# changelog

author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-9.96.5.el9uek]
changelog:
  - EDAC/igen6: Return the correct error type when not the MC owner (Jia He)  [Orabug: 34861606]  
  - apei/ghes: Use xchg_release() for updating new cache slot instead of cmpxchg() (Ard Biesheuvel)  [Orabug: 34861606]  
  - EDAC: Check for GHES preference in the chipset-specific EDAC drivers (Jia He)  [Orabug: 34861606]  
  - EDAC/ghes: Make ghes_edac a proper module (Jia He)  [Orabug: 34861606]  
  - EDAC/ghes: Prepare to make ghes_edac a proper module (Jia He)  [Orabug: 34861606]  
  - EDAC/ghes: Add a notifier for reporting memory errors (Jia He)  [Orabug: 34861606]  
  - EDAC/ghes: Unify CPER memory error location reporting (Shuai Xue)  [Orabug: 34861606]  
  - efi/cper: Add a cper_mem_err_status_str() to decode error description (Shuai Xue)  [Orabug: 34861606]  
  - efi/cper: Export several helpers for ghes_edac to use (Jia He)  [Orabug: 34861606]  
  - net/rds: Flip the default value of "rds_wq_strictly_ordered" (Gerd Rausch)  [Orabug: 35197634]  
  - uek-rds: Add csum to protect bcopy payload end-to-end (William Kucharski)  [Orabug: 33579925] [Orabug: 35206619]  
  - mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga)  [Orabug: 35054621]  
  - mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga)  [Orabug: 35054621]  
  - mm: fix VMA_BUG_ON_MM due to mmap_lock not held (Anthony Yznaga)  [Orabug: 35054621]  
  - mm: avoid early cow when copying ptes for MADV_DOEXEC (Anthony Yznaga)  [Orabug: 35054621]  
  - net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch)  [Orabug: 35094721]  
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM1733a (Saeed Mirzamohammadi)  [Orabug: 35145945]  
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM173X (Saeed Mirzamohammadi)  [Orabug: 35146608]  
  - rds: ib: Fix non-parenthetical mutex/semaphore use (Håkon Bugge)  [Orabug: 35155112]  
  - Revert "btrfs: free device in btrfs_close_devices for a single device filesystem" (Vijayendra Suman)  [Orabug: 35161535]


author: LUCI Bot <vijayendra.suman@oracle.com> [6.8.0-0.20240328.el9uek]
changelog:
  - sched/numa: Adds simple prctl for setting task's preferred node affinity. (chris hyser)  [Orabug: 36446412]  
  - sched/numa: Adds ability to over-ride a task's numa_preferred_nid. (chris hyser)  [Orabug: 36446412]  
  - Revert "mmc: core: Use mrq.sbc in close-ended ffu" (Thomas Tai)  [Orabug: 36446385]  
  - arm64: Minimize tlb flush due to vttbr writes on AmpereOne (Ganapatrao Kulkarni)  [Orabug: 36349787]  
  - uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36303819]  
  - KSPLICE: make sure the stack is zeroed. (Gregory Herrero)  [Orabug: 36155233]  
  - audit: Re-apply special optimizations (Håkon Bugge)  [Orabug: 36100150]  
  - Revert "audit: Apply special optimizations" (Håkon Bugge)  [Orabug: 36100150]  
  - hwmon: (opbmc) E6/AST2600 platform enabled (Jan Zdarek)  [Orabug: 36067105]  
  - audit: Apply special optimizations (Håkon Bugge)  [Orabug: 36038141]  
  - audit: Vary struct audit_entry alignment (Håkon Bugge)  [Orabug: 36038141]  
  - Consider inflight IO in io accounting for high latency devices (Gulam Mohamed)  [Orabug: 35922332]  
  - net/mlx5: E-Switch, Protect unloading driver while adding rules (Chris Mi)  [Orabug: 35811872]  
  - arm64: tools: cpucaps: add spare members (Mihai Carabas)  [Orabug: 35732996]  
  - uek_kabi: Add UEK_KABI_DEPRECATE_ENUM (Sherry Yang)  [Orabug: 35466488]  
  - Revert "vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR" (Anthony Yznaga)  [Orabug: 35370252]  
  - Revert "vfio/type1: revert "block on invalid vaddr"" (Anthony Yznaga)  [Orabug: 35370252]  
  - Revert "vfio/type1: revert "implement notify callback"" (Anthony Yznaga)  [Orabug: 35370252]  
  - Revert "vfio: revert "iommu driver notify callback"" (Anthony Yznaga)  [Orabug: 35370252]  
  - net/mlx5: Set up MR cache for the mlx5 driver (v6.3 and newer) (Qing Huang)  [Orabug: 35359445]  
  - debugfs: allow access blktrace trace files in lockdown mode (Junxiao Bi)  [Orabug: 35275016]  
  - mm, compaction: Skip all non-migratable pages during scan (Khalid Aziz)  [Orabug: 35261880]  
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM1733a (Saeed Mirzamohammadi)  [Orabug: 35170638]  
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM173X (Saeed Mirzamohammadi)  [Orabug: 35166414]  
  - ACPI: processor: idle: Disable ACPI C-state probing for xen hvm guest (Joe Jin)  [Orabug: 35132016]  
  - Update README with UEK Text Description (Somasundaram Krishnasamy)  [Orabug: 35084844]  
  - iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins)  [Orabug: 35018577]  
  - IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk)  [Orabug: 34997647]  
  - block: sysfs option to change ioticks granularity (Gulam Mohamed)  [Orabug: 34977355]  
  - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk)  [Orabug: 34944782]  
  - mptcp: UEK: disable mptcp protocol (Jack Vogel)  [Orabug: 34821289]  
  - IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair)   
  - RDMA/uverbs: restrack shared PDs (Sharath Srinivasan)  [Orabug: 34812519]  
  - x86: Ignore iommu=off for AMD cpus (Dave Kleikamp)  [Orabug: 34779071]  
  - Feature: Add cmdline param sched_uek=[preempt,wakeidle] (Libo Chen)  [Orabug: 34775543]  
  - perf/x86/intel: Hide Topdown metrics events if slots is not enumerated (Kan Liang)  [Orabug: 34771180]  
  - iommu/vt-d: set default value of INTEL_IOMMU_FLOPPY_WA to n (Harshit Mogalapalli)  [Orabug: 34724808]  
  - audit: annotate branch direction for audit_in_mask() (Ankur Arora)  [Orabug: 34544781]  
  - Revert "KVM: x86: Print error code in exception injection tracepoint iff valid" (Sherry Yang)  [Orabug: 34539457]  
  - uek-rpm: Enable IMA_APPRAISE_SB_BOOTPARAM (Eric Snowberg)  [Orabug: 34505310]  
  - integrity: Allow ima_appraise bootparam to be set when SB is enabled (Eric Snowberg)  [Orabug: 34505310]  
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 34393593]  
  - efi: enable CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT in config files (Mark Nicholson)  [Orabug: 34304810]  
  - efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode (David Howells)  [Orabug: 34304810]  
  - arm64: Allow locking down the kernel under EFI secure boot (Seth Forshee)  [Orabug: 34304810]  
  - efi: Lock down the kernel if booted in secure boot mode (David Howells)  [Orabug: 34304810]  
  - security: lockdown: expose a hook to lock the kernel down (Jeremy Cline)  [Orabug: 34304810]  
  - net/mlx4: Increase num_srq in low_mem_profile (Dave Kleikamp)  [Orabug: 34161492]  
  - kvm/x86: Inherit userspace's core scheduling cookie (Boris Ostrovsky)  [Orabug: 34152329]  
  - sched: Add interface for copying core scheduling cookie between two tasks (Boris Ostrovsky)  [Orabug: 34152329]  
  - add kernel param to pre-allocate NICs (Somasundaram Krishnasamy)  [Orabug: 30962711] [Orabug: 34074776]  
  - selftests: add define for F_SEAL_FUTURE_WRITE (Larry Bassel)  [Orabug: 33891077]  
  - Revert "selftests/net: add support for PF_RDS sockets" (William Kucharski)  [Orabug: 33863259]  
  - Revert "selftests/net: add zerocopy support for PF_RDS test case" (William Kucharski)  [Orabug: 33863259]  
  - Revert "selftests/net: revert the zerocopy Rx path for PF_RDS" (William Kucharski)  [Orabug: 33863259]  
  - Revert "selftests/net: reap zerocopy completions passed up as ancillary data." (William Kucharski)  [Orabug: 33863259]  
  - sched: Put vcpu preemption idle check into a SCHED_FEAT. (chris hyser)  [Orabug: 33753125]  
  - RDMA/rxe: Update default value of RXE_MAX_PDN (Rao Shoaib)  [Orabug: 33676596] [Orabug: 33676540] [Orabug: 33676540]  
  - fs/dcache: add trace points for negative dentry pruning (Gautham Ananthakrishna)  [Orabug: 33468829]  
  - fs/dcache: remove global pool for negative dentry percpu counters (Gautham Ananthakrishna)  [Orabug: 33468829]  
  - fs/dcache: enforce a hard limit on the negative dentry count (Gautham Ananthakrishna)  [Orabug: 33468829]  
  - fs/dcache: Estimate the number of negative dentries to prune per filesystem (Gautham Ananthakrishna)  [Orabug: 33468829]  
  - fs/dcache: change name and granularity of negative dentry sysctl parameter (Gautham Ananthakrishna)  [Orabug: 33468829]  
  - fs/dcache: schedule only one instance of negative dentry shrinker (Gautham Ananthakrishna)  [Orabug: 33468829]  
  - fs/dcache: correct the usage of static_key for negative dentry (Gautham Ananthakrishna)  [Orabug: 33468829]  
  - fs/dcache: Spread negative dentry pruning across multiple CPUs (Waiman Long)  [Orabug: 33468829]  
  - fs/dcache: Enable automatic pruning of negative dentries (Waiman Long)  [Orabug: 33468829]  
  - fs/dcache: Add sysctl parameter neg-dentry-pc as a soft limit on negative dentries (Waiman Long)  [Orabug: 33468829]  
  - net/mlx5: Initialize nvec based on "num_possible_cpus()" (Gerd Rausch)  [Orabug: 33450667]  
  - net/mlx5: E-Switch, change VFs default admin state to auto in switchdev (Maor Dickman)  [Orabug: 33447083] [Orabug: 33447083]  
  - arm64: Kconfig: enable MADV_DOEXEC functionality (Anthony Yznaga)  [Orabug: 33428539]  
  - video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy)  [Orabug: 33427957]  
  - net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33352736]  
  - xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)  [Orabug: 33298423]  
  - tpm: Allow locality 2 to be set when initializing the TPM for Secure Launch (Ross Philipson)  [Orabug: 33297039]  
  - x86: Secure Launch late initcall platform module (Daniel P. Smith)  [Orabug: 33297039]  
  - reboot: Secure Launch SEXIT support on reboot paths (Ross Philipson)  [Orabug: 33297039]  
  - kexec: Secure Launch kexec SEXIT support (Ross Philipson)  [Orabug: 33297039]  
  - x86: Secure Launch SMP bringup support (Ross Philipson)  [Orabug: 33297039]  
  - x86: Secure Launch kernel late boot stub (Ross Philipson)  [Orabug: 33297039]  
  - x86: Secure Launch kernel early boot stub (Ross Philipson)  [Orabug: 33297039]  
  - x86: Add early SHA support for Secure Launch early measurements (Daniel P. Smith)  [Orabug: 33297039]  
  - x86: Secure Launch main header file (Ross Philipson)  [Orabug: 33297039]  
  - x86: Secure Launch Resource Table header file (Ross Philipson)  [Orabug: 33297039]  
  - x86: Secure Launch Kconfig (Ross Philipson)  [Orabug: 33297039]  
  - Documentation/x86: Secure Launch kernel documentation (Ross Philipson)  [Orabug: 33297039]  
  - x86/boot: Place kernel_info at a fixed offset (Arvind Sankar)  [Orabug: 33297039]  
  - IMA: Import key for IMA (Konrad Rzeszutek Wilk)  [Orabug: 33215027]  
  - A/A Bonding: Add support for user-space "Resilient RDMAIP" (Gerd Rausch)  [Orabug: 33150457] [Orabug: 33150452] [Orabug: 33150452] [Orabug: 33150452]  
  - x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817178]  
  - RDMA/rxe: ipc_bench fails with SoftRoCE plus shpd (Rao Shoaib)  [Orabug: 32716141] [Orabug: 32716152]  
  - PCI: hotplug: Add module parameter to allow user control of LEDs (Thomas Tai)  [Orabug: 32556978]  
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422656]  
  - mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga)  [Orabug: 32387875]  
  - mm: avoid heavy swap lock contention when unmapping with padata (Anthony Yznaga)  [Orabug: 32387875]  
  - mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga)  [Orabug: 32387875]  
  - exec, elf: use already allocated notes data in reserve_va_range() (Anthony Yznaga)  [Orabug: 32387875]  
  - mm: madv_doexec_flag sysctl (Steve Sistare)  [Orabug: 32387875]  
  - mm: introduce MADV_DOEXEC (Steve Sistare)  [Orabug: 32387875]  
  - exec, elf: require opt-in for accepting preserved mem (Anthony Yznaga)  [Orabug: 32387875]  
  - mm: introduce VM_EXEC_KEEP (Steve Sistare)  [Orabug: 32387875]  
  - mm: prepare to avoid early cow when copying ptes for MADV_DOEXEC (Anthony Yznaga)  [Orabug: 32387875]  
  - mm: fail exec if stack expansion will overlap another vma (Anthony Yznaga)  [Orabug: 32387875]  
  - mm: do not assume only the stack vma exists in setup_arg_pages() (Anthony Yznaga)  [Orabug: 32387875]  
  - partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302134]  
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32197587]  
  - IB/mlx4: disable CQ time stamping (aru kolappan)  [Orabug: 33660399] [Orabug: 32055628]  
  - kbuild: Convert stack frame size larger than warning to error. (Somasundaram Krishnasamy)  [Orabug: 31992034]  
  - vfio/type1: ease mmap_lock writer contention by caching locked_vm (Daniel Jordan)  [Orabug: 31771399]  
  - vfio/type1: parallelize vfio_pin_map_dma() (Daniel Jordan)  [Orabug: 31771399]  
  - vfio/type1: refactor dma map removal (Daniel Jordan)  [Orabug: 31771399]  
  - vfio/type1: pass mm to vfio_pin_pages_remote() (Daniel Jordan)  [Orabug: 31771399]  
  - padata: add undo support (Daniel Jordan)  [Orabug: 31771399]  
  - padata, lockdep: detect deadlocks between main and helper threads (Daniel Jordan)  [Orabug: 31771399]  
  - padata: return first error code from a multithreaded job (Daniel Jordan)  [Orabug: 31771399]  
  - padata: remove __init from multithreading functions (Daniel Jordan)  [Orabug: 31771399]  
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688618]  
  - RDMA/rxe: Enhance Soft Roce to support Oracle proprietary shared PD extension (Rao Shoaib)  [Orabug: 31094524] [Orabug: 33672862] [Orabug: 31094522] [Orabug: 31094522] [Orabug: 31094522] [Orabug: 31094522] [Orabug: 31094522] [Orabug: 31094522]  
  - xen/ovmapi: distribute the .ko in the core rpm (Mark Nicholson)  [Orabug: 30809043]  
  - xen/ovmapi: Build OVM guest messaging driver (Jonah Palmer)  [Orabug: 30809043]  
  - xen/ovmapi: whitelist more caches (Boris Ostrovsky)  [Orabug: 30809043]  
  - xen/ovmapi: whitelist name_cache for usercopy (Jacob Wen)  [Orabug: 30809043]  
  - xen/ovmapi: Port ovmapi drivers from uek5 to uek6 (Boris Ostrovsky)  [Orabug: 30809043]  
  - KEYS: Increase system_extra_certificate size to 8192 bytes (Stephen Brennan)  [Orabug: 30329032]  
  - KEYS: Insert incompressible bytes to reserve space in bzImage (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Support for inserting a certificate into x86 bzImage (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Add ELF class-independent certificate insertion support (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Print insert-sys-cert information to stdout instead of stderr (Mehmet Kayaalp)  [Orabug: 30329032]  
  - x86/kABI: Increase sizes of feature/bug arrays in case we need more CPU bits. (Konrad Rzeszutek Wilk)  [Orabug: 30318342]  
  - mm: Allow userspace to reserve VA range for use by userspace only (Khalid Aziz)  [Orabug: 30135230]  
  - iscsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Joe Jin)  [Orabug: 30023361]  
  - ksplice: clear randomized kernel stack offset upon entering the freezer (Julian Pidancet)  [Orabug: 29961704]  
  - ksplice: Force unwinding the stack of TASK_FREEZABLE tasks. (Julian Pidancet)  [Orabug: 29961704]  
  - vmlinux.lds: account for .init.bss.* .init.data.* sections when building with -fdata-sections. (Quentin Casasnovas)  [Orabug: 29961704] [Orabug: 29961704]  
  - ksplice: Enable CONFIG_KSPLICE. (Alex Thorlton)  [Orabug: 29961704] [Orabug: 29961704]  
  - ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]  
  - ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]  
  - ksplice: Disable ksplice KBUILD_CFLAGS for KVM nVHE on aarch64. (Victor Erminpour)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]  
  - ksplice: aarch64 use ksplice friendly KBUILD_CFLAGS (Tom Saeger)  [Orabug: 27649476] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]  
  - ksplice: add sysctls for determining Ksplice features. (Victor Erminpour)  [Orabug: 26537364] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]  
  - ksplice: clear the stack before going in the freezer. (Victor Erminpour)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]  
  - ksplice: Provide an interface to freeze tasks (Victor Erminpour)  [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704] [Orabug: 29961704]  
  - mISDN: Add __exit declaration for module exit function (Somasundaram Krishnasamy)  [Orabug: 29903374]  
  - ctf: work around binutils bug in ctf_link_add_cu_mapping() (Nick Alcock)  [Orabug: 29891866]  
  - ctf: fix up pathnames of built-in modules (Nick Alcock)  [Orabug: 29891866]  
  - module.builtin.ranges: enable by default (Kris Van Hees)  [Orabug: 29891866]  
  - uek-rpm: CTF for OL9 (Nick Alcock)  [Orabug: 29891866]  
  - uek-rpm: CTF for OL8 (Nick Alcock)  [Orabug: 29891866]  
  - ctf: generate CTF information for the kernel (Nick Alcock)  [Orabug: 29891866]  
  - build: add a simple iterator over modules.builtin.objs (Nick Alcock)  [Orabug: 29891866]  
  - module: add install target for modules.builtin.ranges (Kris Van Hees)  [Orabug: 29891866]  
  - kbuild: generate modules.builtin.ranges when linking the kernel (Kris Van Hees)  [Orabug: 29891866]  
  - module: script to generate offset ranges for builtin modules (Kris Van Hees)  [Orabug: 29891866]  
  - kbuild: generate a linker map for vmlinux.o (Kris Van Hees)  [Orabug: 29891866]  
  - module: add CONFIG_BUILTIN_RANGES option (Kris Van Hees)  [Orabug: 29891866]  
  - kbuild: add modules.builtin.objs (Luis Chamberlain)  [Orabug: 29891866]  
  - net: enable RPS on vlan devices (Allen Pais)  [Orabug: 29751757]  
  - x86/simplefb: simplefb was broken on UEFI mode Oracle and HP system, skip VIDEO_TYPE_EFI (Ethan Zhao)  [Orabug: 29746425]  
  - sysfs: replace WARN() with pr_debug when sysfs_remove_group() failed (Ethan Zhao)  [Orabug: 29746401]  
  - ocfs2: make 'buffered' as the default coherency option (Wengang Wang)  [Orabug: 29745551]  
  - perf tools: add --sym-lookup arg to enable symbol lookup in hugepage shm segment (Mike Kravetz)  [Orabug: 29745533]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.h (Darren Kenny)  [Orabug: 29719693]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.c (Darren Kenny)  [Orabug: 29719693]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/lapic.c (Darren Kenny)  [Orabug: 29719693]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mmu/mmu.c (Darren Kenny)  [Orabug: 29719693]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mtrr.c (Darren Kenny)  [Orabug: 29719693]  
  - kvm: fix possible spectre gadgets in virt/kvm/irqchip.c (Darren Kenny)  [Orabug: 29719693]  
  - ocfs2: Suppress the error message from being printed in ocfs2_rename (Xiaowei.Hu)  [Orabug: 29708624]  
  - kernel: VirtBox workaround for dynamically allocated text (Mike Kravetz)  [Orabug: 29708488]  
  - revert commit ff8fb335221e2c446b0d4cbea26be371fd2feb64 (Shuning Zhang)  [Orabug: 29708297]  
  - ocfs2: fix a performance issue with synced buffer io (Ryan Ding)   
  - ocfs2: call ocfs2_abort when journal abort (Ryan Ding)  [Orabug: 29708259]  
  - ocfs2: Tighten free bit calculation in the global bitmap (Sunil Mushran)  [Orabug: 29708168]  
  - arm64: do not place BUG() file name in generic section (Rob Gardner)  [Orabug: 29708067]  
  - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk)  [Orabug: 29689986]  
  - arm64: Extend erratum 27456 workaround to ThunderX 83xx (Allen Pais)  [Orabug: 29538492]  
  - Ignore hot plug events when force powering off a device (James Puthukattukaran)  [Orabug: 35015760]  
  - Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran)  [Orabug: 34719457]  
  - mlx5_core: set module param expose_pf_phys_port_name to true (Sharath Srinivasan)  [Orabug: 34018148]  
  - net/mlx5: Implement Oracle-only solution for mlx device names (Mikhael Goikhman)  [Orabug: 33382152] [Orabug: 33382152] [Orabug: 33382152] [Orabug: 33382152]  
  - x86/clear_page: add alternative for clear_page_clzero() (Ankur Arora)  [Orabug: 33580789]  
  - x86/asm: add clzero based page clearing (Ankur Arora)  [Orabug: 33580789]  
  - x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models (Ankur Arora)  [Orabug: 33580789]  
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Icelakex (Ankur Arora)  [Orabug: 32124427]  
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Broadwellx (Ankur Arora)  [Orabug: 32124427]  
  - mm, clear_huge_page: use clear_page_uncached() for gigantic pages (Ankur Arora)  [Orabug: 32124427]  
  - x86/clear_page: add clear_page_uncached() (Ankur Arora)  [Orabug: 32124427]  
  - x86/asm: add clear_page_nt() (Ankur Arora)  [Orabug: 32124427]  
  - perf bench: add memset_movnti() (Ankur Arora)  [Orabug: 32124427]  
  - x86/asm: add memset_movnti() (Ankur Arora)  [Orabug: 32124427]  
  - x86/cpuid: add X86_FEATURE_NT_GOOD (Ankur Arora)  [Orabug: 32124427]  
  - parfait: Speculative Side Channel defect groups in lib/hexdump.c (Anjali Kulkarni)  [Orabug: 30092081]  
  - Parfait fixes for defects found by parfait-tools (Anjali Kulkarni)  [Orabug: 29962202]  
  - ocfs2/trivial: Limit unaligned aio+dio write messages to once per day (Sunil Mushran)  [Orabug: 29708240]  
  - ocfs2/trivial: Print message indicating unaligned aio+dio write (Sunil Mushran)  [Orabug: 29708202]  
  - uek-rpm: Add mstflint_access.ko module to core list (Sharath Srinivasan)  [Orabug: 35533235] [Orabug: 35533235]  
  - mstflint_access: Update driver code to v4.20.1-1 from Github (Qing Huang)  [Orabug: 34286133]  
  - mstflint_access: Enable the mstflint_access module (Aron Silverton)  [Orabug: 30997871] [Orabug: 33186470]  
  - mstflint_access: Update driver code to v4.18.0-1 from Github (Sharath Srinivasan)  [Orabug: 33186470]  
  - mstflint_access: Update driver code to v4.17.0-1 from Github (Sharath Srinivasan)  [Orabug: 33186470]  
  - mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31682337] [Orabug: 31682212]  
  - mstflint_access: Add support for secure boot access to Mellanox HCAs (Adham Masarwah)  [Orabug: 30997871] [Orabug: 30997914] [Orabug: 30997914] [Orabug: 30997914]  
  - Revert "crypto: rsa - flag instantiations as FIPS compliant" (Saeed Mirzamohammadi)  [Orabug: 35054662]  
  - crypto: tcrypt - disable ffdhe tests for key sizes (Saeed Mirzamohammadi)  [Orabug: 35738789]  
  - uek-rpm: make CRYPTO_ECDSA builtin (Saeed Mirzamohammadi)  [Orabug: 35230217]  
  - crypto: allow ECDH and ECDSA algorithms in FIPS (Saeed Mirzamohammadi)  [Orabug: 35230217]  
  - crypto: drbg - oversampling of Jitter RNG (Saeed Mirzamohammadi)  [Orabug: 35141695]  
  - crypto: tcrypt - KAT for ffdhe* algorithms (Saeed Mirzamohammadi)  [Orabug: 35141695]  
  - crypto: panic on PCT failure for dh and ecdh (Saeed Mirzamohammadi)  [Orabug: 34979491]  
  - crypto: seqiv - flag instantiations as FIPS compliant (Vladis Dronov)  [Orabug: 34711432]  
  - crypto: rsa - flag instantiations as FIPS compliant (Saeed Mirzamohammadi)  [Orabug: 34711432]  
  - crypto: ecdh - implement FIPS PCT (Nicolai Stange)  [Orabug: 34711432]  
  - crypto: dh - implement FIPS PCT (Nicolai Stange)  [Orabug: 34711432]  
  - crypto: ecdh - disallow plain "ecdh" usage in FIPS mode (Saeed Mirzamohammadi)  [Orabug: 34711432]  
  - random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli)  [Orabug: 34596781]  
  - random: Add FIPS 140-3 entropy requirements (Saeed Mirzamohammadi)  [Orabug: 34584657]  
  - random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32387719]  
  - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 36350478]  
  - net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248458]  
  - net/rds: Supporting SIOCOUTQ to read pending sends (Devesh Sharma)  [Orabug: 35595992]  
  - rds: Add count for ready receive cache (Hans Westgaard Ry)  [Orabug: 36108119]  
  - rds: Handle pages in use when purging an RDS Message (Håkon Bugge)  [Orabug: 36054373]  
  - rds: ib: Consolidate per-cpu free list for siblings (Håkon Bugge)  [Orabug: 35904651]  
  - rds: ib: Make sure per-cpu recv cache structure is cache-line aligned (Håkon Bugge)  [Orabug: 35904651]  
  - rds: Remove RDS FMR Code (William Kucharski)  [Orabug: 35445340] [Orabug: 35445340]  
  - rds: ib: Make changes to fr_state global visible (Håkon Bugge)  [Orabug: 35893888]  
  - net/rds: Fix improper locking of "rs_recv_lock" (Greg Jumper)  [Orabug: 35849143]  
  - rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski)  [Orabug: 36060761]  
  - net/rds: Always cancel heartbeat worker thread during conn destroy (Sharath Srinivasan)  [Orabug: 35954530]  
  - net/rds: Use proper peer port number even when not connected (Greg Jumper)  [Orabug: 35896264]  
  - rds: Put back pages on the CPU that allocated them (Håkon Bugge)  [Orabug: 35768362]  
  - rds: Provision to allow all trace points at module load time (Arumugam Kolappan)  [Orabug: 35916076]  
  - rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan)  [Orabug: 35926163]  
  - net/rds: report pending-messages count in RDS_INQ response (Devesh Sharma)  [Orabug: 35596049]  
  - rds: Add proper refcnt when an RDS MR references an RDS Socket (Håkon Bugge)  [Orabug: 35836948]  
  - Revert "net/rds: Change c_net field to possible_net_t" (Greg Jumper)  [Orabug: 35811116]  
  - Revert "net/rds: Add basic support for network namespaces" (Greg Jumper)  [Orabug: 35811116]  
  - Revert "net/rds: Use per-namespace bind hash tables" (Greg Jumper)  [Orabug: 35811116]  
  - Revert "net/rds: Use per-namespace connection hash tables" (Greg Jumper)  [Orabug: 35811116]  
  - Revert "net/rds: Monitor socket congestion per network namespace" (Greg Jumper)  [Orabug: 35811116]  
  - Revert "net/rds: Track "rds" module statistics per network namespace" (Greg Jumper)  [Orabug: 35811116] [Orabug: 35811116]  
  - Revert "net/rds: Track "rds_tcp" module statistics per network namespace" (Greg Jumper)  [Orabug: 35811116]  
  - Revert "net/rds: Use per-namespace connection lists in "rds_tcp"" (Greg Jumper)  [Orabug: 35811116]  
  - Revert "net/rds: Use per-namespace loopback connection lists" (Greg Jumper)  [Orabug: 35811116]  
  - Revert "net/rds: Restrict use of RDS/IB to the initial network namespace" (Greg Jumper)  [Orabug: 35811116]  
  - rds/ib: Fix lfstack routines (Hans Westgaard Ry)  [Orabug: 35836155]  
  - rds: lb: Initialize t_type for loop-back transport to avoid ambiguity (Håkon Bugge)  [Orabug: 35704658]  
  - rds: ib: Tune ring_mid_permille on BM machines (Håkon Bugge)  [Orabug: 35349755]  
  - rds: ib: Make ring_{low,mid} parametrizable (Håkon Bugge)  [Orabug: 35349755]  
  - rds: ib: Attempt to refill recv when send lock is busy (Håkon Bugge)  [Orabug: 35349755]  
  - net/rds: Add rds_ib_ring_mid() (Ankur Arora)  [Orabug: 35349755]  
  - rds: Avoid priority inversion whilst queuing recv worker (Håkon Bugge)  [Orabug: 35349755]  
  - net/rds: dont expose kernel address to usercopy (Devesh Sharma)  [Orabug: 35648586]  
  - net/rds: Perform pre-rdma_accept address sanity checks (Gerd Rausch)  [Orabug: 35663491]  
  - net/rds: Restrict use of RDS/IB to the initial network namespace (Greg Jumper)  [Orabug: 29822296]  
  - net/rds: Use per-namespace loopback connection lists (Greg Jumper)  [Orabug: 29822296]  
  - net/rds: Use per-namespace connection lists in "rds_tcp" (Ka-Cheong Poon)  [Orabug: 29822296]  
  - net/rds: Track "rds_tcp" module statistics per network namespace (Mark Haywood)  [Orabug: 29822296]  
  - net/rds: Track "rds" module statistics per network namespace (Rao Shoaib)  [Orabug: 29822296]  
  - net/rds: Monitor socket congestion per network namespace (Mark Haywood)  [Orabug: 29822296]  
  - net/rds: Use per-namespace connection hash tables (Mark Haywood)  [Orabug: 29822296] [Orabug: 29822296]  
  - net/rds: Use per-namespace bind hash tables (Mark Haywood)  [Orabug: 29822296]  
  - net/rds: Add basic support for network namespaces (Mark Haywood)  [Orabug: 29822296]  
  - net/rds: Change c_net field to possible_net_t (Mark Haywood)  [Orabug: 29822296]  
  - RDS/RDMA: No need to set rdma permissions on fastreg QP (Devesh Sharma)  [Orabug: 34908960]  
  - net/rds: Introduce RDS-INQ feature to RDS protocol (Devesh Sharma)  [Orabug: 34576976]  
  - net/rds: Avoid calling pci_irq_vector() when system goes down (Gerd Rausch)  [Orabug: 35048871]  
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35713694]  {CVE-2023-22024} 
  - net/rds: Avoid unpin_user_pages_dirty_lock() in tasklets (Gerd Rausch)  [Orabug: 35766142]  
  - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood)  [Orabug: 35693132]  
  - net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch)  [Orabug: 35637601]  
  - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch)  [Orabug: 35510148]  
  - rds/ib: Fix ib_rx_total_frags while freeing frags (Praveen Kumar Kannoju)  [Orabug: 35465978]  
  - net/rds: Ignore rds_send_hb()'s return value (Sharath Srinivasan)  [Orabug: 35435707]  
  - net/rds: Use monotonic ktime_get_seconds() in rds_hb_worker() (Sharath Srinivasan)  [Orabug: 35435707]  
  - net/rds: Fix race in rds_hb_worker() when reading cp->cp_hb_start (Sharath Srinivasan)  [Orabug: 35435707]  
  - net/rds: Fix "hb timeout" race by setting cp_hb_start before rds_send_hb() (Sharath Srinivasan)  [Orabug: 35435707]  
  - rds: Add time_spent and payload info for send_cqe handler (Rohit Nair)  [Orabug: 35302532]  
  - net/rds: Fix copy&paste error (Gerd Rausch)  [Orabug: 35416671]  
  - Revert "rds: ib: Fix non-parenthetical mutex/semaphore use" (Håkon Bugge)  [Orabug: 35377395]  
  - rds: Fix incorrect error pointer reference (William Kucharski)  [Orabug: 35240782]  
  - net/rds: use appropriate return code while dropping a connection (Praveen Kumar Kannoju)  [Orabug: 34759519]  
  - net/rds: Adding TCP stats for TCP keepalive timeout (Nagappan Ramasamy Palaniappan)  [Orabug: 35185295]  
  - rds: slight code cleanup of RDS checksum code (William Kucharski)  [Orabug: 35262448] [Orabug: 35262448] [Orabug: 35262448]  
  - net/rds: use appropriate reason while dropping a connection (Praveen Kumar Kannoju)  [Orabug: 34759416]  
  - Revert "add NETFILTER suppport" (Gerd Rausch)  [Orabug: 34849746]  
  - net/rds: Check that "tc->t_rtn" has been assigned already (Gerd Rausch)  [Orabug: 35236332]  
  - rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan)  [Orabug: 35146759]  
  - uek-rds: Add csum to protect bcopy payload end-to-end (William Kucharski)  [Orabug: 33579925] [Orabug: 33579925] [Orabug: 33579925]  
  - net/rds: Flip the default value of "rds_wq_strictly_ordered" (Gerd Rausch)  [Orabug: 35197633]  
  - net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch)  [Orabug: 35074104]  
  - rds: ib: Fix non-parenthetical mutex/semaphore use (Håkon Bugge)  [Orabug: 35151328]  
  - rds: ib: Destroy fastreg resources correctly (Håkon Bugge)  [Orabug: 35131952]  
  - rds: ib: Use one-bit booleans in struct rds_ib_device and keep them adjacent (Håkon Bugge)  [Orabug: 35140489]  
  - RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch)  [Orabug: 35059483]  
  - net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch)  [Orabug: 35032839]  
  - net/rds: Delegate fan-out to a background worker (Gerd Rausch)  [Orabug: 35032606]  
  - net/rds: Split send & receive vectors again (Gerd Rausch)  [Orabug: 33532457]  
  - drivers: base: cacheinfo: export symbol "get_cpu_cacheinfo" (Gerd Rausch)  [Orabug: 33532457]  
  - IB/mlx4: Implement backend callback for "ib_get_vector_irqn" (Gerd Rausch)  [Orabug: 33509431]  
  - net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Add "preferred_cpu" option to "rds_rdma.ko" (Gerd Rausch)  [Orabug: 33440592]  
  - net/mlx5: Add new verb "ib_get_vector_irqn" (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Use the same vector for send & receive (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440592]  
  - net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan)  [Orabug: 34864407]  
  - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Håkon Bugge)  [Orabug: 33196170]  
  - rds: ib: Add FRWR related statistics counters (Håkon Bugge)  [Orabug: 33196170]  
  - rds: ib: Make sure messages that errors out also get unmapped (Håkon Bugge)  [Orabug: 35015597]  
  - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch)  [Orabug: 34979165]  
  - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch)  [Orabug: 34607841]  
  - Revert "RDS: TCP: Track peer's connection generation number" (Gerd Rausch)  [Orabug: 34514631]  
  - net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch)  [Orabug: 34314501]  
  - net/rds: Kick-start TCP receiver after accept (Gerd Rausch)  [Orabug: 34600814]  
  - net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch)  [Orabug: 34560699]  
  - net/rds: Encode cp_index in TCP source port (Gerd Rausch)  [Orabug: 34556035]  
  - rds: ib: Avoid tear-down of caches unless already initialized (Håkon Bugge)  [Orabug: 34831784]  
  - Revert "rds: ib: Enable FC by default" (Håkon Bugge)  [Orabug: 34964348]  
  - rds: ib: Fix leaked MRs during kexec (Håkon Bugge)  [Orabug: 34892081]  
  - rds: ib: Remove unnecessary call to rds_ib_ring_unalloc (Håkon Bugge)  [Orabug: 34768817]  
  - rds: ib: Remove unnecessary i_flowctl term from conditions (Håkon Bugge)  [Orabug: 34768817]  
  - rds: ib: Remove unnesesarry variable initialization (Håkon Bugge)  [Orabug: 34768817]  
  - rds: ib: Make sure receives are posted before connection is up (Håkon Bugge)  [Orabug: 34768817]  
  - rds: ib: Fix the Retry counter dependency on RNR NAK Retry counter (Håkon Bugge)  [Orabug: 34768817]  
  - rds: Deduct one credit on the passive side (Håkon Bugge)  [Orabug: 34768817]  
  - rds: Use all eight bits for credit updates (Håkon Bugge)  [Orabug: 34768817]  
  - RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma)  [Orabug: 34844138]  
  - rds: ib: Enable FC by default (Håkon Bugge)  [Orabug: 33930632]  
  - net/rds: Quiesce heartbeat worker in rds_conn_path_destroy() (Sharath Srinivasan)  [Orabug: 32540203]  
  - net/rds: Add support for tracing RDS heartbeats (Sharath Srinivasan)  [Orabug: 32540203]  
  - net/rds: Enable RDS heartbeat by default (Sharath Srinivasan)  [Orabug: 32540203]  
  - rds: ib: Fix incorrect error handling during QP creation (Håkon Bugge)  [Orabug: 34857201]  
  - rds: Remove the cp_rdsinfo_pending flag (Håkon Bugge)  [Orabug: 34649023]  
  - rds: ib: Fix cleanup of rds_ib_cache_gc_worker (Håkon Bugge)  [Orabug: 34806050]  
  - uapi: Fix [rs]cq_vector data types in rds[6]_info_rdma_connection (Mark Haywood)  [Orabug: 34734344]  
  - uapi: Fix congested flag type in rds[6]_info_socket (Mark Haywood)  [Orabug: 34734344]  
  - net/rds: drop rs_transport module reference count on error (Gerd Rausch)  [Orabug: 34496107]  
  - net/rds: rds_tcp_accept_one ought to not discard messages (Gerd Rausch)  [Orabug: 34485138]  
  - RDS/IB Fix allocation warning (Hans Westgaard Ry)  [Orabug: 33792831]  
  - net/rds: Send congestion map updates only via path zero (Anand Khoje)  [Orabug: 34167509]  
  - Revert "RDS/IB: Fix RDS IB SRQ implementation and tune it" (Hans Westgaard Ry)  [Orabug: 34662613] [Orabug: 34662613] [Orabug: 34662613]  
  - rds: cong: Make rds_cong_wait an array to reduce lock contention (Håkon Bugge)  [Orabug: 34574092]  
  - rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Håkon Bugge)  [Orabug: 34574092]  
  - rds: ib: Fix lfstack to acquire visibility to list head (Håkon Bugge)  [Orabug: 34483327]  
  - rds: ib: Add preemption control when using per-cpu variables (Håkon Bugge)  [Orabug: 33847652]  
  - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry)  [Orabug: 34522570]  {CVE-2022-21385} 
  - Revert "net/rds: Connect TCP backends deterministically" (Gerd Rausch)  [Orabug: 34476557]  
  - rds/ib: handle posted ACK during connection shutdown (Rohit Nair)  [Orabug: 34465806]  
  - rds/ib: reap tx completions during connection shutdown (Rohit Nair)  [Orabug: 34465806]  
  - rds/rdma: destroy CQs during user initiated rds connection resets (Rohit Nair)  [Orabug: 34414233]  
  - net/rds: Connect TCP backends deterministically (Gerd Rausch)  [Orabug: 32422417]  
  - rds: ib: Simplify ib_ring and use atomic ops (Håkon Bugge)  [Orabug: 34137460]  
  - net/rds : Adding support to print SCQ and RCQ completion vectors in rds-info. (Anand Khoje)  [Orabug: 34077223]  
  - rds/rdma: correctly assign the dest qp num in rds ib connection (Rohit Nair)  [Orabug: 34429467]  
  - net/rds: Fix a NULL dereference in rds_tcp_accept_one() (Harshit Mogalapalli)  [Orabug: 34371883]  
  - RDS/IB: Fix RDS IB SRQ implementation and tune it (Hans Westgaard Ry)  [Orabug: 28388725]  
  - RDS/IB: Introduce bit_flag routines with memory-barrier for bit flags (Hans Westgaard Ry)  [Orabug: 28388725]  
  - rds: ib: Qualify RNR Retry Timer check with firmware version (Freddy Carrillo)  [Orabug: 34330921] [Orabug: 34330920]  
  - net/rds: Fix "use-after-free" warning (Gerd Rausch)  [Orabug: 34237786]  
  - rds: Include congested flag in rds_sock struct. (Rohit Nair)  [Orabug: 34261488]  
  - net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch)  [Orabug: 34039068]  
  - net/rds: Don't force state RDS_CONN_RESETTING (Gerd Rausch)  [Orabug: 34039068]  
  - net/rds: Preserve essential connection state flags (Gerd Rausch)  [Orabug: 34039068]  
  - net/rds: Delayed DR_SOCK_CANCEL (Gerd Rausch)  [Orabug: 34088080]  
  - rds: ib: INFO: trying to register non-static key during rmmod (Freddy Carrillo)  [Orabug: 34106049]  
  - rds: ib: Initialize SG table properly (Håkon Bugge)  [Orabug: 34031876]  
  - rds: Fix incorrect initialization order (Håkon Bugge)  [Orabug: 33923370]  
  - net/rds: Fix math on error code (Freddy Carrillo)  [Orabug: 33974711]  
  - net/rds: Use "unpin_user_page" as "pin_user_pages" counterpart (Gerd Rausch)  [Orabug: 33974872]  
  - rds: ib: Fix racy credit tracepoints (Håkon Bugge)  [Orabug: 33975590]  
  - rds/ib: Resize CQ if send-/recv-ring-size are changed (Hans Westgaard Ry)  [Orabug: 33940493]  
  - rds: ib: Incorporate the stat counter "ib_rdma_flush_mr_pool_avoided" in the structure "rds_ib_stat_names" (Praveen Kumar Kannoju)  [Orabug: 33742434]  
  - rds/ib: Kernel change to extend rds-info functionality (Rohit Nair)  [Orabug: 33821336]  
  - rds: ib: Make selection of completion_vector QoS aware (Håkon Bugge)  [Orabug: 33845916]  
  - rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju)  [Orabug: 33619952]  
  - net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan)  [Orabug: 33585475] [Orabug: 33585506]  
  - net/rds: Fix memory leak in __rds_conn_create() on alloc_ordered_workqueue fail (Freddy Carrillo)  [Orabug: 33821538]  
  - rds: ib: fix non-determinism when comp_vector is zero (Håkon Bugge)  [Orabug: 33679626] [Orabug: 33615757]  
  - net/rds: Don't pummel the subnet-manager (Gerd Rausch)  [Orabug: 33656818] [Orabug: 33589564]  
  - rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug: 33652502] [Orabug: 33652501]  
  - RDS/IB: Fix error when trying to unallocate ring buffers (Hans Westgaard Ry)  [Orabug: 33668686] [Orabug: 33620349]  
  - rds: ib: Ack seq not always received in monotonic increasing order (Håkon Bugge)  [Orabug: 33640441] [Orabug: 33620418]  
  - uek-rpm: Enable RDS for LUCI again (Greg Jumper)  [Orabug: 34850622]  
  - net/rds: Replace calls to strlcpy() by strscpy() (Gerd Rausch)  [Orabug: 36304966]  
  - net/rds: Fix -Wmissing-prototypes warnings/errors (Gerd Rausch)  [Orabug: 36304668]  
  - net/rds: Update to register_net_sysctl_sz (Joel Granados)  [Orabug: 35915288]  
  - rds/ib: Replace cmpxchg_double with try_cmpxchg128 (Hans Westgaard Ry)  [Orabug: 35629243]  
  - net/rds: Use skb_frag_fill_page_desc() (Gerd Rausch)  [Orabug: 35623423]  
  - net/rds: Fix rds_tcp debug messages mentioning sendpage (Gerd Rausch)  [Orabug: 35622246]  
  - rds: Use sendmsg(MSG_SPLICE_PAGES) rather than sendpage (David Howells)  [Orabug: 35622246]  
  - net/rds: Remove unsupported and deprecated sendpage callback (Gerd Rausch)  [Orabug: 35622246]  
  - net/rds: Drop the 'vmas' argument from pin_user_pages() (Gerd Rausch)  [Orabug: 35622156]  
  - net/rds: Fix compilation issues after change to net/skbuff.h (Greg Jumper)  [Orabug: 35261884]  
  - RDS/IB: Substitute prandom_u32() with get_random_u32() (Hans Westgaard Ry)  [Orabug: 34786308]  
  - net/rds: Switch to the Linux-5.15 API (Gerd Rausch)  [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix format string in alloc_ordered_workqueue (Gerd Rausch)  [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: dma_map_sg is entitled to merge entries (Gerd Rausch)  [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Allocate pages on HCA NUMA nodeid" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Use the same vector for send & receive" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087] [Orabug: 33590087]  
  - Revert "net/rds: Get rid of tasklets" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Put more CPU cores to work" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Make workers use the designated CPU" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Add "preferred_cpu" option to "rds_rdma.ko"" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Follow the observed CQ CPU affinity" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Throttle check for CQ CPU affinity" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Bring tasklets back for better latency" (Gerd Rausch)  [Orabug: 33590962] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Håkon Bugge)  [Orabug: 33538397] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Remove obsolete flag (Hans Westgaard Ry)  [Orabug: 33516781] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix leak in rds_init (Håkon Bugge)  [Orabug: 33488609] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Include pid in the rds_sock structs. (Rohit Nair)  [Orabug: 33481151] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Re-factor rds_user_conn_paths_drop (Freddy Carrillo)  [Orabug: 33441254] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-IB: Add garbage-collection to cache (Hans Westgaard Ry)  [Orabug: 33426206] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-IB: Fix cachehit statistics (Hans Westgaard Ry)  [Orabug: 33426206] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-IB: Fix cache-allocation statistics (Hans Westgaard Ry)  [Orabug: 33426206] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Add "preferred_cpu" option to "rds_rdma.ko" (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Use the same vector for send & receive (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087] [Orabug: 33590087]  
  - net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33440594] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/ib: handle rds uncongested notifications in worker (Manjunath Patil)  [Orabug: 33467788] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: "no error" is no error (Gerd Rausch)  [Orabug: 33252277] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge)  [Orabug: 33331710] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372378] [Orabug: 33590097] [Orabug: 33590087]  
  - rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire)  [Orabug: 33243559] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix refcount issue that could allow it to go negative (William Kucharski)  [Orabug: 33107244] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Congestion tracepoints should be enabled by default (Greg Jumper)  [Orabug: 33145660] [Orabug: 33590097] [Orabug: 33590087]  
  - Clean up W=1 warnings in RDS (Victor Mora)  [Orabug: 33047866] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Mitigate intermittent incorrect RNR NAK Retry Timer modification (Håkon Bugge)  [Orabug: 33001035] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge)  [Orabug: 33002746] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Passive connections always yield (Gerd Rausch)  [Orabug: 32925129] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Prevent the cm_id from being pulled right under our feet (Gerd Rausch)  [Orabug: 32908883] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Change return code from rds_send_xmit() when lock is taken (Håkon Bugge)  [Orabug: 32852360] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix unintended fall-through in rds_send_worker (Håkon Bugge)  [Orabug: 32852360] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds: ib: Remove two ib_modify_qp() calls" (Sharath Srinivasan)  [Orabug: 32715565] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Missing RDS/RDMA private data in response to connection request (Ka-Cheong Poon)  [Orabug: 32388404] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: In rds_send_xmit() use sg_next() to get the next sg entry (Sharath Srinivasan)  [Orabug: 32441607] [Orabug: 33590097] [Orabug: 33590087]  
  - uapi: Fix linux/rds.h userspace compilation issues (Ka-Cheong Poon)  [Orabug: 32967640] [Orabug: 33590097] [Orabug: 33590087]  
  - uapi: Fix linux/rds.h userspace compilation errors. (Vinson Lee)  [Orabug: 32967640] [Orabug: 33590097] [Orabug: 33590087]  
  - uapi: fix linux/rds.h userspace compilation error (Dmitry V. Levin)  [Orabug: 32967640] [Orabug: 33590097] [Orabug: 33590087]  
  - uapi: fix linux/rds.h userspace compilation errors (Dmitry V. Levin)  [Orabug: 32967640] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Reject error code change (Ka-Cheong Poon)  [Orabug: 32565540] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Incorrect RDS protocol version fall back (Ka-Cheong Poon)  [Orabug: 32376160] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: WARNING in rds_conn_drop (Ka-Cheong Poon)  [Orabug: 32481704] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge)  [Orabug: 32519914] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Remove flag WQ_MEM_RECLAIM from rid_dev_wq (Ka-Cheong Poon)  [Orabug: 32535998] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Need to check shutdown progress in rds_conn_path_destroy() (Ka-Cheong Poon)  [Orabug: 32535998] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Bug in rds_tcp_tune() prevents rds_tcp_rcvbuf tunable from working properly (William Kucharski)  [Orabug: 32646490] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: move statistics counting from caller to callee in rds_ib_recv_refill (Håkon Bugge)  [Orabug: 32738049] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Only increment rdma_resolve_route timeout on error (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Don't block workqueues "cma_wq" and "cm.wq" (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Leave the neighbor cache alone (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Give each connection its own workqueue (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Disassociate ic and cm_id before rdma_destroy_id (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds: ib: Implement proper cm_id compare" (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Add a rdma_cm watchdog timer (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: IB: fix panic with handlers running post teardown" (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Release all resources allocated by "rds_ib_setup_qp" (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Don't sleep inside worker threads (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix a few race conditions (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Execute "rdma_destroy_id" in the background (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Delay reconnects from passive side by 3 seconds (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Drop connections when peers perform failover (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Yield to incoming connection requests (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Remove stale comments about random backoff (Gerd Rausch)  [Orabug: 32373816] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil)  [Orabug: 33220434] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil)  [Orabug: 33220434] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil)  [Orabug: 33220434] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil)  [Orabug: 33220434] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33150447] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33177348] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33150427] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge)  [Orabug: 33104687] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Check for illegal flags when creating an MR (Håkon Bugge)  [Orabug: 33144338] [Orabug: 33590097] [Orabug: 33590087]  
  - net: rds: fix memory leak in rds_recvmsg (Pavel Skripkin)  [Orabug: 33590097] [Orabug: 33590087]  
  - rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33044344] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32974199] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863585] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863585] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS (Sabyrzhan Tasbolatov)  [Orabug: 33590097] [Orabug: 33590087]  
  - RDS tcp loopback connection can hang (Rao Shoaib)  [Orabug: 32926879] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire)  [Orabug: 32587016] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire)  [Orabug: 32587016] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire)  [Orabug: 32580940] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)  [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire)  [Orabug: 32490004] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire)  [Orabug: 32490030] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: CONFIG_RDS_DEBUG + tracepoints breaks rds build (Alan Maguire)  [Orabug: 32442487] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: avoid crash on IB conn path shutdown prepare (Alan Maguire)  [Orabug: 32466763] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426609] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372157] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: fix out-of-tree build broken by tracepoints (Alan Maguire)  [Orabug: 32180857] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: rds_ib_remove_one() accesses freed memory (Ka-Cheong Poon)  [Orabug: 31973422] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: send tracepoints broken during merging of code review feedback (Alan Maguire)  [Orabug: 32118211] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: rds header pointer should be in same location across send/receive tps (Alan Maguire)  [Orabug: 32118211] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/ib: Fix: (rds: Deregister all FRWR mr with free_mr) (Manjunath Patil)  [Orabug: 32113531] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32095958] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32113841] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: uapi header should not use u[8,64] (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add congestion tracepoints for congestion seen/cleared (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp transport-specific tracepoints (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add rds_mr-related tracepoints (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: remove rds real-time debugging (rds_rtd) framework (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add more info and err tracepoints (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add tracepoints for work queue events (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add IB flow control tracepoints (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add tracepoint for RDS IB errors, info (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add tracepoints for RDS send (completion), outbound drop (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add tracepoints for RDS receive, inbound drop (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add tracepoint for RDS connection state change (error) (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: provide inline function to retrieve qp numbers (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: retrieve netns inode number from rds socket for tracing purposes (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: retrieve cgroup ptr from rds socket for tracing purposes (Alan Maguire)  [Orabug: 27200806] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Refactor sendmsg ancillary data processing (Ka-Cheong Poon)  [Orabug: 31979196] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Force ordering of {set,clear}_bit operating on m_flags (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Do not send canceled operations to the transport layer (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Introduce rds_conn_to_path helper (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: Drop the connection as part of cancel to avoid hangs" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds: fix warning in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds: Use correct conn when dropping connections due to cancel" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds: prevent use-after-free of rds conn in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds: Use bitmap to designate dropped connections" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "UEK6 compiler warning for /net/rds/send.c" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Restore MR use-once semantics (Håkon Bugge)  [Orabug: 31990092] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix incorrect cmsg status and use-after-free (Håkon Bugge)  [Orabug: 32003078] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31933713] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880139] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755710] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Test parameter in rds_ib_recv_cache_put (Hans Westgaard Ry)  [Orabug: 31737036] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Incorrect WARN_ON() (Ka-Cheong Poon)  [Orabug: 31718013] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648137] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648137] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Deregister all FRWR mr with free_mr (Hans Westgaard Ry)  [Orabug: 31472999] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 31648238] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry)  [Orabug: 31504051] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon)  [Orabug: 31481207] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: add module parameter to allow module unload or not" (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Remove unused link detection code (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Change module initialization sequence in case of failure (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Incorrect fastreg_wrs accounting (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: c_base_conn->last_flush_ms updated after freed (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Spread out the rds_rdma module shutdown work (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Each RDS transport should keep its own connection count (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Clean up ib_nodev_conns list handling (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Use a device's own workqueue to process device related work (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: SRQ delayed work should be cancelled (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Device resource is not released when a conn is shutdown (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Add sychronization between socket close and device removal (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: The fast registration work queue is not destroyed (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Incorrect rds_conn_hash table check (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Add macro to loop through the rds_conn_hash_table (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 33590097] [Orabug: 33590087]  
  - Fix up three build warnings in the UEK6 Master tree (Jack Vogel)  [Orabug: 31469792] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: suppress memory allocation failure reports (Manjunath Patil)  [Orabug: 31398436] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Fix dysfunctional long address resolve timeout (Håkon Bugge)  [Orabug: 31302703] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix use-after-free in rds_ib_free_caches (Hans Westgaard Ry)  [Orabug: 31200767] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix MR reference counting problem (Ka-Cheong Poon)  [Orabug: 31112398] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Replace struct rds_mr's r_refcount with struct kref (Ka-Cheong Poon)  [Orabug: 31112398] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Add debugfs for inc/frag cache statistics (Hans Westgaard Ry)  [Orabug: 29114075] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Add inc/frag cache statistics (Hans Westgaard Ry)  [Orabug: 29114075] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Control the CPU (de)allocating fragments (Hans Westgaard Ry)  [Orabug: 29114075] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Change caching strategy for receive buffers (Hans Westgaard Ry)  [Orabug: 29114075] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Add lockfree stack routines (Hans Westgaard Ry)  [Orabug: 29114075] [Orabug: 33590097] [Orabug: 33590087]  
  - UEK6 compiler warning for /net/rds/ib.c (Sharath Srinivasan)  [Orabug: 31077633] [Orabug: 33590097] [Orabug: 33590087]  
  - UEK6 compiler warning for /net/rds/send.c (Sharath Srinivasan)  [Orabug: 31077633] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: transport module should be auto loaded when transport is set (Rao Shoaib)  [Orabug: 30872996] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: If one path needs re-connection, check all and re-connect (Rao Shoaib)  [Orabug: 30892450] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Avoid qp overflow when posting invalidate/register mr with frwr (Hans Westgaard Ry)  [Orabug: 30888672] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Use bitmap to designate dropped connections (Håkon Bugge)  [Orabug: 30868396] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Avoid flushing MRs in rds_rdma_drop_keys (aru kolappan)  [Orabug: 30681064] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: prevent use-after-free of rds conn in rds_send_drop_to() (Sharath Srinivasan)  [Orabug: 30847730] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: unlock rs_snd_lock before calling rhashtable_insert_fast (aru kolappan)  [Orabug: 30849456] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: fix an infoleak in rds_inc_info_copy (Kangjie Lu)  [Orabug: 30816909] [Orabug: 33590097] [Orabug: 33590087]  {CVE-2016-5244} 
  - Revert "net/rds: Use DMA memory pool allocation for rds_header" (Ka-Cheong Poon)  [Orabug: 30687619] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Handle unsupported rdma request to fs dax memory (Hans Westgaard Ry)  [Orabug: 30731395] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Protect __rds_send_complete() with correct lock (Håkon Bugge)  [Orabug: 30694458] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Should use rds_rtd_ptr() to trace pointer value" (John Donnelly)  [Orabug: 30653262] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Reduce RDS headers de-allocation time" (John Donnelly)  [Orabug: 30653262] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Recycle RDS headers to speed up connection fail over" (John Donnelly)  [Orabug: 30653262] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Check cmsg_len before dereferencing CMSG_DATA (Avinash Repaka)  [Orabug: 29784387] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Recycle RDS headers to speed up connection fail over (Ka-Cheong Poon)  [Orabug: 30434704] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Reduce RDS headers de-allocation time (Ka-Cheong Poon)  [Orabug: 30434704] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Should use rds_rtd_ptr() to trace pointer value (Ka-Cheong Poon)  [Orabug: 30434704] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Disable heartbeat by default (Håkon Bugge)  [Orabug: 30580048] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds:ib: Set RoCE ACK timeout before resolving route (Dag Moxnes)  [Orabug: 30556591] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: update WR sizes when bringing up connection (Dag Moxnes)  [Orabug: 30532304] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: __flush_neigh_conn error messages in syslog during failover/failback (Dag Moxnes)  [Orabug: 30478312] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Cancel pending connections on connection request (Dag Moxnes)  [Orabug: 30473443] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: need to flush neighbor cache for local peer connections on failover (Dag Moxnes)  [Orabug: 30417190] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Rename rds_send_ping to rds_send_hs_ping (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Use {READ,WRITE}_ONCE for heartbeat start and state (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Change heartbeat params from module params to sysctl (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix and augment probe counters (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Introduce heartbeat interval (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix heartbeat (Håkon Bugge)  [Orabug: 30418039] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Improve neighbor cache flush throttling (Dag Moxnes)  [Orabug: 30000214] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: send: Fix dead code in rds_sendmsg (Gustavo A. R. Silva)  [Orabug: 30416950] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: fix uninteneded increase of rds_rdma:pool->max_items_soft (Manjunath Patil)  [Orabug: 30250514] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add ibmr to busy_list in flush code path (Manjunath Patil)  [Orabug: 30319088] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Use correct conn when dropping connections due to cancel (Håkon Bugge)  [Orabug: 30316049] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Optimize rds_ib_laddr_check (Håkon Bugge)  [Orabug: 30321972] [Orabug: 30820081] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Switch to the Linux-5.4 API (Gerd Rausch)  [Orabug: 30777130] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Check laddr_check before calling it (Ka-Cheong Poon)  [Orabug: 30313955] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Use DMA memory pool allocation for rds_header (Ka-Cheong Poon)  [Orabug: 28388601] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: validate the requested traces user input against max supported (William Kucharski)  [Orabug: 29037000] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Incorrect work request accouting (Ka-Cheong Poon)  [Orabug: 30298907] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: An rds_sock is added too early to the hash table (Ka-Cheong Poon)  [Orabug: 30277828] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Bring loop-back peer down as well (Håkon Bugge)  [Orabug: 30271685] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Avoid connect retry on loopback connections (Håkon Bugge)  [Orabug: 30271685] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix info leak in rds6_inc_info_copy() (Ka-Cheong Poon)  [Orabug: 30255644] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: RDS/TCP does not initiate a connection (Ka-Cheong Poon)  [Orabug: 30158088] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: remove dead code (William Kucharski)  [Orabug: 29951256] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Check address length before reading address family (Tetsuo Handa)  [Orabug: 30199770] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: RDS does not flush IPv6 neighbor cache (Ka-Cheong Poon)  [Orabug: 28220027] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: rds_ib_conn_alloc() calls kzallloc() with wrong flag (Ka-Cheong Poon)  [Orabug: 28416722] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Qualify CM REQ duplicate detection with connection being up (Håkon Bugge)  [Orabug: 30056604] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Further prioritize local loop-back connections (Håkon Bugge)  [Orabug: 30056604] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix initial zero delay when queuing re-connect work (Håkon Bugge)  [Orabug: 30056604] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Re-introduce separate work-queue for local connections (Håkon Bugge)  [Orabug: 30056604] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Not all huge pages are released after app shutdown (Ka-Cheong Poon)  [Orabug: 29890749] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Get rid of "wait_clean_list_grace" and add locking (Ka-Cheong Poon)  [Orabug: 30066226] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Set local ack timeout directly (Håkon Bugge)  [Orabug: 29931097] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Re-factor and avoid superfluous queuing of shutdown work (Håkon Bugge)  [Orabug: 29919578] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Flush ARP cache when connection attempt is rejected (Håkon Bugge)  [Orabug: 29971040] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Fix incorrect setting of cp_reconnect_racing (Håkon Bugge)  [Orabug: 29882416] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Re-factor and avoid superfluous queuing of reconnect work (Håkon Bugge)  [Orabug: 29882649] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Correct the cm_id compare commit (Håkon Bugge)  [Orabug: 29960424] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Increase entropy in hashing (Håkon Bugge)  [Orabug: 29778019] [Orabug: 33590097] [Orabug: 33590087]  
  - net: rds: fix rds recv memory leak (Zhu Yanjun)  [Orabug: 30025201] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Resurrect the CQs instead of delete+create (Håkon Bugge)  [Orabug: 29758839] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Avoid queuing superfluous send and recv work (Håkon Bugge)  [Orabug: 29764668] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: changed module parameter rds_qos_threshold_action to be writable (Qing Huang)  [Orabug: 29873102] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: fixed an error in parsing module parameter string rds_qos_threshold (Qing Huang)  [Orabug: 29951336] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Fix dereference of conn when NULL and cleanup thereof (Håkon Bugge)  [Orabug: 29765337] [Orabug: 33590097] [Orabug: 33590087]  
  - net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). (Mao Wenan)  [Orabug: 29760503] [Orabug: 33590097] [Orabug: 33590087]  {CVE-2019-11815} 
  - rds: Introduce a pool of worker threads for connection management (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Use rds_conn_path cp_wq when applicable (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Implement proper cm_id compare (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: prevent RDS connections using stale ARP entries" (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Flush ARP cache when needed (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Add simple heuristics to determine connect delay (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix one-sided connect (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Consolidate and align ftrace related to connection management (Håkon Bugge)  [Orabug: 29629971] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Incorrect locking in rds_tcp_conn_path_shutdown() (Ka-Cheong Poon)  [Orabug: 29493617] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Add per namespace RDS/TCP accept work queue (Ka-Cheong Poon)  [Orabug: 29493617] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Add per peer RDS socket send buffer (Ka-Cheong Poon)  [Orabug: 28314151] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Whitelist rdma_cookie and rx_tstamp for usercopy (Dag Moxnes)  [Orabug: 29550910] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: update correct congestion map for loopback transport (Mukesh Kacker)  [Orabug: 29431284] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker)  [Orabug: 29200872] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: WARNING: at net/rds/recv.c:222 rds_recv_hs_exthdrs+0xf8/0x1e0 (Venkat Venkatsubra)  [Orabug: 29235017] [Orabug: 33590097] [Orabug: 33590087]  
  - net: rds: fix excess initialization of the recv SGEs (Zhu Yanjun)  [Orabug: 29004497] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra)  [Orabug: 29222749] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: RDS connection does not reconnect after CQ access violation error (Venkat Venkatsubra)  [Orabug: 29180452] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: ib: Use a delay when reconnecting to the very same IP address (Håkon Bugge)  [Orabug: 29161384] [Orabug: 33590097] [Orabug: 33590087]  
  - net: rds: fix rds_ib_sysctl_max_recv_allocation error (Zhu Yanjun)  [Orabug: 29003168] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Heap OOB write in rds_message_alloc_sgs() (Mohamed Ghannam)  [Orabug: 28972461] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam)  [Orabug: 28020561] [Orabug: 33590097] [Orabug: 33590087]  {CVE-2018-5333} 
  - rds: crash at rds_ib_inc_copy_to_user+104 due to NULL ptr reference (Venkat Venkatsubra)  [Orabug: 28748008] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix endless RNR situation (Venkat Venkatsubra)  [Orabug: 28856912] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Incorrect rds-info send and retransmission message output (Ka-Cheong Poon)  [Orabug: 28898827] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: MPRDS messages delivered out of order (Ka-Cheong Poon)  [Orabug: 28838065] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: RDS (tcp) hangs on sendto() to unresponding address (Ka-Cheong Poon)  [Orabug: 28720880] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: remove register_netdevice_notifier infrastructure. (Ka-Cheong Poon)  [Orabug: 28737841] [Orabug: 33590097] [Orabug: 33590087]  
  - net: rds: Use address family to designate IPv4 or IPv6 addresses (Håkon Bugge)  [Orabug: 28720018] [Orabug: 33590097] [Orabug: 33590087]  
  - net: rds: Fix blank at eol in af_rds.c (Håkon Bugge)  [Orabug: 28720018] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix call to sleeping function in a non-sleeping context (Håkon Bugge)  [Orabug: 28642686] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: make the source code clean (Zhu Yanjun)  [Orabug: 28289486] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Use rdma_read_gids to get connection SGID/DGID in IPv6 (Zhu Yanjun)  [Orabug: 28289486] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Use rdma_read_gids to read connection GIDs (Parav Pandit)  [Orabug: 28289486] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: CVE-2018-7492: Fix NULL pointer dereference in __rds_rdma_map (Håkon Bugge)  [Orabug: 28565415] [Orabug: 33590097] [Orabug: 33590087]  {CVE-2018-7492} 
  - rds: Remove RDS dependency on IPv6 (Ka-Cheong Poon)  [Orabug: 28466876] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Allow non-link local and link local communication (Ka-Cheong Poon)  [Orabug: 28398845] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Allow IPv4-mapped IPv6 address to be used (Ka-Cheong Poon)  [Orabug: 27744573] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Remove VLA, fix incorrect cast, missing static usage warnings (Ka-Cheong Poon)  [Orabug: 28452068] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix kernel panic caused by a race between setup/teardown (Hans Westgaard Ry)  [Orabug: 28216828] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add 1MB message size limit (Avinash Repaka)  [Orabug: 25578394] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Use newer API for fast registration (Avinash Repaka)  [Orabug: 27509034] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: cancel all worker threads before shutting down socket (Sowmini Varadhan)  [Orabug: 28298233] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Implement ARP flushing correctly (Håkon Bugge)  [Orabug: 28219823] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Avoid compiler warning in ib_send.c (Knut Omang)  [Orabug: 28227497] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: signedness bug (Dan Carpenter)  [Orabug: 28312881] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix incorrect bigger vs. smaller IP address check (Håkon Bugge)  [Orabug: 28222366] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: compute m_ack_seq as offset from ->write_seq (Sowmini Varadhan)  [Orabug: 27438741] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: prevent RDS connections using stale ARP entries (Wei Lin Guay)  [Orabug: 27626296] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Avoid stalled connection due to CM REQ retries (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: use one sided reconnection during a race (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled" (Håkon Bugge)  [Orabug: 25521901] [Orabug: 33590097] [Orabug: 33590087]  
  - rds_ib_exits() should free the rds_ib_inet_socket kernel socket (Sudhakar Dindukurti)  [Orabug: 27884217] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: ib: Release correct number of frags (Håkon Bugge)  [Orabug: 27902555] [Orabug: 33590097] [Orabug: 33590087]  
  - Remove unused active bonding and iwarp code (Sudhakar Dindukurti)  [Orabug: 27905986] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Node crashes when trace buffer is opened (Ka-Cheong Poon)  [Orabug: 27708872] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: MP-RDS may use an invalid c_path (Ka-Cheong Poon)  [Orabug: 27822369] [Orabug: 33590097] [Orabug: 33590087]  
  - Remove Active Bonding code from RDS (Sudhakar Dindukurti)  [Orabug: 27718710] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fail to set up RDS connection to a link local address peer over RoCE (Ka-Cheong Poon)  [Orabug: 27766063] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Fix cleanup during unregistering client (Avinash Repaka)  [Orabug: 27758801] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Avoid copy overhead if send buff is full (Gerd Rausch)  [Orabug: 27542098] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: net: Switch from dma_device to dev.parent (Bart Van Assche)  [Orabug: 27495806] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Fix the address attributes for proxy qp (Avinash Repaka)  [Orabug: 26875519] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Fix null pointer issue (Guanglei Li)  [Orabug: 27530931] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Post invalidation & registration WRs together (Avinash Repaka)  [Orabug: 27602183] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: don't commit to queue till transport connection is up" (Santosh Shilimkar)  [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Un-connected socket sendmsg() with a NULL destination does not fail (Ka-Cheong Poon)  [Orabug: 27454306] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Calling getsockname() on unbounded socket generates seg fault (Ka-Cheong Poon)  [Orabug: 27454280] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Second bind() can overwrite the first bind() (Ka-Cheong Poon)  [Orabug: 27454254] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Assign the correct service level (Wei Lin Guay)  [Orabug: 27607211] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Incorrect reference counting in TCP socket creation (Ka-Cheong Poon)  [Orabug: 27493581] [Orabug: 33590097] [Orabug: 33590087]  
  - {IB/{core,ipoib},net/rds}: IPv6 support for ACL (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487515] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Include ethernet devices during initialization of active bonding (Avinash Repaka)  [Orabug: 26096238] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Remove gid from rds_ib_port array (Avinash Repaka)  [Orabug: 26096238] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: System panic if RDS netfilter is enabled and RDS/TCP is used (Ka-Cheong Poon)  [Orabug: 26950401] [Orabug: 27487537] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: IB active bonding IPv6 changes (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487535] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Enable RDS IPv6 support (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487532] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Changed IP address internal representation to struct in6_addr (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487531] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: C-style nits (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487530] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix inaccurate accounting of unsignaled wrs in rds_ib_xmit_rdma (Håkon Bugge)  [Orabug: 27090772] [Orabug: 27487529] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix inaccurate accounting of unsignaled wrs (Håkon Bugge)  [Orabug: 27090772] [Orabug: 27487528] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Proper init/exit declaration for module init/exit function (Ka-Cheong Poon)  [Orabug: 27013833] [Orabug: 27487527] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Remove .exit from struct rds_transport (Ka-Cheong Poon)  [Orabug: 27013833] [Orabug: 27487526] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix incorrect error handling (Håkon Bugge)  [Orabug: 27339257] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: use multiple sge than buddy allocation in congestion code (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: fix the sg allocation based on actual message size" (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: avoid large pages for sg allocation for TCP transport" (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Reduce memory footprint in rds_sendmsg" (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: reduce memory footprint during ib_post_recv in IB transport (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: reduce memory footprint during rds_sendmsg with IB transport (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: set the rds_ib_init_frag based on supported sge (Wei Lin Guay)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: make copy_page_from_iter and copy_page_to_iter stay within page boundaries (WORKAROUND!)" (Håkon Bugge)  [Orabug: 27339270] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: make copy_page_from_iter and copy_page_to_iter stay within page boundaries (WORKAROUND!) (Gerd Rausch)  [Orabug: 27222215] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fixing INIT2RTR_QP(0x503), syndrome (0x1796e4) (IB_AH_GRH present) issue. (Wei Lin Guay)  [Orabug: 27383162] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix order of intitialization in rds_ib_add_one. (Gerd Rausch)  [Orabug: 27195622] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: RDS diagnostics when connections are stuck in Receiver Not Ready state. (hui.han)  [Orabug: 26522310] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Change the proxy qp's path_mtu to IB_MTU_256 (Avinash Repaka)  [Orabug: 26864694] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix non-atomic operation on shared flag variable (Håkon Bugge)  [Orabug: 26842076] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix incorrect statistics counting (Håkon Bugge)  [Orabug: 26847583] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Add proxy qp to support FRWR through RDS_GET_MR (Avinash Repaka)  [Orabug: 25669255] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add support for fast registration work request (Avinash Repaka)  [Orabug: 22145384] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: base connection dependency needed for rolling downgrade from version 4.1 to 3.1"" (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: Ensure non-zero SL uses correct path before lane 0 connection is dropped" (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds: make sure base connection is up on both sides" (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: remove the RDS specific path record caching (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled connections"" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: prioritize the base connection establishment" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: determine active/passive connection with IP addresses" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "net/rds: use different workqueue for base_conn" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: reduce memory footprint for RDS when transport is RDMA (Ka-Cheong Poon)  [Orabug: 26412003] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Destroy rdma_cm_id when unloading module (Avinash Repaka)  [Orabug: 26089296] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Destroy aux_wq if rds_ib_init() fails (Avinash Repaka)  [Orabug: 26732887] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Reintroduce statistics counting (Håkon Bugge)  [Orabug: 26717115] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Make sure updates to cp_send_gen can be observed (Håkon Bugge)  [Orabug: 26519030] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: use sock_create_lite() to create the accept socket (Sowmini Varadhan)  [Orabug: 26477756] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: set linger to 1 when unloading a rds-tcp (Sowmini Varadhan)  [Orabug: 26477841] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: send handshake ping-probe from passive endpoint (Sowmini Varadhan)  [Orabug: 26477841] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Replace printk in TX path with stat variable (Yuval Shaia)  [Orabug: 26402653] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Add mutex exclusion for vector_load (Håkon Bugge)  [Orabug: 26406492] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Print failed rdma op details if failure is remote access (Rama Nichanamatlu)  [Orabug: 26277933] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: When RDS socket is closed, print unreleased MR's (Rama Nichanamatlu)  [Orabug: 26276427] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Reduce memory footprint in rds_sendmsg (Wei Lin Guay)  [Orabug: 26151323] [Orabug: 26350949] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix minor linker warnings (Babu Moger)  [Orabug: 25393132] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: prioritize the base connection establishment (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: determine active/passive connection with IP addresses (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: use different workqueue for base_conn (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Revert "RDS: add reconnect retry scheme for stalled connections" (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: Set linger when rejecting an incoming conn in rds_tcp_accept_one (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: various endian-ness fixes (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: remove cp_outgoing (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: Sequence teardown of listen and acceptor sockets to avoid races (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: Reorder initialization sequence in rds_tcp_init to avoid races (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: Take explicit refcounts on struct net (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: fix memory leak in TIME_WAIT sockets (Sowmini Varadhan)  [Orabug: 26250066] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: canonical connection order for all paths with index > 0 (Sowmini Varadhan)  [Orabug: 26241322] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: tcp: allow progress of rds_conn_shutdown if the rds_connection is marked ERROR by an intervening FIN (Sowmini Varadhan)  [Orabug: 26241322] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Backport multipath RDS from upstream to UEK4 (Sowmini Varadhan)  [Orabug: 26241322] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: active bonding port state fix for intfs added late (Mukesh Kacker)  [Orabug: 26081079] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: 4KB receive buffers get posted by mistake on 16KB frag connections. (Venkat Venkatsubra)  [Orabug: 25920916] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: Make message size limit compliant with spec" (Avinash Repaka)  [Orabug: 25472193] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: ActiveBonding: Make its own thread for active active (Santosh Shilimkar)  [Orabug: 25026643] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: correct condition check in reconnect_timeout() (Ajaykumar Hotchandani)  [Orabug: 25026643] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: ActiveBonding: Create a cluster sync point for failback (Santosh Shilimkar)  [Orabug: 25026643] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: don't commit to queue till transport connection is up (Santosh Shilimkar)  [Orabug: 25393611] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: restrict socket connection reset to CAP_NET_ADMIN (Santosh Shilimkar)  [Orabug: 25393611] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: fix warning in rds_send_drop_to() (Ajaykumar Hotchandani)  [Orabug: 25116517] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Make message size limit compliant with spec (Avinash Repaka)  [Orabug: 24455231] [Orabug: 22303625] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: rds debug messages are enabled by default (shamir rabinovitch)  [Orabug: 24956522] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Fix new sparse warning (David Ahern)  [Orabug: 24817685] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: fix unaligned memory access (shamir rabinovitch)  [Orabug: 24817685] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: fix panic with handlers running post teardown (Santosh Shilimkar)  [Orabug: 24460805] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Drop the connection as part of cancel to avoid hangs (Avinash Repaka)  [Orabug: 22506032] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: add reconnect retry scheme for stalled connections (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: restore the exponential back-off scheme (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: avoid duplicate connection drop for self loopback (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: don't modify conn state directly in rds_connect_complete (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: log associates connection details for setup failures (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: suppress log prints for FLUSH_ERR/RETRY_EXC (Santosh Shilimkar)  [Orabug: 24663803] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: use c_wq for all activities on a connection (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Avoid double reject on ACL failures (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: make the rds_{local_}wq part of rds_connection (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: make rds_conn_drop() take reason argument (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Remove unused PATH migration event code (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: remove delayed queuing of address change (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: use address change event for failover/failback (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: drop workaround for loopback connection hangs (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: IB: skip rx/tx work when destroying connection" (Santosh Shilimkar)  [Orabug: 24746103] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: set default frag size to 16K (Santosh Shilimkar)  [Orabug: 24656820] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: avoid call to flush_mrs() in specific condition (Ajaykumar Hotchandani)  [Orabug: 24656750] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: skip rx/tx work when destroying connection (Wengang Wang)  [Orabug: 24395789] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: rds_tcp_accept_one() should transition socket from RESETTING to UP (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: fix race windows in send-path quiescence by rds_tcp_accept_one() (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: Retransmit half-sent datagrams when switching sockets in rds_tcp_reset_callbacks (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: Add/use rds_tcp_reset_callbacks to reset tcp socket safely (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: Avoid rds connection churn from rogue SYNs (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: rds_tcp_accept_worker() must exit gracefully when terminating rds-tcp (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: Remove kfreed tcp conn from list (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Add MOS note details to link local(HAIP) address print (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - {IB/{core,ipoib},net/{mlx4,rds}}: Mark unload_allowed as __initdata variable (Yuval Shaia)  [Orabug: 23501273] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Skip packet filtering if interface does not support ACL (Yuval Shaia)  [Orabug: 23541567] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix the rds_conn_destroy panic due to pending messages (Bang Nguyen)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: add handshaking for ACL violation detection at passive (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: enforce IP anti-spoofing based on ACLs (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27300453] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add acl fields to the rds_connection (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: invoke connection destruction in worker (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add reset all conns for a source address to CONN_RESET (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: change rds_ib_active_bonding_excl_ips to only RFC3927 space (Todd Vierling)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: avoid large pages for sg allocation for TCP transport (Santosh Shilimkar)  [Orabug: 23635336] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - {IBCM/IPoIB/MLX4/RDS}: Temporary backout Exasecure change (Santosh Shilimkar)  [Orabug: 23634771] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Fix crash in SRQ initialization (Ajaykumar Hotchandani)  [Orabug: 23523586] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Remove the link-local restriction as a stop gap measure (Santosh Shilimkar)  [Orabug: 2360905] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: restore the vector spreading for the CQs (Santosh Shilimkar)  [Orabug: 23550561] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix the rds_conn_destroy panic due to pending messages (Bang Nguyen)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: add handshaking for ACL violation detection at passive (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: enforce IP anti-spoofing for UUID context (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27300453] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: invoke connection destruction in worker (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: message filtering based on UUID (Bang Nguyen)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add UUID socket option (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add reset all conns for a source address to CONN_RESET (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Drop stale iWARP support (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: drop discontinued IB CQ_VECTOR support (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Drop unused and broken APM support (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Make use of ARPOP_REQUEST instead of ARPOP_REPLY in bonding code (Santosh Shilimkar)  [Orabug: 23094704] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: don't use the link-local address for ib transport (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: rebuild receive caches when needed (Santosh Shilimkar)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - OFED: indicate consistent vendor error (Ajaykumar Hotchandani)  [Orabug: 22381117] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Change number based conn-drop reasons to enum (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Move rds_rtd definitions from rds_rt_debug files to common files (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Change the default value of rds_rt_debug_bitmap modparam to 0x488B (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Replace rds_rtd printk with trace_printk (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Print vendor error in recv completion error message (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: schedule local connection activity in proper workqueue (Ajaykumar Hotchandani)  [Orabug: 23223537] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: Use max_mr from HCA caps than max_fmr (Yuval Shaia)  [Orabug: 23223564] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: disable ib_cache purging to avoid memory leak in reconnect path (Santosh Shilimkar)  [Orabug: 23275911] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: avoid bit fields for i_frag_pages (Wengang Wang)  [Orabug: 23275911] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: Synchronize accept() and connect() paths on t_conn_lock. (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS:TCP: Synchronize rds_tcp_accept_one with rds_send_xmit when resetting t_sock (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: Call pskb_extract() helper function (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: support individual receive trace reporting (Santosh Shilimkar)  [Orabug: 23215779] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "RDS: Make message size limit compliant with spec" (Chuck Anderson)  [Orabug: 22661521] [Orabug: 23217242] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: Remove unused constant (Sowmini Varadhan)  [Orabug: 22993275] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TCP: Add sysctl tunables for sndbuf/rcvbuf on rds-tcp socket (Sowmini Varadhan)  [Orabug: 22993275] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Make message size limit compliant with spec (Avinash Repaka)  [Orabug: 22661521] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: add flow control info to rds_info_rdma_connection (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: update IB flow control algorithm (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add flow control in runtime debugging (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: fix IB transport flow control (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Avoid redundant call to rds_bind_lookup() in recv path. (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: TOS fixes in failure paths when RDS-TCP and RDS-RDMA are run together (Sowmini Varadhan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: rds-stress show all zeros after few minutes (shamir rabinovitch)  [Orabug: 23045970] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: Run rds_fmr_flush WQ closer to ib_device (Wei Lin Guay)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: support larger frag size up to 16KB (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: add frag size to per connection info (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: log the endpoint rds connection role (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: purge receive frag cache on connection shutdown (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: use i_frag_sz for cache stat updates (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: scale rds_ib_allocation based on fragment size (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IB: make fragment size (RDS_FRAG_SIZE) dynamic (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: log the IP address as well on bind failure (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: fix the sg allocation based on actual message size (Wei Lin Guay)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: make congestion code independent of PAGE_SIZE (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Back out OoO send status fix since it causes the regression (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE (Venkat Venkatsubra)  [Orabug: 22847528] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add infrastructure to find more details for reconnect failure (Ajaykumar Hotchandani)  [Orabug: 22631108] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: find connection drop reason (Ajaykumar Hotchandani)  [Orabug: 22631108] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add interface for receive MSG latency trace (Santosh Shilimkar)  [Orabug: 22630180] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in rds_tcp_data_recv (Sowmini Varadhan)  [Orabug: 22623837] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: establish connection for legitimate remote RDMA message (Santosh Shilimkar)  [Orabug: 22139696] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: remove the _reuse_ rds ib pool statistics (Wengang Wang)  [Orabug: 22124214] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add support for per socket SO_TIMESTAMP for incoming messages (Santosh Shilimkar)  [Orabug: 22190837] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix out-of-order RDS_CMSG_RDMA_SEND_STATUS (Wei Lin Guay)  [Orabug: 22126982] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: start rdma listening after ib/iw initialization is done (Qing Huang)  [Orabug: 21684447] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-TCP: Reset tcp callbacks if re-using an outgoing socket in rds_tcp_accept_one() (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Invoke ->laddr_check() in rds_bind() for explicitly bound transports. (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: rds_conn_lookup() should factor in the struct net for a match (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Use a single TCP socket for both send and receive. (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-TCP: Do not bloat sndbuf/rcvbuf in rds_tcp_tune (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-TCP: Set up MSG_MORE and MSG_SENDPAGE_NOTLAST as appropriate in rds_tcp_ (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Revert "rds_rdma: rds_sendmsg should return EAGAIN if connection not setup" (Rama Nichanamatlu)  [Orabug: 21664735] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: make sure base connection is up on both sides (Ajaykumar Hotchandani)  [Orabug: 21675157] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds_ib/iw: fixed big endianness conversion issue for dp->dp_ack_seq (Qing Huang)  [Orabug: 21684819] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: fix race condition when sending a message on unbound socket. (Quentin Casasnovas)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: verify the underlying transport exists before creating a connection (Sasha Levin)  [Orabug: 22010933] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: fix race condition when sending a message on unbound socket. (Quentin Casasnovas)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: make send_batch_count tunable effective (Santosh Shilimkar)  [Orabug: 22010933] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: make use of kfree_rcu() and avoid the call_rcu() chain (Santosh Shilimkar)  [Orabug: 22010933] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: verify the underlying transport exists before creating a connection (Sasha Levin)  [Orabug: 22010933] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: print string constants in more places (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - ib/rds: runtime debuggability enhancement (Qing Huang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Handle RDMA_CM_EVENT_TIMEWAIT_EXIT event. (Venkat Venkatsubra)  [Orabug: 21675221] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: fix an integer overflow test in rds_info_getsockopt() (Dan Carpenter)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: change spin_lock to spin_lock_bh (Wengang Wang)  [Orabug: 21795851] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: add busy_list only when fmr allocated successfully (Wengang Wang)  [Orabug: 21795840] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: free ib_device related resource (Wengang Wang)  [Orabug: 21795824] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: srq initialization and cleanup (Wengang Wang)  [Orabug: 21795815] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - IB/rds_rdma: unloading of ofed stack causes page fault panic (Rama Nichanamatlu)  [Orabug: 20861212] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-TCP: Support multiple RDS-TCP listen endpoints, one per netns. (Sowmini Varadhan)  [Orabug: 21437445] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-TCP: Make RDS-TCP work correctly when it is set up in a netns other than init_net (Sowmini Varadhan)  [Orabug: 21437445] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: print vendor error on error induced disconnect/re-connect (Wengang Wang)  [Orabug: 21527137] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: re-entry of rds_ib_xmit/rds_iw_xmit (Wengang Wang)  [Orabug: 21324078] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds_rdma: rds_sendmsg should return EAGAIN if connection not setup (Wengang Wang)  [Orabug: 21551474] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds_rdma: allocate FMR according to max_item_soft (Wengang Wang)  [Orabug: 21551548] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds_rdma: do not dealloc fmrs in the pool under use (Wengang Wang)  [Orabug: 21551548] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: set fmr pool dirty_count correctly (Wengang Wang)  [Orabug: 21551548] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: rds_ib_device.refcount overflow (Wengang Wang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Add getsockopt support for SO_RDS_TRANSPORT (Sowmini Varadhan)  [Orabug: 21061146] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Add setsockopt support for SO_RDS_TRANSPORT (Sowmini Varadhan)  [Orabug: 21061146] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Declare SO_RDS_TRANSPORT and RDS_TRANS_* constants in uapi/linux/rds.h (Sowmini Varadhan)  [Orabug: 21061146] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-TCP: only initiate reconnect attempt on outgoing TCP socket. (Sowmini Varadhan)  [Orabug: 20930687] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS-TCP: Always create a new rds_sock for an incoming connection. (Sowmini Varadhan)  [Orabug: 20930687] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: directly include header for vmalloc/vfree in ib_recv.c (Mukesh Kacker)  [Orabug: 21059667] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: return EMSGSIZE for oversize requests before processing/queueing (Mukesh Kacker)  [Orabug: 20971222] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net: rds: use correct size for max unacked packets and bytes (Sasha Levin)  [Orabug: 20585918] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IP: RDS takes 10 seconds to plumb the second IP back (Mukesh Kacker)  [Orabug: 20231857] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Tune failover-on-reboot scheduling (Mukesh Kacker)  [Orabug: 20063740] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: mark netdev UP for intfs added post module load (Mukesh Kacker)  [Orabug: 20130536] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Enable use of user named pkey devices (Mukesh Kacker)  [Orabug: 19064704] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: fix list corruption and tx hang when netfilter is used (shamir rabinovitch)  [Orabug: 18963548] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: move more queing for loopback connections to separate queue (Mukesh Kacker)  [Orabug: 18977932] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: add module parameter to allow module unload or not (Wengang Wang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: fix NULL pointer dereference panic during rds module unload (Rama Nichanamatlu)  [Orabug: 18952475] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS:active bonding: disable failover across HCAs(failover groups) (Mukesh Kacker)  [Orabug: 19430773] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: active bonding - failover down interfaces on reboot. (Mukesh Kacker)  [Orabug: 18697678] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Remove dangling rcu_read_unlock() and other cleanups (Mukesh Kacker)  [Orabug: 18995395] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: new extension header: rdma bytes (Shamir Rabinovitch)  [Orabug: 18468180] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Ensure non-zero SL uses correct path before lane 0 connection is dropped (Ajaykumar Hotchandani)  [Orabug: 19133664] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Lost locking in loop connection freeing (Pavel Emelyanov)  [Orabug: 19265200] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: active bonding - failover/failback only to matching pkey (Mukesh Kacker)  [Orabug: 18681364] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: active bonding - ports may not failback if all ports go down (Mukesh Kacker)  [Orabug: 18875563] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Use rds_local_wq for loopback connections in rds_conn_connect_if_down() (Chien-Hua Yen)  [Orabug: 18892380] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: add workqueue for local loopback connections (Chien-Hua Yen)  [Orabug: 18892366] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: SA query optimization (Bang Nguyen)  [Orabug: 18801977] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Remove cond_resched() in RX tasklet (Bang Nguyen)  [Orabug: 18801937] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Replace queue_work() by cond_resched() in the tasklet to breakup RX stream (Bang Nguyen)  [Orabug: 18801931] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: looping to reap cq recv queue in rds_conn_shutdown (Chien-Hua Yen)  [Orabug: 18501034] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Fix regression in dynamic active bonding configuration (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds/rdma_cm: send RDMA_CM_EVENT_ADDR_CHANGE event for active bonding (Bang Nguyen)  [Orabug: 18421516] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Idle QoS connections during remote peer reboot causing application brownout (Chien-Hua Yen)  [Orabug: 18443194] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: dynamic active bonding configuration (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix slowdown when doing massively parallel workload (Bang Nguyen)  [Orabug: 18362838] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: active bonding needs to set brcast and mask for its primary interface (Chien-Hua Yen)  [Orabug: 18479088] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: bind hash table size increase, add per-bucket rw lock (Bang Nguyen)  [Orabug: 18071861] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDMA CM: Add reason code for IB_CM_REJ_CONSUMER_DEFINED (Bang Nguyen)  [Orabug: 17484682] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: protocol negotiation fails during reconnect (Bang Nguyen)  [Orabug: 17375389] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: double free rdma_cm_id (Bang Nguyen)  [Orabug: 17192816] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: ActiveBonding IP exclusion filter (Bang Nguyen)  [Orabug: 17075950] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Reconnect stalls for 15s (Bang Nguyen)  [Orabug: 17277974] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Reconnect causes panic at completion phase (Bang Nguyen)  [Orabug: 17213597] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: added stats to track and display receive side memory usage (Venkat Venkatsubra)  [Orabug: 17045536] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: RDS reconnect stalls (Bang Nguyen)  [Orabug: 1731355] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: disable IP failover if device removed (Bang Nguyen)  [Orabug: 17206167] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix a bug in QoS protocol negotiation (Bang Nguyen)  [Orabug: 17079972] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: alias failover is not working properly (Bang Nguyen)  [Orabug: 17177994] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - add NETFILTER suppport (Ahmed Abbas)  [Orabug: 17082619] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Local address resolution may be delayed after IP has moved. RDS to update local ARP cache directly to speed it up. (Bang Nguyen)  [Orabug: 16979994] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: restore two-sided reconnect with the lower IP node having a constant 100 ms backoff. (Bang Nguyen)  [Orabug: 16710287] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: set correct msg_namelen (Weiping Pan)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: IP config needs to be updated when network/rdma service restarted. (Bang Nguyen)  [Orabug: 16963884] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: check for valid rdma id before initiating connection (Bang Nguyen)  [Orabug: 16857341] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: reduce slab memory usage (Bang Nguyen)  [Orabug: 16935507] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Move connection along with IP when failing over/back. (Bang Nguyen)  [Orabug: 16916648] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Rename HAIP parameters to Active Bonding (Bang Nguyen)  [Orabug: 16810395] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds shouldn't release fmr when ib_device was already released. (Zheng Li)  [Orabug: 16605377] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds remove dev race. (Zheng Li)  [Orabug: 16605377] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - reinit ip_config when service rdma restart. (Zheng Li)  [Orabug: 16605377] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: limit the size allocated by rds_message_alloc() (Cong Wang)  [Orabug: 16837486] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fixes to improve throughput performance (Bang Nguyen)  [Orabug: 16571410] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: fix rds-ping spinlock recursion (jeff.liu)  [Orabug: 16223050] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Congestion flag does not get cleared causing the connection to hang (Bang Nguyen)  [Orabug: 16424692] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Add SIOCRDSGETTOS to get the current TOS for the socket (Bang Nguyen)  [Orabug: 16397197] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Changes to connect/TOS interface (Bang Nguyen)  [Orabug: 16397197] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: this resolved crash while removing rds_rdma module. orabug: 16268201 (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: scheduling while atomic on failover orabug: 16275095 (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: unregister IB event handler on shutdown (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: HAIP support child interface (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS HAIP misc fixes (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Ignore failover groups if HAIP is disabled (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: RDS rolling upgrade (Saeed Mahameed)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fixes warning while rds-info. spin_lock_irqsave() is changed to spin_lock_bh(). (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: UNDO reverts done for rebase code to compile with Linux 4.1 APIs (Mukesh Kacker)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: port to UEK4, Linux-3.18* (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: disable APM support (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: disable cq balance (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: move linux/rds.h to uapi/linux/rds.h (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Kconfig and Makefile changes (Ajaykumar Hotchandani)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS merge for UEK2 (Bang Nguyen)  [Orabug: 15997083] [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Misc Async Send fixes (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: call unregister_netdevice_notifier for rds_ib_nb in rds_ib_exit (Saeed Mahameed)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: flush and destroy workqueue rds_aux_wq and fix creation order. (Saeed Mahameed)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds : fix compilation warning (Saeed Mahameed)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: port the code to uek2 (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: CQ balance (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: HAIP across HCAs (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Misc HAIP fixes (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: off by one fixes (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: Add Automatic Path Migration support (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: fix error flow handling (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds: prevent memory leak in case of error flow (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: fixed kernel oops in case of error flow (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: fixed compilation warnings (Dotan Barak)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS SRQ optional (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS Async send support revised (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS Asynchronous Send support (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: cleanup checkpatch errors (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS Quality Of Service (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Use IB_CQ_NEXT_COMP instead of IB_CQ_SOLICITED for TX CQ (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: make sure rds_send_xmit doesn't loop forever (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: issue warning if re-connect stalling for more than 1 min. (Bang Nguyen)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: don't test ring_empty or ring_low without locks held (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: don't use RCU for the bind hash table (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: avoid double destory of cm_id when rdms_resolve_route fails (Venkat Venkatsubra)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: make sure rds_send_drop_to properly takes the m_rs_lock (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: kick krdsd to send congestion map updates (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: add debuging code around sock_hold and sock_put. (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Don't destroy the rdma id until after we're dong using it (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: adjust BUG()s for irqs disabled. (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: make sure we don't deref a null cm_id->device during address checks (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: don't use GFP_ATOMIC for sk_alloc in rds_create (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Make sure we do a signaled send at least once per large send (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix an rcu race with rds_bin_lookup (Tina Yang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix RDS_MSG_MAPPED usage. (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: add a sock_destruct callback with debugging (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: add a sock_destruct callback with debugging (Tina Yang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: limit the number of times we loop in rds_send_xmit (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS Make sure we check for congestion updates during rds_send_xmit (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Make sure to kick rds_send_xmit for both LL_SEND_FULL and for the congestion map updates. (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: make sure we post recv buffers (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: don't trust the LL_SEND_FULL bit (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: give up on half formed connections after 15s (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds_send_xmit is called uner a spinlock, lets not do a cond_resched() (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: make sure not to loop forever inside rds_send_xmit (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: check for excessive looping in rds_send_xmit (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - rds: don't update ipaddress tables if the address hasn't changed (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - change ib default retry to 1 (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - This patch adds the modparam to rds.ko. (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: only use passive connections when addresses match (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: destroy the ib state that generates call back earlier during shutdown (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: check access on pages before doing copy_to_user (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: always free recv frag as we free its ring entry (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Quiet warnings when leaking frags (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Fix loopback connection reference counts (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: cancel connection work structs as we shut down (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: don't call rds_conn_shutdown() from rds_conn_destroy() (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: have sockets get transport module references (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: remove old rs_transport comment (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: lock rds_conn_count decrement in rds_conn_destroy() (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - Use CQ_NEXT_COMP for recv completions (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: protect the list of IB devices (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: print IB event strings as well as their number (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: flush the FMR pool less often. (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: make sure the ring is really full before we return with ENOMEM (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: use different cq handlers for send and recv (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: track signaled sends (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: remove __init and __exit annotation (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: fix races and other problems with rmmod and device removal (Zach Brown)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: properly init the sg table in our frags (Chris Mason)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: add support for atomic messages over the wire (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix BUG_ONs to not fire when in a tasklet (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Enable per-cpu workqueue threads (Tina Yang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Do not call set_page_dirty() with irqs off (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Properly unmap when getting a remote access error (Sherman Pun)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: only put sockets that have seen congestion on the poll_waitq (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix locking in rds_send_drop_to() (Tina Yang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Turn down alarming reconnect messages (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Workaround for in-use MRs on close causing crash (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix send locking issue (Tina Yang)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix congestion issues for loopback (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/TCP: Wait to wake thread when write space available (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: use IB_CQ_VECTOR_LEAST_ATTACHED for cq's (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: sendmsg() should check sndtimeo, not rcvtimeo (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Do not BUG() on error returned from ib_post_send (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Re-add pf/sol access via sysctl (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB+IW: Move recv processing to a tasklet (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Do not send congestion updates to loopback connections (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix panic on unload (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix potential race around rds_i[bw]_allocation (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add GET_MR_FOR_DEST sockopt (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Add a debug message suggesting to load transport modules (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Track transports via an array, not a list (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Modularize RDMA and TCP transports (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Export symbols from core RDS (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Re-add TCP transport to RDS (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Drop connection when a fatal QP event is received (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Disable flow control in sysctl and explain why (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Move tx/rx ring init and refill to later (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Don't set c_version in __rds_conn_create() (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Rename byte_len to data_len to enhance readability (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/RDMA: Fix cut-n-paste errors in printks in rdma_transport.c (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Fix printk to indicate remote IP, not local (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Handle connections using RDS 3.0 wire protocol (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Improve RDS protocol version checking (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Set retry_count to 2 and make modifiable via modparam (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Refactor end of __conn_create for readability (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS/IB: Always use PAGE_SIZE for FMR page size (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - RDS: Fix completion notifications on blocking sockets (Andy Grover)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - FRV: Fix the section attribute on UP DECLARE_PER_CPU() (David Howells)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/rds Make RDS compile with 4.14 APIs & drop iWarp (Gerd Rausch)  [Orabug: 27364391] [Orabug: 33590097] [Orabug: 33590087]  
  - net/mlx4: fix non-determinism when comp_vector is zero (Håkon Bugge)  [Orabug: 33679626] [Orabug: 33615757] [Orabug: 35938971]  
  - net/mlx5: fix non-determinism when comp_vector is zero (Håkon Bugge)  [Orabug: 33679626] [Orabug: 33615757] [Orabug: 35938971]  
  - IB/core: Introduce IB_CQ_FORCE_ZERO_CV (Håkon Bugge)  [Orabug: 33679626] [Orabug: 33615757] [Orabug: 35938971]  
  - IB/mlx5: Disable BME for unbound devices too (Håkon Bugge)  [Orabug: 34395360]  
  - RDMA/cma: Relax device check in cma_match_net_dev() (Håkon Bugge)  [Orabug: 30809928] [Orabug: 33286666]  
  - ib/core: Adding match_net_dev_ignore_port workaround. (Gerd Rausch)  [Orabug: 28167460] [Orabug: 33234884] [Orabug: 33286664]  
  - net/mlx4_core: simplify UEK style profile initialization (Qing Huang)  [Orabug: 31621194] [Orabug: 31621204]  
  - mlx4_core: Extend num_mtt in dev caps to avoid overflow. (Majd Dibbiny)  [Orabug: 27510485] [Orabug: 31621040] [Orabug: 31621043]  
  - mlx4_core: Disable P_Key Violation Traps (Håkon Bugge)  [Orabug: 28860987] [Orabug: 31621035] [Orabug: 31621038]  
  - net/mlx4_core: print firmware version during driver loading (Qing Huang)  [Orabug: 28597387] [Orabug: 31621027] [Orabug: 31621034]  
  - net/mlx4_core: Use round robin scheme to avoid stale caches (Santosh Shilimkar)  [Orabug: 25730857] [Orabug: 27510465] [Orabug: 31621025] [Orabug: 31621026]  
  - net/mlx4_core: panic the system on unrecoverable errors (Santosh Shilimkar)  [Orabug: 25873690] [Orabug: 27510466] [Orabug: 31621022] [Orabug: 31621024] [Orabug: 31621024]  
  - mlx4_core: Add func name to common error strings to locate uniquely (Mukesh Kacker)  [Orabug: 25440329] [Orabug: 27510467] [Orabug: 31621018] [Orabug: 31621020]  
  - net/mlx4_core: Disallow creation of RAW QPs on a VF (Eli Cohen)  [Orabug: 257846022] [Orabug: 27510549] [Orabug: 31621016] [Orabug: 31621017]  
  - ib/mlx4: add msi-x allocation kernel msg logging (Qing Huang)  [Orabug: 25307234] [Orabug: 23479018] [Orabug: 27510468] [Orabug: 31621014] [Orabug: 31621015]  
  - mlx4_core/ib: set the IB port MTU to 2K (Or Gerlitz)  [Orabug: 24946479] [Orabug: 27510469] [Orabug: 31621012] [Orabug: 31621013]  
  - IB/mlx4: Scatter CQs to different EQs (Majd Dibbiny)  [Orabug: 24705943] [Orabug: 27510470] [Orabug: 31621003] [Orabug: 31621006] [Orabug: 31621006]  
  - mlx4_core: allow unprivileged VFs read physical port counters (Mukesh Kacker)  [Orabug: 24656803] [Orabug: 27510471] [Orabug: 31621000] [Orabug: 31621002]  
  - offload ib subnet manager port and node get info query handling. (Rama Nichanamatlu)  [Orabug: 23750258] [Orabug: 27510472] [Orabug: 31620997] [Orabug: 31620999]  
  - mlx4: indicate memory resource exhaustion (Ajaykumar Hotchandani)  [Orabug: 21549767] [Orabug: 27510478] [Orabug: 31620994] [Orabug: 31620995]  
  - mlx4_core: disable mlx4_QP_ATTACH calls from guests if master is doing flow steering. (Jack Morgenstein)  [Orabug: 27510491] [Orabug: 31620989] [Orabug: 31620990]  
  - mlx4_core: change resource quotas to enable supporting upstream-kernel guests (Jack Morgenstein)  [Orabug: 27510492] [Orabug: 31620985] [Orabug: 31620988]  
  - mlx4_core: print more info when command times out (Jack Morgenstein)  [Orabug: 27510493] [Orabug: 31620978] [Orabug: 31620980]  
  - mlx4_core: move out label to the right place (Eugenia Emantayev)  [Orabug: 27510494] [Orabug: 31620974] [Orabug: 31620977]  
  - mlx4_core: set device to use extended counters (Yishai Hadas)  [Orabug: 27510496] [Orabug: 31620970] [Orabug: 31620971]  
  - net/mlx4_core: add sanity check when creating bitmap structure (Dotan Barak)  [Orabug: 27510503] [Orabug: 31620966] [Orabug: 31620969]  
  - mlx4: Handle memory region deregistration failure (Shani Michaeli)  [Orabug: 27510464] [Orabug: 31620961] [Orabug: 31620963] [Orabug: 31620963]  
  - IB/mlx4: Do not generate random node_guid for VFs (Yuval Shaia)  [Orabug: 22145330] [Orabug: 27510511] [Orabug: 31620959] [Orabug: 31620960]  
  - IB/mlx4: Check port_num before using it in mlx4_ib_port_link_layer (Moshe Lazer)  [Orabug: 27510514] [Orabug: 31620957] [Orabug: 31620958]  
  - mlx4_core: Error message on mtt allocation failure (Marcel Apfelbaum)  [Orabug: 27510506] [Orabug: 31620954] [Orabug: 31620955]  
  - IB/ipoib: CSUM support in connected mode (Yuval Shaia)  [Orabug: 20559068] [Orabug: 27487353] [Orabug: 30833821] [Orabug: 30833822]  
  - IB/mlx5: Disable BME on panic (Håkon Bugge)  [Orabug: 31556128] [Orabug: 31556129] [Orabug: 31556129] [Orabug: 31556129] [Orabug: 31556129]  
  - IB/mlx5: Implement clear counters (Parav Pandit)  [Orabug: 26761264] [Orabug: 31556125] [Orabug: 31556127]  
  - IB/mlx5: Set VHCA port in sniffer flow (Daniel Jurgens)  [Orabug: 26875158] [Orabug: 31556123] [Orabug: 31556124]  
  - net/mlx5: Enable 1M QPs for UEK (Erez Alfasi)  [Orabug: 28985637] [Orabug: 31556121] [Orabug: 31556122]  
  - {IB,net}/mlx5: Spread IB CQs more evenly over EQs (Parav Pandit)  [Orabug: 26790181] [Orabug: 31556116] [Orabug: 31556117] [Orabug: 31556117]  
  - rdma_cm: Add debug functions using pr_debug() (Saeed Mahameed)  [Orabug: 27358307] [Orabug: 31555473] [Orabug: 31555475]  
  - RDMA/cma: Make CM response timeout and # CM retries configurable (Håkon Bugge)  [Orabug: 29876868] [Orabug: 31555471] [Orabug: 31555472]  
  - rdma_cm: garbage-collection thread for rdma_destroy_id() (Saeed Mahameed)  [Orabug: 27358294] [Orabug: 31555468] [Orabug: 31555470] [Orabug: 31555470]  
  - rdma_cm/cma: Cache broadcast domain record. (Erez Shitrit)  [Orabug: 27358309] [Orabug: 31555464] [Orabug: 31555465] [Orabug: 31555465]  
  - RDMA CM: Avoid possible SEGV during connection shutdown (Bang Nguyen)  [Orabug: 16750726] [Orabug: 27358296] [Orabug: 31555461] [Orabug: 31555462]  
  - ib_core: supporting 64b counters using PMA_COUNTERS_EXT mad (Sudhakar Dindukurti)  [Orabug: 27635081] [Orabug: 30833668] [Orabug: 30833670]  
  - IB/core: Implement clear counters (Parav Pandit)  [Orabug: 26761264] [Orabug: 31555458] [Orabug: 31555459] [Orabug: 31555459] [Orabug: 31555459]  
  - ipoib: rfe- enable pkey and device name decoupling (Mukesh Kacker)  [Orabug: 19064704] [Orabug: 27383465] [Orabug: 30833819] [Orabug: 30833820] [Orabug: 30833820]  
  - rds/rdma_cm: send RDMA_CM_EVENT_ADDR_CHANGE event for active bonding (Bang Nguyen)  [Orabug: 18421516] [Orabug: 27358298] [Orabug: 30833716] [Orabug: 30833717]  
  - IB/cma: Introduce tos mapping configuration option (Parav Pandit)  [Orabug: 26761224] [Orabug: 30833614] [Orabug: 30833615]  
  - IB/Shared PD support from Oracle (Eli Cohen)  [Orabug: 21496696] [Orabug: 27358304] [Orabug: 30833764] [Orabug: 30833765]  
  - IB/core: Introducing /sys/class/infiniband_verbs/uek_abi_version (Gerd Rausch)  [Orabug: 27959252] [Orabug: 30833443] [Orabug: 30833580] [Orabug: 30833580]  
  - net/rds: Rewind RDS to 8cbd9606a636 in order to rebase UEK commits on top of it (Gerd Rausch)  [Orabug: 33590087]  
  - uek-misc: Add uek_runs_in_kvm (Håkon Bugge)  [Orabug: 35049221]  
  - uek-misc: Initial version (Konrad Rzeszutek Wilk)  [Orabug: 35049221]  
  - uek-rpm: Don't overwrite auto.conf with .config (Victor Erminpour)  [Orabug: 34644500]  
  - uek-rpm: Fix if statement in modpost to allow 'external_module' support (Victor Erminpour)  [Orabug: 34644500]  
  - uek-rpm: Replace check for CONFIG_STACK_VALIDATION with CONFIG_OBJTOOL (Victor Erminpour)  [Orabug: 34644500]  
  - uek-rpm: Checkin savedefconfig for 6.8 LUCI config update (Harshit Mogalapalli)  [Orabug: 36440188]  
  - uek-rpm: Enable KVM_SW_PROTECTED_VM in LUCI (Harshit Mogalapalli)  [Orabug: 36440188]  
  - uek-rpm: Enable CRYPTO_DEV_QAT_420XX driver in LUCI (Harshit Mogalapalli)  [Orabug: 36440188]  
  - uek-rpm: Enable VIRTIO_VFIO_PCI as module in modules-core package (Harshit Mogalapalli)  [Orabug: 36440188]  
  - uek-rpm: Enable CONFIG_VFIO_DEBUGFS in LUCI (Harshit Mogalapalli)  [Orabug: 36440188]  
  - uek-rpm: Enable IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY (Rhythm Mahajan)  [Orabug: 36426018]  
  - uek-rpm: Enable RANDOMIZE_KSTACK_OFFSET_DEFAULT in LUCI (Harshit Mogalapalli)  [Orabug: 36392787]  
  - uek-rpm: Bluefield 3: enable lockdown mode for secure boot (Dave Kleikamp)  [Orabug: 36379358]  
  - uek-rpm: Fix debug module conflict by defining new variant variable for installonlypkg (Samasth Norway Ananda)  [Orabug: 36370647]  
  - uek-rpm: Enable multiple kernel-uek-debuginfo package installation (Samasth Norway Ananda)  [Orabug: 36329426]  
  - uek-rpm: Don't build docs anymore for OL8 in LUCI (Harshit Mogalapalli)  [Orabug: 36266922]  
  - uek-rpm: spec: Add python3-pyyaml as a build requirement (Harshit Mogalapalli)  [Orabug: 36266922]  
  - uek-rpm: Place code modules in right place to fix build 6.8 (Harshit Mogalapalli)  [Orabug: 36261532]  
  - uek-rpm: Disable MCORE2 in container kernel configs (Harshit Mogalapalli)  [Orabug: 36238801]  
  - uek-rpm: aarch64: Build arm_cspmu module (Dave Kleikamp)  [Orabug: 36227029]  
  - uek-rpm: Disable NFS_V2 and NFS_UDP_SUPPORT in LUCI (Harshit Mogalapalli)  [Orabug: 36225921]  
  - uek-rpm: Make few builtin options to modules back -- hardening (Harshit Mogalapalli)  [Orabug: 36209212]  
  - uek-container: strip symbols from vmlinux (Boris Ostrovsky)  [Orabug: 36170817]  
  - spec: upgrading to use gcc-toolset-13 (Mark Nicholson)  [Orabug: 36132145]  
  - uek-rpm: set minimal libdnf version and fix use of installonlypkgs (Samasth Norway Ananda)  [Orabug: 36119458]  
  - uek-rpm: Update the toolchain for OL9 (Jack Vogel)  [Orabug: 36106999]  
  - uek-rpm: Fix posttrans scriptlet errors (Somasundaram Krishnasamy)  [Orabug: 36096223]  
  - uek-rpm: Enable CONFIG_IPV6_SEG6_BPF in LUCI (Harshit Mogalapalli)  [Orabug: 36070376]  
  - uek: kabi: Update check-kabi script to the latest version (Saeed Mirzamohammadi)  [Orabug: 35641429]  
  - uek: kabi: include uek_kabi header file (Saeed Mirzamohammadi)  [Orabug: 35641429]  
  - certs: append OL ksplice signing key (Mark Nicholson)  [Orabug: 35455153]  
  - certs: create certs/ol_signing_keys.pem from the OLkmod key (Mark Nicholson)  [Orabug: 35455153]  
  - sign-file: Disable build error on compile warnings for OpenSSL 3.0 API (Victor Erminpour)  [Orabug: 34116060]  
  - certs: Disable build error on compile warnings for OpenSSL 3.0 API (Victor Erminpour)  [Orabug: 34116060]  
  - uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961009]  
  - Linux 6.8 (Linus Torvalds)   
  - tracing: Use .flush() call to wake up readers (Steven Rostedt (Google))   
  - ring-buffer: Fix resetting of shortest_full (Steven Rostedt (Google))   
  - ring-buffer: Fix waking up ring buffer readers (Steven Rostedt (Google))   
  - SEV: disable SEV-ES DebugSwap by default (Paolo Bonzini)   
  - i2c: aspeed: Fix the dummy irq expected print (Tommy Huang)   
  - i2c: wmt: Fix an error handling path in wmt_i2c_probe() (Christophe JAILLET)   
  - i2c: i801: Avoid potential double call to gpiod_remove_lookup_table (Heiner Kallweit)   
  - i2c: i801: Fix using mux_pdev before it's set (Heiner Kallweit)   
  - nouveau: lock the client object tree. (Dave Airlie)   
  - scripts/gdb/symbols: fix invalid escape sequence warning (Andrew Ballance)   
  - Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal (Mathias Krause)   
  - net: pds_core: Fix possible double free in error handling path (Yongzhi Liu)   
  - netrom: Fix data-races around sysctl_net_busy_read (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing)   
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing)   
  - drm/tests/buddy: fix print format (Matthew Auld)   
  - drm/xe: Return immediately on tile_init failure (Rodrigo Vivi)   
  - erofs: apply proper VMA alignment for memory mapped files on THP (Gao Xiang)   
  - erofs: fix uninitialized page cache reported by KMSAN (Gao Xiang)   
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang)   
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Pablo Neira Ayuso)   
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family (Florian Westphal)   
  - netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso)   
  - drm/amdgpu/pm: Fix the error of pwm1_enable setting (Ma Jun)   
  - drm/amd/display: handle range offsets in VRR ranges (Alex Deucher)   
  - drm/amd/display: check dc_link before dereferencing (Melissa Wen)   
  - drm/amd/swsmu: modify the gfx activity scaling (Li Ma)   
  - tracing: Limit trace_marker writes to just 4K (Steven Rostedt (Google))   
  - tracing: Limit trace_seq size to just 8K and not depend on architecture PAGE_SIZE (Steven Rostedt (Google))   
  - tracing: Remove precision vsnprintf() check from print event (Steven Rostedt (Google))   
  - spi: cs42l43: Don't limit native CS to the first chip select (Charles Keepax)   
  - ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll (Stuart Henderson)   
  - ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode (Stuart Henderson)   
  - ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC (Stuart Henderson)   
  - Revert "drm/udl: Add ARGB8888 as a format" (Douglas Anderson)   
  - phy: qcom-qmp-combo: fix type-c switch registration (Johan Hovold)   
  - phy: qcom-qmp-combo: fix drm bridge registration (Johan Hovold)   
  - drm/i915/panelreplay: Move out psr_init_dpcd() from init_connector() (Animesh Manna)   
  - firewire: ohci: prevent leak of left-over IRQ on unbind (Edmund Raile)   
  - drm/i915/dp: Fix connector DSC HW state readout (Imre Deak)   
  - drm/i915/selftests: Fix dependency of some timeouts on HZ (Janusz Krzysztofik)   
  - net/rds: fix WARNING in rds_conn_connect_if_down (Edward Adam Davis)   
  - libceph: init the cursor when preparing sparse read in msgr2 (Xiubo Li)   
  - iov_iter: get rid of 'copy_mc' flag (Linus Torvalds)   
  - net: dsa: microchip: fix register write order in ksz8_ind_write8() (Tobias Jakobi (Compleo))   
  - dpll: move all dpll<>netdev helpers to dpll code (Jakub Kicinski)   
  - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program (Toke Høiland-Jørgensen)   
  - selftests/bpf: Fix up xdp bonding test wrt feature flags (Daniel Borkmann)   
  - xdp, bonding: Fix feature flags when there are no slave devs anymore (Daniel Borkmann)   
  - selftests/bpf: test case for callback_depth states pruning logic (Eduard Zingerman)   
  - bpf: check bpf_func_state->callback_depth when pruning states (Eduard Zingerman)   
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet)   
  - intel: legacy: Partial revert of field get conversion (Sasha Neftin)   
  - igc: avoid returning frame twice in XDP_REDIRECT (Florian Kauer)   
  - i40e: Fix firmware version comparison function (Ivan Vecera)   
  - ice: fix typo in assignment (Jesse Brandeburg)   
  - ice: fix uninitialized dplls mutex usage (Michal Schmidt)   
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb)   
  - ice: virtchnl: stop pretending to support RSS over AQ or registers (Jacob Keller)   
  - idpf: disable local BH when scheduling napi for marker packets (Emil Tantilov)   
  - Input: gpio_keys_polled - suppress deferred probe error for gpio (Uwe Kleine-König)   
  - Revert "Input: bcm5974 - check endpoint type before starting traffic" (Javier Carrasco)   
  - drm/udl: Add ARGB8888 as a format (Douglas Anderson)   
  - ASoC: dt-bindings: nvidia: Fix 'lge' vendor prefix (Rob Herring)   
  - mei: gsc_proxy: match component when GSC is on different bus (Alexander Usyskin)   
  - misc: fastrpc: Pass proper arguments to scm call (Ekansh Gupta)   
  - comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott)   
  - comedi: comedi_8255: Correct error in subdevice initialization (Frej Drejhammar)   
  - drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf (Karol Herbst)   
  - xhci: Fix failure to detect ring expansion need. (Mathias Nyman)   
  - Revert "tty: serial: simplify qcom_geni_serial_send_chunk_fifo()" (Douglas Anderson)   
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun)   
  - usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman)   
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati)   
  - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (RD Babiera)   
  - usb: typec: tpcm: Fix PORT_RESET behavior for self powered devices (Badhri Jagan Sridharan)   
  - usb: typec: ucsi: fix UCSI on SM8550 & SM8650 Qualcomm devices (Neil Armstrong)   
  - xfrm: set skb control buffer based on packet offload as well (Mike Yu)   
  - xfrm: fix xfrm child route lookup for packet offload (Mike Yu)   
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche)   
  - drm/i915: Don't explode when the dig port we don't have an AUX CH (Ville Syrjälä)   
  - platform/x86/amd/pmf: Fix missing error code in amd_pmf_init_smart_pc() (Harshit Mogalapalli)   
  - platform/x86: p2sb: On Goldmont only cache P2SB and SPI devfn BAR (Hans de Goede)   
  - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook (Andy Chi)   
  - Revert "fs/aio: Make io_cancel() generate completions again" (Bart Van Assche)   
  - MAINTAINERS: Update email address for Tvrtko Ursulin (Tvrtko Ursulin)   
  - net: sparx5: Fix use after free inside sparx5_del_mact_entry (Horatiu Vultur)   
  - mailmap: fix Kishon's email (Niklas Cassel)   
  - init/Kconfig: lower GCC version check for -Warray-bounds (Kees Cook)   
  - mm, mmap: fix vma_merge() case 7 with vma_ops->close (Vlastimil Babka)   
  - mm: userfaultfd: fix unexpected change to src_folio when UFFDIO_MOVE fails (Qi Zheng)   
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka)   
  - firmware: microchip: Fix over-requested allocation size (Dawei Li)   
  - ASoC: amd: yc: Add HP Pavilion Aero Laptop 13-be2xxx(8BD6) into DMI quirk table (Al Raj Hassain)   
  - ASoC: rcar: adg: correct TIMSEL setting for SSI9 (Andreas Pape)   
  - drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again) (Cong Yang)   
  - regulator: rk808: fix LDO range on RK806 (Quentin Schulz)   
  - regulator: rk808: fix buck range on RK806 (Quentin Schulz)   
  - selftests: mptcp: diag: avoid extra waiting (Matthieu Baerts (NGI0))   
  - selftests: mptcp: diag: return KSFT_FAIL not test_cnt (Geliang Tang)   
  - arm64: prohibit probing on arch_kunwind_consume_entry() (Puranjay Mohan)   
  - drm: Fix output poll work for drm_kms_helper_poll=n (Imre Deak)   
  - page_pool: fix netlink dump stop/resume (Jakub Kicinski)   
  - geneve: make sure to pull inner header in geneve_rx() (Eric Dumazet)   
  - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string (Steven Rostedt (Google))   
  - tee: optee: Fix kernel panic caused by incorrect error handling (Sumit Garg)   
  - ALSA: hda: cs35l41: Overwrite CS35L41 configuration for ASUS UM5302LA (Stefan Binding)   
  - ALSA: hda/realtek: Add quirks for Lenovo Thinkbook 16P laptops (Stefan Binding)   
  - ALSA: hda: cs35l41: Support Lenovo Thinkbook 16P (Stefan Binding)   
  - ALSA: hda/realtek - Add Headset Mic supported Acer NB platform (Kailang Yang)   
  - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Hans de Goede)   
  - Revert "arm64: dts: qcom: msm8996: Hook up MPM" (Dmitry Baryshkov)   
  - Input: xpad - add additional HyperX Controller Identifiers (Max Nguyen)   
  - Drivers: hv: vmbus: make hv_bus const (Ricardo B. Marliere)   
  - vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre)   
  - serial: port: Don't suspend if the port is still busy (Yicong Yang)   
  - serial: 8250_dw: Do not reclock if already at correct rate (Peter Collingbourne)   
  - tty: serial: imx: Fix broken RS485 (Rickard x Andersson)   
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern)   
  - net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Rahul Rameshbabu)   
  - net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (Rahul Rameshbabu)   
  - net/mlx5e: Fix MACsec state loss upon state update in offload path (Emeel Hakim)   
  - net/mlx5e: Change the warning when ignore_flow_level is not supported (Jianbo Liu)   
  - net/mlx5: Check capability for fw_reset (Moshe Shemesh)   
  - net/mlx5: Fix fw reporter diagnose output (Aya Levin)   
  - net/mlx5: E-switch, Change flow rule destination checking (Jianbo Liu)   
  - Revert "net/mlx5e: Check the number of elements before walk TC rhashtable" (Saeed Mahameed)   
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Gavin Li)   
  - ice: reconfig host after changing MSI-X on VF (Michal Swiatkowski)   
  - ice: reorder disabling IRQ and NAPI in ice_qp_dis (Maciej Fijalkowski)   
  - i40e: disable NAPI right after disabling irqs when handling xsk_pool (Maciej Fijalkowski)   
  - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able (Maciej Fijalkowski)   
  - arm64: dts: qcom: sc8280xp-x13s: limit pcie4 link speed (Johan Hovold)   
  - arm64: dts: qcom: sc8280xp-crd: limit pcie4 link speed (Johan Hovold)   
  - ALSA: hda: optimize the probe codec process (songxiebing)   
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang)   
  - crypto: rk3288 - Fix use after free in unprepare (Herbert Xu)   
  - MAINTAINERS: net: netsec: add myself as co-maintainer (Masahisa Kojima)   
  - net: bql: fix building with BQL disabled (Arnd Bergmann)   
  - net: lan78xx: fix runtime PM count underflow on link stop (Oleksij Rempel)   
  - x86/hyperv: Allow 15-bit APIC IDs for VTL platforms (Saurabh Sengar)   
  - dt-bindings: net: renesas,ethertsn: Document default for delays (Niklas Söderlund)   
  - x86/hyperv: Make encrypted/decrypted changes safe for load_unaligned_zeropad() (Michael Kelley)   
  - x86/mm: Regularize set_memory_p() parameters and make non-static (Michael Kelley)   
  - x86/hyperv: Use slow_virt_to_phys() in page transition hypervisor callback (Michael Kelley)   
  - Documentation: hyperv: Add overview of PCI pass-thru device support (Michael Kelley)   
  - Drivers: hv: vmbus: Update indentation in create_gpadl_header() (Michael Kelley)   
  - Drivers: hv: vmbus: Remove duplication and cleanup code in create_gpadl_header() (Michael Kelley)   
  - fbdev/hyperv_fb: Fix logic error for Gen2 VMs in hvfb_getmem() (Michael Kelley)   
  - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory (Michael Kelley)   
  - hv_utils: Allow implicit ICTIMESYNCFLAG_SYNC (Peter Martincic)   
  - cgroup/cpuset: Fix retval in update_cpumask() (Kamalesh Babulal)   
  - pinctrl: don't put the reference to GPIO device in pinctrl_pins_show() (Bartosz Golaszewski)   
  - ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet (Alban Boyé)   
  - ASoC: madera: Fix typo in madera_set_fll_clks shift value (Stuart Henderson)   
  - drm/i915: Check before removing mm notifier (Nirmoy Das)   
  - cgroup/cpuset: Fix a memory leak in update_exclusive_cpumask() (Waiman Long)   
  - crypto: sun8i-ce - Fix use after free in unprepare (Andrey Skvortsov)   
  - drm/i915/hdcp: Extract hdcp structure from correct connector (Suraj Kandpal)   
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor)   
  - drm/i915/hdcp: Remove additional timing for reading mst hdcp message (Suraj Kandpal)   
  - drm/i915/hdcp: Move to direct reads for HDCP (Suraj Kandpal)   
  - iio: accel: adxl367: fix I2C FIFO data register (Cosmin Tanislav)   
  - iio: accel: adxl367: fix DEVID read after reset (Cosmin Tanislav)   
  - arm64: dts: imx8mp: Fix LDB clocks property (Liu Ying)   
  - arm64: dts: imx8mp: Fix TC9595 reset GPIO on DH i.MX8M Plus DHCOM SoM (Marek Vasut)   
  - MAINTAINERS: Use a proper mailinglist for NXP i.MX development (Daniel Baluta)   
  - ARM: dts: imx7: remove DSI port endpoints (Francesco Dolcini)   
  - iio: pressure: dlhl60d: Initialize empty DLH bytes (Kees Cook)   
  - iio: imu: inv_mpu6050: fix frequency setting when chip is off (Jean-Baptiste Maneyrol)   
  - iio: pressure: Fixes BMP38x and BMP390 SPI support (Vasileios Amoiridis)   
  - iio: imu: inv_mpu6050: fix FIFO parsing when empty (Jean-Baptiste Maneyrol)   
  - arm64: dts: allwinner: h616: Add Orange Pi Zero 2W to Makefile (Jernej Skrabec)   
  - KVM: x86/mmu: Retry fault before acquiring mmu_lock if mapping is changing (Sean Christopherson)   
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Sean Christopherson)   
  - ARM: imx_v6_v7_defconfig: Restore CONFIG_BACKLIGHT_CLASS_DEVICE (Fabio Estevam)   
  - KVM: selftests: Add a testcase to verify GUEST_MEMFD and READONLY are exclusive (Sean Christopherson)   
  - KVM: selftests: Create GUEST_MEMFD for relevant invalid flags testcases (Sean Christopherson)   
  - KVM: x86/mmu: Restrict KVM_SW_PROTECTED_VM to the TDP MMU (Sean Christopherson)   
  - KVM: x86: Update KVM_SW_PROTECTED_VM docs to make it clear they're a WIP (Sean Christopherson)   
  - KVM: Make KVM_MEM_GUEST_MEMFD mutually exclusive with KVM_MEM_READONLY (Sean Christopherson)   
  - arm64: tegra: Fix Tegra234 MGBE power-domains (Jon Hunter)   
  - mei: Add Meteor Lake support for IVSC device (Wentong Wu)   
  - mei: me: add arrow lake point H DID (Alexander Usyskin)   
  - mei: me: add arrow lake point S DID (Alexander Usyskin)   
  - KVM: x86: Mark target gfn of emulated atomic instruction as dirty (Sean Christopherson)   
  - counter: fix privdata alignment (Nuno Sa)   
  - integrity: eliminate unnecessary "Problem loading X.509 certificate" msg (Coiby Xu)   
  - arm64: tegra: Set the correct PHY mode for MGBE (Thierry Reding)   
  - thunderbolt: Fix NULL pointer dereference in tb_port_update_credits() (Mika Westerberg)   
  - pinctrl: stm32: fix PM support for stm32mp257 (Antonio Borneo)   
  - uek-rpm: Format configs with savedefconfig for 6.7 LUCI release. (Harshit Mogalapalli)  [Orabug: 36211839]  
  - uek-rpm: Enable NVME_HOST_AUTH in LUCI (Harshit Mogalapalli)  [Orabug: 36181719]  
  - uek-rpm: Enable INTEL_TDX_HOST in LUCI (Harshit Mogalapalli)  [Orabug: 36181719]  
  - uek-rpm: Enable NET_KIT in LUCI (Harshit Mogalapalli)  [Orabug: 36181719]  
  - uek-rpm: Enable KEXEC in LUCI (Harshit Mogalapalli)  [Orabug: 36181719]  
  - uek-rpm: Enable MAC80211_DEBUGFS in LUCI (Harshit Mogalapalli)  [Orabug: 36181719]  
  - uek-rpm: Remove nvme-common.ko from the core list in LUCI (Harshit Mogalapalli)  [Orabug: 36099306]  
  - arm64: dts: qcom: sm6115: Fix missing interconnect-names (Konrad Dybcio)   
  - arm64: dts: qcom: sm8650-mtp: add gpio74 as reserved gpio (Neil Armstrong)   
  - arm64: dts: qcom: sm8650-qrd: add gpio74 as reserved gpio (Neil Armstrong)   
  - xfrm: Pass UDP encapsulation in TX packet offload (Leon Romanovsky)   
  - xfrm: Clear low order bits of ->flowi4_tos in decode_session4(). (Guillaume Nault)   
  - uek-rpm: Need to identify the kernel-luci* packages as install only. (Darren Kenny)  [Orabug: 36008539]  
  - uek-rpm: Do not build tools rpm for aarch64 64k builds (Somasundaram Krishnasamy)  [Orabug: 35974388]  
  - uek-rpm: Move kernel tools binary to seperate rpm (Somasundaram Krishnasamy)  [Orabug: 35974388]  
  - uek-rpm: Move modules from kernel-uek-core to kernel-uek-modules-core (Vijayendra Suman)  [Orabug: 35637050]  
  - uek-rpm: Enable CONFIG_USBIP_VHCI_HCD and CONFIG_USBIP_HOST in LUCI (Harshit Mogalapalli)  [Orabug: 35995539]  
  - uek-rpm: Format configs to use savedefconfig 6.6 LUCI (Harshit Mogalapalli)  [Orabug: 35976384]  
  - uek-rpm : Move kernel/fs/nls/nls_ucs2_utils.ko to extras. (Harshit Mogalapalli)  [Orabug: 35976384]  
  - uek-rpm: Enable CONFIG_BUG_ON_DATA_CORRUPTION in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]  
  - uek-rpm: Enable CONFIG_KVM_PROVE_MMU in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]  
  - uek-rpm: Enable CONFIG_X86_USER_SHADOW_STACK in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]  
  - uek-rpm: Enable CONFIG_VFIO_DEVICE_CDEV in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]  
  - uek-rpm: Enable CONFIG_SWIOTLB_DYNAMIC in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]  
  - uek-rpm: Enable CONFIG_RANDOM_KMALLOC_CACHES in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]  
  - uek-rpm: Enable CONFIG_DMA_NUMA_CMA in LUCI (Harshit Mogalapalli)  [Orabug: 35976384]  
  - uek-rpm: Update SPEC file version number and add requirements for production builds (Darren Kenny)  [Orabug: 35856265]  
  - uek-rpm: Enable Microsoft recommended Hyper-V flags for ARM (Harshvardhan Jha)  [Orabug: 35827810]  
  - net/mlx5: enable the kernel build options to support new features (Qing Huang)  [Orabug: 35811810] [Orabug: 35811810]  
  - uek-rpm: Disable CONFIG_STAGING drivers in LUCI (Harshit Mogalapalli)  [Orabug: 35795350]  
  - uek-rpm: Enable CFG80211_WEXT in LUCI (Harshit Mogalapalli)  [Orabug: 35795350]  
  - uek-rpm: Enable CRYPTO_MICHAEL_MIC in LUCI (Harshit Mogalapalli)  [Orabug: 35795350]  
  - uek-rpm: Enable CFG80211 in LUCI (Harshit Mogalapalli)  [Orabug: 35795350]  
  - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda)  [Orabug: 35756461]  
  - uek-rpm: Enable Hyper-V for OL8 and OL9 ARM (Harshvardhan Jha)  [Orabug: 35736415]  
  - uek-rpm: Update kernel's linux-firmware dependency to 20230516-999.26.git6c9e0ed5. (Somasundaram Krishnasamy)  [Orabug: 35722366]  
  - cpufreq: amd-pstate: Enable amd-pstate (Henry Willard)  [Orabug: 35702537]  
  - uek-rpm/aarch64: Enable CONFIG_I2C_MUX_PINCTRL for RPi (Vijay Kumar)  [Orabug: 35683507]  
  - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35678691]  
  - uek-rpm: Enable CONFIG_NVME_AUTH and CONFIG_NVME_TARGET_AUTH (Alan Adamson)  [Orabug: 35677584]  
  - uek-rpm: move sch_fq_codel module to be built-in (Samasth Norway Ananda)  [Orabug: 35673113]  
  - uek-rpm: Build embedded kernel for Bluefield 3 smartnic (Dave Kleikamp)  [Orabug: 35672483]  
  - uek-rpm: Disable kernel support for CONFIG_FIREWIRE in OL8 and OL9 for LUCI (Yifei Liu)  [Orabug: 35650963]  {CVE-2023-3159} 
  - uek-rpm: aarch64: Enable direct booting with nvdimm (Liam Merwick)  [Orabug: 35635621]  
  - uek-rpm: Enable CONFIG_KFENCE (Joe Jin)  [Orabug: 34125437]  
  - uek-rpm/aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar)  [Orabug: 33833293]  
  - uek-rpm: Remove mii.ko from core list as it is builtin for aarch64 OL8/9 (Vijayendra Suman)  [Orabug: 35872400]  
  - uek-rpm: Add nls_ucs2_utils module required by cifs in core list (Vijayendra Suman)  [Orabug: 35867956]  
  - uek-rpm: Cleanup config to use savedefconfig format LUCI 6.5 (Harshit Mogalapalli)  [Orabug: 35822479]  
  - uek-rpm: Enable CONFIG_AUTOFS_FS in LUCI (Harshit Mogalapalli)  [Orabug: 35822479]  
  - uek-rpm: extras: Move meson_dw_mipi_dsi to extras rpm (Harshit Mogalapalli)  [Orabug: 35794685]  
  - uek-rpm: Enable CONFIG_FUNCTION_GRAPH_RETVAL in LUCI (Harshit Mogalapalli)  [Orabug: 35794685]  
  - rpmbuild: fixed missing _kernel_cc macros to allow alternate compilers (Mark Nicholson)  [Orabug: 35641994]  
  - uek-rpm: Remove unbuilt modules from core list (Vijayendra Suman)  [Orabug: 35636404]  
  - uek-rpm: savedefconfig for ol9/x86_64 (Mark Nicholson)  [Orabug: 35641970]  
  - uek-rpm: savedefconfig for ol9/aarch64 (Mark Nicholson)  [Orabug: 35641970]  
  - uek-rpm: savedefconfig for ol8/x86_64 (Mark Nicholson)  [Orabug: 35641970]  
  - uek-rpm: savedefconfig for ol8/aarch64 (Mark Nicholson)  [Orabug: 35641970]  
  - uek-rpm: updating to more reliable architecture identification (Mark Nicholson)  [Orabug: 35641977]  
  - uek-rpm: aarch64: Disable 64k container kernel build (Liam Merwick)  [Orabug: 35555035]  
  - uek-rpm: Enable ADDRESS_MASKING in x86_64 (Harshit Mogalapalli)  [Orabug: 35493002]  
  - uek-rpm: "make olddefconfig" for version 6.4.0 (arm64) (Harshit Mogalapalli)  [Orabug: 35493002]  
  - uek-rpm: "make olddefconfig" for version 6.4.0 (arm64) (Harshit Mogalapalli)  [Orabug: 35493002]  
  - uek-rpm: "make olddefconfig" for version 6.4.0 (x86_64) (Harshit Mogalapalli)  [Orabug: 35493002]  
  - uek-rpm: "make olddefconfig" for version 6.4.0 (x86_64) (Harshit Mogalapalli)  [Orabug: 35493002]  
  - uek-rpm: Move mlx5-vfio-pci to core rpm (Samasth Norway Ananda)  [Orabug: 35485091]  
  - uek-rpm: Change the build tool versions to the latest (Vijayendra Suman)  [Orabug: 35378764]  
  - uek-rpm: Remove unused CONFIG_NF_TABLES_SET from container config (Liam Merwick)  [Orabug: 35533257]  
  - uek-rpm: ol8: Enable aarch64 build of kernel-uek-container (Liam Merwick)  [Orabug: 35533257]  
  - uek-rpm: ol8: Enable aarch64 build of kernel-uek-container (Liam Merwick)  [Orabug: 35533257]  
  - uek-rpm: ol9: aarch64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 35533257]  
  - uek-rpm: ol8: aarch64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 35533257]  
  - Revert "uek-rpm: Make kernel to depend on latest libdnf version" (Somasundaram Krishnasamy)  [Orabug: 35458788]  
  - uek-rpm: Install dtb files under /lib/modules (Dave Kleikamp)  [Orabug: 35338876]  
  - uek: kabi: Add with_kabichk flag to control kABI checking (Saeed Mirzamohammadi)  [Orabug: 35295016]  
  - uek-rpm: arm64: ol9: Update configuration for 6.3.0 (Somasundaram Krishnasamy)  [Orabug: 35257475]  
  - uek-rpm: arm64: ol8: Update configuration for 6.3.0 (Somasundaram Krishnasamy)  [Orabug: 35257475]  
  - uek-rpm: x86_64: ol9: Update configuration for 6.3.0 (Somasundaram Krishnasamy)  [Orabug: 35257475]  
  - uek-rpm: x86_64: ol8: Update configuration for 6.3.0 (Somasundaram Krishnasamy)  [Orabug: 35257475]  
  - uek-rpm: mod-extra: Remove mt7921e.ko from extras list (Harshit Mogalapalli)  [Orabug: 35243028]  
  - uek-rpm: Enable RFC7919 config for aarch64 (Saeed Mirzamohammadi)  [Orabug: 35229732]  
  - uek-rpm: Add ena.ko to core rpm (Somasundaram Krishnasamy)  [Orabug: 35225380]  
  - uek-container: Enable CONFIG_NF_* and CONFIG_NFT_* to support nftables (Liam Merwick)  [Orabug: 35219678]  
  - uek-rpm: Update linux-firmware dependency (Somasundaram Krishnasamy)  [Orabug: 35213422]  
  - uek-rpm: x86_64-container enable CONFIG_SLS (Maciej S. Szmigiero)  [Orabug: 35107880]  
  - uek-rpm: Enable RFC7919 config (Saeed Mirzamohammadi)  [Orabug: 35084298]  
  - uek-rpm: aarch64 enable DETECT_HUNG_TASK (Tom Saeger)  [Orabug: 35080436]  
  - uek-rpm: config-x86-64*: Disable CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (Alejandro Jimenez)  [Orabug: 35064808]  
  - uek-rpm: aarch64: ol8: Update configuration for 6.2.0 (make olddefconfig for version 6.2.0) (Somasundaram Krishnasamy)  [Orabug: 34971591]  
  - uek-rpm: aarch64: ol9: Update configuration for 6.2.0 (make olddefconfig for version 6.2.0) (Somasundaram Krishnasamy)  [Orabug: 34971591]  
  - uek-rpm: x86_64: ol8: Update configuration for 6.2.0 (make olddefconfig for version 6.2.0) (Somasundaram Krishnasamy)  [Orabug: 34971591]  
  - uek-rpm: x86_64: ol9: Update configuration for 6.2.0 (make olddefconfig for version 6.2.0) (Somasundaram Krishnasamy)  [Orabug: 34971591]  
  - uek-rpm: Enable HP watchdog for aarch64 (Saeed Mirzamohammadi)  [Orabug: 34910557]  
  - uek-rpm: Add ptp_kvm.ko to core rpm (Somasundaram Krishnasamy)  [Orabug: 34901463]  
  - uek-rpm: Disable Promise SuperTrak EX series storage controllers (Somasundaram Krishnasamy)  [Orabug: 34889277]  
  - uek-rpm: ol8: Choose right annobin plugin for UEK build (Somasundaram Krishnasamy)  [Orabug: 34873886]  
  - uek-rpm: Enable CONFIG_HP_ILO for aarch64 (Saeed Mirzamohammadi)  [Orabug: 34873808]  
  - Add SecureBoot signing for aarch64 arch (Sherry Yang)  [Orabug: 34869431]  
  - uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas)  [Orabug: 34833166]  
  - uek-rpm: kernel-uek.spec: make -modules-extra depend on -modules (Todd Vierling)  [Orabug: 34820551]  
  - uek-rpm: Set CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=0 (Victor Erminpour)  [Orabug: 34765425]  
  - uek-rpm: Add Documentation to kernel-uek-devel (Somasundaram Krishnasamy)  [Orabug: 34753071]  
  - uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi)  [Orabug: 34342321]  
  - uek-rpm: config: Enable CONFIG_KEY_NOTIFICATIONS option (Somasundaram Krishnasamy)  [Orabug: 33959358]  
  - uek-rpm: remove mstflint_access modules from core list (Vijayendra Suman)  [Orabug: 35484714]  
  - uek-rpm: relocate cifs modules from core list (Vijayendra Suman)  [Orabug: 35477693]  
  - uek-rpm: Enable CONFIG_NET_SCH_MQPRIO_LIB and add sch_mqprio_lib in core (Vijayendra Suman)  [Orabug: 35245010]  
  - uek-rpm: Remove ipt_CLUSTERIP and cls_rsvp modules from core.list (LUCI Bot)  [Orabug: 35245010]  
  - uek-rpm: Remove vfio_virqfd modulues from core (Vijayendra Suman)  [Orabug: 35031039]  
  - uek-rpm: drop OL9 CONFIG_INFINIBAND_RDMAIP_NOTIFY (Vijayendra Suman)  [Orabug: 34428972]  
  - uek-rpm: drop ctf on OL9 (Victor Erminpour)  [Orabug: 34116108]  
  - uek-rpm: drop ctf on OL8 (Victor Erminpour)  [Orabug: 34116108]  
  - uek-rpm: Increase CONFIG_FRAME_WARN to 4096 (Victor Erminpour)  [Orabug: 34048847]  
  - uek-rpm: Disable CONFIG_USB_NET_RNDIS_WLAN (Rhythm Mahajan)  [Orabug: 35067038]  
  - uek-rpm: Add new modules to core rpm (Somasundaram Krishnasamy)  [Orabug: 35063941]  
  - uek-container: Re-enable OL8 builds (Liam Merwick)  [Orabug: 35054539]  
  - uek-container: Drop unnecessary setting of CONFIG_DEBUG_SECTION_MISMATCH (Liam Merwick)  [Orabug: 35054539]  
  - uek-container: Pass binutils workaround via EXTRA_CFLAGS (Liam Merwick)  [Orabug: 35054539]  
  - uek-rpm: ol8: add spec file changes to disable container kernel build (Vijayendra Suman)  [Orabug: 35047765]  
  - uek-rpm: Remove nft_objref modulues from core (Vijayendra Suman)  [Orabug: 35031035]  
  - uek-rpm: Add nft_reject* modules to core rpm. (Somasundaram Krishnasamy)  [Orabug: 34970059]  
  - uek-rpm: [act|cls]_bpf should be part of core (Alan Maguire)  [Orabug: 34551621]  
  - uek-rpm: ol9: Disable CONFIG_IR_MCEUSB from LUCI OL9. (Harshit Mogalapalli)  [Orabug: 34843627]  
  - uek-rpm: core: Move few modules which are recently enabled to core. (Harshit Mogalapalli)  [Orabug: 34853373]  
  - uek-rpm: mod-extra: Move modules which are recently enabled to extras (Harshit Mogalapalli)  [Orabug: 34853373]  
  - uek-rpm: Enable CONFIG_INTEGRITY_MACHINE_KEYRING for x86_64 (Victor Erminpour)  [Orabug: 34812613]  
  - uek-rpm: Enable CONFIG_LRU_GEN (Victor Erminpour)  [Orabug: 34812613]  
  - uek-rpm: Update configuration for v6.1.0 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 34812613]  
  - uek-rpm: Update configuration for v6.1.0 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 34812613]  
  - uek-rpm: Enable CONFIG_ARCH_BCM for aarch64 (Victor Erminpour)  [Orabug: 34812613]  
  - uek-container: Enable CONFIG_IA32_EMULATION (Liam Merwick)  [Orabug: 34909770]  
  - uek-rpm: Disable CONFIG_SND_PCM_OSS for OL8 and OL9 (Harshit Mogalapalli)  [Orabug: 34654130]  
  - uek-container: ol9: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850972]  
  - uek-container: ol8: Update config with that generated by 'make olddefconfig' (Liam Merwick)  [Orabug: 34850972]  
  - uek-rpm: Explicitly enable CONFIG_XEN_OVMAPI (Liam Merwick)  [Orabug: 34850972]  
  - uek-container: Fix x86_64 PVH ELF note with binutils >= 2.36 (Liam Merwick)  [Orabug: 34850972]  
  - uek-rpm: ol9: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850972]  
  - uek-rpm: ol8: Add spec file changes to build container kernel (Liam Merwick)  [Orabug: 34850972]  
  - uek-rpm: ol9: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850972]  
  - uek-rpm: ol8: x86_64: Add kernel-uek-container config file (Liam Merwick)  [Orabug: 34850972]  
  - uek-rpm: core.list: add VirtualBox guest drivers to core package (Todd Vierling)  [Orabug: 34820540]  
  - uek-rpm: Disable few config options that we enabled previously. (Harshit Mogalapalli)  [Orabug: 34803319]  
  - RHCK 9.1 builtin option change to module for UEK7u1 (Vijayendra Suman)  [Orabug: 34712359]  
  - uek-rpm: Enable modules in LUCI to match RHCK9.1 - 34776356 (Harshit Mogalapalli)  [Orabug: 34776356]  
  - uek-rpm: Enable CONFIG options in LUCI to match RHCK9.1 (Harshit Mogalapalli)  [Orabug: 34712508]  
  - uek-rpm: ol9: disable CONFIG_MISDN and dependent drivers on OL9/LUCI (Harshit Mogalapalli)  [Orabug: 34757699]  
  - uek-rpm: add aarch64 to list of vdso arches (Tom Saeger)  [Orabug: 34716201]  
  - uek-rpm: Update configuration for v6.0.0 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 34571931]  
  - uek-rpm: Update configuration for v6.0.0 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 34571931]  
  - uek-rpm: Install kernel-rpm-macros as build dependency (Somasundaram Krishnasamy)  [Orabug: 34550488]  
  - uek-rpm: Move the file kernel-$KernelVer-kabideps to RPM_BUILD_ROOT (Somasundaram Krishnasamy)  [Orabug: 34701290]  
  - uek-rpm: Enable sound subsystem CONFIG options in LUCI to match RHCK9.1 (Harshit Mogalapalli)  [Orabug: 34694853]  
  - crypto: fips - make proc files report fips module name and version (Saeed Mirzamohammadi)  [Orabug: 34669137]  
  - uek-rpm: config-x86_64*: enable more LPSS bus options for hardware support (Todd Vierling)  [Orabug: 34576188]  
  - uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi)  [Orabug: 34635293]  
  - uek-rpm: Set CONFIG_FRAME_WARN=4096 for OL9 (Victor Erminpour)  [Orabug: 34595190]  
  - uek-rpm: Enable CONFIG_EFI_SECRET=m (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_EFI_COCO_SECRET (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_FW_UPLOAD (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_MICROCODE_LATE_LOADING (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_PERF_EVENTS_AMD_BRS (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_INTEL_TDX_GUEST (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Disable CONFIG_PAGE_POOL_STATS for aarch64 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_CRYPTO_SM3=m (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP_DEFAULT_ON=y (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_DRM_VMWGFX=m and CONFIG_DRM_VMWGFX_FBCON=y for Ol9.aarch64 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_FW_LOADER_PAGED_BUF for OL9.aarch64 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_MAPPING_DIRTY_HELPERS for OL9 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_ARM64_ERRATUM_2077057 for OL8 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Disable CONFIG_DEBUG_PREEMPT for OL9 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_MODULE_ALLOW_BTF_MISMATCH for OL9 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_LRU_CACHE=m for OL9 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_INIT_STACK_ALL_ZERO for OL9 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_KEY_NOTIFICATIONS for OL9 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Enable CONFIG_PSTORE_BLK for OL9 (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Disable CONFIG_BLK_DEV_DRBD and CONFIG_DRBD_FAULT_INJECTION (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Update configuration for v5.19.1 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Update configuration for v5.19.1 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 34335750]  
  - uek-rpm: Set CONFIG_VSOCKETS=m and CONFIG_VSOCKETS_DIAG=m (Victor Erminpour)  [Orabug: 34501175]  
  - Enable CONFIG_DEBUG_KMEMLEAK for the arm64 debug kernel (Dave Kleikamp)  [Orabug: 34436545]  
  - bpf: enable kprobe-based function return value override (Alan Maguire)  [Orabug: 34410366]  
  - uek-rpm: Enable CONFIG_NITRO_ENCLAVES for OL9 (Victor Erminpour)  [Orabug: 33691600]  
  - uek-rpm: Enable CONFIG_DAMON_PADDR for OL9 (Victor Erminpour)  [Orabug: 33691603]  
  - uek-rpm: Enable prerequisites for Secure Boot support (Eric Snowberg)  [Orabug: 34201183]  
  - uek-rpm: Enable CONFIG_READ_ONLY_THP_FOR_FS (Victor Erminpour)  [Orabug: 33825498]  
  - uek-rpm: Remove RDS and rdmaip_notify modules from core.list (Victor Erminpour)  [Orabug: 34280374]  
  - Revert "uek-rpm: Add crashkernel.default file" (John Donnelly)  [Orabug: 34280071]  
  - uek-rpm: New shim versions and secureboot certs (Jack Vogel)  [Orabug: 34219929]  {CVE-2021-3695} {CVE-2021-3696} {CVE-2021-3697} {CVE-2022-28733} {CVE-2022-28734} {CVE-2022-28735} {CVE-2022-28736} 
  - uek-rpm: Enable CONFIG_MLX5_VFIO_PCI (Victor Erminpour)  [Orabug: 34082547]  
  - uek-rpm: Enable CONFIG_DAMON_SYSFS (Victor Erminpour)  [Orabug: 34082547]  
  - uek-rpm: Enable CONFIG_SLS (Victor Erminpour)  [Orabug: 34082547]  
  - uek-rpm: Enable CONFIG_X86_KERNEL_IBT (Victor Erminpour)  [Orabug: 34082547]  
  - uek-rpm: Update configuration for v5.18 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 34082547]  
  - uek-rpm: Update configuration for v5.18 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 34082547]  
  - uek-rpm: Add modules to core rpm to allow kselftest rtnetlink tests pass (Somasundaram Krishnasamy)  [Orabug: 34252625]  
  - uek-rpm: Enable dependencies needed by CONFIG_SND_SOC_INTEL_HDA_DSP_COMMON (Brian Maly)  [Orabug: 34187248]  
  - uek-rpm: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Harshit Mogalapalli)  [Orabug: 34209812]  
  - uek-rpm: Added squashfs module to core rpm for kdump (Vijayendra Suman)  [Orabug: 34202155]  
  - uek-rpm: Enable prerequisites for Secure Boot support (Eric Snowberg)  [Orabug: 34201183]  
  - uek-rpm: Modify options for CONFIG_VSOCKETS_DIAG=y (Victor Erminpour)  [Orabug: 34077319]  
  - uek-rpm: Modify options for CONFIG_TIPC_DIAG=y (Victor Erminpour)  [Orabug: 34077319]  
  - uek-rpm: Modify options for CONFIG_INET_SCTP_DIAG=y (Victor Erminpour)  [Orabug: 34077319]  
  - uek-rpm: Enable CONFIG_MPTCP (Victor Erminpour)  [Orabug: 34077319]  
  - uek-rpm: Set CONFIG_*_DIAG options as built-ins to match RHCK9 (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_DEBUG_WX for x86_64 debug kernel (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_TMPFS_INODE64 (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_CXL_MEM (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_CMA_SYSFS (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable Platform related options from RHCK9 (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable DM_VERITY_VERIFY_ROOTHASH_SIG and DM_VERITY_FEC (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable Crypto related options from RHCK9 (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_CAN_* options from RHCK9 (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_NET_SCH_* options from RHCK9 (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_NF_FLOW_TABLE (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable missing Netfilter options from RHCK9 (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_CGROUP_MISC and CONFIG_BLK_CGROUP_FC_APPID (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_INTEL_IDXD_PERFMON (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_RTW88_8723DE and CONFIG_RTW88_8821CE (Victor Erminpour)  [Orabug: 33993286]  
  - uek-rpm: Enable CONFIG_FS_VERITY (Victor Erminpour)  [Orabug: 34096985]  
  - uek-rpm: Sync packaging changes with UEK7. (Somasundaram Krishnasamy)  [Orabug: 34171277]  
  - uek-rpm: Update UEK7 kernel versions (Somasundaram Krishnasamy)  [Orabug: 34171277]  
  - uek-rpm: Add crashkernel.default file (John Donnelly)  [Orabug: 33806596]  
  - uek-rpm: configs: enable 9P_FS for x86_64 (Todd Vierling)  [Orabug: 34145664]  
  - uek-rpm: ol9: Use kabi tool from $RPM_SOURCE_DIR (Stephen Brennan)  [Orabug: 33735021]  
  - uek-rpm: Add placeholder dummy Symtypes (Stephen Brennan)  [Orabug: 33735021]  
  - uek-rpm: ol9: Add more kABI diagnostics (Stephen Brennan)  [Orabug: 33735021]  
  - uek-rpm: ol9: Enable creation of Symtypes files (Stephen Brennan)  [Orabug: 33735021]  
  - uek-rpm: Rearrange modules due to depmod errors (Victor Erminpour)  [Orabug: 33735021]  
  - uek-rpm: OL9: unset CONFIG_NFS_DISABLE_UDP_SUPPORT (Calum Mackay)  [Orabug: 33735021]  
  - uek-rpm: aarch64: Do not build bpf and perf tools for aarch64 64k page enabled kernels. (Somasundaram Krishnasamy)  [Orabug: 33735021]  
  - uek-rpm: Change the shim string in the ol9 spec (Jack Vogel)  [Orabug: 33735021]  
  - uek-rpm: Adjust rpm modules list (Somasundaram Krishnasamy)  [Orabug: 33735021]  
  - uek-rpm: Remove nano rpm source files. (Somasundaram Krishnasamy)  [Orabug: 33735021]  
  - uek-rpm: Update DEFAULTKERNEL properly when RHCK/UEK6/UEK7 co-exist. (Somasundaram Krishnasamy)  [Orabug: 33735021]  
  - uek-rpm: Restructure UEK7 packaging (Somasundaram Krishnasamy)  [Orabug: 33735021]  
  - uek-rpm: remove headers_check (Somasundaram Krishnasamy)  [Orabug: 33735021]  
  - uek-rpm: Make build verbosity configurable. (Somasundaram Krishnasamy)  [Orabug: 33735021]  
  - uek-rpm: Cleanup spec file (Somasundaram Krishnasamy)  [Orabug: 33735021]  
  - uek-rpm: enable VIRTIO_PCI_LIB_LEGACY config (Si-Wei Liu)  [Orabug: 33735021]  
  - uek-rpm: Enable zonefs (Larry Bassel)  [Orabug: 33735021]  
  - uek-rpm: Enable CONFIG_WATCH_QUEUE (Victor Erminpour)  [Orabug: 33735021]  
  - uek-rpm: Enable CONFIG_INTEGRITY_MACHINE_KEYRING (Eric Snowberg)  [Orabug: 33735021]  
  - uek-rpm: Enable CONFIG_READ_ONLY_THP_FOR_FS (Victor Erminpour)  [Orabug: 33735021]  
  - uek-rpm: Enable support for loading compressed firmware files in OL9 (Somasundaram Krishnasamy)  [Orabug: 33735021]  
  - net/mlx5: Enable mlx5 IPsec build options on OL8/OL9 (Qing Huang)  [Orabug: 33735021]  
  - uek-rpm: Change aarch64 page size to 4k (Dave Kleikamp)  [Orabug: 33735021]  
  - Disable DRBD (Distributed Replicated Block Device) in UEK7 for OL9 (Sherry Yang)  [Orabug: 33735021]  
  - uek-rpm/ol/config-aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar)  [Orabug: 33735021]  
  - uek-rpm: Disable CONFIG_PHONET (Victor Erminpour)  [Orabug: 33735021]  
  - uek-rpm: Enable CONFIG_INTEL_IDXD (Victor Erminpour)  [Orabug: 33735021]  
  - uek-rpm: Enable CONFIG_DM_DUST (Victor Erminpour)  [Orabug: 33735021]  
  - uek-rpm: Disable CONFIG_RT_GROUP_SCHED (Victor Erminpour)  [Orabug: 33735021]  
  - uek-rpm: Disable CONFIG_HID_WIIMOTE (Victor Erminpour)  [Orabug: 33735021]  
  - uek-rpm: Disable CONFIG_HID_TIVO (Victor Erminpour)  [Orabug: 33735021]  
  - uek-rpm: Disable CONFIG_DVB_FIREDTV (Victor Erminpour)  [Orabug: 33735021]  
  - uek-rpm: set CONFIG_CRYPTO_DEV_QAT_4XXX=m (Sherry Yang)  [Orabug: 33735021]  
  - A/A Bonding: Add support for user-space "Resilient RDMAIP" (Gerd Rausch)  [Orabug: 33150457] [Orabug: 33731403] [Orabug: 33735021]  
  - uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw)  [Orabug: 33735021]  
  - uek-rpm: add binutils-devel to ol9 spec file, remove wrapping, no firmware ver. (Jack Vogel)  [Orabug: 33735021]  
  - uek-rpm: Add rpm build environment for OL9 (Somasundaram Krishnasamy)  [Orabug: 33735021]  
  - uek-rpm: Enable CONFIG_NVME_VERBOSE_ERRORS (Alan Adamson)  [Orabug: 34087752]  
  - uek-rpm: Separate x86_64 kABI checking for OL8/9 (Saeed Mirzamohammadi)  [Orabug: 34045453]  
  - uek-rpm: Update configuration for v5.17 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 33813350]  
  - uek-rpm: Update configuration for v5.17 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 33813350]  
  - uek-rpm: Enable CONFIG_INIT_STACK_ALL_ZERO (Victor Erminpour)  [Orabug: 33627775]  
  - uek-rpm: ol8: Use kabi tool from $RPM_SOURCE_DIR (Stephen Brennan)  [Orabug: 33931937]  
  - uek-rpm: enable CONFIG_MODULE_ALLOW_BTF_MISMATCH (Alan Maguire)  [Orabug: 33921774]  
  - uek-rpm: Enable CONFIG_DRM_VMWGFX and CONFIG_DRM_VMWGFX_FBCON for aarch64 (Victor Erminpour)  [Orabug: 33969198]  
  - uek-rpm: Add placeholder dummy Symtypes (Stephen Brennan)  [Orabug: 33871939]  
  - uek-rpm: ol8: Add more kABI diagnostics (Stephen Brennan)  [Orabug: 33871939]  
  - uek-rpm: ol8: Enable creation of Symtypes files (Stephen Brennan)  [Orabug: 33871939]  
  - uek-rpm: Add kabi tool and documentation (Stephen Brennan)  [Orabug: 33871939]  
  - uek-rpm: Disable CONFIG_DEBUG_PREEMPT (Victor Erminpour)  [Orabug: 33867602]  
  - uek-rpm: Enable CONFIG_WATCH_QUEUE (Victor Erminpour)  [Orabug: 33867476]  
  - uek-rpm: Enable zonefs (Larry Bassel)  [Orabug: 33871868]  
  - uek-rpm: Change aarch64 page size to 4k (Dave Kleikamp)  [Orabug: 33835878]  
  - uek-rpm: Enable CONFIG_PSTORE_BLK (Victor Erminpour)  [Orabug: 33691597]  
  - uek-rpm: Enable CONFIG_NITRO_ENCLAVES (Victor Erminpour)  [Orabug: 33691600]  
  - uek-rpm: Enable CONFIG_DAMON_PADDR (Victor Erminpour)  [Orabug: 33691603]  
  - uek-rpm: Update configuration for v5.16 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 33652838]  
  - uek-rpm: Update configuration for v5.16 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 33652838]  
  - uek-rpm: Disable CONFIG_HID_TIVO (Victor Erminpour)  [Orabug: 33780090]  
  - uek-rpm: Disable CONFIG_HID_WIIMOTE (Victor Erminpour)  [Orabug: 33780073]  
  - uek-rpm: Enable CONFIG_INTEL_IDXD (Victor Erminpour)  [Orabug: 33780059]  
  - uek-rpm: Disable CONFIG_RT_GROUP_SCHED (Victor Erminpour)  [Orabug: 33726302]  
  - uek-rpm: Enable CONFIG_DM_DUST (Victor Erminpour)  [Orabug: 33691674]  
  - uek-rpm: Disable CONFIG_PHONET (Victor Erminpour)  [Orabug: 33780028]  {CVE-2021-45095} 
  - spec: drop CONFIG_DTRACE (Nick Alcock)  [Orabug: 33647367]  
  - uek-rpm: drop with_dtrace (Nick Alcock)  [Orabug: 33647367]  
  - uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw)  [Orabug: 33664132]  
  - uek-rpm: Build $MakeTarget and modules together (Dave Kleikamp)  [Orabug: 33471404]  
  - uek-rpm: set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y (Alan Maguire)  [Orabug: 33670202]  
  - uek-rpm: Enable CONFIG_PRINTK_INDEX=y (Victor Erminpour)  [Orabug: 33627763]  
  - uek-rpm: Enable CONFIG_WQ_WATCHDOG=y (Victor Erminpour)  [Orabug: 33627763]  
  - uek-rpm: Enable CONFIG_CSD_LOCK_WAIT_DEBUG=y (Victor Erminpour)  [Orabug: 33627763]  
  - uek-rpm: Enable CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON for x86_64 (Victor Erminpour)  [Orabug: 33596834]  
  - uek-rpm: Increase CONFIG_CMA_AREAS from 7 to 19 (Victor Erminpour)  [Orabug: 33605721]  
  - uek-rpm: Enable CONFIG_ZERO_CALL_USED_REGS=y for v5.15 (Victor Erminpour)  [Orabug: 33589982]  
  - uek-rpm: Disable CONFIG_DEV_DAX_PMEM_COMPAT for v5.15 (Victor Erminpour)  [Orabug: 33591084]  
  - uek-rpm: Enable CONFIG_FAULT_INJECTION and CONFIG_FAIL_FUNCTION in debug kernel (Victor Erminpour)  [Orabug: 33584803]  
  - uek-rpm: Enable CONFIG_INTEL_PMT_* to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]  
  - uek-rpm: Enable CONFIG_UV_SYSFS=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]  
  - uek-rpm: Enable CONFIG_SND_SOC_* related options to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]  
  - uek-rpm: Enable CONFIG_STM=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]  
  - uek-rpm: Enable CONFIG_ATH11K=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]  
  - uek-rpm: Enable CONFIG_DM_MULTIPATH_IOA=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]  
  - uek-rpm: Enable CONFIG_QRTR=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]  
  - uek-rpm: Enable CONFIG_MHI_BUS=m to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]  
  - uek-rpm: Enable CONFIG_ACPI_FPDT=y to match OL8.5 RHCK (Victor Erminpour)  [Orabug: 33596485]  
  - uek-rpm: Set CONFIG_CRYPTO_XXHASH=y for v5.15 (Victor Erminpour)  [Orabug: 33466553]  
  - uek-rpm: Enable CONFIG_DRM_I915_WERROR=y for v5.15 (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Enable CONFIG_DAMON=y for v5.15 (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Disable FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER for v5.15 (aarch64 only) (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Enable CONFIG_MLX5_MPFS=y for v5.15 (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Enable CONFIG_DEBUG_INFO_DWARF4=y for v5.15 (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Enable CONFIG_UNWINDER_ORC=y for v5.15 (x86_64 only) (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Enable CONFIG_VDPA_USER=m for v5.15 (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Enable CONFIG_WERROR=y for v5.15 (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Enable CONFIG_DMA_RESTRICTED_POOL=y for v5.15 (aarch64 only) (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Update configuration for v5.15.0 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Update configuration for v5.15.0 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 33381559]  
  - uek-rpm: Move LUCI to GCC 11 toolchain (Victor Erminpour)  [Orabug: 33564964]  
  - uek-rpm: Modify bpftool-debuginfo to use correct OL8.5 RPM macro (Victor Erminpour)  [Orabug: 33564964]  
  - uek-rpm: Move LUCI to OL-8.5 auto-build chroot (Victor Erminpour)  [Orabug: 33564964]  
  - uek-rpm: enable CONFIG_TEST_BPF for debug kernels (Alan Maguire)  [Orabug: 33551736]  
  - uek-rpm: Move LUCI to OL-8.4 build chroot (Victor Erminpour)  [Orabug: 33473840]  
  - bpf: ensure module BTF is available in kernel modules (Alan Maguire)  [Orabug: 33344690]  
  - uek-rpm: Enable CONFIG_TIMERLAT_TRACER=y for v5.14 (Victor Erminpour)  [Orabug: 33122956]  
  - uek-rpm: Enable CONFIG_OSNOISE_TRACER=y for v5.14 (Victor Erminpour)  [Orabug: 33122956]  
  - uek-rpm: Enable CONFIG_VIRTIO_IOMMU=y for v5.14 (Victor Erminpour)  [Orabug: 33122956]  
  - uek-rpm: Enable CONFIG_SCHED_CORE=y for v5.14 (Victor Erminpour)  [Orabug: 33122956]  
  - uek-rpm: Enable CONFIG_INFINIBAND_IRDMA=m for v5.14 (Victor Erminpour)  [Orabug: 33122956]  
  - uek-rpm: Enable CONFIG_WIRELESS_HOTKEY=m for v5.14 on x86_64 (Victor Erminpour)  [Orabug: 33122956]  
  - uek-rpm: Update configuration for v5.14 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 33122956]  
  - uek-rpm: Update configuration for v5.14 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 33122956]  
  - uek-rpm: Delete the 'uek-rpm/ol7' directory (Victor Erminpour)  [Orabug: 33348395]  
  - uek-rpm: Set DEFAULTKERNEL in /etc/sysconfig/kernel correctly (Dave Kleikamp)  [Orabug: 33323692]  
  - uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo (Somasundaram Krishnasamy)  [Orabug: 33271717]  
  - uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan)  [Orabug: 33186979]  
  - uek-rpm: Enable CONFIG_KVM_WERROR=y (Liam Merwick)  [Orabug: 33027178]  
  - uek-rpm: Enable Microsoft Azure Network Adapter (MANA) (John Donnelly)  [Orabug: 32906994]  
  - Modify the UEK6 version of RDS for the LUCI kernel (William Kucharski)  [Orabug: 32080993]  
  - uek-rpm: Developer requested config options for v5.13 aarch64 (Victor Erminpour)  [Orabug: 32958782]  
  - uek-rpm: Developer requested config options for v5.13 x86_64 (Victor Erminpour)  [Orabug: 32958782]  
  - Update configuration for v5.13 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 32958782]  
  - Update configuration for v5.13 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 32958782]  
  - uek-rpm: Add new mpi3mr driver to config (John Donnelly)  [Orabug: 33021154]  
  - bpf: provide BPF Type Format (BTF) info for kernel (Alan Maguire)  [Orabug: 33005621]  
  - uek-rpm: Enable CONFIG_KVM_WERROR=y (Liam Merwick)  [Orabug: 33027178]  
  - uek-rpm: enable nvme target passthru mode (Alan Adamson)  [Orabug: 33011016]  
  - uek-rpm: Enable Microsoft Azure Network Adapter (MANA) (John Donnelly)  [Orabug: 32906994]  
  - Modify the UEK6 version of RDS for the LUCI kernel (William Kucharski)  [Orabug: 32080993]  
  - uek-rpm: Remove reference to bpf-helpers in specfile. (Victor Erminpour)   
  - uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi)  [Orabug: 32869194]  
  - uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour)  [Orabug: 32843813]  
  - uek-rpm: Developer requested config options for v5.12 (Victor Erminpour)  [Orabug: 32770971]  
  - uek-rpm: Put back options that were removed from v5.12 (Victor Erminpour)  [Orabug: 32770971]  
  - uek-rpm: Update configuration for v5.12 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 32770971]  
  - uek-rpm: Update configuration for v5.12 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 32770971]  
  - Modify the UEK6 version of RDS for the LUCI kernel (William Kucharski)  [Orabug: 32080993]  
  - uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel)  [Orabug: 32532661]  
  - uek-rpm: add opbmc to nano-kernel (Eric Snowberg)  [Orabug: 32555643]  
  - uek-rpm: Update configuration for v5.11 (Additional requests) (Victor Erminpour)  [Orabug: 32468111]  
  - uek-rpm: Update configuration for v5.11 (aarch64 make olddefconfig) (Victor Erminpour)  [Orabug: 32468111]  
  - uek-rpm: Update configuration for v5.11 (x86_64 make olddefconfig) (Victor Erminpour)  [Orabug: 32468111]  
  - Modify the UEK6 version of RDS for the LUCI kernel (William Kucharski)  [Orabug: 32080993]  
  - uek-rpm: Enable CONFIG_ACPI_DPTF and re-enable CONFIG_DPTF_POWER (Victor Erminpour)  [Orabug: 31368028]  
  - uek-rpm: "make olddefconfig" for version 5.10.0 (arm64) (Victor Erminpour)  [Orabug: 31368028]  
  - uek-rpm: "make olddefconfig" for version 5.10.0 (x86_64) (Victor Erminpour)  [Orabug: 31368028]  
  - Modify the UEK6 version of RDS for the LUCI kernel (William Kucharski)  [Orabug: 32080993]  
  - uek-rpm: disable CONFIG_DEBUG_VM_PGTABLE for aarch64 (Thomas Tai)  [Orabug: 31814210]  
  - luci: fix kernel-uek.spec to reboot a LUCI kernel (Larry Bassel)  [Orabug: 31735472]  
  - uek-rpm: Add OL7 RPM BuildRequires dependency on python3 (Victor Erminpour)  [Orabug: 30595825]  
  - luci: Rename uek-tools to luci-tools (Victor Erminpour)  [Orabug: 30251916]  
  - luci: Rename LUCI RPMs to 'kernel-luci' (Victor Erminpour)  [Orabug: 30148149]  
  - luci: Disable kABI check. (Victor Erminpour)   
  - uek-rpm: Add nvme-tcp and nvme-rdma to ol7 and ol8 nano kernels (Alan Adamson)  [Orabug: 32230382]  
  - uek-rpm: enable VDPA subsystem and drivers (Si-Wei Liu)  [Orabug: 32121107]  
  - uek-rpm: aarch64: enable CONFIG_ACPI_APEI_EINJ (Dave Kleikamp)  [Orabug: 32182617]  
  - arm64:uek/config: Enable ZONE_DMA config (Vijay Kumar)  [Orabug: 32195245]  
  - uek-rpm: Enable Intel Speed Select Technology interface support (Somasundaram Krishnasamy)  [Orabug: 32161424]  
  - uek-rpm: aarch64: increase CONFIG_NODES_SHIFT from 3 to 6 (Dave Kleikamp)  [Orabug: 32112538]  
  - uek-rpm: Add mce-inject.ko path in OL8 nano kernel modules list (Saeed Mirzamohammadi)  [Orabug: 32073053]  
  - uek-rpm: Configure wireguard to be delivered in RPMs as a module (William Kucharski)  [Orabug: 32013736]  
  - uek-rpm: Fix integer test for 4k page size module signing (Dave Kleikamp)  [Orabug: 32041516]  
  - uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 31358096]  
  - uek-rpm/kernel-uek.spec: Sign modules for 4k kernel (Vijay Kumar)  [Orabug: 31954922]  
  - uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961114]  
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31807687]  
  - uek-rpm: Fix kernel-ueknano depmod warnings vhost_iotlb regmap-i2c (Vijayendra Suman)  [Orabug: 31938861]  
  - uek-rpm: Add ovmapi.ko to uek6 nano_modules (Joe Jin)  [Orabug: 31922751]  
  - uek-rpm: config: Enable OVM API (Joe Jin)  [Orabug: 31922751]  
  - uek-rpm: streamline 4konly build (Dave Kleikamp)  [Orabug: 31907994]  
  - uek-rpm: ol8: config-aarch64: add *_MEMORY_HOTPLUG (Mihai Carabas)  [Orabug: 31848210]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783145]  
  - uek-rpm: Enable CONFIG_EDAC_I10NM (Thomas Tai)  [Orabug: 31644938]  
  - uek-rpm: Enable AMD TEE driver (Dave Kleikamp)  [Orabug: 31687958]  
  - Enable config option CONFIG_NFSD_V4_2_INTER_SSC (Dai Ngo)  [Orabug: 31535968]  
  - certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31555581]  
  - Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy)  [Orabug: 31358096]  
  - uek-rpm: update kABI lists for new symbols (Dan Duval)  [Orabug: 31512147]  
  - uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy)  [Orabug: 31645595]  
  - uek-rpm: Enable perf and bpf build for ol7/ol8 (Vijayendra Suman)  [Orabug: 31642461]  
  - ktask: send to /dev/null (Daniel Jordan)  [Orabug: 31600516]  
  - uek-rpm: disable CONFIG_CRYPTO_DEV_CAVIUM_ZIP (Dave Kleikamp)  [Orabug: 31667366]  
  - uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling)  [Orabug: 30647040]  
  - uek-rpm: aarch64: Streamline building 4K pages size kernel (Dave Kleikamp)  [Orabug: 31500686]  
  - KEYS: Increase system_extra_certificate size to 8192 bytes (Stephen Brennan)  [Orabug: 31596962]  
  - vhost: Select CONFIG_VHOST_MENU by default (Boris Ostrovsky)  [Orabug: 31555511]  
  - uek-rpm: Enable CONFIG_PCIE_DPC and CONFIG_PCIE_EDR (Thomas Tai)  [Orabug: 31180903]  
  - uek-rpm: Enable EFI_{FAKE_MEMMAP,SOFT_RESERVE} and DEV_DAX_HMEM (Joao Martins)  [Orabug: 31518826]  
  - aarch64: Enable thermal config for RPi4 (Vijay Kumar)  [Orabug: 31504894]  
  - uek-rpm: Increase CONFIG_NODES_SHIFT from 2 to 3 (Dave Kleikamp)  [Orabug: 31422294]  
  - uek-rpm: update aarch64 configs for Ampere eMAG2 (Dave Kleikamp)  [Orabug: 31422294]  
  - uek-rpm: disable CONFIG_IP_PNP (Anjali Kulkarni)  [Orabug: 31386505]  
  - uek-rpm: Enable CONFIG_NVME_HWMON for OL8 (Alan Adamson)  [Orabug: 31373787]  
  - uek-rpm: Move grub boot menu update to posttrans stage. (Somasundaram Krishnasamy)  [Orabug: 31358096]  
  - jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi)  [Orabug: 31264691]  
  - uek-rpm: turbostat fix in v5.4.31 requires libcap-devel (Jack Vogel)   
  - uek-rpm: Add installonlypkgs option to allow install of multiple versions (Somasundaram Krishnasamy)  [Orabug: 31038350]  
  - uek-rpm: update kABI data in UEK6 Master branch (Dan Duval)  [Orabug: 30498825]  
  - uek-rpm: Set DEFAULTKERNEL to right value when uninstalling kernel-uek (Somasundaram Krishnasamy)  [Orabug: 31029299]  
  - enable kABI checking in UEK6 build (Dan Duval)  [Orabug: 30498825]  
  - spec: require a newer binutils for better aarch64 CTF support (Nick Alcock)  [Orabug: 31003216]  
  - uek-rpm: require CTF-capable binutils and GCC for CTF generation (Nick Alcock)  [Orabug: 31003216]  
  - uek-rpm: Make title string of boot load spec generic (Somasundaram Krishnasamy)  [Orabug: 31025059]  
  - uek-rpm: Revert "uek-rpm: Disable CONFIG_RT_GROUP_SCHED" (chris hyser)  [Orabug: 31025875]  
  - uek-rpm: Make sure perf builds against libnuma and add run-time dependency (Dave Kleikamp)  [Orabug: 30896574]  
  - uek-rpm: Add missing modules to kernel-ueknano rpm. (Somasundaram Krishnasamy)  [Orabug: 30949434]  
  - mstflint_access: Enable the mstflint_access module (Aron Silverton)  [Orabug: 30997871]  
  - config-aarch64: Disable ZONE_DMA to fix crashkernel dma_atomic_pool_init failure (Thomas Tai)  [Orabug: 31010223]  
  - adjust check_kabi tool to accommodate symbol namespaces (Dan Duval)  [Orabug: 31014554]  
  - uek-rpm: Fix kernel-uek-doc build on OL8 (Victor Erminpour)  [Orabug: 30519151]  
  - uek-rpm: Enable Diffie-Hellman key exchange feature (Somasundaram Krishnasamy)  [Orabug: 30387221]  
  - uek-rpm: Fix issue in /etc/sysconfig/kernel getting wrongly updated (Vijayendra Suman)  [Orabug: 30954352]  
  - uek-rpm: Enable CONFIG_GENERIC_IRQ_DEBUGFS (Joe Jin)  [Orabug: 30959541]  
  - uek-rpm: Disable CONFIG_RT_GROUP_SCHED (Tom Hromatka)  [Orabug: 30998384]  
  - add workaround for truncation of Module.symvers file (Dan Duval)  [Orabug: 30776585]  
  - uek-rpm: Rename kernel-uek-4k package to kernel-uek4k (Victor Erminpour)  [Orabug: 30902925]  
  - uek-rpm: Disable CONFIG_LIQUIDIO for UEK6 (Victor Erminpour)  [Orabug: 30896502]  
  - uek-rpm: Fix kernel-ueknano depmod warnings (Somasundaram Krishnasamy)  [Orabug: 30932300]  
  - uek6/ol7/config: Enable pcie_brcmstb driver (Vijay Kumar)  [Orabug: 30646006]  
  - uek6/ol8/config: Enable pcie_brcmstb driver (Vijay Kumar)  [Orabug: 30646006]  
  - printk: Default console logging level reset to 7 (Jack Vogel)  [Orabug: 30870801]  
  - uek-rpm: Run "make olddefconfig" against uek6/master (v5.4.17) (Victor Erminpour)  [Orabug: 30859936]  
  - uek-rpm: Set CRYPTO_CRC32C_INTEL as a built-in driver (Victor Erminpour)  [Orabug: 30833761]  
  - uek-rpm: Enable missing config options in UEK6 from UEK-5-U2 (Victor Erminpour)  [Orabug: 30822133]  
  - uek-rpm: config: Add support for resilient_rdmaip kernel module in ol8 (William Kucharski)  [Orabug: 30777254]  
  - uek-rpm: config: Add support for resilient_rdmaip new kernel module (Sudhakar Dindukurti)  [Orabug: 27718686] [Orabug: 30777254]  
  - uek-rpm: kernel-uek-tools requires python3 (Liam Merwick)  [Orabug: 30222594]  
  - uek-rpm: x86 enable CONFIG_IMA_APPRAISE_MODSIG (Eric Snowberg)  [Orabug: 30816770]  
  - uek-rpm: Run "make olddefconfig" against uek6/master (v5.4.14) (Victor Erminpour)  [Orabug: 30838776]  
  - uek-rpm: Enable exFAT in UEK6 (Victor Erminpour)  [Orabug: 30827952]  
  - uek-rpm: Enable AF_XDP support in UEK6 (Victor Erminpour)  [Orabug: 30776996]  
  - uek-rpm: Set UEK6 base kernel version to 5.4 in the RPM specfile (Victor Erminpour)  [Orabug: 30777117]  
  - provide symbol files for kABI checking for UEK6 (Dan Duval)  [Orabug: 30690110]  
  - uek-rpm: Update linux-firmware dependency to latest. (Somasundaram Krishnasamy)  [Orabug: 30729912]  
  - uek-rpm: Enable config options from RHCK-8.1 in UEK6 (Victor Erminpour)  [Orabug: 30809710]  
  - uek-rpm: Enable CONFIG_HMM_MIRROR for x86_64 (Jack Vogel)  [Orabug: 30782109]  
  - Update the UEK6 firmware version in OL7 and OL8 spec files (Jack Vogel)  [Orabug: 30762100]  
  - uek-rpm: Set security hardening options for all (Victor Erminpour)  [Orabug: 30670367]  
  - uek-rpm: Set security hardening options for aarch64 (Victor Erminpour)  [Orabug: 30670367]  
  - uek-rpm: Set security hardening options for x86_64 (Victor Erminpour)  [Orabug: 30670367]  
  - config: don't set CONFIG_DMA_FENCE_TRACE (Boris Ostrovsky)  [Orabug: 30657067]  
  - printk: Default console logging level should be set to 4 (Boris Ostrovsky)  [Orabug: 30657067]  
  - uek-rpm: aarch64 config enable RETPOLINE OL8 (Henry Willard)  [Orabug: 30297793]  
  - uek-rpm: Run "make olddefconfig" against uek6/master (Victor Erminpour)  [Orabug: 30596470]  
  - uek-rpm: Enable kTLS offload for for MLX5 (Victor Erminpour)  [Orabug: 30630366]  
  - uek-rpm: Enable CONFIG_CPU_IDLE_GOV_HALTPOLL (Victor Erminpour)  [Orabug: 30614031]  
  - uek-rpm: Enable DTrace required config options (Victor Erminpour)  [Orabug: 30619618]  
  - uek-rpm: UEK6 config option requests from John Haxby (Victor Erminpour)  [Orabug: 30596031]  
  - uek-rpm: UEK6 config option requests from Martin Petersen (Victor Erminpour)  [Orabug: 30596031]  
  - uek-rpm: RHCK config options for UEK6 (Victor Erminpour)  [Orabug: 30540922]  
  - uek-rpm: Add CONFIG_CRYPTO_CFB for FIPS (Jack Vogel)  [Orabug: 30158461]  
  - uek-rpm: Enable CONFIG_KEXEC_SIG (Victor Erminpour)  [Orabug: 30488668]  
  - uek-rpm: Enable CONFIG_FW_CFG_SYSFS and CONFIG_FW_CFG_SYSFS_CMDLINE (Victor Erminpour)  [Orabug: 30619488]  
  - uek-rpm: Enable CONFIG_X86_5LEVEL (Victor Erminpour)  [Orabug: 30155946]  
  - uek-rpm: Disable CONFIG_SCHED_AUTOGROUP (Victor Erminpour)  [Orabug: 30596055]  
  - uek-rpm: Carry forward previous UEK5 config options. (Victor Erminpour)  [Orabug: 30595946]  
  - uek-rpm: Turn off CONFIG_DEBUG_WX for Arm production kernels. (John Donnelly)  [Orabug: 30193143]  
  - uek6: Temporarily disable KABI check (Jack Vogel)   
  - crypto: Enable CONFIG_CRYPTO_OFB for fips mode (Jack Vogel)   
  - uek-rpm: Reenable with_dtrace in both OL spec files. (Jack Vogel)   
  - Enable CONFIG_DM_WRITECACHE in UEK6 (Jack Vogel)  [Orabug: 30421025]  
  - Update the build versioning files. (Jack Vogel)  [Orabug: 30487822]  
  - uek-rpm: Update config files with "make olddefconfig" (Victor Erminpour)  [Orabug: 30507302]  
  - uek-rpm: Enable lockdown LSM (Eric Snowberg)  [Orabug: 30431425]  
  - uek-rpm: Set to old style build_id generation to avoid rpm install conflicts. (Somasundaram Krishnasamy)  [Orabug: 30435996]  
  - uek-rpm: enable CONFIG_INTEGRITY_PLATFORM_KEYRING (Eric Snowberg)  [Orabug: 30434806]  
  - uek-rpm: Fix rpm warnings on OL8 (Somasundaram Krishnasamy)  [Orabug: 30346507]  
  - uek-rpm: Disable PCMCIA (Eric Snowberg)  [Orabug: 30318827]  
  - uek6: enable XFS online scrub code (Darrick J. Wong)  [Orabug: 30195940]  
  - uek-rpm: Remove kernel-uek-tools RPMs for OL8 (Victor Erminpour)  [Orabug: 30205292]  
  - uek-rpm: Add changes for kernel-uek-doc build support. (Victor Erminpour)  [Orabug: 30381773]  
  - uek-rpm: Update summary to Oracle UEK Release 6 from 5 (Victor Erminpour)  [Orabug: 30310967]  
  - uek-rpm: Re-enable NF_TABLES config options (Victor Erminpour)  [Orabug: 30326867]  
  - uek-rpm: Fix kabitool Module.symvers parse error (Victor Erminpour)  [Orabug: 30341561]  
  - uek-rpm: Update OL8 spec to latest firmware revision (Jack Vogel)  [Orabug: 30299029]  
  - uek-rpm: Generate bls.conf file and copy UEFI CA cert (Victor Erminpour)  [Orabug: 30275817]  
  - uek-rpm: Package vmlinuz and .vmlinuz.hmac in /lib/modules/ (Victor Erminpour)  [Orabug: 30269735]  
  - uek-rpm: kernel-uek RPM specfile cleanup (Victor Erminpour)  [Orabug: 30199979]  
  - uek-rpm: RPM debuginfo improvements for OL8 (Victor Erminpour)  [Orabug: 30199979]  
  - uek-rpm: Fix bug in OL8 kernel RPM scriptlets (Victor Erminpour)  [Orabug: 30179076]  
  - uek-rpm: Disable CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT (Victor Erminpour)  [Orabug: 30179070]  
  - uek-rpm: Call find instead of cp and don't copy .tmp_versions (Victor Erminpour)  [Orabug: 30116866]  
  - uek-rpm: Add rsync as a 'BuildRequires' in RPM specfile (Victor Erminpour)  [Orabug: 30068210]  
  - uek-rpm: Enable CONFIG_NF_TABLES_NETDEV=y (Victor Erminpour)  [Orabug: 29897273]  
  - config-aarch64: change CONFIG_HZ and CONFIG_FRAME_WARN (Thomas Tai)  [Orabug: 28894138]  
  - kernel-uek.spec: defuse a memory bomb in xargs (Lukáš Lipinský)  [Orabug: 30344582]  
  - kernel-uek.spec: defuse a memory bomb in xargs (Lukáš Lipinský)  [Orabug: 30057188]  
  - config-aarch64: enable CONFIG_MPLS_IPTUNNEL and CONFIG_BPF_JIT_ALWAYS_ON (Thomas Tai)  [Orabug: 29493120] [Orabug: 29409143]  
  - Revert "AMD: Change CONFIG_EDAC_DECODE_MCE to built-in" (George Kennedy)  [Orabug: 30080594]  
  - config-aarch64: enable ISCSI_IBFT (Thomas Tai)  [Orabug: 29456913]  
  - uek-rpm: Update firmware prerequisites to 20190627-999.2.git7ae3a09d. (John Donnelly)  [Orabug: 30043163]  
  - uek-rpm: Update UEK5 config files with "make olddefconfig" (Victor Erminpour)  [Orabug: 30038078]  
  - uek-rpm/ol7/nano_modules fix (Jane Chu)  [Orabug: 29959677]  
  - AMD: Change CONFIG_EDAC_DECODE_MCE to built-in (George Kennedy)  [Orabug: 29922372]  
  - config: enable PSI (Tom Hromatka)  [Orabug: 29896477]  
  - uek-rpm: Fix mce-inject.ko path in nano kernel modules list (Somasundaram Krishnasamy)  [Orabug: 29667299]  
  - uek-rpm: update list of removed files, generated by depmod on install stage (Alexander Burmashev)  [Orabug: 29383638]  
  - uek-rpm: replace i40evf.ko with iavf.ko in nano_modules. (John Donnelly)  [Orabug: 29421946]  
  - uek-rpm: aarch64 config enable RETPOLINE (Tom Saeger)  [Orabug: 28867144]  
  - add symbols to kABI whitelist (Dan Duval)  [Orabug: 29261848]  
  - uek-rpm: Remove hardcoded 'kernel_git_commit' macro from specfile (Victor Erminpour)  [Orabug: 29357441]  
  - uek-rpm: Add perf packages back to ol7-aarch64 (Victor Erminpour)  [Orabug: 29343605]  
  - uek-rpm: Remove perf RPMs (Victor Erminpour)  [Orabug: 29325581]  
  - uek-rpm: Remove oracle-armtoolset-1 for OL8 (Victor Erminpour)  [Orabug: 29325581]  
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29201054]  
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29201054]  
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29201054]  
  - uek-rpm: Port to OL8 (Victor Erminpour)  [Orabug: 29287050]  
  - uek-rpm: Change RPM variant from 4k-debug to 4kdebug (Victor Erminpour)  [Orabug: 29287050]  
  - uek-rpm: Copy uek-rpm/ol7/ directory to uek-rpm/ol8/ (Victor Erminpour)  [Orabug: 29287050]  
  - Add the Intel ICE driver to UEK5 configuration (Jack Vogel)  [Orabug: 29293770]  
  - Add Configuration option for Intel IGC driver to UEK5 (Jack Vogel)  [Orabug: 29294226]  
  - uek-rpm: Enable device-mapper era driver (Dave Aldridge)  [Orabug: 29245896]  
  - uek-rpm: Enable Ext2 extended attributes (Dave Aldridge)  [Orabug: 29252939]  
  - uek-rpm: Update x86_64 config options (Victor Erminpour)  [Orabug: 28700595]  
  - uek-rpm: Enable Cavium ThunderX coprocessors and AES_TI crypto (Victor Erminpour)  [Orabug: 29186152]  
  - uek-rpm: Enable ena driver (Somasundaram Krishnasamy)  [Orabug: 29162519]  
  - ctf: explicitly specify the sizes of structures and unions (Nick Alcock)  [Orabug: 29054989]  
  - uek-rpm: remove obsolete CTF-related find-debuginfo hack (Nick Alcock)  [Orabug: 29043023]  
  - ktask: multithread CPU-intensive kernel work (Daniel Jordan)  [Orabug: 25577642]  
  - uek-rpm: build in vfio and vfio_iommu_type1 modules (Daniel Jordan)  [Orabug: 25577642]  
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  
  - [PATCH UEK5 v3] dtrace: add DTRACEACT_PCAP for packet capture for later pcap_dump() (Alan Maguire)  [Orabug: 28975818]  
  - uek-rpm: Allow blacklisting of kernel modules in initramfs during nano-kernel build (Somasundaram Krishnasamy)  [Orabug: 28925565]  
  - uek-rpm: aarch64: enable CONFIG_GPIO_THUNDERX (Henry Willard)  [Orabug: 28932941]  
  - uek-rpm: Enable read IMA policy (Eric Snowberg)  [Orabug: 28702669]  
  - arm64: disable /dev/port on 64 bit ARM (Eric Saint-Etienne)  [Orabug: 28320013]  
  - config: disable xfs online scrub in uek5 (Darrick J. Wong)  [Orabug: 28874134]  
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928} 
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928} 
  - uek-rpm: Run 'make olddefconfig' to get latest x86 config values (Victor Erminpour)  [Orabug: 28763256]  
  - uek-rpm: Remove module rpcrdma.ko (NFSoRDMA) from nano_modules (Somasundaram Krishnasamy)  [Orabug: 28850263]  
  - config: enable BNXT_HWMON (Brian Maly)  [Orabug: 28797053]  
  - uek-rpm: aarch64 some XGENE drivers must be be modules (Tom Saeger)  [Orabug: 28549351]  
  - uek-rpm: enable DTrace FBT for aarch64 (Kris Van Hees)  [Orabug: 28707614]  
  - uek-rpm: enable DTrace SDT for aarch64 (Kris Van Hees)  [Orabug: 28707604]  
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28630247]  
  - uek-rpm: support both 4k and 64k page size for aarch64 (Allen Pais)  [Orabug: 28526023]  
  - uek-rpm: Disable F2FS in the UEK5 config (Victor Erminpour)  [Orabug: 28570381]  
  - uek-rpm: Enable MPLS suppoprt (Victor Erminpour)  [Orabug: 28367674]  
  - dtrace: increment dtrace-kernel-headers revision to 1.1.0 (Vincent Lim)  [Orabug: 28241736]  
  - uek-rpm: aarch64: enable building SHA3 algorithms (Henry Willard)  [Orabug: 28486461]  
  - mstflint: add mstflint secure boot access kernel support (Qing Huang)  [Orabug: 27416559]  
  - uek-rpm: Enable perf stripped binary (Victor Erminpour)  [Orabug: 28469286]  
  - uek-rpm: Show UEK Release Number in RPM summary (Victor Erminpour)  [Orabug: 28468593]  
  - uek-rpm: aarch64 Set CONFIG_BPF_STREAM_PARSER (Henry Willard)  [Orabug: 27653372]  
  - aarch64: remove duplicate dtb in kernel rpm (Eric Saint-Etienne)  [Orabug: 28216582]  
  - uek-rpm: Enable net_failover.ko in nano_modules file (Victor Erminpour)  [Orabug: 28390028]  
  - uek-rpm: config: Disable CONFIG_SECURITY_DMESG_RESTRICT (Victor Erminpour)  [Orabug: 28372959]  
  - uek-rpm: Enable ovmapi.ko in nano_modules file (Victor Erminpour)  [Orabug: 28144761]  
  - aarch64: fix device mapper multipathing (Eric Saint-Etienne)  [Orabug: 27893211]  
  - uek-rpm: config-debug: Turn off torture testing by default (Knut Omang)  [Orabug: 27746166]  
  - rpi: MMC fails to find DMA channel and falls back to PIO (Vijay Kumar)  [Orabug: 28159727]  
  - uek-rpm: aarch64 Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 28158146]  
  - uek-rpm: config: disable CONFIG_DEBUG_VM on aarch64 (Henry Willard)  [Orabug: 28104208]  
  - uek-rpm: Enable kernel-uek-headers build. (Victor Erminpour)  [Orabug: 28110910]  
  - arm64: add support for crashkernel=auto (Dave Kleikamp)  [Orabug: 28095909]  
  - uek-rpm: aarch64 sync NVME config with x86 (Tom Saeger)  [Orabug: 28096294]  
  - uek-rpm: aarch64 make olddefconfig latest stable (Tom Saeger)  [Orabug: 28084270]  
  - uek-rpm: aarch64 make olddefconfig usercopy whitelist (Tom Saeger)  [Orabug: 28084248]  
  - uek-rpm: aarch64 set default cpu governor to PERFORMANCE (Tom Saeger)  [Orabug: 27952402]  
  - uek-rpm: Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 27801112]  
  - uek-rpm: Enable CONFIG_QED_OOO option in UEK5 (Victor Erminpour)  [Orabug: 27774819]  
  - uek-rpm: aarch64 use 64K pagesize (Tom Saeger)  [Orabug: 28057643]  
  - add new checksum files for kABI; re-enable kABI checking (Dan Duval)  [Orabug: 27199028]  
  - uek-rpm: aarch64 build using oracle-armtoolset (Tom Saeger)  [Orabug: 28022143]  
  - uek-rpm: aarch64 make TORTURE modules debug only (Tom Saeger)  [Orabug: 28032744]  
  - uek-rpm: aarch64 enable QLOGIC modules (Tom Saeger)  [Orabug: 28021280]  
  - uek-rpm: aarch64 disable HARDENED_USERCOPY (Tom Saeger)  [Orabug: 27996695]  
  - uek-rpm: aarch64 disable modules that panic kernel (Tom Saeger)  [Orabug: 27999744]  
  - uek-rpm: aarch64 make olddefconfig for ARM SDEI (Tom Saeger)  [Orabug: 28022735]  
  - uek-rpm: Add kernel/drivers/crypto/ccp/ccp.ko to nano modules list (Liam Merwick)  [Orabug: 27854232]  
  - uek-rpm: Run 'make olddefconfig' for UEK5 v4.14.35 (Victor Erminpour)  [Orabug: 27981731]  
  - uek-rpm: Enable silently dropped options from UEK4 (Victor Erminpour)  [Orabug: 27834007]  
  - uek-rpm: Remove deprecated config options from UEK5 (Victor Erminpour)  [Orabug: 27981766]  
  - uek-rpm: enable building SHA3 algorithms (Khalid Aziz)  [Orabug: 28001020]  
  - initial kABI whitelists for UEK5 (Dan Duval)  [Orabug: 27199028]  
  - uek-rpm: Update linux-firmware dependency to latest (Somasundaram Krishnasamy)  [Orabug: 27989702]  
  - uek-rpm: Turn on intel iommu/vt-d (Tushar Dave)  [Orabug: 27747905]  
  - kernel.spec: add requires system-release for OL7 (Brian Maly)  [Orabug: 27964285]  
  - uek-rpm: aarch64 add arm64 defconfig platforms (Tom Saeger)  [Orabug: 27573165]  
  - uek-rpm: aarch64 disable nct hwmon modules (Tom Saeger)  [Orabug: 27866965]  
  - uek-rpm: aarch64 olddefconfig update to 4.14.35 (Tom Saeger)  [Orabug: 27933685]  
  - uek-rpm: aarch64 remove perl dependency from perf (Tom Saeger)  [Orabug: 27704937]  
  - config: enable fasttrap provider for arm64 (Kris Van Hees)  [Orabug: 27847920]  
  - uek-rpm: Enable build of kernel-uek-doc rpm (Somasundaram Krishnasamy)  [Orabug: 27845100]  
  - uek-rpm: Enable options from RHCK-7.5 missing in UEK5 (Victor Erminpour)  [Orabug: 27866120]  
  - uek-rpm: Enable CONFIG_EDAC_SKX and CONFIG_RAS_CEC (Victor Erminpour)  [Orabug: 27824333]  
  - uek-rpm: Set base_sublevel to 35 (Somasundaram Krishnasamy)  [Orabug: 27911742]  
  - uek-rpm: aarch64 set CMA_SIZE_MBYTES to 0 (Tom Saeger)  [Orabug: 27854630]  
  - uek-rpm: aarch64 enable resilient_rdmaip module (Tom Saeger)  [Orabug: 27854808]  
  - uek-rpm: aarch64 add PANIC_ON_OOPS (Tom Saeger)  [Orabug: 27847484]  
  - uek-rpm: RPM install scripts doesn't supply grub2 with a DT despite it is requested (Petr Benes)  [Orabug: 27802749]  
  - uek-rpm: remove virtio-gpu from nanokernel modules (Jim Quigley)  [Orabug: 27829972]  
  - uek-rpm: aarch64 olddefconfig update to 4.14.32 (Tom Saeger)  [Orabug: 27824121]  
  - uek-rpm: aarch64 config enable NUMA (Tom Saeger)  [Orabug: 27570228]  
  - uek-rpm: config: Add support for resilient_rdmaip new kernel module (Sudhakar Dindukurti)  [Orabug: 27718686]  
  - uek-rpm: config: Enable ARM64_SVE for aarch64 (Jim Quigley)  [Orabug: 27821643]  
  - uek-rpm: Include tools/objtool/objtool in kernel-uek-devel (Somasundaram Krishnasamy)  [Orabug: 27799902]  
  - uek-rpm: config: Enable DRM_VIRTIO_GPU for x-86_64. (Jim Quigley)  [Orabug: 27815399]  
  - uek-rpm/kernel-uek.spec: Add module.lds in uek5 devel rpm (Vijay Kumar)  [Orabug: 27613639]  
  - uek-rpm: Enable CONFIG_SCHEDSTATS in UEK5 config file (Victor Erminpour)  [Orabug: 27774280]  
  - uek-rpm: Enable config options from UEK5 review (Victor Erminpour)  [Orabug: 27741375]  
  - uek-rpm: Set base_sublevel to 32 (Somasundaram Krishnasamy)  [Orabug: 27792024]  
  - uek-rpm: deliver kvm_stat on x86_64 via kernel-uek-tools (Liam Merwick)  [Orabug: 27566074]  
  - uek-rpm: config: Run "make olddefconfig" against v4.14.28 for x86_64 (Victor Erminpour)  [Orabug: 27656430]  
  - uek-rpm: config: Enable OL7U5 RHCK options for UEK5 (Victor Erminpour)  [Orabug: 27622705]  
  - uek-rpm: config: Enable CONFIG_DMA_CMA and CONFIG_CMA_SIZE_MBYTES=0 (Victor Erminpour)  [Orabug: 25917090]  
  - uek-rpm: config: Enable KASLR in UEK5 (Victor Erminpour)  [Orabug: 27741231]  
  - uek-rpm: config: Enable CONFIG_X86_MCELOG_LEGACY=y (Victor Erminpour)  [Orabug: 27684921]  
  - uek-rpm: config: Enable XFRM_OFFLOAD and ESP_OFFLOAD config options (Victor Erminpour)  [Orabug: 27741365]  
  - uek-rpm: config: Enable CONFIG_KVM_DEBUG_FS in UEK5 debug kernel (Victor Erminpour)  [Orabug: 27741246]  
  - uek-rpm: config: Enable CONFIG_F2FS_FS in UEK5 (Victor Erminpour)  [Orabug: 27739286]  
  - uek-rpm: config: Enable qat_c62x and qat_c62xvf modules (Victor Erminpour)  [Orabug: 27725149]  
  - uek-rpm: config: Disable CONFIG_SECURITY_LOADPIN (Victor Erminpour)  [Orabug: 27703796]  
  - uek-rpm: update dtrace-kernel-headers to 1.0.0 (Tomas Jedlicka)  [Orabug: 27752578]  
  - uek-rpm: enable BNX* drivers for aarch64 (Allen Pais)  [Orabug: 27717735]  
  - uek-rpm: config aarch64 add RPi3 support (Tom Saeger)  [Orabug: 27574522]  
  - uek-rpm/config-aarch64: Unset CONFIG_MODULE_SIG_FORCE in kernel config (Vijay Kumar)  [Orabug: 27620376]  
  - uek-rpm/config-aarch64: Enable default sysrq in kernel config (Vijay Kumar)  [Orabug: 27080659]  
  - uek-rpm: Bump libdtrace-ctf dependency to 0.8.0. (Todd Vierling)  [Orabug: 27741711]  
  - uek-rpm: Set base_sublevel to 30 (Somasundaram Krishnasamy)  [Orabug: 27752925]  
  - uek-rpm: Update nano modules list (Somasundaram Krishnasamy)  [Orabug: 27706743]  
  - uek-rpm: Set base_sublevel to 28 (Somasundaram Krishnasamy)  [Orabug: 27717309]  
  - uek-rpm: aarch64 build kernel-tools, perf packages (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: aarch64 add cpupower files needed by kernel-tools (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: aarch64 install perf with kernel-uek (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: config: Enable ext4 file system encryption (Victor Erminpour)  [Orabug: 27635263]  
  - uek-rpm: UEK5 config file Review (Victor Erminpour)  [Orabug: 27649939]  
  - uek-rpm: Remove config-sparc file (Victor Erminpour)  [Orabug: 27649916]  
  - uek-rpm: config: Enable IPVLAN support (Victor Erminpour)  [Orabug: 27633248]  
  - uek-rpm: config: Enable vfio_mdev VFIO mediated device module (Victor Erminpour)  [Orabug: 27583169]  
  - uek-rpm: config: Enable Intel RDT (Victor Erminpour)  [Orabug: 27581283]  
  - uek-rpm: Set base_sublevel to 26 (Somasundaram Krishnasamy)  [Orabug: 27678165]  
  - uek-rpm: config aarch64 enable kpti and bp harden (Tom Saeger)  [Orabug: 27657714]  
  - uek-rpm: Remove unneeded modules from kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 27663420]  
  - uek-rpm: config aarch64 enable Mellanox hardware (Tom Saeger)  [Orabug: 27657528]  
  - uek-rpm: Set base_sublevel to 24 (Somasundaram Krishnasamy)  [Orabug: 27639261]  
  - uek-rpm: config: enable XFS Realtime subvolume support by default (Shan Hai)  [Orabug: 27548835]  
  - uek-rpm: aarch64 provide kernel-uname-r metadata (Tom Saeger)  [Orabug: 27540755]  
  - modsign: aarch64 Add key for module signing (Tom Saeger)  [Orabug: 27448208]  
  - uek-rpm: Set base_sublevel to 23 (Somasundaram Krishnasamy)  [Orabug: 27601642]  
  - uek-rpm: Update nano modules list (Somasundaram Krishnasamy)  [Orabug: 27532347]  
  - uek-rpm: Set base_sublevel to 20 (Somasundaram Krishnasamy)  [Orabug: 27586336]  
  - uek-rpm: enable USERFAULTFD in debug kernel (Mike Kravetz)  [Orabug: 27574106]  
  - uek-rpm: Set base_sublevel to 19 (Somasundaram Krishnasamy)  [Orabug: 27396439]  
  - uek-rpm: aarch64 enable available DTrace options (Tom Saeger)  [Orabug: 27485993]  
  - uek-rpm: Update to latest linux-firmware version (Somasundaram Krishnasamy)  [Orabug: 27523859]  
  - uek-rpm: enable LOCK_DOWN_IN_EFI_SECURE_BOOT (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: Enable CONFIG_MODULE_SIG_ALL (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_LOCK_DOWN_KERNEL (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_LOAD_UEFI_KEYS. (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable EFI_SIGNATURE_LIST_PARSER (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_SECONDARY_TRUSTED_KEYRING (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: Enable RDS_ACL in UEK5 (Aron Silverton)  [Orabug: 27503146]  
  - uek-rpm: aarch64 enable OCFS2_FS (Tom Saeger)  [Orabug: 27525109]  
  - uek-rpm: Add support for QLogic 41000 Series Converged Network Adapters (Somasundaram Krishnasamy)  [Orabug: 27426190]  
  - uek-rpm: Enable KPTI and Retpoline config options in UEK5 (Victor Erminpour)  [Orabug: 27487028]  
  - uek-rpm: Enable Yama LSM in UEK5 (Victor Erminpour)  [Orabug: 27486963]  
  - uek-rpm: Enable config support for NVMe over Fabrics (NVMe-oF) (Victor Erminpour)  [Orabug: 27449641]  
  - uek-rpm: Enable support for iWarp QLogic QEDR in UEK5 (Victor Erminpour)  [Orabug: 27448989]  
  - uek-rpm: Enable config support for iWARP Intel i40iw (Victor Erminpour)  [Orabug: 27448941]  
  - uek-rpm: Enable config options for Heterogeneous Memory Management (HMM) (Victor Erminpour)  [Orabug: 27110778]  
  - uek-rpm: Enable eBPF related configs in UEK5 (Victor Erminpour)  [Orabug: 27416748]  
  - uek-rpm: Use olddefconfig instead of oldnoconfig (Somasundaram Krishnasamy)  [Orabug: 27283275]  
  - uek-rpm: aarch64 RPMs need Provides 'kernel' (Tom Saeger)  [Orabug: 27516320]  
  - uek-rpm: aarch64 needs kernel-headers by default (Tom Saeger)  [Orabug: 27495792]  
  - uek-rpm: Update kernel-ueknano modules list (Somasundaram Krishnasamy)  [Orabug: 27494605]  
  - uek-rpm: require CC=gcc7 on aarch64 (Tom Saeger)  [Orabug: 27438232]  
  - uek-rpm: add _kernel_cc to kernel-uek.spec (Tom Saeger)  [Orabug: 27438232]  
  - uek-rpm: config: enable numa balancing on by default (Henry Willard)  [Orabug: 27464647]  
  - uek-rpm: Do not create kernel-uek-base rpm (Somasundaram Krishnasamy)  [Orabug: 27364632]  
  - uek-rpm: enable CONFIG_PREEMPT_VOLUNTARY (Vincent Lim)  [Orabug: 27456269]  
  - uek-rpm: Enable SoftRoCE related configuration in UEK5 (Victor Erminpour)  [Orabug: 27449119]  
  - uek-rpm: Do not build kernel-uek-headers by default. (Somasundaram Krishnasamy)  [Orabug: 27363133]  
  - ctf: enable in debugging kernels (Nick Alcock)  [Orabug: 27266231]  
  - uek-rpm: build env files for aarch64 (Tom Saeger)  [Orabug: 27437589]  
  - uek-rpm: enable debug builds on aarch64 (Tom Saeger)  [Orabug: 27433384]  
  - uek-rpm: configs: Enabel Oracle HXGE and ASM driver (Allen Pais)  [Orabug: 27199116]  
  - fm10k: Add driver to the kernel config for UEK4 (Allen Pais)  [Orabug: 27199008]  
  - uek-rpm: config: Enable OVM API (Allen Pais)  [Orabug: 27199003]  
  - uek-rpm: config: sxge/sxgevf: enable driver (Allen Pais)  [Orabug: 27199004]  
  - uek-rpm: enable CONFIG_KSPLICE. (Allen Pais)  [Orabug: 27199009]  
  - x86: add support for crashkernel=auto (Brian Maly)  [Orabug: 27234070]  
  - modsign: Add key for module signing (Eric Snowberg)  [Orabug: 27199070]  
  - uek-rpm: Add Mellanox drivers neeeded for Exadata to base_modules (Victor Erminpour)  [Orabug: 27300509]  
  - uek-rpm: Enable Mellanox hardware kernel config options for UEK5. (Victor Erminpour)  [Orabug: 27300509]  
  - uek-rpm: Disable CONFIG_DMA_CMA in UEK5 kernel config (Victor Erminpour)  [Orabug: 27201411]  
  - uek-rpm: Enable CONFIG_IMA_DEFAULT_HASH=sha256 (Victor Erminpour)  [Orabug: 27186234]  
  - uek-rpm: Enable CGROUP config in the UEK5 kernel (Victor Erminpour)  [Orabug: 25974804]  
  - uek-rpm: Kernel config settings needed to support TCP-BBR (Victor Erminpour)  [Orabug: 27110608]  
  - uek-rpm: enable and configure PMEM/DAX for UEK (Victor Erminpour)  [Orabug: 27201433]  
  - uek-rpm: enable DTrace. (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: emit vmlinux.ctfa into -base package. (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: set CONFIG_DTRACE depending on the value of with_dtrace (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: Add signing options for aarch64 (Tom Saeger)  [Orabug: 27255646]  
  - uek-rpm: add aarch64 config files (Allen Pais)  [Orabug: 27255646]  
  - uek-rpm: add support for aarch64 (Allen Pais)  [Orabug: 27255646]  
  - config: CONFIG_FRAME_POINTER_UNWINDER is CONFIG_UNWINDER_FRAME_POINTER in 4.14.8 (Kris Van Hees)  [Orabug: 27419674]  
  - uek-rpm: create base config files for UEK5 (Victor Erminpour)  [Orabug: 26942304]  
  - uek-rpm: Enable signed modules (Dhaval Giani)  [Orabug: 27162491]  
  - uek-rpm: Downgrade linux-firmware version (Dhaval Giani)  [Orabug: 27162498]  
  - uek-rpm: define base_sublevel as 14 after pull of mainline stable 4.14.14 (Chuck Anderson)  [Orabug: 26942304]  
  - uek-rpm: Temporarily disable doc build (Chuck Anderson)  [Orabug: 26942304]  
  - uek-rpm: Add build dependencies to avoid build errors (Somasundaram Krishnasamy)  [Orabug: 26942304]  
  - uek-rpm: Add RPM build environment for UEK5 (Somasundaram Krishnasamy)  [Orabug: 26942304]  
  - Linux 6.8-rc7 (Linus Torvalds)


author: Tao Liu <ltao@redhat.com> - 2.0.23-3
changelog:
  - Update eppic to latest upstream snapshot
  - Update crashkernel-howto.txt
  - Remove references to systemd-sysv-convert
  - kdump/ppc64: suppress the error message "Could not find a registered notification tool" from servicelog_notify
  - fadump: improve fadump-howto.txt about remote dump target setup
  - Don't exit 1 from 92-crashkernel.install if zipl is absent (#1993505)
  - Document/kexec-kdump-howto.txt: improve notes for kdump_pre and kdump_post scripts


author: Tao Liu <ltao@redhat.com> - 2.0.23-4
changelog:
  - Set zstd as the default compression method for kdump initrd
  - kdump-lib.sh: Escape '|' for 'failure_action|default' in is_dump_to_rootfs
  - dracut-early-kdump-module-setup.sh: install xargs and kdump-lib-initramfs.sh
  - update crashkernel-howto
  - set up kernel crashkernel for osbuild in kernel hook
  - reset kernel crashkernel for the special case where the kernel is updated right after kexec-tools
  - try to reset kernel crashkernel when kexec-tools updates the default crashkernel value
  - introduce the auto_reset_crashkernel option to kdump.conf
  - rewrite reset_crashkernel to support fadump and to used by RPM scriptlet
  - fix incorrect usage of rpm-ostree to update kernel command line parameters
  - add helper functions to get kernel path by kernel release and the path of current running kernel
  - add helper functions to get dump mode
  - add a helper function to read kernel cmdline parameter from grubby --info
  - provide kdumpctl get-default-crashkernel for kdump_anaconda_addon and RPM scriptlet
  - factor out kdump_get_arch_recommend_crashkernel
  - update default crashkernel value
  - ppc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs


author: Tao Liu <ltao@redhat.com> - 2.0.23-5
changelog:
  - Set zstd as recommented for kexec-tools
  - fix "kdump: Invalid kdump config option auto_reset_crashkernel" error
  - use grep -s to suppress error messages about nonexistent or unreadable files


author: Tao Liu <ltao@redhat.com> - 2.0.23-6
changelog:
  - Revert "Remove trace_buf_size and trace_event from the kernel bootparameters of the kdump kernel"
  - fix broken kdump_get_arch_recommend_size
  - remove the upper bound of 102400T for the range in default crashkernel
  - fix the error of parsing the container environ variable for osbuild
  - mkdumprd (RHEL-only): add nvme module by force
  - Remove dropped patches
  - s390: handle R_390_PLT32DBL reloc entries in machine_apply_elf_rel()
  - spec: add hostname.rpm into Recommends list
  - move variable FENCE_KDUMP_SEND from kdump-lib.sh to kdump-lib-initramfs.sh


author: Tao Liu <ltao@redhat.com> - 2.0.23-7
changelog:
  - fix incorrect usage of _get_all_kernels_from_grubby
  - fix the mistake of swapping function parameters of read_proc_environ_var


author: Tao Liu <ltao@redhat.com> - 2.0.23-9_1
changelog:
  - try to update the crashkernel in GRUB_ETC_DEFAULT after kexec-tools updates the default crashkernel value
  - address the case where there are multiple values for the same kernel arg


author: EL Errata <el-errata_ww@oracle.com> - 2.0.23-9_1.0.1
changelog:
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Added orabug32404661-Avoid-duplicate-ip-single-dhcp-option.patch [Orabug: 32404661]


author: Brian Maly <brian.maly@oracle.com> - 2.0.23-9_1.0.2
changelog:
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.1 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]


author: Tao Liu <ltao@redhat.com> - 2.0.23-10
changelog:
  - try to update the crashkernel in GRUB_ETC_DEFAULT after kexec-tools updates the default crashkernel value
  - address the case where there are multiple values for the same kernel arg
  - s390: add support for --reuse-cmdline
  - use slurp_proc_file() in get_command_line()
  - add slurp_proc_file()
  - s390: use KEXEC_ALL_OPTIONS
  - s390: add variable command line size
  - util_lib/elf_info: harden parsing of printk buffer
  - print error when reading with unsupported compression
  - use cycle detection when parsing the prink log_buf
  - use pointer arithmetics for dump_dmesg
  - add generic cycle detection


author: Tao Liu <ltao@redhat.com> - 2.0.24-1
changelog:
  - Rebase kexec-tools to v2.0.24
  - Rebase makedumpfile to 1.7.1
  - Avoid false-positive mem_section validation with vmlinux


author: Tao Liu <ltao@redhat.com> - 2.0.24-2
changelog:
  - remove the upper bound of default crashkernel value example
  - update fadump-howto
  - update kexec-kdump-howto
  - update crashkernel-howto
  - add man documentation for kdumpctl get-default-crashkernel
  - improve get_recommend_size
  - fix a calculation error in get_system_size


author: Tao Liu <ltao@redhat.com> - 2.0.24-4
changelog:
  - crashkernel: optimize arm64 reserved size if PAGE_SIZE=4k
  - kdump-lib.sh: Check the output of blkid with sed instead of eval


author: John Mcwalters <john.mcwalters@oracle.com> - 2.0.24-5.0.1
changelog:
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.1 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Added orabug32404661-Avoid-duplicate-ip-single-dhcp-option.patch [Orabug: 32404661]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34240246-Update-UEK-reserved-sizes.patch [Orabug: 34240246]
  - Add back kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 22780125]
  - Add back kexec-tools-2.0.17-dracut-module-setup-ip_dhcp-avoid-dup-config.patch [Orabug: 29518713]


author: Tao Liu <ltao@redhat.com> - 2.0.25-6
changelog:
  - Simplify setup_znet by copying connection profile to initrd
  - Wait for the network to be truly ready before dumping vmcore
  - Address the cases where a NIC has a different name in kdump kernel
  - Reduce kdump memory consumption by only installing needed NIC drivers
  - Reduce kdump memory consumption by not letting NetworkManager manage unneeded network interfaces
  - Set up kdump network by directly copying NM connection profile to initrd
  - Stop dracut 35network-manager from running nm-initrd-generator
  - Apply the timeout configuration of nm-initrd-generator
  - Determine whether IPv4 or IPv6 is needed
  - Add functions to copy NetworkManage connection profiles to the initramfs
  - Fix error for vlan over team network interface


author: Tao Liu <ltao@redhat.com> - 2.0.25-8
changelog:
  - kexec-tools: ppc64: remove rma_top limit
  - kdumpctl: Optimize _find_kernel_path_by_release regex string
  - kdump.conf: use a simple generator script to maintain


author: Tao Liu <ltao@redhat.com> - 2.0.25-9
changelog:
  - Add virtiofs to kdump supported-kdump-targets.txt
  - dracut-module-setup.sh: stop overwriting dracut's trap handler


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-10
changelog:
  - Update supported-kdump-targets.txt
  - dracut-module-setup.sh: skip installing driver for the loopback interface
  - Don't try to update crashkernel when bootloader is not installed
  - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking
  - fadump: use 'zstd' as the default compression method
  - fadump: fix default initrd backup and restore logic
  - fadump: add a kernel install hook to clean up fadump initramfs
  - fadump: avoid status check while starting in fadump mode
  - spec: only install mkfadumprd for ppc
  - fadump: preserve file modification time to help with hardlinking
  - fadump: do not use squash to reduce image size


author: Tao Liu <ltao@redhat.com> - 2.0.25-12
changelog:
  - Reset crashkernel to default value if newly installed kernel has crashkernel=auto
  - Use the correct command to get architecture


author: Tao Liu <ltao@redhat.com> - 2.0.25-13
changelog:
  - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
  - kdump-lib: attempt to fix BOOT_IMAGE detection
  - kdump-lib: change how ostree based systems are detected
  - kdump-lib: clear up references to Atomic/CoreOS


author: EL Errata <el-errata_ww@oracle.com> - 2.0.25-13.0.1
changelog:
  - Update UEK aarch64 reserved sizes for UEK7 kernels [Orabug: 34663083]
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: - Andy Walsh <awalsh@redhat.com> - 8.2.0.18-46
changelog:
  - Temporarily dropped a check that validates the logical size specified from
    the table line.
  - Related: rhbz#2071648


author: - Andy Walsh <awalsh@redhat.com> - 8.2.0.21-46
changelog:
  - Fixed a bug where I/O errors on data reads from below a vdo were ignored.
  - Resolves: rhbz#2125708


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 8.2.1.6-102.el9
changelog:
  - Reverted commits from RHEL-17420.
  - Reverts: RHEL-17420
  - Rebuilt for latest kernel.
  - Resolves: RHEL-23075


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
  - Resolves: rhbz#2209715
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
  - Resolves: rhbz#2209717
  - Allow to set PAC ticket signature as optional
  - Resolves: rhbz#2211388


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-34564


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-4
changelog:
  - Memory leaks fixes backport
    Resolves: rhbz#1938757
  - Fix default key size for non XTS ciphers
    Resolves: rhbz#1954005


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-6
changelog:
  - Add workarounds for some LVM test issues
    Resolves: rhbz#1976174
  - Adapt tests to xfsprogs 5.12 changes
    Resolves: rhbz#1976176


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-10
changelog:
  - Fix reading statistics for VDO pools with VDO 8
    Resolves: rhbz#1994220
  - vdo_stats: Default to 100 % savings for invalid savings values
    Resolves: rhbz#2025880
  - Add support for creating and unlocking standalone integrity devices
    Resolves: rhbz#2011365


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: EL Errata <el-errata_ww@oracle.com> - 0.65.0-5.0.1
changelog:
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Lukas Hrazky <lhrazky@redhat.com> - 0.65.0-5.1
changelog:
  - advisory upgrade: filter out advPkgs with different arch
  - Add obsoletes to filtering for advisory candidates


author: EL Errata <el-errata_ww@oracle.com> - 0.65.0-5.1.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.67.0-1
changelog:
  - Fix handling transaction id in resolveTransactionItemReason (RhBug:2010259,2053014)
  - Remove deprecated assertions (RhBug:2027383)
  - Skip rich deps for autodetection of unmet dependencies (RhBug:2033130, 2048394)
  - Increase required rpm version since we use `rpmdbCookie()`
  - Add 'loongarch' support
  - Use dnf solv userdata to check versions and checksum (RhBug:2027445)
  - context: Substitute all repository config options (RhBug:2076853)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-11
changelog:
  - Fix: syslinux: failed to create ldlinux.sys
    resolves: rhbz#1990720, rhbz#1950627
  - Fix license files.
  - Move appliance to separate subpackage
    resolves: rhbz#1989514


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.46.1-1
changelog:
  - Rebase to new stable branch version 1.46.1
    resolves: rhbz#2011711
  - Add --enable-appliance-format-auto
  - Add support for Kylin
  - Document lazy-counters setting cannot be changed in XFS version 5
    resolves: rhbz#2025944, rhbz#1995391, rhbz#2024022
  - Require libvirt-daemon-driver-storage-core
    resolves: rhbz#2018358
  - Fix usage of strerror_r which caused corrupted error messages
    resolves: rhbz#2030396


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Darren Archibald <darren.archibald@oracle.com> - 1.46.1-3.0.1
changelog:
  - Replace upstream references from a description tag
  - Fix build on Oracle Linux [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX correspeonding to ol


author: EL Errata <el-errata_ww@oracle.com> - 1.46.1-4.0.1
changelog:
  - Add btrfs-progs to the packages installed in the appliance [Orabug: 34137448]
  - Replace upstream references from a description tag
  - Fix build on Oracle Linux [Orabug: 29319324]
  - Set DISTRO_ORACLE_LINUX correspeonding to ol


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-2
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453
  - Add zstd support to guestfs_file_architecture
    resolves: rhbz#2117004


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2
changelog:
  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4
changelog:
  - Resolves: rhbz#2075539 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-9.0.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4.1
changelog:
  - Resolves: rhbz#2072959 - Use right sdap_domain in ad_domain_info_send [rhel-9.0.0.z]
  - Resolves: rhbz#2089251 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-9.0.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#2072640 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2070189 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2070138 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2065098 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2062716 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2056482 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#1937895 - SSSD update prompts for smartcard pin twice - After update to 7.9
  - Resolves: rhbz#1925559 - [RFE] Implement time logging for the LDAP queries and warning of high queries time
  - Resolves: rhbz#1915564 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#1859751 - [RFE] Allow SSSD to use anonymous pkinit for FAST
  - Resolves: rhbz#1749279 - 2FA prompting setting ineffective
  - Resolves: rhbz#1661055 - sssd fails GPO-based access if AD have setup with Japanese language
  - Resolves: rhbz#1245367 - [RFE] Implement memory cache for SID requests to improve performance


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.1
changelog:
  - Resolves: rhbz#2128902 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.2
changelog:
  - Resolves: rhbz#2141830 - SSS_CLIENT: fix thread unsafe access to get*ent structs. [rhel-9.1.0.z]
  - Resolves: rhbz#2139870 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-9.1.0.z]
  - Resolves: rhbz#2142960 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-9.1.0.z]
  - Resolves: rhbz#2148988 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.3
changelog:
  - Resolves: rhbz#2152884 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Darren Archibald <darren.archibald@oracle.com> - 2.8.2-3
changelog:
  - Resolves: rhbz#2196839 - [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2219353 - SSSD enters failed state after heavy load in the system.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237301 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Darren Archibald <darren.archibald@oracle.com> - 2.9.1-4.0.1.5
changelog:
  - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [RHEL-19213]
  - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [RHEL-19993]
  - SSSD GPO lacks group resolution on hosts [RHEL-21089]
  - Make sure 8.9.z/9.3.z doesn't build 'passkey' code [RHEL-21165]


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Steve Dickson <steved@redhat.com> 2.5.4-3
changelog:
  - mount.nfs: insert 'sloppy' at beginning of the options (bz 1987070)
  - spec: Fix dependency problems with nfsdclnts (bz 1924708)
  - nfsdcltrack: Fix printf format (bz 1995316)


author: Alice Mitchell <ajmitchell@redhat.com> 2.5.4-5
changelog:
  - triggerun doesn't work correctly unless the epoch is given (bz 1937811)
  - Restored the nfs-utils-2.5.4-mount-sloppy.patch (bz 1987070)
  - General memory fixes (bz 1938822)


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Darren Archibald <darren.archibald@oracle.com> - 1:7.1.8.1-12.0.1
changelog:
  - Replace colors with Oracle colors [Orabug: 32120093]
  - Added the --with-hamcrest option to configure.


author: EL Errata <el-errata_ww@oracle.com> - 7.1.8.1-6.0.1
changelog:
  - Replace colors with Oracle colors [Orabug: 32120093]
  - Build with --with-vendor="Oracle America, Inc."
  - Added the --with-hamcrest option to configure.


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: EL Errata <el-errata_ww@oracle.com> - 2.15.2-6.0.1
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla
  - Remove options interacting with Bugzilla [Orabug: 32895080]


author: Daiki Ueno <dueno@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-23009: remote DoS via crafted TS payload with an
    incorrect selector length (rhbz#2173674)


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Update to 4.4. Resolves: rhbz#1975812
  - Port compiler warning suppression by Paul Wouters:
    https://src.fedoraproject.org/rpms/libreswan/c/8d7f98d41444ac77c562f735b4b93038f5346ce2?branch=rawhide


author: Daiki Ueno <dueno@redhat.com> - 4.4-3
changelog:
  - Backport removal gethostbyname2 uses from the upstream
  - Fix issues spotted by covscan (rhbz#1938784)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-7.el9_3.1
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-3
changelog:
  - selinux_check_passwd_access_internal(): respect deny_unknown
  - Silence -Wstringop-overflow warning from gcc 10.3.1
  - Fixed misc compiler and static analyzer findings


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-106
changelog:
  - resolves: rhbz#2065376 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.
  - resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Fix static analyzer issues in rhbz#1938795
  - Rebase to version 0.9.6
  - Resolves: rhbz#1994607, rhbz#1938795, rhbz#2009669


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Tom Stellard <tstellar@redhat.com> - 1.2.6-2
changelog:
  - Add BuildRequires: gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-2
changelog:
  - Fix FAT mkfs with dosfstools >= 4.2
  - udiskslinuxdriveata: Use GTask to apply configuration in a thread
  - Limit allowed module names
  - 80-udisks2.rules: Ignore Apple boot partition from livecd-tools


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-6
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing (RHEL-7386)
  - qemu: virtiofs: set correct label when creating the socket (RHEL-7386)
  - qemu: virtiofs: error out if getting the group or user name fails (RHEL-7386)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-6.1.el9_4
changelog:
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441, RHEL-25081)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-0rc1.1
changelog:
  - Rebased to libvirt-8.0.0-rc1 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2034539, rhbz#2027400, rhbz#1945420, rhbz#1851249, rhbz#2032410
      rhbz#2026812, rhbz#2032365, rhbz#2035888, rhbz#2036895, rhbz#2026537


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-1
changelog:
  - Rebased to libvirt-8.0.0 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2039246, rhbz#2039652, rhbz#2039651, rhbz#2039131


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - build: Only install libvirt-guests when building libvirtd (rhbz#2042529)
  - docs: Add man page for libvirt-guests (rhbz#2042529)
  - remove sysconfig files (rhbz#2042529)
  - spec: Run pre/post-install stuff on 'daemon-driver-storage-core' (rhbz#2025644)
  - qemu: fix inactive snapshot revert (rhbz#2039136)
  - Revert "report error when virProcessGetStatInfo() is unable to parse data" (rhbz#2043579)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-4
changelog:
  - qemu_command: Generate memory only after controllers (rhbz#2047271)
  - qemu: Validate domain definition even on migration (rhbz#2048435)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5
changelog:
  - Make systemd unit ordering more robust (rhbz#1868537)
  - util: Fix machined servicename (rhbz#1868537)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-7
changelog:
  - nwfilter: hold filter update lock when creating/deleting bindings (rhbz#2044379)
  - qemu,lxc: remove use to nwfilter update lock (rhbz#2044379)
  - qemu: support multiqueue for vdpa net device (rhbz#2024406)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-8.1.el9_0
changelog:
  - conf: Introduce memory allocation threads (rhbz#2075628)
  - qemu_capabilities: Detect memory-backend-*.prealloc-threads property (rhbz#2075628)
  - qemu_validate: Validate prealloc threads against qemuCpas (rhbz#2075628)
  - qemu_command: Generate prealloc-threads property (rhbz#2075628)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-8.5.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#1475431, rhbz#2026765, rhbz#2059511, rhbz#2089431, rhbz#2102009


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-7.2.el9_1
changelog:
  - kbase: Document QEMU private mount NS limitations (rhbz#2152083)
  - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2152083)
  - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2152083)
  - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2152083)
  - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2152083)
  - qemuProcessReconnect: Don't build memory paths (rhbz#2152083)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-7.3.el9_1
changelog:
  - util: json: Split out array->strinlist conversion from virJSONValueObjectGetStringArray (rhbz#2154410)
  - qemuAgentGetDisks: Don't use virJSONValueObjectGetStringArray for optional data (rhbz#2154410)
  - util: Extend virProcessGetStatInfo() for sysTime and userTime (rhbz#2157094)
  - qemu: Implement qemuDomainGetStatsCpu fallback for qemu:///session (rhbz#2157094)
  - RHEL: rpminspect: Disable abidiff inspection


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-8
changelog:
  - docs: Fix examples in virt-qemu-sev-validate man page (rhbz#2172347)
  - docs: refer to --firmware instead of --loader (rhbz#2172347)
  - rpm: add missing deps for the virt-qemu-sev-validate (rhbz#2172347)
  - docs/kbase: fix example for SEV validation (rhbz#2172347)
  - qemu_passt: Report error when getting passt PID failed (rhbz#2169244)
  - qemu_passt: Avoid double daemonizing passt (rhbz#2169244)
  - qemu_passt: Report passt's error on failed start (rhbz#2169244)
  - qemu_passt: Deduplicate passt killing code (rhbz#2169244)
  - qemu_passt: Let passt write the PID file (rhbz#2169244)
  - qemu_passt: Remove passt socket file on exit (rhbz#2169244)
  - tests: qemucapabilitiesdata: Update for the qemu-8.0 development cycle (rhbz#2172098)
  - qemu: capabilities: Introduce QEMU_CAPS_NETDEV_STREAM_RECONNECT (rhbz#2172098)
  - qemu: add reconnect=5 to passt qemu commandline options when available (rhbz#2172098)
  - qemu: respond to NETDEV_STREAM_DISCONNECTED event (rhbz#2172098)
  - qemu: domain: Fix logic when tainting domain (rhbz#2174446)
  - qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174446)
  - qemu: validate: Fix logic for validating presence of the HPET timer (rhbz#2175813)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-9
changelog:
  - util: add an API to retrieve the resolved path to a virCommand's binary (rhbz#2172267)
  - security: make args to virSecuritySELinuxContextAddRange() const (rhbz#2172267)
  - security: make it possible to set SELinux label of child process from its binary (rhbz#2172267)
  - qemu: set SELinux label of passt process to its own binary's label (rhbz#2172267)
  - rpm: Recommend passt-selinux (rhbz#2172267)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-10.1.el9_2
changelog:
  - virnuma: Move virNumaNodesetToCPUset() out of WITH_NUMACTL (rhbz#2185039)
  - virnuma: Introduce virNumaCPUSetToNodeset() (rhbz#2185039)
  - virnumamock: Introduce virNumaGetNodeOfCPU() mock (rhbz#2185039)
  - qemuxml2argvtest: Use virnuma mock (rhbz#2185039)
  - qemuxml2argvdata: Adjust maximum NUMA node used (rhbz#2185039)
  - qemuxml2argvdata: Extend vCPUs placement in memory-hotplug-dimm-addr.xml (rhbz#2185039)
  - qemuxml2argvmock: Drop virNuma* mocks (rhbz#2185039)
  - qemu: Move cpuset preference evaluation into a separate function (rhbz#2185039)
  - qemu: Fix qemuDomainGetEmulatorPinInfo() (rhbz#2185039)
  - qemuBuildMemoryBackendProps: Join two conditions (rhbz#2185039)
  - qemu: Add @nodemaskRet argument to qemuBuildMemoryBackendProps() (rhbz#2185039)
  - qemu: Add @nodemask argument to qemuBuildThreadContextProps() (rhbz#2185039)
  - qemuBuildThreadContextProps: Prune .node-affinity wrt <emulatorpin/> (rhbz#2185039)
  - docs: Document memory allocation and emulator pinning limitation (rhbz#2185039)
  - conf: Fix migration in some firmware autoselection scenarios (rhbz#2186383)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-0rc1.1
changelog:
  - Rebased to libvirt-9.5.0-rc1 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2160356, rhbz#2209191, rhbz#2210287, rhbz#2209853, rhbz#2171860
      rhbz#2138150, rhbz#2171384


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-2
changelog:
  - nodedev: transient mdev update on nodeDeviceCreateXML (rhbz#2143158)
  - nodedev: refactor mdevctl thread functions (rhbz#2143158)
  - nodedev: update mdevs from the mdevctl thread (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-3
changelog:
  - tests: remove acpi support from s390x ccw hotplug tests (rhbz#2168499)
  - tests: add capabilities for QEMU 8.1.0 on s390x (rhbz#2168499)
  - qemu: add run-with async-teardown capability (rhbz#2168499)
  - qemu: allow use of async teardown in domain (rhbz#2168499)
  - conf: domcaps: Add 'async-teardown' domain capability (rhbz#2168499)
  - qemu: S390 does not provide physical address size (rhbz#2224016)
  - nodedev: report mdev persistence properly (rhbz#2143158)
  - node_device: Don't leak error message buffer from virMdevctlListDefined|Active (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-4
changelog:
  - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (CVE-2023-3750, rhbz#2221851)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-5
changelog:
  - Revert "qemu_passt: Actually use @logfd" (rhbz#2209191)
  - Revert "qemu_passt: Precreate passt logfile" (rhbz#2209191)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-6
changelog:
  - tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178)
  - tests: Switch to firmware autoselection for hvf (rhbz#2196178)
  - tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178)
  - tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178)
  - tests: Turn abi-update.xml into a symlink (rhbz#2196178)
  - tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178)
  - qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178)
  - qemu: Fix lookup against stateless/combined pflash (rhbz#2196178)
  - tests: Add some more DO_TEST*ABI_UPDATE* macros (rhbz#2196178)
  - tests: Add more tests for firmware selection (rhbz#2196178)
  - tests: Update firmware descriptor files (rhbz#2196178)
  - tests: Drop tags from BIOS firmware descriptor (rhbz#2196178)
  - tests: Include microvm in firmwaretest (rhbz#2196178)
  - qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178)
  - qemu: Generate NVRAM path in more cases (rhbz#2196178)
  - qemu: Filter firmware based on loader.readonly (rhbz#2196178)
  - qemu: Match NVRAM template extension for new domains (rhbz#2196178)
  - conf: Don't default to raw format for loader/NVRAM (rhbz#2196178)
  - tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178)
  - tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178)
  - rpm: Reorder scriptlets (rhbz#2210058)
  - rpm: Reduce use of with_modular_daemons (rhbz#2210058)
  - rpm: Remove custom libvirtd restart logic (rhbz#2210058)
  - rpm: Introduce new macros for handling of systemd units (rhbz#2210058)
  - rpm: Switch to new macros for handling of systemd units (rhbz#2210058)
  - rpm: Delete unused macros (rhbz#2210058)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-7
changelog:
  - util: use "stubDriverType" instead of just "stubDriver" (rhbz#2074209)
  - util: add stub driver name to virPCIDevice object (rhbz#2074209)
  - util: rename virPCIDeviceGetDriverPathAndName (rhbz#2074209)
  - util: permit existing binding to VFIO variant driver (rhbz#2074209)
  - util: probe stub driver from within function that binds to stub driver (rhbz#2074209)
  - util: honor stubDriverName when probing/binding stub driver for a device (rhbz#2074209)
  - node_device: support binding other drivers with virNodeDeviceDetachFlags() (rhbz#2074209)
  - qemu: turn two multiline log messages into single line (rhbz#2074209)
  - docs: update description of virsh nodedev-detach --driver option (rhbz#2074209)
  - rpm: Fix typo in daemon name (rhbz#2236057)
  - rpm: Recommend libvirt-daemon for with_modular_daemons distros (rhbz#2236500)


author: Shaleen Bathla <shaleen.bathla@oracle.com> - 9.5.0-7.0.1
changelog:
  - The path to the guest agent socket file can become too long and cause problems.(rhbz#2233744)
  - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Darren Archibald <darren.archibald@oracle.com> - 1.9.0-7
changelog:
  - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
    Resolves: rhbz#2241191
  - crash related to VP9 encoding in libvpx (CVE-2023-44488)
    Resolves: rhbz#2241806


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "aarch64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j16  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
changelog:
  - fix handling of zero-length messages
  - minimize default configuration
  - remove obsolete build requirement


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6.el9_2.2
changelog:
  - don't re-arm fault clearing timer on unrelated netlink events (#2208265)
  - clear pending errors on sockets (#2208210)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: EL Errata <el-errata_ww@oracle.com> - 179-2.0.1
changelog:
  - Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]


author: Lans Hung <lans.hung@oracle.com> - 179-2.0.2
changelog:
  - Fix in the case for unsupported (AMD) cpu, remove the unnecessary require statement which causes runtime dependency issue and change the exit status to EX_UNAVAILABLE (69) [Orabug: 33797836]


author: EL Errata <el-errata_ww@oracle.com> - 182-3.0.1
changelog:
  - Fix in the case for unsupported (AMD) cpu, remove the unnecessary require statement which causes runtime dependency issue and change the exit status to EX_UNAVAILABLE (69) [Orabug: 33797836]
  - Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-32
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.2-2
changelog:
  - More efficient cache and cow filters.
  - Add nbdkit-cow-filter cow-on-read option.
  - Add nbdkit-cache-filter cache-on-read=/PATH.
  - Add nbdkit-cache-filter cache-min-block-size option.
  - Add nbdkit-delay-filter delay-open and delay-close options.
  - Reduce verbosity of debugging from virt-v2v.
  - Miscellaneous bugfixes
    resolves: rhbz#1950632


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-1
changelog:
  - New upstream stable version 1.26.3.
    resolves: rhbz#1950632
  - Add Python .cleanup() method.
  - Fix data corruption in zero and trim on unaligned tail.
    resolves: rhbz#1990134


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-3
changelog:
  - Fix parsing of delay-* options
    resolves: rhbz#1991649
  - Fix assertion failure during server shutdown
  - Fix delay-close option
    resolves: rhbz#1991652
  - tests/test-debug-flags.sh: Don't use port 10809 during test
    resolves: rhbz#1991945


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.5-1
changelog:
  - Rebase along stable branch to 1.26.5
    resolves: rhbz#1995327
  - Add nbdkit-vddk-plugin -D vddk.stats=1 flag
    resolves: rhbz#1995329
  - Add nbdkit-cow-filter cow-block-size parameter
    resolves: rhbz#1995332
  - Fix CVE-2021-3716 nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS
  - Update keyring


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-4
changelog:
  - Install an improved sample config
  - Fix permissions of osf-related configs
  - rule: Fix for potential off-by-one in cmd_add_loc()
  - netlink_delinearize: Fix suspicious calloc() call
  - netlink: Avoid memleak in error path of netlink_delinearize_obj()
  - netlink: Avoid memleak in error path of netlink_delinearize_table()
  - netlink: Avoid memleak in error path of netlink_delinearize_chain()
  - netlink: Avoid memleak in error path of netlink_delinearize_set()
  - json: Drop pointless assignment in exthdr_expr_json()
  - evaluate: Mark fall through case in str2hooknum()
  - parser_json: Fix for memleak in tcp option error path
  - parser_bison: Fix for implicit declaration of isalnum
  - main: fix nft --help output fallout from 719e4427
  - tests: add icmp/6 test where dependency should be left alone
  - payload: check icmp dependency before removing previous icmp expression


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-8
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set")
  - segtree: Fix segfault when restoring a huge interval set


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-10
changelog:
  - tests: shell: better parameters for the interval stack overflow test
  - tests: shell: $NFT needs to be invoked unquoted


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-11
changelog:
  - tests: py: add dnat to port without defining destination address
  - evaluate: fix inet nat with no layer 3 info
  - include: missing sctp_chunk.h in Makefile.am
  - exthdr: Implement SCTP Chunk matching
  - scanner: sctp: Move to own scope
  - scanner: introduce start condition stack
  - json: Simplify non-tcpopt exthdr printing a bit


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: EL Errata <el-errata_ww@oracle.com> - 1.20.1-13.0.1
changelog:
  - Reference oracle-indexhtml within Requires [Orabug: 33802044]
  - Remove Red Hat references [Orabug: 29498217]


author: Alan Steinberg <alan.steinberg@oracle.com> - 1:1.20.1-14.0.1.1
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.10.0-1
changelog:
  - Rebase to 16.10.0, add corepack, fix PowerShell dependency
  - Resolves: RHBZ#2000539, #2000548, #2000549, #2002177


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-1
changelog:
  - Update to latest version
  - Use jinja and jq
  - Don't fix python3
  - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533
  - Resolves CVE-2020-15095
  - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960
  - Resolves: CVE-2021-3807, CVE-2021-27290


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 1:16.20.2-4.0.1
changelog:
  - reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks
    Resolves: CVE-2024-22019


author: Jan Staněk <jstanek@redhat.com> - 1:16.14.0-5
changelog:
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: David Sloboda <david.x.sloboda@oracle.com> - 1:18.20.2-2
changelog:
  - Removes .ps1 files
  - Rebase to 18.20.2
  - Fixes: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-6
changelog:
  - Remove debugging printf from a patch
  - increase the pbe cache size to handle reusing the same token key.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Craig Guiller <craig.guiller@oracle.com> - 3.90.0-4
changelog:
  - CVE-2023-5388
      nss: timing attack against RSA decryption.
      Make the final blinding multmod constant time.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Ashish Samant <ashish.samant@oracle.com> - 1.8.6-11
changelog:
  - tunefs.ocfs2: read journal superblock even for online operations (Ashish
    Samant)  [Orabug: 28804934]


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: EL Errata <el-errata_ww@oracle.com> - 10.11.0.2-1.0.1
changelog:
  - Add oracle-linux.patch
  - Add modify_to_suitable_os_release.patch
  - Added patch to properly identify oracle as redhat (Alex Burmashev)


author: EL Errata <el-errata_ww@oracle.com> - 10.11.0.2-1.0.1
changelog:
  - Support os_vendor checking for OL
  - Add modify_to_suitable_os_release.patch
  - Added patch to identify OL as redhat vendor (Alex Burmashev)


author: Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.5-1
changelog:
  - Package new upstream version open-vm-tools-11.2.5-17337674.
  - libdnet dependency was removed in open-vm-tools 11.0.0. So,
    removed the stale BuildRequires for libdnet.


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el9
changelog:
  - ovt-Fixes-necessary-to-build-open-vm-tools-with-newer-gt.patch [bz#1936382]
  - ovt-Update-spec-file-for-correct-build.patch [bz#1936382]
  - Resolves: bz#1936382
    ([ESXi][RHEL-9][FTBS] open-vm-tools not working with newer gtk libraries)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-4
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1954040]
  - Resolves: bz#1954040
    ([ESXi][RHEL9.0][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Miroslav Rezanina <rezanin@redhat.com> - 11.3.0-1
changelog:
  - Rebase to 11.3.0 [bz#1974471]
  - Resolves: bz#1974471
    ([ESXi][RHEL9]Open-vm-tools release 11.3.0 has been released - please update for RHEL 9.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1
changelog:
  - Rebase to 11.3.5 [bz#2008243]
  - Resolves: bz#2008243
    ([ESXi][RHEL9]Open-vm-tools release 11.3.5 has been released - please rebase)


author: EL Errata <el-errata_ww@oracle.com> - 11.3.5-1.0.1
changelog:
  - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968]
  - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019]
  - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156]


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1.el9_0.1
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119285]
  - Resolves: bz#2119285
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to 12.0.0 [bz#2061193]
  - Resolves: bz#2061193
    ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
changelog:
  - Rebase to open-vm-tools 12.0.5 [bz#2090275]
  - Resolves: bz#2090275
    ([ESXi][RHEL9]Open-vm-tools release 12.0.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-2
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119286]
  - Resolves: bz#2119286
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-9.1.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
changelog:
  - Rebase to open-mv-tools 12.1.0 [bz#2121203]
  - Resolves: bz#2121203
    ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150190]
  - Resolves: bz#2150190
    ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 12.1.5-1.0.2
changelog:
  - [CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177086]
  - Resolves: bz#2177086
    ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
changelog:
  - ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
  - Resolves: bz#2208160
    ([ESXi][RHEL9] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215566]
  - Resolves: bz#2215566
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebaer to open-vm-tools 12.2.5
  - Resolves: bz#2214862
    ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Darren Archibald <darren.archibald@oracle.com> - 12.2.5-3.0.1.2
changelog:
  - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.
  - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Than Ngo <than@redhat.com> - 3.16.0-10
changelog:
  - Resolves: #1987186, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Than Ngo <than@redhat.com> - 3.17.0-8
changelog:
  - Resolves: #2127873, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.18.0-5
changelog:
  - opencryptoki C_GenerateKeyPair() fails after generating > 500 RSA keys with CEX7 crypto cards
  Resolves: #2128611


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 3.21.0-9
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
changelog:
  - Added some linker hardening flags to pass annocheck
    Related: rhbz#2031802

    * Tue Dec 14 2021 Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
  - Added gating
    Related: rhbz#2031794


author: Michael Petlan <mpetlan@redhat.com> - 1.2.0-2
changelog:
  - Update to upstream 1.2.0 -- fix opencsd_tag
    Related: rhbz#2041578

    * Fri Jan 21 2022 Michael Petlan <mpetlan@redhat.com> - 1.2.0-1
  - Update to upstream 1.2.0
    Related: rhbz#2041578


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-4
changelog:
  - Backport Channel Binding support. Related: rhbz#1967853
  - Fix coverity issues. Related: rhbz#1938829


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
    The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Change STRIP to STRIP_OPTS
    Add export symbols related to LDAP_CONNECTIONLESS
    Related: rhbz#2117752


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: John McWalters <john.mcwalters@oracle.com> - 1.3.10-2.0.1
changelog:
  - Update signature info query format to take RSAHEADER and
    DSAHEADER into account [Orabug: 34325165]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Add bug29870387-fix-redhat-reference.patch [Orabug: 29870387]


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Federico Ramírez <federico.r.ramirez@oracle.com> - 1:1.3.6-3.0.4
changelog:
  - Update signature info query format to take RSAHEADER and
    DSAHEADER into account [Orabug: 34325165]


author: EL Errata <el-errata_ww@oracle.com> - 1.3.6-4.0.1
changelog:
  - Update signature info query format to take RSAHEADER and
    DSAHEADER into account [Orabug: 34325165]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Add bug29870387-fix-redhat-reference.patch [Orabug: 29870387]


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-1 + 0.10.4-4
changelog:
  - New upstream release
  - Switch to SFTP protocol in scp utility by default
  - Enable SCP protocol kill switch
    Related: rhbz#2001002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-7
changelog:
  - Switch to SFTP protocol in scp utility by default - upstream fixes
    Related: rhbz#2001002
  - Workaround for RHEL 8 incompatibility in scp utility in SFTP mode
    Related: rhbz#2038854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-26
changelog:
  - Fix one-byte overflow in SSH banner processing
    Resolves: rhbz#2138345
  - Fix double free() in error path
    Resolves: rhbz#2138347


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-28
changelog:
  - Do not try to use SHA1 for host key ownership proof when we don't support it server-side
    Resolves: rhbz#2088750


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Craig Guiller <craig.guiller@oracle.com> - 8.7p1-34.3
changelog:
  - Fix Terrapin attack (CVE-2023-48795)
    Resolves: RHEL-19764
  - Forbid shell metasymbols in username/hostname (CVE-2023-51385)
    Resolves: RHEL-19822


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-13
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-15.1
changelog:
  - Fix invocation of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before
    setting an allowed digest with EVP_PKEY_CTX_set_signature_md()
  - Resolves: rhbz#2061607


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-19
changelog:
  - Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes
  - Resolves: rhbz#2063306


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-20
changelog:
  - Fix acceptance of SHA-1 certificates with rh-allow-sha1-signatures = yes when
    no OpenSSL library context is set
  - Resolves: rhbz#2063306


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-33
changelog:
  - CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory
  - Resolves: rhbz#2089443
  - CVE-2022-1343 openssl: Signer certificate verification returned
    inaccurate response when using OCSP_NOCHECKS
  - Resolves: rhbz#2089439
  - CVE-2022-1292 openssl: c_rehash script allows command injection
  - Resolves: rhbz#2090361
  - Revert "Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode"
    Related: rhbz#2087234
  - Use KAT for ECDSA signature tests, s390 arch
  - Resolves: rhbz#2086866


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-35
changelog:
  - Add explicit indicators for signatures in FIPS mode and mark signature
    primitives as unapproved.
    Resolves: rhbz#2087234


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-36
changelog:
  - Ciphersuites with RSAPSK KX should be filterd in FIPS mode
  - Related: rhbz#2091994
  - FIPS provider should block RSA encryption for key transport.
  - Other RSA encryption options should still be available if key length is enough
  - Related: rhbz#2091977
  - Improve diagnostics when passing unsupported groups in TLS
  - Related: rhbz#2086554
  - Fix PPC64 Montgomery multiplication bug
  - Related: rhbz#2101346
  - Strict certificates validation shouldn't allow explicit EC parameters
  - Related: rhbz#2085521
  - CVE-2022-2068: the c_rehash script allows command injection
  - Related: rhbz#2098276


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-38
changelog:
  - Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously
    initialized.
    Resolves: rhbz#2107530
  - Improve AES-GCM performance on Power9 and Power10 ppc64le
    Resolves: rhbz#2103044
  - Improve ChaCha20 performance on Power10 ppc64le
    Resolves: rhbz#2103044


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-39
changelog:
  - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
  - Use Use digest_sign & digest_verify in FIPS signature self test
  - Use FFDHE2048 in Diffie-Hellman FIPS self-test
    Resolves: rhbz#2112978


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40
changelog:
  - Deal with DH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115856
  - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115857
  - Use signature for RSA pairwise test according FIPS-140-3 requirements
    Related: rhbz#2115858
  - Reseed all the parent DRBGs in chain on reseeding a DRBG
    Related: rhbz#2115859
  - Zeroization according to FIPS-140-3 requirements
    Related: rhbz#2115861


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Resolves: rhbz#2115861
  - Add FIPS indicator for HKDF
    Resolves: rhbz#2118388


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-39
changelog:
  - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
  - Use Use digest_sign & digest_verify in FIPS signature self test
  - Use FFDHE2048 in Diffie-Hellman FIPS self-test
    Resolves: rhbz#2102535


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40
changelog:
  - Deal with DH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2102536
  - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2102537
  - Use signature for RSA pairwise test according FIPS-140-3 requirements
    Related: rhbz#2102540
  - Reseed all the parent DRBGs in chain on reseeding a DRBG
    Related: rhbz#2102541


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Related: rhbz#2102542
  - Add FIPS indicator for HKDF
    Related: rhbz#2114772


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-43
changelog:
  - CVE-2022-3602: X.509 Email Address Buffer Overflow
  - CVE-2022-3786: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-44
changelog:
  - SHAKE-128/256 are not allowed with RSA in FIPS mode
    Resolves: rhbz#2144010
  - Avoid memory leaks in TLS
    Resolves: rhbz#2144008
  - FIPS RSA CRT tests must use correct parameters
    Resolves: rhbz#2144006
  - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC
    Resolves: rhbz#2144017
  - Remove support for X9.31 signature padding in FIPS mode
    Resolves: rhbz#2144015
  - Add explicit indicator for SP 800-108 KDFs with short key lengths
    Resolves: rhbz#2144019
  - Add explicit indicator for HMAC with short key lengths
    Resolves: rhbz#2144000
  - Set minimum password length for PBKDF2 in FIPS mode
    Resolves: rhbz#2144003
  - Add explicit indicator for PSS salt length in FIPS mode
    Resolves: rhbz#2144012
  - Clamp default PSS salt length to digest size for FIPS 186-4 compliance
    Related: rhbz#2144012
  - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode
    Resolves: rhbz#2145170


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-45
changelog:
  - Add support of X25519 and X448 "group" parameter in EVP_PKEY_CTX objects
    Resolves: rhbz#2149010
  - Fix explicit indicator for PSS salt length in FIPS mode when used with
    negative magic values
    Resolves: rhbz#2144012
  - Update change to default PSS salt length with patch state from upstream 
    Related: rhbz#2144012


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-46
changelog:
  - Refactor OpenSSL fips module MAC verification
    Resolves: rhbz#2158412
  - Disallow SHAKE in RSA-OAEP decryption in FIPS mode
    Resolves: rhbz#2144010


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-47
changelog:
  - Fixed X.509 Name Constraints Read Buffer Overflow
    Resolves: CVE-2022-4203
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed Invalid pointer dereference in d2i_PKCS7 functions
    Resolves: CVE-2023-0216
  - Fixed NULL dereference validating DSA public key
    Resolves: CVE-2023-0217
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286
  - Fixed NULL dereference during PKCS7 data verification
    Resolves: CVE-2023-0401


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-9
changelog:
  - Fix explicit FIPS indicator for X9.42 KDF when used with output lengths < 14 bytes
    Resolves: rhbz#2175864


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-11
changelog:
  - Add missing reference to patchfile to add explicit FIPS indicator to RSA
    encryption and RSASVE and fix the gettable parameter list for the RSA
    asymmetric cipher implementation.
    Resolves: rhbz#2179379


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-13
changelog:
  - Enforce using EMS in FIPS mode
    Resolves: rhbz#2157951
  - Fix excessive resource usage in verifying X509 policy constraints
    Resolves: rhbz#2186661
  - Fix invalid certificate policies in leaf certificates check
    Resolves: rhbz#2187429
  - Certificate policy check not enabled
    Resolves: rhbz#2187431
  - OpenSSL rsa_verify_recover key length checks in FIPS mode
    Resolves: rhbz#2186819


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-15.1
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2178030


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-16
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211396


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-19
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2169757


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-20
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211340


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Tomáš Hozza <thozza@redhat.com> - 76-2
changelog:
  - distro/rhel: add payload repos to os package set (rhbz#2177699)
  - Manifest: always set kernel options in grub2 stage (rhbz#2162299)


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981859


author: Luca BRUNO <lucab@redhat.com> - 2021.6-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.6
    Resolves: rhbz#2026931


author: Luca BRUNO <lucab@redhat.com> - 2022.2-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.2
    Resolves: rhbz#2070964


author: Luca BRUNO <lucab@redhat.com> - 2022.5-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.5
    Resolves: rhbz#2119815


author: Luca BRUNO <lucab@redhat.com> - 2022.5-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.5
    Resolves: rhbz#2127868


author: Luca BRUNO <lucab@redhat.com> - 2022.6-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.6
    Resolves: rhbz#2134054


author: Tianyue Lan <tianyue.lan@oracle.com> - 2023.1-6
changelog:
  - backport https://github.com/ostreedev/ostree/pull/2874/commits/de6fddc6adee09a93901243dc7074090828a1912


author: Craig Guiller <craig.guiller@oracle.com> - 2023.1-7
changelog:
  - backport https://github.com/ostreedev/ostree/pull/2969/commits/402e04280b54c058ad47be99fe6a9326caf2ae00


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


