state.py (Tejun Heo)   
  - scx: Add /sys/kernel/sched_ext interface (Tejun Heo)   
  - selftests/scx: Check if MAYBE_NULL works for the 2nd argument of .dispatch. (Thinker Lee)   
  - scx: Make the pointer passing to .dispatch MAYBE_NULL. (Thinker Lee)   
  - ci: add github workflow to test the sched-ext kernel (Andrea Righi)   
  - scx: Sync from scx repo (Tejun Heo)   
  - scx: Reorder scx_fork_rwsem, cpu_hotplug_lock and scx_cgroup_rwsem (Tejun Heo)   
  - scx: Narrow cpus_read_lock() critical section in scx_ops_enable() (Tejun Heo)   
  - scx: Copy scx_exit_kind to scx_test.h (David Vernet)   
  - scx: Update ddsp testcases to check for error exits (David Vernet)   
  - scx: Convert remaining testcases to use new framework (David Vernet)   
  - scx: Implement scx selftests framework (David Vernet)   
  - scx: Test vtime dispatching from ops.select_cpu() (David Vernet)   
  - scx: Keep track of enq flags in direct dispatch (David Vernet)   
  - scx: Fix direct dispatch for non-builtin DSQs (David Vernet)   
  - scx: Sync schedulers from SCX v0.1.5 (74923c6cdbc3) (Tejun Heo)   
  - scx: Make scx_task_state handling more idiomatic (Tejun Heo)   
  - Revert "scx: Avoid possible deadlock with cpus_read_lock()" (Tejun Heo)   
  - scx: Disabling scx_bpf_kick_cpu() while bypassing (Tejun Heo)   
  - scx: Bypass while PM operations are in progress (Tejun Heo)   
  - scx: s/register_ext_kfuncs()/scx_init()/ (Tejun Heo)   
  - scx: Expose bypassing state to userland (Tejun Heo)   
  - scx: Optimize scx_ops_bypass() (Tejun Heo)   
  - scx: Implement turning off bypassing (Tejun Heo)   
  - scx: Implement bypass depth and always bypass while disabling (Tejun Heo)   
  - scx: Factor out scx_ops_bypass() and s/scx_ops_disabling()/scx_ops_bypassing()/g (Tejun Heo)   
  - scx: Rename rq->scx.watchdog_list and friends to runnable_list and counterparts (Tejun Heo)   
  - scx: Use READ/WRITE_ONCE() for scx_watchdog_timeout/timestamp (Tejun Heo)   
  - scx: Set default slice for default select_cpu dispatch (David Vernet)   
  - scx: Avoid possible deadlock with cpus_read_lock() (David Vernet)   
  - scx: Make select_cpu_dfl test a bit less brittle (David Vernet)   
  - scx: Claim idle core in scx_select_cpu_dfl for nr_cpus_allowed ==1 (David Vernet)   
  - scx: Add missing DSQ fallback test files (David Vernet)   
  - scx: Move sched_ext_entity.ddsq_id out of modifiable fields (David Vernet)   
  - scx: Add init_enable_count testcase (David Vernet)   
  - scx: Rename prep_enable() and cancel_enable(), add exit_task() (David Vernet)   
  - scx: Call enable / disable on entry / exit to scx (David Vernet)   
  - scx: Always set task scx weight before enable (David Vernet)   
  - scx: Add testcases for vtime-dispatching to builtin DSQs (David Vernet)   
  - scx: Error for a priq builtin DSQ in dispatch_enqueue() (David Vernet)   
  - scx: Add selftests for new select_cpu dispatch semantics (David Vernet)   
  - scx: Add scx_bpf_select_cpu_dfl() kfunc (David Vernet)   
  - scx: Remove SCX_ENQ_LOCAL flag (David Vernet)   
  - scx: Support direct dispatching from ops.select_cpu() (David Vernet)   
  - sched_ext: fix race in scx_move_task() with exiting tasks (Andrea Righi)   
  - kernfs: convert kernfs_idr_lock to an irq safe raw spinlock (Andrea Righi)   
  - scx: Add skeleton for scx testing framework (David Vernet)   
  - scx: Add missing ) to $(error) invocation in Makefile (David Vernet)   
  - scx_sync: Sync scheduler changes from https://github.com/sched-ext/scx (David Vernet)   
  - scx: Remove now unused $rb_node from first_local_task() (Tejun Heo)   
  - scx_sync: Sync scheduler changes from https://github.com/sched-ext/scx (Tejun Heo)   
  - scx: Enforce either/or usage of DSQ FIFO/PRIQ dispatching (David Vernet)   
  - scx: Disable vtime ordering for internal DSQs (David Vernet)   
  - scx_sync: Sync scheduler changes from https://github.com/sched-ext/scx (Tejun Heo)   
  - scx: More include path and build updates (Tejun Heo)   
  - scx: Move common headers under include/scx (Tejun Heo)   
  - scx_{layered, rusty}: Minor build updates (Tejun Heo)   
  - scx_{rusty|layered}: Follow scx_utils::BpfBuilder API updates (Tejun Heo)   
  - scx_{rusty|layered}: Factor out build.rs's into scx_utils::build_helpers (Tejun Heo)   
  - scx_{rusty|layered}: Run bindgen's clang with CLANG_CFLAGS and remove explicit paths from includes (Tejun Heo)   
  - scx_{rusty|layered}: Make naming and build consistent between the two rust userland schedulers (Tejun Heo)   
  - scx_{rusty|layered}: ravg_read is now provided by scx_utils crate, remove .rs.h file (Tejun Heo)   
  - scx_{rusty|layered}: Generate skel file in $OUT_DIR (Tejun Heo)   
  - scx: Add s/uSIZE typedefs in scx_common.h (Tejun Heo)   
  - scx: Use .bpf.[sub]skel.h suffix instead of .[sub]skel.h when building schedulers (Tejun Heo)   
  - scx: Fix a straggling atomic64_set (Tejun Heo)   
  - scx: Move scx_ops_enable_state_str[] outside CONFIG_SCHED_DEBUG (Tejun Heo)   
  - rusty: Improve overview documentation as suggested by Josh Don (Tejun Heo)   
  - scx: Update print_scx_info() (Tejun Heo)   
  - scx: Update print_scx_info() comment (Tejun Heo)   
  - scx_rusty: doc comment update (Tejun Heo)   
  - scx: whitespace update (Tejun Heo)   
  - scx: Minor formatting updates and scx_bpf_error() formatting string param type update (Tejun Heo)   
  - scx: Rename scx_user_common.h to scx_common.h and include user_exit_info.h (Tejun Heo)   
  - scx: Reorder tools/sched_ext/README.md (Tejun Heo)   
  - scx: tools/sched_ext/Makefile updates (Tejun Heo)   
  - scx: s/scx_exit_type/scx_exit_kind/ s/scx_exit_info\.type/scx_exit_info\.kind/ (Tejun Heo)   
  - scx: Kill stray check_preempt_cur() prototype (Tejun Heo)   
  - scx: cpu_local_stat_show() doesn't have dependency on RT_GROUP_SCHED or EXT_GROUP_SCHED (Tejun Heo)   
  - scx: CGROUP_WEIGHT_* should be outside CONFIG_CGROUPS (Tejun Heo)   
  - scx: s/check_preempt_curr_scx/wakeup_preempt_scx/ to match new upstream naming (Tejun Heo)   
  - scx_layered: Cleanups (Tejun Heo)   
  - scx_layered: Use rust ravg_read() to read load instead of periodically updating from tick (Tejun Heo)   
  - scx_layered: s/__u[32|64]/u[32|64]/ (Tejun Heo)   
  - scx_layered: Use tp_btf/task_rename instead of fentry/__set_task_comm (Tejun Heo)   
  - scx_layered: Use the common ravg implementation (Tejun Heo)   
  - scx_layered: Updates as per David's review (Tejun Heo)   
  - scx_layered: Build fix after pulling tools/sched_ext Makefile change (Tejun Heo)   
  - scx_rusty: Misc update (Tejun Heo)   
  - tools/sched_ext/ravg: Separate out ravg_read.rs.h and update build deps (Tejun Heo)   
  - scx_common: Add message to _Static_assert in MEMBER_VPTR (Tejun Heo)   
  - scx: Print scx info when dumping stack (David Vernet)   
  - scx: Fix !CONFIG_SCHED_CLASS_EXT builds (David Vernet)   
  - scx_common: Improve MEMBER_VPTR() (Tejun Heo)   
  - tools/sched_ext/Makefile: Don't hard code scx_rusty in rust-sched _deps target (Tejun Heo)   
  - sched_ext/ravg: Drop unnecessary comment line (Tejun Heo)   
  - bpf, lpm: Fix check prefixlen before walking trie (Florian Lehner)   
  - selftests/bpf: Disable CONFIG_DEBUG_INFO_REDUCED in config.aarch64 (Anders Roxell)   
  - sched_ext: Test sched_class directly in scx_task_iter_next_filtered() (Tejun Heo)   
  - scx_rusty: Comments, parameterize ravg half life (Tejun Heo)   
  - scx_rusty: Minor cleanup (Tejun Heo)   
  - scx_rusty: Improve debug messages (Tejun Heo)   
  - ravg: Fix ravg_transfer() (Tejun Heo)   
  - rusty: Fully switch to ravg (Tejun Heo)   
  - scx_rusty: Elide reading task loads if LB isn't necessary (Tejun Heo)   
  - scx_rusty: Drop unnnecessary read_volatiles from map elem access (Tejun Heo)   
  - scx_rusty: Switch to ravg dom loads (Tejun Heo)   
  - scx_rusty: ravg WIP (Tejun Heo)   
  - scx_common: libbpf now has inline iter decls, drop them from scx_common.bpf.h (Tejun Heo)   
  - bpftool: Fix prog object type in manpage (Artem Savkov)   
  - scx: Aggregate build logic for rust schedulers (David Vernet)   
  - scx: Don't rebuild schedulers unnecessarily (David Vernet)   
  - scx: Fix skel and .bpf.o Make deps (David Vernet)   
  - scx_rusty: Implement task load transfers (Tejun Heo)   
  - ravg: Drop scx_ prefix and implement ravg_transfer(). Misc rusty changes. (Tejun Heo)   
  - selftests/bpf: Consolidate VIRTIO/9P configs in config.vm file (Manu Bretelle)   
  - selftsets/bpf: Retry map update for non-preallocated per-cpu map (Hou Tao)   
  - selftests/bpf: Export map_update_retriable() (Hou Tao)   
  - selftests/bpf: Use value with enough-size when updating per-cpu map (Hou Tao)   
  - bpf: generalize reg_set_min_max() to handle two sets of two registers (Andrii Nakryiko)   
  - bpf: prepare reg_set_min_max for second set of registers (Andrii Nakryiko)   
  - bpf: unify 32-bit and 64-bit is_branch_taken logic (Andrii Nakryiko)   
  - bpf: generalize is_branch_taken to handle all conditional jumps in one place (Andrii Nakryiko)   
  - bpf: move is_branch_taken() down (Andrii Nakryiko)   
  - bpf: generalize is_branch_taken() to work with two registers (Andrii Nakryiko)   
  - bpf: rename is_branch_taken reg arguments to prepare for the second one (Andrii Nakryiko)   
  - bpf: drop knowledge-losing __reg_combine_{32,64}_into_{64,32} logic (Andrii Nakryiko)   
  - bpf: try harder to deduce register bounds from different numeric domains (Andrii Nakryiko)   
  - bpf: improve deduction of 64-bit bounds from 32-bit bounds (Andrii Nakryiko)   
  - bpf: add special smin32/smax32 derivation from 64-bit bounds (Andrii Nakryiko)   
  - bpf: derive subreg bounds from full bounds when upper 32 bits are constant (Andrii Nakryiko)   
  - bpf: derive smin32/smax32 from umin32/umax32 bounds (Andrii Nakryiko)   
  - bpf: derive smin/smax from umin/max bounds (Andrii Nakryiko)   
  - selftests/bpf: satisfy compiler by having explicit return in btf test (Andrii Nakryiko)   
  - selftests/bpf: fix RELEASE=1 build for tc_opts (Andrii Nakryiko)   
  - selftests/bpf: Add malloc failure checks in bpf_iter (Yuran Pereira)   
  - selftests/bpf: Convert CHECK macros to ASSERT_* macros in bpf_iter (Yuran Pereira)   
  - scx_rusty: ravg in progress, load transfer incomplete (Tejun Heo)   
  - scx_rusty: Use u64 and friends consistently and move dom_ctx def to .h (Tejun Heo)   
  - scx_rusty: Introduce lookup_task_ctx() and consistently use @taskc as task_ctx var name (Tejun Heo)   
  - scx_examples: Address the interaction between yield and slice based runtime calculation (Tejun Heo)   
  - sched_ext: Add scx_layered (Tejun Heo)   
  - scx: clean sched_ext example schedulers on root mrproper target (David Vernet)   
  - scx: Add missing build/ entry to .gitignore (David Vernet)   
  - scx: Improve example schedulers README file (David Vernet)   
  - rusty: Further tweak build system (David Vernet)   
  - scx: Don't specify nightly rustup as dependency (David Vernet)   
  - rusty: Support downloading rusty deps in separate build step (David Vernet)   
  - scx: Add Make help target for explaining build options (David Vernet)   
  - scx: Add make install target for installing schedulers (David Vernet)   
  - scx: Refactor and clean up build system (David Vernet)   
  - central: Pin timer to the central CPU (David Vernet)   
  - scx: Add missing piece (David Vernet)   
  - scx: Fix typo in tickless comment (David Vernet)   
  - central: Pin timer callbacks to central CPU (David Vernet)   
  - central: Allow specifying the slice length in the central scheduler (David Vernet)   
  - rusty: Don't use bpf_cpumask_full() to set task_ctx->all_cpus (Tejun Heo)   
  - scx_rusty: Keep .bpf.o files for debugging (Tejun Heo)   
  - Revert "Merge pull request #48 from sched-ext/rusty-keep-bpf-o" (Tejun Heo)   
  - scx_rusty: Keep .bpf.o files for debugging (Tejun Heo)   
  - xxx (Tejun Heo)   
  - scx: Fix p->scx.flags corruption due to unsynchronized writes of SCX_TASK_ON_DSQ_PRIQ (Tejun Heo)   
  - debug patches and fix (Tejun Heo)   
  - scx: bpf_scx_btf_struct_access() should return -EACCES for unknown accesses (Tejun Heo)   
  - use resizing of datasec maps in examples (inwardvessel)   
  - scx: Make p->scx.ops_state atomic_long_t instead of atomic64_t (Tejun Heo)   
  - scx: Use atomic_long_t for scx_nr_rejected instead of atomic64_t (Tejun Heo)   
  - scx: Allow calling some kfuncs from tracepoints (David Vernet)   
  - scx: Use unsigned long for rq->scx.pnt_seq instead of u64 (Tejun Heo)   
  - scx: Make cpumask arg to ops.set_cpumask() const (David Vernet)   
  - scx: Rename "type" -> "exit_type" (Dan Schatzberg)   
  - scx: Adjust a couple of small things in rusty.bpf.c (David Vernet)   
  - scx: Update clang dependency to 16.0 (David Vernet)   
  - scx: Fix README entry about rusty (David Vernet)   
  - scx: List bpf_cpumask_any_*_distribute() kfuncs in header (David Vernet)   
  - scx: Update kfree_rcu() to take rcu argument (David Vernet)   
  - scx: Rename scx_atropos to scx_rusty (David Vernet)   
  - scx: Fix some clippy warnings in Atropos (David Vernet)   
  - scx: Add new SCX_PANIC* macros (David Vernet)   
  - scx: Convert user space schedulers to use __{s,u}{32,64} types (David Vernet)   
  - scx: atropos: Use fb-procfs crate (Dan Schatzberg)   
  - scx: Make task_on_scx() take const task_struct (David Vernet)   
  - Update various dependencies (Daniel Müller)   
  - scx_pair: Fix custom stride error handling (Tejun Heo)   
  - SCX: Always imply NOCLOCK in sched_deq_and_put_task/sched_enq_and_set_task() (Tejun Heo)   
  - SCX: Build fixes when !CONFIG_SCHED_SMT or !CONFIG_CGROUP_SCHED (Tejun Heo)   
  - SCX: Drop implicit DEQUEUE_NOCLOCK from sched_deq_and_put_task() (Tejun Heo)   
  - sched, SCX: Drop SCHED_CHANGE_BLOCK (Tejun Heo)   
  - SCX: A couple cosmetic updates (Tejun Heo)   
  - SCX: Drop _example prefix from scheduler names and make the naming more consistent (Tejun Heo)   
  - SCX: Use "idle core" instead of "whole cpu" (Tejun Heo)   
  - SCX: Typo fix (Tejun Heo)   
  - SCX: s/task_on_scx()/task_should_scx()/ and add new task_on_scx() which tests current state (Tejun Heo)   
  - SCX: test_and_clear_cpu_idle() should always clear SMT mask (Tejun Heo)   
  - atropos: Use Instant instead of SystemTime (David Vernet)   
  - SCX: atropos: Update kicking during task migration across domains (Tejun Heo)   
  - SCX: atropos: Add scx_bpf_pick_any_cpu() and use it in atropos (Tejun Heo)   
  - SCX: Improve comments (Tejun Heo)   
  - SCX: Fix error handling in atropos_select_cpu() (Tejun Heo)   
  - SCX: Move idle_masks.smt clearing into test_and_clear_idle_cpu() (Tejun Heo)   
  - SCX: Use sched_smt_active() instead of testing sched_smt_present directly (Tejun Heo)   
  - SCX: atropos: Clean up offline CPU handling (Tejun Heo)   
  - SCX: atropos: Improve target CPU selection (Tejun Heo)   
  - SCX: atropos: Reorganize Scheduler (Tejun Heo)   
  - SCX: atropos: Replace fb_procfs with MyProcStat (Tejun Heo)   
  - SCX: atropos: Adjust load balance and greedy params (Tejun Heo)   
  - SCX: atropos: Add --balanced-kworkers (Tejun Heo)   
  - SCX: atropos: Fix vtime initialization (Tejun Heo)   
  - SCX: atropos: Fix execution bubble caused by enqueueing while on a foreign CPU (Tejun Heo)   
  - SCX: atropos: Fix padding size in struct pcpu_ctx (Tejun Heo)   
  - SCX: Disable ttwu_queue for tasks on SCX (Tejun Heo)   
  - SCX: atropos: Factor out / relocate utility functions (Tejun Heo)   
  - SCX: atropos: Replace bpf_loop() usages with the new inline loops (Tejun Heo)   
  - SCX: atropos: Cleanup the names of task_set_dsq() and friends (Tejun Heo)   
  - SCX: atropos: Clean up stats (Tejun Heo)   
  - SCX: atropos: A bunch of minor and cosmetic updates (Tejun Heo)   
  - SCX: simple, flatcg: Fix p->scx.dsq_vtime initialization (Tejun Heo)   
  - SCX: Prefer wholly idle CPUs in SMT machines (Tejun Heo)   
  - SCX: Implement SCX_PICK_IDLE_CPU_WHOLE (Tejun Heo)   
  - SCX: Remove scx_has_idle_cpus (Tejun Heo)   
  - scx: Update schedulers to use new bpf_rbtree semantics (David Vernet)   
  - sched_ext: Update code comment as scx_bpf_switch_all doesn't require 'into_scx' (shun159)   
  - sched_ext: Documentation: scx_bpf_dispatch() requires a slice (Eishun Kondoh)   
  - scx: Auto-release example scheduler struct_ops on program exit (David Vernet)   
  - scx: Enable .link struct_ops in sched_ext (David Vernet)   
  - Revert "scx: Auto-release example scheduler struct_ops on program exit" (David Vernet)   
  - scx: Auto-release example scheduler struct_ops on program exit (David Vernet)   
  - scx: Fix scx_example_userland missing NULL check (David Vernet)   
  - atropos: Remove static libclang dependency (Dan Schatzberg)   
  - scx: Further document example schedulers (David Vernet)   
  - scx: Call ops.set_weight() with rq lock on scx_post_fork() path (David Vernet)   
  - Atropos: Use slice_ns instead of SCX_SLICE_DFL (David Vernet)   
  - Atropos: Use slice_ns in BPF instead of slice_us (David Vernet)   
  - sched_ext: Add a rust userspace hybrid example scheduler (Dan Schatzberg)   
  - sched_ext: Add a basic, userland vruntime scheduler (David Vernet)   
  - sched_ext: Documentation: scheduler: Document extensible scheduler class (Tejun Heo)   
  - sched_ext: Add vtime-ordered priority queue to dispatch_q's (Tejun Heo)   
  - sched_ext: Implement core-sched support (Tejun Heo)   
  - sched_ext: Implement sched_ext_ops.cpu_online/offline() (Tejun Heo)   
  - sched_ext: Implement sched_ext_ops.cpu_acquire/release() (David Vernet)   
  - sched_ext: Implement SCX_KICK_WAIT (David Vernet)   
  - sched_ext: Add cgroup support (Tejun Heo)   
  - sched_ext: Track tasks that are subjects of the in-flight SCX operation (Tejun Heo)   
  - sched_ext: Implement tickless support (Tejun Heo)   
  - sched_ext: Add task state tracking operations (Tejun Heo)   
  - sched_ext: Make watchdog handle ops.dispatch() looping stall (Tejun Heo)   
  - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support (Tejun Heo)   
  - sched_ext: Allow BPF schedulers to switch all eligible tasks into sched_ext (Tejun Heo)   
  - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT (Tejun Heo)   
  - sched_ext: Implement runnable task stall watchdog (David Vernet)   
  - sched_ext: Add sysrq-S which disables the BPF scheduler (Tejun Heo)   
  - sched_ext: Add scx_example_simple and scx_example_qmap example schedulers (Tejun Heo)   
  - sched_ext: Implement BPF extensible scheduler class (Tejun Heo)   
  - sched_ext: Add boilerplate for extensible scheduler class (Tejun Heo)   
  - sched: Add normal_policy() (Tejun Heo)   
  - sched: Add @reason to sched_class->rq_{on|off}line() (Tejun Heo)   
  - sched: Enumerate CPU cgroup file types (Tejun Heo)   
  - sched: Expose css_tg(), __setscheduler_prio() and SCHED_CHANGE_BLOCK() (Tejun Heo)   
  - sched: Factor out cgroup weight conversion functions (Tejun Heo)   
  - sched: Add sched_class->switching_to() and expose check_class_changing/changed() (Tejun Heo)   
  - sched: Add sched_class->reweight_task() (Tejun Heo)   
  - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork() (Tejun Heo)   
  - sched: Restructure sched_class order sanity checks in sched_init() (Tejun Heo)   
  - sched: Encapsulate task attribute change sequence into a helper macro (Tejun Heo)   
  - cgroup: Implement cgroup_show_cftypes() (Tejun Heo)


author: Tao Liu <ltao@redhat.com> - 2.0.23-3
changelog:
  - Update eppic to latest upstream snapshot
  - Update crashkernel-howto.txt
  - Remove references to systemd-sysv-convert
  - kdump/ppc64: suppress the error message "Could not find a registered notification tool" from servicelog_notify
  - fadump: improve fadump-howto.txt about remote dump target setup
  - Don't exit 1 from 92-crashkernel.install if zipl is absent (#1993505)
  - Document/kexec-kdump-howto.txt: improve notes for kdump_pre and kdump_post scripts


author: Tao Liu <ltao@redhat.com> - 2.0.23-4
changelog:
  - Set zstd as the default compression method for kdump initrd
  - kdump-lib.sh: Escape '|' for 'failure_action|default' in is_dump_to_rootfs
  - dracut-early-kdump-module-setup.sh: install xargs and kdump-lib-initramfs.sh
  - update crashkernel-howto
  - set up kernel crashkernel for osbuild in kernel hook
  - reset kernel crashkernel for the special case where the kernel is updated right after kexec-tools
  - try to reset kernel crashkernel when kexec-tools updates the default crashkernel value
  - introduce the auto_reset_crashkernel option to kdump.conf
  - rewrite reset_crashkernel to support fadump and to used by RPM scriptlet
  - fix incorrect usage of rpm-ostree to update kernel command line parameters
  - add helper functions to get kernel path by kernel release and the path of current running kernel
  - add helper functions to get dump mode
  - add a helper function to read kernel cmdline parameter from grubby --info
  - provide kdumpctl get-default-crashkernel for kdump_anaconda_addon and RPM scriptlet
  - factor out kdump_get_arch_recommend_crashkernel
  - update default crashkernel value
  - ppc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs


author: Tao Liu <ltao@redhat.com> - 2.0.23-5
changelog:
  - Set zstd as recommented for kexec-tools
  - fix "kdump: Invalid kdump config option auto_reset_crashkernel" error
  - use grep -s to suppress error messages about nonexistent or unreadable files


author: Tao Liu <ltao@redhat.com> - 2.0.23-6
changelog:
  - Revert "Remove trace_buf_size and trace_event from the kernel bootparameters of the kdump kernel"
  - fix broken kdump_get_arch_recommend_size
  - remove the upper bound of 102400T for the range in default crashkernel
  - fix the error of parsing the container environ variable for osbuild
  - mkdumprd (RHEL-only): add nvme module by force
  - Remove dropped patches
  - s390: handle R_390_PLT32DBL reloc entries in machine_apply_elf_rel()
  - spec: add hostname.rpm into Recommends list
  - move variable FENCE_KDUMP_SEND from kdump-lib.sh to kdump-lib-initramfs.sh


author: Tao Liu <ltao@redhat.com> - 2.0.23-7
changelog:
  - fix incorrect usage of _get_all_kernels_from_grubby
  - fix the mistake of swapping function parameters of read_proc_environ_var


author: Tao Liu <ltao@redhat.com> - 2.0.23-9_1
changelog:
  - try to update the crashkernel in GRUB_ETC_DEFAULT after kexec-tools updates the default crashkernel value
  - address the case where there are multiple values for the same kernel arg


author: EL Errata <el-errata_ww@oracle.com> - 2.0.23-9_1.0.1
changelog:
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Added orabug32404661-Avoid-duplicate-ip-single-dhcp-option.patch [Orabug: 32404661]


author: Brian Maly <brian.maly@oracle.com> - 2.0.23-9_1.0.2
changelog:
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.1 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]


author: Tao Liu <ltao@redhat.com> - 2.0.23-10
changelog:
  - try to update the crashkernel in GRUB_ETC_DEFAULT after kexec-tools updates the default crashkernel value
  - address the case where there are multiple values for the same kernel arg
  - s390: add support for --reuse-cmdline
  - use slurp_proc_file() in get_command_line()
  - add slurp_proc_file()
  - s390: use KEXEC_ALL_OPTIONS
  - s390: add variable command line size
  - util_lib/elf_info: harden parsing of printk buffer
  - print error when reading with unsupported compression
  - use cycle detection when parsing the prink log_buf
  - use pointer arithmetics for dump_dmesg
  - add generic cycle detection


author: Tao Liu <ltao@redhat.com> - 2.0.24-1
changelog:
  - Rebase kexec-tools to v2.0.24
  - Rebase makedumpfile to 1.7.1
  - Avoid false-positive mem_section validation with vmlinux


author: Tao Liu <ltao@redhat.com> - 2.0.24-2
changelog:
  - remove the upper bound of default crashkernel value example
  - update fadump-howto
  - update kexec-kdump-howto
  - update crashkernel-howto
  - add man documentation for kdumpctl get-default-crashkernel
  - improve get_recommend_size
  - fix a calculation error in get_system_size


author: Tao Liu <ltao@redhat.com> - 2.0.24-4
changelog:
  - crashkernel: optimize arm64 reserved size if PAGE_SIZE=4k
  - kdump-lib.sh: Check the output of blkid with sed instead of eval


author: John Mcwalters <john.mcwalters@oracle.com> - 2.0.24-5.0.1
changelog:
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.1 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Added orabug32404661-Avoid-duplicate-ip-single-dhcp-option.patch [Orabug: 32404661]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34240246-Update-UEK-reserved-sizes.patch [Orabug: 34240246]
  - Add back kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 22780125]
  - Add back kexec-tools-2.0.17-dracut-module-setup-ip_dhcp-avoid-dup-config.patch [Orabug: 29518713]


author: Tao Liu <ltao@redhat.com> - 2.0.25-6
changelog:
  - Simplify setup_znet by copying connection profile to initrd
  - Wait for the network to be truly ready before dumping vmcore
  - Address the cases where a NIC has a different name in kdump kernel
  - Reduce kdump memory consumption by only installing needed NIC drivers
  - Reduce kdump memory consumption by not letting NetworkManager manage unneeded network interfaces
  - Set up kdump network by directly copying NM connection profile to initrd
  - Stop dracut 35network-manager from running nm-initrd-generator
  - Apply the timeout configuration of nm-initrd-generator
  - Determine whether IPv4 or IPv6 is needed
  - Add functions to copy NetworkManage connection profiles to the initramfs
  - Fix error for vlan over team network interface


author: Tao Liu <ltao@redhat.com> - 2.0.25-8
changelog:
  - kexec-tools: ppc64: remove rma_top limit
  - kdumpctl: Optimize _find_kernel_path_by_release regex string
  - kdump.conf: use a simple generator script to maintain


author: Tao Liu <ltao@redhat.com> - 2.0.25-9
changelog:
  - Add virtiofs to kdump supported-kdump-targets.txt
  - dracut-module-setup.sh: stop overwriting dracut's trap handler


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-10
changelog:
  - Update supported-kdump-targets.txt
  - dracut-module-setup.sh: skip installing driver for the loopback interface
  - Don't try to update crashkernel when bootloader is not installed
  - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking
  - fadump: use 'zstd' as the default compression method
  - fadump: fix default initrd backup and restore logic
  - fadump: add a kernel install hook to clean up fadump initramfs
  - fadump: avoid status check while starting in fadump mode
  - spec: only install mkfadumprd for ppc
  - fadump: preserve file modification time to help with hardlinking
  - fadump: do not use squash to reduce image size


author: Tao Liu <ltao@redhat.com> - 2.0.25-12
changelog:
  - Reset crashkernel to default value if newly installed kernel has crashkernel=auto
  - Use the correct command to get architecture


author: Tao Liu <ltao@redhat.com> - 2.0.25-13
changelog:
  - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
  - kdump-lib: attempt to fix BOOT_IMAGE detection
  - kdump-lib: change how ostree based systems are detected
  - kdump-lib: clear up references to Atomic/CoreOS


author: EL Errata <el-errata_ww@oracle.com> - 2.0.25-13.0.1
changelog:
  - Update UEK aarch64 reserved sizes for UEK7 kernels [Orabug: 34663083]
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]


author: Tao Liu <ltao@redhat.com> - 2.0.26-2
changelog:
  - Rebase makedumpfile to upstream latest(8e8b8814be1)
  - Show how much time kdump has waited for the network to be ready
  - Tell nmcli to not escape colon when getting the path of connection profile


author: Tao Liu <ltao@redhat.com> - 2.0.26-3
changelog:
  - Rebase makedumpfile to v1.7.3
  - kdumpctl: lower the log level in reset_crashkernel_for_installed_kernel


author: Tao Liu <ltao@redhat.com> - 2.0.26-4
changelog:
  - kdumpctl: Add basic UKI support
  - kdumpctl: Move temp file in get_kernel_size to global temp dir
  - kdumpctl: Move get_kernel_size to kdumpctl
  - kdump-lib: fix prepare_cmdline
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS


author: Tao Liu <ltao@redhat.com> - 2.0.26-5
changelog:
  - Add lvm thin provision to kdump supported-kdump-targets.txt
  - mkdumprd: Use the correct syntax to redirect the stderr to null


author: Tao Liu <ltao@redhat.com> - 2.0.26-6
changelog:
  - kdumpctl: Fix the matching of plus symbol by grep's EREs
  - kdump-lib: Evaluate the memory consumption by smmu and mlx5 separately
  - kdump-lib: add support for 64K aarch64
  - kdump-lib: Introduce parse_kver_from_path() to get kernel version from its path name
  - kdump-lib: Introduce a help function _crashkernel_add()
  - Simplify the management of the kernel parameter crashkernel
  - kdump-lib: fix the matching pattern for debug-kernel
  - kdump-lib: always specify version in is_squash_available


author: Tao Liu <ltao@redhat.com> - 2.0.26-7
changelog:
  - kdumpctl: Fix temporary directory location
  - kdump-lib: Match 64k debug kernel in prepare_kdump_bootinfo()


author: EL Errata <el-errata_ww@oracle.com> - 2.0.26-8.0.1
changelog:
  - backport of upstream crash hotplug support [Orabug: 35884469]
  - Insert new udev rules for crash hotplug into 98-kexec.rules [Orabug: 35801595]
  - Handle xen_netfront in dracut module setup [Orabug: 35615400]
  - Update UEK aarch64 reserved sizes for UEK7 kernels [Orabug: 34663083]
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]


author: Tao Liu <ltao@redhat.com> - 2.0.27-3
changelog:
  - Rebase makedumpfile to v1.7.4
  - powerpc: update kdumpctl to load kernel signing key for fadump
  - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded


author: Tao Liu <ltao@redhat.com> - 2.0.27-4
changelog:
  - kdump-lib.sh: add extra 64M to default crashkernel if sme/sev is active
  - Allow _crashkernel_add to address larger memory ranges
  - kdump-lib: Harden _crashkernel_add


author: Tao Liu <ltao@redhat.com> - 2.0.27-7
changelog:
  - Explain the auto_reset_crashkernel option in more details
  - Use the same /etc/resolve.conf in kdump initrd if it's managed manually


author: Tao Liu <ltao@redhat.com> - 2.0.27-8.2
changelog:
  - Install the driver of physical device for a SR-IOV virtual device
  - Try to install PHY and MDIO bus drivers explicitly


author: Darren Archibald <darren.archibald@oracle.com> - 2.0.28-1.0.6
changelog:
  - Fix KEXEC_KERNEL_CHECK IMA rule & valid PE signature regression [Orabug: 36567412]
  - Include support for virt-what [Orabug: 36517679]
  - backport of upstream crash hotplug support [Orabug: 35884469]
  - Insert new udev rules for crash hotplug into 98-kexec.rules [Orabug: 35801595]
  - Handle xen_netfront in dracut module setup [Orabug: 35615400]
  - Update UEK aarch64 reserved sizes for UEK7 kernels [Orabug: 34663083]
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]


author: Tao Liu <ltao@redhat.com> - 2.0.27-10
changelog:
  - mkdumprd: Fix makedumpfile parameter check.
  - Install the driver of physical device for a SR-IOV virtual device
  - Try to install PHY and MDIO bus drivers explicitly


author: Tao Liu <ltao@redhat.com> - 2.0.27-13
changelog:
  - kdump-lib: Drop 'file' dependency in is_uki
  - kdumpctl.8: Add description to reset-crashkernel --reboot
  - kdumpctl: Fix misleading message and erratic reboot in reset_crashkernel
  - kdumpctl: Drop default kexec '-d' option


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: EL Errata <el-errata_ww@oracle.com> - 28-10.0.1
changelog:
  - weak-modules: Fix add_kernel to handle suffix [Orabug: 34623248] (Todd Vierling)
  - add weak-modules patch for [Orabug: 26672773]


author: - Andy Walsh <awalsh@redhat.com> - 8.2.0.18-46
changelog:
  - Temporarily dropped a check that validates the logical size specified from
    the table line.
  - Related: rhbz#2071648


author: - Andy Walsh <awalsh@redhat.com> - 8.2.0.21-46
changelog:
  - Fixed a bug where I/O errors on data reads from below a vdo were ignored.
  - Resolves: rhbz#2125708


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 8.2.1.6-102.el9
changelog:
  - Reverted commits from RHEL-17420.
  - Reverts: RHEL-17420
  - Rebuilt for latest kernel.
  - Resolves: RHEL-23075


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 8.2.4.15-136.el9
changelog:
  - Fixed null pointer error with timed-out dedupt contexts.
  - Made timed-out dedupe contexts available for reuse sooner.
  - Added build support for more kernel versions.
  - Resolves: RHEL-42515


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
  - Resolves: rhbz#2209715
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
  - Resolves: rhbz#2209717
  - Allow to set PAC ticket signature as optional
  - Resolves: rhbz#2211388


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45401 RHEL-45390


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Dodji Seketeli <dodji@redhat.com> - 2.1-1
changelog:
  - Update to upstream 2.1 release.
  - Remove the now useless text about getting the source from git.
  - Update the license reference.
  - Resolves: rhbz#1944096


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-34564


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-4
changelog:
  - Memory leaks fixes backport
    Resolves: rhbz#1938757
  - Fix default key size for non XTS ciphers
    Resolves: rhbz#1954005


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-6
changelog:
  - Add workarounds for some LVM test issues
    Resolves: rhbz#1976174
  - Adapt tests to xfsprogs 5.12 changes
    Resolves: rhbz#1976176


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-10
changelog:
  - Fix reading statistics for VDO pools with VDO 8
    Resolves: rhbz#1994220
  - vdo_stats: Default to 100 % savings for invalid savings values
    Resolves: rhbz#2025880
  - Add support for creating and unlocking standalone integrity devices
    Resolves: rhbz#2011365


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: EL Errata <el-errata_ww@oracle.com> - 0.65.0-5.0.1
changelog:
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Lukas Hrazky <lhrazky@redhat.com> - 0.65.0-5.1
changelog:
  - advisory upgrade: filter out advPkgs with different arch
  - Add obsoletes to filtering for advisory candidates


author: EL Errata <el-errata_ww@oracle.com> - 0.65.0-5.1.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.67.0-1
changelog:
  - Fix handling transaction id in resolveTransactionItemReason (RhBug:2010259,2053014)
  - Remove deprecated assertions (RhBug:2027383)
  - Skip rich deps for autodetection of unmet dependencies (RhBug:2033130, 2048394)
  - Increase required rpm version since we use `rpmdbCookie()`
  - Add 'loongarch' support
  - Use dnf solv userdata to check versions and checksum (RhBug:2027445)
  - context: Substitute all repository config options (RhBug:2076853)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: EL Errata <el-errata_ww@oracle.com> - 0.69.0-12.0.1
changelog:
  - Recognise new kernel-uek RPMs as multiversion and installonlypkg [Orabug: 36053872]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-11
changelog:
  - Fix: syslinux: failed to create ldlinux.sys
    resolves: rhbz#1990720, rhbz#1950627
  - Fix license files.
  - Move appliance to separate subpackage
    resolves: rhbz#1989514


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.46.1-1
changelog:
  - Rebase to new stable branch version 1.46.1
    resolves: rhbz#2011711
  - Add --enable-appliance-format-auto
  - Add support for Kylin
  - Document lazy-counters setting cannot be changed in XFS version 5
    resolves: rhbz#2025944, rhbz#1995391, rhbz#2024022
  - Require libvirt-daemon-driver-storage-core
    resolves: rhbz#2018358
  - Fix usage of strerror_r which caused corrupted error messages
    resolves: rhbz#2030396


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Darren Archibald <darren.archibald@oracle.com> - 1.46.1-3.0.1
changelog:
  - Replace upstream references from a description tag
  - Fix build on Oracle Linux [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX correspeonding to ol


author: EL Errata <el-errata_ww@oracle.com> - 1.46.1-4.0.1
changelog:
  - Add btrfs-progs to the packages installed in the appliance [Orabug: 34137448]
  - Replace upstream references from a description tag
  - Fix build on Oracle Linux [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX correspeonding to ol


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-2
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453
  - Add zstd support to guestfs_file_architecture
    resolves: rhbz#2117004


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-4
changelog:
  - New API: guestfs_inspect_get_build_id
  - Add support for detecting Windows >= 10, returned through osinfo
    resolves: rhbz#2012658


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2
changelog:
  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4
changelog:
  - Resolves: rhbz#2075539 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-9.0.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4.1
changelog:
  - Resolves: rhbz#2072959 - Use right sdap_domain in ad_domain_info_send [rhel-9.0.0.z]
  - Resolves: rhbz#2089251 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-9.0.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#2072640 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2070189 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2070138 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2065098 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2062716 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2056482 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#1937895 - SSSD update prompts for smartcard pin twice - After update to 7.9
  - Resolves: rhbz#1925559 - [RFE] Implement time logging for the LDAP queries and warning of high queries time
  - Resolves: rhbz#1915564 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#1859751 - [RFE] Allow SSSD to use anonymous pkinit for FAST
  - Resolves: rhbz#1749279 - 2FA prompting setting ineffective
  - Resolves: rhbz#1661055 - sssd fails GPO-based access if AD have setup with Japanese language
  - Resolves: rhbz#1245367 - [RFE] Implement memory cache for SID requests to improve performance


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.1
changelog:
  - Resolves: rhbz#2128902 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.2
changelog:
  - Resolves: rhbz#2141830 - SSS_CLIENT: fix thread unsafe access to get*ent structs. [rhel-9.1.0.z]
  - Resolves: rhbz#2139870 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-9.1.0.z]
  - Resolves: rhbz#2142960 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-9.1.0.z]
  - Resolves: rhbz#2148988 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.3
changelog:
  - Resolves: rhbz#2152884 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Darren Archibald <darren.archibald@oracle.com> - 2.8.2-3
changelog:
  - Resolves: rhbz#2196839 - [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2219353 - SSSD enters failed state after heavy load in the system.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237301 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Darren Archibald <darren.archibald@oracle.com> - 2.9.1-4.0.1.5
changelog:
  - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [RHEL-19213]
  - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [RHEL-19993]
  - SSSD GPO lacks group resolution on hosts [RHEL-21089]
  - Make sure 8.9.z/9.3.z doesn't build 'passkey' code [RHEL-21165]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Diaa Sami <disami@redhat.com> - 2.9.4-6.1
changelog:
  - Resolves: RHEL-33896 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.9.5-4.4
changelog:
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Steve Dickson <steved@redhat.com> 2.5.4-3
changelog:
  - mount.nfs: insert 'sloppy' at beginning of the options (bz 1987070)
  - spec: Fix dependency problems with nfsdclnts (bz 1924708)
  - nfsdcltrack: Fix printf format (bz 1995316)


author: Alice Mitchell <ajmitchell@redhat.com> 2.5.4-5
changelog:
  - triggerun doesn't work correctly unless the epoch is given (bz 1937811)
  - Restored the nfs-utils-2.5.4-mount-sloppy.patch (bz 1987070)
  - General memory fixes (bz 1938822)


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: EL Errata <el-errata_ww@oracle.com> - 2.5.4-26.0.1
changelog:
  - Disable nfs-utils-2.5.4-gssd-bad-integ-error-support.patch [Orabug: 36563788]
  - spec: remove multiple warnings when upgrading nfs-utils with gssproxy [Orabug: 36044562]


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: EL Errata <el-errata_ww@oracle.com> - 7.1.8.1-11.0.1
changelog:
  - Replace colors with Oracle colors [Orabug: 32120093]
  - Build with --with-vendor="Oracle America, Inc."
  - Added the --with-hamcrest option to configure.


author: Darren Archibald <darren.archibald@oracle.com> - 1:7.1.8.1-12.0.1
changelog:
  - Replace colors with Oracle colors [Orabug: 32120093]
  - Added the --with-hamcrest option to configure.


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: EL Errata <el-errata_ww@oracle.com> - 2.15.2-6.0.1
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla
  - Remove options interacting with Bugzilla [Orabug: 32895080]


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Update to 4.4. Resolves: rhbz#1975812
  - Port compiler warning suppression by Paul Wouters:
    https://src.fedoraproject.org/rpms/libreswan/c/8d7f98d41444ac77c562f735b4b93038f5346ce2?branch=rawhide


author: Daiki Ueno <dueno@redhat.com> - 4.4-3
changelog:
  - Backport removal gethostbyname2 uses from the upstream
  - Fix issues spotted by covscan (rhbz#1938784)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-7.el9_3.1
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-3
changelog:
  - selinux_check_passwd_access_internal(): respect deny_unknown
  - Silence -Wstringop-overflow warning from gcc 10.3.1
  - Fixed misc compiler and static analyzer findings


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-106
changelog:
  - resolves: rhbz#2065376 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.
  - resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Tomas Popela <tpopela@redhat.com> - 2.72.0-8.el9_5.1
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Resolves: RHEL-67080


author: Tomas Popela <tpopela@redhat.com> - 2.72.0-8.el9_5.2
changelog:
  - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data
  - Resolves: RHEL-67068


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-8.3
changelog:
  - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
    Resolves: RHEL-76381


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Fix static analyzer issues in rhbz#1938795
  - Rebase to version 0.9.6
  - Resolves: rhbz#1994607, rhbz#1938795, rhbz#2009669


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Tom Stellard <tstellar@redhat.com> - 1.2.6-2
changelog:
  - Add BuildRequires: gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-2
changelog:
  - Fix FAT mkfs with dosfstools >= 4.2
  - udiskslinuxdriveata: Use GTask to apply configuration in a thread
  - Limit allowed module names
  - 80-udisks2.rules: Ignore Apple boot partition from livecd-tools


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-6
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing (RHEL-7386)
  - qemu: virtiofs: set correct label when creating the socket (RHEL-7386)
  - qemu: virtiofs: error out if getting the group or user name fails (RHEL-7386)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-6.1.el9_4
changelog:
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441, RHEL-25081)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-6.6.el9_4
changelog:
  - vmx: Do not require DVS Port ID (RHEL-45520)
  - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46595)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-7
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - qemu: Fix migration with custom XML (RHEL-30622)


author: Jiri Denemark <jdenemar@redhat.com> - 10.3.0-1
changelog:
  - Rebased to libvirt-10.3.0 (RHEL-29642)
  - The rebase also fixes the following bugs:
      RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
      RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
      RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-7489)
  - The rebase also fixes the following bugs:
      RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
      RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
      RHEL-39400


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-1
changelog:
  - Rebased to libvirt-10.5.0 (RHEL-21381)
  - The rebase also fixes the following bugs:
      RHEL-23833, RHEL-29642, RHEL-37542, RHEL-39969, RHEL-40899
      RHEL-43309


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-2
changelog:
  - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
  - tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
  - tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
  - qemu: migration: allow migration for virtiofs (RHEL-40135)
  - virt-host-validate: Drop extra "PASS" (RHEL-46868)
  - qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-6
changelog:
  - udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235) (CVE-2024-8235, RHEL-55373)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7
changelog:
  - qemu: Refactor default panic model (RHEL-56451)
  - qemu: Sometimes the default panic model doesn't exist (RHEL-56451)
  - qemu: Use pvpanic by default on aarch64 (RHEL-56451)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7.1.el9_5
changelog:
  - qemu: migration: Pre-create QCOW2 images for non-shared storage with 0 allocation (RHEL-61177)
  - virTypedParamsFilter: Adjust return type and docs (RHEL-61177)
  - virTypedParamsGetStringList: Refactor and adjust docs (RHEL-61177)
  - virTypedParamsFilter: Introduce option to filter also by type (RHEL-61177)
  - virTypedParamsGetStringList: Ensure that returned array is NULL if there are no matching fields (RHEL-61177)
  - virTypedParamsGetStringList: Ensure that returned string list is NULL-terminated (RHEL-61177)
  - qemuMigrationSrcBeginPhaseBlockDirtyBitmaps: Use qemuMigrationAnyCopyDisk() (RHEL-61177)
  - qemu: migration: Don't log 'nmigrate_disks' (RHEL-61177)
  - qemu: migration: Avoid use of 'nmigration_disks' (RHEL-61177)
  - qemu: migration: Extract validation of disk target list (RHEL-61177)
  - qemu: migration: Remove 'nmigration_disks' variable from all places (RHEL-61177)
  - qemu: Introduce and wire in 'VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES' (RHEL-61177)
  - virsh: Add support for VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES migration parameter (RHEL-61177)
  - qemu: migration: Fix blockdev config with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES (RHEL-61177)
  - docs: Add warning about using a cleared image with VIR_MIGRATE_PARAM_MIGRATE_DISKS_DETECT_ZEROES_ZEROES (RHEL-61177)
  - util: Look for newer name of cpu wait time statistic (RHEL-61511)
  - vmx: Allow '*' to appear in VMX file keys (RHEL-58677)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7.2.el9_5
changelog:
  - qemu: Add support for postcopy-recover-setup migration state (RHEL-63877)
  - qemu: Avoid false failure when resuming post-copy migration (RHEL-63877)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7.3.el9_5
changelog:
  - libvirt_private.syms: Export virDomainIOMMUDefNew() (RHEL-69725)
  - qemu: Turn EIM IOMMU on automagically (RHEL-69725)
  - qemu_domain: Automagically add IOMMU if needed (RHEL-69725)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-7.4.el9_5
changelog:
  - qemu: Enable I/O APIC if needed (RHEL-69725)
  - qemu: Enable I/O APIC even more frequently (RHEL-69725)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-0rc1.1
changelog:
  - Rebased to libvirt-8.0.0-rc1 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2034539, rhbz#2027400, rhbz#1945420, rhbz#1851249, rhbz#2032410
      rhbz#2026812, rhbz#2032365, rhbz#2035888, rhbz#2036895, rhbz#2026537


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-1
changelog:
  - Rebased to libvirt-8.0.0 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2039246, rhbz#2039652, rhbz#2039651, rhbz#2039131


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - build: Only install libvirt-guests when building libvirtd (rhbz#2042529)
  - docs: Add man page for libvirt-guests (rhbz#2042529)
  - remove sysconfig files (rhbz#2042529)
  - spec: Run pre/post-install stuff on 'daemon-driver-storage-core' (rhbz#2025644)
  - qemu: fix inactive snapshot revert (rhbz#2039136)
  - Revert "report error when virProcessGetStatInfo() is unable to parse data" (rhbz#2043579)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-4
changelog:
  - qemu_command: Generate memory only after controllers (rhbz#2047271)
  - qemu: Validate domain definition even on migration (rhbz#2048435)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5
changelog:
  - Make systemd unit ordering more robust (rhbz#1868537)
  - util: Fix machined servicename (rhbz#1868537)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-7
changelog:
  - nwfilter: hold filter update lock when creating/deleting bindings (rhbz#2044379)
  - qemu,lxc: remove use to nwfilter update lock (rhbz#2044379)
  - qemu: support multiqueue for vdpa net device (rhbz#2024406)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-8.1.el9_0
changelog:
  - conf: Introduce memory allocation threads (rhbz#2075628)
  - qemu_capabilities: Detect memory-backend-*.prealloc-threads property (rhbz#2075628)
  - qemu_validate: Validate prealloc threads against qemuCpas (rhbz#2075628)
  - qemu_command: Generate prealloc-threads property (rhbz#2075628)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-8.5.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#1475431, rhbz#2026765, rhbz#2059511, rhbz#2089431, rhbz#2102009


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-7.2.el9_1
changelog:
  - kbase: Document QEMU private mount NS limitations (rhbz#2152083)
  - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2152083)
  - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2152083)
  - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2152083)
  - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2152083)
  - qemuProcessReconnect: Don't build memory paths (rhbz#2152083)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-7.3.el9_1
changelog:
  - util: json: Split out array->strinlist conversion from virJSONValueObjectGetStringArray (rhbz#2154410)
  - qemuAgentGetDisks: Don't use virJSONValueObjectGetStringArray for optional data (rhbz#2154410)
  - util: Extend virProcessGetStatInfo() for sysTime and userTime (rhbz#2157094)
  - qemu: Implement qemuDomainGetStatsCpu fallback for qemu:///session (rhbz#2157094)
  - RHEL: rpminspect: Disable abidiff inspection


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-8
changelog:
  - docs: Fix examples in virt-qemu-sev-validate man page (rhbz#2172347)
  - docs: refer to --firmware instead of --loader (rhbz#2172347)
  - rpm: add missing deps for the virt-qemu-sev-validate (rhbz#2172347)
  - docs/kbase: fix example for SEV validation (rhbz#2172347)
  - qemu_passt: Report error when getting passt PID failed (rhbz#2169244)
  - qemu_passt: Avoid double daemonizing passt (rhbz#2169244)
  - qemu_passt: Report passt's error on failed start (rhbz#2169244)
  - qemu_passt: Deduplicate passt killing code (rhbz#2169244)
  - qemu_passt: Let passt write the PID file (rhbz#2169244)
  - qemu_passt: Remove passt socket file on exit (rhbz#2169244)
  - tests: qemucapabilitiesdata: Update for the qemu-8.0 development cycle (rhbz#2172098)
  - qemu: capabilities: Introduce QEMU_CAPS_NETDEV_STREAM_RECONNECT (rhbz#2172098)
  - qemu: add reconnect=5 to passt qemu commandline options when available (rhbz#2172098)
  - qemu: respond to NETDEV_STREAM_DISCONNECTED event (rhbz#2172098)
  - qemu: domain: Fix logic when tainting domain (rhbz#2174446)
  - qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174446)
  - qemu: validate: Fix logic for validating presence of the HPET timer (rhbz#2175813)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-9
changelog:
  - util: add an API to retrieve the resolved path to a virCommand's binary (rhbz#2172267)
  - security: make args to virSecuritySELinuxContextAddRange() const (rhbz#2172267)
  - security: make it possible to set SELinux label of child process from its binary (rhbz#2172267)
  - qemu: set SELinux label of passt process to its own binary's label (rhbz#2172267)
  - rpm: Recommend passt-selinux (rhbz#2172267)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-10.1.el9_2
changelog:
  - virnuma: Move virNumaNodesetToCPUset() out of WITH_NUMACTL (rhbz#2185039)
  - virnuma: Introduce virNumaCPUSetToNodeset() (rhbz#2185039)
  - virnumamock: Introduce virNumaGetNodeOfCPU() mock (rhbz#2185039)
  - qemuxml2argvtest: Use virnuma mock (rhbz#2185039)
  - qemuxml2argvdata: Adjust maximum NUMA node used (rhbz#2185039)
  - qemuxml2argvdata: Extend vCPUs placement in memory-hotplug-dimm-addr.xml (rhbz#2185039)
  - qemuxml2argvmock: Drop virNuma* mocks (rhbz#2185039)
  - qemu: Move cpuset preference evaluation into a separate function (rhbz#2185039)
  - qemu: Fix qemuDomainGetEmulatorPinInfo() (rhbz#2185039)
  - qemuBuildMemoryBackendProps: Join two conditions (rhbz#2185039)
  - qemu: Add @nodemaskRet argument to qemuBuildMemoryBackendProps() (rhbz#2185039)
  - qemu: Add @nodemask argument to qemuBuildThreadContextProps() (rhbz#2185039)
  - qemuBuildThreadContextProps: Prune .node-affinity wrt <emulatorpin/> (rhbz#2185039)
  - docs: Document memory allocation and emulator pinning limitation (rhbz#2185039)
  - conf: Fix migration in some firmware autoselection scenarios (rhbz#2186383)


author: Jiri Denemark <jdenemar@redhat.com> - 9.4.0-1
changelog:
  - Rebased to libvirt-9.4.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2119007, rhbz#2193315, rhbz#2209658, rhbz#2143158, rhbz#2208946
      rhbz#2138150, rhbz#2203657, rhbz#2180679, rhbz#2203709


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-0rc1.1
changelog:
  - Rebased to libvirt-9.5.0-rc1 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2160356, rhbz#2209191, rhbz#2210287, rhbz#2209853, rhbz#2171860
      rhbz#2138150, rhbz#2171384


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-2
changelog:
  - nodedev: transient mdev update on nodeDeviceCreateXML (rhbz#2143158)
  - nodedev: refactor mdevctl thread functions (rhbz#2143158)
  - nodedev: update mdevs from the mdevctl thread (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-3
changelog:
  - tests: remove acpi support from s390x ccw hotplug tests (rhbz#2168499)
  - tests: add capabilities for QEMU 8.1.0 on s390x (rhbz#2168499)
  - qemu: add run-with async-teardown capability (rhbz#2168499)
  - qemu: allow use of async teardown in domain (rhbz#2168499)
  - conf: domcaps: Add 'async-teardown' domain capability (rhbz#2168499)
  - qemu: S390 does not provide physical address size (rhbz#2224016)
  - nodedev: report mdev persistence properly (rhbz#2143158)
  - node_device: Don't leak error message buffer from virMdevctlListDefined|Active (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-4
changelog:
  - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (CVE-2023-3750, rhbz#2221851)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-5
changelog:
  - Revert "qemu_passt: Actually use @logfd" (rhbz#2209191)
  - Revert "qemu_passt: Precreate passt logfile" (rhbz#2209191)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-6
changelog:
  - tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178)
  - tests: Switch to firmware autoselection for hvf (rhbz#2196178)
  - tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178)
  - tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178)
  - tests: Turn abi-update.xml into a symlink (rhbz#2196178)
  - tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178)
  - qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178)
  - qemu: Fix lookup against stateless/combined pflash (rhbz#2196178)
  - tests: Add some more DO_TEST*ABI_UPDATE* macros (rhbz#2196178)
  - tests: Add more tests for firmware selection (rhbz#2196178)
  - tests: Update firmware descriptor files (rhbz#2196178)
  - tests: Drop tags from BIOS firmware descriptor (rhbz#2196178)
  - tests: Include microvm in firmwaretest (rhbz#2196178)
  - qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178)
  - qemu: Generate NVRAM path in more cases (rhbz#2196178)
  - qemu: Filter firmware based on loader.readonly (rhbz#2196178)
  - qemu: Match NVRAM template extension for new domains (rhbz#2196178)
  - conf: Don't default to raw format for loader/NVRAM (rhbz#2196178)
  - tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178)
  - tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178)
  - rpm: Reorder scriptlets (rhbz#2210058)
  - rpm: Reduce use of with_modular_daemons (rhbz#2210058)
  - rpm: Remove custom libvirtd restart logic (rhbz#2210058)
  - rpm: Introduce new macros for handling of systemd units (rhbz#2210058)
  - rpm: Switch to new macros for handling of systemd units (rhbz#2210058)
  - rpm: Delete unused macros (rhbz#2210058)


author: Shaleen Bathla <shaleen.bathla@oracle.com> - 9.5.0-6.0.1
changelog:
  - The path to the guest agent socket file can become too long and cause problems.(rhbz#2233744)
  - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-7
changelog:
  - util: use "stubDriverType" instead of just "stubDriver" (rhbz#2074209)
  - util: add stub driver name to virPCIDevice object (rhbz#2074209)
  - util: rename virPCIDeviceGetDriverPathAndName (rhbz#2074209)
  - util: permit existing binding to VFIO variant driver (rhbz#2074209)
  - util: probe stub driver from within function that binds to stub driver (rhbz#2074209)
  - util: honor stubDriverName when probing/binding stub driver for a device (rhbz#2074209)
  - node_device: support binding other drivers with virNodeDeviceDetachFlags() (rhbz#2074209)
  - qemu: turn two multiline log messages into single line (rhbz#2074209)
  - docs: update description of virsh nodedev-detach --driver option (rhbz#2074209)
  - rpm: Fix typo in daemon name (rhbz#2236057)
  - rpm: Recommend libvirt-daemon for with_modular_daemons distros (rhbz#2236500)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Darren Archibald <darren.archibald@oracle.com> - 1.9.0-7
changelog:
  - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
    Resolves: rhbz#2241191
  - crash related to VP9 encoding in libvpx (CVE-2023-44488)
    Resolves: rhbz#2241806


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "aarch64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j16  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
changelog:
  - fix handling of zero-length messages
  - minimize default configuration
  - remove obsolete build requirement


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6.el9_2.2
changelog:
  - don't re-arm fault clearing timer on unrelated netlink events (#2208265)
  - clear pending errors on sockets (#2208210)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-2.el9_4.1
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-44677)
  - fix ts2phc to correctly handle leap seconds (RHEL-44679)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-44683)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3.el9_5.1
changelog:
  - add option to ts2phc to specify minimum expected NMEA delay (RHEL-70168)
  - don't require -O option without -a and -w in phc2sys (RHEL-70678)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 16.0.1-4
changelog:
  - Improve error messages for unsupported relocs on s390x (rhbz#2216906)
  - Disable LLVM_UNREACHABLE_OPTIMIZE


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: EL Errata <el-errata_ww@oracle.com> - 179-2.0.1
changelog:
  - Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]


author: Lans Hung <lans.hung@oracle.com> - 179-2.0.2
changelog:
  - Fix in the case for unsupported (AMD) cpu, remove the unnecessary require statement which causes runtime dependency issue and change the exit status to EX_UNAVAILABLE (69) [Orabug: 33797836]


author: EL Errata <el-errata_ww@oracle.com> - 182-3.0.1
changelog:
  - Fix in the case for unsupported (AMD) cpu, remove the unnecessary require statement which causes runtime dependency issue and change the exit status to EX_UNAVAILABLE (69) [Orabug: 33797836]
  - Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: EL Errata <el-errata_ww@oracle.com> - 4.2-14.0.1
changelog:
  - super1: remove support for name= in config. [Orabug 36958575]
  - mdadm: Increase number limit in md device name to 1024. [Orabug: 36958528]
  - Fix socket connection failure when mdmon runs in foreground mode. [Orabug: 36077756]


author: EL Errata <el-errata_ww@oracle.com> - 4.3-3.0.1
changelog:
  - mdadm: Increase number limit in md device name to 1024. [Orabug: 36958528]
  - Fix socket connection failure when mdmon runs in foreground mode. [Orabug: 36077756]


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.78.0-1
changelog:
  - Bump glib2 version 2.78.0
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS
  - Resolves: RHEL-5019
  - Resolves: RHEL-5020
  - Resolves: RHEL-5092
  - Resolves: RHEL-5093
  - Resolves: RHEL-5094


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-32
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.2-2
changelog:
  - More efficient cache and cow filters.
  - Add nbdkit-cow-filter cow-on-read option.
  - Add nbdkit-cache-filter cache-on-read=/PATH.
  - Add nbdkit-cache-filter cache-min-block-size option.
  - Add nbdkit-delay-filter delay-open and delay-close options.
  - Reduce verbosity of debugging from virt-v2v.
  - Miscellaneous bugfixes
    resolves: rhbz#1950632


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-1
changelog:
  - New upstream stable version 1.26.3.
    resolves: rhbz#1950632
  - Add Python .cleanup() method.
  - Fix data corruption in zero and trim on unaligned tail.
    resolves: rhbz#1990134


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-3
changelog:
  - Fix parsing of delay-* options
    resolves: rhbz#1991649
  - Fix assertion failure during server shutdown
  - Fix delay-close option
    resolves: rhbz#1991652
  - tests/test-debug-flags.sh: Don't use port 10809 during test
    resolves: rhbz#1991945


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.5-1
changelog:
  - Rebase along stable branch to 1.26.5
    resolves: rhbz#1995327
  - Add nbdkit-vddk-plugin -D vddk.stats=1 flag
    resolves: rhbz#1995329
  - Add nbdkit-cow-filter cow-block-size parameter
    resolves: rhbz#1995332
  - Fix CVE-2021-3716 nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS
  - Update keyring


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Stepan Broz <sbroz@redhat.com> - 1:5.9.1-13.3
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-32062)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-4
changelog:
  - Install an improved sample config
  - Fix permissions of osf-related configs
  - rule: Fix for potential off-by-one in cmd_add_loc()
  - netlink_delinearize: Fix suspicious calloc() call
  - netlink: Avoid memleak in error path of netlink_delinearize_obj()
  - netlink: Avoid memleak in error path of netlink_delinearize_table()
  - netlink: Avoid memleak in error path of netlink_delinearize_chain()
  - netlink: Avoid memleak in error path of netlink_delinearize_set()
  - json: Drop pointless assignment in exthdr_expr_json()
  - evaluate: Mark fall through case in str2hooknum()
  - parser_json: Fix for memleak in tcp option error path
  - parser_bison: Fix for implicit declaration of isalnum
  - main: fix nft --help output fallout from 719e4427
  - tests: add icmp/6 test where dependency should be left alone
  - payload: check icmp dependency before removing previous icmp expression


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-8
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set")
  - segtree: Fix segfault when restoring a huge interval set


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-10
changelog:
  - tests: shell: better parameters for the interval stack overflow test
  - tests: shell: $NFT needs to be invoked unquoted


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-11
changelog:
  - tests: py: add dnat to port without defining destination address
  - evaluate: fix inet nat with no layer 3 info
  - include: missing sctp_chunk.h in Makefile.am
  - exthdr: Implement SCTP Chunk matching
  - scanner: sctp: Move to own scope
  - scanner: introduce start condition stack
  - json: Simplify non-tcpopt exthdr printing a bit


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: EL Errata <el-errata_ww@oracle.com> - 1.20.1-13.0.1
changelog:
  - Reference oracle-indexhtml within Requires [Orabug: 33802044]
  - Remove Red Hat references [Orabug: 29498217]


author: Alan Steinberg <alan.steinberg@oracle.com> - 1:1.20.1-14.0.1.1
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Darren Archibald <darren.archibald@oracle.com> - 2:1.20.1-20.0.1
changelog:
  - Reference oracle-indexhtml within Requires [Orabug: 33802044]
  - Remove Red Hat references [Orabug: 29498217]
  - Update upstream references [Orabug: 36579090]


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4.0.1
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.10.0-1
changelog:
  - Rebase to 16.10.0, add corepack, fix PowerShell dependency
  - Resolves: RHBZ#2000539, #2000548, #2000549, #2002177


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-1
changelog:
  - Update to latest version
  - Use jinja and jq
  - Don't fix python3
  - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533
  - Resolves CVE-2020-15095
  - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960
  - Resolves: CVE-2021-3807, CVE-2021-27290


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 1:16.20.2-4.0.1
changelog:
  - reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks
    Resolves: CVE-2024-22019


author: Jan Staněk <jstanek@redhat.com> - 1:16.14.0-5
changelog:
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: David Sloboda <david.x.sloboda@oracle.com> - 1:18.20.2-2
changelog:
  - Removes .ps1 files
  - Rebase to 18.20.2
  - Fixes: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes: CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes: CVE-2024-25629 (c-ares)


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-6
changelog:
  - Remove debugging printf from a patch
  - increase the pbe cache size to handle reusing the same token key.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Craig Guiller <craig.guiller@oracle.com> - 3.90.0-4
changelog:
  - CVE-2023-5388
      nss: timing attack against RSA decryption.
      Make the final blinding multmod constant time.


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Ashish Samant <ashish.samant@oracle.com> - 1.8.6-11
changelog:
  - tunefs.ocfs2: read journal superblock even for online operations (Ashish
    Samant)  [Orabug: 28804934]


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: EL Errata <el-errata_ww@oracle.com> - 10.11.0.2-1.0.1
changelog:
  - Add oracle-linux.patch
  - Add modify_to_suitable_os_release.patch
  - Added patch to properly identify oracle as redhat (Alex Burmashev)


author: EL Errata <el-errata_ww@oracle.com> - 10.11.0.2-1.0.1
changelog:
  - Support os_vendor checking for OL
  - Add modify_to_suitable_os_release.patch
  - Added patch to identify OL as redhat vendor (Alex Burmashev)


author: Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.5-1
changelog:
  - Package new upstream version open-vm-tools-11.2.5-17337674.
  - libdnet dependency was removed in open-vm-tools 11.0.0. So,
    removed the stale BuildRequires for libdnet.


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el9
changelog:
  - ovt-Fixes-necessary-to-build-open-vm-tools-with-newer-gt.patch [bz#1936382]
  - ovt-Update-spec-file-for-correct-build.patch [bz#1936382]
  - Resolves: bz#1936382
    ([ESXi][RHEL-9][FTBS] open-vm-tools not working with newer gtk libraries)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-4
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1954040]
  - Resolves: bz#1954040
    ([ESXi][RHEL9.0][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Miroslav Rezanina <rezanin@redhat.com> - 11.3.0-1
changelog:
  - Rebase to 11.3.0 [bz#1974471]
  - Resolves: bz#1974471
    ([ESXi][RHEL9]Open-vm-tools release 11.3.0 has been released - please update for RHEL 9.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1
changelog:
  - Rebase to 11.3.5 [bz#2008243]
  - Resolves: bz#2008243
    ([ESXi][RHEL9]Open-vm-tools release 11.3.5 has been released - please rebase)


author: EL Errata <el-errata_ww@oracle.com> - 11.3.5-1.0.1
changelog:
  - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968]
  - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019]
  - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156]


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1.el9_0.1
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119285]
  - Resolves: bz#2119285
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to 12.0.0 [bz#2061193]
  - Resolves: bz#2061193
    ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
changelog:
  - Rebase to open-vm-tools 12.0.5 [bz#2090275]
  - Resolves: bz#2090275
    ([ESXi][RHEL9]Open-vm-tools release 12.0.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-2
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119286]
  - Resolves: bz#2119286
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-9.1.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
changelog:
  - Rebase to open-mv-tools 12.1.0 [bz#2121203]
  - Resolves: bz#2121203
    ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150190]
  - Resolves: bz#2150190
    ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 12.1.5-1.0.2
changelog:
  - [CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177086]
  - Resolves: bz#2177086
    ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
changelog:
  - ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
  - Resolves: bz#2208160
    ([ESXi][RHEL9] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215566]
  - Resolves: bz#2215566
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebaer to open-vm-tools 12.2.5
  - Resolves: bz#2214862
    ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Darren Archibald <darren.archibald@oracle.com> - 12.2.5-3.0.1.2
changelog:
  - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.
  - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Than Ngo <than@redhat.com> - 3.16.0-10
changelog:
  - Resolves: #1987186, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Than Ngo <than@redhat.com> - 3.17.0-8
changelog:
  - Resolves: #2127873, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.18.0-5
changelog:
  - opencryptoki C_GenerateKeyPair() fails after generating > 500 RSA keys with CEX7 crypto cards
  Resolves: #2128611


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 3.21.0-9
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
changelog:
  - Added some linker hardening flags to pass annocheck
    Related: rhbz#2031802

    * Tue Dec 14 2021 Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
  - Added gating
    Related: rhbz#2031794


author: Michael Petlan <mpetlan@redhat.com> - 1.2.0-2
changelog:
  - Update to upstream 1.2.0 -- fix opencsd_tag
    Related: rhbz#2041578

    * Fri Jan 21 2022 Michael Petlan <mpetlan@redhat.com> - 1.2.0-1
  - Update to upstream 1.2.0
    Related: rhbz#2041578


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-4
changelog:
  - Backport Channel Binding support. Related: rhbz#1967853
  - Fix coverity issues. Related: rhbz#1938829


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
    The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Change STRIP to STRIP_OPTS
    Add export symbols related to LDAP_CONNECTIONLESS
    Related: rhbz#2117752


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: John McWalters <john.mcwalters@oracle.com> - 1.3.10-2.0.1
changelog:
  - Update signature info query format to take RSAHEADER and
    DSAHEADER into account [Orabug: 34325165]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Add bug29870387-fix-redhat-reference.patch [Orabug: 29870387]


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Federico Ramírez <federico.r.ramirez@oracle.com> - 1:1.3.6-3.0.4
changelog:
  - Update signature info query format to take RSAHEADER and
    DSAHEADER into account [Orabug: 34325165]


author: EL Errata <el-errata_ww@oracle.com> - 1.3.6-4.0.1
changelog:
  - Update signature info query format to take RSAHEADER and
    DSAHEADER into account [Orabug: 34325165]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Add bug29870387-fix-redhat-reference.patch [Orabug: 29870387]


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-1 + 0.10.4-4
changelog:
  - New upstream release
  - Switch to SFTP protocol in scp utility by default
  - Enable SCP protocol kill switch
    Related: rhbz#2001002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-7
changelog:
  - Switch to SFTP protocol in scp utility by default - upstream fixes
    Related: rhbz#2001002
  - Workaround for RHEL 8 incompatibility in scp utility in SFTP mode
    Related: rhbz#2038854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-26
changelog:
  - Fix one-byte overflow in SSH banner processing
    Resolves: rhbz#2138345
  - Fix double free() in error path
    Resolves: rhbz#2138347


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-28
changelog:
  - Do not try to use SHA1 for host key ownership proof when we don't support it server-side
    Resolves: rhbz#2088750


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Craig Guiller <craig.guiller@oracle.com> - 8.7p1-34.3
changelog:
  - Fix Terrapin attack (CVE-2023-48795)
    Resolves: RHEL-19764
  - Forbid shell metasymbols in username/hostname (CVE-2023-51385)
    Resolves: RHEL-19822


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-13
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-15.1
changelog:
  - Fix invocation of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before
    setting an allowed digest with EVP_PKEY_CTX_set_signature_md()
  - Resolves: rhbz#2061607


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-19
changelog:
  - Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes
  - Resolves: rhbz#2063306


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-20
changelog:
  - Fix acceptance of SHA-1 certificates with rh-allow-sha1-signatures = yes when
    no OpenSSL library context is set
  - Resolves: rhbz#2063306


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-33
changelog:
  - CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory
  - Resolves: rhbz#2089443
  - CVE-2022-1343 openssl: Signer certificate verification returned
    inaccurate response when using OCSP_NOCHECKS
  - Resolves: rhbz#2089439
  - CVE-2022-1292 openssl: c_rehash script allows command injection
  - Resolves: rhbz#2090361
  - Revert "Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode"
    Related: rhbz#2087234
  - Use KAT for ECDSA signature tests, s390 arch
  - Resolves: rhbz#2086866


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-35
changelog:
  - Add explicit indicators for signatures in FIPS mode and mark signature
    primitives as unapproved.
    Resolves: rhbz#2087234


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-36
changelog:
  - Ciphersuites with RSAPSK KX should be filterd in FIPS mode
  - Related: rhbz#2091994
  - FIPS provider should block RSA encryption for key transport.
  - Other RSA encryption options should still be available if key length is enough
  - Related: rhbz#2091977
  - Improve diagnostics when passing unsupported groups in TLS
  - Related: rhbz#2086554
  - Fix PPC64 Montgomery multiplication bug
  - Related: rhbz#2101346
  - Strict certificates validation shouldn't allow explicit EC parameters
  - Related: rhbz#2085521
  - CVE-2022-2068: the c_rehash script allows command injection
  - Related: rhbz#2098276


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-38
changelog:
  - Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously
    initialized.
    Resolves: rhbz#2107530
  - Improve AES-GCM performance on Power9 and Power10 ppc64le
    Resolves: rhbz#2103044
  - Improve ChaCha20 performance on Power10 ppc64le
    Resolves: rhbz#2103044


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-39
changelog:
  - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
  - Use Use digest_sign & digest_verify in FIPS signature self test
  - Use FFDHE2048 in Diffie-Hellman FIPS self-test
    Resolves: rhbz#2112978


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40
changelog:
  - Deal with DH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115856
  - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115857
  - Use signature for RSA pairwise test according FIPS-140-3 requirements
    Related: rhbz#2115858
  - Reseed all the parent DRBGs in chain on reseeding a DRBG
    Related: rhbz#2115859
  - Zeroization according to FIPS-140-3 requirements
    Related: rhbz#2115861


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Resolves: rhbz#2115861
  - Add FIPS indicator for HKDF
    Resolves: rhbz#2118388


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-39
changelog:
  - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
  - Use Use digest_sign & digest_verify in FIPS signature self test
  - Use FFDHE2048 in Diffie-Hellman FIPS self-test
    Resolves: rhbz#2102535


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40
changelog:
  - Deal with DH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2102536
  - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2102537
  - Use signature for RSA pairwise test according FIPS-140-3 requirements
    Related: rhbz#2102540
  - Reseed all the parent DRBGs in chain on reseeding a DRBG
    Related: rhbz#2102541


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Related: rhbz#2102542
  - Add FIPS indicator for HKDF
    Related: rhbz#2114772


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-43
changelog:
  - CVE-2022-3602: X.509 Email Address Buffer Overflow
  - CVE-2022-3786: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-44
changelog:
  - SHAKE-128/256 are not allowed with RSA in FIPS mode
    Resolves: rhbz#2144010
  - Avoid memory leaks in TLS
    Resolves: rhbz#2144008
  - FIPS RSA CRT tests must use correct parameters
    Resolves: rhbz#2144006
  - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC
    Resolves: rhbz#2144017
  - Remove support for X9.31 signature padding in FIPS mode
    Resolves: rhbz#2144015
  - Add explicit indicator for SP 800-108 KDFs with short key lengths
    Resolves: rhbz#2144019
  - Add explicit indicator for HMAC with short key lengths
    Resolves: rhbz#2144000
  - Set minimum password length for PBKDF2 in FIPS mode
    Resolves: rhbz#2144003
  - Add explicit indicator for PSS salt length in FIPS mode
    Resolves: rhbz#2144012
  - Clamp default PSS salt length to digest size for FIPS 186-4 compliance
    Related: rhbz#2144012
  - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode
    Resolves: rhbz#2145170


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-45
changelog:
  - Add support of X25519 and X448 "group" parameter in EVP_PKEY_CTX objects
    Resolves: rhbz#2149010
  - Fix explicit indicator for PSS salt length in FIPS mode when used with
    negative magic values
    Resolves: rhbz#2144012
  - Update change to default PSS salt length with patch state from upstream 
    Related: rhbz#2144012


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-46
changelog:
  - Refactor OpenSSL fips module MAC verification
    Resolves: rhbz#2158412
  - Disallow SHAKE in RSA-OAEP decryption in FIPS mode
    Resolves: rhbz#2144010


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-47
changelog:
  - Fixed X.509 Name Constraints Read Buffer Overflow
    Resolves: CVE-2022-4203
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed Invalid pointer dereference in d2i_PKCS7 functions
    Resolves: CVE-2023-0216
  - Fixed NULL dereference validating DSA public key
    Resolves: CVE-2023-0217
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286
  - Fixed NULL dereference during PKCS7 data verification
    Resolves: CVE-2023-0401


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-9
changelog:
  - Fix explicit FIPS indicator for X9.42 KDF when used with output lengths < 14 bytes
    Resolves: rhbz#2175864


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-11
changelog:
  - Add missing reference to patchfile to add explicit FIPS indicator to RSA
    encryption and RSASVE and fix the gettable parameter list for the RSA
    asymmetric cipher implementation.
    Resolves: rhbz#2179379


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-13
changelog:
  - Enforce using EMS in FIPS mode
    Resolves: rhbz#2157951
  - Fix excessive resource usage in verifying X509 policy constraints
    Resolves: rhbz#2186661
  - Fix invalid certificate policies in leaf certificates check
    Resolves: rhbz#2187429
  - Certificate policy check not enabled
    Resolves: rhbz#2187431
  - OpenSSL rsa_verify_recover key length checks in FIPS mode
    Resolves: rhbz#2186819


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-15.1
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2178030


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-16
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211396


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.7-16
changelog:
  - Upload new upstream sources without manually hobbling them.
  - Remove the hobbling script as it is redundant. It is now allowed to ship
    the sources of patented EC curves, however it is still made unavailable to use
    by compiling with the 'no-ec2m' Configure option. The additional forbidden
    curves such as P-160, P-192, wap-tls curves are manually removed by updating
    0011-Remove-EC-curves.patch.
  - Enable Brainpool curves.
  - Apply the changes to ec_curve.c and  ectest.c as a new patch
    0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
  - Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
  - Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.
    Resolves: rhbz#2130618, rhbz#2188180


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-19
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2169757


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-20
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211340


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: EL Errata <el-errata_ww@oracle.com> - 3.0.7-28.0.1
changelog:
  - Drop OpenELA branding, apply Oracle branding patches
  - Enable openssl-fips-provider dependency [Orabug: 36504822]
  - Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
  - Replace upstream references [Orabug: 34340177]


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Darren Archibald <darren.archibald@oracle.com> - 1:3.2.2-6.0.1
changelog:
  - Enable openssl-fips-provider dependency [Orabug: 36504822]
  - Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
  - Replace upstream references [Orabug: 34340177]


author: Ilya Okomin <ilya.okomin@oracle.com> - 3.0.7-2.0.1
changelog:
  - Add bundle with Oracle Linux 9 OpenSSL FIPS Provider module files [Orabug: 36504822]
  - Replace upstream references [Orabug: 34340177]


author: Simo Sorce <ssorce@redhat.com> - 3.0.7-3
changelog:
  - Change tarball source contents
  - Rework file extraction process
  - Fixes debug packages
    Resolves: RHEL-32123


author: Simo Sorce <ssorce@redhat.com> - 3.0.7-5
changelog:
  - Add an empty metapackage and proper requires to correctly
    handle upgrades.
    Related: RHEL-32123


author: Ilya Okomin <ilya.okomin@oracle.com> - 3.0.7-6.0.1
changelog:
  - Drop OpenELA branding [Orabug: 37274593]
  - Add bundle with Oracle Linux 9 OpenSSL FIPS Provider module files [Orabug: 37274593]
  - Update extract-src.sh script to support non-hobbled openssl tarball [Orabug: 37274593]


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Leo Sandoval <lsandova@redhat.com> - 1.77-11
changelog:
  - 90fallback: include possible kernel parameters from grub's default file
  - common.sh: do not resolve symbolic link on mapped device filesystems
  - Resolves: #RHEL-44705


author: Alex Burmashev <alexander.burmashev@oracle.com> - 101-1.0.2
changelog:
  - Add support for OCI hybrid images [JIRA: OLDIS-33593]
  - enable aarch64 OCI image builds [JIRA: OLDIS-33593]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 101-1.0.6
changelog:
  - Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
  - Update repositories to contain OCI variables


author: Josue David Hernandez Gutierrez <josue.d.hernandez@oracle.com> - 118-1.0.1
changelog:
  - Support using OCI variables inside built images [JIRA: OLDIS-35302]
  - Support using repository definitons with OCI variables [JIRA: OLDIS-38657]
  - Update repositories to contain OCI variables
  - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123]
  - Increase default /boot size to 1GB [Orabug: 36827079]
  - Add support for OCI hybrid images [JIRA: OLDIS-33593]
  - enable aarch64 OCI image builds [JIRA: OLDIS-33593]
  - support for building OL8/9 images on Oracle Linux 9 [Orabug: 36400619]


author: Tomáš Hozza <thozza@redhat.com> - 76-2
changelog:
  - distro/rhel: add payload repos to os package set (rhbz#2177699)
  - Manifest: always set kernel options in grub2 stage (rhbz#2162299)


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981859


author: Luca BRUNO <lucab@redhat.com> - 2021.6-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.6
    Resolves: rhbz#2026931


author: Luca BRUNO <lucab@redhat.com> - 2022.2-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.2
    Resolves: rhbz#2070964


author: Luca BRUNO <lucab@redhat.com> - 2022.5-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.5
    Resolves: rhbz#2119815


author: Luca BRUNO <lucab@redhat.com> - 2022.5-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.5
    Resolves: rhbz#2127868


author: Luca BRUNO <lucab@redhat.com> - 2022.6-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.6
    Resolves: rhbz#2134054


author: Tianyue Lan <tianyue.lan@oracle.com> - 2023.1-6
changelog:
  - backport https://github.com/ostreedev/ostree/pull/2874/commits/de6fddc6adee09a93901243dc7074090828a1912


author: Craig Guiller <craig.guiller@oracle.com> - 2023.1-7
changelog:
  - backport https://github.com/ostreedev/ostree/pull/2969/commits/402e04280b54c058ad47be99fe6a9326caf2ae00


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2023.5-1
changelog:
  - https://github.com/ostreedev/ostree/releases/tag/v2023.5
    backport: https://github.com/ostreedev/ostree/commit/7f70614a1ac1950ebde3df0e26cc9ab1d72b2f1f
    Resolves: rhbz#2221997


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


