# changelog

author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-102.7
changelog:
  RHEL 9.1.0.Z ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2137254
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2137263


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-104
changelog:
  RHEL 9.2.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2097077
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2136802
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2160517
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2160518
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: RHEL-192


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-627
  - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
  Resolves: RHEL-817
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-730
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-816


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-16
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2081235


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-25
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2093216


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-30.1
changelog:
  - fence_ibm_vpc: add token cache support
    Resolves: rhbz#2127878
  - add azure-identity and dependencies
    Resolves: rhbz#2127882


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-45
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183162


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
changelog:
  - bundled dateutil: fix tarfile CVE-2007-4559
    Resolves: rhbz#2217902
  - fence_ipmilan: fix typos in metadata
    Resolves: rhbz#2224267


author: Alan Steinberg <alan.steinberg@oracle.com> - 4.10.0-55.2
changelog:
  - python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)
  - python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)


author: Akshata Konala <akshata.konala@oracle.com> - 4.10.0-55.3
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5396
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-9446


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62.1
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29668


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: EL Errata <el-errata_ww@oracle.com> - 102.3.0-6.0.1
changelog:
  - Removed Upstream references
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Darren Archibald <darren.archibald@oracle.com> - 115.5.0-1.0.1
changelog:
  - Update to 115.5.0 build1
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 115.6.0-1.0.1
changelog:
  - Udate to 115.6.0 build1
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: EL Errata <el-errata_ww@oracle.com> - 91.10.0-1.0.1
changelog:
  - Replaced upstream package with oracle-indexhtml [Orabug: 33802044]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
  - Removed Upstream references


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-3
changelog:
  - Add back fullname property at the scan matching phase for the backward compatibility.
    Resolves: rhbz#1902881


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-1
changelog:
  - Update to 20201107 version (#1895648)
  - removed %gittag0 macro, as it cause problem to automated package update script


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: Antonio Torres <antorres@redhat.com> - 3.0.21-25
changelog:
  - Revert "Allow to connect to partially open LDAP handle"
  - Use infinite timeout (openldap default) when using LDAP+start-TLS
  - Update openssl dependency to not check epoch (was causing detection issues)
    Related: rhbz#1992551


author: Antonio Torres <antorres@redhat.com> - 3.0.21-31
changelog:
  - Update OpenSSL 3.0 support backport to current v3.0.x branch state
  - Add "--enable-fips-workaround" to build options
    Related: rhbz#2083699


author: Antonio Torres <antorres@redhat.com> - 3.0.21-34
changelog:
  - Use GID / UID 95 as it's reserved for FreeRADIUS (https://pagure.io/setup/blob/07f8debf03dfb0e5ed36051c13c86c8cd00cd241/f/uidgid#_107)
    Resolves: #2095403


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Akira TAGOH <tagoh@redhat.com> - 1.0.8-2
changelog:
  - Restore the deprecated API that was accidentally removed in the previous release.
    Resolves: rhbz#1787293


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-4
changelog:
  - Resolves: #1958155 - Upgrading frr unconditionally creates /etc/frr/frr.conf, breaking existing configuration


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-1
changelog:
  - Resolves: #2129731 - Rebase FRR to the latest version
  - Resolves: #2129743 - Add targeted SELinux policy for FRR
  - Resolves: #2127494 - BGP incorrectly withdraws routes on graceful restart capable routers


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-2
changelog:
  - Resolves: #2128738 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-6
changelog:
  - Resolves: #2184870 - Reachable assertion in peek_for_as4_capability function
  - Resolves: #2196795 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196796 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196794 - out-of-bounds read exists in the BGP daemon of FRRouting


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 8.3.1-11.1
changelog:
  - Resolves: #2231001 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: EL Errata <el-errata_ww@oracle.com> - 1.7.4-2.0.1
changelog:
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)
  - Update SBAT data to include Oracle [Oracle: 33072886]


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: EL Errata <el-errata_ww@oracle.com> - 1.7.9-1.0.1
changelog:
  - Update signing certificate [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)
  - Update SBAT data to include Oracle [Oracle: 33072886]


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: EL Errata <el-errata_ww@oracle.com> - 1.8.16-1.0.1
changelog:
  - Drop pesign.service restart in postun [Orabug: 34760075]
  - Update signing certificate [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)
  - Update SBAT data to include Oracle [Oracle: 33072886]


author: Michal Schorm <mschorm@redhat.com> - 26.4.8-2
changelog:
  - Switch from SCONS build tooling to CMAKE build tooling
  - Use upstream variants of Systemd service file and Systemd service file wrapper srcipt


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 26.4.11-1.0.1
changelog:
  - Requirement to delete garbd-wrapper script and lp1184034 test case
    without using patches. Patches from previous release have been deleted
  - Drop nmap-ncat requirement. [Orabug: 34116228]
  - Added galera-skip-lp1184034-testcase.patch
  - Added backport-removes-nmap-probing-in-garbd-wrapper.patch


author: Mark Will <mark.will@oracle.com> - 26.4.9-2.0.1
changelog:
  - Drop nmap-ncat requirement. [Orabug: 34116228]
  - Added galera-skip-lp1184034-testcase.patch
  - Added backport-removes-nmap-probing-in-garbd-wrapper.patch


author: David Sloboda <david.x.sloboda@oracle.com> - 26.4.9-2.0.2
changelog:
  - Requirement to delete garbd-wrapper script and lp1184034 test case
    without using patches. Patches from previous release have been deleted


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 10.97-1
changelog:
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)


author: Nick Clifton <nickc@redhat.com> - 11.02-1
changelog:
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.2
changelog:
  - CVE-2023-4039 GCC mitigation.
    Orabug 35751965.
  - CVE-2022-40982 "Intel Downfall" mitigation.
    Orabug 35751972.
    Add two patches originally from GCC upstream releases/gcc-11 branch.
    gcc12-downfall-disable-gather-in-vec.patch
    gcc12-downfall-support-mno-gather.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Jose E. Marchesi <jose.marchesi@oracle.com> 12.2.1-7.6.0.1
changelog:
  - Forward-port Oracle patches to 12.2.1-7.6.
    - Reviewed by: Cupertino Miranda <cupertino.miranda@oracle.com>
    Oracle history:
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.2
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751965.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751972.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      gcc12-downfall-disable-gather-in-vec.patch
      gcc12-downfall-support-mno-gather.patch
    - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217814)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 2.40-1
changelog:
  - Rebase to 2.40.
  - Retire: binutils-package-metadata.patch
  - Retire: binutils-gas-dwarf-skip-empty-functions.patch
  - Retire: binutils-CVE-38128-dwarf-abbrev-parsing.patch
  - Retire: binutils-readelf-no-sections.patch
  - Retire: binutils-libiberty-configure-compile-warnings.patch
  - Retire: binutils-CVE-2022-4285.patch


author: Nick Clifton <nickc@redhat.com> - 2.40-2
changelog:
  - Spec file: Remove duplicate gprofng debug file entries.
  - Spec file: Fix testsuite failures for RiscV64.


author: Nick Clifton <nickc@redhat.com> - 2.40-7
changelog:
  - Spec File: Fix typo.  (#2186396)
  - BFD library: Fix illegal memory access when loading corrupt symbol version info.  (#2186579)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Marek Polacek <polacek@redhat.com> 13.1.1-1
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - GCC 13.1 release
    - PRs c/107041, target/109566
  - remove libcc1


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/91618, c++/96604, c++/109506, c++/109640, c++/109642, c++/109666,
  	c++/109671, c++/109756, c/107682, c/109409, c/109412, debug/109676,
  	fortran/109622, libffi/109447, libgomp/108098, libstdc++/40380,
  	libstdc++/109694, libstdc++/109703, rtl-optimization/109585,
  	target/108758, target/109069, target/109535, target/109661,
  	target/109762, tree-optimization/109573, tree-optimization/109609,
  	tree-optimization/109724, tree-optimization/109778


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-3
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/80488, c++/83258, c++/97700, c++/103807, c++/109651, c++/109745,
  	c++/109761, c++/109774, c++/109868, c++/109884, fortran/109641,
  	fortran/109846, libstdc++/109816, libstdc++/109883, target/104338,
  	target/109697


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Jose E. Marchesi <jose.marchesi@oracle.com> 13.1.1-4.2.0.1
changelog:
  - gfortran needs install-info at installation time.
    Orabug: 36472775
  - Add missing .2 in DEV-PHASE.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el9
changelog:
  - Backport five patches to support glibc 2.34 with merged libpthread.
    (Simon Marchi and Kevin Buettner, RH BZ 1971095)


author: Keith Seitz <keiths@redhat.com> - 10.2-6.el9
changelog:
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    (Rogerio Alves, RHBZ 1870029)
  - Backport patches for "Support prefixed instructions in GDB"
    (Will Schmidt and Luis Machado, RHBZ 1870031)


author: Weimin Pan <weimin.pan@oracle.com> - 10.2-9.0.1
changelog:
  - Take out fix for (RHBZ 1935517) which disables libctf.
  - Forward-port CTF patches.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Weimin Pan <weimin.pan@oracle.com> - 10.2-10.0.2
changelog:
  - Add missing patch gdb-orclbz33627477-redirect-output-crash.patch.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Bruno Larsen <blarsen@redhat.com>
changelog:
  - Bakport "Fix assertion failure in copy_type"
    (Tom Tromey, RHBZ 2155439)
  - Bakport "[gdb/testsuite] Fix PR20630 regression test in gdb.base/printcmds.exp"
    (Tom de Vries)


author: Bruno Larsen <blarsen@redhat.com> - 10.2-11.el9
changelog:
  - Backport "libiberty: prevent buffer overflow when decoding user input"
    (Luís Ferreira, RHBZ2132600)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.1.0.1
changelog:
  - Merge Oracle patches for ol9
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    December-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.3
    - OraBug 35407694 Interrupting pstack with ctrl+c  prompts for a kill even if process is not spawned by gdb
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    December-13-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.2
    - OraBug 36055910 Support RDTSCP in RECORD/REPLAY in interpreter mode (record full)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.1
    - Merge Oracle patches for ol9
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-10-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-10.0.2
    - Add missing patch gdb-orclbz33627477-redirect-output-crash.patch.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-10.0.1
    - Forward-port CTF patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-26-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-9.0.1
    - Take out fix for (RHBZ 1935517) which disables libctf.
    - Forward-port CTF patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Weimin Pan <weimin.pan@oracle.com> - 10.2-9.0.1
changelog:
  - Take out fix for (RHBZ 1935517) which disables libctf.
  - Forward port CTF patches.
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Ray Strode <rstrode@redhat.com> - 40.1-9
changelog:
  - Synchronize permission and group ownership for log dir between
    rpm file manifest and daemon expectations.
    Resolves: #1999586


author: Ray Strode <rstrode@redhat.com> - 40.1-12
changelog:
  - More fixes from RHEL 8:
    - Fix DisallowTCP=false
    - Fix crash when both wayland and xorg are unavailable
    Related: #2056931


author: Ray Strode <rstrode@redhat.com> - 40.1-13.4
changelog:
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2073372


author: Ray Strode <rstrode@redhat.com> - 40.1-15
changelog:
  - Fix accountsservice user templates
    Resolves: #2062827
  - Properly force Xorg on matrox cards
    Related: #2074013
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2074014


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-15
changelog:
  - RHEL-39110 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.31.1-3
changelog:
  - Fixes CVE-2022-23521 and CVE-2022-41903
  - Tests: try harder to find open ports for apache, git, and svn
  - Resolves: #2162069


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 2.12.0-1
changelog:
  - Update to latest version (#1874604)
  - Remove duplicate docs/man directory (#1852765)
  - Add an option to disable modifying the git filter config (#1768060)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Florian Weimer <fweimer@redhat.com> - 2.34-100.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34318)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
  - CVE-2024-33601: nscd: crash on out-of-memory condition
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
changelog:
  - Forward-port Oracle patches for ol9-u4
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Florian Weimer <fweimer@redhat.com> - 2.34-24
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 008003dc6e83439c5e04a744b7fd8197df19096e:
  - tst-socket-timestamp-compat.c: Check __TIMESIZE [BZ #28837]
  - Linux: Only generate 64 bit timestamps for 64 bit time_t recvmsg/recvmmsg
  - linux: Fix ancillary 64-bit time timestamp conversion (BZ #28349, BZ#28350)
  - support: Add support_socket_so_timestamp_time64


author: Florian Weimer <fweimer@redhat.com> - 2.34-25
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6eaf10cbb78d22eae7999d9de55f6b93999e0860:
  - socket: Do not use AF_NETLINK in __opensock
  - hurd if_index: Explicitly use AF_INET for if index discovery
  - Linux: Simplify __opensock and fix race condition [BZ #28353]
  - linux: __get_nprocs_sched: do not feed CPU_COUNT_S with garbage [BZ #28850]


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1.2
changelog:
  - Merge Oracle patches with errata patches
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Florian Weimer <fweimer@redhat.com> - 2.34-21
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 3438bbca90895d32825a52e31a77dc44d273c1c1:
  - Linux: Detect user namespace support in io/tst-getcwd-smallbuff
  - realpath: Avoid overwriting preexisting error
  - CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1
  - tst-realpath-toolong: Fix hurd build
  - CVE-2021-3998: realpath: ENAMETOOLONG for result larger than PATH_MAX
  - stdlib: Fix formatting of tests list in Makefile
  - stdlib: Sort tests in Makefile
  - support: Add helpers to create paths longer than PATH_MAX
  - powerpc: Fix unrecognized instruction errors with recent binutils
  - x86: use default cache size if it cannot be determined [BZ #28784]
  - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)
  - sunrpc: Test case for clnt_create "unix" buffer overflow (bug 22542)
  - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix" (bug 22542)
  - socket: Add the __sockaddr_un_set function
  - Disable debuginfod in printer tests [BZ #28757]
  - Update syscall lists for Linux 5.16


author: Florian Weimer <fweimer@redhat.com> - 2.34-22
changelog:
  - Sync with upstream branch release/2.34/master,
    commit aa601d024424c40ae9a69b0c4e394a70ea0570c8:
  - x86: Use CHECK_FEATURE_PRESENT to check HLE [BZ #27398]
  - x86: Filter out more Intel CPUs for TSX [BZ #27398]
  - Fix glibc 2.34 ABI omission (missing GLIBC_2.34 in dynamic loader)
  - x86: Fix __wcsncmp_evex in strcmp-evex.S [BZ# 28755]
  - x86: Fix __wcsncmp_avx2 in strcmp-avx2.S [BZ# 28755]


author: Carlos O'Donell <carlos@redhat.com> - 2.34-32
changelog:
  - Sync with upstream branch release/2.34/master,
    commit c66c92181ddbd82306537a608e8c0282587131de:
  - posix/glob.c: update from gnulib (BZ#25659)
  - linux: Fix fchmodat with AT_SYMLINK_NOFOLLOW for 64 bit time_t (BZ#29097)


author: Florian Weimer <fweimer@redhat.com> - 2.34-33
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 91c2e6c3db44297bf4cb3a2e3c40236c5b6a0b23:
  - dlfcn: Implement the RTLD_DI_PHDR request type for dlinfo
  - manual: Document the dlinfo function
  - x86: Fix fallback for wcsncmp_avx2 in strcmp-avx2.S [BZ #28896]
  - x86: Fix bug in strncmp-evex and strncmp-avx2 [BZ #28895]
  - x86: Set .text section in memset-vec-unaligned-erms
  - x86-64: Optimize bzero
  - x86: Remove SSSE3 instruction for broadcast in memset.S (SSE2 Only)
  - x86: Improve vec generation in memset-vec-unaligned-erms.S
  - x86-64: Fix strcmp-evex.S
  - x86-64: Fix strcmp-avx2.S
  - x86: Optimize strcmp-evex.S
  - x86: Optimize strcmp-avx2.S
  - manual: Clarify that abbreviations of long options are allowed
  - Add HWCAP2_AFP, HWCAP2_RPRES from Linux 5.17 to AArch64 bits/hwcap.h
  - aarch64: Add HWCAP2_ECV from Linux 5.16
  - Add SOL_MPTCP, SOL_MCTP from Linux 5.16 to bits/socket.h
  - Update kernel version to 5.17 in tst-mman-consts.py
  - Update kernel version to 5.16 in tst-mman-consts.py
  - Update syscall lists for Linux 5.17
  - Add ARPHRD_CAN, ARPHRD_MCTP to net/if_arp.h
  - Update kernel version to 5.15 in tst-mman-consts.py
  - Add PF_MCTP, AF_MCTP from Linux 5.15 to bits/socket.h


author: Florian Weimer <fweimer@redhat.com> - 2.34-34
changelog:
  - Sync with upstream branch release/2.34/master,
    commit ede8d94d154157d269b18f3601440ac576c1f96a:
  - csu: Implement and use _dl_early_allocate during static startup
  - Linux: Introduce __brk_call for invoking the brk system call
  - Linux: Implement a useful version of _startup_fatal
  - ia64: Always define IA64_USE_NEW_STUB as a flag macro
  - Linux: Define MMAP_CALL_INTERNAL
  - i386: Honor I386_USE_SYSENTER for 6-argument Linux system calls
  - i386: Remove OPTIMIZE_FOR_GCC_5 from Linux libc-do-syscall.S
  - elf: Remove __libc_init_secure
  - Linux: Consolidate auxiliary vector parsing (redo)
  - Linux: Include <dl-auxv.h> in dl-sysdep.c only for SHARED
  - Revert "Linux: Consolidate auxiliary vector parsing"
  - Linux: Consolidate auxiliary vector parsing
  - Linux: Assume that NEED_DL_SYSINFO_DSO is always defined
  - Linux: Remove DL_FIND_ARG_COMPONENTS
  - Linux: Remove HAVE_AUX_SECURE, HAVE_AUX_XID, HAVE_AUX_PAGESIZE
  - elf: Merge dl-sysdep.c into the Linux version
  - elf: Remove unused NEED_DL_BASE_ADDR and _dl_base_addr
  - x86: Optimize {str|wcs}rchr-evex
  - x86: Optimize {str|wcs}rchr-avx2
  - x86: Optimize {str|wcs}rchr-sse2
  - x86: Cleanup page cross code in memcmp-avx2-movbe.S
  - x86: Remove memcmp-sse4.S
  - x86: Small improvements for wcslen
  - x86: Remove AVX str{n}casecmp
  - x86: Add EVEX optimized str{n}casecmp
  - x86: Add AVX2 optimized str{n}casecmp
  - x86: Optimize str{n}casecmp TOLOWER logic in strcmp-sse42.S
  - x86: Optimize str{n}casecmp TOLOWER logic in strcmp.S
  - x86: Remove strspn-sse2.S and use the generic implementation
  - x86: Remove strpbrk-sse2.S and use the generic implementation
  - x86: Remove strcspn-sse2.S and use the generic implementation
  - x86: Optimize strspn in strspn-c.c
  - x86: Optimize strcspn and strpbrk in strcspn-c.c
  - x86: Code cleanup in strchr-evex and comment justifying branch
  - x86: Code cleanup in strchr-avx2 and comment justifying branch
  - x86_64: Remove bcopy optimizations
  - x86-64: Remove bzero weak alias in SS2 memset
  - x86_64/multiarch: Sort sysdep_routines and put one entry per line
  - x86: Improve L to support L(XXX_SYMBOL (YYY, ZZZ))
  - fortify: Ensure that __glibc_fortify condition is a constant [BZ #29141]


author: Arjun Shankar <arjun@redhat.com> - 2.34-35
changelog:
  - Sync with upstream branch release/2.34/master,
    commit ff450cdbdee0b8cb6b9d653d6d2fa892de29be31:
  - Fix deadlock when pthread_atfork handler calls pthread_atfork or dlclose
  - x86: Fallback {str|wcs}cmp RTM in the ncmp overflow case [BZ #29127]
  - string.h: fix __fortified_attr_access macro call [BZ #29162]
  - linux: Add a getauxval test [BZ #23293]
  - rtld: Use generic argv adjustment in ld.so [BZ #23293]
  - S390: Enable static PIE


author: Florian Weimer <fweimer@redhat.com> - 2.34-36
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 4c92a1041257c0155c6aa7a182fe5f78e477b0e6:
  - powerpc: Fix VSX register number on __strncpy_power9 [BZ #29197]
  - socket: Fix mistyped define statement in socket/sys/socket.h (BZ #29225)
  - iconv: Use 64 bit stat for gconv_parseconfdir (BZ# 29213)
  - catgets: Use 64 bit stat for __open_catalog (BZ# 29211)
  - inet: Use 64 bit stat for ruserpass (BZ# 29210)
  - socket: Use 64 bit stat for isfdtype (BZ# 29209)
  - posix: Use 64 bit stat for fpathconf (_PC_ASYNC_IO) (BZ# 29208)
  - posix: Use 64 bit stat for posix_fallocate fallback (BZ# 29207)
  - misc: Use 64 bit stat for getusershell (BZ# 29204)
  - misc: Use 64 bit stat for daemon (BZ# 29203)


author: Arjun Shankar <arjun@redhat.com> - 2.34-38
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 94ab2088c37d8e4285354af120b7ed6b887b9e53:
  - nss: handle stat failure in check_reload_and_get (BZ #28752)
  - nss: add assert to DB_LOOKUP_FCT (BZ #28752)
  - nios2: Remove _dl_skip_args usage (BZ# 29187)
  - hppa: Remove _dl_skip_args usage (BZ# 29165)
  - nptl: Fix __libc_cleanup_pop_restore asynchronous restore (BZ#29214)


author: Arjun Shankar <arjun@redhat.com> - 2.34-40
changelog:
  - Sync with upstream branch release/2.34/master,
    commit b2f32e746492615a6eb3e66fac1e766e32e8deb1:
  - malloc: Simplify implementation of __malloc_assert
  - Update syscall-names.list for Linux 5.18
  - x86: Add missing IS_IN (libc) check to strncmp-sse4_2.S
  - x86: Move mem{p}{mov|cpy}_{chk_}erms to its own file
  - x86: Move and slightly improve memset_erms
  - x86: Add definition for __wmemset_chk AVX2 RTM in ifunc impl list
  - x86: Put wcs{n}len-sse4.1 in the sse4.1 text section
  - x86: Align entry for memrchr to 64-bytes.
  - x86: Add BMI1/BMI2 checks for ISA_V3 check
  - x86: Cleanup bounds checking in large memcpy case
  - x86: Add bounds `x86_non_temporal_threshold`
  - x86: Add sse42 implementation to strcmp's ifunc
  - x86: Fix misordered logic for setting `rep_movsb_stop_threshold`
  - x86: Align varshift table to 32-bytes
  - x86: ZERO_UPPER_VEC_REGISTERS_RETURN_XTEST expect no transactions
  - x86: Shrink code size of memchr-evex.S
  - x86: Shrink code size of memchr-avx2.S
  - x86: Optimize memrchr-avx2.S
  - x86: Optimize memrchr-evex.S
  - x86: Optimize memrchr-sse2.S
  - x86: Add COND_VZEROUPPER that can replace vzeroupper if no `ret`
  - x86: Create header for VEC classes in x86 strings library
  - x86_64: Add strstr function with 512-bit EVEX
  - x86-64: Ignore r_addend for R_X86_64_GLOB_DAT/R_X86_64_JUMP_SLOT
  - x86_64: Implement evex512 version of strlen, strnlen, wcslen and wcsnlen
  - x86_64: Remove bzero optimization
  - x86_64: Remove end of line trailing spaces
  - nptl: Fix ___pthread_unregister_cancel_restore asynchronous restore
  - linux: Fix mq_timereceive check for 32 bit fallback code (BZ 29304)


author: Florian Weimer <fweimer@redhat.com> - 2.34-57
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6484ae5b8c4d4314f748e4d3c9a9baa5385e57c5
  - malloc: Fix -Wuse-after-free warning in tst-mallocalign1 [BZ #26779]
  - s_sincosf.h: Change pio4 type to float [BZ #28713]
  - math: Properly cast X_TLOSS to float [BZ #28713]
  - Regenerate ulps on x86_64 with GCC 12
  - Avoid -Wuse-after-free in tests [BZ #26779].
  - Fix build of nptl/tst-thread_local1.cc with GCC 12
  - Fix stdio-common tests for GCC 12 -Waddress
  - Fix stdlib/tst-setcontext.c for GCC 12 -Warray-compare
  - resolv: Avoid GCC 12 false positive warning [BZ #28439].
  - intl: Avoid -Wuse-after-free [BZ #26779]
  - elf: Drop elf/tls-macros.h in favor of __thread and tls_model attributes [BZ #28152] [BZ #28205]
  - time: Set daylight to 1 for matching DST/offset change (RHBZ#2155352)
  - elf/tst-tlsopt-powerpc fails when compiled with -mcpu=power10 (BZ# 29776)
  - time: Use 64 bit time on tzfile
  - nscd: Use 64 bit time_t on libc nscd routines (BZ# 29402)
  - nis: Build libnsl with 64 bit time_t
  - Use LFS and 64 bit time for installed programs (BZ #15333)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
changelog:
  - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
  - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
    can be used for stack allocation.
  - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
    0, glibc will madvise the kernel not to use allow hugepages for stack
    allocations.
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.3
changelog:
  - CVE-2023-4911: tunables: Terminate immediately if end of input is reached
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.3.7
changelog:
  - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode (#2234716).
  - CVE-2203-4806: potential use-after-free in getaddrinfo.
  - CVE-2023-4813: potential use-after-free in gaih_inet.
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
changelog:
  - Forward-port Oracle patches for ol9
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
changelog:
  - Forward-port Oracle patches for ol9-u4
    Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    Oracle history:
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
changelog:
  - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Felipe Borges <feborges@redhat.com> - 40.0-23
changelog:
  - Backport translations for Multitasking panel
  - Make Multitasking panel capable of handling Right-to-Left locales
    Resolves: #2049524


author: Felipe Borges <feborges@redhat.com> - 40.0-25
changelog:
  - Backport translations for Multitasking panel
  - Make Multitasking panel capable of handling Right-to-Left locales
    Resolves: #2105228


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.0-1
changelog:
  - Update to 3.40.0
  - Disable the Facebook, Flickr and Foursquare providers
  - Remove Photos support from the Google provider
  Resolves: #1913641


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Florian Müllner <fmuellner@redhat.com> - 40.10-4
changelog:
  - Fix struts on login screen
    Resolves: #2145185
  - Allow gnome portal to access introspection API
    Resolves: #2079194


author: Ray Strode <rstrode@redhat.com> - 40.8-3
changelog:
  - Backport latest, working, version of ChoiceList extension
  - Regenerate stylesheet patch
    Related: #1993954


author: Florian Müllner <fmuellner@redhat.com> - 40.9-3
changelog:
  - Fix markup handling in highlighter
    Resolves: #2049194
  - Fix warning on restacking
    Resolves: #2053638


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-4
changelog:
  - Specify FIPS140-3 module name and version
  - fips: allow a few more primes in RSA key generation
  - fips: tighten PKCS#12 algorithm checks
  - Correct return value of KTLS stub API


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-7
changelog:
  - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
  - Ensure allowlisting API is called before priority string is constructed (#2042532)
  - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-9
changelog:
  - Stop using typeof keyword for tss2 function prototypes (#2057490)
  - Ensure allowlist API is called before priority string construction (#1975421)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-5
changelog:
  - Block DES-CBC usage in decrypting PKCS#12 bag under FIPS (#2115314)
  - sysrng: reseed source DRBG for prediction resistance


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-6
changelog:
  - Mark RSA SigVer operation approved for known modulus sizes (#2119770)
  - accelerated: clear AVX bits if it cannot be queried through XSAVE


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-12
changelog:
  - fips: mark PBKDF2 with short key and output sizes non-approved
  - fips: only mark HMAC as approved in PBKDF2
  - fips: mark gnutls_key_generate with short key sizes non-approved
  - fips: fix checking on hash algorithm used in ECDSA
  - fips: preserve operation context around FIPS selftests API


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-3
changelog:
  - Limit input size for AES-GCM according to SP800-38D (#2108635)
  - Do not treat GPG verification errors as fatal
  - Remove gnutls-3.7.6-libgnutlsxx-const.patch


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-13
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2144535)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2144537)


author: Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-14
changelog:
  - fips: remove library path checking from FIPS integrity check (#2149638)
  - fips: rename hmac file to its previous name (#2149640)


author: Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-13
changelog:
  - fips: make XTS key check failure not fatal (#2130971)
  - enable source archive verification again (#2127094)
  - clear server's session ticket indication at rehandshake (#2136072)
  - crypto-api: add block cipher API with automatic padding (#2084161)
  - fips: remove library path checking from FIPS integrity check (#2140908)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-23.3
changelog:
  - x509: detect loop in certificate chain (RHEL-21759)
  - fips: Zeroize temporary values in integrity check (RHEL-21870)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-23.4
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28958)
  - Fix potential crash during chain building/verification (RHEL-28953)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.8-1
changelog:
  - update to 7.5.8 tagged upstream community sources, see CHANGELOG
  - remove unused dependencies selfsigned, http-signature and gofpdf


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-2
changelog:
  - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
  - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-3
changelog:
  - use HMAC-SHA-256 instead of SHA-1 to generate password reset tokens
  - update FIPS tests in check phase


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
changelog:
  - update to 7.5.15 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
  - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
  - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
  - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
  - resolve CVE-2021-23648 sanitize-url: XSS
  - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  - declare Node.js dependencies of subpackages
  - make vendor and webpack tarballs reproducible


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-3
changelog:
  - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode
  - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip
  - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal


author: Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.8-1
changelog:
  - update to 9.0.8 tagged upstream community sources, see CHANGELOG
  - do not list /usr/share/grafana/conf twice
  - drop makefile in favor of create_bundles.sh script
  - sync provides/obsoletes with CentOS versions
  - drop husky patch


author: Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.9-1
changelog:
  - update to 9.0.9 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-35957 grafana: Escalation from admin to server admin when auth proxy is used (rhbz#2125530)


author: Stan Cox <scox@redhat.com> 9.0.9-2
changelog:
  - resolve CVE-2022-39229 grafana: Using email as a username can prevent other users from signing in
  - resolve CVE-2022-2880 CVE-2022-41715 grafana: various flaws


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 9.0.9-3
changelog:
  - resolve CVE-2023-3128 grafana: Remove Email Lookup from oauth integrations
    (rhbz#2213701 rhbz#2213626)


author: Darren Archibald <darren.archibald@oracle.com> - 9.0.9-4
changelog:
  - Resolve CVE-2023-44487 Rapid Reset Attack
  - Resolve CVE-2023-39325 rapid stream resets can cause excessive work


author: Stan Cox <scox@redhat.com> 9.2.10-3
changelog:
  - bumps exporter-toolkit to v0.7.3, sanitize-url@npm to 6.0.2, skip problematic s390 tests, License AGPL-3.0-only.


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-10
changelog:
  - Resolves RHEL-7505
  - Adds a selinux policy for grafana
  - Resolves RHEL-12666
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-13
changelog:
  - Resolves RHEL-19296
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-6
changelog:
  - resolve RHEL-12665
  - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work
  - testing is turned off due to test failures caused by testing date mismatch


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.0.0-4
changelog:
  - update to 5.0.0 tagged upstream community sources, see CHANGELOG
  - install plugin in /usr/share and create symlink from /var using
    systemd-tmpfiles to work on rpm-ostree based distributions
  - revert the breaking change (change of internal plugin IDs) of upstream v5.0.0,
    i.e. there are no breaking changes when performing this upgrade
  - enable Go modules in build process
  - make vendor and webpack tarballs reproducible
  - drop makefile in favor of create_bundles.sh script


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Robbie Harwood <rharwood@redhat.com> - 2.06-27.el9_0.7
changelog:
  - CVE fixes for 2022-06-07
  - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  - Resolves: #2089810


author: EL Errata <el-errata_ww@oracle.com> - 2.06-27.0.5.el9_0.7
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation
  - Update bug url [Orabug: 34202300]
  - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
  - Update signing certificate [JIRA: OLDIS-16371]
  - fix SBAT data [JIRA: OLDIS-16371]
  - Update requires [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: EL Errata <el-errata_ww@oracle.com> - 2.06-46.0.4.el9_1.3
changelog:
  - Bump SBAT metadata for grub to 3 [Orabug: 34872719]
  - Fix CVE-2022-3775 [Orabug: 34871953]
  - Enable signing for aarch64 EFI
  - Fix signing certificate names
  - Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation
  - Update bug url [Orabug: 34202300]
  - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
  - Update signing certificate [JIRA: OLDIS-16371]
  - fix SBAT data [JIRA: OLDIS-16371]
  - Update requires [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.06-61.0.1.el9_2.1
changelog:
  - efi/http: change uint32_t to uintn_t (#2207851)
  - kern/ieee1275/init: Convert plain numbers to constants in Vec5 (#2183939)
  - kern/ieee1275/init: Extended support in Vec5 (#2183939)


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-67
changelog:
  - grub2-mkconfig: dont overwrite BLS cmdline if BLSCFG is true
  - Resolves: #2203203
  - Resolves: #2212320
  - Resolves: #2221543


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-68
changelog:
  - Revert previous patch as it breaks install
  - Related: #2203203
  - Related: #2212320
  - Related: #2221543


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-69
changelog:
  - grub2-mkconfig: dont overwrite BLS cmdline if BLSCFG is true
  - This is an updated version of the 2.06-67 patch
  - Resolves: #2203203
  - Resolves: #2212320
  - Resolves: #2221543


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-73
changelog:
  - search command: add flag to only search root dev
  - Resolves: #RHEL-20526
  - Resolves: #CVE-2023-4001


author: EL Errata <el-errata_ww@oracle.com> - 2.06-80.0.1
changelog:
  - Support setting custom kernels as default kernels [Orabug: 36043978]
  - Bump SBAT metadata for grub to 3 [Orabug: 34872719]
  - Fix CVE-2022-3775 [Orabug: 34871953]
  - Enable signing for aarch64 EFI
  - Fix signing certificate names
  - Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation
  - Update bug url [Orabug: 34202300]
  - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
  - Update signing certificate [JIRA: OLDIS-16371]
  - fix SBAT data [JIRA: OLDIS-16371]
  - Update requires [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.06-27.0.1
changelog:
  - Update signing certificate [JIRA: OLDIS-16371]
  - fix SBAT data [JIRA: OLDIS-16371]
  - Update requires [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.06-27.0.2
changelog:
  - Update bug url [Orabug: 34202300]
  - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.06-27.0.3
changelog:
  - Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697,
         CVE-2022-28733, CVE-2022-28734, CVE-2022-28735 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation


author: Alex Burmashev <alexander.burmashev@oracle.com> 2.06-46.0.1
changelog:
  - Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation
  - Update bug url [Orabug: 34202300]
  - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
  - Update signing certificate [JIRA: OLDIS-16371]
  - fix SBAT data [JIRA: OLDIS-16371]
  - Update requires [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Tom Stellard <tstellar@redhat.com> - 8.40-50
changelog:
  - Use make_build macro instead of plain make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: EL Errata <el-errata_ww@oracle.com> - 8.40-55.0.1
changelog:
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)


author: Mark Will <mark.will@oracle.com> - 8.40-63.0.1
changelog:
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)
  - Do not add /boot twice for btrfs subvolumes [Orabug: 34380742]


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-6
changelog:
  - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,
    CVE-2022-1924, CVE-2022-1925, CVE-2022-2122
    Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,
              rhbz#2131054, rhbz#2131060, rhbz#2131064


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-6
changelog:
  - Clean up NetworkManager connection files
  - Add the copy-patches.sh script from virt-v2v
    resolves: rhbz#1980922


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-5
changelog:
  - Rebase to guestfs-tools 1.48.2
    resolves: rhbz#2059286
  - Default to --selinux-relabel in various tools
    resolves: rhbz#2075718, rhbz#2089748
  - Add lvm system.devices cleanup operation to virt-sysprep
    resolves: rhbz#2072493
  - Refactor virt-customize --install, --update options in common submodule
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102721
  - Fix virt-sysprep and LUKS-on-LVM guests
    resolves: rhbz#2106286


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-8
changelog:
  - Support Rocky Linux in virt-customize
    resolves: rhbz#2133443
  - Disable OpenSUSE repo in virt-builder
    resolves: rhbz#2145160


author: Richard W.M. Jones <rjones@redhat.com> - 1.50.1-1
changelog:
  - Rebase to guestfs-tools 1.50.1
    resolves: rhbz#2168626
  - Fix virt-drivers inspection of RHEL 9.2 guests
    resolves: rhbz#2184963


author: Laszlo Ersek <lersek@redhat.com> - 1.50.1-3
changelog:
  - let virt-inspector recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable "make check"; we now use "-cpu max" (libguestfs 30f74f38bd6e)
    resolves: rhbz#2209280


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.1
  - Related: Jira:RHEL-2112


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-7
changelog:
  - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
    smuggling
  - Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in 
    ap_strcmp_match()
  - Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
    by hop-by-hop mechanism
  - Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
  - Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
  - Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
  - Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
    with websockets


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-11
changelog:
  - Resolves: #2162500 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162486 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162510 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-11.4
changelog:
  - Resolves: #2177752 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.51-5
changelog:
  - Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
    when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.51-7
changelog:
  - Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-1
changelog:
  - new version 2.4.53
  - Resolves: #2079939 - httpd rebase to 2.4.53
  - Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
    with core


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-3
changelog:
  - Resolves: #2065677 - httpd minimisation for ubi-micro
  - minimize httpd dependencies (new httpd-core package)
  - mod_systemd and mod_brotli are now packaged in the main httpd package


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-7.1
changelog:
  - Resolves: #2165975 - prevent sscg creating /dhparams.pem
  - Resolves: #2165970 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2165973 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2165974 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-7.5
changelog:
  - Resolves: #2177751 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-1
changelog:
  - Resolves: #2184403 - rebase httpd to 2.4.57
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-2
changelog:
  - Resolves: #2186645 - Fix issue found by covscan in httpd package
  - Resolves: #2173295 - Include Apache httpd module mod_authnz_fcgi


author: Neal Gompa <ngompa@centosproject.org> - 2.4.51-4
changelog:
  - Use NAME from os-release(5) for vendor string
    Resolves: #2029071 - httpd on CentOS identifies as RHEL


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.51-6
changelog:
  - Resolves: #2035031 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.51-7
changelog:
  - Resolves: #2065250 - CVE-2022-22720 httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.36.20190303git
changelog:
  - Synchronize RHEL 8 changes [rhbz#1957651]
  - Resolves: rhbz#1957651
    ([Hyper-V][RHEL-9] Update build to rhel format and syncup RHEL 8 content for hyperv-daemons.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.38.20190303git
changelog:
  - hpvd-Enable-build-on-aarch64.patch [bz#2020148]
  - Resolves: bz#2020148
    ([Hyper-V][RHEL9.0][ARM] No hyperv-daemons package built for aarch64 platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.39.20190303git
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2026371]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2026371]
  - Resolves: bz#2026371
    ([RHEL9][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update for RHEL9 since the ifdown/ifup was not supported on RHEL9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2103188]
  - Resolves: bz#2103188
    ([Hyper-V][RHEL-9] hypervkvpd.service service ordering)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git.el9_1.1
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2150268]
  - Resolves: bz#2150268
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0 [rhel-9.1.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.41.20190303git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2122115]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139457]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139457]
  - Resolves: bz#2122115
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139457
    ([Hyper-V][RHEL9.2] Update Hyper-V-Daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.11-10
changelog:
  - Replace kasumi with kausmi-unicode
  - Delete to require intltool
  - Delete to call gettext.bind_textdomain_codeset()


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
changelog:
  - Rebase to JSS 5.0.2
  - Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1
changelog:
  - Rebase to JSS 5.0.3
  - Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.1-1
changelog:
  - Rebase to JSS 5.2.1
  - Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2
changelog:
  - Rebase to JSS 5.3.0-beta2
  - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
changelog:
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
changelog:
  - Rebase to PKI 11.2.1
  - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
changelog:
  - Rebase to PKI 11.3.0-beta1
  - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
  - Bug #1883477 - [RFE] Automatic expired certificate purging
  - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
  - Bug #2106452 - softhsm2: Unable to create cert: Private key not found
  - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
changelog:
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Benjamin Gilbert <bgilbert@redhat.com> - 2.9.0-4
changelog:
  - Drop Git commit hash from Release
  - Correctly enable IMDS patch
  - Switch to %autosetup
  - Set ExclusiveArch from %go_arches
  - Drop mention of networkd in package description


author: Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-1
changelog:
  - Suppress hardcoded library path warning
  - Fix go-mods-to-bundled-provides script to parse correct rpm version
  - Import specfile from Fedora


author: Sohan Kunkerkar <skunkerk@redhat.com> - 2.13.0-2
changelog:
  - Rename -validate-nonlinux subpackage to -validate-redistributable
  - Add static Linux binaries to -redistributable
  - Fix macro invocation in comment
  - Avoid kernel lockdown on VMware when running with secure boot


author: Benjamin Gilbert <bgilbert@redhat.com> - 2.14.0-1
changelog:
  - New release
  - Add ignition-apply symlink
  - Add ignition-rmcfg symlink and ignition-delete-config.service


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-7
changelog:
  - Resolves: rhbz#2067971 Consequences of FIPS crypto policy tightening in RHEL 9
    - KRB instance: make provision to work with crypto policy without SHA-1 HMAC types
    - tests: ensure AD-SUPPORT subpolicy is active
    - ipatests: extend AES keyset to SHA2-based ones
    - freeipa.spec: bump crypto-policies dependency for CentOS 9 Stream
    - Kerberos instance: default to AES256-SHA2 for master key encryption
    - test_otp: do not use paramiko unless it is really needed
    - test_krbtpolicy: skip SPAKE-related tests in FIPS mode
    - Support AES for KRA archival wrapping
    - Set AES as default for KRA archival wrapping


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-8
changelog:
  - Resolves: rhbz#2067971 Consequences of FIPS crypto policy tightening in RHEL 9
    - tests: ensure AD-SUPPORT subpolicy is active in more cases
    - ipatests: fix check for AD topology being present


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.10-1
changelog:
  - Resolves: rhbz#2079469 [Rebase] Rebase ipa to latest 4.9.x release
  - Resolves: rhbz#2012911 named journalctl logs shows 'zone testrealm.test/IN: serial (serialnumber) write back to LDAP failed.'
  - Resolves: rhbz#2069202 [RFE] add support for authenticating against external IdP services using OAUTH2 preauthenticaiton mechanism provided by SSSD
  - Resolves: rhbz#2083218 ipa-dnskeysyncd floods /var/log/messages with DEBUG messages
  - Resolves: rhbz#2089750 RFE: Improve error message with more detail for ipa-replica-install command
  - Resolves: rhbz#2091988 [RFE] Add code to check password expiration on ldap bind
  - Resolves: rhbz#2094400 [RFE] ipa-client-install should provide option to enable subid: sss in /etc/nsswitch.conf
  - Resolves: rhbz#2096922 secret in ipa-pki-proxy.conf is not changed if new requiredSecret value is present in /etc/pki/pki-tomcat/server.xml


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.10.0-1
changelog:
  - Resolves: rhbz#747959 [RFE] Support random serial numbers in IPA certificates
  - Resolves: rhbz#2100227 [UX] Preserving a user account produces output saying it was deleted


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.0-6
changelog:
  - Resolves: rhbz#2110014 ldap bind occurs when admin user changes password with gracelimit=0
  - Resolves: rhbz#2112901 RFE: Allow grace login limit to be set in IPA WebUI
  - Resolves: rhbz#2115495 group password policy by default does not allow grace logins
  - Resolves: rhbz#2116966 ipa-replica-manage displays traceback: Unexpected error: 'bool' object has no attribute 'lower'


author: Alan Steinberg <alan.steinberg@oracle.com> - 4.10.0-6.0.1
changelog:
  - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
  - Set minimum version of samba requirement to OL9.1 version.


author: Rafael Jeffman <rjeffman@redhat.com> - 4.10.0-7
changelog:
  - Resolves: rhbz#2124547 Attempt to log in as "root" user with admin's password in Web UI does not properly fail
  - Resolves: rhbz#2137555 Attempt to log in as "root" user with admin's password in Web UI does not properly fail [rhel-9.1.0.z]


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.0-8
changelog:
  - Resolves: rhbz#2149274 vault interoperability with older RHEL systems is broken [rhel-9.1.0.z]
  - Resolves: rhbz#2150270 ipa-client-install does not maintain server affinity during installation [rhel-9.1.0.z]


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-1
changelog:
  - Resolves: rhbz#2141315 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.2
  - Resolves: rhbz#2094673 ipa-client-install should just use system wide CA store and do not specify TLS_CACERT in ldap.conf
  - Resolves: rhbz#2117167 After leapp upgrade on ipa-client ipa-server package installation failed. (`REQ_FULL_WITH_MEMBERS` returns object from wrong domain)
  - Resolves: rhbz#2127833 Password Policy Grace login limit allows invalid maximum value
  - Resolves: rhbz#2143224 [RFE] add certificate support to ipa-client instead of one time password
  - Resolves: rhbz#2144736 vault interoperability with older RHEL systems is broken
  - Resolves: rhbz#2148258 ipa-client-install does not maintain server affinity during installation
  - Resolves: rhbz#2148379 Add warning for empty targetattr when creating ACI with RBAC
  - Resolves: rhbz#2148380 OTP token sync always returns OK even with random numbers
  - Resolves: rhbz#2148381 Deprecated feature idnssoaserial in IdM appears when creating reverse dns zones
  - Resolves: rhbz#2148382 Introduction of URI records for kerberos breaks location functionality


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-2
changelog:
  - Resolves: rhbz#2148887 MemberManager with groups fails
  - Resolves: rhbz#2150335 idm:client is missing dependency on krb5-pkinit


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-4
changelog:
  - Resolves: rhbz#2161284 'ERROR Could not remove /tmp/tmpbkw6hawo.ipabkp' can be seen prior to 'ipa-client-install' command was successful
  - Resolves: rhbz#2164403 ipa-trust-add with --range-type=ipa-ad-trust-posix fails while creating an ID range
  - Resolves: rhbz#2162677 RFE: Implement support for PKI certificate and request pruning
  - Resolves: rhbz#2167312 - Backport latest test fixes in python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-5
changelog:
  - Resolves: rhbz#2162656 Passwordless (GSSAPI) SSH not working for subdomain
  - Resolves: rhbz#2166326 Removing the last DNS type for ipa-ca does not work
  - Resolves: rhbz#2167473 RFE - Add a warning note about possible performance impact of the Auto Member rebuild task
  - Resolves: rhbz#2168244 requestsearchtimelimit=0 doesn't seems to be work with ipa-acme-manage pruning command


author: Craig Guiller <craig.guiller@oracle.com> - 4.10.1-9.0.1
changelog:
  - Resolves: rhbz#2227831 Interrupt request processing in ipadb_fill_info3() if connection to 389ds is lost


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-1
changelog:
  - Resolves: rhbz#2196426 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.3
  - Resolves: rhbz#2192969 Better handling of the command line and web UI cert search and/or list features
  - Resolves: rhbz#2192625 Better catch of the IPA web UI event "IPA Error 4301:CertificateOperationError", and IPA httpd error CertificateOperationError
  - Resolves: rhbz#2188567 IPA client Kerberos configuration incompatible with java
  - Resolves: rhbz#2182683 Tolerate absence of PAC ticket signature depending of domain and servers capabilities [rhel-9]
  - Resolves: rhbz#2180914 Sequence processing failures for group_add using server context
  - Resolves: rhbz#2165880 Add RBCD support to IPA
  - Resolves: rhbz#2160399 get_ranges - [file ipa_sidgen_common.c, line 276]: Failed to convert LDAP entry to range struct


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-2
changelog:
  - Resolves: rhbz#2192969 Better handling of the command line and web UI cert search and/or list features
  - Resolves: rhbz#2214933 Uninstalling of the IPA server is encountering a failure during the unconfiguration of the CA (Unconfiguring CA)
  - Resolves: rhbz#2216114 After updating the RHEL from 8.7 to 8.8, IPA services fails to start
  - Resolves: rhbz#2216549 Upgrade to 4.9.10-6.0.1 fails: attributes are managed by topology plugin
  - Resolves: rhbz#2216611 Backport latest test fixes in python3-ipatests
  - Resolves: rhbz#2216872 User authentication failing on OTP validation using multiple tokens, succeeds with password only


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-3
changelog:
  - Resolves: rhbz#2229712 Delete operation protection for admin user
  - Resolves: rhbz#2227831 Interrupt request processing in ipadb_fill_info3() if connection to 389ds is lost
  - Resolves: rhbz#2227784 libipa_otp_lasttoken plugin memory leak
  - Resolves: rhbz#2224570 Improved error messages are needed when attempting to add a non-existing idp to a user
  - Resolves: rhbz#2230251 Backport latest test fixes to python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-4
changelog:
  - Resolves: rhbz#2231847 RHEL 8.8 & 9.2 fails to create AD trust with STIG applied
  - Resolves: rhbz#2232056 Include latest test fixes in python3-ipatests


author: Akshata Konala <akshata.konala@oracle.com> - 4.10.2-4.0.1.1
changelog:
  - Resolves: RHEL-12373 ACIs are missing for RBCD self-management
  - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-6
changelog:
  - Resolves: RHEL-24360 IPA stops working if HTTP/... service principal was created before FreeIPA 4.4.0 and never modified
  - Resolves: RHEL-24363 Pagure #9517: sidgen plugin does not ignore staged users
  - Resolves: RHEL-24366 Memory leak in IdM's KDC
  - Resolves: RHEL-24370 session cookie can't be read
  - Resolves: RHEL-24373 Gating-DL1 test failure in test_integration/test_dns_locations.py::TestDNSLocations::()::test_ipa_ca_records
  - Resolves: RHEL-24376 Make sure a default NetBIOS name is set if not passed in by ADTrust instance constructor
  - Resolves: RHEL-24464 healthcheck reports nsslapd-accesslog-logbuffering is set to 'off'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-7
changelog:
  - Resolves: RHEL-25741 ipa-kdb: Cannot determine if PAC generator is available
  - Resolves: RHEL-25707 tier-1-upstream-dns-locations failed on RHEL8.8 gating


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-2
changelog:
  - Resolves: RHEL-14292 Backport latest test fixes in python3-ipatests
  - Resolves: RHEL-15443 Server install: failure to install with externally signed CA because of timezone issue
  - Resolves: RHEL-15444 Minimum length parameter in pwpolicy cannot be removed with empty string
  - Resolves: RHEL-14842 Upstream xmlrpc tests are failing in RHEL9.4


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-5
changelog:
  - Resolves: RHEL-12589 ipa: Invalid CSRF protection
  - Resolves: RHEL-19748 ipa hbac-test did not report that it hit an arbitrary search limit
  - Resolves: RHEL-21059 'DogtagCertsConfigCheck' fails, displaying the error message 'Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca'
  - Resolves: RHEL-21804 ipa client 4.10.2 - Failed to obtain host TGT
  - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix
  - Resolves: RHEL-21810 ipa-client-install --automount-location does not work
  - Resolves: RHEL-21811 Handle change in behavior of pki-server ca-config-show in pki 11.5.0
  - Resolves: RHEL-21812 Backport latest test fixes in ipa
  - Resolves: RHEL-21813 krb5kdc fails to start when pkinit and otp auth type is enabled in ipa
  - Resolves: RHEL-21815 IPA 389ds plugins need to have better logging and tracing
  - Resolves: RHEL-21937 Make sure a default NetBIOS name is set if not passed in by ADTrust instance constructor


author: 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-6
changelog:
  - Resolves: RHEL-23627 IPA stops working if HTTP/... service principal was created before FreeIPA 4.4.0 and never modified
  - Resolves: RHEL-23625 sidgen plugin does not ignore staged users
  - Resolves: RHEL-23621 session cookie can't be read
  - Resolves: RHEL-22372 Gating-DL1 test failure in test_integration/test_dns_locations.py::TestDNSLocations::()::test_ipa_ca_records
  - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix
  - Resolves: RHEL-17996 Memory leak in IdM's KDC


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-7
changelog:
  - Resolves: RHEL-25260 tier-1-upstream-dns-locations failed on RHEL8.8 gating
  - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available
  - Resolves: RHEL-25815 Backport latest test fixes in python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-8
changelog:
  - Resolves: RHEL-12143 'ipa vault-add is failing with ipa: ERROR: an internal error has occurred in FIPS mode
  - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-9
changelog:
  - Resolves: RHEL-28258 vault fails on non-fips client if server is in FIPS mode
  - Resolves: RHEL-26154 ipa: freeipa: specially crafted HTTP requests potentially lead to DoS or data exposure


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-10
changelog:
  - Resolves: RHEL-23377 Enforce OTP for ldap bind (in some scenarios)
  - Resolves: RHEL-29745 Unable to re-add broken AD trust - NT_STATUS_INVALID_PARAMETER
  - Resolves: RHEL-30905 Backport latest test fixes in ipa


author: EL Errata <el-errata_ww@oracle.com> - 4.11.0-10.0.1
changelog:
  - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
  - Add bind to ipa-server-common Requires [Orabug: 36518596]


author: Julien Rische <jrische@redhat.com> - 4.11.0-15
changelog:
  - Resolves: RHEL-32231 CVE-2024-3183 ipa: freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-31409 CVE-2024-2698 ipa: freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-8
changelog:
  - Resolves: rhbz#2005864 ipa cert-request replaces user certificate instead of adding
   - Don't store entries with a usercertificate in the LDAP cache
   - ipatests: Test that a user can be issued multiple certificates


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-9
changelog:
  - Resolves: rhbz#2010701 ipa-server-install fails while 'configuring certificate server instance'
    - Parse getStatus as JSON not XML
    - Parse cert chain as JSON not XML
    - Specify PKI installation log paths
    - Make Dogtag return XML for ipa cert-find


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-1
changelog:
  - Resolves: rhbz#2015608 - [Rebase] Rebase ipa to latest 4.9.x release RHEL9
  - Resolves: rhbz#1825010 - Concerns regarding 'ipa pwpolicy-mod --minlife 24 --maxlife 1'
  - Resolves: rhbz#1966289 - Info about searchrecordslimit set search limit to 10,000 after upgrade
  - Resolves: rhbz#1980356 - reinstalling samba client causes winbindd coredump
  - Resolves: rhbz#1986054 - fix automountlocation-tofiles output
  - Resolves: rhbz#2020205 - Missing bind-pkcs11-utils causing failures in OpenDNSSec
  - Resolves: rhbz#2021445 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
    - ipa-kdb: issue PAC_REQUESTER_SID only for TGTs
    - ipa-kdb: fix requester SID check according to MS-KILE and MS-SFU updates


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-2
changelog:
  - Resolves: rhbz#2040619 - Changing default pac type to 'nfs:NONE and MS-PAC' doesnot display error 'ipa: ERROR: no modifications to be performed'
    - Config plugin: return EmptyModlist when no change is applied
    - config plugin: add a test ensuring EmptyModlist is returned
  - Resolves: rhbz#2048510 - [rhel-9.0] Backport latest test fixes in python3-ipatests
    - ipatests: webui: Tests for subordinate ids.
    - ipatests: webui: Use safe-loader for loading YAML configuration file
    - ipatests: Fix test_ipa_cert_fix.py::TestCertFixReplica teardown
    - Test cases for ipa-replica-conncheck command
    - PEP8 Fixes
    - ipatests: Test empty cert request doesn't force certmonger to segfault
    - ipatests: Test default value of nsslapd-sizelimit.
    - Extend test to see if replica is not shown when running `ipa-replica-manage list -v <FQDN>`
    - Added test automation for SHA384withRSA CSR support
  - Resolves: rhbz#2049104 - User can't log in after ipa-user-mod --user-auth-type=hardened
    - ipa-kdb: do not remove keys for hardened auth-enabled users
    - ipatests: add case for hardened-only ticket policy
  - Resolves: rhbz#2049174 - KRA GetStatus service blocked by IPA proxy
    - ipa-pki-proxy.conf: provide access to /kra/admin/kra/getStatus


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-3
changelog:
  - Resolves: rhbz#2050540 Unable to join RHEL 8.5 Replica to RHEL 7.9 Master for migration purposes
    - Don't always override the port in import_included_profiles
  - Resolves: rhbz#2051582 Enable ipa-ccache-sweep.timer during server installation
    - Test ipa-ccache-sweep.timer enabled by default during installation
    - Enable the ccache sweep timer during installation
  - Resolves: rhbz#2051844 ipa-join tests are failing due to changes in expected output
    - Remove ipa-join errors from behind the debug option


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.8-4
changelog:
  - Resolves: rhbz#2053586 IPA LDAP plugin ipa-cldap memory leak
    - fix memory leak in CLDAP responder


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-6
changelog:
  - Resolves: rhbz#2057467 Backport latest test fixes in python3-ipatests
    - ipatests: Tests for Autoprivate group.
    - mark xfail for test_idoverride_with_auto_private_group[hybrid]
    - Mark xfail test_gidnumber_not_corresponding_existing_group[true,hybrid]


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-7
changelog:
  - Resolves: rhbz#2057471 Consequences of FIPS crypto policy tightening in RHEL 9
    - KRB instance: make provision to work with crypto policy without SHA-1 HMAC types
    - tests: ensure AD-SUPPORT subpolicy is active
    - ipatests: extend AES keyset to SHA2-based ones
    - freeipa.spec: bump crypto-policies dependency for CentOS 9 Stream
    - Kerberos instance: default to AES256-SHA2 for master key encryption
    - test_otp: do not use paramiko unless it is really needed
    - test_krbtpolicy: skip SPAKE-related tests in FIPS mode
    - Support AES for KRA archival wrapping
    - Set AES as default for KRA archival wrapping


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-2.1.el9
changelog:
  - vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2059427]
  - vdpa: Support reading device features (Andrea Claudi) [2059427]
  - vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2059427]
  - vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2059427]
  - vdpa: Remove unsupported command line option (Andrea Claudi) [2059427]
  - vdpa: Enable user to set mtu of the vdpa device (Andrea Claudi) [2059427]
  - vdpa: Enable user to set mac address of vdpa device (Andrea Claudi) [2059427]
  - vdpa: Enable user to query vdpa device config layout (Andrea Claudi) [2059427]
  - uapi: update vdpa.h (Andrea Claudi) [2059427]
  - vdpa: align uapi headers (Andrea Claudi) [2059427]
  - Update kernel headers and import virtio_net (Andrea Claudi) [2059427]


author: EL Errata <el-errata_ww@oracle.com> - 5.15.0-2.2.0.1
changelog:
  - Backport selected rdma patches needed for vDPA support [Orabug: 32719473]
  - rdma: Add SRQ resource tracking information [Orabug: 32719473]
  - rdma: Add context resource tracking information [Orabug: 32719473]
  - rdma: Update uapi headers [Orabug: 32719473]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> - 1.8.7-19
changelog:
  - Build iptables-services on C9S only
  - Use systemd_ordering in nft-services, too
  - Drop compat package, nft-services serves well for that purpose
  - Make legacy unconditionally provide iptables, it's not built on RHEL


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Tao Liu <ltao@redhat.com> - 2:1.8.0-5
changelog:
  - Document migrateval. Resolves: rhbz2071959
  - Confine irqbalance to systems where it is useful. Resolves: rhbz2063930
  - Wrong EnvironmentFile in irqbalance.service. Resolves: rhbz2058509


author: Tao Liu <ltao@redhat.com> - 2:1.9.2-3
changelog:
  - Use misc/irqbalance.env as irqbalance.sysconfig
  - Use new rpm macros: autosetup and make_build
  - Use irqbalance-1.9.0-environment-file
  - Remove _hardened_build
  - Remove triggerun -- irqbalance < 2:0.56-3
  - Use SPDX licence


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Darren Archibald <darren.archibald@oracle.com> - 6.2.1.4-2.git2a8f9d8.0.1
changelog:
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: EL Errata <el-errata_ww@oracle.com> - 6.2.1.4-3.git2a8f9d8.0.1
changelog:
  - Allow systemd-remount-fs complete before iscsi-init.service [Orabug: 34325406]
  - Allow iscsi-init.service to start after local-fs.target [Orabug: 33930979]
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b05 (EA)
  - Update release notes for 8u322-b05.
  - Switch to EA mode.
  - Require tzdata 2021c as of JDK-8274407.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2022823


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (GA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2039398


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-2
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Introduce architecture restriction logic for the gdb test. (RH2041970)
  - Replace GCC 11 patch to remove use of the register keyword with correct fix to ADLC build (JDK-8281098)
  - Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Related: rhbz#2022823


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-3
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023387


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-4
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052821


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.322.b06-6
changelog:
  - Storing and restoring alternatives during update manually
  - Family extracted to globals
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-7
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052833


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-9
changelog:
  - Remove 'java --version' test as this is not supported on java-1.8.0-openjdk
  - Resolves: rhbz#2058487


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Resolves: rhbz#2074649


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:1.8.0.332.b09-2
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2107956


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1
changelog:
  - Update to shenandoah-jdk8u342-b07
  - Update release notes for shenandoah-8u342-b07.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2099916
  - Resolves: rhbz#2107958
  - Resolves: rhbz#2084776
  - Resolves: rhbz#2106508


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2115463


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2074650


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:1.8.0.332.b09-2
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102435


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-3
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2099801
  - Resolves: rhbz#2100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u342-b06 (EA)
  - Update release notes for shenandoah-8u342-b06.
  - Switch to EA mode for 8u342 pre-release builds.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Resolves: rhbz#2083322


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-2
changelog:
  - Update to shenandoah-jdk8u342-b07 (GA)
  - Update release notes for 8u342-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2106509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112405


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102727


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121273


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Rebase FIPS patch against 8u352-b07
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Related: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Rebase FIPS patch against 8u352-b07
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2159912


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-2
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2163594


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1
changelog:
  - Update to shenandoah-jdk8u372-b07 (GA)
  - Update release notes for shenandoah-8u372-b07.
  - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
  - Reintroduce jconsole-plugin.patch from RHEL 9
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Drop JDK-8275535/RH2053256 patch which is now upstream
  - Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-2
changelog:
  - Update to shenandoah-jdk8u372-b07 (GA)
  - Update release notes for shenandoah-8u372-b07.
  - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Drop JDK-8275535/RH2053256 patch which is now upstream
  - Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
  - Drop hack for difference in local and portable build version
  - Replace local copies of JDK portable binaries with build dependencies
  - Include the java-1.8.0-openjdk-portable.spec file with instructions on how to rebuild.
  - Remove duplicate use of README.md inside the *-src package (it is no longer about sources)
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2189329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b01 (EA)
  - Update release notes for shenandoah-8u382-b01.
  - Switch to EA mode.
  - Remove JDK-8271199 patch which is now upstream.
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b04 (EA)
  - Update release notes for shenandoah-8u382-b04.
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1
changelog:
  - Update to shenandoah-jdk8u372-b05 (GA)
  - Update release notes for shenandoah-8u372-b05.
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 1:1.8.0.392.b08-3.0.1
changelog:
  - Update to shenandoah-jdk8u392-b08 (GA)
  - OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
  - OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
  - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)
  - A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (RHEL-13593)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b01 (EA)
  - Update release notes for shenandoah-8u382-b01.
  - Switch to EA mode.
  - Remove JDK-8271199 patch which is now upstream.
  - Add version of bundled zlib (bumped from 1.2.11 to 1.2.13 with this update)
  - Related: rhbz#2217711


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ea
changelog:
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Sync the copy of the portable specfile with the latest update
  - Related: rhbz#2217711


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b04 (EA)
  - Update release notes for shenandoah-8u382-b04.
  - Sync the copy of the portable specfile with the latest update
  - Resolves: rhbz#2217711


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-2
changelog:
  - Update to shenandoah-jdk8u382-b05 (GA)
  - Update release notes for shenandoah-8u382-b05.
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - Use tapsets from the misc tarball on portable builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - The 'prelease' variable should refer to 'portablerelease', not 'rpmrelease'
  - Bump release number so we are newer than 9.0
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b01-1
changelog:
  - Update to shenandoah-jdk8u392-b01 (GA)
  - Update release notes for shenandoah-8u392-b01.
  - Sync the copy of the portable specfile with the latest update
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Related: RHEL-12209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2
changelog:
  - Update to shenandoah-jdk8u392-b08 (GA)
  - Update release notes for shenandoah-8u392-b08.
  - Sync the copy of the portable specfile with the latest update
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Regenerate PR2462 patch following JDK-8315135
  - Bump version of bundled libpng to 1.6.39
  - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
  - Add missing JFR, alt-java, jre-* and java-* alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12208
  - Resolves: RHEL-13587
  - Resolves: RHEL-13590
  - Resolves: RHEL-13593
  - Resolves: RHEL-13583
  - Resolves: RHEL-13605
  - Resolves: RHEL-13615


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 1:1.8.0.402.b06-0.2.0.1
changelog:
  - Update to shenandoah-jdk8u402-b06 (GA)
  - Update release notes for shenandoah-8u402-b06.
  - Add Oracle vendor bug URL [Orabug: 34340155]


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.2.ea
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Sync gdb test with java-1.8.0-openjdk.
  - Improve architecture restrictions for the gdb test.
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Related: rhbz#2052834


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.3.ea
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023530


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1
changelog:
  - Update to jdk-11.0.14.0+9
  - Update release notes to 11.0.14.0+9
  - Switch to GA mode for final release.
  - Resolves: rhbz#2039395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-2
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052820


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1
changelog:
  - Update to jdk-11.0.14.1+1
  - Update release notes to 11.0.14.1+1
  - Require tzdata 2021e as of JDK-8275766.
  - Resolves: rhbz#2052834


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.1.1-4
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008205


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052831


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-1
changelog:
  - Update to jdk-11.0.15.0+10
  - Update release notes to 11.0.15.0+10
  - Switch to GA mode for release
  - Rebase RH1996182 FIPS patch after JDK-8254410
  - Resolves: rhbz#2073594


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2107866


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2106516


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2106516
  - Resolves: rhbz#2099915
  - Resolves: rhbz#2107868


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2121188


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-1
changelog:
  - Update to jdk-11.0.15.0+10
  - Update release notes to 11.0.15.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2073595


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102434


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-4
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099839
  - Resolves: rhbz#2100676


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106517


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119528


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2131864
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Related: rhbz#2131865


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - Related: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2157798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2157798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  - Related: rhbz#2157798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Alan Steinberg <alan.steinberg@oracle.com> - 1:11.0.20.0.8-2.0.1
changelog:
  - Add Oracle vendor bug URL [Orabug: 34340155]
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 1:11.0.21.0.9-2.0.1
changelog:
  - Add Oracle vendor bug URL [Orabug: 34340155]
  - Update to jdk-11.0.21+9 (GA)
  - Update release notes to 11.0.21+9
  - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)
  - OpenJDK: Additional zip64 files validation (8313765) (RHBZ#2237170)
  - OpenJDK: Print an exception when encountering null addresses while producing thread dumps (8243210)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 11.0.21+1 following backport of JDK-8155246
  - Re-generate SHA3 patch following backport of JDK-8242151
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12214
  - Resolves: RHEL-13526
  - Resolves: RHEL-13529
  - Resolves: RHEL-13532
  - Resolves: RHEL-13536
  - Resolves: RHEL-13539


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Drop local copy of JDK-8312489 which is now included upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20991


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1
changelog:
  - Update to jdk-11.0.23+9 (GA)
  - Update release notes to 11.0.23+9
  - Switch to GA mode for release
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-30920


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-6
changelog:
  - Include the java-17-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2189326


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-2
changelog:
  - Update to jdk-17.0.7.0+7
  - Update release notes to 17.0.7.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Update FIPS support against 17.0.7+6 and bring in latest changes:
  - * RH2134669: Add missing attributes when registering services in FIPS mode.
  - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
  - * RH1940064: Enable XML Signature provider in FIPS mode
  - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized
  - Fix trailing '.' in tarball name
  - Use portablerelease in vendor version to avoid inclusion of dist tag
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2186803
  - Resolves: rhbz#2186810
  - Resolves: rhbz#2186806


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 1:17.0.9.0.9-2.0.1
changelog:
  - Update to jdk-17.0.9+9 (GA)
  - Update release notes to 17.0.9+9
  - OpenJDK: memory corruption issue on x86_64 with AVX-512 (JDK-8317121) (CVE-2023-22025)
  - OpenJDK: certificate path validation issue during client authentication (JDK-8309966) (CVE-2023-22081)
  - OpenJDK: Additional zip64 files validation (JDK-8313765) (RHBZ#2237170)


author: Darren Archibald <darren.archibald@oracle.com> - 1:17.0.10.0.7-2.0.1
changelog:
  - Update fips-17u-51e1d00be4e.patch and rh1750419-redhat_alt_java.patch for build
  - Rebase to 17.0.10.0.7


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.7-1
changelog:
  - Update to jdk-17.0.8+7 (GA)
  - Update release notes to 17.0.8+7
  - Switch to GA mode for final release.
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - * This tarball is embargoed until 2023-07-18 @ 1pm PT. *
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.1.1-1
changelog:
  - Update to jdk-17.0.8.1+1 (GA)
  - Update release notes to 17.0.8.1+1
  - Add backport of JDK-8312489 already upstream in 17.0.10 (see OPENJDK-2095)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Resolves: rhbz#2236592


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.9.0.9-1
changelog:
  - Update to jdk-17.0.9+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 17.0.9+1 following backport of JDK-8209398
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Sync generate_tarball.sh with 11u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Apply all patches using -p1
  - Temporarily turn off 'fresh_libjvm' due to removal of JVM_IsThreadAlive (JDK-8305425)
  - Add missing JFR and jpackage alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12226
  - Resolves: RHEL-13662
  - Resolves: RHEL-13673
  - Resolves: RHEL-13683
  - Resolves: RHEL-13648
  - Resolves: RHEL-13651


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+6 (EA)
  - fips-17u-d63771ea660.patch: Regenerate from gnu-andrew branch
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash
  - generate_source_tarball.sh: shellcheck: Double-quote variable references
  - generate_source_tarball.sh: shellcheck: Do not use -a
  - generate_source_tarball.sh: shellcheck: Do not use $ in expression
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Add note on network usage of OPENJDK_LATEST
  - Related: RHEL-20995


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Move to -P<n> usage for patch macro which works on all RPM versions
  - Remove RH1648644 patch not in portable build (and so not applied to binary used)
  - Re-enable DEFAULT_PROMOTED_VERSION_PRE check disabled for the July 2023 release
  - generate_source_tarball.sh: Add --sort=name to tar invocation for reproducibility
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20995


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.7-0.2.ea
changelog:
  - Update to jdk-17.0.11+7 (EA)
  - Update buildjdkver to match the featurever
  - Use featurever macro to specify fips patch
  - Explain patchN syntax situation in a comment
  - Sync generate_source_tarball.sh
  - Require tzdata 2023d (JDK-8322725)
  - openjdk_news.sh: Use grep -E instead of egrep
  - Remove RH1649512 patch for libjpeg-turbo FAR macro
  - Move pcsc-lite-libs patch to in-need-of-upstreaming section
  - Related: RHEL-30939


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.9-2
changelog:
  - Update to jdk-17.0.11+9 (GA)
  - Add openjdk-17.0.11+9.tar.xz to .gitignore
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update buildver from 7 to 9
  - Update portablerelease from 1 to 3
  - Change is_ga from 0 to 1 to enable GA mode for release
  - Update tzdata Requires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires from 2023c to 2023d
  - Update sources from openjdk-17.0.11+7-ea.tar.xz to openjdk-17.0.11+9.tar.xz
  - Resolves: RHEL-30939
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-4
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Handle Fedora in distro conditionals that currently only pertain to RHEL.
  - Run OpenJDK normalizer script on the spec file to fix further rogue whitespace
  - Sync gdb test with java-1.8.0-openjdk and improve architecture restrictions.
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Need to support noarch for creating source RPMs for non-scratch builds.
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Support a HotSpot-only build so a freshly built libjvm.so can then be used in the bootstrap JDK.
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Resolves: rhbz#2022826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-5
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023531


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-6
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052819


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-8
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052829


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-10
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008206


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-12
changelog:
  - Add rpminspect.yaml to turn off Java bytecode inspections
  - java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode
  - Resolves: rhbz#2023540


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-13
changelog:
  - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode
  - Resolves: rhbz#2055383


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.7-1
changelog:
  - April 2022 security update to jdk 17.0.3+7
  - Update to jdk-17.0.3.0+7 tarball
  - Update release notes to 17.0.3.0+7
  - Add missing README.md and generate_source_tarball.sh
  - Resolves: rhbz#2073578


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:17.0.3.0.7-2
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2105395


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:17.0.4.0.1-0.2.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Related: rhbz#2084779


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-1
changelog:
  - Update to jdk-17.0.4.0+8
  - Update release notes to 17.0.4.0+8
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Move EA designator check to prep so failures can be caught earlier
  - Make EA designator check non-fatal while upstream is not maintaining it
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Include a test in the RPM to check the build has the correct vendor information.
  - Rebase FIPS patches from fips-17u branch and simplify by using a single patch from that repository
  - * RH2094027: SunEC runtime permission for FIPS
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Turn on system security properties as part of the build's install section
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Run tests on the installed image, rather than the build image
  - Introduce variables to refer to the static library installation directories
  - Use relative symlinks so they work within the image
  - Run debug symbols check during build stage, before the install strips them
  - Resolves: rhbz#2084779
  - Resolves: rhbz#2099919
  - Resolves: rhbz#2107943
  - Resolves: rhbz#2107941
  - Resolves: rhbz#2106523


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-0.2.ea
changelog:
  - Revert the following changes until copy-java-configs has adapted to relative symlinks:
  - * Move cacerts replacement to install section and retain original of this and tzdb.dat
  - * Run tests on the installed image, rather than the build image
  - * Introduce variables to refer to the static library installation directories
  - * Use relative symlinks so they work within the image
  - * Run debug symbols check during build stage, before the install strips them
  - The move of turning on system security properties is retained so we don't ship with them off
  - Related: rhbz#2084779


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-1
changelog:
  - Update to jdk-17.0.4.1+1
  - Update release notes to 17.0.4.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2120058


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-2
changelog:
  - Update FIPS support to bring in latest changes
  - * RH2023467: Enable FIPS keys export
  - * RH2104724: Avoid import/export of DH private keys
  - * RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode
  - * Build the systemconf library on all platforms
  - * RH2048582: Support PKCS#12 keystores
  - * RH2020290: Support TLS 1.3 in FIPS mode
  - Resolves: rhbz#2123579
  - Resolves: rhbz#2123580
  - Resolves: rhbz#2123581
  - Resolves: rhbz#2123583
  - Resolves: rhbz#2123584


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.4.0+1
  - Update release notes to 17.0.4.0+1
  - Switch to EA mode for 17.0.4 pre-release builds.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Move EA designator check to prep so failures can be caught earlier
  - Make EA designator check non-fatal while upstream is not maintaining it
  - Related: rhbz#2084218


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:17.0.4.0.1-0.2.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Related: rhbz#2084218


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.3.0+7
  - Update release notes to 17.0.3.0+7
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Include a test in the RPM to check the build has the correct vendor information.
  - Resolves: rhbz#2084218


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.2.ea
changelog:
  - Revert the following changes until copy-java-configs has adapted to relative symlinks:
  - * Move cacerts replacement to install section and retain original of this and tzdb.dat
  - * Run tests on the installed image, rather than the build image
  - * Introduce variables to refer to the static library installation directories
  - * Use relative symlinks so they work within the image
  - * Run debug symbols check during build stage, before the install strips them
  - The move of turning on system security properties is retained so we don't ship with them off
  - Related: rhbz#2084218


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-3
changelog:
  - Update to jdk-17.0.4.0+8
  - Update release notes to 17.0.4.0+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106524


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-2
changelog:
  - Update to jdk-17.0.4.1+1
  - Update release notes to 17.0.4.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119532


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-3
changelog:
  - Update FIPS support to bring in latest changes
  - * RH2104724: Avoid import/export of DH private keys
  - * RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode
  - * Build the systemconf library on all platforms
  - * RH2048582: Support PKCS#12 keystores
  - * RH2020290: Support TLS 1.3 in FIPS mode
  - Resolves: rhbz#2104725
  - Resolves: rhbz#2117758
  - Resolves: rhbz#2115164
  - Resolves: rhbz#2029665


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.4.1.1-4
changelog:
  - Fix flatpak builds (catering for their uncompressed manual pages)
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102726


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121268


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-1
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2132933
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.5+1
  - Update release notes to 17.0.5+1
  - Switch to EA mode for 17.0.5 pre-release builds.
  - Related: rhbz#2132934


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-1
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Switch to GA mode for final release.
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2132934


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - Related: rhbz#2132934


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-4
changelog:
  - Update FIPS support to bring in latest changes
  - * Add nss.fips.cfg support to OpenJDK tree
  - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
  - * Remove forgotten dead code from RH2020290 and RH2104724
  - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build
  - Resolves: rhbz#2147476


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.6+1
  - Update release notes to 17.0.6+1
  - Switch to EA mode for 17.0.6 pre-release builds.
  - Re-enable EA upstream status check now it is being actively maintained.
  - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
  - Drop JDK-8275535 local patch now this has been accepted and backported upstream
  - Bump tzdata requirement to 2022e now the package is available in RHEL
  - Related: rhbz#2153097


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.2.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2153097


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-2
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  - Related: rhbz#2153097


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2147476


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-1
changelog:
  - Update to jdk-17.0.7.0+7
  - Update release notes to 17.0.7.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Update FIPS support against 17.0.7+6 and bring in latest changes:
  - * RH2134669: Add missing attributes when registering services in FIPS mode.
  - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class
  - * RH1940064: Enable XML Signature provider in FIPS mode
  - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2186804
  - Resolves: rhbz#2186811
  - Resolves: rhbz#2186807


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.3.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150198


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.7.0.7-4
changelog:
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Related: rhbz#2203412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.8+1 (EA)
  - Update release notes to 17.0.8+1
  - Switch to EA mode
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 17.0.8+1
  - Bump bundled LCMS version to 2.15 as in jdk-17.0.8+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-17.0.8+1
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Related: rhbz#2217716


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.6-0.1.ea
changelog:
  - Update to jdk-17.0.8+6 (EA)
  - Sync the copy of the portable specfile with the latest update
  - Resolves: rhbz#2217716


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 1:17.0.8.0.7-2.0.1
changelog:
  - OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
  - OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
  - OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
  - harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
  - OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
  - OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
  - OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)
  - Add Oracle vendor bug URL [Orabug: 34340155]


author: Jiri Vanek <jvanek@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream
  - Adapted rh1750419-redhat_alt_java.patch
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Update to jdk-20.0.2+9
  - Update release notes to 20.0.2+9
  - Update system crypto policy & FIPS patch from new fips-20u tree
  - Update generate_tarball.sh ICEDTEA_VERSION
  - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit)
  - Related: RHEL-12997


author: Petra Alice Mikova <pmikova@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Update to jdk-21.0.0+35
  - Update system crypto policy & FIPS patch from new fips-21u tree
  - Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal
  - Drop fakefeaturever now it is no longer needed
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Re-enable tzdata tests now we are on the latest JDK and things are back in sync
  - Install jaxp.properties introduced by JDK-8303530
  - Install lible.so introduced by JDK-8306983
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-2
changelog:
  - Update documentation (README.md)
  - Replace alt-java patch with a binary separate from the JDK
  - Drop stale patches that are of little use any more:
  - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work
  - * No accessibility subpackage to warrant RH1648242 & RH1648644 patches any more
  - * No use of system libjpeg turbo to warrant RH649512 patch any more
  - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed
  - Adapt alt-java test to new binary where there is always a set_speculation function
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-1
changelog:
  - Update to jdk-21.0.1.0+12 (GA)
  - Update release notes to 21.0.1.0+12
  - Sync the copy of the portable specfile with the latest update
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise bundled versions with 21u sources (FreeType, LCMS, HarfBuzz, libpng)
  - Sync generate_tarball.sh with 11u & 17u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Fix upstream release URL for OpenJDK source
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Synchronise runtime and buildtime tzdata requirements
  - Remove ghosts for binaries not in java-21-openjdk (pack200, rmid, unpack200)
  - Add missing jfr, jpackage and jwebserver alternative ghosts
  - Move jcmd to the headless package
  - Revert alt-java binary location to being within the JDK tree
  - Resolves: RHEL-12997
  - Resolves: RHEL-14954
  - Resolves: RHEL-14962
  - Resolves: RHEL-14958
  - Related: RHEL-14946
  - Resolves: RHEL-14959
  - Resolves: RHEL-14948


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Switch to using portable binaries built on RHEL 7
  - Sync the copy of the portable specfile with the RHEL 7 version
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-3
changelog:
  - Include JDK-8311630 patch to implement Foreign Function & Memory preview API on s390x
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-16386


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30945


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30945


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30945


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30945


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32423


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.3.1.el9_2]
changelog:
  - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' (Mark Langsdorf) [2170475]
  - cpufreq: ACPI: Only set boost MSRs on supported CPUs (Mark Langsdorf) [2170475]
  - Drivers: vmbus: Check for channel allocation before looking up relids (Mohammed Gamal) [2156126]
  - NFSD: copy the whole verifier in nfsd_copy_write_verifier (Jeffrey Layton) [2166658]
  - nfsd: don't fsync nfsd_files on last close (Jeffrey Layton) [2166658]
  - NFSD: fix problems with cleanup on errors in nfsd4_copy (Jeffrey Layton) [2166658]
  - nfsd: fix race to check ls_layouts (Jeffrey Layton) [2166658]
  - nfsd: don't hand out delegation on setuid files being opened for write (Jeffrey Layton) [2127406]
  - nfsd: remove fs/nfsd/fault_inject.c (Jeffrey Layton) [2166658]
  - NFSD: fix leaked reference count of nfsd4_ssc_umount_item (Jeffrey Layton) [2166658]
  - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath (Jeffrey Layton) [2166658]
  - nfsd: zero out pointers after putting nfsd_files on COPY setup error (Jeffrey Layton) [2166658]
  - nfsd: eliminate __nfs4_get_fd (Jeffrey Layton) [2166658]
  - nfsd: add some kerneldoc comments for stateid preprocessing functions (Jeffrey Layton) [2166658]
  - nfsd: eliminate find_deleg_file_locked (Jeffrey Layton) [2166658]
  - nfsd: don't take nfsd4_copy ref for OP_OFFLOAD_STATUS (Jeffrey Layton) [2166658]
  - nfsd: move reply cache initialization into nfsd startup (Jeffrey Layton) [2166658]
  - nfsd: fix potential race in nfs4_find_file (Jeffrey Layton) [1997177]
  - nfsd: allow nfsd_file_get to sanely handle a NULL pointer (Jeffrey Layton) [2166658]
  - NFSD: enhance inter-server copy cleanup (Jeffrey Layton) [2166658]
  - NFSD: Rename the fields in copy_stateid_t (Jeffrey Layton) [2166658]


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.30.0.1.el9_2.OL9]
changelog:
  - x86/tsx: Add a feature bit for TSX control MSR support {CVE-2023-1637}
  - x86/speculation: Restore speculation related MSRs {CVE-2023-1637}
  - x86/pm: Save the MSR validity status at context setup {CVE-2023-1637}
  - x86/pm: Fix false positive kmemleak report in msr_build_context() {CVE-2023-1637}
  - x86/cpu: Restore AMD's DE_CFG MSR after resume {CVE-2023-1637}
  - x86/pm: Add enumeration check before spec MSRs {CVE-2023-1637}
  - arm64: efi: Execute runtime services from a dedicated {CVE-2023-21102}
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3390}
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain {CVE-2023-3390}
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails {CVE-2023-3390}
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID {CVE-2023-4147}
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id {CVE-2023-31248}
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval {CVE-2023-35001}
  - netfilter: nf_tables: fix chain binding transaction logic {CVE-2023-3610}
  - netfilter: nft_set_pipapo: fix improper element removal {CVE-2023-4004}
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.30.1.el9_2.OL9]
changelog:
  - x86/microcode/intel: Expose collect_cpu_info_early() for IFS
  - x86/cpu: Load microcode during restore_processor_state()
  - x86/microcode: Rip out the OLD_INTERFACE
  - x86/microcode: Default-disable late loading
  - x86/microcode: Taint and warn on late loading
  - x86/microcode: Remove unnecessary perf callback
  - x86/microcode: Print previous version of microcode after reload 
  - x86/microcode: Rip out the subsys interface gunk
  - x86/microcode: Simplify init path even more
  - x86/microcode/AMD: Rename a couple of functions {CVE-2023-20593}
  - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities {CVE-2023-20593}
  - x86/microcode: Check CPU capabilities after late microcode update correctly {CVE-2023-20593}
  - x86/microcode: Adjust late loading result reporting message {CVE-2023-20593}
  - x86/amd: Cache debug register values in percpu variables {CVE-2023-20593}
  - x86/microcode: Remove ->request_microcode_user()
  - x86/microcode: Kill refresh_fw
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter {CVE-2023-20593}
  - x86/microcode: Drop struct ucode_cpu_info.valid
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions {CVE-2023-20593}
  - x86/microcode/AMD: Track patch allocation size explicitly
  - x86/microcode/AMD: Fix mixed steppings support {CVE-2023-20593}
  - x86/microcode/core: Return an error only when necessary {CVE-2023-20593}
  - x86/apic: Don't disable x2APIC if locked
  - x86/cpu/amd: Move the errata checking functionality up {CVE-2023-20593}
  - x86/cpu: Remove redundant extern x86_read_arch_cap_msr()
  - x86/cpu, kvm: Add support for CPUID_80000021_EAX
  - KVM: x86: Advertise that the SMM_CTL MSR is not supported
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
  - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
  - x86/cpu: Support AMD Automatic IBRS
  - x86/CPU/AMD: Make sure EFER[AIBRSE] is set
  - x86/cpu/amd: Add a Zenbleed fix {CVE-2023-20593}


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.2.1.el9_3]
changelog:
  - PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation (Vitaly Kuznetsov) [2211797]
  - rhel: Re-add can-dev features that were removed accidentally (Radu Rendec) [2213891]
  - EDAC/amd64: Add support for ECC on family 19h model 60h-7Fh (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Remove PCI Function 0 (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Remove PCI Function 6 (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Remove scrub rate control for Family 17h and later (Aristeu Rozanski) [2218686]
  - EDAC/amd64: Don't set up EDAC PCI control on Family 17h+ (Aristeu Rozanski) [2218686]
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225102] {CVE-2023-3776}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-362.18.0.1.el9_3.OL9]
changelog:
  - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) {CVE-2022-3545}
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou) {CVE-2022-41858}
  - can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp) {CVE-2023-2166}
  - RDMA/core: Fix resolve_prepare_src error cleanup (Patrisious Haddad) {CVE-2023-2176}
  - netfilter: nf_tables: skip bound chain on rule flush (Pablo Neira Ayuso} {CVE-2023-3777}
  - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) {CVE-2023-3812}
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR (Pablo Neira Ayuso) {CVE-2023-4015}
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) {CVE-2023-4622}
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) {CVE-2023-5178}
  - fbcon: set_con2fb_map needs to set con2fb_map! (Daniel Vetter) {CVE-2023-38409}
  - fbcon: Fix error paths in set_con2fb_map (Daniel Vetter) {CVE-2023-38409}
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) {CVE-2023-40283)
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) {CVE-2023-42753}
  - x86/sev: Check IOBM for IOIO exceptions from user-space (Joerg Roedel) {CVE-2023-46813}
  - x86/sev: Disable MMIO emulation from user mode (Borislav Petkov) {CVE-2023-46813}
  - x86/sev: Check for user-space IOIO pointing to kernel space (Joerg Roedel) {CVE-2023-46813}


author: Srikanth C S <srikanth.c.s@oracle.com> - [5.14.0-362.18.0.2.el9_3.OL9]
changelog:
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623}
  - dpll: core: Add DPLL framework base functions {CVE-2023-6679}
  - dpll: spec: Add Netlink spec in YAML {CVE-2023-6679}
  - dpll: netlink: Add DPLL framework base functions {CVE-2023-6679}
  - netdev: expose DPLL pin handle for netdevice {CVE-2023-6679}
  - netdev: Remove unneeded semicolon {CVE-2023-6679}
  - dpll: netlink/core: add support for pin-dpll signal phase offset/adjust {CVE-2023-6679}
  - dpll: netlink/core: change pin frequency set behavior {CVE-2023-6679}
  - dpll: Fix potential msg memleak when genlmsg_put_reply failed {CVE-2023-6679}
  - dpll: sanitize possible null pointer dereference in dpll_pin_parent_pin_set() {CVE-2023-6679}


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-362.24.1.0.2.el9_3.OL9]
changelog:
  - crypto: rsa - allow only odd e and restrict value in FIPS [Orabug: 36324528]
  - crypto: dh - implement FIPS PCT [Orabug: 36324524]
  - crypto: dh - Make public key test FIPS-only [Orabug: 36324524]
  - crypto: tcrypt - add ffdhe2048(dh) test [Orabug: 36324524]
  - Update module name for cryptographic module [Orabug: 36324521]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.1.1.el9_3]
changelog:
  - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) [2234868]
  - redhat: enable zstream release numbering for rhel 9.3 (Jan Stancek)
  - redhat: change default dist suffix for RHEL 9.3 (Jan Stancek)
  - thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug onwards (Desnes Nunes) [2233967]
  - Revert "firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Relax base protocol sanity checks on the protocol list" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get" (Lenny Szubowicz) [2234390]
  - Revert "pstore: Add priv field to pstore_record for backend specific use" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Don't drop lock in the middle of efivar_init()" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Add thin wrapper around EFI get/set variable interface" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Omit efivars caching EFI varstore access layer" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Use locking version to iterate over efivars linked lists" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Drop __efivar_entry_iter() helper which is no longer used" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Remove deprecated 'efivars' sysfs interface" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Switch to new wrapper layer" (Lenny Szubowicz) [2234390]
  - Revert "efi: avoid efivars layer when loading SSDTs from variables" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Move efivar caching layer into efivarfs" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 System Power extensions" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add devm_protocol_acquire helper" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI System Power Control driver" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 powercap protocol basic support" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Generalize the fast channel support" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 powercap fast channels support" (Lenny Szubowicz) [2234390]
  - Revert "include: trace: Add SCMI fast channel tracing" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Use fast channel tracing" (Lenny Szubowicz) [2234390]
  - Revert "efi: Fix efi_power_off() not being run before acpi_power_off() when necessary" (Lenny Szubowicz) [2234390]
  - Revert "cpufreq: scmi: Use .register_em() to register with energy model" (Lenny Szubowicz) [2234390]
  - Revert "cpufreq: scmi: Support the power scale in micro-Watts in SCMI v3.1" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Get detailed power scale from perf" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi: Use the proper accessor for the version field" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix missing kernel-doc in optee" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Improve checks in the info_get operations" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden accesses to the sensor domains" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden accesses to the reset domains" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix the asynchronous reset requests" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI PM driver remove routine" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Disable struct randomization" (Lenny Szubowicz) [2234390]
  - Revert "efi/x86: libstub: remove unused variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: capsule-loader: Fix use-after-free in efi_capsule_write" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: add some missing EFI prototypes" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: use EFI provided memcpy/memset routines" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: move efi_system_table global var into separate object" (Lenny Szubowicz) [2234390]
  - Revert "efi/dev-path-parser: Refactor _UID handling to use acpi_dev_uid_to_integer()" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: implement generic EFI zboot" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix type confusion for load_options_size" (Lenny Szubowicz) [2234390]
  - Revert "efi: efibc: avoid efivar API for setting variables" (Lenny Szubowicz) [2234390]
  - Revert "efi: efibc: Guard against allocation failure" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: drop pointless get_memory_map() call" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: check Shim mode using MokSBStateRT" (Lenny Szubowicz) [2234390]
  - Revert "Revert "firmware: arm_scmi: Add clock management to the SCMI power domain"" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi: Fortify entry point length checks" (Lenny Szubowicz) [2234390]
  - Revert "psci: Fix the function type for psci_initcall_t" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: avoid efi_get_memory_map() for allocating the virt map" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: remove pointless goto kludge" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: unify initrd loading between architectures" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: remove DT dependency from generic stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: install boot-time memory map as config table" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: refactor the initrd measuring functions" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: measure EFI LoadOptions" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm: libstub: move ARM specific code out of generic routines" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix up the last remaining open coded boot service call" (Lenny Szubowicz) [2234390]
  - Revert "efi: zboot: create MemoryMapped() device path for the parent if needed" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm64: libstub: avoid SetVirtualAddressMap() when possible" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: Use dev_err_probe() to simplify code" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Follow convention for the efi-pstore backend name" (Lenny Szubowicz) [2234390]
  - Revert "efi/cper: Export several helpers for ghes_edac to use" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Remove zboot signing from build options" (Lenny Szubowicz) [2234390]
  - Revert "efi: ssdt: Don't free memory if ACPI table was loaded successfully" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: Fix variable writes without query_variable_store()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Give efi_main() asmlinkage qualification" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Fix incorrect payload size in zboot header" (Lenny Szubowicz) [2234390]
  - Revert "efi: runtime: Don't assume virtual mappings are missing if VA == PA == 0" (Lenny Szubowicz) [2234390]
  - Revert "firmware: imx: scu-pd: add missed USB_1_PHY pd" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: reduce seed size to 32 bytes" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: Use 'ACPI reclaim' memory for random seed" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: Introduce rpi_firmware_find_node()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Switch transport to polled mode during system suspend" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use the bitmap API to allocate bitmaps" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use the non-atomic bitmap API when applicable" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Fix polled mode during system suspend" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: Fix variable writes with unsupported query_variable_store()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Cleanup the core driver removal callback" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Suppress the driver's bind attributes" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix devres allocation device in virtio transport" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix deferred_tx_wq release on error paths" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use devm_bitmap_zalloc when applicable" (Lenny Szubowicz) [2234390]
  - Revert "ARM: 9255/1: efi/dump UEFI runtime page tables for ARM" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Drop randomization of runtime memory map" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Drop handling of EFI properties table" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Deduplicate ftrace command line argument filtering" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Move dcache cleaning of loaded image out of efi_enter_kernel()" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Avoid dcache_clean_poc() altogether in efi_enter_kernel()" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Move efi-entry.S into the libstub source directory" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Use local strncmp() implementation unconditionally" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Clone memcmp() into the stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Enable efi_printk() in zboot decompressor" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Move screen_info handling to common code" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Provide local implementations of strrchr() and memchr()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Factor out EFI stub entrypoint into separate file" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Add image code and data size to the zimage metadata" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Factor out min alignment and preferred kernel load address" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm64: libstub: Split off kernel image relocation for builtin stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Merge zboot decompressor with the ordinary stub" (Lenny Szubowicz) [2234390]
  - Revert "arm64: unwind: add asynchronous unwind tables to kernel and modules" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Force the use of SetVirtualAddressMap() on Altra machines" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Implement devicepath support for initrd commandline loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Permit mixed mode return types other than efi_status_t" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Add mixed mode support to command line initrd loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Undeprecate the command line initrd loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Move EFI fake memmap support into x86 arch tree" (Lenny Szubowicz) [2234390]
  - Revert "efi: Correct comment on efi_memmap_alloc" (Lenny Szubowicz) [2234390]
  - Revert "drivers: fix typo in firmware/efi/memmap.c" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Move manipulation routines into x86 arch tree" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Add module parameter for setting the record size" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: combine bootloader provided RNG seed with RNG protocol output" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()" (Lenny Szubowicz) [2234390]
  - Revert "efi: stub: use random seed from EFI variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Always enable initrd command line loader and bump version" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_ffa: Move constants to header file" (Lenny Szubowicz) [2234390]
  - Revert "efi: Put Linux specific magic number in the DOS header" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix NULL-deref in init error path" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix userspace infinite retry read efivars after EFI runtime services page fault" (Lenny Szubowicz) [2234390]
  - Revert "firmware/sysfb: Fix EFI/VESA format selection" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Clear stale xfer->hdr.status" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden shared memory access in fetch_response" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden shared memory access in fetch_notification" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix virtio channels cleanup on shutdown" (Lenny Szubowicz) [2234390]
  - Revert "efi/earlycon: Replace open coded strnchrnul()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Disregard bogus entries instead of returning them" (Lenny Szubowicz) [2234390]
  - Revert "efi: verify that variable services are supported" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: prevent double registration" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: Add memory attribute protocol definitions" (Lenny Szubowicz) [2234390]
  - Revert "efi: Accept version 2 of memory attributes table" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix potential NULL deref in efi_mem_reserve_persistent" (Lenny Szubowicz) [2234390]
  - Revert "efi: zboot: Use EFI protocol to remap code/data with the right attributes" (Lenny Szubowicz) [2234390]
  - Revert "efi: Use standard format for printing the EFI revision" (Lenny Szubowicz) [2234390]
  - Revert "efi: Discover BTI support in runtime services regions" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: zboot: Mark zboot EFI application as NX compatible" (Lenny Szubowicz) [2234390]
  - Revert "efi: earlycon: Reprobe after parsing config tables" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: smbios: Use length member instead of record struct size" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Use SMBIOS processor version to key off Ampere quirk" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: smbios: Drop unused 'recsize' parameter" (Lenny Szubowicz) [2234390]
  - Revert "efi: sysfb_efi: Fix DMI quirks not working for simpledrm" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: zboot: Add compressed image to make targets" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: randomalloc: Return EFI_OUT_OF_RESOURCES on failure" (Lenny Szubowicz) [2234390]
  - Revert "efi: Bump stub image version for macOS HVF compatibility" (Lenny Szubowicz) [2234390]
  - Revert "firmware/sysfb: Fix VESA format selection" (Lenny Szubowicz) [2234390]
  - Revert "redhat/configs: update firmware configs" (Lenny Szubowicz) [2234390]
  - Revert "ACPI: power: Switch to sys-off handler API" (Lenny Szubowicz) [2234390]
  - Revert "gsmi: fix null-deref in gsmi_get_variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: drop kobject from efivars_register()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix efi_load_initrd_dev_path() kernel-doc comment" (Lenny Szubowicz) [2234390]
  - Revert "notifier: Add atomic_notifier_call_chain_is_empty()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Wrap legacy power-off callbacks into sys-off handlers" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add do_kernel_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add stub for pm_power_off" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add kernel_can_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add register_platform_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "reboot: Remove pm_power_off_prepare()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Change registration order of legacy power-off handler" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Use static handler for register_platform_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Fix powering off using a non-syscall code paths" (Lenny Szubowicz) [2234390]
  - Revert "PM: hibernate: Use kernel_can_power_off()" (Lenny Szubowicz) [2234390]
  - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Waiman Long) [2227917]
  - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (Waiman Long) [2227917]
  - x86/CPU/AMD: Make sure EFER[AIBRSE] is set (Waiman Long) [2227917]
  - sched/core: Use empty mask to reset cpumasks in sched_setaffinity() (Waiman Long) [2219681]
  - cgroup/cpuset: Extend test_cpuset_prs.sh to test remote partition (Waiman Long) [2174568]
  - cgroup/cpuset: Documentation update for partition (Waiman Long) [2174568]
  - cgroup/cpuset: Check partition conflict with housekeeping setup (Waiman Long) [2174568]
  - cgroup/cpuset: Introduce remote partition (Waiman Long) [2174568]
  - cgroup/cpuset: Add cpuset.cpus.exclusive for v2 (Waiman Long) [2174568]
  - cgroup/cpuset: Add cpuset.cpus.exclusive.effective for v2 (Waiman Long) [2174568]
  - cgroup/cpuset: simplify the percpu kthreads check in update_tasks_cpumask() (Waiman Long) [2174568]
  - cgroup/cpuset: Allow suppression of sched domain rebuild in update_cpumasks_hier() (Waiman Long) [2174568]
  - cgroup/cpuset: Improve temporary cpumasks handling (Waiman Long) [2174568]
  - cgroup/cpuset: Extract out CS_CPU_EXCLUSIVE & CS_SCHED_LOAD_BALANCE handling (Waiman Long) [2174568]
  - cgroup/cpuset: Inherit parent's load balance state in v2 (Waiman Long) [2174568]
  - cgroup/cpuset: Free DL BW in case can_attach() fails (Waiman Long) [2174568]
  - sched/deadline: Create DL BW alloc, free & check overflow interface (Waiman Long) [2174568]
  - cgroup/cpuset: Iterate only if DEADLINE tasks are present (Waiman Long) [2174568]
  - sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets (Waiman Long) [2174568]
  - sched/cpuset: Bring back cpuset_mutex (Waiman Long) [2174568]
  - cgroup/cpuset: Rename functions dealing with DEADLINE accounting (Waiman Long) [2174568]
  - cgroup/cpuset: Minor updates to test_cpuset_prs.sh (Waiman Long) [2174568]
  - cgroup/cpuset: Include offline CPUs when tasks' cpumasks in top_cpuset are updated (Waiman Long) [2174568]
  - cgroup/cpuset: Skip task update if hotplug doesn't affect current cpuset (Waiman Long) [2174568]
  - kselftest/cgroup: Add cleanup() to test_cpuset_prs.sh (Waiman Long) [2174568]
  - kselftest/cgroup: Fix gathering number of CPUs (Waiman Long) [2174568]
  - redhat: configs: Disable CONFIG_CRYPTO_STATS since performance issue for storage (Herbert Xu) [2227964]
  - redhat: list Z-Jiras in the changelog before Y-Jiras (Herton R. Krzesinski)


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.7.1.el9_4]
changelog:
  - NFS: Read unlock folio on nfs_page_create_from_folio() error (Benjamin Coddington) [RHEL-18029]
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-15701]
  - i40e: Fix firmware version comparison function (Ivan Vecera) [RHEL-15701]
  - i40e: disable NAPI right after disabling irqs when handling xsk_pool (Ivan Vecera) [RHEL-15701]
  - i40e: take into account XDP Tx queues when stopping rings (Ivan Vecera) [RHEL-15701]
  - i40e: avoid double calling i40e_pf_rxq_wait() (Ivan Vecera) [RHEL-15701]
  - i40e: Fix wrong mask used during DCB config (Ivan Vecera) [RHEL-15701]
  - i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera) [RHEL-15701]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-15701]
  - net: intel: fix old compiler regressions (Ivan Vecera) [RHEL-15701]
  - i40e: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Ivan Vecera) [RHEL-15701]
  - i40e: set xdp_rxq_info::frag_size (Ivan Vecera) [RHEL-15701]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Ivan Vecera) [RHEL-15701]
  - i40e: handle multi-buffer packets that are shrunk by xdp prog (Ivan Vecera) [RHEL-15701]
  - i40e: Include types.h to some headers (Ivan Vecera) [RHEL-15701]
  - i40e: Restore VF MSI-X state during PCI reset (Ivan Vecera) [RHEL-15701]
  - i40e: fix use-after-free in i40e_aqc_add_filters() (Ivan Vecera) [RHEL-15701]
  - i40e: Avoid unnecessary use of comma operator (Ivan Vecera) [RHEL-15701]
  - i40e: Fix VF disable behavior to block all traffic (Ivan Vecera) [RHEL-15701]
  - i40e: Fix filter input checks to prevent config with invalid values (Ivan Vecera) [RHEL-15701]
  - i40e: field get conversion (Ivan Vecera) [RHEL-15701]
  - i40e: field prep conversion (Ivan Vecera) [RHEL-15701]
  - intel: add bit macro includes where needed (Ivan Vecera) [RHEL-15701]
  - i40e: remove fake support of rx-frames-irq (Ivan Vecera) [RHEL-15701]
  - i40e: Fix ST code value for Clause 45 (Ivan Vecera) [RHEL-15701]
  - i40e: Fix unexpected MFS warning message (Ivan Vecera) [RHEL-15701]
  - i40e: Remove queue tracking fields from i40e_adminq_ring (Ivan Vecera) [RHEL-15701]
  - i40e: Remove AQ register definitions for VF types (Ivan Vecera) [RHEL-15701]
  - i40e: Delete unused and useless i40e_pf fields (Ivan Vecera) [RHEL-15701]
  - i40e: Fix adding unsupported cloud filters (Ivan Vecera) [RHEL-15701]
  - i40e: Delete unused i40e_mac_info fields (Ivan Vecera) [RHEL-15701]
  - i40e: Move inline helpers to i40e_prototype.h (Ivan Vecera) [RHEL-15701]
  - i40e: Remove VF MAC types (Ivan Vecera) [RHEL-15701]
  - i40e: Use helpers to check running FW and AQ API versions (Ivan Vecera) [RHEL-15701]
  - i40e: Add other helpers to check version of running firmware and AQ API (Ivan Vecera) [RHEL-15701]
  - i40e: Move i40e_is_aq_api_ver_ge helper (Ivan Vecera) [RHEL-15701]
  - i40e: Initialize hardware capabilities at single place (Ivan Vecera) [RHEL-15701]
  - i40e: Consolidate hardware capabilities (Ivan Vecera) [RHEL-15701]
  - i40e: Use DECLARE_BITMAP for flags field in i40e_hw (Ivan Vecera) [RHEL-15701]
  - i40e: Use DECLARE_BITMAP for flags and hw_features fields in i40e_pf (Ivan Vecera) [RHEL-15701]
  - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-15701]
  - i40e: Remove unused flags (Ivan Vecera) [RHEL-15701]
  - i40e: add an error code check in i40e_vsi_setup (Ivan Vecera) [RHEL-15701]
  - i40e: increase max descriptors for XL710 (Ivan Vecera) [RHEL-15701]
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera) [RHEL-15701]
  - i40e: sync next_to_clean and next_to_process for programming status desc (Ivan Vecera) [RHEL-15701]
  - i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: remove count_mask (Ivan Vecera) [RHEL-15701]
  - i40e: use scnprintf over strncpy+strncat (Ivan Vecera) [RHEL-15701]
  - intel: fix format warnings (Ivan Vecera) [RHEL-15701]
  - i40e: Refactor and rename i40e_read_pba_string() (Ivan Vecera) [RHEL-15701]
  - i40e: Split and refactor i40e_nvm_version_str() (Ivan Vecera) [RHEL-15701]
  - i40e: prevent crash on probe if hw registers have invalid values (Ivan Vecera) [RHEL-15701]
  - i40e: Move DDP specific macros and structures to i40e_ddp.c (Ivan Vecera) [RHEL-15701]
  - i40e: Remove circular header dependencies and fix headers (Ivan Vecera) [RHEL-15701]
  - i40e: Split i40e_osdep.h (Ivan Vecera) [RHEL-15701]
  - i40e: Move memory allocation structures to i40e_alloc.h (Ivan Vecera) [RHEL-15701]
  - i40e: Simplify memory allocation functions (Ivan Vecera) [RHEL-15701]
  - i40e: Refactor I40E_MDIO_CLAUSE* macros (Ivan Vecera) [RHEL-15701]
  - i40e: Move I40E_MASK macro to i40e_register.h (Ivan Vecera) [RHEL-15701]
  - i40e: Remove back pointer from i40e_hw structure (Ivan Vecera) [RHEL-15701]
  - i40e: Add rx_missed_errors for buffer exhaustion (Ivan Vecera) [RHEL-15701]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (Ivan Vecera) [RHEL-15701]
  - i40e: fix potential memory leaks in i40e_remove() (Ivan Vecera) [RHEL-15701]
  - i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() (Ivan Vecera) [RHEL-15701]
  - i40e: fix misleading debug logs (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_profile_aq_section (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_section_table (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_profile_segment (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_package_header (Ivan Vecera) [RHEL-15701]
  - i40e: Remove unused function declarations (Ivan Vecera) [RHEL-15701]
  - i40e: remove i40e_status (Ivan Vecera) [RHEL-15701]
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: add TX multi-buffer support (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: add RX multi-buffer support (Ivan Vecera) [RHEL-15701]
  - i40e, xsk: fix comment typo (Ivan Vecera) [RHEL-15701]
  - i40e: remove unnecessary check for old MAC == new MAC (Ivan Vecera) [RHEL-15701]
  - i40e: fix i40e_setup_misc_vector() error handling (Ivan Vecera) [RHEL-15701]
  - i40e: fix accessing vsi->active_filters without holding lock (Ivan Vecera) [RHEL-15701]
  - i40e: Add support for VF to specify its primary MAC address (Ivan Vecera) [RHEL-15701]
  - i40e: fix registers dump after run ethtool adapter self test (Ivan Vecera) [RHEL-15701]
  - i40e: fix flow director packet filter programming (Ivan Vecera) [RHEL-15701]
  - i40e: add support for XDP multi-buffer Rx (Ivan Vecera) [RHEL-15701]
  - i40e: add xdp_buff to i40e_ring struct (Ivan Vecera) [RHEL-15701]
  - i40e: introduce next_to_process to i40e_ring (Ivan Vecera) [RHEL-15701]
  - i40e: use frame_sz instead of recalculating truesize for building skb (Ivan Vecera) [RHEL-15701]
  - i40e: Change size to truesize when using i40e_rx_buffer_flip() (Ivan Vecera) [RHEL-15701]
  - i40e: add pre-xdp page_count in rx_buffer (Ivan Vecera) [RHEL-15701]
  - i40e: change Rx buffer size for legacy-rx to support XDP multi-buffer (Ivan Vecera) [RHEL-15701]
  - i40e: consolidate maximum frame size calculation for vsi (Ivan Vecera) [RHEL-15701]
  - i40e: check vsi type before setting xdp_features flag (Ivan Vecera) [RHEL-15701]
  - drivers: net: turn on XDP features (Ivan Vecera) [RHEL-15701]
  - i40e: add xdp frags support to ndo_xdp_xmit (Ivan Vecera) [RHEL-15701]
  - dmaengine: idxd: Ensure safe user copy of completion record (Jerry Snitselaar) [RHEL-28511]
  - dmaengine: idxd: Remove shadow Event Log head stored in idxd (Jerry Snitselaar) [RHEL-28511]
  - dmaengine: idxd: Move dma_free_coherent() out of spinlocked context (Jerry Snitselaar) [RHEL-28511]


author: Mridula Shastry <mridula.c.shastry@oracle.com> [5.14.0-427.13.1.0.1.el9_4.OL9]
changelog:
  - crypto: dh - implement FIPS PCT [Orabug: 36324524]
  - crypto: dh - Make public key test FIPS-only [Orabug: 36324524]
  - crypto: tcrypt - add ffdhe2048(dh) test [Orabug: 36324524]
  - Update module name for cryptographic module [Orabug: 36324521]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.10.el9uek]
changelog:
  - xfs, iomap: limit individual ioend chain lengths in writeback (Dave Chinner)  [Orabug: 34085022]  
  - xfs: only bother with sync_filesystem during readonly remount (Darrick J. Wong)  [Orabug: 34085022]  
  - vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong)  [Orabug: 34085022]  
  - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (Darrick J. Wong)  [Orabug: 34085022]  
  - xfs: flush inodegc workqueue tasks before cancel (Brian Foster)  [Orabug: 34085022]  
  - xfs: prevent UAF in xfs_log_item_in_current_chkpt (Darrick J. Wong)  [Orabug: 34085022]  
  - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (Dan Carpenter)  [Orabug: 34085022]  
  - xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner)  [Orabug: 34085022]  
  - xfs: only run COW extent recovery when there are no live extents (Darrick J. Wong)  [Orabug: 34085022]  
  - x86/platform/uv: Log gap hole end size (Mike Travis)  [Orabug: 34100359]  
  - x86/platform/uv: Update TSC sync state for UV5 (Mike Travis)  [Orabug: 34100359]  
  - x86/platform/uv: Update NMI Handler for UV5 (Mike Travis)  [Orabug: 34100359]  
  - perf/x86/intel/uncore: Fix the build on !CONFIG_PHYS_ADDR_T_64BIT (Ingo Molnar)  [Orabug: 34100359]  
  - perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Steve Wahl)  [Orabug: 34100359]  
  - net/rds: Delayed DR_SOCK_CANCEL (Gerd Rausch)  [Orabug: 34105317]  
  - uek-rpm: Move needed modules to core rpm (Somasundaram Krishnasamy)  [Orabug: 34124573] [Orabug: 34130428] [Orabug: 34130346]  
  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang)  [Orabug: 34135342]  {CVE-2022-1353}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.11.el9uek]
changelog:
  - uek: kabi: Update kABI files and enable the kABI checker (Saeed Mirzamohammadi)  [Orabug: 34044324]  
  - Revert "rds/ib: recover rds connection from stuck tx path" (Nagappan Ramasamy Palaniappan)  [Orabug: 34115603]  
  - Revert "rds/ib: reap tx completions during connection shutdown" (Nagappan Ramasamy Palaniappan)  [Orabug: 34115603]  
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Nagappan Ramasamy Palaniappan)  [Orabug: 34115603]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.12.el9uek]
changelog:
  - docs: kdump: Update the crashkernel description for arm64 (Zhen Lei)  [Orabug: 34052160]  
  - of: fdt: Add memory for devices by DT property "linux,usable-memory-range" (Chen Zhou)  [Orabug: 34052160]  
  - arm64: kdump: Reimplement crashkernel=X (Chen Zhou)  [Orabug: 34052160]  
  - arm64: Use insert_resource() to simplify code (Zhen Lei)  [Orabug: 34052160]  
  - kdump: return -ENOENT if required cmdline option does not exist (Zhen Lei)  [Orabug: 34052160]  
  - Revert "x86: kdump: replace the hard-coded alignment with macro CRASH_ALIGN" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86: kdump: make the lower bound of crash kernel reservation consistent" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86: kdump: use macro CRASH_ADDR_LOW_MAX in functions reserve_crashkernel()" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86: kdump: move xen_pv_domain() check and insert_resource() to setup_arch()" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86: kdump: move reserve_crashkernel[_low]() into crash_core.c" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86/elf: Move vmcore_elf_check_arch_cross to arch/x86/include/asm/elf.h" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "arm64: kdump: introduce some macroes for crash kernel reservation" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "arm64: kdump: reimplement crashkernel=X" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "x86, arm64: Add ARCH_WANT_RESERVE_CRASH_KERNEL config" (Dave Kleikamp)  [Orabug: 34052160]  
  - Revert "kdump: update Documentation about crashkernel" (Dave Kleikamp)  [Orabug: 34052160]  
  - uek-rpm: Add modules required to pass selinux-testsuites to core rpm (Somasundaram Krishnasamy)  [Orabug: 34129238]  
  - uek-rpm: configs: enable 9P_FS for x86_64 (Todd Vierling)  [Orabug: 34146029]  
  - uek-rpm: Add modules to allow podman tests to run on core kernel. (Somasundaram Krishnasamy)  [Orabug: 34123777]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.13.el9uek]
changelog:
  - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra)  [Orabug: 34172708]  {CVE-2022-1729} 
  - uek-rpm: Enable dependencies needed by CONFIG_SND_SOC_INTEL_HDA_DSP_COMMON (Brian Maly)  [Orabug: 33711352]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.14.el9uek]
changelog:
  - lockdown: also lock down previous kgdb use (Daniel Thompson)  [Orabug: 34152698]  {CVE-2022-21499} 
  - io_uring: fix race between timeout flush and removal (Jens Axboe)  [Orabug: 34115159]  {CVE-2022-29582} 
  - kvm/x86: Inherit userspace's core scheduling cookie (Boris Ostrovsky)  [Orabug: 34195867]  
  - vhost: Inherit userspace's core scheduling cookie (Boris Ostrovsky)  [Orabug: 34195867]  
  - sched: Add interface for copying core scheduling cookie between two tasks (Boris Ostrovsky)  [Orabug: 34195867]  
  - KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson)  [Orabug: 34205798]  {CVE-2022-1852} {CVE-2022-1852} 
  - uek-rpm: Added squashfs module to core rpm for kdump (Vijayendra Suman)  [Orabug: 34206290]  
  - uek-rpm: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Harshit Mogalapalli)  [Orabug: 34209438]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.18.el9uek]
changelog:
  - Revert "ocfs2: mount shared volume without ha stack" (Junxiao Bi)  [Orabug: 33701900]  
  - KVM: x86/speculation: Disable Fill buffer clear within guests (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/srbds: Update SRBDS mitigation selection (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation: Add a common function for MD_CLEAR mitigation update (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166} 
  - Documentation: Add documentation for Processor MMIO Stale Data (Pawan Gupta)  [Orabug: 34202258]  {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.20.el9uek]
changelog:
  - floppy: use a statically allocated error counter (Willy Tarreau)  [Orabug: 34218638]  {CVE-2022-1652} 
  - x86: Disable RET on kexec (Konrad Rzeszutek Wilk)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: do not enable IBPB-on-entry when IBPB is not supported (Thadeu Lima de Souza Cascardo)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - arm64: proton-pack: provide vulnerability file value for RETBleed (James Morse)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/cpu/amd: Enumerate BTC_NO (Andrew Cooper)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/common: Stamp out the stepping madness (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - KVM: VMX: Prevent RSB underflow before vmenter (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Fill RSB on vmexit for IBRS (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - KVM: VMX: Fix IBRS handling after vmexit (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - KVM: VMX: Convert launched argument to flags (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - KVM: VMX: Flatten __vmx_vcpu_run() (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Remove x86_spec_ctrl_mask (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Fix SPEC_CTRL write on SMT state change (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Fix firmware entry SPEC_CTRL handling (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/cpu/amd: Add Spectral Chicken (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Add entry UNRET validation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Do IBPB fallback check only once (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Add retbleed=ibpb (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/xen: Rename SYS* entry points (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Update Retpoline validation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - intel_idle: Disable IBRS during long idle (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Report Intel retbleed vulnerability (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Pawan Gupta)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Optimize SPEC_CTRL MSR writes (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/entry: Add kernel IBRS implementation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Enable STIBP for JMP2RET (Kim Phillips)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Add AMD retbleed= boot parameter (Alexandre Chartre)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bugs: Report AMD retbleed vulnerability (Alexandre Chartre)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Add magic AMD return-thunk (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Treat .text.__x86.* as noinstr (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Use return-thunk in asm code (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/sev: Avoid using __x86_return_thunk (Kim Phillips)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/kvm: Fix SETcc emulation for return thunks (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/bpf: Use alternative RET encoding (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/ftrace: Use alternative RET encoding (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86,static_call: Use alternative RET encoding (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86,objtool: Create .return_sites (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Undo return-thunk damage (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/retpoline: Use -mfunction-return (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/retpoline: Swizzle retpoline thunk (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/retpoline: Cleanup some #ifdefery (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/cpufeatures: Move RETPOLINE flags to word 11 (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/kvm/vmx: Make noinstr clean (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/entry: Remove skip_r11rcx (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/entry: Fix register corruption in compat syscall (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/entry: Use PUSH_AND_CLEAR_REGS for compat (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/entry: Simplify entry_INT80_compat() (Linus Torvalds)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - crypto: x86/poly1305 - Fixup SLS (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86,static_call: Fix __static_call_return0 for i386 (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - kvm/emulate: Fix SETcc emulation function offsets with SLS (Borislav Petkov)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Default ignore INT3 for unreachable (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Add straight-line-speculation mitigation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - objtool: Add straight-line-speculation validation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Prepare inline-asm for straight-line-speculation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86: Prepare asm files for straight-line-speculation (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/lib/atomic64_386_32: Rename things (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/alternative: Relax text_poke_bp() constraint (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - static_call,x86: Robustify trampoline patching (Peter Zijlstra)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816} 
  - x86/xen: Move hypercall_page to top of the file (Josh Poimboeuf)  [Orabug: 34335631]  {CVE-2022-29901} {CVE-2022-23816}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-0.30.20.1.el9uek]
changelog:
  - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg)  [Orabug: 34386636]  {CVE-2022-21505}


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-1.43.1.el9uek]
changelog:
  - LTS version: v5.15.43 (Jack Vogel)   
  - mptcp: Do TCP fallback on early DSS checksum failure (Mat Martineau)   
  - LTS version: v5.15.42 (Jack Vogel)   
  - afs: Fix afs_getattr() to refetch file status if callback break occurred (David Howells)   
  - i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() (Yang Yingliang)   
  - mt76: mt7921e: fix possible probe failure after reboot (Sean Wang)   
  - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group (Jae Hyun Yoo)   
  - Input: ili210x - fix reset timing (Marek Vasut)   
  - arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs (Shreyas K K)   
  - net: atlantic: verify hw_head_ lies within TX buffer ring (Grant Grundler)   
  - net: atlantic: add check for MAX_SKB_FRAGS (Grant Grundler)   
  - net: atlantic: reduce scope of is_rsc_complete (Grant Grundler)   
  - net: atlantic: fix "frag[0] not initialized" (Grant Grundler)   
  - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() (Yang Yingliang)   
  - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() (Yang Yingliang)   
  - nl80211: fix locking in nl80211_set_tx_bitrate_mask() (Johannes Berg)   
  - net: fix wrong network header length (Lina Wang)   
  - fbdev: Prevent possible use-after-free in fb_release() (Daniel Vetter)   
  - Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered" (Javier Martinez Canillas)   
  - selftests: add ping test with ping_group_range tuned (Nicolas Dichtel)   
  - nl80211: validate S1G channel width (Kieran Frewen)   
  - mac80211: fix rx reordering with non explicit / psmp ack policy (Felix Fietkau)   
  - scsi: qla2xxx: Fix missed DMA unmap for aborted commands (Gleb Chesnokov)   
  - scsi: scsi_dh_alua: Properly handle the ALUA transitioning state (Brian Bunker)   
  - perf bench numa: Address compiler error on s390 (Thomas Richter)   
  - perf regs x86: Fix arch__intr_reg_mask() for the hybrid platform (Kan Liang)   
  - gpio: mvebu/pwm: Refuse requests with inverted polarity (Uwe Kleine-König)   
  - gpio: gpio-vf610: do not touch other bits when set the target bit (Haibo Chen)   
  - perf build: Fix check for btf__load_from_kernel_by_id() in libbpf (Arnaldo Carvalho de Melo)   
  - scsi: ufs: core: Fix referencing invalid rsp field (Daejun Park)   
  - riscv: dts: sifive: fu540-c000: align dma node name with dtschema (Krzysztof Kozlowski)   
  - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. (Andrew Lunn)   
  - netfilter: flowtable: move dst_check to packet path (Ritaro Takenaka)   
  - netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Pablo Neira Ayuso)   
  - netfilter: flowtable: fix TCP flow teardown (Pablo Neira Ayuso)   
  - igb: skip phy status check where unavailable (Kevin Mitchell)   
  - mptcp: fix checksum byte order (Paolo Abeni)   
  - mptcp: reuse __mptcp_make_csum in validate_data_csum (Geliang Tang)   
  - mptcp: change the parameter of __mptcp_make_csum (Geliang Tang)   
  - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 (Ard Biesheuvel)   
  - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 (Ard Biesheuvel)   
  - net: af_key: add check for pfkey_broadcast in function pfkey_process (Jiasheng Jiang)   
  - net/mlx5e: Properly block LRO when XDP is enabled (Maxim Mikityanskiy)   
  - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Maor Dickman)   
  - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc (Duoming Zhou)   
  - net/qla3xxx: Fix a test in ql_reset_work() (Christophe JAILLET)   
  - clk: at91: generated: consider range when calculating best rate (Codrin Ciubotariu)   
  - ice: Fix interrupt moderation settings getting cleared (Michal Wilczynski)   
  - ice: move ice_container_type onto ice_ring_container (Maciej Fijalkowski)   
  - ice: fix possible under reporting of ethtool Tx and Rx statistics (Paul Greenwalt)   
  - ice: fix crash when writing timestamp on RX rings (Arkadiusz Kubalewski)   
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu)   
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu)   
  - net: systemport: Fix an error handling path in bcm_sysport_probe() (Christophe JAILLET)   
  - Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler" (Pali Rohár)   
  - netfilter: nft_flow_offload: fix offload with pppoe + vlan (Felix Fietkau)   
  - net: fix dev_fill_forward_path with pppoe + bridge (Felix Fietkau)   
  - netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices (Felix Fietkau)   
  - netfilter: flowtable: fix excessive hw offload attempts after failure (Felix Fietkau)   
  - net/sched: act_pedit: sanitize shift argument before usage (Paolo Abeni)   
  - xfrm: fix "disable_policy" flag use when arriving from different devices (Eyal Birger)   
  - xfrm: rework default policy structure (Nicolas Dichtel)   
  - net: macb: Increment rx bd head after allocating skb and buffer (Harini Katakam)   
  - net: ipa: record proper RX transaction count (Alex Elder)   
  - ALSA: hda - fix unused Realtek function when PM is not enabled (Randy Dunlap)   
  - pinctrl: mediatek: mt8365: fix IES control pins (Mattijs Korpershoek)   
  - ARM: dts: aspeed: Add video engine to g6 (Howard Chiu)   
  - ARM: dts: aspeed: Add secure boot controller node (Joel Stanley)   
  - ARM: dts: aspeed: Add ADC for AST2600 and enable for Rainier and Everest (Eddie James)   
  - ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group (Jae Hyun Yoo)   
  - pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl (Jae Hyun Yoo)   
  - ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi (Jae Hyun Yoo)   
  - dma-buf: ensure unique directory name for dmabuf stats (Charan Teja Kalla)   
  - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (Jérôme Pouiller)   
  - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() (Hangyu Hua)   
  - drm/i915/dmc: Add MMIO range restrictions (Anusha Srivatsa)   
  - drm/amd: Don't reset dGPUs if the system is going to s2idle (Mario Limonciello)   
  - libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov)   
  - crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ (Ondrej Mosnacek)   
  - arm64: mte: Ensure the cleared tags are visible before setting the PTE (Catalin Marinas)   
  - arm64: paravirt: Use RCU read locks to guard stolen_time (Prakruthi Deepak Heragu)   
  - KVM: x86/mmu: Update number of zapped pages even if page list is stable (Sean Christopherson)   
  - Revert "can: m_can: pci: use custom bit timings for Elkhart Lake" (Jarkko Nikula)   
  - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold (Rafael J. Wysocki)   
  - Fix double fget() in vhost_net_set_backend() (Al Viro)   
  - selinux: fix bad cleanup on error in hashtab_duplicate() (Ondrej Mosnacek)   
  - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise (Werner Sembach)   
  - ALSA: wavefront: Proper check of get_user() error (Takashi Iwai)   
  - ALSA: usb-audio: Restore Rane SL-1 quirk (Takashi Iwai)   
  - nilfs2: fix lockdep warnings during disk space reclamation (Ryusuke Konishi)   
  - nilfs2: fix lockdep warnings in page operations for btree nodes (Ryusuke Konishi)   
  - ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() (linyujun)   
  - platform/chrome: cros_ec_debugfs: detach log reader wq from devm (Tzung-Bi Shih)   
  - drbd: remove usage of list iterator variable after loop (Jakob Koschel)   
  - MIPS: lantiq: check the return value of kzalloc() (Xiaoke Wang)   
  - fs: fix an infinite loop in iomap_fiemap (Guo Xuenan)   
  - rtc: mc146818-lib: Fix the AltCentury for AMD platforms (Mario Limonciello)   
  - nvme-multipath: fix hang when disk goes live over reconnect (Anton Eidelman)   
  - nvmet: use a private workqueue instead of the system workqueue (Sagi Grimberg)   
  - tools/virtio: compile with -pthread (Michael S. Tsirkin)   
  - vhost_vdpa: don't setup irq offloading when irq_num < 0 (Zhu Lingshan)   
  - s390/pci: improve zpci_dev reference counting (Niklas Schnelle)   
  - s390/traps: improve panic message for translation-specification exception (Heiko Carstens)   
  - ALSA: hda/realtek: Enable headset mic on Lenovo P360 (Kai-Heng Feng)   
  - crypto: x86/chacha20 - Avoid spurious jumps to other functions (Peter Zijlstra)   
  - crypto: stm32 - fix reference leak in stm32_crc_remove (Zheng Yongjun)   
  - rtc: sun6i: Fix time overflow handling (Andre Przywara)   
  - gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher)   
  - nvme-pci: add quirks for Samsung X5 SSDs (Monish Kumar R)   
  - Input: stmfts - fix reference leak in stmfts_input_open (Zheng Yongjun)   
  - Input: add bounds checking to input_set_capability() (Jeff LaBundy)   
  - um: Cleanup syscall_handler_t definition/cast, fix warning (David Gow)   
  - rtc: pcf2127: fix bug when reading alarm registers (Hugo Villeneuve)   
  - rtc: fix use-after-free on device removal (Vincent Whitchurch)   
  - Revert "drm/i915/opregion: check port number bounds for SWSCI display power state" (Greg Thelen)   
  - mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool (Hyeonggon Yoo)   
  - Watchdog: sp5100_tco: Enable Family 17h+ CPUs (Terry Bowman)   
  - Watchdog: sp5100_tco: Add initialization using EFCH MMIO (Terry Bowman)   
  - Watchdog: sp5100_tco: Refactor MMIO base address initialization (Terry Bowman)   
  - Watchdog: sp5100_tco: Move timer initialization into function (Terry Bowman)   
  - i2c: piix4: Enable EFCH MMIO for Family 17h+ (Terry Bowman)   
  - i2c: piix4: Add EFCH MMIO support for SMBus port select (Terry Bowman)   
  - i2c: piix4: Add EFCH MMIO support to SMBus base address detect (Terry Bowman)   
  - i2c: piix4: Add EFCH MMIO support to region request and release (Terry Bowman)   
  - i2c: piix4: Move SMBus port selection into function (Terry Bowman)   
  - i2c: piix4: Move SMBus controller base address detect into function (Terry Bowman)   
  - i2c: piix4: Move port I/O region request/release code into functions (Terry Bowman)   
  - i2c: piix4: Replace hardcoded memory map size with a #define (Terry Bowman)   
  - kernel/resource: Introduce request_mem_region_muxed() (Terry Bowman)   
  - io_uring: arm poll for non-nowait files (Pavel Begunkov)   
  - usb: gadget: fix race when gadget driver register via ioctl (Schspa Shi)   
  - LTS version: v5.15.41 (Jack Vogel)   
  - usb: gadget: uvc: allow for application to cleanly shutdown (Dan Vacura)   
  - usb: gadget: uvc: rename function to be more consistent (Michael Tretter)   
  - ping: fix address binding wrt vrf (Nicolas Dichtel)   
  - mm/hwpoison: use pr_err() instead of dump_page() in get_any_page() (Naoya Horiguchi)   
  - dma-buf: call dma_buf_stats_setup after dmabuf is in valid list (Charan Teja Reddy)   
  - Revert "drm/amd/pm: keep the BACO feature enabled for suspend" (Alex Deucher)   
  - drm/vmwgfx: Initialize drm_mode_fb_cmd2 (Zack Rusin)   
  - SUNRPC: Ensure that the gssproxy client can start in a connected state (Trond Myklebust)   
  - net: phy: micrel: Pass .probe for KS8737 (Fabio Estevam)   
  - net: phy: micrel: Do not use kszphy_suspend/resume for KSZ8061 (Fabio Estevam)   
  - arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map (Mike Rapoport)   
  - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long)   
  - writeback: Avoid skipping inode writeback (Jing Xia)   
  - net: phy: Fix race condition on link status change (Francesco Dolcini)   
  - net: atlantic: always deep reset on pm op, fixing up my null deref regression (Manuel Ullmann)   
  - i40e: i40e_main: fix a missing check on list iterator (Xiaomeng Tong)   
  - drm/nouveau/tegra: Stop using iommu_present() (Robin Murphy)   
  - drm/vmwgfx: Disable command buffers on svga3 without gbobjects (Zack Rusin)   
  - mm/huge_memory: do not overkill when splitting huge_zero_page (Xu Yu)   
  - Revert "mm/memory-failure.c: skip huge_zero_page in memory_failure()" (Xu Yu)   
  - ceph: fix setting of xattrs on async created inodes (Jeff Layton)   
  - serial: 8250_mtk: Fix register address for XON/XOFF character (AngeloGioacchino Del Regno)   
  - serial: 8250_mtk: Fix UART_EFR register address (AngeloGioacchino Del Regno)   
  - fsl_lpuart: Don't enable interrupts too early (Indan Zupancic)   
  - slimbus: qcom: Fix IRQ check in qcom_slim_probe (Miaoqian Lin)   
  - USB: serial: option: add Fibocom MA510 modem (Sven Schwermer)   
  - USB: serial: option: add Fibocom L610 modem (Sven Schwermer)   
  - USB: serial: qcserial: add support for Sierra Wireless EM7590 (Ethan Yang)   
  - USB: serial: pl2303: add device id for HP LM930 Display (Scott Chen)   
  - usb: typec: tcpci_mt6360: Update for BMC PHY setting (ChiYuan Huang)   
  - usb: typec: tcpci: Don't skip cleanup in .remove() on error (Uwe Kleine-König)   
  - usb: cdc-wdm: fix reading stuck on device close (Sergey Ryazanov)   
  - tty: n_gsm: fix mux activation issues in gsm_config() (Daniel Starke)   
  - tty: n_gsm: fix buffer over-read in gsm_dlci_data() (Daniel Starke)   
  - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() (Yang Yingliang)   
  - x86/mm: Fix marking of unused sub-pmd ranges (Adrian-Ken Rueegsegger)   
  - usb: xhci-mtk: fix fs isoc's transfer error (Chunfeng Yun)   
  - KVM: PPC: Book3S PR: Enable MSR_DR for switch_mmu_context() (Alexander Graf)   
  - firmware_loader: use kernel credentials when reading firmware (Thiébaud Weksteen)   
  - interconnect: Restore sync state by ignoring ipa-virt in provider count (Stephen Boyd)   
  - tcp: drop the hash_32() part from the index calculation (Willy Tarreau)   
  - tcp: increase source port perturb table to 2^16 (Willy Tarreau)   
  - tcp: dynamically allocate the perturb table used by source ports (Willy Tarreau)   
  - tcp: add small random increments to the source port (Willy Tarreau)   
  - tcp: resalt the secret every 10 seconds (Eric Dumazet)   
  - tcp: use different parts of the port_offset for index and offset (Willy Tarreau)   
  - secure_seq: use the 64 bits of the siphash for port offset calculation (Willy Tarreau)   
  - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT (Matthew Hagan)   
  - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation (Shravya Kumbham)   
  - ASoC: SOF: Fix NULL pointer exception in sof_pci_probe callback (Ajit Kumar Pandey)   
  - s390: disable -Warray-bounds (Sven Schnelle)   
  - ASoC: ops: Validate input values in snd_soc_put_volsw_range() (Mark Brown)   
  - ASoC: max98090: Generate notifications on changes for custom control (Mark Brown)   
  - ASoC: max98090: Reject invalid values in custom control put() (Mark Brown)   
  - iommu: arm-smmu: disable large page mappings for Nvidia arm-smmu (Ashish Mhetre)   
  - RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() (Duoming Zhou)   
  - hwmon: (f71882fg) Fix negative temperature (Ji-Ze Hong (Peter Hong))   
  - gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher)   
  - drm/vmwgfx: Fix fencing on SVGAv3 (Zack Rusin)   
  - tls: Fix context leak on tls_device_down (Maxim Mikityanskiy)   
  - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() (Taehee Yoo)   
  - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending (Guangguan Wang)   
  - net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() (Florian Fainelli)   
  - drm/vc4: hdmi: Fix build error for implicit function declaration (Hui Tang)   
  - net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral (Florian Fainelli)   
  - net: ethernet: mediatek: ppe: fix wrong size passed to memset() (Yang Yingliang)   
  - net/sched: act_pedit: really ensure the skb is writable (Paolo Abeni)   
  - s390/lcs: fix variable dereferenced before check (Alexandra Winter)   
  - s390/ctcm: fix potential memory leak (Alexandra Winter)   
  - s390/ctcm: fix variable dereferenced before check (Alexandra Winter)   
  - virtio: fix virtio transitional ids (Shunsuke Mie)   
  - arm64: vdso: fix makefile dependency on vdso.so (Joey Gouly)   
  - selftests: vm: Makefile: rename TARGETS to VMTARGETS (Joel Savitz)   
  - procfs: prevent unprivileged processes accessing fdinfo dir (Kalesh Singh)   
  - hwmon: (ltq-cputemp) restrict it to SOC_XWAY (Randy Dunlap)   
  - dim: initialize all struct fields (Jesse Brandeburg)   
  - ionic: fix missing pci_release_regions() on error in ionic_probe() (Yang Yingliang)   
  - nfs: fix broken handling of the softreval mount option (Dan Aloni)   
  - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg)   
  - net: sfc: fix memory leak due to ptp channel (Taehee Yoo)   
  - sfc: Use swap() instead of open coding it (Jiapeng Chong)   
  - fbdev: efifb: Fix a use-after-free due early fb_info cleanup (Javier Martinez Canillas)   
  - net: chelsio: cxgb4: Avoid potential negative array offset (Kees Cook)   
  - netlink: do not reset transport header in netlink_recvmsg() (Eric Dumazet)   
  - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() (Christophe JAILLET)   
  - ipv4: drop dst in multicast routing path (Lokesh Dhoundiyal)   
  - ice: fix PTP stale Tx timestamps cleanup (Michal Michalik)   
  - ice: Fix race during aux device (un)plugging (Ivan Vecera)   
  - platform/surface: aggregator: Fix initialization order when compiling as builtin module (Maximilian Luz)   
  - fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas)   
  - fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas)   
  - fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove (Javier Martinez Canillas)   
  - net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters (Vladimir Oltean)   
  - net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 (Vladimir Oltean)   
  - net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups (Vladimir Oltean)   
  - net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted (Vladimir Oltean)   
  - net: Fix features skip in for_each_netdev_feature() (Tariq Toukan)   
  - mac80211: Reset MBSSID parameters upon connection (Manikanta Pubbisetty)   
  - hwmon: (tmp401) Add OF device ID table (Camel Guo)   
  - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing (Guenter Roeck)   
  - batman-adv: Don't skb_split skbuffs with frag_list (Sven Eckelmann)   
  - LTS version: v5.15.40 (Jack Vogel)   
  - mm: fix invalid page pointer returned with FOLL_PIN gups (Peter Xu)   
  - mm/mlock: fix potential imbalanced rlimit ucounts adjustment (Miaohe Lin)   
  - mm/hwpoison: fix error page recovered but reported "not recovered" (Naoya Horiguchi)   
  - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() (Muchun Song)   
  - mm: shmem: fix missing cache flush in shmem_mfill_atomic_pte() (Muchun Song)   
  - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() (Muchun Song)   
  - mm: fix missing cache flush for all tail pages of compound page (Muchun Song)   
  - udf: Avoid using stale lengthOfImpUse (Jan Kara)   
  - rfkill: uapi: fix RFKILL_IOCTL_MAX_SIZE ioctl request definition (Gleb Fotengauer-Malinovskiy)   
  - Bluetooth: Fix the creation of hdev->name (Itay Iellin)   
  - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' (Arnaldo Carvalho de Melo)   
  - kbuild: move objtool_args back to scripts/Makefile.build (Masahiro Yamada)   
  - LTS version: v5.15.39 (Jack Vogel)   
  - PCI: aardvark: Update comment about link going down after link-up (Marek Behún)   
  - PCI: aardvark: Drop __maybe_unused from advk_pcie_disable_phy() (Marek Behún)   
  - PCI: aardvark: Don't mask irq when mapping (Pali Rohár)   
  - PCI: aardvark: Remove irq_mask_ack() callback for INTx interrupts (Pali Rohár)   
  - PCI: aardvark: Use separate INTA interrupt for emulated root bridge (Pali Rohár)   
  - PCI: aardvark: Fix support for PME requester on emulated bridge (Pali Rohár)   
  - PCI: aardvark: Add support for PME interrupts (Pali Rohár)   
  - PCI: aardvark: Optimize writing PCI_EXP_RTCTL_PMEIE and PCI_EXP_RTSTA_PME on emulated bridge (Pali Rohár)   
  - PCI: aardvark: Add support for ERR interrupt on emulated bridge (Pali Rohár)   
  - PCI: aardvark: Enable MSI-X support (Pali Rohár)   
  - PCI: aardvark: Fix setting MSI address (Pali Rohár)   
  - PCI: aardvark: Add support for masking MSI interrupts (Pali Rohár)   
  - PCI: aardvark: Refactor unmasking summary MSI interrupt (Pali Rohár)   
  - PCI: aardvark: Use dev_fwnode() instead of of_node_to_fwnode(dev->of_node) (Marek Behún)   
  - PCI: aardvark: Make msi_domain_info structure a static driver structure (Marek Behún)   
  - PCI: aardvark: Make MSI irq_chip structures static driver structures (Marek Behún)   
  - PCI: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (Pali Rohár)   
  - PCI: aardvark: Rewrite IRQ code to chained IRQ handler (Pali Rohár)   
  - PCI: aardvark: Replace custom PCIE_CORE_INT_* macros with PCI_INTERRUPT_* (Pali Rohár)   
  - PCI: aardvark: Disable common PHY when unbinding driver (Pali Rohár)   
  - PCI: aardvark: Disable link training when unbinding driver (Pali Rohár)   
  - PCI: aardvark: Assert PERST# when unbinding driver (Pali Rohár)   
  - PCI: aardvark: Fix memory leak in driver unbind (Pali Rohár)   
  - PCI: aardvark: Mask all interrupts when unbinding driver (Pali Rohár)   
  - PCI: aardvark: Disable bus mastering when unbinding driver (Pali Rohár)   
  - PCI: aardvark: Comment actions in driver remove method (Pali Rohár)   
  - PCI: aardvark: Clear all MSIs at setup (Pali Rohár)   
  - PCI: aardvark: Add support for DEVCAP2, DEVCTL2, LNKCAP2 and LNKCTL2 registers on emulated bridge (Pali Rohár)   
  - PCI: pci-bridge-emul: Add definitions for missing capabilities registers (Pali Rohár)   
  - PCI: pci-bridge-emul: Add description for class_revision field (Pali Rohár)   
  - rcu: Apply callbacks processing time limit only on softirq (Frederic Weisbecker)   
  - rcu: Fix callbacks processing time limit retaining cond_resched() (Frederic Weisbecker)   
  - Revert "parisc: Mark sched_clock unstable only if clocks are not syncronized" (Helge Deller)   
  - mmc: rtsx: add 74 Clocks in power on flow (Ricky WU)   
  - selftest/vm: verify remap destination address in mremap_test (Sidhartha Kumar)   
  - selftest/vm: verify mmap addr in mremap_test (Sidhartha Kumar)   
  - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (Wanpeng Li)   
  - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (Paolo Bonzini)   
  - KVM: x86: Do not change ICR on write to APIC_SELF_IPI (Paolo Bonzini)   
  - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (Wanpeng Li)   
  - KVM: selftests: Silence compiler warning in the kvm_page_table_test (Thomas Huth)   
  - kvm: selftests: do not use bitfields larger than 32-bits for PTEs (Paolo Bonzini)   
  - iommu/dart: Add missing module owner to ops structure (Hector Martin)   
  - net/mlx5e: Lag, Don't skip fib events on current dst (Vlad Buslov)   
  - net/mlx5e: Lag, Fix fib_info pointer assignment (Vlad Buslov)   
  - net/mlx5e: Lag, Fix use-after-free in fib event handler (Vlad Buslov)   
  - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu (Aya Levin)   
  - fbdev: Make fb_release() return -ENODEV if fbdev was unregistered (Javier Martinez Canillas)   
  - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (Sandipan Das)   
  - gpio: mvebu: drop pwm base assignment (Baruch Siach)   
  - drm/amdgpu: Ensure HDA function is suspended before ASIC reset (Kai-Heng Feng)   
  - drm/amdgpu: don't set s3 and s0ix at the same time (Mario Limonciello)   
  - drm/amdgpu: explicitly check for s0ix when evicting resources (Mario Limonciello)   
  - drm/amdgpu: unify BO evicting method in amdgpu_ttm (Nirmoy Das)   
  - btrfs: always log symlinks in full mode (Filipe Manana)   
  - btrfs: force v2 space cache usage for subpage mount (Qu Wenruo)   
  - smsc911x: allow using IRQ0 (Sergey Shtylyov)   
  - selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer (Vladimir Oltean)   
  - bnxt_en: Fix unnecessary dropping of RX packets (Michael Chan)   
  - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (Somnath Kotur)   
  - selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational (Ido Schimmel)   
  - rxrpc: Enable IPv6 checksums on transport socket (David Howells)   
  - mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter() (Eric Dumazet)   
  - hinic: fix bug of wq out of bound access (Qiao Ma)   
  - btrfs: do not BUG_ON() on failure to update inode when setting xattr (Filipe Manana)   
  - drm/msm/dp: remove fail safe mode related code (Kuogee Hsieh)   
  - selftests/net: so_txtime: usage(): fix documentation of default clock (Marc Kleine-Budde)   
  - selftests/net: so_txtime: fix parsing of start time stamp on 32 bit systems (Marc Kleine-Budde)   
  - net: emaclite: Add error handling for of_address_to_resource() (Shravya Kumbham)   
  - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() (Eric Dumazet)   
  - net: cpsw: add missing of_node_put() in cpsw_probe_dt() (Yang Yingliang)   
  - net: mdio: Fix ENOMEM return value in BCM6368 mux bus controller (Niels Dossche)   
  - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() (Yang Yingliang)   
  - net: dsa: mt7530: add missing of_node_put() in mt7530_setup() (Yang Yingliang)   
  - net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() (Yang Yingliang)   
  - NFSv4: Don't invalidate inode attributes on delegation return (Trond Myklebust)   
  - RDMA/irdma: Fix possible crash due to NULL netdev in notifier (Mustafa Ismail)   
  - RDMA/irdma: Reduce iWARP QP destroy time (Shiraz Saleem)   
  - RDMA/irdma: Flush iWARP QP if modified to ERR from RTR state (Tatyana Nikolova)   
  - RDMA/siw: Fix a condition race issue in MPA request processing (Cheng Xu)   
  - SUNRPC release the transport of a relocated task with an assigned transport (Olga Kornievskaia)   
  - selftests/seccomp: Don't call read() on TTY from background pgrp (Jann Horn)   
  - net/mlx5: Fix deadlock in sync reset flow (Moshe Shemesh)   
  - net/mlx5: Avoid double clear or set of sync reset requested (Moshe Shemesh)   
  - net/mlx5e: Fix the calling of update_buffer_lossy() API (Mark Zhang)   
  - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release (Paul Blakey)   
  - net/mlx5e: Don't match double-vlan packets if cvlan is not set (Vlad Buslov)   
  - net/mlx5e: Fix trust state reset in reload (Moshe Tal)   
  - iommu/dart: check return value after calling platform_get_resource() (Yang Yingliang)   
  - iommu/vt-d: Drop stop marker messages (Lu Baolu)   
  - ASoC: soc-ops: fix error handling (Pierre-Louis Bossart)   
  - ASoC: dmaengine: Restore NULL prepare_slave_config() callback (Codrin Ciubotariu)   
  - hwmon: (pmbus) disable PEC if not enabled (Adam Wujek)   
  - hwmon: (adt7470) Fix warning on module removal (Armin Wolf)   
  - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) (Puyou Lu)   
  - gpio: visconti: Fix fwnode of GPIO IRQ (Nobuhiro Iwamatsu)   
  - NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou)   
  - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou)   
  - nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou)   
  - can: grcan: only use the NAPI poll budget for RX (Andreas Larsson)   
  - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs (Andreas Larsson)   
  - can: grcan: use ofdev->dev when allocating DMA memory (Daniel Hellstrom)   
  - can: isotp: remove re-binding of bound socket (Oliver Hartkopp)   
  - can: grcan: grcan_close(): fix deadlock (Duoming Zhou)   
  - s390/dasd: Fix read inconsistency for ESE DASD devices (Jan Höppner)   
  - s390/dasd: Fix read for ESE with blksize < 4k (Jan Höppner)   
  - s390/dasd: prevent double format of tracks for ESE devices (Stefan Haberland)   
  - s390/dasd: fix data corruption for ESE devices (Stefan Haberland)   
  - ASoC: meson: Fix event generation for AUI CODEC mux (Mark Brown)   
  - ASoC: meson: Fix event generation for G12A tohdmi mux (Mark Brown)   
  - ASoC: meson: Fix event generation for AUI ACODEC mux (Mark Brown)   
  - ASoC: wm8958: Fix change notifications for DSP controls (Mark Brown)   
  - ASoC: da7219: Fix change notifications for tone generator frequency (Mark Brown)   
  - genirq: Synchronize interrupt thread startup (Thomas Pfaff)   
  - net: stmmac: disable Split Header (SPH) for Intel platforms (Tan Tee Min)   
  - firewire: core: extend card->lock in fw_core_handle_bus_reset (Niels Dossche)   
  - firewire: remove check of list iterator against head past the loop body (Jakob Koschel)   
  - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye)   
  - timekeeping: Mark NMI safe time accessors as notrace (Kurt Kanzenbach)   
  - Revert "SUNRPC: attempt AF_LOCAL connect on setup" (Trond Myklebust)   
  - RISC-V: relocate DTB if it's outside memory region (Nick Kossifidis)   
  - drm/amdgpu: do not use passthrough mode in Xen dom0 (Marek Marczykowski-Górecki)   
  - drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT (Harry Wentland)   
  - iommu/arm-smmu-v3: Fix size calculation in arm_smmu_mm_invalidate_range() (Nicolin Chen)   
  - iommu/vt-d: Calculate mask for non-aligned flushes (David Stevens)   
  - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (Kyle Huey)   
  - x86/fpu: Prevent FPU state corruption (Thomas Gleixner)   
  - gpiolib: of: fix bounds check for 'gpio-reserved-ranges' (Andrei Lalaev)   
  - mmc: core: Set HS clock speed before sending HS CMD13 (Brian Norris)   
  - mmc: sunxi-mmc: Fix DMA descriptors allocated above 32 bits (Samuel Holland)   
  - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC (Shaik Sajida Bhanu)   
  - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (Takashi Sakamoto)   
  - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers (Zihao Wang)   
  - parisc: Merge model and model name into one line in /proc/cpuinfo (Helge Deller)   
  - MIPS: Fix CP0 counter erratum detection for R4k CPUs (Maciej W. Rozycki)   
  - LTS version: v5.15.38 (Jack Vogel)   
  - powerpc/64: Add UADDR64 relocation support (Alexey Kardashevskiy)   
  - objtool: Fix type of reloc::addend (Peter Zijlstra)   
  - objtool: Fix code relocs vs weak symbols (Peter Zijlstra)   
  - eeprom: at25: Use DMA safe buffers (Christophe Leroy)   
  - perf symbol: Remove arch__symbols__fixup_end() (Namhyung Kim)   
  - tty: n_gsm: fix software flow control handling (Daniel Starke)   
  - tty: n_gsm: fix incorrect UA handling (Daniel Starke)   
  - tty: n_gsm: fix reset fifo race condition (Daniel Starke)   
  - tty: n_gsm: fix missing tty wakeup in convergence layer type 2 (Daniel Starke)   
  - tty: n_gsm: fix wrong signal octets encoding in MSC (Daniel Starke)   
  - tty: n_gsm: fix wrong command frame length field encoding (Daniel Starke)   
  - tty: n_gsm: fix wrong command retry handling (Daniel Starke)   
  - tty: n_gsm: fix missing explicit ldisc flush (Daniel Starke)   
  - tty: n_gsm: fix wrong DLCI release order (Daniel Starke)   
  - tty: n_gsm: fix insufficient txframe size (Daniel Starke)   
  - netfilter: nft_socket: only do sk lookups when indev is available (Florian Westphal)   
  - tty: n_gsm: fix malformed counter for out of frame data (Daniel Starke)   
  - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 (Daniel Starke)   
  - tty: n_gsm: fix mux cleanup after unregister tty device (Daniel Starke)   
  - tty: n_gsm: fix decoupled mux resource (Daniel Starke)   
  - tty: n_gsm: fix restart handling via CLD command (Daniel Starke)   
  - perf symbol: Update symbols__fixup_end() (Namhyung Kim)   
  - perf symbol: Pass is_kallsyms to symbols__fixup_end() (Namhyung Kim)   
  - x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov)   
  - ARM: dts: imx8mm-venice-gw{71xx,72xx,73xx}: fix OTG controller OC mode (Tim Harvey)   
  - ARM: dts: at91: sama7g5ek: enable pull-up on flexcom3 console lines (Eugen Hristev)   
  - btrfs: fix leaked plug after failure syncing log on zoned filesystems (Filipe Manana)   
  - thermal: int340x: Fix attr.show callback prototype (Kees Cook)   
  - ACPI: processor: idle: Avoid falling back to C3 type C-states (Ville Syrjälä)   
  - net: ethernet: stmmac: fix write to sgmii_adapter_base (Dinh Nguyen)   
  - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses (Imre Deak)   
  - drm/i915: Check EDID for HDR static metadata when choosing blc (Jouni Högander)   
  - netfilter: Update ip6_route_me_harder to consider L3 domain (Martin Willi)   
  - mtd: rawnand: qcom: fix memory corruption that causes panic (Md Sadre Alam)   
  - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time (Zqiang)   
  - zonefs: Clear inode information flags on inode creation (Damien Le Moal)   
  - zonefs: Fix management of open zones (Damien Le Moal)   
  - Revert "ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40" (Ville Syrjälä)   
  - selftest/vm: verify remap destination address in mremap_test (Sidhartha Kumar)   
  - selftest/vm: verify mmap addr in mremap_test (Sidhartha Kumar)   
  - powerpc/perf: Fix 32bit compile (Alexey Kardashevskiy)   
  - drivers: net: hippi: Fix deadlock in rr_close() (Duoming Zhou)   
  - cifs: destage any unwritten data to the server before calling copychunk_write (Ronnie Sahlberg)   
  - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (Mikulas Patocka)   
  - bonding: do not discard lowest hash bit for non layer3+4 hashing (suresh kumar)   
  - ksmbd: set fixed sector size to FS_SECTOR_SIZE_INFORMATION (Namjae Jeon)   
  - ksmbd: increment reference count of parent fp (Namjae Jeon)   
  - arch: xtensa: platforms: Fix deadlock in rs_close() (Duoming Zhou)   
  - ext4: fix bug_on in start_this_handle during umount filesystem (Ye Bin)   
  - ASoC: wm8731: Disable the regulator when probing fails (Zheyu Ma)   
  - ASoC: Intel: soc-acpi: correct device endpoints for max98373 (Chao Song)   
  - tcp: fix F-RTO may not work correctly when receiving DSACK (Pengcheng Yang)   
  - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" (Dany Madden)   
  - ixgbe: ensure IPsec VF<->PF compatibility (Leon Romanovsky)   
  - perf arm-spe: Fix addresses of synthesized SPE events (Timothy Hayes)   
  - gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher)   
  - gfs2: Make sure not to return short direct writes (Andreas Gruenbacher)   
  - gfs2: Minor retry logic cleanup (Andreas Gruenbacher)   
  - gfs2: Prevent endless loops in gfs2_file_buffered_write (Andreas Gruenbacher)   
  - net: fec: add missing of_node_put() in fec_enet_init_stop_mode() (Yang Yingliang)   
  - bnx2x: fix napi API usage sequence (Manish Chopra)   
  - tls: Skip tls_append_frag on zero copy size (Maxim Mikityanskiy)   
  - drm/amd/display: Fix memory leak in dcn21_clock_source_create (Miaoqian Lin)   
  - drm/amdkfd: Fix GWS queue count (David Yat Sin)   
  - netfilter: conntrack: fix udp offload timeout sysctl (Volodymyr Mytnyk)   
  - io_uring: check reserved fields for recv/recvmsg (Jens Axboe)   
  - io_uring: check reserved fields for send/sendmsg (Jens Axboe)   
  - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK (Martin Blumenstingl)   
  - drm/sun4i: Remove obsolete references to PHYS_OFFSET (Samuel Holland)   
  - net: dsa: mv88e6xxx: Fix port_hidden_wait to account for port_base_addr (Nathan Rossi)   
  - net: phy: marvell10g: fix return value on error (Baruch Siach)   
  - net: bcmgenet: hide status block before TX timestamping (Jonathan Lemon)   
  - cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts (Vladimir Zapolskiy)   
  - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() (Yang Yingliang)   
  - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() (Christophe JAILLET)   
  - tcp: make sure treq->af_specific is initialized (Eric Dumazet)   
  - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT (Eric Dumazet)   
  - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye)   
  - ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye)   
  - ip_gre: Make o_seqno start from 0 in native mode (Peilin Ye)   
  - net/smc: sync err code when tcp connection was refused (liuyacan)   
  - net: hns3: add return value for mailbox handling in PF (Jian Shen)   
  - net: hns3: add validity check for message data length (Jian Shen)   
  - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx (Jie Wang)   
  - net: hns3: clear inited state and stop client after failed to register netdev (Jian Shen)   
  - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe (Xiaobing Luo)   
  - pinctrl: pistachio: fix use of irq_of_parse_and_map() (Lv Ruyi)   
  - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock (Fabio Estevam)   
  - ARM: dts: imx6ull-colibri: fix vqmmc regulator (Max Krummenacher)   
  - sctp: check asoc strreset_chunk in sctp_generate_reconf_event (Xin Long)   
  - wireguard: device: check for metadata_dst with skb_valid_dst() (Nikolay Aleksandrov)   
  - tcp: ensure to use the most recently sent skb when filling the rate sample (Pengcheng Yang)   
  - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested (Marek Vasut)   
  - tcp: md5: incorrect tcp_header_len for incoming connections (Francesco Ruggeri)   
  - pinctrl: rockchip: fix RK3308 pinmux bits (Luca Ceresoli)   
  - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook (Eyal Birger)   
  - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion (Pablo Neira Ayuso)   
  - net: dsa: Add missing of_node_put() in dsa_port_link_register_of (Miaoqian Lin)   
  - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode (Geert Uytterhoeven)   
  - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI (Marek Vasut)   
  - mtd: fix 'part' field data corruption in mtd_info (Oleksandr Ocheretnyi)   
  - mtd: rawnand: Fix return value check of wait_for_completion_timeout (Miaoqian Lin)   
  - pinctrl: mediatek: moore: Fix build error (YueHaibing)   
  - phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe() (Heiner Kallweit)   
  - ipvs: correctly print the memory size of ip_vs_conn_tab (Pengcheng Yang)   
  - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (Adam Ford)   
  - ARM: dts: am3517-evm: Fix misc pinmuxing (Adam Ford)   
  - ARM: dts: Fix mmc order for omap3-gta04 (H. Nikolaus Schaller)   
  - interconnect: qcom: sdx55: Drop IP0 interconnects (Stephen Boyd)   
  - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe (Miaoqian Lin)   
  - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe (Miaoqian Lin)   
  - ARM: dts: at91: fix pinctrl phandles (Claudiu Beznea)   
  - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name (Claudiu Beznea)   
  - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (Mark Brown)   
  - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks (Miaoqian Lin)   
  - ARM: dts: dra7: Fix suspend warning for vpe powerdomain (Tony Lindgren)   
  - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific (Tony Lindgren)   
  - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init (Miaoqian Lin)   
  - phy: samsung: exynos5250-sata: fix missing device put in probe error paths (Krzysztof Kozlowski)   
  - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe (Miaoqian Lin)   
  - arm64: dts: meson-sm1-bananapi-m5: fix wrong GPIO pin labeling for CON1 (Guillaume Giraudon)   
  - arm64: dts: imx8mn: Fix SAI nodes (Marek Vasut)   
  - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (Fabio Estevam)   
  - USB: Fix xhci event ring dequeue pointer ERDP update issue (Weitao Wang)   
  - arm64: dts: imx8qm: Correct SCU clock controller's compatible property (Liu Ying)   
  - xsk: Fix l2fwd for copy mode + busy poll combo (Maciej Fijalkowski)   
  - mtd: rawnand: fix ecc parameters for mt7622 (Chuanhong Guo)   
  - iio:imu:bmi160: disable regulator in error path (Tong Zhang)   
  - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards (Christian Hewitt)   
  - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards (Christian Hewitt)   
  - video: fbdev: udlfb: properly check endpoint type (Pavel Skripkin)   
  - cpufreq: qcom-cpufreq-hw: Fix throttle frequency value on EPSS platforms (Vladimir Zapolskiy)   
  - cpufreq: qcom-hw: fix the race between LMH worker and cpuhp (Dmitry Baryshkov)   
  - virtio_net: fix wrong buf address calculation when using xdp (Nikolay Aleksandrov)   
  - iocost: don't reset the inuse weight of under-weighted debtors (Tejun Heo)   
  - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests (Thomas Gleixner)   
  - riscv: patch_text: Fixup last cpu should be master (Guo Ren)   
  - hex2bin: fix access beyond string end (Mikulas Patocka)   
  - hex2bin: make the function hex_to_bin constant-time (Mikulas Patocka)   
  - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config (Krzysztof Kozlowski)   
  - arm64: dts: imx8mm-venice: fix spi2 pin configuration (Johan Hovold)   
  - bus: mhi: host: pci_generic: Flush recovery worker during freeze (Manivannan Sadhasivam)   
  - bus: mhi: host: pci_generic: Add missing poweroff() PM callback (Manivannan Sadhasivam)   
  - ceph: fix possible NULL pointer dereference for req->r_session (Xiubo Li)   
  - arch_topology: Do not set llc_sibling if llc_id is invalid (Wang Qing)   
  - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device (Maciej W. Rozycki)   
  - serial: 8250: Also set sticky MCR bits in console restoration (Maciej W. Rozycki)   
  - serial: amba-pl011: do not time out prematurely when draining tx fifo (Lino Sanfilippo)   
  - serial: imx: fix overrun interrupts in DMA mode (Johan Hovold)   
  - usb: phy: generic: Get the vbus supply (Sean Anderson)   
  - usb: cdns3: Fix issue for clear halt endpoint (Pawel Laszczak)   
  - usb: dwc3: pci: add support for the Intel Meteor Lake-P (Heikki Krogerus)   
  - usb: dwc3: gadget: Return proper request status (Thinh Nguyen)   
  - usb: dwc3: core: Only handle soft-reset in DCTL (Thinh Nguyen)   
  - usb: dwc3: core: Fix tx/rx threshold settings (Thinh Nguyen)   
  - usb: dwc3: Try usb-role-switch first in dwc3_drd_init (Sven Peter)   
  - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() (Vijayavardhan Vennapusa)   
  - usb: gadget: uvc: Fix crash when encoding data for usb request (Dan Vacura)   
  - usb: typec: ucsi: Fix role swapping (Heikki Krogerus)   
  - usb: typec: ucsi: Fix reuse of completion structure (Heikki Krogerus)   
  - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Tasos Sahanidis)   
  - usb: misc: fix improper handling of refcount in uss720_probe() (Hangyu Hua)   
  - iio: imu: inv_icm42600: Fix I2C init possible nack (Fawzi Khaber)   
  - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() (Zheyu Ma)   
  - iio: dac: ad5446: Fix read_raw not returning set value (Michael Hennerich)   
  - iio: dac: ad5592r: Fix the missing return value. (Zizhuang Deng)   
  - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms (Mathias Nyman)   
  - xhci: stop polling roothubs after shutdown (Henry Lin)   
  - xhci: Enable runtime PM on second Alderlake controller (Evan Green)   
  - usb: xhci: tegra:Fix PM usage reference leak of tegra_xusb_unpowergate_partitions (zhangqilong)   
  - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions (Daniele Palmas)   
  - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB (Slark Xiao)   
  - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader (Bruno Thomsen)   
  - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS (Kees Cook)   
  - USB: quirks: add STRING quirk for VCOM device (Oliver Neukum)   
  - USB: quirks: add a Realtek card reader (Oliver Neukum)   
  - usb: mtu3: fix USB 3.0 dual-role-switch from device to host (Macpaul Lin)   
  - LTS version: v4.15.37 (Jack Vogel)   
  - selftests/bpf: Add test for reg2btf_ids out of bounds access (Kumar Kartikeya Dwivedi)   
  - mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Linus Torvalds)   
  - btrfs: fallback to blocking mode when doing async dio over multiple extents (Filipe Manana)   
  - btrfs: fix deadlock due to page faults during direct IO reads and writes (Filipe Manana)   
  - gfs2: Fix mmap + page fault deadlocks for direct I/O (Andreas Gruenbacher)   
  - iomap: Add done_before argument to iomap_dio_rw (Andreas Gruenbacher)   
  - iomap: Support partial direct I/O on user copy failures (Andreas Gruenbacher)   
  - iomap: Fix iomap_dio_rw return value for user copies (Andreas Gruenbacher)   
  - gfs2: Fix mmap + page fault deadlocks for buffered I/O (Andreas Gruenbacher)   
  - gfs2: Eliminate ip->i_gh (Andreas Gruenbacher)   
  - gfs2: Move the inode glock locking to gfs2_file_buffered_write (Andreas Gruenbacher)   
  - gfs2: Introduce flag for glock holder auto-demotion (Bob Peterson)   
  - gfs2: Clean up function may_grant (Andreas Gruenbacher)   
  - gfs2: Add wrapper for iomap_file_buffered_write (Andreas Gruenbacher)   
  - iov_iter: Introduce fault_in_iov_iter_writeable (Andreas Gruenbacher)   
  - iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable (Andreas Gruenbacher)   
  - gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} (Andreas Gruenbacher)   
  - mm: kfence: fix objcgs vector allocation (Muchun Song)   
  - ARM: dts: socfpga: change qspi to "intel,socfpga-qspi" (Dinh Nguyen)   
  - spi: cadence-quadspi: fix write completion support (Dinh Nguyen)   
  - floppy: disable FDRAWCMD by default (Willy Tarreau)   
  - LTS version: v5.15.36 (Jack Vogel)   
  - arm64: dts: qcom: add IPA qcom,qmp property (Alex Elder)   
  - block/compat_ioctl: fix range check in BLKGETSIZE (Khazhismel Kumykov)   
  - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller (Tudor Ambarus)   
  - jbd2: fix a potential race while discarding reserved buffers after an abort (Ye Bin)   
  - netfilter: nft_ct: fix use after free when attaching zone template (Florian Westphal)   
  - ext4: force overhead calculation if the s_overhead_cluster makes no sense (Theodore Ts'o)   
  - ext4: fix overhead calculation to account for the reserved gdt blocks (Theodore Ts'o)   
  - ext4, doc: fix incorrect h_reserved size (wangjianjian (C))   
  - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole (Tadeusz Struk)   
  - ext4: fix use-after-free in ext4_search_dir (Ye Bin)   
  - ext4: fix symlink file size not match to file content (Ye Bin)   
  - ext4: fix fallocate to use file_modified to update permissions consistently (Darrick J. Wong)   
  - netfilter: conntrack: avoid useless indirection during conntrack destruction (Florian Westphal)   
  - netfilter: conntrack: convert to refcount_t api (Florian Westphal)   
  - KVM: SVM: Flush when freeing encrypted pages even on SME_COHERENT CPUs (Mingwei Zhang)   
  - KVM: nVMX: Defer APICv updates while L2 is active until L1 is active (Sean Christopherson)   
  - KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race (Sean Christopherson)   
  - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu)   
  - arm_pmu: Validate single/group leader events (Rob Herring)   
  - ARC: entry: fix syscall_trace_exit argument (Sergey Matyukevich)   
  - e1000e: Fix possible overflow in LTR decoding (Sasha Neftin)   
  - ASoC: soc-dapm: fix two incorrect uses of list iterator (Xiaomeng Tong)   
  - gpio: Request interrupts after IRQ is initialized (Mario Limonciello)   
  - openvswitch: fix OOB access in reserve_sfa_size() (Paolo Valerio)   
  - xtensa: fix a7 clobbering in coprocessor context load/store (Max Filippov)   
  - xtensa: patch_text: Fixup last cpu should be master (Guo Ren)   
  - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event (Leo Yan)   
  - perf script: Always allow field 'data_src' for auxtrace (Leo Yan)   
  - powerpc/perf: Fix power10 event alternatives (Athira Rajeev)   
  - powerpc/perf: Fix power9 event alternatives (Athira Rajeev)   
  - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage (Miaoqian Lin)   
  - KVM: PPC: Fix TCE handling for VFIO (Alexey Kardashevskiy)   
  - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare (Dave Stevenson)   
  - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised (Dave Stevenson)   
  - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled (Zhipeng Xie)   
  - sched/pelt: Fix attach_entity_load_avg() corner case (kuyo chang)   
  - scsi: sr: Do not leak information in ioctl (Tom Rix)   
  - Input: omap4-keypad - fix pm_runtime_get_sync() error checking (Miaoqian Lin)   
  - net: atlantic: invert deep par in pm functions, preventing null derefs (Manuel Ullmann)   
  - dmaengine: imx-sdma: fix init of uart scripts (Kevin Groeneveld)   
  - dma: at_xdmac: fix a missing check on list iterator (Xiaomeng Tong)   
  - ata: pata_marvell: Check the 'bmdma_addr' beforing reading (Zheyu Ma)   
  - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (Alistair Popple)   
  - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup (Nico Pache)   
  - mm, hugetlb: allow for "high" userspace addresses (Christophe Leroy)   
  - memcg: sync flush only if periodic flush is delayed (Shakeel Butt)   
  - mm/memory-failure.c: skip huge_zero_page in memory_failure() (Xu Yu)   
  - EDAC/synopsys: Read the error count from the correct register (Shubhrajyoti Datta)   
  - nvme-pci: disable namespace identifiers for Qemu controllers (Christoph Hellwig)   
  - nvme-pci: disable namespace identifiers for the MAXIO MAP1002/1202 (Christoph Hellwig)   
  - nvme: add a quirk to disable namespace identifiers (Christoph Hellwig)   
  - VFS: filename_create(): fix incorrect intent. (NeilBrown)   
  - stat: fix inconsistency between struct stat and struct compat_stat (Mikulas Patocka)   
  - scsi: qedi: Fix failed disconnect handling (Mike Christie)   
  - scsi: iscsi: Fix NOP handling during conn recovery (Mike Christie)   
  - scsi: iscsi: Merge suspend fields (Mike Christie)   
  - scsi: iscsi: Release endpoint ID when its freed (Mike Christie)   
  - net: macb: Restart tx only if queue pointer is lagging (Tomas Melin)   
  - drm/msm/mdp5: check the return of kzalloc() (Xiaoke Wang)   
  - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() (Lv Ruyi)   
  - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)   
  - mt76: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)   
  - net: atlantic: Avoid out-of-bounds indexing (Kai-Heng Feng)   
  - cifs: Check the IOCB_DIRECT flag, not O_DIRECT (David Howells)   
  - vxlan: fix error return code in vxlan_fdb_append (Hongbin Wang)   
  - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes (Rob Herring)   
  - drm/msm/disp: check the return value of kzalloc() (Xiaoke Wang)   
  - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)   
  - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (Jiapeng Chong)   
  - reset: tegra-bpmp: Restore Handle errors in BPMP response (Sameer Pujar)   
  - reset: renesas: Check return value of reset_control_deassert() (Heiner Kallweit)   
  - ARM: vexpress/spc: Avoid negative array index when !SMP (Kees Cook)   
  - arm64: mm: fix p?d_leaf() (Muchun Song)   
  - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets (Ido Schimmel)   
  - dmaengine: idxd: skip clearing device context when device is read-only (Dave Jiang)   
  - dmaengine: idxd: add RO check for wq max_transfer_size write (Dave Jiang)   
  - dmaengine: idxd: add RO check for wq max_batch_size write (Dave Jiang)   
  - net: stmmac: Use readl_poll_timeout_atomic() in atomic state (Kevin Hao)   
  - drm/i915/display/psr: Unset enable_psr2_sel_fetch if other checks in intel_psr2_config_valid() fails (José Roberto de Souza)   
  - netlink: reset network and mac headers in netlink_dump() (Eric Dumazet)   
  - net: mscc: ocelot: fix broken IP multicast flooding (Vladimir Oltean)   
  - net: dsa: hellcreek: Calculate checksums in tagger (Kurt Kanzenbach)   
  - can: isotp: stop timeout monitoring when no first frame was sent (Oliver Hartkopp)   
  - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet)   
  - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu (David Ahern)   
  - net/sched: cls_u32: fix possible leak in u32_init_knode() (Eric Dumazet)   
  - net: restore alpha order to Ethernet devices in config (Stephen Hemminger)   
  - ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye)   
  - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() (Peilin Ye)   
  - net/packet: fix packet_sock xmit return value checking (Hangbin Liu)   
  - net/smc: Fix sock leak when release after smc_shutdown() (Tony Lu)   
  - rxrpc: Restore removed timer deletion (David Howells)   
  - ALSA: hda/hdmi: fix warning about PCM count when used with SOF (Kai Vehmanen)   
  - igc: Fix suspending when PTM is active (Vinicius Costa Gomes)   
  - igc: Fix BUG: scheduling while atomic (Sasha Neftin)   
  - igc: Fix infinite loop in release_swfw_sync (Sasha Neftin)   
  - spi: cadence-quadspi: fix incorrect supports_op() return value (Matthias Schiffer)   
  - esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca)   
  - spi: spi-mtk-nor: initialize spi controller after resume (Allen-KH Cheng)   
  - dmaengine: dw-edma: Fix unaligned 64bit access (Herve Codina)   
  - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources (zhangqilong)   
  - dmaengine: imx-sdma: Fix error checking in sdma_event_remap (Miaoqian Lin)   
  - dmaengine: idxd: fix device cleanup on disable (Dave Jiang)   
  - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use (Srinivas Kandagatla)   
  - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component (Miaoqian Lin)   
  - ASoC: rk817: Use devm_clk_get() in rk817_platform_probe (Miaoqian Lin)   
  - ASoC: topology: Correct error handling in soc_tplg_dapm_widget_create() (Peter Ujfalusi)   
  - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek (Mark Brown)   
  - ALSA: hda/realtek: Add quirk for Clevo NP70PNP (Tim Crawford)   
  - ALSA: usb-audio: Clear MIDI port active flag after draining (Takashi Iwai)   
  - net/sched: cls_u32: fix netns refcount changes in u32_change() (Eric Dumazet)   
  - scsi: ufs: core: scsi_get_lba() error fix (Peter Wang)   
  - gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson)   
  - mm, kfence: support kmem_dump_obj() for KFENCE objects (Marco Elver)   
  - perf tools: Fix segfault accessing sample_id xyarray (Adrian Hunter)   
  - mm: page_alloc: fix building error on -Werror=array-compare (Xiongwei Song)   
  - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead (Kees Cook)   
  - arm64/mm: drop HAVE_ARCH_PFN_VALID (Anshuman Khandual)   
  - dma-mapping: remove bogus test for pfn_valid from dma_map_resource (Mike Rapoport)   
  - xfs: return errors in xfs_fs_sync_fs (Darrick J. Wong)   
  - vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong)   
  - block: simplify the block device syncing code (Christoph Hellwig)   
  - block: remove __sync_blockdev (Christoph Hellwig)   
  - fs: remove __sync_filesystem (Christoph Hellwig)   
  - LTS version: v5.15.35 (Jack Vogel)   
  - ax25: Fix UAF bugs in ax25 timers (Duoming Zhou)   
  - ax25: Fix NULL pointer dereferences in ax25 timers (Duoming Zhou)   
  - ax25: fix NPD bug in ax25_disconnect (Duoming Zhou)   
  - ax25: fix UAF bug in ax25_send_control() (Duoming Zhou)   
  - ax25: Fix refcount leaks caused by ax25_cb_del() (Duoming Zhou)   
  - ax25: fix UAF bugs of net_device caused by rebinding operation (Duoming Zhou)   
  - ax25: fix reference count leaks of ax25_dev (Duoming Zhou)   
  - ax25: add refcount in ax25_dev to avoid UAF bugs (Duoming Zhou)   
  - cpufreq: intel_pstate: ITMT support for overclocked system (Srinivas Pandruvada)   
  - net: ipa: fix a build dependency (Alex Elder)   
  - soc: qcom: aoss: Fix missing put_device call in qmp_get (Miaoqian Lin)   
  - cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state (Steven Price)   
  - drm/i915: Sunset igpu legacy mmap support based on GRAPHICS_VER_FULL (Matt Roper)   
  - dma-direct: avoid redundant memory sync for swiotlb (Chao Gao)   
  - timers: Fix warning condition in __run_timers() (Anna-Maria Behnsen)   
  - dt-bindings: net: snps: remove duplicate name (Dongjin Yang)   
  - i2c: pasemi: Wait for write xfers to finish (Martin Povišer)   
  - smp: Fix offline cpu check in flush_smp_call_function_queue() (Nadav Amit)   
  - i2c: dev: check return value when calling dev_set_name() (Andy Shevchenko)   
  - dm integrity: fix memory corruption when tag_size is less than digest size (Mikulas Patocka)   
  - ARM: davinci: da850-evm: Avoid NULL pointer dereference (Nathan Chancellor)   
  - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation (Paul Gortmaker)   
  - genirq/affinity: Consider that CPUs on nodes can be unbalanced (Rei Yamamoto)   
  - x86/tsx: Disable TSX development mode at boot (Pawan Gupta)   
  - x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Pawan Gupta)   
  - drm/amdgpu: Enable gfxoff quirk on MacBook Pro (Tomasz Moń)   
  - drm/amd/display: don't ignore alpha property on pre-multiplied mode (Melissa Wen)   
  - ipv6: fix panic when forwarding a pkt with no in6 dev (Nicolas Dichtel)   
  - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size (Johannes Berg)   
  - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (Fabio M. De Francesco)   
  - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers (Tao Jin)   
  - ALSA: hda/realtek: Add quirk for Clevo PD50PNT (Tim Crawford)   
  - btrfs: mark resumed async balance as writing (Naohiro Aota)   
  - btrfs: fix root ref counts in error handling in btrfs_get_root_ref (Jia-Ju Bai)   
  - ath9k: Fix usage of driver-private space in tx_info (Toke Høiland-Jørgensen)   
  - ath9k: Properly clear TX status area before reporting to mac80211 (Toke Høiland-Jørgensen)   
  - cifs: verify that tcon is valid before dereference in cifs_kill_sb (Ronnie Sahlberg)   
  - gcc-plugins: latent_entropy: use /dev/urandom (Jason A. Donenfeld)   
  - memory: renesas-rpc-if: fix platform-device leak in error path (Johan Hovold)   
  - SUNRPC: Fix NFSD's request deferral on RDMA transports (Chuck Lever)   
  - KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded (Sean Christopherson)   
  - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Patrick Wang)   
  - mm: fix unexpected zeroed page mapping with zram swap (Minchan Kim)   
  - mm, page_alloc: fix build_zonerefs_node() (Juergen Gross)   
  - mm/secretmem: fix panic when growing a memfd_secret (Axel Rasmussen)   
  - perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)   
  - io_uring: use nospec annotation for more indexes (Pavel Begunkov)   
  - io_uring: zero tag on rsrc removal (Pavel Begunkov)   
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou)   
  - scsi: mvsas: Add PCI ID of RocketRaid 2640 (Alexey Galakhov)   
  - scsi: mpt3sas: Fail reset operation if config request timed out (Sreekanth Reddy)   
  - drbd: set QUEUE_FLAG_STABLE_WRITES (Christoph Böhmwalder)   
  - drm/amd/display: Fix allocate_mst_payload assert on resume (Roman Li)   
  - drm/amd/display: Revert FEC check in validation (Martin Leung)   
  - drm/amd/display: Enable power gating before init_pipes (Roman Li)   
  - spi: cadence-quadspi: fix protocol setup for non-1-1-X operations (Matthias Schiffer)   
  - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso (Xiaomeng Tong)   
  - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (Marcin Kozlowski)   
  - Drivers: hv: balloon: Disable balloon and hot-add accordingly (Boqun Feng)   
  - net: axienet: setup mdio unconditionally (Andy Chiu)   
  - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry (Steve Capper)   
  - arm64: alternatives: mark patch_alternative() as `noinstr` (Joey Gouly)   
  - regulator: wm8994: Add an off-on delay for WM8994 variant (Jonathan Bakker)   
  - gpu: ipu-v3: Fix dev_dbg frequency output (Leo Ruan)   
  - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs (Christian Lamparter)   
  - net: micrel: fix KS8851_MLL Kconfig (Randy Dunlap)   
  - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (Tyrel Datwyler)   
  - scsi: lpfc: Fix queue failures when recovering from PCI parity error (James Smart)   
  - scsi: target: tcmu: Fix possible page UAF (Xiaoguang Wang)   
  - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (Michael Kelley)   
  - PCI: hv: Propagate coherence from VMbus device to PCI device (Michael Kelley)   
  - Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests (Andrea Parri (Microsoft))   
  - drm/amdkfd: Check for potential null return of kmalloc_array() (QintaoShen)   
  - drm/amdgpu/vcn: improve vcn dpg stop procedure (Tianci Yin)   
  - drm/amdkfd: Fix Incorrect VMIDs passed to HWS (Tushar Patel)   
  - drm/amd/display: Update VTEM Infopacket definition (Leo (Hanghong) Ma)   
  - drm/amd/display: FEC check in timing validation (Chiawen Huang)   
  - drm/amd/display: fix audio format not updated after edid updated (Charlene Liu)   
  - drm/amdgpu/gmc: use PCI BARs for APUs in passthrough (Alex Deucher)   
  - drm/amdgpu: conduct a proper cleanup of PDB bo (Guchun Chen)   
  - btrfs: do not warn for free space inode in cow_file_range (Josef Bacik)   
  - btrfs: fix fallocate to use file_modified to update permissions consistently (Darrick J. Wong)   
  - drm/amd: Add USBC connector ID (Aurabindo Pillai)   
  - block: fix offset/size check in bio_trim() (Ming Lei)   
  - net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" (Jeremy Linton)   
  - vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used (Jason Gunthorpe)   
  - dm mpath: only use ktime_get_ns() in historical selector (Khazhismel Kumykov)   
  - cifs: potential buffer overflow in handling symlinks (Harshit Mogalapalli)   
  - nfc: nci: add flush_workqueue to prevent uaf (Lin Ma)   
  - net: ftgmac100: access hardware register after clock ready (Dylan Hung)   
  - macvlan: Fix leaking skb in source mode with nodst option (Martin Willi)   
  - perf tools: Fix misleading add event PMU debug message (Adrian Hunter)   
  - ALSA: usb-audio: Limit max buffer and period sizes per time (Takashi Iwai)   
  - ALSA: usb-audio: Increase max buffer size (Takashi Iwai)   
  - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set (Athira Rajeev)   
  - io_uring: verify pad field is 0 in io_get_ext_arg (Dylan Yudaken)   
  - io_uring: verify that resv2 is 0 in io_uring_rsrc_update2 (Dylan Yudaken)   
  - io_uring: move io_uring_rsrc_update2 validation (Dylan Yudaken)   
  - ALSA: mtpav: Don't call card private_free at probe error path (Takashi Iwai)   
  - ALSA: ad1889: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - netfilter: nf_tables: nft_parse_register can return a negative value (Antoine Tenart)   
  - sctp: Initialize daddr on peeled off socket (Petr Malat)   
  - scsi: iscsi: Fix unbound endpoint error handling (Mike Christie)   
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Mike Christie)   
  - scsi: iscsi: Fix endpoint reuse regression (Mike Christie)   
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Mike Christie)   
  - scsi: iscsi: Move iscsi_ep_disconnect() (Mike Christie)   
  - scsi: pm80xx: Enable upper inbound, outbound queues (Ajish Koshy)   
  - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 (Ajish Koshy)   
  - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (Karsten Graul)   
  - drm/msm/dp: add fail safe mode outside of event_mutex context (Kuogee Hsieh)   
  - drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() (Stephen Boyd)   
  - drm/msm: Fix range size vs end confusion (Rob Clark)   
  - netfilter: nft_socket: make cgroup match work in input too (Florian Westphal)   
  - cfg80211: hold bss_lock while updating nontrans_list (Rameshkumar Sundaram)   
  - net/sched: taprio: Check if socket flags are valid (Benedikt Spranger)   
  - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen)   
  - net: dsa: felix: suppress -EPROBE_DEFER errors (Michael Walle)   
  - net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner)   
  - mlxsw: i2c: Fix initialization error flow (Vadim Pasternak)   
  - net: mdio: don't defer probe forever if PHY IRQ provider is missing (Vladimir Oltean)   
  - cifs: release cached dentries only if mount is complete (Shyam Prasad N)   
  - gpiolib: acpi: use correct format characters (Linus Torvalds)   
  - veth: Ensure eth header is in skb's linear part (Guillaume Nault)   
  - net/sched: flower: fix parsing of ethertype following VLAN header (Vlad Buslov)   
  - SUNRPC: Fix the svc_deferred_event trace class (Chuck Lever)   
  - media: rockchip/rga: do proper error checking in probe (Kyle Copperfield)   
  - firmware: arm_scmi: Fix sorting of retrieved clock rates (Cristian Marussi)   
  - Revert "ath11k: mesh: add support for 256 bitmap in blockack frames in 11ax" (Anilkumar Kolli)   
  - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe (Miaoqian Lin)   
  - firmware: arm_scmi: Remove clear channel call on the TX channel (Cristian Marussi)   
  - drm/msm: Add missing put_task_struct() in debugfs path (Rob Clark)   
  - ALSA: nm256: Don't call card private_free at probe error path (Takashi Iwai)   
  - ALSA: usb-audio: Cap upper limits of buffer/period bytes for implicit fb (Takashi Iwai)   
  - ALSA: via82xx: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: sonicvibes: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: sc6000: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: rme96: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: rme9652: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: rme32: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: riptide: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: oxygen: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: maestro3: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: lx6464es: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: lola: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: korg1212: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: intel_hdmi: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: intel8x0: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: ice1724: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: hdspm: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: hdsp: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: galaxy: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: fm801: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: es1968: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: es1938: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: ens137x: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: emu10k1x: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: echoaudio: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: cs5535audio: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: cs4281: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: cmipci: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: ca0106: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: bt87x: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: azt3328: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: aw2: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: au88x0: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: atiixp: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: als4000: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: als300: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: ali5451: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - ALSA: sis7019: Fix the missing error handling (Takashi Iwai)   
  - ALSA: core: Add snd_card_free_on_error() helper (Takashi Iwai)   
  - btrfs: release correct delalloc amount in direct IO write path (Naohiro Aota)   
  - net: ipa: request IPA register values be retained (Alex Elder)   
  - dt-bindings: net: qcom,ipa: add optional qcom,qmp property (Alex Elder)   
  - soc: qcom: aoss: Expose send for generic usecase (Deepak Kumar Singh)   
  - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() (Nathan Chancellor)   
  - btrfs: remove no longer used counter when reading data page (Filipe Manana)   
  - btrfs: remove unused parameter nr_pages in add_ra_bio_pages() (Qu Wenruo)   
  - ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40 (Woody Suwalski)   
  - ACPI: processor idle: Allow playing dead in C3 state (Richard Gong)   
  - ACPI: processor idle: Check for architectural support for LPI (Mario Limonciello)   
  - cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function (Mario Limonciello)   
  - hamradio: remove needs_free_netdev to avoid UAF (Lin Ma)   
  - hamradio: defer 6pack kfree after unregister_netdev (Lin Ma)   
  - drm/amd/display: Fix p-state allow debug index on dcn31 (Nicholas Kazlauskas)   
  - drm/amd/display: Add pstate verification and recovery for DCN31 (Nicholas Kazlauskas)   
  - LTS version: v5.15.34 (Jack Vogel)   
  - stacktrace: move filter_irq_stacks() to kernel/stacktrace.c (Marco Elver)   
  - powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit (Kefeng Wang)   
  - static_call: Don't make __static_call_return0 static (Christophe Leroy)   
  - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (Waiman Long)   
  - irqchip/gic, gic-v3: Prevent GSI to SGI translations (Andre Przywara)   
  - powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S (Christophe Leroy)   
  - irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling (Marc Zyngier)   
  - sched: Teach the forced-newidle balancer about CPU affinity limitation. (Sebastian Andrzej Siewior)   
  - x86/bug: Prevent shadowing in __WARN_FLAGS (Vincent Mailhol)   
  - Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() (Andrea Parri (Microsoft))   
  - mm: don't skip swap entry even if zap_details specified (Peter Xu)   
  - selftests: cgroup: Test open-time cgroup namespace usage for migration checks (Tejun Heo)   
  - selftests: cgroup: Test open-time credential usage for migration checks (Tejun Heo)   
  - selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 (Tejun Heo)   
  - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE (Kees Cook)   
  - Revert "net/mlx5: Accept devlink user input after driver initialization complete" (dann frazier)   
  - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" (Vinod Koul)   
  - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts (Arnaldo Carvalho de Melo)   
  - tools build: Filter out options and warnings not supported by clang (Arnaldo Carvalho de Melo)   
  - perf python: Fix probing for some clang command line options (Arnaldo Carvalho de Melo)   
  - perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 (Arnaldo Carvalho de Melo)   
  - Revert "nbd: fix possible overflow on 'first_minor' in nbd_dev_add()" (Jens Axboe)   
  - SUNRPC: Don't call connect() more than once on a TCP socket (Trond Myklebust)   
  - rtc: mc146818-lib: fix signedness bug in mc146818_get_time() (Dan Carpenter)   
  - selftests/bpf: Fix u8 narrow load checks for bpf_sk_lookup remote_port (Jakub Sitnicki)   
  - bpf: Make remote_port field in struct bpf_sk_lookup 16-bit wide (Jakub Sitnicki)   
  - Revert "selftests: net: Add tls config dependency for tls selftests" (Jakub Kicinski)   
  - net/smc: send directly on setting TCP_NODELAY (Dust Li)   
  - KVM: SVM: Allow AVIC support on system w/ physical APIC ID > 255 (Suravee Suthikulpanit)   
  - drm/amdgpu: don't use BACO for reset in S3 (Alex Deucher)   
  - drm/amdkfd: Create file descriptor after client is added to smi_clients list (Lee Jones)   
  - drm/nouveau/pmu: Add missing callbacks for Tegra devices (Karol Herbst)   
  - drm/amdgpu/vcn: Fix the register setting for vcn1 (Emily Deng)   
  - drm/amdgpu/smu10: fix SoC/fclk units in auto mode (Alex Deucher)   
  - drm/amdgpu/display: change pipe policy for DCN 2.1 (Benjamin Marty)   
  - drm/panel: ili9341: fix optional regulator handling (Daniel Mack)   
  - SUNRPC: Prevent immediate close+reconnect (Trond Myklebust)   
  - amd/display: set backlight only if required (Shirish S)   
  - fbdev: Fix unregistering of framebuffers without device (Thomas Zimmermann)   
  - irqchip/gic-v3: Fix GICR_CTLR.RWP polling (Marc Zyngier)   
  - perf/core: Inherit event_caps (Namhyung Kim)   
  - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - ata: sata_dwc_460ex: Fix crash due to OOB write (Christian Lamparter)   
  - perf/x86/intel: Don't extend the pseudo-encoding to GP counters (Kan Liang)   
  - x86/mm/tlb: Revert retpoline avoidance approach (Dave Hansen)   
  - x86/msi: Fix msi message data shadow struct (Reto Buerki)   
  - gpio: Restrict usage of GPIO chip irq members before initialization (Shreeya Patel)   
  - RDMA/hfi1: Fix use-after-free bug for mm struct (Douglas Miller)   
  - arm64: patch_text: Fixup last cpu should be master (Guo Ren)   
  - spi: core: add dma_map_dev for __spi_unmap_msg() (Vinod Koul)   
  - btrfs: prevent subvol with swapfile from being deleted (Kaiwen Hu)   
  - btrfs: fix qgroup reserve overflow the qgroup limit (Ethan Lien)   
  - perf/x86/intel: Update the FRONTEND MSR mask on Sapphire Rapids (Kan Liang)   
  - x86/pm: Save the MSR validity status at context setup (Pawan Gupta)   
  - io_uring: implement compat handling for IORING_REGISTER_IOWQ_AFF (Eugene Syromiatnikov)   
  - io_uring: defer splice/tee file validity check until command issue (Jens Axboe)   
  - io_uring: don't check req->file in io_fsync_prep() (Jens Axboe)   
  - mm/mempolicy: fix mpol_new leak in shared_policy_replace (Miaohe Lin)   
  - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (Paolo Bonzini)   
  - highmem: fix checks in __kmap_local_sched_{in,out} (Max Filippov)   
  - lz4: fix LZ4_decompress_safe_partial read out of bound (Guo Xuenan)   
  - mmc: core: Fixup support for writeback-cache for eMMC and SD (Michael Wu)   
  - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete (Wolfram Sang)   
  - mmc: mmci: stm32: correctly check all elements of sg list (Yann Gautier)   
  - mmc: block: Check for errors after write on SPI (Christian Löhle)   
  - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" (Pali Rohár)   
  - scsi: ufs: ufs-pci: Add support for Intel MTL (Adrian Hunter)   
  - scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove() (Damien Le Moal)   
  - arm64: Add part number for Arm Cortex-A78AE (Chanho Park)   
  - perf session: Remap buf if there is no space for event (Denis Nikitin)   
  - perf tools: Fix perf's libperf_print callback (Adrian Hunter)   
  - perf: arm-spe: Fix perf report --mem-mode (James Clark)   
  - iommu/omap: Fix regression in probe for NULL pointer dereference (Tony Lindgren)   
  - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() (Trond Myklebust)   
  - SUNRPC: Handle low memory situations in call_status() (Trond Myklebust)   
  - SUNRPC: Handle ENOMEM in call_transmit_status() (Trond Myklebust)   
  - io_uring: don't touch scm_fp_list after queueing skb (Pavel Begunkov)   
  - io_uring: nospec index for tags on files update (Pavel Begunkov)   
  - scsi: ufs: ufshpb: Fix a NULL check on list iterator (Xiaomeng Tong)   
  - drbd: Fix five use after free bugs in get_initial_state (Lv Yunlong)   
  - bpf: Support dual-stack sockets in bpf_tcp_check_syncookie (Maxim Mikityanskiy)   
  - spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() (Kamal Dasu)   
  - qede: confirm skb is allocated before using (Jamie Bainbridge)   
  - net: phy: mscc-miim: reject clause 45 register accesses (Michael Walle)   
  - net: sfc: fix using uninitialized xdp tx_queue (Taehee Yoo)   
  - rxrpc: fix a race in rxrpc_exit_net() (Eric Dumazet)   
  - net: openvswitch: fix leak of nested actions (Ilya Maximets)   
  - net: ethernet: mv643xx: Fix over zealous checking of_get_mac_address() (Andrew Lunn)   
  - net: openvswitch: don't send internal clone attribute to the userspace. (Ilya Maximets)   
  - ice: xsk: fix VSI state check in ice_xsk_wakeup() (Maciej Fijalkowski)   
  - ice: synchronize_rcu() when terminating rings (Maciej Fijalkowski)   
  - ipv6: Fix stats accounting in ip6_pkt_drop (David Ahern)   
  - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Anatolii Gerasymenko)   
  - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Anatolii Gerasymenko)   
  - dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe (Miaoqian Lin)   
  - sctp: count singleton chunks in assoc user stats (Jamie Bainbridge)   
  - IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (Niels Dossche)   
  - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang)   
  - RDMA/mlx5: Add a missing update of cache->last_add (Aharon Landau)   
  - RDMA/mlx5: Don't remove cache MRs when a delay is needed (Aharon Landau)   
  - sfc: Do not free an empty page_ring (Martin Habets)   
  - bnxt_en: Prevent XDP redirect from running when stopping TX queue (Ray Jui)   
  - bnxt_en: reserve space inside receive page for skb_shared_info (Andy Gospodarek)   
  - bnxt_en: Synchronize tx when xdp redirects happen on same ring (Pavan Chebbi)   
  - arch/arm64: Fix topology initialization for core scheduling (Phil Auld)   
  - regulator: atc260x: Fix missing active_discharge_on setting (Axel Lin)   
  - regulator: rtq2134: Fix missing active_discharge_on setting (Axel Lin)   
  - drm/imx: dw_hdmi-imx: Fix bailout in error cases of probe (Liu Ying)   
  - drm/imx: Fix memory leak in imx_pd_connector_get_modes (José Expósito)   
  - drm/imx: imx-ldb: Check for null pointer after calling kmemdup (Jiasheng Jiang)   
  - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (Chen-Yu Tsai)   
  - net: ipv4: fix route with nexthop object delete warning (Nikolay Aleksandrov)   
  - mctp: Fix check for dev_hard_header() result (Matt Johnston)   
  - ice: Clear default forwarding VSI during VSI release (Ivan Vecera)   
  - skbuff: fix coalescing for page_pool fragment recycling (Jean-Philippe Brucker)   
  - vrf: fix packet sniffing for traffic originating from ip tunnels (Eyal Birger)   
  - net/tls: fix slab-out-of-bounds bug in decrypt_internal (Ziyang Xuan)   
  - net: sfc: add missing xdp queue reinitialization (Taehee Yoo)   
  - vdpa: mlx5: prevent cvq work from hogging CPU (Jason Wang)   
  - vdpa/mlx5: Propagate link status from device to vdpa driver (Eli Cohen)   
  - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (Christophe JAILLET)   
  - scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (John Garry)   
  - scsi: sr: Fix typo in CDROM(CLOSETRAY|EJECT) handling (Kevin Groeneveld)   
  - NFSv4: fix open failure with O_ACCMODE flag (ChenXiaoSong)   
  - Revert "NFSv4: Handle the special Linux file open access mode" (ChenXiaoSong)   
  - Drivers: hv: vmbus: Fix potential crash on module unload (Guilherme G. Piccoli)   
  - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (Dan Carpenter)   
  - rtc: mc146818-lib: fix RTC presence check (Mateusz Jończyk)   
  - rtc: Check return value from mc146818_get_time() (Mateusz Jończyk)   
  - rtc: mc146818-lib: change return values of mc146818_get_time() (Mateusz Jończyk)   
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira)   
  - parisc: Fix patch code locking and flushing (John David Anglin)   
  - parisc: Fix CPU affinity for Lasi, WAX and Dino chips (Helge Deller)   
  - selftests: net: Add tls config dependency for tls selftests (Naresh Kamboju)   
  - NFS: Avoid writeback threads getting stuck in mempool_alloc() (Trond Myklebust)   
  - NFS: nfsiod should not block forever in mempool_alloc() (Trond Myklebust)   
  - SUNRPC: Fix socket waits for write buffer space (Trond Myklebust)   
  - jfs: prevent NULL deref in diFree (Haimin Zhang)   
  - virtio_console: eliminate anonymous module_init & module_exit (Randy Dunlap)   
  - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() (Jiri Slaby)   
  - x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy (Nathan Chancellor)   
  - x86: Annotate call_on_stack() (Peter Zijlstra)   
  - NFS: swap-out must always use STABLE writes. (NeilBrown)   
  - NFS: swap IO handling is slightly different for O_DIRECT IO (NeilBrown)   
  - SUNRPC: remove scheduling boost for "SWAPPER" tasks. (NeilBrown)   
  - SUNRPC/xprt: async tasks mustn't block waiting for memory (NeilBrown)   
  - SUNRPC/call_alloc: async tasks mustn't block waiting for memory (NeilBrown)   
  - clk: Enforce that disjoints limits are invalid (Maxime Ripard)   
  - clk: ti: Preserve node in ti_dt_clocks_register() (Tony Lindgren)   
  - habanalabs: fix possible memory leak in MMU DR fini (Ohad Sharabi)   
  - NFSv4: Protect the state recovery thread against direct reclaim (Trond Myklebust)   
  - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (Xin Xiong)   
  - w1: w1_therm: fixes w1_seq for ds28ea00 sensors (Lucas Denefle)   
  - staging: wfx: fix an error handling in wfx_init_common() (Xiaoke Wang)   
  - opp: Expose of-node's name in debugfs (Viresh Kumar)   
  - cpufreq: CPPC: Fix performance/frequency conversion (Pierre Gondois)   
  - clk: rockchip: drop CLK_SET_RATE_PARENT from dclk_vop* on rk3568 (Sascha Hauer)   
  - phy: amlogic: meson8b-usb2: fix shared reset control use (Amjad Ouled-Ameur)   
  - phy: amlogic: meson8b-usb2: Use dev_err_probe() (Amjad Ouled-Ameur)   
  - phy: amlogic: phy-meson-gxl-usb2: fix shared reset controller use (Amjad Ouled-Ameur)   
  - staging: vchiq_core: handle NULL result of find_service_by_handle (Stefan Wahren)   
  - staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances (Stefan Wahren)   
  - clk: si5341: fix reported clk_rate when output divider is 2 (Adam Wujek)   
  - minix: fix bug when opening a file with O_DIRECT (Qinghua Jin)   
  - init/main.c: return 1 from handled __setup() functions (Randy Dunlap)   
  - lib/Kconfig.debug: add ARCH dependency for FUNCTION_ALIGN option (Feng Tang)   
  - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (Xiubo Li)   
  - ceph: fix inode reference leakage in ceph_get_snapdir() (Xiubo Li)   
  - netlabel: fix out-of-bounds memory accesses (Wang Yufen)   
  - netfilter: conntrack: revisit gc autotuning (Florian Westphal)   
  - Bluetooth: Fix use after free in hci_send_acl (Luiz Augusto von Dentz)   
  - MIPS: ingenic: correct unit node address (Krzysztof Kozlowski)   
  - xtensa: fix DTC warning unit_address_format (Max Filippov)   
  - mt76: fix monitor mode crash with sdio driver (Deren Wu)   
  - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm (H. Nikolaus Schaller)   
  - net: sfp: add 2500base-X quirk for Lantech SFP module (Michael Walle)   
  - net/mlx5e: Remove overzealous validations in netlink EEPROM query (Gal Pressman)   
  - net: limit altnames to 64k total (Jakub Kicinski)   
  - net: account alternate interface name memory (Jakub Kicinski)   
  - riscv: Fixed misaligned memory access. Fixed pointer comparison. (Michael T. Kloos)   
  - can: etas_es58x: es58x_fd_rx_event_msg(): initialize rx_event_msg before calling es58x_check_msg_len() (Vincent Mailhol)   
  - can: isotp: set default value for N_As to 50 micro seconds (Oliver Hartkopp)   
  - scsi: libfc: Fix use after free in fc_exch_abts_resp() (Jianglei Nie)   
  - powerpc/secvar: fix refcount leak in format_show() (Hangyu Hua)   
  - powerpc/64e: Tie PPC_BOOK3E_64 to PPC_FSL_BOOK3E (Michael Ellerman)   
  - MIPS: fix fortify panic when copying asm exception handlers (Alexander Lobakin)   
  - PCI: endpoint: Fix misused goto label (Li Chen)   
  - bnxt_en: Eliminate unintended link toggle during FW reset (Michael Chan)   
  - Bluetooth: use memset avoid memory leaks (Minghao Chi (CGEL ZTE))   
  - Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} (Luiz Augusto von Dentz)   
  - tuntap: add sanity checks about msg_controllen in sendmsg (Harold Huang)   
  - macvtap: advertise link netns via netlink (Sven Eckelmann)   
  - mips: ralink: fix a refcount leak in ill_acc_of_setup() (Hangyu Hua)   
  - net/smc: correct settings of RMB window update limit (Dust Li)   
  - scsi: hisi_sas: Limit users changing debugfs BIST count value (Xiang Chen)   
  - scsi: hisi_sas: Free irq vectors in order for v3 HW (Qi Liu)   
  - scsi: aha152x: Fix aha152x_setup() __setup handler return value (Randy Dunlap)   
  - mt76: mt7615: Fix assigning negative values to unsigned variable (Yang Li)   
  - powerpc/64s/hash: Make hash faults work in NMI context (Nicholas Piggin)   
  - mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU (Johan Almbladh)   
  - scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() (Damien Le Moal)   
  - scsi: pm8001: Fix tag leaks on error (Damien Le Moal)   
  - scsi: pm8001: Fix task leak in pm8001_send_abort_all() (Damien Le Moal)   
  - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() (Damien Le Moal)   
  - scsi: pm8001: Fix pm80xx_pci_mem_copy() interface (Damien Le Moal)   
  - vfio/pci: Stub vfio_pci_vga_rw when !CONFIG_VFIO_PCI_VGA (Alex Williamson)   
  - drm/amdkfd: make CRAT table missing message informational only (Alex Deucher)   
  - dm: requeue IO if mapping table not yet available (Mike Snitzer)   
  - dm ioctl: prevent potential spectre v1 gadget (Jordy Zomer)   
  - ipv4: Invalidate neighbour for broadcast address upon address addition (Ido Schimmel)   
  - drm/msm/dsi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson)   
  - iwlwifi: mvm: move only to an enabled channel (Miri Korenblit)   
  - iwlwifi: mvm: Correctly set fragmented EBS (Ilan Peer)   
  - usb: dwc3: pci: Set the swnode from inside dwc3_pci_quirks() (Hans de Goede)   
  - net/mlx5e: Disable TX queues before registering the netdev (Maxim Mikityanskiy)   
  - power: supply: axp288-charger: Set Vhold to 4.4V (Hans de Goede)   
  - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (Christophe Leroy)   
  - scsi: mpi3mr: Fix memory leaks (Sreekanth Reddy)   
  - scsi: mpi3mr: Fix reporting of actual data transfer size (Sreekanth Reddy)   
  - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum (Manivannan Sadhasivam)   
  - tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. (Sebastian Andrzej Siewior)   
  - PCI: endpoint: Fix alignment fault error in copy tests (Hou Zhiqiang)   
  - usb: ehci: add pci device support for Aspeed platforms (Neal Liu)   
  - iommu/arm-smmu-v3: fix event handling soft lockup (Zhou Guanghui)   
  - PCI: aardvark: Fix support for MSI interrupts (Pali Rohár)   
  - scsi: smartpqi: Fix kdump issue when controller is locked up (Mahesh Rajashekhara)   
  - drm/amdgpu: Fix recursive locking warning (Rajneesh Bhardwaj)   
  - powerpc: Set crashkernel offset to mid of RMA region (Sourabh Jain)   
  - net: initialize init_net earlier (Eric Dumazet)   
  - ipv6: make mc_forwarding atomic (Eric Dumazet)   
  - libbpf: Fix build issue with llvm-readelf (Yonghong Song)   
  - cfg80211: don't add non transmitted BSS to 6GHz scanned channels (Avraham Stern)   
  - mt76: dma: initialize skip_unmap in mt76_dma_rx_fill (Lorenzo Bianconi)   
  - mt76: mt7921: fix crash when startup fails. (Ben Greear)   
  - power: supply: axp20x_battery: properly report current when discharging (Evgeny Boger)   
  - drm/v3d: fix missing unlock (Yongzhi Liu)   
  - scsi: bfa: Replace snprintf() with sysfs_emit() (Yang Guang)   
  - scsi: mvsas: Replace snprintf() with sysfs_emit() (Yang Guang)   
  - bpf: Make dst_port field in struct bpf_sock 16-bit wide (Jakub Sitnicki)   
  - drm/bridge: Add missing pm_runtime_put_sync (Yongzhi Liu)   
  - net/smc: Send directly when TCP_CORK is cleared (Tony Lu)   
  - ath11k: mhi: use mhi_sync_power_up() (Kalle Valo)   
  - ath11k: pci: fix crash on suspend if board file is not found (Kalle Valo)   
  - ath11k: fix kernel panic during unload/load ath11k modules (Venkateswara Naralasetty)   
  - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 (Maxim Kiselev)   
  - drm/amdkfd: Don't take process mutex for svm ioctls (Philip Yang)   
  - ptp: replace snprintf with sysfs_emit (Yang Guang)   
  - usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value (Pawel Laszczak)   
  - usb: gadget: tegra-xudc: Fix control endpoint's definitions (Wayne Chang)   
  - usb: gadget: tegra-xudc: Do not program SPARAM (Wayne Chang)   
  - drm/amd/display: Use PSR version selected during set_psr_caps (Nicholas Kazlauskas)   
  - drm/amd/display: Fix memory leak (Yongzhi Liu)   
  - drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (Xin Xiong)   
  - drm/amd/display: Add signal type check when verify stream backends same (Dale Zhao)   
  - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (Zekun Shen)   
  - drm: Add orientation quirk for GPD Win Max (Anisse Astier)   
  - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (Hou Wenlong)   
  - KVM: x86/pmu: Fix and isolate TSX-specific performance event logic (Like Xu)   
  - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs (Jim Mattson)   
  - KVM: SVM: Fix kvm_cache_regs.h inclusions for is_guest_mode() (Peter Gonda)   
  - KVM: x86/pmu: Use different raw event masks for AMD and Intel (Jim Mattson)   
  - kfence: limit currently covered allocations when pool nearly full (Marco Elver)   
  - kfence: move saving stack trace of allocations into __kfence_alloc() (Marco Elver)   
  - kfence: count unexpectedly skipped allocations (Marco Elver)   
  - nbd: fix possible overflow on 'first_minor' in nbd_dev_add() (Zhang Wensheng)   
  - nbd: Fix hungtask when nbd_config_put (Ye Bin)   
  - nbd: Fix incorrect error handle when first_minor is illegal in nbd_dev_add (Ye Bin)   
  - nbd: add error handling support for add_disk() (Luis Chamberlain)   
  - rtc: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang)   
  - um: fix and optimize xor select template for CONFIG64 and timetravel mode (Benjamin Beichler)   
  - lib/logic_iomem: correct fallback config references (Johannes Berg)   
  - LTS version: v5.15.33 (Jack Vogel)   
  - PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" (Marc Zyngier)   
  - coredump: Use the vma snapshot in fill_files_note (Eric W. Biederman)   
  - coredump/elf: Pass coredump_params into fill_note_info (Eric W. Biederman)   
  - coredump: Remove the WARN_ON in dump_vma_snapshot (Eric W. Biederman)   
  - coredump: Snapshot the vmas in do_coredump (Eric W. Biederman)   
  - iommu/dma: Account for min_align_mask w/swiotlb (David Stevens)   
  - swiotlb: Support aligned swiotlb buffers (David Stevens)   
  - iommu/dma: Check CONFIG_SWIOTLB more broadly (David Stevens)   
  - iommu/dma: Fold _swiotlb helpers into callers (David Stevens)   
  - iommu/dma: Skip extra sync during unmap w/swiotlb (David Stevens)   
  - mmc: rtsx: Fix build errors/warnings for unused variable (Ulf Hansson)   
  - mmc: rtsx: Let MMC core handle runtime PM (Kai-Heng Feng)   
  - n64cart: convert bi_disk to bi_bdev->bd_disk fix build (Jackie Liu)   
  - torture: Make torture.sh help message match reality (Paul E. McKenney)   
  - openvswitch: Fixed nd target mask field in the flow dump. (Martin Varghese)   
  - docs: sysctl/kernel: add missing bit to panic_print (Guilherme G. Piccoli)   
  - um: Fix uml_mconsole stop/go (Anton Ivanov)   
  - arm64: dts: ls1046a: Update i2c node dma properties (Kuldeep Singh)   
  - arm64: dts: ls1043a: Update i2c dma properties (Kuldeep Singh)   
  - ARM: dts: spear13xx: Update SPI dma properties (Kuldeep Singh)   
  - ARM: dts: spear1340: Update serial node properties (Kuldeep Singh)   
  - spi: mediatek: support tick_delay without enhance_timing (Leilk Liu)   
  - media: ov6650: Fix crop rectangle affected by set format (Janusz Krzysztofik)   
  - media: ov6650: Add try support to selection API operations (Janusz Krzysztofik)   
  - perf vendor events: Update metrics for SkyLake Server (Ian Rogers)   
  - ASoC: topology: Allow TLV control to be either read or write (Amadeusz Sławiński)   
  - ASoC: SOF: Intel: Fix build error without SND_SOC_SOF_PCI_DEV (Zheng Bin)   
  - ubi: fastmap: Return error code if memory allocation fails in add_aeb() (Zhihao Cheng)   
  - dt-bindings: pinctrl: pinctrl-microchip-sgpio: Fix example (Horatiu Vultur)   
  - dt-bindings: memory: mtk-smi: No need mediatek,larb-id for mt8167 (Yong Wu)   
  - dt-bindings: spi: mxic: The interrupt property is not mandatory (Miquel Raynal)   
  - dt-bindings: mtd: nand-controller: Fix a comment in the examples (Miquel Raynal)   
  - dt-bindings: mtd: nand-controller: Fix the reg property description (Miquel Raynal)   
  - mmc: rtsx: Use pm_runtime_{get,put}() to handle runtime PM (Kai-Heng Feng)   
  - bpf: Fix comment for helper bpf_current_task_under_cgroup() (Hengqi Chen)   
  - bpf: Adjust BPF stack helper functions to accommodate skip > 0 (Namhyung Kim)   
  - af_unix: Support POLLPRI for OOB. (Kuniyuki Iwashima)   
  - mm/usercopy: return 1 from hardened_usercopy __setup() handler (Randy Dunlap)   
  - mm/memcontrol: return 1 from cgroup.memory __setup() handler (Randy Dunlap)   
  - ARM: 9187/1: JIVE: fix return value of __setup handler (Randy Dunlap)   
  - mm/mmap: return 1 from stack_guard_gap __setup() handler (Randy Dunlap)   
  - net: preserve skb_end_offset() in skb_unclone_keeptruesize() (Eric Dumazet)   
  - net: add skb_set_end_offset() helper (Eric Dumazet)   
  - tracing: Have type enum modifications copy the strings (Steven Rostedt (Google))   
  - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds)   
  - ASoC: soc-compress: Change the check for codec_dai (Jiasheng Jiang)   
  - arm64: mm: Drop 'const' from conditional arm64_dma_phys_limit definition (Will Deacon)   
  - staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet (Arınç ÜNAL)   
  - scsi: qla2xxx: Add qla2x00_async_done() for async routines (Saurav Kashyap)   
  - drm/connector: Fix typo in documentation (Maxime Ripard)   
  - proc: bootconfig: Add null pointer check (Lv Ruyi)   
  - can: isotp: restore accidentally removed MSG_PEEK feature (Oliver Hartkopp)   
  - platform/chrome: cros_ec_typec: Check for EC device (Prashant Malani)   
  - spi: Fix Tegra QSPI example (Jon Hunter)   
  - vhost: handle error while adding split ranges to iotlb (Anirudh Rayabharam)   
  - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (Rafael J. Wysocki)   
  - riscv module: remove (NOLOAD) (Fangrui Song)   
  - io_uring: fix memory leak of uid in files registration (Pavel Begunkov)   
  - block: Fix the maximum minor value is blk_alloc_ext_minor() (Christophe JAILLET)   
  - ARM: iop32x: offset IRQ numbers by 1 (Arnd Bergmann)   
  - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (Baokun Li)   
  - ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs (Jiaxin Yu)   
  - pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() (Jonathan Neuschäfer)   
  - pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() (Jonathan Neuschäfer)   
  - net: sparx5: uses, depends on BRIDGE or !BRIDGE (Randy Dunlap)   
  - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function (Miaoqian Lin)   
  - pinctrl: pinconf-generic: Print arguments for bias-pull-* (Chen-Yu Tsai)   
  - watch_queue: Free the page array when watch_queue is dismantled (Eric Dumazet)   
  - crypto: arm/aes-neonbs-cbc - Select generic cbc and aes (Herbert Xu)   
  - mailbox: imx: fix wakeup failure from freeze mode (Robin Gong)   
  - rxrpc: Fix call timer start racing with call destruction (David Howells)   
  - rxrpc: fix some null-ptr-deref bugs in server_key.c (Xiaolong Huang)   
  - net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware (Guangbin Huang)   
  - net: hns3: fix the concurrency between functions reading debugfs (Yufeng Mo)   
  - gfs2: Make sure FITRIM minlen is rounded up to fs block size (Andrew Price)   
  - gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher)   
  - rtc: check if __rtc_read_time was successful (Tom Rix)   
  - modpost: restore the warning message for missing symbol versions (Masahiro Yamada)   
  - XArray: Update the LRU list in xas_split() (Matthew Wilcox (Oracle))   
  - can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value (Tom Rix)   
  - can: mcba_usb: properly check endpoint type (Pavel Skripkin)   
  - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path (Hangyu Hua)   
  - XArray: Fix xas_create_range() when multi-order entry present (Matthew Wilcox (Oracle))   
  - wireguard: socket: ignore v6 endpoints when ipv6 is disabled (Jason A. Donenfeld)   
  - wireguard: socket: free skb in send6 when ipv6 is disabled (Wang Hai)   
  - wireguard: queueing: use CFI-safe ptr_ring cleanup function (Jason A. Donenfeld)   
  - nvme: fix the read-only state for zoned namespaces with unsupposed features (Pankaj Raghav)   
  - nvme: allow duplicate NSIDs for private namespaces (Sungup Moon)   
  - ubifs: rename_whiteout: correct old_dir size computing (Baokun Li)   
  - ubifs: Fix to add refcount once page is set private (Zhihao Cheng)   
  - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (Zhihao Cheng)   
  - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (Zhihao Cheng)   
  - ubifs: Rectify space amount budget for mkdir/tmpfile operations (Zhihao Cheng)   
  - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (Zhihao Cheng)   
  - ubifs: Rename whiteout atomically (Zhihao Cheng)   
  - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (Zhihao Cheng)   
  - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (Zhihao Cheng)   
  - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (Zhihao Cheng)   
  - KVM: SVM: fix panic on out-of-bounds guest IRQ (Yi Wang)   
  - KVM: x86: fix sending PV IPI (Li RongQing)   
  - KVM: Prevent module exit until all VMs are freed (David Matlack)   
  - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated (Vitaly Kuznetsov)   
  - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov)   
  - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq (Vitaly Kuznetsov)   
  - platform: chrome: Split trace include file (Gwendal Grignou)   
  - scsi: qla2xxx: Use correct feature type field during RFF_ID processing (Manish Rangankar)   
  - scsi: qla2xxx: Reduce false trigger to login (Quinn Tran)   
  - scsi: qla2xxx: Fix stuck session of PRLI reject (Quinn Tran)   
  - scsi: qla2xxx: Fix N2N inconsistent PLOGI (Quinn Tran)   
  - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests (Arun Easi)   
  - scsi: qla2xxx: Fix hang due to session stuck (Quinn Tran)   
  - scsi: qla2xxx: Fix incorrect reporting of task management failure (Quinn Tran)   
  - scsi: qla2xxx: Fix disk failure to rediscover (Quinn Tran)   
  - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (Saurav Kashyap)   
  - scsi: qla2xxx: Check for firmware dump already collected (Joe Carnuccio)   
  - scsi: qla2xxx: Add devids and conditionals for 28xx (Joe Carnuccio)   
  - scsi: qla2xxx: Fix T10 PI tag escape and IP guard options for 28XX adapters (Joe Carnuccio)   
  - scsi: qla2xxx: edif: Fix clang warning (Quinn Tran)   
  - scsi: qla2xxx: Fix device reconnect in loop topology (Arun Easi)   
  - scsi: qla2xxx: Fix warning for missing error code (Nilesh Javali)   
  - scsi: qla2xxx: Fix wrong FDMI data for 64G adapter (Bikash Hazarika)   
  - scsi: qla2xxx: Fix premature hw access after PCI error (Quinn Tran)   
  - scsi: qla2xxx: Fix scheduling while atomic (Quinn Tran)   
  - scsi: qla2xxx: Fix warning message due to adisc being flushed (Quinn Tran)   
  - scsi: qla2xxx: Fix stuck session in gpdb (Quinn Tran)   
  - scsi: qla2xxx: Implement ref count for SRB (Saurav Kashyap)   
  - scsi: qla2xxx: Refactor asynchronous command initialization (Daniel Wagner)   
  - drm/i915: Reject unsupported TMDS rates on ICL+ (Ville Syrjälä)   
  - drm/i915: Fix PSF GV point mask when SAGV is not possible (Ville Syrjälä)   
  - drm/i915: Treat SAGV block time 0 as SAGV disabled (Ville Syrjälä)   
  - drm/dp: Fix off-by-one in register cache size (Kees Cook)   
  - powerpc: Fix build errors with newer binutils (Anders Roxell)   
  - powerpc: Add set_memory_{p/np}() and remove set_memory_attr() (Christophe Leroy)   
  - powerpc/lib/sstep: Fix build errors with newer binutils (Anders Roxell)   
  - powerpc/lib/sstep: Fix 'sthcx' instruction (Anders Roxell)   
  - powerpc/kasan: Fix early region not updated correctly (Chen Jingwen)   
  - KVM: x86: hyper-v: HVCALL_SEND_IPI_EX is an XMM fast hypercall (Vitaly Kuznetsov)   
  - KVM: x86: hyper-v: Fix the maximum number of sparse banks for XMM fast TLB flush hypercalls (Vitaly Kuznetsov)   
  - KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_flush_tlb() (Vitaly Kuznetsov)   
  - KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_send_ipi() (Vitaly Kuznetsov)   
  - KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU (Sean Christopherson)   
  - KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU (Sean Christopherson)   
  - KVM: x86/mmu: Move "invalid" check out of kvm_tdp_mmu_get_root() (Sean Christopherson)   
  - KVM: x86: Reinitialize context if host userspace toggles EFER.LME (Paolo Bonzini)   
  - ALSA: hda/realtek: Add alc256-samsung-headphone fixup (Matt Kramer)   
  - media: atomisp: fix bad usage at error handling logic (Mauro Carvalho Chehab)   
  - mmc: host: Return an error when ->enable_sdio_irq() ops is missing (Ulf Hansson)   
  - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (Steven Rostedt (Google))   
  - ASoC: Intel: sof_sdw: fix quirks for 2022 HP Spectre x360 13" (Anthony I Gilea)   
  - media: hdpvr: initialize dev->worker at hdpvr_register_videodev (Dongliang Mu)   
  - media: Revert "media: em28xx: add missing em28xx_close_extension" (Pavel Skripkin)   
  - media: i2c: ov5648: Fix lockdep error (Hans de Goede)   
  - video: fbdev: sm712fb: Fix crash in smtcfb_write() (Zheyu Ma)   
  - ASoC: amd: vg: fix for pm resume callback sequence (Vijendar Mukunda)   
  - ARM: mmp: Fix failure to remove sram device (Uwe Kleine-König)   
  - ARM: tegra: tamonten: Fix I2C3 pad setting (Richard Leitner)   
  - lib/test_lockup: fix kernel pointer check for separate address spaces (Arnd Bergmann)   
  - uaccess: fix type mismatch warnings from access_ok() (Arnd Bergmann)   
  - media: cx88-mpeg: clear interrupt status register before streaming video (Daniel González Cabanelas)   
  - media: imx-jpeg: fix a bug of accessing array out of bounds (Ming Qian)   
  - ASoC: soc-core: skip zero num_dai component in searching dai name (Shengjiu Wang)   
  - ARM: dts: bcm2711: Add the missing L1/L2 cache information (Richard Schleich)   
  - video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit (Jing Yao)   
  - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() (Jing Yao)   
  - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() (Jing Yao)   
  - arm64: defconfig: build imx-sdma as a module (Marcel Ziswiler)   
  - ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk (Abel Vesa)   
  - ARM: ftrace: avoid redundant loads or clobbering IP (Ard Biesheuvel)   
  - media: atomisp: fix dummy_ptr check to avoid duplicate active_bo (Tsuchiya Yuto)   
  - media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards (Hans de Goede)   
  - ASoC: madera: Add dependencies on MFD (Charles Keepax)   
  - ARM: dts: bcm2837: Add the missing L1/L2 cache information (Richard Schleich)   
  - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 (David Heidelberg)   
  - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit (Yang Guang)   
  - video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy)   
  - video: fbdev: w100fb: Reset global state (Evgeny Novikov)   
  - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (Tim Gardner)   
  - media: iommu/mediatek: Add device_link between the consumer and the larb devices (Yong Wu)   
  - media: iommu/mediatek: Return ENODEV if the device is NULL (Yong Wu)   
  - media: iommu/mediatek-v1: Free the existed fwspec if the master dev already has (Yong Wu)   
  - media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers (Mirela Rabulea)   
  - ASoC: SOF: Intel: match sdw version on link_slaves_found (Bard Liao)   
  - ASoC: sh: rz-ssi: Make the data structures available before registering the handlers (Lad Prabhakar)   
  - media: ir_toy: free before error exiting (Peiwei Hu)   
  - media: atmel: atmel-isc-base: report frame sizes as full supported range (Eugen Hristev)   
  - media: staging: media: zoran: fix various V4L2 compliance errors (Hans Verkuil)   
  - media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com (Corentin Labbe)   
  - media: staging: media: zoran: move videodev alloc (Corentin Labbe)   
  - ntfs: add sanity check on allocation size (Dongliang Mu)   
  - Adjust cifssb maximum read size (Rohith Surabattula)   
  - f2fs: compress: fix to print raw data size in error path of lz4 decompression (Chao Yu)   
  - f2fs: use spin_lock to avoid hang (Jaegeuk Kim)   
  - btrfs: make search_csum_tree return 0 if we get -EFBIG (Josef Bacik)   
  - btrfs: harden identification of a stale device (Anand Jain)   
  - f2fs: don't get FREEZE lock in f2fs_evict_inode in frozen fs (Jaegeuk Kim)   
  - NFSD: Fix nfsd_breaker_owns_lease() return values (Chuck Lever)   
  - f2fs: fix to do sanity check on curseg->alloc_type (Chao Yu)   
  - ext4: don't BUG if someone dirty pages without asking ext4 first (Theodore Ts'o)   
  - sched/tracing: Report TASK_RTLOCK_WAIT tasks as TASK_UNINTERRUPTIBLE (Valentin Schneider)   
  - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (Ritesh Harjani)   
  - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (Ritesh Harjani)   
  - locking/lockdep: Iterate lock_classes directly when reading lockdep files (Waiman Long)   
  - atomics: Fix atomic64_{read_acquire,set_release} fallbacks (Mark Rutland)   
  - spi: tegra20: Use of_device_get_match_data() (Minghao Chi)   
  - nvme-tcp: lockdep: annotate in-kernel sockets (Chris Leech)   
  - parisc: Fix handling off probe non-access faults (John David Anglin)   
  - PM: core: keep irq flags in device_pm_check_callbacks() (Dmitry Baryshkov)   
  - ACPI/APEI: Limit printable size of BERT table data (Darren Hart)   
  - Revert "Revert "block, bfq: honor already-setup queue merges"" (Paolo Valente)   
  - lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 (Paul Menzel)   
  - ACPICA: Avoid walking the ACPI Namespace if it is not there (Rafael J. Wysocki)   
  - bfq: fix use-after-free in bfq_dispatch_request (Zhang Wensheng)   
  - fs/binfmt_elf: Fix AT_PHDR for unusual ELF files (Akira Kawata)   
  - irqchip/nvic: Release nvic_base upon failure (Souptick Joarder (HPE))   
  - irqchip/qcom-pdc: Fix broken locking (Marc Zyngier)   
  - Fix incorrect type in assignment of ipv6 port for audit (Casey Schaufler)   
  - loop: use sysfs_emit() in the sysfs xxx show() (Chaitanya Kulkarni)   
  - selinux: allow FIOCLEX and FIONCLEX with policy capability (Richard Haines)   
  - arm64: module: remove (NOLOAD) from linker script (Fangrui Song)   
  - selinux: use correct type for context length (Christian Göttsche)   
  - block, bfq: don't move oom_bfqq (Yu Kuai)   
  - crypto: hisilicon/sec - not need to enable sm4 extra mode at HW V3 (Kai Ye)   
  - crypto: xts - Add softdep on ecb (Herbert Xu)   
  - block/bfq_wf2q: correct weight to ioprio (Yahu Gao)   
  - rcu: Mark writes to the rcu_segcblist structure's ->flags field (Paul E. McKenney)   
  - pinctrl: npcm: Fix broken references to chip->parent_device (Marc Zyngier)   
  - gcc-plugins/stackleak: Exactly match strings instead of prefixes (Kees Cook)   
  - crypto: hisilicon/qm - cleanup warning in qm_vf_read_qos (Kai Ye)   
  - regulator: rpi-panel: Handle I2C errors/timing to the Atmel (Dave Stevenson)   
  - LSM: general protection fault in legacy_parse_param (Casey Schaufler)   
  - fs: fix fd table size alignment properly (Linus Torvalds)   
  - lib/test: use after free in register_test_dev_kmod() (Dan Carpenter)   
  - fs: fd tables have to be multiples of BITS_PER_LONG (Linus Torvalds)   
  - net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head (Trond Myklebust)   
  - net/sched: act_ct: fix ref leak when switching zones (Marcelo Ricardo Leitner)   
  - net: prefer nf_ct_put instead of nf_conntrack_put (Florian Westphal)   
  - octeontx2-af: initialize action variable (Tom Rix)   
  - net: sparx5: switchdev: fix possible NULL pointer dereference (Zheng Yongjun)   
  - net/x25: Fix null-ptr-deref caused by x25_disconnect (Duoming Zhou)   
  - qlcnic: dcb: default to returning -EOPNOTSUPP (Tom Rix)   
  - net: sparx5: depends on PTP_1588_CLOCK_OPTIONAL (Randy Dunlap)   
  - net: hns3: clean residual vf config after disable sriov (Peng Li)   
  - NFS: Don't loop forever in nfs_do_recoalesce() (Trond Myklebust)   
  - selftests: test_vxlan_under_vrf: Fix broken test case (Ido Schimmel)   
  - net: phy: broadcom: Fix brcm_fet_config_init() (Florian Fainelli)   
  - net: hns3: refine the process when PF set VF VLAN (Jian Shen)   
  - net: hns3: format the output of the MAC address (Yufeng Mo)   
  - net: hns3: add vlan list lock to protect vlan list (Jian Shen)   
  - net: hns3: fix port base vlan add fail when concurrent with reset (Jian Shen)   
  - net: hns3: fix bug when PF set the duplicate MAC address for VFs (Jian Shen)   
  - net: enetc: report software timestamping via SO_TIMESTAMPING (Vladimir Oltean)   
  - xen: fix is_xen_pmu() (Juergen Gross)   
  - clk: Initialize orphan req_rate (Maxime Ripard)   
  - vsock/virtio: enable VQs early on probe (Stefano Garzarella)   
  - vsock/virtio: read the negotiated features before using VQs (Stefano Garzarella)   
  - vsock/virtio: initialize vdev->priv before using VQs (Stefano Garzarella)   
  - clk: qcom: gcc-msm8994: Fix gpll4 width (Konrad Dybcio)   
  - perf stat: Fix forked applications enablement of counters (Thomas Richter)   
  - kdb: Fix the putarea helper function (Daniel Thompson)   
  - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error (Olga Kornievskaia)   
  - SUNRPC don't resend a task on an offlined transport (Olga Kornievskaia)   
  - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Pablo Neira Ayuso)   
  - jfs: fix divide error in dbNextAG (Pavel Skripkin)   
  - driver core: dd: fix return value of __setup handler (Randy Dunlap)   
  - firmware: google: Properly state IOMEM dependency (David Gow)   
  - kgdbts: fix return value of __setup handler (Randy Dunlap)   
  - virt: acrn: fix a memory leak in acrn_dev_ioctl() (Xiaolong Huang)   
  - virt: acrn: obtain pa from VMA with PFNMAP flag (Yonghua Huang)   
  - serial: 8250: fix XOFF/XON sending when DMA is used (Ilpo Järvinen)   
  - kgdboc: fix return value of __setup handler (Randy Dunlap)   
  - tty: hvc: fix return value of __setup handler (Randy Dunlap)   
  - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe (Miaoqian Lin)   
  - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe (Miaoqian Lin)   
  - pinctrl: microchip-sgpio: lock RMW access (Michael Walle)   
  - pinctrl: microchip sgpio: use reset driver (Horatiu Vultur)   
  - pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Fix pingroup pin config state readback (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai)   
  - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init (Miaoqian Lin)   
  - staging: mt7621-dts: fix GB-PC2 devicetree (Arınç ÜNAL)   
  - staging: mt7621-dts: fix pinctrl properties for ethernet (Arınç ÜNAL)   
  - staging: mt7621-dts: fix formatting (Arınç ÜNAL)   
  - staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree (Arınç ÜNAL)   
  - NFS: remove unneeded check in decode_devicenotify_args() (Alexey Khoroshilov)   
  - mailbox: imx: fix crash in resume on i.mx8ulp (Robin Gong)   
  - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver (Miaoqian Lin)   
  - clk: Fix clk_hw_get_clk() when dev is NULL (Maxime Ripard)   
  - clk: clps711x: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer)   
  - clk: hisilicon: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer)   
  - clk: loongson1: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer)   
  - clk: actions: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer)   
  - nvdimm/region: Fix default alignment for small regions (Dan Williams)   
  - remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (Miaoqian Lin)   
  - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region (Miaoqian Lin)   
  - remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region (Miaoqian Lin)   
  - dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma (Jie Hai)   
  - clk: qcom: clk-rcg2: Update the frac table for pixel clock (Taniya Das)   
  - clk: qcom: clk-rcg2: Update logic to calculate D value for RCG (Taniya Das)   
  - clk: at91: sama7g5: fix parents of PDMCs' GCLK (Codrin Ciubotariu)   
  - clk: imx: off by one in imx_lpcg_parse_clks_from_dt() (Dan Carpenter)   
  - clk: imx7d: Remove audio_mclk_root_clk (Abel Vesa)   
  - dma-debug: fix return value of __setup handlers (Randy Dunlap)   
  - staging: r8188eu: fix endless loop in recv_func (Martin Kaiser)   
  - NFS: Return valid errors from nfs2/3_decode_dirent() (Trond Myklebust)   
  - habanalabs: Add check for pci_enable_device (Jiasheng Jiang)   
  - iio: adc: Add check for devm_request_threaded_irq (Jiasheng Jiang)   
  - serial: 8250: Fix race condition in RTS-after-send handling (Uwe Kleine-König)   
  - NFS: Use of mapping_set_error() results in spurious errors (Trond Myklebust)   
  - serial: 8250_lpss: Balance reference count for PCI DMA device (Andy Shevchenko)   
  - serial: 8250_mid: Balance reference count for PCI DMA device (Andy Shevchenko)   
  - phy: phy-brcm-usb: fixup BCM4908 support (Rafał Miłecki)   
  - phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) (Liu Ying)   
  - clk: qcom: ipq8074: Use floor ops for SDCC1 clock (Dirk Buchwalder)   
  - pinctrl: renesas: checker: Fix miscalculation of number of states (Geert Uytterhoeven)   
  - pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel (Geert Uytterhoeven)   
  - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. (Jonathan Cameron)   
  - serial: 8250_aspeed_vuart: add PORT_ASPEED_VUART port type (Zev Weiss)   
  - iio: mma8452: Fix probe failing when an i2c_device_id is used (Hans de Goede)   
  - dmaengine: idxd: restore traffic class defaults after wq reset (Dave Jiang)   
  - dmaengine: idxd: change bandwidth token to read buffers (Dave Jiang)   
  - dmaengine: idxd: check GENCAP config support for gencfg register (Dave Jiang)   
  - clk: qcom: ipq8074: fix PCI-E clock oops (Robert Marko)   
  - soundwire: intel: fix wrong register name in intel_shim_wake (Libin Yang)   
  - cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse (Luca Weiss)   
  - misc: alcor_pci: Fix an error handling path (Christophe JAILLET)   
  - fsi: Aspeed: Fix a potential double free (Christophe JAILLET)   
  - pps: clients: gpio: Propagate return value from pps_gpio_probe (Robert Hancock)   
  - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() (Uwe Kleine-König)   
  - fsi: scom: Remove retries in indirect scoms (Joel Stanley)   
  - fsi: scom: Fix error handling (Joel Stanley)   
  - mxser: fix xmit_buf leak in activate when LSR == 0xff (Jiri Slaby)   
  - staging: r8188eu: release_firmware is not called if allocation fails (Michael Straube)   
  - staging: r8188eu: convert DBG_88E_LEVEL call in hal/rtl8188e_hal_init.c (Phillip Potter)   
  - kernel/resource: fix kfree() of bootmem memory again (Miaohe Lin)   
  - drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool (Sondhauß, Jan)   
  - ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Alexander Lobakin)   
  - ice: fix 'scheduling while atomic' on aux critical err interrupt (Alexander Lobakin)   
  - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe (Miaoqian Lin)   
  - tipc: fix the timer expires after interval 100ms (Hoang Le)   
  - net: dsa: fix panic on shutdown if multi-chip tree failed to probe (Vladimir Oltean)   
  - openvswitch: always update flow key after nat (Aaron Conole)   
  - tcp: ensure PMTU updates are processed during fastopen (Jakub Kicinski)   
  - net: bcmgenet: Use stronger register read/writes to assure ordering (Jeremy Linton)   
  - PCI: Avoid broken MSI on SB600 USB devices (Bjorn Helgaas)   
  - selftests/bpf/test_lirc_mode2.sh: Exit with proper code (Hangbin Liu)   
  - powerpc/pseries: Fix use after free in remove_phb_dynamic() (Michael Ellerman)   
  - i2c: mux: demux-pinctrl: do not deactivate a master that is not active (Peter Rosin)   
  - netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned() (Phil Sutter)   
  - i2c: meson: Fix wrong speed use from probe (Lucas Tanure)   
  - af_netlink: Fix shift out of bounds in group mask calculation (Petr Machata)   
  - ipv4: Fix route lookups when handling ICMP redirects and PMTU updates (Guillaume Nault)   
  - Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt (Yake Yang)   
  - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (Niels Dossche)   
  - Bluetooth: hci_uart: add missing NULL check in h5_enqueue (Pavel Skripkin)   
  - selftests/bpf: Fix error reporting from sock_fields programs (Jakub Sitnicki)   
  - af_unix: Fix some data-races around unix_sk(sk)->oob_skb. (Kuniyuki Iwashima)   
  - ibmvnic: fix race between xmit and reset (Sukadev Bhattiprolu)   
  - bareudp: use ipv6_mod_enabled to check if IPv6 enabled (Hangbin Liu)   
  - can: isotp: support MSG_TRUNC flag when reading from socket (Oliver Hartkopp)   
  - can: isotp: return -EADDRNOTAVAIL when reading from unbound socket (Oliver Hartkopp)   
  - can: isotp: sanitize CAN ID checks in isotp_bind() (Oliver Hartkopp)   
  - mt76: mt7921: fix mt7921_queues_acq implementation (Lorenzo Bianconi)   
  - netfilter: flowtable: Fix QinQ and pppoe support for inet table (Pablo Neira Ayuso)   
  - drm/i915/display: Fix HPD short pulse handling for eDP (José Roberto de Souza)   
  - USB: storage: ums-realtek: fix error code in rts51x_read_mem() (Dan Carpenter)   
  - samples/bpf, xdpsock: Fix race when running for fix duration of time (Niklas Söderlund)   
  - bpf, sockmap: Fix double uncharge the mem of sk_msg (Wang Yufen)   
  - bpf, sockmap: Fix more uncharged while msg has more_data (Wang Yufen)   
  - bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full (Wang Yufen)   
  - bpf, sockmap: Fix memleak in sk_psock_queue_msg (Wang Yufen)   
  - RDMA/mlx5: Fix memory leak in error flow for subscribe event routine (Yongzhi Liu)   
  - Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error" (Leon Romanovsky)   
  - RDMA/irdma: Prevent some integer underflows (Dan Carpenter)   
  - power: ab8500_chargalg: Use CLOCK_MONOTONIC (Linus Walleij)   
  - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (Xin Xiong)   
  - MIPS: pgalloc: fix memory leak caused by pgd_free() (Yaliang Wang)   
  - MIPS: RB532: fix return value of __setup handler (Randy Dunlap)   
  - mips: cdmm: Fix refcount leak in mips_cdmm_phys_base (Miaoqian Lin)   
  - ath10k: Fix error handling in ath10k_setup_msa_resources (Miaoqian Lin)   
  - vxcan: enable local echo for sent CAN frames (Oliver Hartkopp)   
  - powerpc: 8xx: fix a return value error in mpc8xx_pic_init (Hangyu Hua)   
  - scsi: mpt3sas: Fix incorrect 4GB boundary check (Sreekanth Reddy)   
  - platform/x86: huawei-wmi: check the return value of device_create_file() (Jia-Ju Bai)   
  - selftests/bpf: Make test_lwt_ip_encap more stable and faster (Felix Maurer)   
  - libbpf: Unmap rings when umem deleted (lic121)   
  - mfd: mc13xxx: Add check for mc13xxx_irq_request (Jiasheng Jiang)   
  - powerpc/64s: Don't use DSISR for SLB faults (Michael Ellerman)   
  - powerpc/sysdev: fix incorrect use to determine if list is empty (Jakob Koschel)   
  - MIPS: Sanitise Cavium switch cases in TLB handler synthesizers (Maciej W. Rozycki)   
  - mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n (Randy Dunlap)   
  - drm/msm/a6xx: Fix missing ARRAY_SIZE() check (Rob Clark)   
  - net: axienet: fix RX ring refill allocation failure handling (Robert Hancock)   
  - PCI: Reduce warnings on possible RW1C corruption (Mark Tomlinson)   
  - RDMA/core: Fix ib_qp_usecnt_dec() called when error (Yajun Deng)   
  - IB/hfi1: Allow larger MTU without AIP (Mike Marciniszyn)   
  - power: supply: wm8350-power: Add missing free in free_charger_irq (Jiasheng Jiang)   
  - power: supply: wm8350-power: Handle error for wm8350_register_irq (Jiasheng Jiang)   
  - i2c: xiic: Make bus names unique (Robert Hancock)   
  - hv_balloon: rate-limit "Unhandled message" warning (Anssi Hannula)   
  - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() (Hou Wenlong)   
  - KVM: x86: Fix emulation in writing cr8 (Zhenzhong Duan)   
  - powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit (Michael Ellerman)   
  - powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() (Daniel Henrique Barboza)   
  - libbpf: Skip forward declaration when counting duplicated type names (Xu Kuohai)   
  - gpu: host1x: Fix a memory leak in 'host1x_remove()' (Christophe JAILLET)   
  - RDMA/irdma: Remove incorrect masking of PD (Mustafa Ismail)   
  - RDMA/irdma: Fix Passthrough mode in VM (Mustafa Ismail)   
  - RDMA/irdma: Fix netdev notifications for vlan's (Mustafa Ismail)   
  - xsk: Fix race at socket teardown (Magnus Karlsson)   
  - bpf, arm64: Feed byte-offset into bpf line info (Hou Tao)   
  - bpf, arm64: Call build_prologue() first in first JIT pass (Hou Tao)   
  - drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt (Nishanth Menon)   
  - scsi: hisi_sas: Change permission of parameter prot_mask (Xiang Chen)   
  - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return (Hans de Goede)   
  - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (Miaoqian Lin)   
  - ext2: correct max file size computing (Zhang Yi)   
  - power: supply: sbs-charger: Don't cancel work that is not initialized (Christophe JAILLET)   
  - TOMOYO: fix __setup handlers return values (Randy Dunlap)   
  - drm/amd/display: Remove vupdate_int_entry definition (Maíra Canal)   
  - RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR (Aharon Landau)   
  - scsi: pm8001: Fix abort all task initialization (Damien Le Moal)   
  - scsi: pm8001: Fix NCQ NON DATA command completion handling (Damien Le Moal)   
  - scsi: pm8001: Fix NCQ NON DATA command task initialization (Damien Le Moal)   
  - scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() (Damien Le Moal)   
  - scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() (Damien Le Moal)   
  - scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() (Damien Le Moal)   
  - scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() (Damien Le Moal)   
  - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() (Damien Le Moal)   
  - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() (Damien Le Moal)   
  - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() (Damien Le Moal)   
  - scsi: fnic: Fix a tracing statement (Bart Van Assche)   
  - vfio/pci: wake-up devices around reset functions (Abhishek Sahu)   
  - vfio/pci: fix memory leak during D3hot to D0 transition (Abhishek Sahu)   
  - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS (Aashish Sharma)   
  - drm/msm/dpu: fix dp audio condition (Dmitry Baryshkov)   
  - drm/msm/dpu: add DSPP blocks teardown (Dmitry Baryshkov)   
  - drm/msm/dsi/phy: fix 7nm v4.0 settings for C-PHY mode (Dmitry Baryshkov)   
  - drm/msm/dsi: Use "ref" fw clock instead of global name for VCO parent (Marijn Suijten)   
  - drm/msm/dp: always add fail-safe mode into connector mode list (Kuogee Hsieh)   
  - drm/msm/dp: stop link training after link training 2 failed (Kuogee Hsieh)   
  - drm/msm/dp: populate connector of struct dp_panel (Kuogee Hsieh)   
  - mtd: rawnand: pl353: Set the nand chip node as the flash node (Amit Kumar Mahapatra)   
  - iwlwifi: mvm: Fix an error code in iwl_mvm_up() (Dan Carpenter)   
  - iwlwifi: Fix -EIO error code that is never returned (Colin Ian King)   
  - iwlwifi: yoyo: remove DBGI_SRAM address reset writing (Rotem Saado)   
  - iwlwifi: mvm: align locking in D3 test debugfs (Johannes Berg)   
  - iwlwifi: mvm: don't iterate unadded vifs when handling FW SMPS req (Luca Coelho)   
  - iwlwifi: mvm: Don't call iwl_mvm_sta_from_mac80211() with NULL sta (Takashi Iwai)   
  - selftests: mptcp: add csum mib check for mptcp_connect (Geliang Tang)   
  - dax: make sure inodes are flushed before destroy cache (Tong Zhang)   
  - libbpf: Fix memleak in libbpf_netlink_recv() (Andrii Nakryiko)   
  - drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug (Roman Li)   
  - drm/amd/pm: enable pm sysfs write for one VF mode (Yiqing Yao)   
  - bpftool: Fix the error when lookup in no-btf maps (Yinjun Zhang)   
  - drm/bridge: anx7625: Fix overflow issue on reading EDID (Pin-Yen Lin)   
  - iommu/ipmmu-vmsa: Check for error num after setting mask (Jiasheng Jiang)   
  - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports (Dmitry Torokhov)   
  - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init (Miaoqian Lin)   
  - libbpf: Use dynamically allocated buffer when receiving netlink messages (Toke Høiland-Jørgensen)   
  - drm/bridge: dw-hdmi: use safe format when first in bridge chain (Neil Armstrong)   
  - libbpf: Fix compilation warning due to mismatched printf format (Andrii Nakryiko)   
  - net:enetc: allocate CBD ring data memory using DMA coherent methods (Po Liu)   
  - cxl/regs: Fix size of CXL Capability Header Register (Jonathan Cameron)   
  - cxl/core: Fix cxl_probe_component_regs() error message (Dan Williams)   
  - libbpf: Fix signedness bug in btf_dump_array_data() (Dan Carpenter)   
  - RDMA/rxe: Check the last packet by RXE_END_MASK (Xiao Yang)   
  - PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge (Pali Rohár)   
  - PCI: aardvark: Fix reading MSI interrupt number (Pali Rohár)   
  - igb: refactor XDP registration (Corinna Vinschen)   
  - igc: avoid kernel warning when changing RX ring parameters (Corinna Vinschen)   
  - mtd: mchp48l640: Add SPI ID table (Mark Brown)   
  - mtd: mchp23k256: Add SPI ID table (Mark Brown)   
  - i2c: bcm2835: Fix the error handling in 'bcm2835_i2c_probe()' (Christophe JAILLET)   
  - i2c: bcm2835: Use platform_get_irq() to get the interrupt (Lad Prabhakar)   
  - net: asix: add proper error handling of usb read errors (Pavel Skripkin)   
  - livepatch: Fix build failure on 32 bits processors (Christophe Leroy)   
  - scripts/dtc: Call pkg-config POSIXly correct (Thomas Bracht Laumann Jespersen)   
  - mac80211: limit bandwidth in HE capabilities (Johannes Berg)   
  - mac80211: Remove a couple of obsolete TODO (Ilan Peer)   
  - net: dsa: mv88e6xxx: Enable port policy support on 6097 (Tobias Waldekranz)   
  - ptp: unregister virtual clocks when unregistering physical clock. (Miroslav Lichvar)   
  - mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update (Lorenzo Bianconi)   
  - mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update (Lorenzo Bianconi)   
  - mt76: mt7615: fix a leftover race in runtime-pm (Lorenzo Bianconi)   
  - mt76: mt7921: fix a leftover race in runtime-pm (Lorenzo Bianconi)   
  - mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv (Lorenzo Bianconi)   
  - mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode (Lorenzo Bianconi)   
  - mt76: connac: fix sta_rec_wtbl tag len (Lorenzo Bianconi)   
  - powerpc/perf: Don't use perf_hw_context for trace IMC PMU (Athira Rajeev)   
  - KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init (Fabiano Rosas)   
  - powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch (Maxim Kiselev)   
  - ray_cs: Check ioremap return value (Jiasheng Jiang)   
  - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe (Miaoqian Lin)   
  - ixgbe: respect metadata on XSK Rx to skb (Alexander Lobakin)   
  - ixgbe: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin)   
  - ixgbe: pass bi->xdp to ixgbe_construct_skb_zc() directly (Alexander Lobakin)   
  - igc: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin)   
  - i40e: respect metadata on XSK Rx to skb (Alexander Lobakin)   
  - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin)   
  - selftests/net: timestamping: Fix bind_phc check (Gerhard Engleder)   
  - KVM: PPC: Fix vmx/vsx mixup in mmio emulation (Fabiano Rosas)   
  - RDMA/core: Set MR type in ib_reg_user_mr (Maor Gottlieb)   
  - ath9k_htc: fix uninit value bugs (Pavel Skripkin)   
  - selftests/bpf/test_xdp_redirect_multi: use temp netns for testing (Hangbin Liu)   
  - selftests/bpf: Normalize XDP section names in selftests (Andrii Nakryiko)   
  - net: phy: at803x: move page selection fix to config_init (Robert Hancock)   
  - drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function (Tom Rix)   
  - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() (Zhou Qingyang)   
  - drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() (Zhou Qingyang)   
  - ionic: Don't send reset commands if FW isn't running (Brett Creeley)   
  - ionic: start watchdog after all is setup (Shannon Nelson)   
  - ionic: fix type complaint in ionic_dev_cmd_clean() (Shannon Nelson)   
  - drm/edid: Split deep color modes between RGB and YUV444 (Maxime Ripard)   
  - drm/edid: Don't clear formats if using deep color (Maxime Ripard)   
  - mtd: rawnand: gpmi: fix controller timings setting (Dario Binacchi)   
  - mtd: onenand: Check for error irq (Jiasheng Jiang)   
  - Bluetooth: hci_serdev: call init_rwsem() before p->open() (Pavel Skripkin)   
  - Bluetooth: btintel: Fix WBS setting for Intel legacy ROM products (Tedd Ho-Jeong An)   
  - selftests: bpf: Fix bind on used port (Felix Maurer)   
  - drm/selftests/test-drm_dp_mst_helper: Fix memory leak in sideband_msg_req_encode_decode (José Expósito)   
  - bpf: Fix UAF due to race between btf_try_get_module and load_module (Kumar Kartikeya Dwivedi)   
  - udmabuf: validate ubuf->pagecount (Pavel Skripkin)   
  - bpftool: Only set obj->skeleton on complete success (Wei Fu)   
  - libbpf: Fix possible NULL pointer dereference when destroying skeleton (Yafang Shao)   
  - drm/panfrost: Check for error num after setting mask (Jiasheng Jiang)   
  - drm/v3d/v3d_drv: Check for error num after setting mask (Jiasheng Jiang)   
  - ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern (Wen Gong)   
  - drm: bridge: adv7511: Fix ADV7535 HPD enablement (Jagan Teki)   
  - drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe (Miaoqian Lin)   
  - drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe (Miaoqian Lin)   
  - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev (Miaoqian Lin)   
  - drm/meson: Fix error handling when afbcd.ops->init fails (Martin Blumenstingl)   
  - drm/meson: split out encoder from meson_dw_hdmi (Neil Armstrong)   
  - drm/meson: Make use of the helper function devm_platform_ioremap_resourcexxx() (Cai Huoqing)   
  - drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops (Martin Blumenstingl)   
  - ARM: configs: multi_v5_defconfig: re-enable DRM_PANEL and FB_xxx (Andre Przywara)   
  - ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS (Andre Przywara)   
  - ASoC: amd: Fix reference to PCM buffer address (Meng Tang)   
  - ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data (Miaoqian Lin)   
  - ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe (Miaoqian Lin)   
  - ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe (Miaoqian Lin)   
  - mmc: davinci_mmc: Handle error for clk_enable (Jiasheng Jiang)   
  - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe (Miaoqian Lin)   
  - ASoC: SOF: Intel: enable DMI L1 for playback streams (Kai Vehmanen)   
  - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() (Wang Wensheng)   
  - ASoC: fsl_spdif: Disable TX clock when stop (Shengjiu Wang)   
  - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe (Miaoqian Lin)   
  - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback (Codrin Ciubotariu)   
  - ASoC: rk817: Fix missing clk_disable_unprepare() in rk817_platform_probe (Miaoqian Lin)   
  - ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe (Miaoqian Lin)   
  - ASoC: mediatek: use of_device_get_match_data() (Tzung-Bi Shih)   
  - ASoC: SOF: Add missing of_node_put() in imx8m_probe (Miaoqian Lin)   
  - ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe (Miaoqian Lin)   
  - ASoC: atmel: Fix error handling in snd_proto_probe (Miaoqian Lin)   
  - ivtv: fix incorrect device_caps for ivtvfb (Hans Verkuil)   
  - media: saa7134: fix incorrect use to determine if list is empty (Jakob Koschel)   
  - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of (Miaoqian Lin)   
  - ASoC: fsi: Add check for clk_enable (Jiasheng Jiang)   
  - ASoC: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang)   
  - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe (Miaoqian Lin)   
  - media: vidtv: Check for null return of vzalloc (Jiasheng Jiang)   
  - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED (Dafna Hirschfeld)   
  - m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined (Randy Dunlap)   
  - arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly (Rob Herring)   
  - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (Takashi Sakamoto)   
  - memory: emif: check the pointer temp in get_device_details() (Jia-Ju Bai)   
  - memory: emif: Add check for setup_interrupts (Jiasheng Jiang)   
  - ASoC: soc-compress: prevent the potentially use of null pointer (Jiasheng Jiang)   
  - ASoC: dwc-i2s: Handle errors for clk_enable (Jiasheng Jiang)   
  - ASoC: atmel_ssc_dai: Handle errors for clk_enable (Jiasheng Jiang)   
  - ASoC: mxs-saif: Handle errors for clk_enable (Jiasheng Jiang)   
  - printk: fix return value of printk.devkmsg __setup handler (Randy Dunlap)   
  - arm64: dts: broadcom: Fix sata nodename (Frank Wunderlich)   
  - arm64: dts: ns2: Fix spi-cpol and spi-cpha property (Kuldeep Singh)   
  - ALSA: spi: Add check for clk_enable() (Jiasheng Jiang)   
  - ASoC: ti: davinci-i2s: Add check for clk_enable() (Jiasheng Jiang)   
  - mmc: sdhci_am654: Fix the driver data of AM64 SoC (Aswath Govindraju)   
  - soc: mediatek: pm-domains: Add wakeup capacity support in power domain (Chun-Jie Chen)   
  - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() (Jia-Ju Bai)   
  - uaccess: fix nios2 and microblaze get_user_8() (Arnd Bergmann)   
  - vsprintf: Fix %pK with kptr_restrict == 0 (Christophe Leroy)   
  - lib: uninline simple_strntoull() as well (Alexey Dobriyan)   
  - selftests/lkdtm: Add UBSAN config (Muhammad Usama Anjum)   
  - media: ov5640: Fix set format, v4l2_mbus_pixelcode not updated (Mirela Rabulea)   
  - media: v4l2-core: Initialize h264 scaling matrix (Nicolas Dufresne)   
  - ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put (Srinivas Kandagatla)   
  - ASoC: codecs: wcd934x: fix kcontrol max values (Srinivas Kandagatla)   
  - ASoC: codecs: wcd938x: fix kcontrol max values (Srinivas Kandagatla)   
  - ASoC: codecs: wc938x: fix accessing array out of bounds for enum type (Srinivas Kandagatla)   
  - ASoC: codecs: va-macro: fix accessing array out of bounds for enum type (Srinivas Kandagatla)   
  - ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type (Srinivas Kandagatla)   
  - ASoC: codecs: rx-macro: fix accessing compander for aux (Srinivas Kandagatla)   
  - media: cedrus: h264: Fix neighbour info buffer size (Jernej Skrabec)   
  - media: cedrus: H265: Fix neighbour info buffer size (Jernej Skrabec)   
  - media: usb: go7007: s2250-board: fix leak in probe() (Dan Carpenter)   
  - media: em28xx: initialize refcount before kref_get (Dongliang Mu)   
  - media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() (Zhou Qingyang)   
  - media: video/hdmi: handle short reads of hdmi info frame. (Tom Rix)   
  - media: mexon-ge2d: fixup frames size in registers (Neil Armstrong)   
  - ARM: dts: imx: Add missing LVDS decoder on M53Menlo (Marek Vasut)   
  - vsprintf: Fix potential unaligned access (Andy Shevchenko)   
  - ARM: dts: sun8i: v3s: Move the csi1 block to follow address order (Paul Kocialkowski)   
  - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe (Miaoqian Lin)   
  - firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined (Christophe JAILLET)   
  - arm64: dts: qcom: sm8350: Correct TCS configuration for apps rsc (Maulik Shah)   
  - arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc (Maulik Shah)   
  - arm64: dts: broadcom: bcm4908: use proper TWD binding (Rafał Miłecki)   
  - arm64: dts: qcom: sm8250: fix PCIe bindings to follow schema (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm845: fix microphone bias properties and values (David Heidelberg)   
  - soc: qcom: aoss: remove spurious IRQF_ONESHOT flags (Daniel Thompson)   
  - soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem (Miaoqian Lin)   
  - soc: qcom: rpmpd: Check for null return of devm_kcalloc (Jiasheng Jiang)   
  - ARM: dts: qcom: ipq4019: fix sleep clock (Pavel Kubelun)   
  - firmware: qcom: scm: Remove reassignment to desc following initializer (Marijn Suijten)   
  - ARM: dts: Fix OpenBMC flash layout label addresses (Zev Weiss)   
  - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() (Dan Carpenter)   
  - video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() (Dan Carpenter)   
  - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() (Wang Hai)   
  - video: fbdev: controlfb: Fix COMPILE_TEST build (YueHaibing)   
  - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen (Z. Liu)   
  - media: aspeed: Correct value for h-total-pixels (Jammy Huang)   
  - media: ov5648: Don't pack controls struct (Sakari Ailus)   
  - media: v4l: Avoid unaligned access warnings when printing 4cc modifiers (Sakari Ailus)   
  - media: ov6650: Fix set format try processing path (Janusz Krzysztofik)   
  - media: hantro: Fix overfill bottom register field name (Chen-Yu Tsai)   
  - media: meson: vdec: potential dereference of null pointer (Jiasheng Jiang)   
  - media: coda: Fix missing put_device() call in coda_get_vdoa_data (Miaoqian Lin)   
  - ASoC: simple-card-utils: Set sysclk on all components (Robert Hancock)   
  - ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting (Robert Hancock)   
  - ASoC: codecs: Check for error pointer after calling devm_regmap_init_mmio (Jiasheng Jiang)   
  - ASoC: sh: rz-ssi: Drop calling rz_ssi_pio_recv() recursively (Lad Prabhakar)   
  - media: atmel: atmel-sama7g5-isc: fix ispck leftover (Eugen Hristev)   
  - media: bttv: fix WARNING regression on tunerless devices (Ondrej Zary)   
  - media: imx: imx8mq-mipi_csi2: fix system resume (Martin Kepplinger)   
  - media: imx: imx8mq-mipi-csi2: remove wrong irq config write operation (Martin Kepplinger)   
  - media: mtk-vcodec: potential dereference of null pointer (Jiasheng Jiang)   
  - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls (Chen-Yu Tsai)   
  - media: staging: media: imx: imx7-mipi-csis: Make subdev name unique (Laurent Pinchart)   
  - media: camss: vfe-170: fix "VFE halt timeout" error (Jonathan Marek)   
  - media: camss: csid-170: set the right HALT_CMD when disabled (Jonathan Marek)   
  - media: camss: csid-170: don't enable unused irqs (Jonathan Marek)   
  - media: camss: csid-170: fix non-10bit formats (Jonathan Marek)   
  - media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size (Corentin Labbe)   
  - pinctrl: samsung: Remove EINT handler for Exynos850 ALIVE and CMGP gpios (Sam Protsenko)   
  - kunit: make kunit_test_timeout compatible with comment (Peng Liu)   
  - drivers/base/memory: add memory block to memory group after registration succeeded (David Hildenbrand)   
  - selftests, x86: fix how check_cc.sh is being invoked (Guillaume Tucker)   
  - f2fs: fix compressed file start atomic write may cause data corruption (Fengnan Chang)   
  - btrfs: fix unexpected error path when reflinking an inline extent (Filipe Manana)   
  - f2fs: fix to avoid potential deadlock (Chao Yu)   
  - sched/rt: Plug rt_mutex_setprio() vs push_rt_task() race (Valentin Schneider)   
  - sched/cpuacct: Fix charge percpu cpuusage (Chengming Zhou)   
  - nfsd: more robust allocation failure handling in nfsd_file_cache_init (Amir Goldstein)   
  - f2fs: fix missing free nid in f2fs_handle_failed_inode (Jaegeuk Kim)   
  - sched/fair: Improve consistency of allowed NUMA balance calculations (Mel Gorman)   
  - perf/x86/intel/pt: Fix address filter config for 32-bit kernel (Adrian Hunter)   
  - perf/core: Fix address filter parser for multiple filters (Adrian Hunter)   
  - rseq: Remove broken uapi field layout on 32-bit little endian (Mathieu Desnoyers)   
  - sched/uclamp: Fix iowait boost escaping uclamp restriction (Qais Yousef)   
  - sched/core: Export pelt_thermal_tp (Qais Yousef)   
  - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa (Bharata B Rao)   
  - f2fs: fix to enable ATGC correctly via gc_idle sysfs interface (Chao Yu)   
  - watch_queue: Actually free the watch (David Howells)   
  - watch_queue: Fix NULL dereference in error cleanup (David Howells)   
  - io_uring: terminate manual loop iterator loop correctly for non-vecs (Jens Axboe)   
  - io_uring: don't check unrelated req->open.how in accept request (Jens Axboe)   
  - clocksource: acpi_pm: fix return value of __setup handler (Randy Dunlap)   
  - hwmon: (pmbus) Add Vin unit off handling (Brandon Wyman)   
  - hwrng: nomadik - Change clk_disable to clk_disable_unprepare (Miaoqian Lin)   
  - crypto: ccree - Fix use after free in cc_cipher_exit() (Jianglei Nie)   
  - crypto: ccp - ccp_dmaengine_unregister release dma channels (Dāvis Mosāns)   
  - ACPI: APEI: fix return value of __setup handlers (Randy Dunlap)   
  - KEYS: trusted: Fix trusted key backends when building as module (Andreas Rammhold)   
  - arm64: prevent instrumentation of bp hardening callbacks (Mark Rutland)   
  - clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() (Guillaume Ranquet)   
  - clocksource/drivers/timer-microchip-pit64b: Use notrace (Claudiu Beznea)   
  - clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts (Krzysztof Kozlowski)   
  - clocksource/drivers/exynos_mct: Refactor resources allocation (Marek Szyprowski)   
  - clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix (Drew Fustini)   
  - crypto: vmx - add missing dependencies (Petr Vorel)   
  - crypto: gemini - call finalize with bh disabled (Corentin Labbe)   
  - crypto: amlogic - call finalize with bh disabled (Corentin Labbe)   
  - crypto: sun8i-ce - call finalize with bh disabled (Corentin Labbe)   
  - crypto: sun8i-ss - call finalize with bh disabled (Corentin Labbe)   
  - hwrng: atmel - disable trng on failure path (Claudiu Beznea)   
  - spi: spi-zynqmp-gqspi: Handle error for dma_set_mask (Jiasheng Jiang)   
  - PM: suspend: fix return value of __setup handler (Randy Dunlap)   
  - PM: hibernate: fix __setup handler error handling (Randy Dunlap)   
  - block: don't delete queue kobject before its children (Eric Biggers)   
  - nvme: fix the check for duplicate unique identifiers (Christoph Hellwig)   
  - nvme: cleanup __nvme_check_ids (Christoph Hellwig)   
  - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING (Armin Wolf)   
  - hwmon: (pmbus) Add mutex to regulator ops (Patrick Rudolph)   
  - spi: pxa2xx-pci: Balance reference count for PCI DMA device (Andy Shevchenko)   
  - crypto: hisilicon/sec - fix the aead software fallback for engine (Kai Ye)   
  - crypto: ccree - don't attempt 0 len DMA mappings (Gilad Ben-Yossef)   
  - EVM: fix the evm= __setup handler return value (Randy Dunlap)   
  - audit: log AUDIT_TIME_* records only from rules (Richard Guy Briggs)   
  - crypto: rockchip - ECB does not need IV (Corentin Labbe)   
  - selftests/sgx: Treat CC as one argument (Muhammad Usama Anjum)   
  - selftests/x86: Add validity check and allow field splitting (Muhammad Usama Anjum)   
  - blk-cgroup: set blkg iostat after percpu stat aggregation (Chengming Zhou)   
  - arm64/mm: avoid fixmap race condition when create pud mapping (Jianyong Wu)   
  - stack: Constrain and fix stack offset randomization with Clang builds (Marco Elver)   
  - spi: tegra210-quad: Fix missin IRQ check in tegra_qspi_probe (Miaoqian Lin)   
  - spi: tegra114: Add missing IRQ check in tegra_spi_probe (Miaoqian Lin)   
  - crypto: octeontx2 - remove CONFIG_DM_CRYPT check (Shijith Thotton)   
  - thermal: int340x: Check for NULL after calling kmemdup() (Jiasheng Jiang)   
  - selinux: Fix selinux_sb_mnt_opts_compat() (Scott Mayhew)   
  - crypto: mxs-dcp - Fix scatterlist processing (Tomas Paukrt)   
  - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Herbert Xu)   
  - crypto: sun8i-ss - really disable hash on A80 (Corentin Labbe)   
  - hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER (Geert Uytterhoeven)   
  - hwrng: cavium - Check health status while reading random data (Sunil Goutham)   
  - crypto: ccp - Ensure psp_ret is always init'd in __sev_platform_init_locked() (Peter Gonda)   
  - selinux: check return value of sel_make_avc_files (Christian Göttsche)   
  - selinux: access superblock_security_struct in LSM blob way (GONG, Ruiqi)   
  - regulator: qcom_smd: fix for_each_child.cocci warnings (kernel test robot)   
  - PCI: xgene: Revert "PCI: xgene: Fix IB window setup" (Marc Zyngier)   
  - PCI: pciehp: Clear cmd_busy bit in polling mode (Liguang Zhang)   
  - PCI: imx6: Allow to probe when dw_pcie_wait_for_link() fails (Fabio Estevam)   
  - drm/i915/gem: add missing boundary check in vm_access (Mastan Katragadda)   
  - drm/i915/opregion: check port number bounds for SWSCI display power state (Jani Nikula)   
  - brcmfmac: pcie: Fix crashes due to early IRQs (Hector Martin)   
  - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio (Hector Martin)   
  - brcmfmac: pcie: Declare missing firmware files in pcie.c (Hector Martin)   
  - brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path (Hector Martin)   
  - brcmfmac: firmware: Allocate space for default boardrev in nvram (Hector Martin)   
  - drm/fb-helper: Mark screen buffers in system memory with FBINFO_VIRTFB (Thomas Zimmermann)   
  - drm/nouveau/backlight: Just set all backlight types as RAW (Lyude Paul)   
  - drm/nouveau/backlight: Fix LVDS backlight detection on some laptops (Lyude Paul)   
  - drm/syncobj: flatten dma_fence_chains on transfer (Christian König)   
  - xtensa: fix xtensa_wsr always writing 0 (Max Filippov)   
  - xtensa: fix stop_machine_cpuslocked call in patch_text (Max Filippov)   
  - xtensa: define update_mmu_tlb function (Max Filippov)   
  - btrfs: verify the tranisd of the to-be-written dirty extent buffer (Qu Wenruo)   
  - btrfs: extend locking to all space_info members accesses (Niels Dossche)   
  - btrfs: zoned: mark relocation as writing (Naohiro Aota)   
  - media: davinci: vpif: fix unbalanced runtime PM enable (Johan Hovold)   
  - media: davinci: vpif: fix unbalanced runtime PM get (Johan Hovold)   
  - media: venus: venc: Fix h264 8x8 transform control (Stanimir Varbanov)   
  - media: venus: hfi_cmds: List HDR10 property as unsupported for v1 and v3 (Stanimir Varbanov)   
  - media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC (Sean Young)   
  - DEC: Limit PMAX memory probing to R3k systems (Maciej W. Rozycki)   
  - PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove() (Shawn Guo)   
  - bcache: fixup multiple threads crash (Mingzhe Zou)   
  - crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() (Eric Biggers)   
  - crypto: rsa-pkcs1pad - restore signature length check (Eric Biggers)   
  - crypto: rsa-pkcs1pad - correctly get hash from source scatterlist (Eric Biggers)   
  - crypto: rsa-pkcs1pad - only allow with rsa (Eric Biggers)   
  - exec: Force single empty string when argv is empty (Kees Cook)   
  - lib/raid6/test: fix multiple definition linking error (Dirk Müller)   
  - thermal: int340x: Increase bitmap size (Srinivas Pandruvada)   
  - pstore: Don't use semaphores in always-atomic-context code (Jann Horn)   
  - carl9170: fix missing bit-wise or operator for tx_params (Colin Ian King)   
  - mgag200 fix memmapsl configuration in GCTL6 register (Jocelyn Falempe)   
  - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 (Krzysztof Kozlowski)   
  - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size (Tudor Ambarus)   
  - ARM: dts: at91: sama7g5: Remove unused properties in i2c nodes (Tudor Ambarus)   
  - rfkill: make new event layout opt-in (Johannes Berg)   
  - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix (Michael Schmitz)   
  - video: fbdev: sm712fb: Fix crash in smtcfb_read() (Helge Deller)   
  - fbdev: Hot-unplug firmware fb devices on forced removal (Thomas Zimmermann)   
  - drm/edid: check basic audio support on CEA extension block (Cooper Chiou)   
  - block: don't merge across cgroup boundaries if blkcg is enabled (Tejun Heo)   
  - block: limit request dispatch loop duration (Shin'ichiro Kawasaki)   
  - mailbox: tegra-hsp: Flush whole channel (Pekka Pessi)   
  - landlock: Use square brackets around "landlock-ruleset" (Christian Brauner)   
  - samples/landlock: Fix path_list memory leak (Tom Rix)   
  - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() (Duoming Zhou)   
  - ext4: make mb_optimize_scan performance mount option work with extents (Ojaswin Mujoo)   
  - ext4: fix fs corruption when tring to remove a non-empty directory with IO error (Ye Bin)   
  - ext4: fix ext4_fc_stats trace point (Ritesh Harjani)   
  - coredump: Also dump first pages of non-executable ELF libraries (Jann Horn)   
  - ACPI: properties: Consistently return -ENOENT if there are no more references (Sakari Ailus)   
  - Revert "ACPI: Pass the same capabilities to the _OSC regardless of the query flag" (Rafael J. Wysocki)   
  - ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM (Ammar Faizi)   
  - arm64: dts: ti: k3-am64: Fix gic-v3 compatible regs (Nishanth Menon)   
  - arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs (Nishanth Menon)   
  - arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs (Nishanth Menon)   
  - arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs (Nishanth Menon)   
  - arm64: dts: qcom: sm8250: Fix MSI IRQ for PCIe1 and PCIe2 (Manivannan Sadhasivam)   
  - arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones (Vijay Balakrishna)   
  - arm64: signal: nofpsimd: Do not allocate fp/simd context when not available (David Engraf)   
  - PCI: fu740: Force 2.5GT/s for initial device probe (Ben Dooks)   
  - powerpc/kvm: Fix kvm_use_magic_page (Andreas Gruenbacher)   
  - drbd: fix potential silent data corruption (Lars Ellenberg)   
  - tracing: Have trace event string test handle zero length strings (Steven Rostedt (Google))   
  - dm integrity: set journal entry unused when shrinking device (Mikulas Patocka)   
  - dm: fix double accounting of flush with data (Mike Snitzer)   
  - dm: interlock pending dm_io and dm_wait_for_bios_completion (Mike Snitzer)   
  - dm: fix use-after-free in dm_cleanup_zoned_dev() (Kirill Tkhai)   
  - dm stats: fix too short end duration_ns when using precise_timestamps (Mike Snitzer)   
  - mm/kmemleak: reset tag when compare object pointer (Kuan-Ying Lee)   
  - mm,hwpoison: unmap poisoned page before invalidation (Rik van Riel)   
  - Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" (Charan Teja Kalla)   
  - mm: madvise: return correct bytes advised with process_madvise (Charan Teja Kalla)   
  - mm: madvise: skip unmapped vma holes passed to process_madvise (Charan Teja Kalla)   
  - drm/simpledrm: Add "panel orientation" property on non-upright mounted LCD panels (Hans de Goede)   
  - ocfs2: fix crash when mount with quota enabled (Joseph Qi)   
  - rtc: pl031: fix rtc features null pointer dereference (Ali Pouladi)   
  - rtc: mc146818-lib: fix locking in mc146818_set_time (Mateusz Jończyk)   
  - ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 (Kai-Heng Feng)   
  - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai)   
  - ALSA: hda: Avoid unsol event during RPM suspending (Mohan Kumar)   
  - ALSA: cs4236: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - cifs: fix NULL ptr dereference in smb2_ioctl_query_info() (Paulo Alcantara)   
  - cifs: prevent bad output lengths in smb2_ioctl_query_info() (Paulo Alcantara)   
  - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" (José Expósito)   
  - riscv: Increase stack size under KASAN (Dmitry Vyukov)   
  - riscv: Fix fill_callchain return value (Nikita Shubin)   
  - riscv: dts: canaan: Fix SPI3 bus width (Niklas Cassel)   
  - qed: validate and restrict untrusted VFs vlan promisc mode (Manish Chopra)   
  - qed: display VF trust config (Manish Chopra)   
  - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands (Damien Le Moal)   
  - scsi: scsi_transport_fc: Fix FPIN Link Integrity statistics counters (James Smart)   
  - scsi: ufs: Fix runtime PM messages never-ending cycle (Adrian Hunter)   
  - scsi: core: sd: Add silence_suspend flag to suppress some PM messages (Adrian Hunter)   
  - mempolicy: mbind_range() set_policy() after vma_merge() (Hugh Dickins)   
  - mm: invalidate hwpoison page cache page in fault path (Rik van Riel)   
  - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node (Alistair Popple)   
  - mm: fs: fix lru_cache_disabled race in bh_lru (Minchan Kim)   
  - jffs2: fix memory leak in jffs2_scan_medium (Baokun Li)   
  - jffs2: fix memory leak in jffs2_do_mount_fs (Baokun Li)   
  - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (Baokun Li)   
  - can: m_can: m_can_tx_handler(): fix use after free of skb (Marc Kleine-Budde)   
  - mtd: rawnand: protect access to rawnand devices while in suspend (Sean Nyekjaer)   
  - spi: mxic: Fix the transmit path (Miquel Raynal)   
  - net: bnxt_ptp: fix compilation error (Damien Le Moal)   
  - pinctrl: samsung: drop pin banks references on error paths (Krzysztof Kozlowski)   
  - pinctrl: ingenic: Fix regmap on X series SoCs (Aidan MacDonald)   
  - mm/mlock: fix two bugs in user_shm_lock() (Miaohe Lin)   
  - remoteproc: Fix count check in rproc_coredump_write() (Alistair Delva)   
  - f2fs: fix to do sanity check on .cp_pack_total_block_count (Chao Yu)   
  - f2fs: quota: fix loop condition at f2fs_quota_sync() (Juhyung Park)   
  - f2fs: fix to unlock page correctly in error path of is_alive() (Chao Yu)   
  - NFSD: prevent integer overflow on 32 bit systems (Dan Carpenter)   
  - NFSD: prevent underflow in nfssvc_decode_writeargs() (Dan Carpenter)   
  - NFS: NFSv2/v3 clients should never be setting NFS_CAP_XATTR (Trond Myklebust)   
  - SUNRPC: avoid race between mod_timer() and del_timer_sync() (NeilBrown)   
  - HID: intel-ish-hid: Use dma_alloc_coherent for firmware update (Gwendal Grignou)   
  - firmware: sysfb: fix platform-device leak in error path (Johan Hovold)   
  - firmware: stratix10-svc: add missing callback parameter on RSU (Ang Tien Sung)   
  - Documentation: update stable tree link (Bagas Sanjaya)   
  - Documentation: add link to stable release candidate tree (Bagas Sanjaya)   
  - KEYS: asymmetric: properly validate hash_algo and encoding (Eric Biggers)   
  - KEYS: asymmetric: enforce that sig algo matches key algo (Eric Biggers)   
  - KEYS: fix length validation in keyctl_pkey_params_get_2() (Eric Biggers)   
  - cifs: we do not need a spinlock around the tree access during umount (Ronnie Sahlberg)   
  - cifs: fix handlecache and multiuser (Ronnie Sahlberg)   
  - clk: uniphier: Fix fixed-rate initialization (Kunihiko Hayashi)   
  - clk: rockchip: re-add rational best approximation algorithm to the fractional divider (Quentin Schulz)   
  - greybus: svc: fix an error handling bug in gb_svc_hello() (Dan Carpenter)   
  - iio: inkern: make a best effort on offset calculation (Liam Beguin)   
  - iio: inkern: apply consumer scale when no channel scale is available (Liam Beguin)   
  - iio: inkern: apply consumer scale on IIO_VAL_INT cases (Liam Beguin)   
  - iio: afe: rescale: use s64 for temporary scale calculations (Liam Beguin)   
  - coresight: syscfg: Fix memleak on registration failure in cscfg_create_device (Miaoqian Lin)   
  - coresight: Fix TRCCONFIGR.QE sysfs interface (James Clark)   
  - docs: sphinx/requirements: Limit jinja2<3.1 (Akira Yokosawa)   
  - bus: mhi: Fix MHI DMA structure endianness (Paul Davey)   
  - bus: mhi: pci_generic: Add mru_default for Quectel EM1xx series (Yonglin Tan)   
  - mei: avoid iterator usage outside of list_for_each_entry (Alexander Usyskin)   
  - mei: me: add Alder Lake N device id. (Alexander Usyskin)   
  - xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() (Anssi Hannula)   
  - xhci: make xhci_handshake timeout for xhci_reset() adjustable (Mathias Nyman)   
  - xhci: fix runtime PM imbalance in USB2 resume (Henry Lin)   
  - xhci: fix garbage USBSTS being logged in some cases (Anssi Hannula)   
  - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c (Alan Stern)   
  - usb: typec: tipd: Forward plug orientation to typec subsystem (Sven Peter)   
  - tpm: fix reference counting for struct tpm_chip (Lino Sanfilippo)   
  - virtio-blk: Use blk_validate_block_size() to validate block size (Xie Yongji)   
  - iommu/iova: Improve 32-bit free space estimate (Robin Murphy)   
  - drm/amdgpu: only check for _PR3 on dGPUs (Alex Deucher)   
  - drm/amdgpu: move PX checking into amdgpu_device_ip_early_init (Alex Deucher)   
  - locking/lockdep: Avoid potential access of invalid memory in lock_class (Waiman Long)   
  - selftests: vm: fix clang build error multiple output files (Yosry Ahmed)   
  - net: dsa: microchip: add spi_device_id tables (Claudiu Beznea)   
  - Input: zinitix - do not report shadow fingers (Linus Walleij)   
  - spi: Fix erroneous sgs value with min_t() (Biju Das)   
  - Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" (Bartosz Golaszewski)   
  - net:mcf8390: Use platform_get_irq() to get the interrupt (Minghao Chi (CGEL ZTE))   
  - spi: Fix invalid sgs value (Biju Das)   
  - gpio: Revert regression in sysfs-gpio (gpiolib.c) (Marcelo Roberto Jimenez)   
  - ethernet: sun: Free the coherent when failing in probing (Zheyu Ma)   
  - tools/virtio: fix virtio_test execution (Stefano Garzarella)   
  - vdpa/mlx5: should verify CTRL_VQ feature exists for MQ (Si-Wei Liu)   
  - virtio_console: break out of buf poll on remove (Michael S. Tsirkin)   
  - ARM: mstar: Select HAVE_ARM_ARCH_TIMER (Daniel Palmer)   
  - xfrm: fix tunnel model fragmentation behavior (Lina Wang)   
  - HID: Add support for open wheel and no attachment to T300 (Michael Hübner)   
  - HID: logitech-dj: add new lightspeed receiver id (Lucas Zampieri)   
  - hv: utils: add PTP_1588_CLOCK to Kconfig to fix build (Randy Dunlap)   
  - mm: kfence: fix missing objcg housekeeping for SLAB (Muchun Song)   
  - USB: serial: simple: add Nokia phone driver (Johan Hovold)   
  - USB: serial: pl2303: fix GS type detection (Johan Hovold)   
  - dt-bindings: usb: hcd: correct usb-device path (Krzysztof Kozlowski)   
  - USB: serial: pl2303: add IBM device IDs (Eddie James)   
  - Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" (Linus Torvalds)   
  - LTS version: v5.15.32 (Jack Vogel)   
  - llc: only change llc->dev when bind() succeeds (Eric Dumazet)   
  - nds32: fix access_ok() checks in get/put_user (Arnd Bergmann)   
  - m68k: fix access_ok for coldfire (Arnd Bergmann)   
  - wcn36xx: Differentiate wcn3660 from wcn3620 (Bryan O'Donoghue)   
  - tpm: use try_get_ops() in tpm-space.c (James Bottomley)   
  - mac80211: fix potential double free on mesh join (Linus Lüssing)   
  - uaccess: fix integer overflow on access_ok() (Arnd Bergmann)   
  - rcu: Don't deboost before reporting expedited quiescent state (Paul E. McKenney)   
  - drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() (Roberto Sassu)   
  - Revert "ath: add support for special 0x0 regulatory domain" (Brian Norris)   
  - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE (Larry Finger)   
  - crypto: qat - disable registration of algorithms (Giovanni Cabiddu)   
  - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU (Werner Sembach)   
  - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 (Maximilian Luz)   
  - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board (Mark Cilissen)   
  - drivers: net: xgene: Fix regression in CRC stripping (Stephane Graber)   
  - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec (Giacomo Guiduzzi)   
  - ALSA: cmipci: Restore aux vol on suspend/resume (Jonathan Teh)   
  - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB (Lars-Peter Clausen)   
  - ALSA: pcm: Add stream lock during PCM reset ioctl operations (Takashi Iwai)   
  - ALSA: hda/realtek: Add quirk for ASUS GA402 (Jason Zheng)   
  - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (huangwenhui)   
  - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ (Tim Crawford)   
  - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ (Tim Crawford)   
  - ALSA: usb-audio: add mapping for new Corsair Virtuoso SE (Reza Jahanbakhshi)   
  - ALSA: oss: Fix PCM OSS buffer allocation overflow (Takashi Iwai)   
  - ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call (Takashi Iwai)   
  - llc: fix netdevice reference leaks in llc_ui_bind() (Eric Dumazet)   
  - Bluetooth: btusb: Add another Realtek 8761BU (Helmut Grohne)   
  - tpm: Fix error handling in async work (Tadeusz Struk)   
  - net: ipv6: fix skb_over_panic in __ip6_append_data (Tadeusz Struk)   
  - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (Jordy Zomer)   
  - LTS version: v5.15.31 (Jack Vogel)   
  - perf symbols: Fix symbol size calculation condition (Michael Petlan)   
  - Input: aiptek - properly check endpoint type (Pavel Skripkin)   
  - scsi: mpt3sas: Page fault in reply q processing (Matt Lupfer)   
  - usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern)   
  - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver (Alan Stern)   
  - usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Dan Carpenter)   
  - arm64: fix clang warning about TRAMP_VALIAS (Arnd Bergmann)   
  - iavf: Fix hang during reboot/shutdown (Ivan Vecera)   
  - net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload (Vladimir Oltean)   
  - net: bcmgenet: skip invalid partial checksums (Doug Berger)   
  - bnx2x: fix built-in kernel driver load failure (Manish Chopra)   
  - net: phy: mscc: Add MODULE_FIRMWARE macros (Juerg Haefliger)   
  - net: dsa: Add missing of_node_put() in dsa_port_parse_of (Miaoqian Lin)   
  - drm: Don't make DRM_PANEL_BRIDGE dependent on DRM_KMS_HELPERS (Thomas Zimmermann)   
  - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() (Nicolas Dichtel)   
  - drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings (Marek Vasut)   
  - drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() (Christoph Niedermaier)   
  - hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang)   
  - iavf: Fix double free in iavf_reset_task (Przemyslaw Patynowski)   
  - atm: eni: Add check for dma_map_single (Jiasheng Jiang)   
  - net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Eric Dumazet)   
  - net: phy: marvell: Fix invalid comparison in the resume and suspend functions (Kurt Cancemi)   
  - esp6: fix check on ipv6_skip_exthdr's return value (Sabrina Dubroca)   
  - vsock: each transport cycles only on its own sockets (Jiyong Park)   
  - alx: acquire mutex for alx_reinit in alx_change_mtu (Niels Dossche)   
  - efi: fix return value of __setup handlers (Randy Dunlap)   
  - drm/mgag200: Fix PLL setup for g200wb and g200ew (Jocelyn Falempe)   
  - block: release rq qos structures for queue without disk (Ming Lei)   
  - mm: swap: get rid of livelock in swapin readahead (Guo Ziliang)   
  - ocfs2: fix crash when initialize filecheck kobj fails (Joseph Qi)   
  - crypto: qcom-rng - ensure buffer for generate is completely filled (Brian Masney)   
  - bpf/selftests: Test PTR_TO_RDONLY_MEM (Hao Luo)  [Orabug: 34358256]  
  - bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. (Hao Luo)  [Orabug: 34358256]  
  - bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. (Hao Luo)  [Orabug: 34358256]  
  - bpf: Convert PTR_TO_MEM_OR_NULL to composable types. (Hao Luo)  [Orabug: 34358256]  
  - bpf: Introduce MEM_RDONLY flag (Hao Luo)  [Orabug: 34358256]  
  - bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL (Hao Luo)  [Orabug: 34358256]  
  - bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL (Hao Luo)  [Orabug: 34358256]  
  - bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL (Hao Luo)  [Orabug: 34358256]  
  - bpf: Introduce composable reg, ret and arg types. (Hao Luo)  [Orabug: 34358256]  
  - RDS/IB:  Fix RDS IB SRQ implementation and tune it (Hans Westgaard Ry)  [Orabug: 34351577]  
  - RDS/IB: Introduce bit_flag routines with memory-barrier for bit flags (Hans Westgaard Ry)  [Orabug: 34351577]  
  - rds: ib: Qualify RNR Retry Timer check with firmware version (Freddy Carrillo)  [Orabug: 34330921]  
  - mm/page_alloc: reuse tail struct pages for compound devmaps (Joao Martins)  [Orabug: 34319096]  
  - mm/sparse-vmemmap: improve memory savings for compound devmaps (Joao Martins)  [Orabug: 34319096]  
  - mm/sparse-vmemmap: refactor core of vmemmap_populate_basepages() to helper (Joao Martins)  [Orabug: 34319096]  
  - mm/sparse-vmemmap: add a pgmap argument to section activation (Joao Martins)  [Orabug: 34319096]  
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso)  [Orabug: 34247340]  {CVE-2022-32250} 
  - uek-rpm/ol/config-aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar)  [Orabug: 33832414]  
  - topology/sysfs: Hide PPIN on systems that do not support it. (Tony Luck)  [Orabug: 34018367]  
  - topology/sysfs: Add PPIN in sysfs under cpu topology (Tony Luck)  [Orabug: 34018367]  
  - topology/sysfs: Add format parameter to macro defining "show" functions for proc (Tony Luck)  [Orabug: 34018367]  
  - topology/sysfs: rework book and drawer topology ifdefery (Heiko Carstens)  [Orabug: 34018367]  
  - x86/cpu: Read/save PPIN MSR during initialization (Tony Luck)  [Orabug: 34018367]  
  - x86/cpu: X86_FEATURE_INTEL_PPIN finally has a CPUID bit (Tony Luck)  [Orabug: 34018367]  
  - x86/cpu: Merge Intel and AMD ppin_init() functions (Tony Luck)  [Orabug: 34018367]  
  - SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() (Trond Myklebust)  [Orabug: 34064432]  {CVE-2022-28893} 
  - selftests/bpf: add tests verifying unprivileged bpf behaviour (Alan Maguire)  [Orabug: 34088278]  
  - bpf: refine kernel.unprivileged_bpf_disabled behaviour (Alan Maguire)  [Orabug: 34088278]  
  - uek-rpm: Add modules to core rpm to allow kselftest rtnetlink tests pass (Somasundaram Krishnasamy)  [Orabug: 34124398]  
  - net/rds: Fix "use-after-free" warning (Gerd Rausch)  [Orabug: 34137931]  
  - assoc_array: Fix BUG_ON during garbage collect (Stephen Brennan)  [Orabug: 34162062]  
  - uek-rpm: Enable prerequisites for Secure Boot support (Eric Snowberg)  [Orabug: 34206120]  
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Jann Horn)  [Orabug: 34223453]  {CVE-2022-30594} 
  - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil)  [Orabug: 34242799]  
  - mm/memcontrol: export memcg->watermark via sysfs for v2 memcg (Kamalesh Babulal)  [Orabug: 34250986]  
  - rds: Include congested flag in rds_sock struct. (Rohit Nair)  [Orabug: 34261489]  
  - cpu/hotplug: Allow the CPU in CPU_UP_PREPARE state to be brought up again. (Longpeng(Mike))  [Orabug: 34271922]  
  - x86/xen: Allow to retry if cpu_initialize_context() failed. (Boris Ostrovsky)  [Orabug: 34271922]  
  - mstflint_access: Update driver code to v4.20.1-1 from Github (Qing Huang)  [Orabug: 34286146]  
  - net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch)  [Orabug: 34276062]  
  - net/rds: Don't force state RDS_CONN_RESETTING (Gerd Rausch)  [Orabug: 34276062]  
  - net/rds: Preserve essential connection state flags (Gerd Rausch)  [Orabug: 34276062]  
  - Revert "uek-rpm: Add crashkernel.default file" (John Donnelly)  [Orabug: 34280005]  
  - A/A Bonding: Add support for NETDEV_CHANGEADDR notifiers (Gerd Rausch)  [Orabug: 34285239]  
  - rdmaip: Flush ARP cache after address has been cleared (Gerd Rausch)  [Orabug: 34285239]


