# changelog

author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.6.1.el9_5]
changelog:
  - scsi: smartpqi: Bump driver version to 2.1.26-030 (Don Brace) [RHEL-21268]
  - scsi: smartpqi: Fix logical volume rescan race condition (Don Brace) [RHEL-21268]
  - scsi: smartpqi: Add new controller PCI IDs (Don Brace) [RHEL-21268]
  - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51559] {CVE-2024-42079}
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Rafael Aquini) [RHEL-57170] {CVE-2024-44965}
  - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (CKI Backport Bot) [RHEL-47822] {CVE-2024-40919}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.7.1.el9_5]
changelog:
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Jose Ignacio Tornos Martinez) [RHEL-55579] {CVE-2024-43879}
  - wifi: mac80211: fix NULL dereference at band check in starting tx ba session (Jose Ignacio Tornos Martinez) [RHEL-56191] {CVE-2024-43911}
  - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (Jose Ignacio Tornos Martinez) [RHEL-54805] {CVE-2024-43842}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.8.1.el9_5]
changelog:
  - ionic: fix kernel panic in XDP_TX action (CKI Backport Bot) [RHEL-47730] {CVE-2024-40907}
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (Izabela Bakollari) [RHEL-44037] {CVE-2024-38586}
  - ata: libata-core: Fix double free on error (Tomas Henzl) [RHEL-53777]
  - ata: libata: Fix memory leak for error path in ata_host_alloc() (Tomas Henzl) [RHEL-53777]
  - ata: ahci: Clean up sysfs file on error (Tomas Henzl) [RHEL-53777]
  - ata: libata-core: Fix null pointer dereference on error (Tomas Henzl) [RHEL-53777]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Tomas Henzl) [RHEL-53777]
  - ata: ahci: Do not enable LPM if no LPM states are supported by the HBA (Tomas Henzl) [RHEL-53777]
  - ata: libata-scsi: Set the RMB bit only for removable media devices (Tomas Henzl) [RHEL-53777]
  - ata: libata-core: Do not try to set sleeping devices to standby (Tomas Henzl) [RHEL-53777]
  - KVM: s390: fix validity interception issue when gisa is switched off (CKI Backport Bot) [RHEL-57197] {CVE-2024-45005}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.9.1.el9_5]
changelog:
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55074] {CVE-2024-42284}
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57119] {CVE-2024-44970}
  - net/mlx5e: Fix CT entry update leaks of modify header context (Michal Schmidt) [RHEL-55628] {CVE-2024-43864}
  - net/mlx5: Always drain health in shutdown callback (Michal Schmidt) [RHEL-55616] {CVE-2024-43866}
  - net/mlx5: SF, Stop waiting for FW as teardown was called (Michal Schmidt) [RHEL-55616]
  - net/mlx5: Fix missing lock on sync reset reload (Michal Schmidt) [RHEL-55121] {CVE-2024-42268}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.10.1.el9_5]
changelog:
  - intel_th: pci: Add Granite Rapids SOC support (Michael Petlan) [RHEL-15664]
  - dma: fix call order in dmam_free_coherent (Eder Zulian) [RHEL-54751] {CVE-2024-43856}
  - dmaengine: idxd: Avoid unnecessary destruction of file_ida (Jerry Snitselaar) [RHEL-44508] {CVE-2024-38629}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.11.1.el9_5]
changelog:
  - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56254] {CVE-2024-43892}
  - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Michal Schmidt) [RHEL-57259] {CVE-2024-44984}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.12.1.el9_5]
changelog:
  - net: nexthop: Initialize all fields in dumped nexthops (Antoine Tenart) [RHEL-55080] {CVE-2024-42283}
  - tracing/osnoise: Fix build when timerlat is not enabled (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - tracing/timerlat: Only clear timer if a kthread exists (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - tracing/osnoise: Use a cpumask to know what threads are kthreads (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - iommufd: Require drivers to supply the cache_invalidate_user ops (CKI Backport Bot) [RHEL-60681 RHEL-60761] {CVE-2024-46824}
  - Revert "fw loader: Remove the now superfluous sentinel element from ctl_table array" (Eric Chanudet) [RHEL-62925 RHEL-50129]
  - smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61607 RHEL-57983]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.13.1.el9_5]
changelog:
  - efi: libstub: Move screen_info handling to common code (Maxim Levitsky) [RHEL-65344]
  - mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61697]
  - mptcp: pm: Fix uaf in __timer_delete_sync (CKI Backport Bot) [RHEL-64678 RHEL-60737] {CVE-2024-46858}
  - ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62667 RHEL-61459]
  - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.14.1.el9_5]
changelog:
  - ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
  - ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
  - smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
  - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
  - cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.15.1.el9_5]
changelog:
  - USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
  - attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
  - ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
  - wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
  - wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
  - wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
  - wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
  - bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
  - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
  - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
  - ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
  - iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.16.1.el9_5]
changelog:
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-64902 RHEL-55873]
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Steve Best) [RHEL-65436 RHEL-27748] {CVE-2024-26615}
  - gitlab-ci: use zstream builder container image (Michael Hofmann)
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66856] {CVE-2024-50251}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CKI Backport Bot) [RHEL-65401] {CVE-2024-49949}
  - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-58761 RHEL-54768] {CVE-2024-43854}
  - proc: fix dentry/inode overinstantiating under /proc/${pid}/net (Joel Savitz) [RHEL-62824 RHEL-57703]
  - iommu: Restore lost return in iommu_report_device_fault() (CKI Backport Bot) [RHEL-67364] {CVE-2024-44994}
  - net: ena: Extend customer metrics reporting support (Kamal Heib) [RHEL-66933 RHEL-59968]
  - net: ena: Add ENA Express metrics support (Kamal Heib) [RHEL-66933 RHEL-59968]
  - xsk: fix batch alloc API on non-coherent systems (Felix Maurer) [RHEL-59884 RHEL-58954]
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66106] {CVE-2024-46695}
  - PCI/AER: Disable AER service on suspend (Lenny Szubowicz) [RHEL-67037 RHEL-22265]
  - ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions (Mark Langsdorf) [RHEL-67037 RHEL-54149]
  - mptcp: fallback when MPTCP opts are dropped after 1st data (CKI Backport Bot) [RHEL-62216 RHEL-62218]
  - cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate: Add the missing cpufreq_cpu_put() (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate: fix setting policy current frequency value (David Arcari) [RHEL-61469 RHEL-45016]
  - netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58545] {CVE-2024-45018}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.17.1.el9_5]
changelog:
  - arm64: probes: Remove broken LDR (literal) uprobe support (CKI Backport Bot) [RHEL-66046] {CVE-2024-50099}
  - qed: put cond_resched() in qed_dmae_operation_wait() (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: allow the callee of qed_mcp_nvm_read() to sleep (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: put cond_resched() in qed_grc_dump_ctx_data() (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: make 'ethtool -d' 10 times faster (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: allow sleep in qed_mcp_trace_dump() (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - sched/numa: Fix the potential null pointer dereference in task_numa_work() (CKI Backport Bot) [RHEL-66810] {CVE-2024-50223}
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
  - perf/x86/intel/uncore: Support HBM and CXL PMON counters (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Cleanup unused unit structure (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Apply the unit control RB tree to PCI uncore units (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Apply the unit control RB tree to MSR uncore units (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Retrieve the unit ID from the unit control RB tree (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Support per PMU cpumask (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Save the unit control address of all units (Michael Petlan) [RHEL-65856]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.18.1.el9_5]
changelog:
  - bpf: Fix a kernel verifier crash in stacksafe() (CKI Backport Bot) [RHEL-66097 RHEL-66098] {CVE-2024-45020}
  - bpf: Fix a sdiv overflow issue (CKI Backport Bot) [RHEL-64598 RHEL-64597] {CVE-2024-49888}
  - bpf: Fix out-of-bounds write in trie_get_next_key() (CKI Backport Bot) [RHEL-66877] {CVE-2024-50262}
  - bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CKI Backport Bot) [RHEL-63331] {CVE-2024-47675}
  - nfsd: ensure that nfsd4_fattr_args.context is zeroed out (Jay Shin) [RHEL-58884 RHEL-58883] {CVE-2024-46697}
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Jon Maloy) [RHEL-65872] {CVE-2024-50115}
  - net: tighten bad gso csum offset check in virtio_net_hdr (Guillaume Nault) [RHEL-67683]
  - udp: fix receiving fraglist GSO packets (Guillaume Nault) [RHEL-67683]
  - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CKI Backport Bot) [RHEL-66804] {CVE-2024-50255}
  - Bluetooth: ISO: Fix UAF on iso_sock_timeout (Bastien Nocera) [RHEL-66321] {CVE-2024-50124}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-50125}
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-27398}
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CKI Backport Bot) [RHEL-44173] {CVE-2024-38564}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (CKI Backport Bot) [RHEL-66365] {CVE-2024-50148}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CKI Backport Bot) [RHEL-57716 RHEL-36374] {CVE-2024-27399}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.19.1.el9_5]
changelog:
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66462 RHEL-66461] {CVE-2024-50142}
  - xfrm: fix one more kernel-infoleak in algo dumping (CKI Backport Bot) [RHEL-65960] {CVE-2024-50110}
  - Revert "Merge: [qed] softlockup triggered by ethtool -d  [rhel-9.5.z]" (Lucas Zampieri) [RHEL-61705]
  - tracing/hwlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468]
  - tracing/timerlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468] {CVE-2024-49866}
  - tracing/timerlat: Drop interface_lock in stop_kthread() (Tomas Glozar) [RHEL-69468]
  - tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (Tomas Glozar) [RHEL-69468]
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61416 RHEL-60255]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.20.1.el9_5]
changelog:
  - bnxt_en: Add support for user configured RSS key (Michal Schmidt) [RHEL-68699 RHEL-54645]
  - bnxt_en: Add function to calculate Toeplitz hash (Michal Schmidt) [RHEL-68699 RHEL-54645]
  - kvm: Note an RCU quiescent state on guest exit (Leonardo Bras) [RHEL-65734 RHEL-20288]
  - rcu: Add rcutree.nohz_full_patience_delay to reduce nohz_full OS jitter (Leonardo Bras) [RHEL-65734 RHEL-20288]
  - context_tracking: Fix KCSAN noinstr violation (Leonardo Bras) [RHEL-65734 RHEL-20288]
  - perf/aux: Fix AUX buffer serialization (Michael Petlan) [RHEL-67495] {CVE-2024-46713}
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-66669 RHEL-52759] {CVE-2024-50208}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.21.1.el9_5]
changelog:
  - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CKI Backport Bot) [RHEL-66899] {CVE-2024-50252}
  - CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-70083 RHEL-69670] {CVE-2024-53122}
  - mm: make show_free_areas() static (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
  - mm: remove arguments of show_mem() (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-67922 RHEL-65229]
  - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-67922 RHEL-65229]
  - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-67922 RHEL-65229]
  - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-67922 RHEL-65229]
  - KVM: s390: remove useless include (Thomas Huth) [RHEL-67922 RHEL-65229]
  - s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests (Thomas Huth) [RHEL-67922 RHEL-65229]
  - mm/userfaultfd: Do not place zeropages when zeropages are disallowed (Thomas Huth) [RHEL-67922 RHEL-65229]
  - s390: allow pte_offset_map_lock() to fail (Thomas Huth) [RHEL-67922 RHEL-54248]
  - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-67922 RHEL-65229]
  - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-67922 RHEL-65229]
  - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
  - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
  - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Call gfs2_queue_verify_delete from gfs2_evict_inode (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Minor delete_work_func cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Allow immediate GLF_VERIFY_DELETE work (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-62105 RHEL-60945]
  - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - smb: client: fix use-after-free of signing key (Jay Shin) [RHEL-69306 RHEL-66206]
  - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-60300 RHEL-53992]
  - KVM: arm64: Ensure vgic_ready() is ordered against MMIO registration (CKI Backport Bot) [RHEL-70294]


author: Chao YE <cye@redhat.com> [5.14.0-503.22.1.el9_5]
changelog:
  - [s390] zcore: WRITE is "data source", not destination... (CKI Backport Bot) [RHEL-63078]
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-72218] {CVE-2024-50275}
  - bpf: Use raw_spinlock_t in ringbuf (Luis Claudio R. Goncalves) [RHEL-68992 RHEL-20608]
  - rh_messages.h: un-unmaintain hfi1 (CKI Backport Bot) [RHEL-71322]
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-66055 RHEL-53595]
  - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-66055 RHEL-53595]
  - ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Use single token list for the copiers (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Adjust the params based on DAI formats (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Improve readability of sof_ipc4_prepare_dai_copier() (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology/pcm: Rename sof_ipc4_copier_is_single_format() (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Print out the channel count in sof_ipc4_dbg_audio_format (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc3-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: sof-audio: add sof_dai_get_tdm_slots function (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: sof-audio: rename dai clock setting query function (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Add support for NHLT with 16-bit only DMIC blob (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Correct DAI copier config and NHLT blob request (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Allow selective update in sof_ipc4_update_hw_params (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: remove shadowed variable (Jaroslav Kysela) [RHEL-62030]
  - Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI" (Ivan Vecera) [RHEL-65624]
  - KVM: SVM: Propagate error from snp_guest_req_init() to userspace (Bandan Das) [RHEL-68361 RHEL-65840]
  - KVM: SEV: Provide support for SNP_EXTENDED_GUEST_REQUEST NAE event (Bandan Das) [RHEL-68361 RHEL-65840]
  - x86/sev: Move sev_guest.h into common SEV header (Bandan Das) [RHEL-68361 RHEL-65840]
  - KVM: SEV: Provide support for SNP_GUEST_REQUEST NAE event (Bandan Das) [RHEL-68361 RHEL-65840]
  - i40e: fix race condition by adding filter's intermediate sync state (CKI Backport Bot) [RHEL-69809] {CVE-2024-53088}
  - ice: fix truesize operations for PAGE_SIZE >= 8192 (CKI Backport Bot) [RHEL-70660 RHEL-37905]
  - ice: fix ICE_LAST_OFFSET formula (CKI Backport Bot) [RHEL-70660 RHEL-37905]
  - ice: fix page reuse when PAGE_SIZE is over 8k (CKI Backport Bot) [RHEL-70660 RHEL-37905]
  - nvme-fabrics: handle zero MAXCMD without closing the connection (Maurizio Lombardi) [RHEL-72970]
  - selftests: netfilter: add test case for recent mismatch bug (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nf_tables: unconditionally flush pending work before notifier (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nf_tables: store new sets in dedicated list (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nft_socket: make cgroupsv2 matching work with namespaces (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [RHEL-71357 RHEL-60554]
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-70541 RHEL-70449]
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66329 RHEL-66328] {CVE-2024-50154}
  - rcu: Use system_unbound_wq to avoid disturbing isolated CPUs (Waiman Long) [RHEL-61329 RHEL-50220]
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71393 RHEL-9848]
  - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71393 RHEL-9848]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-503.23.2.el9_5]
changelog:
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CKI Backport Bot) [RHEL-78075 RHEL-69574] {CVE-2024-53104}


author: Chao YE <cye@redhat.com> [5.14.0-503.24.1.el9_5]
changelog:
  - smb: client: fix potential race in cifs_put_tcon() (Jay Shin) [RHEL-73594 RHEL-70959]
  - smb: client: don't try following DFS links in cifs_tree_connect() (Jay Shin) [RHEL-73594 RHEL-70959]
  - smb: client: allow reconnect when sending ioctl (Jay Shin) [RHEL-73594 RHEL-70959]
  - smb: client: get rid of @nlsc param in cifs_tree_connect() (Jay Shin) [RHEL-73594 RHEL-70959]
  - smb: client: allow more DFS referrals to be cached (Jay Shin) [RHEL-73594 RHEL-70959]
  - smb3: fix broken reconnect when password changing on the server by allowing password rotation (Jay Shin) [RHEL-73594 RHEL-57983]
  - i40e: Fix handling changed priv flags (Kamal Heib) [RHEL-69857 RHEL-30524]
  - mm: migrate: fix getting incorrect page mapping during page migration (Rafael Aquini) [RHEL-70898 RHEL-27742 RHEL-28873] {CVE-2023-52490}
  - mm: migrate: record the mlocked page status to remove unnecessary lru drain (Rafael Aquini) [RHEL-70898 RHEL-27742]
  - mm: convert migrate_pages() to work on folios (Rafael Aquini) [RHEL-70898 RHEL-27742]
  - migrate_pages_batch: simplify retrying and failure counting of large folios (Rafael Aquini) [RHEL-70898 RHEL-27742]


author: Chao YE <cye@redhat.com> [5.14.0-503.26.1.el9_5]
changelog:
  - redhat: drop Y issues from changelog (Jan Stancek)
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CKI Backport Bot) [RHEL-78075] {CVE-2024-53104}


author: Chao YE <cye@redhat.com> [5.14.0-503.27.1.el9_5]
changelog:
  - NFS: enable nconnect for RDMA (Benjamin Coddington) [RHEL-77179]
  - Revert "scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo" (Dick Kennedy) [RHEL-70933]
  - idpf: fix idpf_vc_core_init error path (CKI Backport Bot) [RHEL-70191]
  - idpf: avoid vport access in idpf_get_link_ksettings (CKI Backport Bot) [RHEL-70191]
  - ip6mr: fix tables suspicious RCU usage (Andrea Claudi) [RHEL-71730]
  - ipmr: tune the ipmr_can_free_table() checks. (Andrea Claudi) [RHEL-71730]
  - ipmr: add debug check for mr table cleanup (Andrea Claudi) [RHEL-71730]
  - net: ip6mr: add RTM_GETROUTE netlink op (Andrea Claudi) [RHEL-71730]
  - i40e: add ability to reset VF for Tx and Rx MDD events (Michal Schmidt) [RHEL-75972]
  - tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [RHEL-62215]
  - mptcp: handle consistently DSS corruption (Paolo Abeni) [RHEL-62215]


author: Chao YE <cye@redhat.com> [5.14.0-503.28.1.el9_5]
changelog:
  - bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (CKI Backport Bot) [RHEL-73726]
  - intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake (David Arcari) [RHEL-62985]
  - intel_idle: add Granite Rapids Xeon support (David Arcari) [RHEL-62985]
  - intel_idle: Switch to new Intel CPU model defines (David Arcari) [RHEL-62985]
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain() (David Arcari) [RHEL-59001]
  - x86/resctrl: Read supported bandwidth sources from CPUID (David Arcari) [RHEL-59001]
  - x86/resctrl: Remove hard-coded memory bandwidth limit (David Arcari) [RHEL-59001]
  - mei: me: disable RPL-S on SPS and IGN firmwares (CKI Backport Bot) [RHEL-60895]
  - smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Jay Shin) [RHEL-75935]
  - smb: client: disable directory caching when dir_cache_timeout is zero (Jay Shin) [RHEL-75935]
  - smb: client: remove unnecessary checks in open_cached_dir() (Jay Shin) [RHEL-75935]
  - smb: prevent use-after-free due to open_cached_dir error paths (Jay Shin) [RHEL-75935] {CVE-2024-53177}
  - smb: Don't leak cfid when reconnect races with open_cached_dir (Jay Shin) [RHEL-75935] {CVE-2024-53178}
  - smb3: request handle caching when caching directories (Jay Shin) [RHEL-75935]
  - bnxt_en: Unregister PTP during PCI shutdown and suspend (Michal Schmidt) [RHEL-69514]
  - bnxt_en: Refactor bnxt_ptp_init() (Michal Schmidt) [RHEL-69514]
  - smb: client: ignore unhandled reparse tags (Jay Shin) [RHEL-77743]
  - smb: client: fix oops due to unset link speed (Jay Shin) [RHEL-77359]


author: Chao YE <cye@redhat.com> [5.14.0-503.29.1.el9_5]
changelog:
  - rhel-9.5: gate on kernel-qe tests results not cki ones (Bruno Goncalves)
  - ice: implement low latency PHY timer updates (Petr Oros) [RHEL-75466]
  - ice: check low latency PHY timer update firmware capability (Petr Oros) [RHEL-75466]
  - ice: add lock to protect low latency interface (Petr Oros) [RHEL-75466]
  - ice: rename TS_LL_READ* macros to REG_LL_PROXY_H_* (Petr Oros) [RHEL-75466]
  - ice: use read_poll_timeout_atomic in ice_read_phy_tstamp_ll_e810 (Petr Oros) [RHEL-75466]
  - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-72875]
  - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-72875]
  - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-72875]
  - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-72875]
  - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-72875]
  - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-72875]
  - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-72875]
  - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-72875]
  - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-72875]
  - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-72875]
  - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-72875]
  - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-72875]
  - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-72875]
  - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-72875]
  - cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-72875]
  - cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-72875]
  - smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-72875]
  - cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-72875]
  - cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-72875]
  - smb: client: Handle kstrdup failures for passwords (Paulo Alcantara) [RHEL-72875] {CVE-2024-50120}
  - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-72875] {CVE-2024-54680}
  - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-72875] {CVE-2024-53095}
  - Fix spelling errors in Server Message Block (Paulo Alcantara) [RHEL-72875]
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (CKI Backport Bot) [RHEL-78423]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-503.30.1.el9_5]
changelog:
  - can: bcm: Fix UAF in bcm_proc_show() (CKI KWF BOT) [RHEL-80746] {CVE-2023-52922}
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-80526]
  - hugetlb: prioritize surplus allocation from current node (Aristeu Rozanski) [RHEL-77488]
  - dev: Acquire netdev_rename_lock before restoring dev->name in dev_change_name(). (Antoine Tenart) [RHEL-77338]
  - net: add softirq safety to netdev_rename_lock (Antoine Tenart) [RHEL-77343]
  - arp: Convert ioctl(SIOCGARP) to RCU. (Antoine Tenart) [RHEL-77343]
  - net: Protect dev->name by seqlock. (Antoine Tenart) [RHEL-77343]
  - net: Remove unused declaration dev_restart() (Antoine Tenart) [RHEL-77343]
  - arp: Get dev after calling arp_req_(delete|set|get)(). (Antoine Tenart) [RHEL-77343]
  - arp: Remove a nest in arp_req_get(). (Antoine Tenart) [RHEL-77343]
  - arp: Factorise ip_route_output() call in arp_req_set() and arp_req_delete(). (Antoine Tenart) [RHEL-77343]
  - arp: Validate netmask earlier for SIOCDARP and SIOCSARP in arp_ioctl(). (Antoine Tenart) [RHEL-77343]
  - arp: Move ATF_COM setting in arp_req_set(). (Antoine Tenart) [RHEL-77343]
  - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-75250] {CVE-2023-52605}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-75461] {CVE-2024-50264}
  - x86/pci: Skip early E820 check for ECAM region (CKI Backport Bot) [RHEL-67065]
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Steve Best) [RHEL-64291]


author: Chao YE <cye@redhat.com> [5.14.0-503.31.1.el9_5]
changelog:
  - HID: core: zero-initialize the report buffer (Benjamin Tissoires) [RHEL-81838] {CVE-2024-50302}
  - x86/kaslr: Expose and use the end of the physical memory address space (Waiman Long) [RHEL-70002]
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81799]
  - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81799]
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81799] {CVE-2024-53197}
  - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81799]
  - x86/kexec: Add EFI config table identity mapping for kexec kernel (Jay Shin) [RHEL-74170]
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Jay Shin) [RHEL-73210] {CVE-2024-53113}
  - can: bcm: Fix UAF in bcm_proc_show() (CKI KWF BOT) [RHEL-80746] {CVE-2023-52922}
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-80526]
  - hugetlb: prioritize surplus allocation from current node (Aristeu Rozanski) [RHEL-77488]
  - dev: Acquire netdev_rename_lock before restoring dev->name in dev_change_name(). (Antoine Tenart) [RHEL-77338]
  - net: add softirq safety to netdev_rename_lock (Antoine Tenart) [RHEL-77343]
  - arp: Convert ioctl(SIOCGARP) to RCU. (Antoine Tenart) [RHEL-77343]
  - net: Protect dev->name by seqlock. (Antoine Tenart) [RHEL-77343]
  - net: Remove unused declaration dev_restart() (Antoine Tenart) [RHEL-77343]
  - arp: Get dev after calling arp_req_(delete|set|get)(). (Antoine Tenart) [RHEL-77343]
  - arp: Remove a nest in arp_req_get(). (Antoine Tenart) [RHEL-77343]
  - arp: Factorise ip_route_output() call in arp_req_set() and arp_req_delete(). (Antoine Tenart) [RHEL-77343]
  - arp: Validate netmask earlier for SIOCDARP and SIOCSARP in arp_ioctl(). (Antoine Tenart) [RHEL-77343]
  - arp: Move ATF_COM setting in arp_req_set(). (Antoine Tenart) [RHEL-77343]
  - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-75250] {CVE-2023-52605}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-75461] {CVE-2024-50264}
  - x86/pci: Skip early E820 check for ECAM region (CKI Backport Bot) [RHEL-67065]
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Steve Best) [RHEL-64291]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.32.1.el9_5]
changelog:
  - SUNRPC: Handle -ETIMEDOUT return from tlshd (Benjamin Coddington) [RHEL-79870]
  - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (Benjamin Coddington) [RHEL-79870]
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington) [RHEL-79870]
  - SUNRPC: Fix a hang in TLS sock_close if sk_write_pending (Benjamin Coddington) [RHEL-79870]


author: Chao YE <cye@redhat.com> [5.14.0-503.33.1.el9_5]
changelog:
  - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-62266]
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-62266]
  - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-62266]
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62210]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.34.1.el9_5]
changelog:
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82734] {CVE-2025-21785}
  - crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-70643]


author: Chao YE <cye@redhat.com> [5.14.0-503.33.1.el9_5]
changelog:
  - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-62266]
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-62266]
  - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-62266]
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62210]
  - SUNRPC: Handle -ETIMEDOUT return from tlshd (Benjamin Coddington) [RHEL-79870]
  - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (Benjamin Coddington) [RHEL-79870]
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington) [RHEL-79870]
  - SUNRPC: Fix a hang in TLS sock_close if sk_write_pending (Benjamin Coddington) [RHEL-79870]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.35.1.el9_5]
changelog:
  - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged (Mark Langsdorf) [RHEL-78643]
  - coresight: etm4x: Add ACPI support in platform driver (Mark Salter) [RHEL-80223]
  - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-73024]
  - md: fix deadlock between mddev_suspend and flush bio (Nigel Croxon) [RHEL-76058] {CVE-2024-43855}
  - redhat/configs: replace IOMMU_DEFAULT_DMA_STRICT with IOMMU_DEFAULT_DMA_LAZY (Jerry Snitselaar) [RHEL-76412]
  - ibmvnic: Only record tx completed bytes once per handler (Mamatha Inamdar) [RHEL-71289]
  - ibmvnic: Only replenish rx pool when resources are getting low (Mamatha Inamdar) [RHEL-71289]
  - ibmvnic: Return error code on TX scrq flush fail (Mamatha Inamdar) [RHEL-71289]
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms (David Arcari) [RHEL-62987]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.36.1.el9_5]
changelog:
  - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (Steve Best) [RHEL-67636]
  - cxgb4: use port number to set mac addr (Michal Schmidt) [RHEL-79672]
  - ice: stop storing XDP verdict within ice_rx_buf (Petr Oros) [RHEL-76141]
  - ice: gather page_count()'s of each frag right before XDP prog call (Petr Oros) [RHEL-76141]
  - ice: put Rx buffers after being done with current frame (Petr Oros) [RHEL-76141]
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-74413]
  - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-74413]
  - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-74413] {CVE-2024-57933}
  - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-74413] {CVE-2024-57932}
  - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-74413]
  - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-74413]
  - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-74413] {CVE-2024-40937}
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-74413]


author: Chao YE <cye@redhat.com> [5.14.0-503.38.1.el9_5]
changelog:
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CKI Backport Bot) [RHEL-86726] {CVE-2024-53150}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.39.1.el9_5]
changelog:
  - igb: cope with large MAX_SKB_FRAGS (Corinna Vinschen) [RHEL-75552]
  - x86/sev: Ensure that RMP table fixups are reserved (Bandan Das) [RHEL-84716]
  - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-75456] {CVE-2024-46826}
  - smb: client: fix double put of @cfile in smb2_set_path_size() (Paulo Alcantara) [RHEL-79342] {CVE-2024-46796}
  - smb: client: fix double put of @cfile in smb2_rename_path() (Paulo Alcantara) [RHEL-79342] {CVE-2024-46736}
  - smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp (Paulo Alcantara) [RHEL-79342]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.40.1.el9_5]
changelog:
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Chris Leech) [RHEL-87479] {CVE-2025-21927}
  - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-75438] {CVE-2024-42322}
  - bonding: fix null pointer deref in bond_ipsec_offload_ok (CKI Backport Bot) [RHEL-75453] {CVE-2024-44990}
  - smb: client: don't retry IO on failed negprotos with soft mounts (Jay Shin) [RHEL-85523]
  - bonding: Correctly support GSO ESP offload (CKI Backport Bot) [RHEL-73403]
  - team: prevent adding a device which is already a team device lower (Hangbin Liu) [RHEL-73403]
  - team: Fix feature exposure when no ports are present (Hangbin Liu) [RHEL-73403]
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Hangbin Liu) [RHEL-73403]
  - team: Fix initial vlan_feature set in __team_compute_features (Hangbin Liu) [RHEL-73403]
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Hangbin Liu) [RHEL-73403]
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features (Hangbin Liu) [RHEL-73403]
  - net, team, bonding: Add netdev_base_features helper (Hangbin Liu) [RHEL-73403]
  - bonding: add ESP offload features when slaves support (Hangbin Liu) [RHEL-73403]
  - net: team: rename team to team_core for linking (Hangbin Liu) [RHEL-73403]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Ivan Vecera) [RHEL-71956]
  - bridge: mcast: Fail MDB get request on empty entry (Ivan Vecera) [RHEL-71956]
  - net: stmmac: dwmac-tegra: Fix link bring-up sequence (Jose Ignacio Tornos Martinez) [RHEL-73478]
  - kobject_uevent: Fix OOB access within zap_modalias_env() (CKI KWF BOT) [RHEL-75435] {CVE-2024-42292}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-495.el9]
changelog:
  - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52031] {CVE-2024-42154}
  - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (Benjamin Coddington) [RHEL-53004]
  - NFSD: Support write delegations in LAYOUTGET (Benjamin Coddington) [RHEL-53004]
  - nfs: fix undefined behavior in nfs_block_bits() (Benjamin Coddington) [RHEL-53004]
  - knfsd: LOOKUP can return an illegal error value (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington) [RHEL-53004]
  - nfs: pass explicit offset/count to trace events (Benjamin Coddington) [RHEL-53004]
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Benjamin Coddington) [RHEL-53004]
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Benjamin Coddington) [RHEL-53004]
  - NFSD: Fix nfsdcld warning (Benjamin Coddington) [RHEL-53004]
  - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (Benjamin Coddington) [RHEL-53004]
  - xprtrdma: Fix rpcrdma_reqs_reset() (Benjamin Coddington) [RHEL-53004]
  - Revert "nfsd: fix oops when reading pool_stats before server is started" (Benjamin Coddington) [RHEL-53004]
  - nfsd: initialise nfsd_info.mutex early. (Benjamin Coddington) [RHEL-53004]
  - nfs: drop the incorrect assertion in nfs_swap_rw() (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: Fix backchannel reply, again (Benjamin Coddington) [RHEL-53004]
  - NFS: add barriers when testing for NFS_FSDATA_BLOCKED (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: return proper error from gss_wrap_req_priv (Benjamin Coddington) [RHEL-53004]
  - NFSv4.1 enforce rootpath check in fs_location query (Benjamin Coddington) [RHEL-53004]
  - pNFS/filelayout: fixup pNfs allocation modes (Benjamin Coddington) [RHEL-53004]
  - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL (Benjamin Coddington) [RHEL-53004]
  - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS (Benjamin Coddington) [RHEL-53004]
  - sunrpc: fix NFSACL RPC retry on soft mount (Benjamin Coddington) [RHEL-53004]
  - nfs: keep server info for remounts (Benjamin Coddington) [RHEL-53004]
  - SUNRPC: Fix gss_free_in_token_pages() (Benjamin Coddington) [RHEL-53004]
  - sunrpc: removed redundant procp check (Benjamin Coddington) [RHEL-53004]
  - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52367] {CVE-2024-42225}
  - ice: xsk: fix txq interrupt mapping (Petr Oros) [RHEL-15670]
  - ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (Petr Oros) [RHEL-15670]
  - ice: improve updating ice_{t,r}x_ring::xsk_pool (Petr Oros) [RHEL-15670]
  - ice: toggle netif_carrier when setting up XSK pool (Petr Oros) [RHEL-15670]
  - ice: modify error handling when setting XSK pool in ndo_bpf (Petr Oros) [RHEL-15670]
  - ice: replace synchronize_rcu with synchronize_net (Petr Oros) [RHEL-15670]
  - ice: don't busy wait for Rx queue disable in ice_qp_dis() (Petr Oros) [RHEL-15670]
  - ice: respect netif readiness in AF_XDP ZC related ndo's (Petr Oros) [RHEL-15670]
  - wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband (CKI Backport Bot) [RHEL-51809] {CVE-2024-42125}
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (CKI Backport Bot) [RHEL-51767] {CVE-2024-42114}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51033] {CVE-2024-41041}
  - ACPI: fix double INT_SRC_OVR override (Desnes Nunes) [RHEL-45576]
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-46609]
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-46609]
  - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49371] {CVE-2024-41005}
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46479] {CVE-2024-39472}
  - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35048] {CVE-2024-27013}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-496.el9]
changelog:
  - mptcp: fix possible NULL dereferences (Antoine Tenart) [RHEL-48648]
  - af_packet: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - udp: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - tcp: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - net: raw: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - ping: use sk_skb_reason_drop to free rx packets (Antoine Tenart) [RHEL-48648]
  - net: introduce sk_skb_reason_drop function (Antoine Tenart) [RHEL-48648]
  - net: add rx_sk to trace_kfree_skb (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_check_req() (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: handle timewait cases in the receive path (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_rcv_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_ack() (Antoine Tenart) [RHEL-48648]
  - tcp: rstreason: fully support in tcp_rcv_synsent_state_process() (Antoine Tenart) [RHEL-48648]
  - rstreason: make it work in trace world (Antoine Tenart) [RHEL-48648]
  - mptcp: introducing a helper into active reset logic (Antoine Tenart) [RHEL-48648]
  - mptcp: support rstreason for passive reset (Antoine Tenart) [RHEL-48648]
  - tcp: support rstreason for passive reset (Antoine Tenart) [RHEL-48648]
  - rstreason: prepare for active reset (Antoine Tenart) [RHEL-48648]
  - rstreason: prepare for passive reset (Antoine Tenart) [RHEL-48648]
  - net: introduce rstreason to detect why the RST is sent (Antoine Tenart) [RHEL-48648]
  - trace: tcp: fully support trace_tcp_send_reset (Antoine Tenart) [RHEL-48648]
  - trace: adjust TP_STORE_ADDR_PORTS_SKB() parameters (Antoine Tenart) [RHEL-48648]
  - net: udp: add IP/port data to the tracepoint udp/udp_fail_queue_rcv_skb (Antoine Tenart) [RHEL-48648]
  - net: port TP_STORE_ADDR_PORTS_SKB macro to be tcp/udp independent (Antoine Tenart) [RHEL-48648]
  - trace: use TP_STORE_ADDRS() macro in inet_sock_set_state() (Antoine Tenart) [RHEL-48648]
  - trace: use TP_STORE_ADDRS() macro in inet_sk_error_report() (Antoine Tenart) [RHEL-48648]
  - trace: move to TP_STORE_ADDRS related macro to net_probe_common.h (Antoine Tenart) [RHEL-48648]
  - inet: preserve const qualifier in inet_sk() (Antoine Tenart) [RHEL-48648]
  - tcp: make dropreason in tcp_child_process() work (Antoine Tenart) [RHEL-48648]
  - tcp: make the dropreason really work when calling tcp_rcv_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: add dropreasons in tcp_rcv_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: add more specific possible drop reasons in tcp_rcv_synsent_state_process() (Antoine Tenart) [RHEL-48648]
  - tcp: introduce dropreasons in receive path (Antoine Tenart) [RHEL-48648]
  - tcp: use drop reasons in cookie check for ipv6 (Antoine Tenart) [RHEL-48648]
  - tcp: directly drop skb in cookie check for ipv6 (Antoine Tenart) [RHEL-48648]
  - tcp: use drop reasons in cookie check for ipv4 (Antoine Tenart) [RHEL-48648]
  - tcp: directly drop skb in cookie check for ipv4 (Antoine Tenart) [RHEL-48648]
  - tcp: add a dropreason definitions and prepare for cookie check (Antoine Tenart) [RHEL-48648]
  - tcp: Clean up goto labels in cookie_v[46]_check(). (Antoine Tenart) [RHEL-48648]
  - net: use %pS for kfree_skb tracing event location (Antoine Tenart) [RHEL-48648]
  - PCI: endpoint: remove bogus return in pci_epf_device_remove() (Brian Masney) [RHEL-47218]
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37006] {CVE-2024-35855}
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37010] {CVE-2024-35854}
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37014] {CVE-2024-35853}
  - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37486] {CVE-2024-36006}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-497.el9]
changelog:
  - Add amd-pstate-ut to the mod-internal.list (David Arcari) [RHEL-53955]
  - firmware: cs_dsp: Return error if block header overflows file (David Arcari) [RHEL-53650] {CVE-2024-42238}
  - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51138] {CVE-2024-41055}
  - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51138] {CVE-2024-41055}
  - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51046] {CVE-2024-41042}
  - netfilter: nf_tables: allow loop termination for pending fatal signal (Phil Sutter) [RHEL-51046]
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51522] {CVE-2024-42070}
  - netfilter: nft_inner: validate mandatory meta and payload (Phil Sutter) [RHEL-47486] {CVE-2024-39504}
  - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47616] {CVE-2024-39503}
  - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47616] {CVE-2024-39503}
  - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47616] {CVE-2024-39503}
  - qed/qede: Fix scheduling while atomic (John Meneghini) [RHEL-9751]
  - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (Pavel Reichl) [RHEL-51157] {CVE-2024-41057}
  - cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (Pavel Reichl) [RHEL-51163] {CVE-2024-41058}
  - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() (Pavel Reichl) [RHEL-51157 RHEL-51163]
  - nvme-fabrics: use reserved tag for reg read/write command (CKI Backport Bot) [RHEL-51357] {CVE-2024-41082}
  - nvmet: always initialize cqe.result (Maurizio Lombardi) [RHEL-51334 RHEL-51335] {CVE-2024-41079}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52019 RHEL-52020] {CVE-2024-42152}
  - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-52083] {CVE-2024-41076}
  - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50885] {CVE-2024-41013}
  - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50862] {CVE-2024-41014}
  - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48637] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48637]
  - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39906] {CVE-2024-36939}
  - mm/page_table_check: fix crash on ZONE_DEVICE (Chris von Recklinghausen) [RHEL-48052] {CVE-2024-40948}
  - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28110] {CVE-2021-47101}
  - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28110] {CVE-2021-47101}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-498.el9]
changelog:
  - xfs: allow SECURE namespace xattrs to use reserved block pool (Pavel Reichl) [RHEL-49806]
  - firmware: cs_dsp: Validate payload length before processing block (David Arcari) [RHEL-53640] {CVE-2024-42237}
  - selftests: netfilter: test nat source port clash resolution interaction with tcp early demux (Florian Westphal) [RHEL-6151]
  - netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash (Florian Westphal) [RHEL-6151]
  - xfs: allow symlinks with short remote targets (CKI Backport Bot) [RHEL-53164]
  - netfilter: Use flowlabel flow key when re-routing mangled packets (Florian Westphal) [RHEL-40213]
  - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51059] {CVE-2024-41044}
  - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47943 RHEL-47944] {CVE-2024-40931}
  - Bluetooth: ISO: Check socket flag instead of hcon (CKI Backport Bot) [RHEL-51982] {CVE-2024-42141}
  - bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX (CKI Backport Bot) [RHEL-51910] {CVE-2024-42132}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (CKI Backport Bot) [RHEL-51214] {CVE-2024-41063}
  - mm: vmalloc: check if a hash-index is in cpu_possible_mask (CKI Backport Bot) [RHEL-50955] {CVE-2024-41032}
  - Merge DRM changes from upstream v6.9..v6.9.11 (Dave Airlie) [RHEL-24103]
  - powerpc/mm: Fix false detection of read faults (Chris von Recklinghausen) [RHEL-50040]
  - powerpc/mm: Support execute-only memory on the Radix MMU (Chris von Recklinghausen) [RHEL-50040]
  - io_uring/sqpoll: work around a potential audit memory leak (Jeff Moyer) [RHEL-48561] {CVE-2024-41001}
  - io_uring/rsrc: don't lock while !TASK_RUNNING (Jeff Moyer) [RHEL-47830] {CVE-2024-40922}
  - io_uring/io-wq: Use set_bit() and test_bit() at worker->flags (Jeff Moyer) [RHEL-47505] {CVE-2024-39508}
  - kunit: kasan_test: fix backport error in kasan test (Nico Pache) [RHEL-39303]
  - redhat: add configs for new kunit tests (Nico Pache) [RHEL-39303]
  - kasan: use unchecked __memset internally (Nico Pache) [RHEL-39303]
  - kasan: unify printk prefixes (Nico Pache) [RHEL-39303]
  - net/handshake: Fix handshake_req_destroy_test1 (Nico Pache) [RHEL-39303]
  - kunit: bail out early in __kunit_test_suites_init() if there are no suites to test (Nico Pache) [RHEL-39303]
  - kunit: string-stream-test: use KUNIT_DEFINE_ACTION_WRAPPER (Nico Pache) [RHEL-39303]
  - kunit: test: Move fault tests behind KUNIT_FAULT_TEST Kconfig option (Nico Pache) [RHEL-39303]
  - kunit: unregister the device on error (Nico Pache) [RHEL-39303]
  - kunit: Fix race condition in try-catch completion (Nico Pache) [RHEL-39303]
  - kunit: Add tests for fault (Nico Pache) [RHEL-39303]
  - kunit: Print last test location on fault (Nico Pache) [RHEL-39303]
  - kunit: Handle test faults (Nico Pache) [RHEL-39303]
  - kunit: Fix timeout message (Nico Pache) [RHEL-39303]
  - kunit: Fix kthread reference (Nico Pache) [RHEL-39303]
  - kunit: Handle thread creation error (Nico Pache) [RHEL-39303]
  - lib: checksum: hide unused expected_csum_ipv6_magic[] (Nico Pache) [RHEL-39303]
  - Revert "kunit: memcpy: Split slow memcpy tests into MEMCPY_SLOW_KUNIT_TEST" (Nico Pache) [RHEL-39303]
  - kunit: Fix again checksum tests on big endian CPUs (Nico Pache) [RHEL-39303]
  - kunit: Annotate _MSG assertion variants with gnu printf specifiers (Nico Pache) [RHEL-39303]
  - rtc: test: Fix invalid format specifier. (Nico Pache) [RHEL-39303]
  - lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg (Nico Pache) [RHEL-39303]
  - lib/cmdline: Fix an invalid format specifier in an assertion msg (Nico Pache) [RHEL-39303]
  - kunit: test: Log the correct filter string in executor_test (Nico Pache) [RHEL-39303]
  - kunit: make kunit_bus_type const (Nico Pache) [RHEL-39303]
  - kunit: Mark filter* params as rw (Nico Pache) [RHEL-39303]
  - kunit: tool: Print UML command (Nico Pache) [RHEL-39303]
  - time/kunit: Use correct format specifier (Nico Pache) [RHEL-39303]
  - Documentation: KUnit: Update the instructions on how to test static functions (Nico Pache) [RHEL-39303]
  - kunit: run test suites only after module initialization completes (Nico Pache) [RHEL-39303]
  - MAINTAINERS: kunit: Add Rae Moar as a reviewer (Nico Pache) [RHEL-39303]
  - lib: checksum: Fix build with CONFIG_NET=n (Nico Pache) [RHEL-39303]
  - kunit: Add tests for csum_ipv6_magic and ip_fast_csum (Nico Pache) [RHEL-39303]
  - Documentation: kunit: Add clang UML coverage example (Nico Pache) [RHEL-39303]
  - kunit: Protect string comparisons against NULL (Nico Pache) [RHEL-39303]
  - kunit: Add example of kunit_activate_static_stub() with pointer-to-function (Nico Pache) [RHEL-39303]
  - kunit: Allow passing function pointer to kunit_activate_static_stub() (Nico Pache) [RHEL-39303]
  - kunit: Fix NULL-dereference in kunit_init_suite() if suite->log is NULL (Nico Pache) [RHEL-39303]
  - kunit: Reset test->priv after each param iteration (Nico Pache) [RHEL-39303]
  - kunit: Add example for using test->priv (Nico Pache) [RHEL-39303]
  - Documentation: Add debugfs docs with run after boot (Nico Pache) [RHEL-39303]
  - kunit: add ability to run tests after boot using debugfs (Nico Pache) [RHEL-39303]
  - kunit: add is_init test attribute (Nico Pache) [RHEL-39303]
  - kunit: add example suite to test init suites (Nico Pache) [RHEL-39303]
  - kunit: add KUNIT_INIT_TABLE to init linker section (Nico Pache) [RHEL-39303]
  - kunit: move KUNIT_TABLE out of INIT_DATA (Nico Pache) [RHEL-39303]
  - kunit: tool: add test for parsing attributes (Nico Pache) [RHEL-39303]
  - kunit: tool: fix parsing of test attributes (Nico Pache) [RHEL-39303]
  - kunit: debugfs: Handle errors from alloc_string_stream() (Nico Pache) [RHEL-39303]
  - kunit: debugfs: Fix unchecked dereference in debugfs_print_results() (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Allow ERR_PTR to be passed to string_stream_destroy() (Nico Pache) [RHEL-39303]
  - kunit: string-stream-test: Avoid cast warning when testing gfp_t flags (Nico Pache) [RHEL-39303]
  - mptcp: fill in missing MODULE_DESCRIPTION() (Nico Pache) [RHEL-39303]
  - kunit: test: Avoid cast warning when adding kfree() as an action (Nico Pache) [RHEL-39303]
  - kunit: Reset suite counter right before running tests (Nico Pache) [RHEL-39303]
  - kunit: Warn if tests are slow (Nico Pache) [RHEL-39303]
  - kasan: fix and update KUNIT_EXPECT_KASAN_FAIL comment (Nico Pache) [RHEL-39303]
  - x86/asm: Fix build of UML with KASAN (Nico Pache) [RHEL-39303]
  - kunit: Reset test status on each param iteration (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Test performance of string_stream (Nico Pache) [RHEL-39303]
  - kunit: Use string_stream for test log (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Add tests for freeing resource-managed string_stream (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Decouple string_stream from kunit (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Add kunit_alloc_string_stream() (Nico Pache) [RHEL-39303]
  - kunit: Don't use a managed alloc in is_literal() (Nico Pache) [RHEL-39303]
  - kunit: string-stream-test: Add cases for string_stream newline appending (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Add option to make all lines end with newline (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Improve testing of string_stream (Nico Pache) [RHEL-39303]
  - kunit: string-stream: Don't create a fragment for empty strings (Nico Pache) [RHEL-39303]
  - kunit: Fix wild-memory-access bug in kunit_free_suite_set() (Nico Pache) [RHEL-39303]
  - kunit: tool: Add command line interface to filter and report attributes (Nico Pache) [RHEL-39303]
  - kunit: tool: Enable CONFIG_FORTIFY_SOURCE under UML (Nico Pache) [RHEL-39303]
  - kunit: tool: undo type subscripts for subprocess.Popen (Nico Pache) [RHEL-39303]
  - kunit: tool: Add support for SH under QEMU (Nico Pache) [RHEL-39303]
  - kunit: tool: Add support for overriding the QEMU serial port (Nico Pache) [RHEL-39303]
  - kunit: tool: fix pre-existing `mypy --strict` errors and update run_checks.py (Nico Pache) [RHEL-39303]
  - kunit: tool: remove unused imports and variables (Nico Pache) [RHEL-39303]
  - kunit: tool: add subscripts for type annotations where appropriate (Nico Pache) [RHEL-39303]
  - kunit: tool: Add support for m68k under QEMU (Nico Pache) [RHEL-39303]
  - kunit: kunit.py extract handlers (Nico Pache) [RHEL-39303]
  - kunit: tool: remove redundant file.close() call in unit test (Nico Pache) [RHEL-39303]
  - kunit: tool: unit tests all check parser errors, standardize formatting a bit (Nico Pache) [RHEL-39303]
  - kunit: tool: make TestCounts a dataclass (Nico Pache) [RHEL-39303]
  - kunit: tool: make parser preserve whitespace when printing test log (Nico Pache) [RHEL-39303]
  - kunit: tool: Don't download risc-v opensbi firmware with wget (Nico Pache) [RHEL-39303]
  - kunit: tool: rename all_test_uml.config, use it for --alltests (Nico Pache) [RHEL-39303]
  - Documentation: KUnit: Fix non-uml anchor (Nico Pache) [RHEL-39303]
  - Documentation: Kunit: Fix inconsistent titles (Nico Pache) [RHEL-39303]
  - Documentation: kunit: fix trivial typo (Nico Pache) [RHEL-39303]
  - kunit: tool: make --raw_output=kunit (aka --raw_output) preserve leading spaces (Nico Pache) [RHEL-39303]
  - Documentation: Kunit: Add ref for other kinds of tests (Nico Pache) [RHEL-39303]
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (CKI Backport Bot) [RHEL-43727] {CVE-2024-36979}
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (CKI Backport Bot) [RHEL-43727] {CVE-2024-36979}
  - net: bridge: mst: fix vlan use-after-free (CKI Backport Bot) [RHEL-43727] {CVE-2024-36979}
  - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44114] {CVE-2024-38579}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-499.el9]
changelog:
  - ARM: dts: renesas: Improve TMU interrupt descriptions (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add interrupt-names to arch timer nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: s4sk: Add aliases for I2C buses (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add Renesas R8A779F4 SoC support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: s4sk: Fix ethernet0 alias (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-ethernet: Enable Ethernet Switch and SERDES (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: rzg2: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: rcar-gen3: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - ARM: dts: rzg1: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - ARM: dts: rcar-gen2: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add aliases for I2C buses (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Improve TMU interrupt descriptions (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add R-Car S4 Starter Kit support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: spider: Enable PCIe Host ch0 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add PCIe Host and Endpoint nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add GP LEDs (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add INTC-EX node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Revise renesas,ipmmu-main (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Use proper labels for thermal zones (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Drop specifying the GIC_CPU_MASK_SIMPLE() for GICv3 systems (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add iommus to MMC node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable UFS device (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CA55 operating points (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add Ethernet Switch and SERDES nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Switch from SCIF3 to HSCIF0 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Fix SCIF "brg_int" clock (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Fix HSCIF "brg_int" clock (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add missing bootargs (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider: Move aliases and chosen (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add MSIOF nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add TMU nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CMT support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable eMMC0 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add SDHI0 support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Fix scif0/scif3 sort order (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable SCIF0 on second connector (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add SCIF nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add HSCIF nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add DMA properties to SCIF3 (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CPU core clocks (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add CPUIdle support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add secondary CA55 CPU cores (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add L3 cache controller (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add UFS node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add iommus to DMAC nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add IPMMU nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add sys-dmac nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add thermal support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add GPIO nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: rcar-gen4: Add interrupt properties to watchdog nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider: Add Ethernet sub-board (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Add I2C4 and EEPROMs (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add I2C nodes (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider: Complete SCIF3 description (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add pinctrl device node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: spider-cpu: Enable watchdog timer (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: r8a779f0: Add RWDT node (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add Renesas R8A779F0 SoC support (Steve Dunnagan) [RHEL-53987]
  - arm64: dts: renesas: Add Renesas Spider boards support (Steve Dunnagan) [RHEL-53987]
  - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51020] {CVE-2024-41040}
  - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44201 RHEL-44202] {CVE-2024-38559}
  - netfilter: br_netfilter: remove WARN traps (Florian Westphal) [RHEL-36872]
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets (Florian Westphal) [RHEL-36872]
  - netfilter: bridge: confirm multicast packets before passing them up the stack (Florian Westphal) [RHEL-36872] {CVE-2024-27415}
  - netfilter: nf_conntrack_bridge: initialize err to 0 (Florian Westphal) [RHEL-36872]
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: E-switch, Create ingress ACL when needed (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Add check for srq max_sge attribute (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Remove extra unlock on error path (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Always stop health timer during driver removal (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Fix UDP GSO for encapsulated packets (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Benjamin Poirier) [RHEL-45365]
  - net/mlx5e: Fix IPsec tunnel mode offload feature check (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Lag, do bond only if slaves agree on roce state (Benjamin Poirier) [RHEL-45365]
  - net/mlx5: Reload only IB representors upon lag disable/enable (Benjamin Poirier) [RHEL-45365]
  - IB/mlx5: Use __iowrite64_copy() for write combining stores (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Adding remote atomic access flag to updatable flags (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Change check for cacheable mkeys (Benjamin Poirier) [RHEL-45365]
  - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Benjamin Poirier) [RHEL-45365]
  - mlx5: stop warning for 64KB pages (Benjamin Poirier) [RHEL-45365]
  - mlx5: avoid truncating error message (Benjamin Poirier) [RHEL-45365]
  - tools/power/x86/intel-speed-select: v1.19 release (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Display CPU as None for -1 (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: SST BF/TF support per level (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Increase number of CPUs displayed (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Present all TRL levels for turbo-freq (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Fix display for unsupported levels (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Support multiple dies (David Arcari) [RHEL-20031]
  - tools/power/x86/intel-speed-select: Increase die count (David Arcari) [RHEL-20031]
  - platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove() (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Support SST-BF and SST-TF per level (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Add missing MODULE_DESCRIPTION (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Add dev_fmt (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Support partitioned systems (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Shorten the assignments for power_domain_info (David Arcari) [RHEL-20031]
  - platform/x86: ISST: Use local variable for auxdev->dev (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Add additional TPMI header fields (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Align comments in kernel-doc (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Check major version change for TPMI Information (David Arcari) [RHEL-20031]
  - platform/x86/intel/tpmi: Handle error from tpmi_process_info() (David Arcari) [RHEL-20031]
  - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-9096]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-500.el9]
changelog:
  - mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines (Chris von Recklinghausen) [RHEL-54027] {CVE-2024-42258}
  - rtla/osnoise: set the default threshold to 1us (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/osnoise: Better report when histogram is empty (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/osnoise: Use pretty formatting only on interactive tty (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla: Fix -t\--trace[=file] (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Fix histogram report when a cpu count is 0 (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla: Add the --warm-up option (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Add a summary for hist mode (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Add a summary for top mode (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Use pretty formatting only on interactive tty (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/auto-analysis: Replace \t with spaces (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla/timerlat: Simplify "no value" printing on top (Luis Claudio R. Goncalves) [RHEL-50869]
  - tools/rtla: Add -U/--user-load option to timerlat (Luis Claudio R. Goncalves) [RHEL-50869]
  - Documentation: Add tools/rtla timerlat -u option documentation (Luis Claudio R. Goncalves) [RHEL-50869]
  - rtla: Make doc build optional (Luis Claudio R. Goncalves) [RHEL-50869]
  - kernfs: change kernfs_rename_lock into a read-write lock (Ian Kent) [RHEL-52956]
  - kernfs: Separate kernfs_pr_cont_buf and rename_lock (Ian Kent) [RHEL-52956]
  - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [RHEL-52956]
  - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info (Ian Kent) [RHEL-52956]
  - kernfs: Introduce separate rwsem to protect inode attributes (Ian Kent) [RHEL-52956]
  - perf/x86/intel: Support Perfmon MSRs aliasing (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Support PERFEVTSEL extension (Michael Petlan) [RHEL-20059]
  - perf/x86: Add config_mask to represent EVENTSEL bitmask (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Support new data source for Lunar Lake (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Rename model-specific pebs_latency_data functions (Michael Petlan) [RHEL-20059]
  - perf/x86: Add Lunar Lake and Arrow Lake support (Michael Petlan) [RHEL-20059]
  - perf/x86: Support counter mask (Michael Petlan) [RHEL-20059]
  - perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Support the PEBS event mask (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/cstate: Add Lunarlake support (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/cstate: Add Arrowlake support (Michael Petlan) [RHEL-20059]
  - perf/x86/intel: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/msr: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/uncore: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/pt: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/lbr: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - perf/x86/intel/cstate: Switch to new Intel CPU model defines (Michael Petlan) [RHEL-20059]
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Michael Petlan) [RHEL-20059]
  - x86/cpu/vfm: Add new macros to work with (vendor/family/model) values (Michael Petlan) [RHEL-20059]
  - x86/cpu/vfm: Add/initialize x86_vfm field to struct cpuinfo_x86 (Michael Petlan) [RHEL-20059]
  - intel_th: pci: Add Lunar Lake support (Michael Petlan) [RHEL-20057]
  - iommufd/iova_bitmap: Remove iterator logic (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Dynamic pinning on iova_bitmap_set() (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Consolidate iova_bitmap_set exit conditionals (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Move initial pinning to iova_bitmap_for_each() (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Cache mapped length in iova_bitmap_map struct (Jerry Snitselaar) [RHEL-40162]
  - iommufd/iova_bitmap: Check iova_bitmap_done() after set ahead (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Do not record head iova to better match iommu drivers (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Fix tests to use MOCK_PAGE_SIZE based buffer sizes (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Add tests for <= u8 bitmap sizes (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Fix iommufd_test_dirty() to handle <u8 bitmaps (Jerry Snitselaar) [RHEL-40162]
  - iommufd/selftest: Fix dirty bitmap tests with u8 bitmaps (Jerry Snitselaar) [RHEL-40162]
  - dax/bus.c: use the right locking mode (read vs write) in size_show (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: don't use down_write_killable for non-user processes (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: fix locking for unregister_dax_dev / unregister_dax_mapping paths (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: replace WARN_ON_ONCE() with lockdep asserts (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: fix memmap_on_memory sysfs value retrieval (Jeff Moyer) [RHEL-23824]
  - nvdimm/pmem: fix leak on dax_add_host() failure (Jeff Moyer) [RHEL-23824]
  - dax: add a sysfs knob to control memmap_on_memory behavior (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: export mhp_supports_memmap_on_memory() (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: split memmap_on_memory requests across memblocks (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: replace an open-coded kmemdup() in add_memory_resource() (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: embed vmem_altmap details in memory block (Jeff Moyer) [RHEL-23824]
  - powerpc/book3s64/memhotplug: enable memmap on memory for radix (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: support memmap_on_memory when memmap is not aligned to pageblocks (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: allow architecture to override memmap on memory support check (Jeff Moyer) [RHEL-23824]
  - mm/memory_hotplug: simplify ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE kconfig (Jeff Moyer) [RHEL-23824]
  - Documentatiion/ABI: add ABI documentation for sys-bus-dax (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: replace several sprintf() with sysfs_emit() (Jeff Moyer) [RHEL-23824]
  - dax/bus.c: replace driver-core lock usage by a local rwsem (Jeff Moyer) [RHEL-23824]
  - device-dax: make dax_bus_type const (Jeff Moyer) [RHEL-23824]
  - nvdimm: make nvdimm_bus_type const (Jeff Moyer) [RHEL-23824]
  - libnvdimm: Fix ACPI_NFIT in BLK_DEV_PMEM help (Jeff Moyer) [RHEL-23824]
  - ACPI: NFIT: Switch to use acpi_evaluate_dsm_typed() (Jeff Moyer) [RHEL-23824]
  - tools/testing/nvdimm: Disable "missing prototypes / declarations" warnings (Jeff Moyer) [RHEL-23824]
  - acpi/nfit: Use sysfs_emit() for all attributes (Jeff Moyer) [RHEL-23824]
  - nvdimm/namespace: fix kernel-doc for function params (Jeff Moyer) [RHEL-23824]
  - nvdimm/dimm_devs: fix kernel-doc for function params (Jeff Moyer) [RHEL-23824]
  - nvdimm/btt: fix btt_blk_cleanup() kernel-doc (Jeff Moyer) [RHEL-23824]
  - nvdimm-btt: simplify code with the scope based resource management (Jeff Moyer) [RHEL-23824]
  - nvdimm: Remove usage of the deprecated ida_simple_xx() API (Jeff Moyer) [RHEL-23824]
  - ACPI: NFIT: Use cleanup.h helpers instead of devm_*() (Jeff Moyer) [RHEL-23824]
  - tools/testing/nvdimm: Add compile-test coverage for ndtest (Jeff Moyer) [RHEL-23824]
  - dax/kmem: allow kmem to add memory with memmap_on_memory (Jeff Moyer) [RHEL-23824]
  - nvdimm/btt: replace deprecated strncpy with strscpy (Jeff Moyer) [RHEL-23824]
  - ndtest: fix typo class_regster -> class_register (Jeff Moyer) [RHEL-23824]
  - fs : Fix warning using plain integer as NULL (Jeff Moyer) [RHEL-23824]
  - libnvdimm: remove kernel-doc warnings: (Jeff Moyer) [RHEL-23824]
  - testing: nvdimm: make struct class structures constant (Jeff Moyer) [RHEL-23824]
  - libnvdimm: Annotate struct nd_region with __counted_by (Jeff Moyer) [RHEL-23824]
  - libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (Jeff Moyer) [RHEL-23824]
  - dax: refactor deprecated strncpy (Jeff Moyer) [RHEL-23824]
  - nvdimm: Fix dereference after free in register_nvdimm_pmu() (Jeff Moyer) [RHEL-23824]
  - nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() (Jeff Moyer) [RHEL-23824]
  - nvdimm/pfn_dev: Avoid unnecessary endian conversion (Jeff Moyer) [RHEL-23824]
  - nvdimm/pfn_dev: Prevent the creation of zero-sized namespaces (Jeff Moyer) [RHEL-23824]
  - nvdimm: Explicitly include correct DT includes (Jeff Moyer) [RHEL-23824]
  - nvdimm: Use kstrtobool() instead of strtobool() (Jeff Moyer) [RHEL-23824]
  - dax: enable dax fault handler to report VM_FAULT_HWPOISON (Jeff Moyer) [RHEL-23824]
  - nvdimm: make security_show static (Jeff Moyer) [RHEL-23824]
  - nvdimm: make nd_class variable static (Jeff Moyer) [RHEL-23824]
  - dax/kmem: Pass valid argument to memory_group_register_static (Jeff Moyer) [RHEL-23824]
  - fsdax: remove redundant variable 'error' (Jeff Moyer) [RHEL-23824]
  - dax: Cleanup extra dax_region references (Jeff Moyer) [RHEL-23824]
  - dax: Introduce alloc_dev_dax_id() (Jeff Moyer) [RHEL-23824]
  - dax: Use device_unregister() in unregister_dax_mapping() (Jeff Moyer) [RHEL-23824]
  - dax: Fix dax_mapping_release() use after free (Jeff Moyer) [RHEL-23824]
  - tools/testing/nvdimm: Drop empty platform remove function (Jeff Moyer) [RHEL-23824]
  - dax/kmem: Fix leak of memory-hotplug resources (Jeff Moyer) [RHEL-23824]
  - dax: super.c: fix kernel-doc bad line warning (Jeff Moyer) [RHEL-23824]
  - nvdimm/region: Move cache management to the region driver (Jeff Moyer) [RHEL-23824]
  - ACPI: HMAT: Release platform device in case of platform_device_add_data() fails (Jeff Moyer) [RHEL-23824]
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Mark Salter) [RHEL-46931] {CVE-2024-39488}
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Kamal Heib) [RHEL-44248] {CVE-2024-38544}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-501.el9]
changelog:
  - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53662 RHEL-53665] {CVE-2024-42240}
  - redhat: Fix the ownership of /lib/modules/<kversion> directory (Vitaly Kuznetsov) [RHEL-21034]
  - move ownership of /lib/modules/<ver>/ to kernel-core (Thorsten Leemhuis) [RHEL-21034]
  - KVM: guest_memfd: let kvm_gmem_populate() operate only on private gfns (Paolo Bonzini) [RHEL-32435]
  - KVM: extend kvm_range_has_memory_attributes() to check subset of attributes (Paolo Bonzini) [RHEL-32435]
  - KVM: cleanup and add shortcuts to kvm_range_has_memory_attributes() (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: move check for already-populated page to common code (Paolo Bonzini) [RHEL-32435]
  - KVM: remove kvm_arch_gmem_prepare_needed() (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: make kvm_gmem_prepare_folio() operate on a single struct kvm (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: delay kvm_gmem_prepare_folio() until the memory is passed to the guest (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: return locked folio from __kvm_gmem_get_pfn (Paolo Bonzini) [RHEL-32435]
  - KVM: rename CONFIG_HAVE_KVM_GMEM_* to CONFIG_HAVE_KVM_ARCH_GMEM_* (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: do not go through struct page (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: delay folio_mark_uptodate() until after successful preparation (Paolo Bonzini) [RHEL-32435]
  - KVM: guest_memfd: return folio from __kvm_gmem_get_pfn() (Paolo Bonzini) [RHEL-32435]
  - KVM: x86: Eliminate log spam from limited APIC timer periods (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: Use sev_es_host_save_area() helper when initializing tsc_aux (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: Force sev_es_host_save_area() to be inlined (for noinstr usage) (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: Consider NUMA affinity when allocating per-CPU save_area (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: not account memory allocation for per-CPU svm_data (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: remove useless input parameter in snp_safe_alloc_page (Paolo Bonzini) [RHEL-32435]
  - KVM: Validate hva in kvm_gpc_activate_hva() to fix __kvm_gpc_refresh() WARN (Paolo Bonzini) [RHEL-32435]
  - KVM: interrupt kvm_gmem_populate() on signals (Paolo Bonzini) [RHEL-32435]
  - KVM: Stop processing *all* memslots when "null" mmu_notifier handler is found (Paolo Bonzini) [RHEL-32435]
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Paolo Bonzini) [RHEL-32435]
  - KVM: selftests: x86: Prioritize getting max_gfn from GuestPhysBits (Paolo Bonzini) [RHEL-32435]
  - KVM: selftests: Fix shift of 32 bit unsigned int more than 32 bits (Paolo Bonzini) [RHEL-32435]
  - KVM: Discard zero mask with function kvm_dirty_ring_reset (Paolo Bonzini) [RHEL-32435]
  - virt: guest_memfd: fix reference leak on hwpoisoned page (Paolo Bonzini) [RHEL-32435]
  - kvm: do not account temporary allocations to kmem (Paolo Bonzini) [RHEL-32435]
  - KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes (Paolo Bonzini) [RHEL-32435]
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (Paolo Bonzini) [RHEL-32435]
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Myron Stowe) [RHEL-51754] {CVE-2024-42110}
  - Disable NVGRACE_GPU_VFIO_PCI CONFIG for now (Donald Dutile) [RHEL-36542]
  - vfio/nvgrace-gpu: Convey kvm to map device memory region as noncached (Donald Dutile) [RHEL-36544]
  - vfio: Convey kvm that the vfio-pci device is wc safe (Donald Dutile) [RHEL-36543]
  - vfio/nvgrace-gpu: Add vfio pci variant module for grace hopper (Donald Dutile) [RHEL-36542]
  - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48649]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for Apacer AS340 (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for AMD Radeon S3 SSD (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for Crucial CT240BX500SSD1 (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Do not apply Intel PCS quirk on Intel Alder Lake (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Allow command duration limits detection for ACS-4 drives (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Add mask_port_map module parameter (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-sata: Factor out NCQ Priority configuration helpers (Ewan D. Milne) [RHEL-23829]
  - ahci: asm1064: asm1166: don't limit reported ports (Ewan D. Milne) [RHEL-23829]
  - ahci: print the number of implemented ports (Ewan D. Milne) [RHEL-23829]
  - ahci: asm1064: correct count of reported ports (Ewan D. Milne) [RHEL-23829]
  - ahci: rename board_ahci_nomsi (Ewan D. Milne) [RHEL-23829]
  - ahci: drop unused board_ahci_noncq (Ewan D. Milne) [RHEL-23829]
  - ahci: clean up ahci_broken_devslp quirk (Ewan D. Milne) [RHEL-23829]
  - ahci: rename board_ahci_nosntf (Ewan D. Milne) [RHEL-23829]
  - ahci: clean up intel_pcs_quirk (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Drop low power policy board type (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: do not enable LPM on external ports (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: drop hpriv param from ahci_update_initial_lpm_policy() (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: a hotplug capable port is an external port (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: move marking of external port earlier (Ewan D. Milne) [RHEL-23829]
  - ahci: Extend ASM1061 43-bit DMA address quirk to other ASM106x parts (Ewan D. Milne) [RHEL-23829]
  - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers (Ewan D. Milne) [RHEL-23829]
  - ahci: asm1166: correct count of reported ports (Ewan D. Milne) [RHEL-23829]
  - ata: libata-sata: improve sysfs description for ATA_LPM_UNKNOWN (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Fix system start for ATA devices (Ewan D. Milne) [RHEL-23829]
  - scsi: Change SCSI device boolean fields to single bit flags (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Introduce manage_shutdown device flag (Ewan D. Milne) [RHEL-23829]
  - ata: libata-eh: Spinup disk on resume after revalidation (Ewan D. Milne) [RHEL-23829]
  - ata: xgene: Use of_device_get_match_data() (Ewan D. Milne) [RHEL-23829]
  - scsi: Remove scsi device no_start_on_resume flag (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Do not issue commands to suspended disks on shutdown (Ewan D. Milne) [RHEL-23829]
  - ata: libata: Annotate struct ata_cpr_log with __counted_by (Ewan D. Milne) [RHEL-23829]
  - ata: libata-scsi: Disable scsi device manage_system_start_stop (Ewan D. Milne) [RHEL-23829]
  - scsi: sd: Differentiate system and runtime start/stop management (Ewan D. Milne) [RHEL-23829]
  - ata: libata-scsi: link ata port and scsi device (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: Fix port and device removal (Ewan D. Milne) [RHEL-23829]
  - ata: libata-sata: increase PMP SRST timeout to 10s (Ewan D. Milne) [RHEL-23829]
  - scsi: core: ata: Do no try to probe for CDL on old drives (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: fetch sense data for successful commands iff CDL enabled (Ewan D. Milne) [RHEL-23829]
  - ata: ahci_xgene: fix parameter types of xgene_ahci_poll_reg_val() (Ewan D. Milne) [RHEL-23829]
  - ata: libata: fix parameter type of ata_deadline() (Ewan D. Milne) [RHEL-23829]
  - ata,scsi: do not issue START STOP UNIT on resume (Ewan D. Milne) [RHEL-23829]
  - ata: libata-core: fix when to fetch sense data for successful commands (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-scsi: Fix ata_msense_control kdoc comment (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Handle completion of CDL commands using policy 0xD (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Set read/write commands CDL index (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Add ATA feature control sub-page translation (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-scsi: Add support for CDL pages mode sense (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata-scsi: Handle CDL bits in ata_scsiop_maint_in() (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Detect support for command duration limits (Ewan D. Milne) [RHEL-23829]
  - scsi: ata: libata: Change ata_eh_request_sense() to not set CHECK_CONDITION (Ewan D. Milne) [RHEL-23829]
  - ata: Use of_property_present() for testing DT property presence (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Rename CONFIG_SATA_LPM_POLICY configuration item back (Ewan D. Milne) [RHEL-23829]
  - ata: ahci: Rename CONFIG_SATA_LPM_MOBILE_POLICY configuration item (Ewan D. Milne) [RHEL-23829]
  - virt: efi_secret: Convert to platform remove callback returning void (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Add get_event_log() support for CC platforms (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Measure into CC protocol if TCG2 protocol is absent (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Add Confidential Computing (CC) measurement typedefs (Lenny Szubowicz) [RHEL-30322]
  - efi/tpm: Use symbolic GUID name from spec for final events table (Lenny Szubowicz) [RHEL-30322]
  - efi/libstub: Use TPM event typedefs from the TCG PC Client spec (Lenny Szubowicz) [RHEL-30322]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-502.el9]
changelog:
  - net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: fix error array size (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Assign configured channel value to EXTTS event (Andrew Halaney) [RHEL-6297]
  - net: stmmac: No need to calculate speed divider when offload is disabled (Andrew Halaney) [RHEL-6297]
  - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Configure host DMA width (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move the EST structure to struct stmmac_priv (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move the EST lock to struct stmmac_priv (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add support for RZ/N1 GMAC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-socfpga: use pcs_init/pcs_exit (Andrew Halaney) [RHEL-6297]
  - net: stmmac: introduce pcs_init/pcs_exit stmmac operations (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make stmmac_xpcs_setup() generic to all PCS devices (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add dedicated XPCS cleanup method (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-ipq806x: account for rgmii-txid/rxid/id phy-mode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Rename phylink_get_caps() callback to update_caps() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix IP-cores specific MAC capabilities (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix max-speed being ignored on queue re-init (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Apply half-duplex-less constraint for DW QoS Eth only (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc_core: Add GMAC mmc tx/rx missing statistics (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc_core: Add GMAC LPI statistics (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix rx queue priority assignment (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Support a generic PCS field in mac_device_info (Andrew Halaney) [RHEL-6297]
  - net: stmmac: don't rely on lynx_pcs presence to check for a PHY (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-rk: Remove unused of_gpio.h (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix typo in comment (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Update link clock rate only for RGMII (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Complete meta data only when enabled (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc_core: Drop interrupt registers from stats (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Add support for 2.5G SGMII (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix EST offset for dwmac 5.10 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix incorrect dereference in interrupt handlers (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Simplify mtl IRQ status checking (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: use #define for string constants (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add driver support for common safety IRQ (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Enable TBS on all queues but 0 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove eee_enabled/eee_active in stmmac_ethtool_op_get_eee() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: protect updates of 64-bit statistics counters (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Report taprio offload status (Andrew Halaney) [RHEL-6297]
  - net: stmmac: est: Per Tx-queue error count for HLBF (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Offload queueMaxSDU from tc-taprio (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-starfive: Add support for JH7100 SoC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-imx: set TSO/TBS TX queues default settings (Andrew Halaney) [RHEL-6297]
  - net: stmmac: do not clear TBS enable bit on link up/down (Andrew Halaney) [RHEL-6297]
  - net: fill in MODULE_DESCRIPTION()s for dwmac-socfpga (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Wait a bit for the reset to take effect (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Prevent DSA tags from breaking COE (Andrew Halaney) [RHEL-6297]
  - net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls (Andrew Halaney) [RHEL-6297]
  - Revert "net: stmmac: Enable Per DMA Channel interrupt" (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Use interrupt mode INTM=1 for per channel irq (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add support for TX/RX channel interrupt (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make MSI interrupt routine generic (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix ethtool per-queue statistics (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: drop useless check for compatible fallback (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: Make sure MDIO is initialized before use (Andrew Halaney) [RHEL-6297]
  - net: stmmac: mmc: Support more counters for XGMAC Core (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add support for EST cycle-time-extension (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Refactor EST implementation (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: EST interrupts handling (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix FPE events losing (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add Tx HWTS support to XDP ZC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: Disable FPE MMC interrupts (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add support for HW-accelerated VLAN stripping (Andrew Halaney) [RHEL-6297]
  - net: stmmac: reduce dma ring display code duplication (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove extra newline from descriptors display (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: Add architecture dependency (Andrew Halaney) [RHEL-6297]
  - net: stmmac: avoid rx queue overrun (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix rx budget limit check (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: update MAC capabilities when tx queues are updated (Andrew Halaney) [RHEL-6297]
  - net: stmmac: increase TX coalesce timer to 5ms (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move TX timer arm after DMA enable (Andrew Halaney) [RHEL-6297]
  - net: stmmac: improve TX timer arm logic (Andrew Halaney) [RHEL-6297]
  - net: introduce napi_is_scheduled helper (Andrew Halaney) [RHEL-6297]
  - net: stmmac: do not silently change auxiliary snapshot capture channel (Andrew Halaney) [RHEL-6297]
  - net: stmmac: ptp: stmmac_enable(): move change of plat->flags into mutex (Andrew Halaney) [RHEL-6297]
  - net: stmmac: intel: remove unnecessary field struct plat_stmmacenet_data::ext_snapshot_num (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use correct PPS capture input index (Andrew Halaney) [RHEL-6297]
  - net: stmmac: simplify debug message on stmmac_enable() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Remove redundant checking for rx_coalesce_usecs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix typo in comment (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: refactor clock config (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove unneeded stmmac_poll_controller (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: fix resume on STM32 MCU (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: fix the incorrect parameter (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix incorrect rxq|txq_stats reference (Andrew Halaney) [RHEL-6297]
  - net: stmmac: make stmmac_{probe|remove}_config_dt static (Andrew Halaney) [RHEL-6297]
  - net: stmmac: rename stmmac_pltfr_remove_no_dt to stmmac_pltfr_remove (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-visconti: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-tegra: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sunxi: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sun8i: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sti: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-starfive: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-socfpga: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-rk: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson8b: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-mediatek: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-lpc18xx: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-ipq806x: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-intel-plat: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-ingenic: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-imx: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use devm_stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-dwc-qos-eth: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-anarion: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Tx coe sw fallback (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add glue layer for Loongson-1 SoC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix handling of zero coalescing tx-usecs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: failure to probe without MAC interface specified (Andrew Halaney) [RHEL-6297]
  - net: stmmac: clarify difference between "interface" and "phy_interface" (Andrew Halaney) [RHEL-6297]
  - net: stmmac: convert half-duplex support to positive logic (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move priv->phylink_config.mac_managed_pm (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move xgmac specific phylink caps to dwxgmac2 core (Andrew Halaney) [RHEL-6297]
  - net: stmmac: move gmac4 specific phylink capabilities to gmac4 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: provide stmmac_mac_phylink_get_caps() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use phylink_limit_mac_speed() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use "mdio_bus_data" local variable (Andrew Halaney) [RHEL-6297]
  - net: stmmac: clean up passing fwnode to phylink (Andrew Halaney) [RHEL-6297]
  - net: stmmac: convert plat->phylink_node to fwnode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Check more MAC HW features for XGMAC Core 3.20 (Andrew Halaney) [RHEL-6297]
  - stmmac: intel: Enable correction of MAC propagation delay (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: show more MAC HW features in debugfs (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: RX queue routing configuration (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-oxnas: remove obsolete dwmac glue driver (Andrew Halaney) [RHEL-6297]
  - net: stmmac: XGMAC support for mdio C22 addr > 3 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Apply redundant write work around on 4.xx too (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use per-queue 64 bit statistics where necessary (Andrew Halaney) [RHEL-6297]
  - net: stmmac: don't clear network statistics in .ndo_open() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: Fix L3L4 filter count (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Log more errors in probe (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Use dev_err_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: Use of_get_phy_mode() over device_get_phy_mode() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qcom-ethqos: use devm_stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide devm_stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-qco-ethqos: use devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_remove_no_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use stmmac_pltfr_exit() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_exit() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-generic: use stmmac_pltfr_init() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: provide stmmac_pltfr_init() (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmicro: stmmac: fix possible memory leak in __stmmac_open (Andrew Halaney) [RHEL-6297]
  - net: dwmac_socfpga: initialize local data for mdio regmap configuration (Andrew Halaney) [RHEL-6297]
  - net: stmmac: make the pcs_lynx cleanup sequence specific to dwmac_socfpga (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sogfpga: use the lynx pcs driver (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use xpcs_create_mdiodev() (Andrew Halaney) [RHEL-6297]
  - net: pcs: xpcs: add xpcs_create_mdiodev() (Andrew Halaney) [RHEL-6297]
  - net: mdio: add mdio_device_get() and mdio_device_put() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: xgmac: add ethtool per-queue irq statistic support (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-tegra: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sun8i: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-stm32: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-sti: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-rk: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-dwc-qos-eth: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-visconti: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-visconti: Make visconti_eth_clock_remove() return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make stmmac_pltfr_remove() return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register (Andrew Halaney) [RHEL-6297]
  - net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson8b: Avoid cast to incompatible function type (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-sti: remove stih415/stih416/stid127 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-starfive: Add phy interface settings (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add glue layer for StarFive JH7110 SoC (Andrew Halaney) [RHEL-6297]
  - net: stmmac: platform: Add snps,dwmac-5.20 IP compatible string (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add Rx HWTS metadata to XDP ZC receive pkt (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add Rx HWTS metadata to XDP receive pkt (Andrew Halaney) [RHEL-6297]
  - net: stmmac: introduce wrapper for struct xdp_buff (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Remove unnecessary if statement brackets (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-rk: rework optional clock handling (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-anarion: Always return struct anarion_gmac * from anarion_config_dt() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-anarion: Use annotation __iomem for register base (Andrew Halaney) [RHEL-6297]
  - net: stmmac: check fwnode for phy device before scanning for phy (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add queue reset into stmmac_xdp_open() function (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix up RX flow hash indirection table when setting channels (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove redundant fixup to support fixed-link mode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: check if MAC needs to attach to a PHY (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Fix for mismatched host/device DMA address width (Andrew Halaney) [RHEL-6297]
  - net: stmmac: generic: drop of_match_ptr for ID table (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add to set device wake up flag when stmmac init phy (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Restrict warning on disabling DMA store and fwd mode (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwc-qos: Make struct dwc_eth_dwmac_data::remove return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Make stmmac_dvr_remove() return void (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix invalid call to mdiobus_get_phy() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Separate C22 and C45 transactions for xgmac (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add aux timestamps fifo clearance wait (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-mediatek: remove the dwmac_fix_mac_speed (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix errno when create_singlethread_workqueue() fails (Andrew Halaney) [RHEL-6297]
  - stmmac: fix potential division by 0 (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Add check for taprio basetime configuration (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix possible memory leak in stmmac_dvr_probe() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: fix "snps,axi-config" node property parsing (Andrew Halaney) [RHEL-6297]
  - Revert "net: stmmac: use sysfs_streq() instead of strncmp()" (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Set MAC's flow control register to reflect current settings (Andrew Halaney) [RHEL-6297]
  - net: stmmac: use sysfs_streq() instead of strncmp() (Andrew Halaney) [RHEL-6297]
  - net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Andrew Halaney) [RHEL-6297]
  - stmmac: dwmac-loongson: fix invalid mdio_node (Andrew Halaney) [RHEL-6297]
  - net: stmmac: remove duplicate dma queue channel macros (Andrew Halaney) [RHEL-6297]
  - net: stmmac: rk3588: Allow multiple gmac controller (Andrew Halaney) [RHEL-6297]
  - net: stmmac: add a parse for new property 'snps,clk-csr' (Andrew Halaney) [RHEL-6297]
  - net: stmmac: Minor spell fix related to 'stmmac_clk_csr_set()' (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmicro: stmmac: dwmac-rk: Add rv1126 support (Andrew Halaney) [RHEL-6297]
  - net: stmmac: dwc-qos: Switch to use dev_err_probe() helper (Andrew Halaney) [RHEL-6297]
  - net: ethernet: stmmac: dwmac-rk: Add gmac support for rk3588 (Andrew Halaney) [RHEL-6297]
  - ceph: force sending a cap update msg back to MDS for revoke op (Xiubo Li) [RHEL-48618]
  - ceph: periodically flush the cap releases (Xiubo Li) [RHEL-48618]
  - eeprom: at24: use of_match_ptr() (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: Use pm_runtime_resume_and_get to simplify the code (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: add ST M24C64-D Additional Write lockable page support (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: add ST M24C32-D Additional Write lockable page support (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: Annotate struct at24_data with __counted_by (Alessandro Carminati) [RHEL-47160]
  - eeprom: at24: Drop at24_get_chip_data() (Alessandro Carminati) [RHEL-47160]
  - mm: turn off test_uffdio_wp if CONFIG_PTE_MARKER_UFFD_WP is not configured. (Nico Pache) [RHEL-39306]
  - mm: update uffd-stress to handle EINVAL for unset config features (Nico Pache) [RHEL-39306]
  - selftests/bpf: Fix flaky test btf_map_in_map/lookup_update (Nico Pache) [RHEL-39306]
  - kselftests: mm: add s390 to ARCH list (Nico Pache) [RHEL-39306]
  - selftests/mm: fix powerpc ARCH check (Nico Pache) [RHEL-39306]
  - selftests: bpf: xskxceiver: ksft_print_msg: fix format type error (Nico Pache) [RHEL-39306]
  - hugetlbfs: ensure generic_hugetlb_get_unmapped_area() returns higher address than mmap_min_addr (Nico Pache) [RHEL-39306]
  - selftests/vm: fix inability to build any vm tests (Nico Pache) [RHEL-39306]
  - Makefile: add headers_install to kselftest targets (Nico Pache) [RHEL-39306]
  - selftests: drop KSFT_KHDR_INSTALL make target (Nico Pache) [RHEL-39306]
  - selftests: stop using KSFT_KHDR_INSTALL (Nico Pache) [RHEL-39306]
  - selftests: net: Add the uapi headers include variable (Nico Pache) [RHEL-39306]
  - selftests: landlock: Add the uapi headers include variable (Nico Pache) [RHEL-39306]
  - selftests: futex: Add the uapi headers include variable (Nico Pache) [RHEL-39306]
  - selftests: futex: set DEFAULT_INSTALL_HDR_PATH (Nico Pache) [RHEL-39306]
  - selftests: drop khdr make target (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Make it POSIX-compliant (Nico Pache) [RHEL-39306]
  - selftests: use printf instead of echo -ne (Nico Pache) [RHEL-39306]
  - selftests: find echo binary to use -ne options (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add a helper to finish the test (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add a helper to abort the test (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add helper to pass/fail test based on exit code (Nico Pache) [RHEL-39306]
  - selftests: ktap_helpers: Add helper to print diagnostic messages (Nico Pache) [RHEL-39306]
  - selftests: Move KTAP bash helpers to selftests common folder (Nico Pache) [RHEL-39306]
  - kselftest: dt: Stop relying on dirname to improve performance (Nico Pache) [RHEL-39306]
  - kselftest: Add new test for detecting unprobed Devicetree devices (Nico Pache) [RHEL-39306]
  - selftests:modify the incorrect print format (Nico Pache) [RHEL-39306]
  - selftests/mm: Substitute attribute with a macro (Nico Pache) [RHEL-39306]
  - selftests: Add printf attribute to kselftest prints (Nico Pache) [RHEL-39306]
  - selftests: fix dependency checker script (Nico Pache) [RHEL-39306]
  - kselftest/runner.sh: Propagate SIGTERM to runner child (Nico Pache) [RHEL-39306]
  - selftests/harness: Actually report SKIP for signal tests (Nico Pache) [RHEL-39306]
  - testing: kselftest_harness: add filtering and enumerating tests (Nico Pache) [RHEL-39306]
  - selftests: break the dependency upon local header files (Nico Pache) [RHEL-39306]
  - kselftest: Add a ksft_perror() helper (Nico Pache) [RHEL-39306]
  - selftests: Make the usage formatting consistent in kselftest_deps.sh (Nico Pache) [RHEL-39306]
  - kselftests: Enable the echo command to print newlines in Makefile (Nico Pache) [RHEL-39306]
  - selftest: Taint kernel when test module loaded (Nico Pache) [RHEL-39306]
  - selftests: Fix build when $(O) points to a relative path (Nico Pache) [RHEL-39306]
  - selftests: Use -isystem instead of -I to include headers (Nico Pache) [RHEL-39306]
  - selftests: Correct the headers install path (Nico Pache) [RHEL-39306]
  - selftests: Add and export a kernel uapi headers path (Nico Pache) [RHEL-39306]
  - selftests: set the BUILD variable to absolute path (Nico Pache) [RHEL-39306]
  - kselftest: signal all child processes (Nico Pache) [RHEL-39306]
  - selftests/mm: fix additional build errors for selftests (Nico Pache) [RHEL-39306]
  - selftests: mm: protection_keys: save/restore nr_hugepages value from launch script (Nico Pache) [RHEL-39306]
  - selftests: mm: make map_fixed_noreplace test names stable (Nico Pache) [RHEL-39306]
  - selftests/mm: fix build warnings on ppc64 (Nico Pache) [RHEL-39306]
  - selftests/mm: hugetlb_madv_vs_map: avoid test skipping by querying hugepage size at runtime (Nico Pache) [RHEL-39306]
  - mm/hugetlb: document why hugetlb uses folio_mapcount() for COW reuse decisions (Nico Pache) [RHEL-39306]
  - selftests: mm: cow: flag vmsplice() hugetlb tests as XFAIL (Nico Pache) [RHEL-39306]
  - selftests/mm: soft-dirty should fail if a testcase fails (Nico Pache) [RHEL-39306]
  - selftests/mm: parse VMA range in one go (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests.sh: fix hugetlb mem size calculation (Nico Pache) [RHEL-39306]
  - selftests/mm: confirm VA exhaustion without reliance on correctness of mmap() (Nico Pache) [RHEL-39306]
  - selftests/mm: virtual_address_range: Switch to ksft_exit_fail_msg (Nico Pache) [RHEL-39306]
  - selftests/mm: include strings.h for ffsl (Nico Pache) [RHEL-39306]
  - selftests/mm: fix ARM related issue with fork after pthread_create (Nico Pache) [RHEL-39306]
  - selftests/mm: sigbus-wp test requires UFFD_FEATURE_WP_HUGETLBFS_SHMEM (Nico Pache) [RHEL-39306]
  - selftests: mm: restore settings from only parent process (Nico Pache) [RHEL-39306]
  - selftests/mm: Fix build with _FORTIFY_SOURCE (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests.sh: add missing tests (Nico Pache) [RHEL-39306]
  - selftests/mm: protection_keys: save/restore nr_hugepages settings (Nico Pache) [RHEL-39306]
  - selftests/mm: save and restore nr_hugepages value (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests: remove sudo and conform to tap (Nico Pache) [RHEL-39306]
  - selftests/mm: hugetlb_reparenting_test: do not unmount (Nico Pache) [RHEL-39306]
  - selftests/mm: log a consistent test name for check_compaction (Nico Pache) [RHEL-39306]
  - selftests/mm: log skipped compaction test as a skip (Nico Pache) [RHEL-39306]
  - selftests/mm: virtual_address_range: conform to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: transhuge-stress: conform to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: split_huge_page_test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mremap_dontunmap: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mrelease_test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mlock2-tests: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: mlock-random-test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: map_populate: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: map_hugetlb: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: map_fixed_noreplace: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: skip test if application doesn't has root privileges (Nico Pache) [RHEL-39306]
  - selftests/mm: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests: mm: hugepage-mmap: conform to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: gup_test: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - mm/selftests: hugepage-mremap: conform test to TAP format output (Nico Pache) [RHEL-39306]
  - selftests/mm: log run_vmtests.sh results in TAP format (Nico Pache) [RHEL-39306]
  - selftests/mm: skip the hugetlb-madvise tests on unmet hugepage requirements (Nico Pache) [RHEL-39306]
  - selftests/mm: skip uffd hugetlb tests with insufficient hugepages (Nico Pache) [RHEL-39306]
  - selftests/mm: dont fail testsuite due to a lack of hugepages (Nico Pache) [RHEL-39306]
  - selftests/mm: run_vmtests.sh: add hugetlb test category (Nico Pache) [RHEL-39306]
  - selftests/mm: new test that steals pages (Nico Pache) [RHEL-39306]
  - selftests: mm: perform some system cleanup before using hugepages (Nico Pache) [RHEL-39306]
  - selftests: avoid using SKIP(exit()) in harness fixure setup (Nico Pache) [RHEL-39306]
  - selftests/mm: uffd-unit-test check if huge page size is 0 (Nico Pache) [RHEL-39306]
  - selftests/mm: ksm_tests should only MADV_HUGEPAGE valid memory (Nico Pache) [RHEL-39306]
  - selftests/mm: switch to bash from sh (Nico Pache) [RHEL-39306]
  - selftests/mm: restore number of hugepages (Nico Pache) [RHEL-39306]
  - selftests/mm: add a new test for madv and hugetlb (Nico Pache) [RHEL-39306]
  - mm/ksm: test case for prctl fork/exec workflow (Nico Pache) [RHEL-39306]
  - kselftest: vm: add tests for no-inherit memory-deny-write-execute (Nico Pache) [RHEL-39306]
  - kselftest: vm: check errnos in mdwe_test (Nico Pache) [RHEL-39306]
  - kselftest: vm: fix mdwe's mmap_FIXED test case (Nico Pache) [RHEL-39306]
  - kselftest: vm: fix tabs/spaces inconsistency in the mdwe test (Nico Pache) [RHEL-39306]
  - selftests: mm: add a test for mutually aligned moves > PMD size (Nico Pache) [RHEL-39306]
  - selftests: mm: fix failure case when new remap region was not found (Nico Pache) [RHEL-39306]
  - selftests/mm: fix uffd-stress help information (Nico Pache) [RHEL-39306]
  - selftests: mm: ksm: fix incorrect evaluation of parameter (Nico Pache) [RHEL-39306]
  - selftests/mm: mkdirty: fix incorrect position of #endif (Nico Pache) [RHEL-39306]
  - selftests: mm: remove wrong kernel header inclusion (Nico Pache) [RHEL-39306]
  - selftests/mm: move certain uffd*() routines from vm_util.c to uffd-common.c (Nico Pache) [RHEL-39306]
  - selftests/mm: fix two -Wformat-security warnings in uffd builds (Nico Pache) [RHEL-39306]
  - selftests/mm: fix uffd-stress unused function warning (Nico Pache) [RHEL-39306]
  - selftests/mm: factor out detection of hugetlb page sizes into vm_util (Nico Pache) [RHEL-39306]
  - selftests/ksm: ksm_functional_tests: add prctl unmerge test (Nico Pache) [RHEL-39306]
  - selftests/mm: add new selftests for KSM (Nico Pache) [RHEL-39306]
  - selftests/mm: add tests for RO pinning vs fork() (Nico Pache) [RHEL-39306]
  - selftests/mm: rename COW_EXTRA_LIBS to IOURING_EXTRA_LIBS (Nico Pache) [RHEL-39306]
  - selftests/mm: extend and rename uffd pagemap test (Nico Pache) [RHEL-39306]
  - selftests/mm: add a few options for uffd-unit-test (Nico Pache) [RHEL-39306]
  - selftests/mm: add uffdio register ioctls test (Nico Pache) [RHEL-39306]
  - selftests/mm: add shmem-private test to uffd-stress (Nico Pache) [RHEL-39306]
  - selftests/mm: drop sys/dev test in uffd-stress test (Nico Pache) [RHEL-39306]
  - selftests/mm: allow uffd test to skip properly with no privilege (Nico Pache) [RHEL-39306]
  - selftests/mm: workaround no way to detect uffd-minor + wp (Nico Pache) [RHEL-39306]
  - selftests/mm: move zeropage test into uffd unit tests (Nico Pache) [RHEL-39306]
  - selftests/mm: move uffd sig/events tests into uffd unit tests (Nico Pache) [RHEL-39306]
  - selftests/mm: move uffd minor test to unit test (Nico Pache) [RHEL-39306]
  - selftests/mm: move uffd pagemap test to unit test (Nico Pache) [RHEL-39306]
  - selftests/mm: add framework for uffd-unit-test (Nico Pache) [RHEL-39306]
  - selftests/mm: allow allocate_area() to fail properly (Nico Pache) [RHEL-39306]
  - selftests/mm: let uffd_handle_page_fault() take wp parameter (Nico Pache) [RHEL-39306]
  - selftests/mm: rename uffd_stats to uffd_args (Nico Pache) [RHEL-39306]
  - selftests/mm: drop global hpage_size in uffd tests (Nico Pache) [RHEL-39306]
  - selftests/mm: drop global mem_fd in uffd tests (Nico Pache) [RHEL-39306]
  - selftests/mm: UFFDIO_API test (Nico Pache) [RHEL-39306]
  - selftests/mm: uffd_open_{dev|sys}() (Nico Pache) [RHEL-39306]
  - selftests/mm: uffd_[un]register() (Nico Pache) [RHEL-39306]
  - selftests/mm: split uffd tests into uffd-stress and uffd-unit-tests (Nico Pache) [RHEL-39306]
  - selftests/mm: create uffd-common.[ch] (Nico Pache) [RHEL-39306]
  - selftests/mm: drop test_uffdio_zeropage_eexist (Nico Pache) [RHEL-39306]
  - selftests/mm: test UFFDIO_ZEROPAGE only when !hugetlb (Nico Pache) [RHEL-39306]
  - selftests/mm: mkdirty: test behavior of (pte|pmd)_mkdirty on VMAs without write permissions (Nico Pache) [RHEL-39306]
  - selftests/mm: reuse read_pmd_pagesize() in COW selftest (Nico Pache) [RHEL-39306]
  - mm: userfaultfd: add UFFDIO_CONTINUE_MODE_WP to install WP PTEs (Nico Pache) [RHEL-39306]
  - kselftest: vm: fix unused variable warning (Nico Pache) [RHEL-39306]
  - kselftest: vm: add tests for memory-deny-write-execute (Nico Pache) [RHEL-39306]
  - selftests/vm: cow: R/O long-term pinning reliability tests for non-anon pages (Nico Pache) [RHEL-39306]
  - config: enable CONFIG_DP83TG720_PHY (Izabela Bakollari) [RHEL-33716]
  - config: CONFIG_QCA807X_PHY (Izabela Bakollari) [RHEL-33716]
  - config: enable CONFIG_QCA808X_PHY (Izabela Bakollari) [RHEL-33716]
  - config: enable CONFIG_QCA83XX_PHY (Izabela Bakollari) [RHEL-33716]
  - net: linkmode: add linkmode_fill() helper (Izabela Bakollari) [RHEL-33716]
  - net: phy: qca807x: fix compilation when CONFIG_GPIOLIB is not set (Izabela Bakollari) [RHEL-33716]
  - net: phy: qca807x: move interface mode check to .config_init_once (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83tg720: get master/slave configuration in link down state (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83tg720: wake up PHYs in managed mode (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: at803x: fix kernel panic with at8031_probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: use devm_clk_get_optional_enabled for the rmii-ref clock (Izabela Bakollari) [RHEL-33716]
  - net: sfp: update comment for FS SFP-10G-T quirk (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: switch to crc_itu_t() (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: drop wrong endianness conversion for addr and CRC (Izabela Bakollari) [RHEL-33716]
  - net: phy: fix phy_read_poll_timeout argument type in genphy_loopback (Izabela Bakollari) [RHEL-33716]
  - net: sfp: enhance quirk for Fibrestore 2.5G copper SFP module (Izabela Bakollari) [RHEL-33716]
  - net: phy: qca807x: add support for configurable LED (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: generalize some qca808x LED functions (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: move common qca808x LED define to shared header (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: add support for QCA807x PHY Family (Izabela Bakollari) [RHEL-33716]
  - net: phy: provide whether link has changed in c37_read_status (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: move more function to shared library (Izabela Bakollari) [RHEL-33716]
  - net: phy: add devm/of_phy_package_join helper (Izabela Bakollari) [RHEL-33716]
  - net: phy: add support for scanning PHY in PHY packages nodes (Izabela Bakollari) [RHEL-33716]
  - of: mdio: Add of_node_put() when breaking out of for_each_xx (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: use generic MDIO helpers to simplify the code (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: add 5Gbps support to rtl822x_config_aneg() (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: use generic MDIO constants (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add 2.5g and 5g related PMA speed constants (Izabela Bakollari) [RHEL-33716]
  - net: phy: c45 scanning: Don't consider -ENODEV fatal (Izabela Bakollari) [RHEL-33716]
  - net: phy: add helper phy_advertise_eee_all (Izabela Bakollari) [RHEL-33716]
  - net: phy: constify phydev->drv (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix the frequency adjustments (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: qca808x: default to LED active High if not set (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: qca808x: fix logic error in LED brightness set (Izabela Bakollari) [RHEL-33716]
  - net: phy: realtek: add support for RTL8126A-integrated 5Gbps PHY (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83867: Add support for active-low LEDs (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: detach qca808x PHY driver from at803x (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: move additional functions to shared library (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: deatch qca83xx PHY driver from at803x (Izabela Bakollari) [RHEL-33716]
  - net: phy: qcom: create and move functions to shared library (Izabela Bakollari) [RHEL-33716]
  - net: phy: move at803x PHY driver to dedicated directory (Izabela Bakollari) [RHEL-33716]
  - net: phy: adin1100: Add interrupt support for link change (Izabela Bakollari) [RHEL-33716]
  - net: phy: phy_device: Prevent nullptr exceptions on ISR (Izabela Bakollari) [RHEL-33716]
  - net: phy: c45: change genphy_c45_ethtool_[get|set]_eee to use EEE linkmode bitmaps (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix set/get PHC time for lan8814 (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: add LED support for qca808x (Izabela Bakollari) [RHEL-33716]
  - net: phy: add support for PHY LEDs polarity modes (Izabela Bakollari) [RHEL-33716]
  - net: phy: mediatek-ge-soc: sync driver with MediaTek SDK (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix PTP frame parsing for lan8814 (Izabela Bakollari) [RHEL-33716]
  - net: sfp-bus: fix SFP mode detect from bitrate (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: populate .soft_reset for KSZ9131 (Izabela Bakollari) [RHEL-33716]
  - net: micrel: Fix PTP frame parsing for lan8841 (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: make read_status more generic (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: add support for cdt cross short test for qca808x (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: refactor qca808x cable test get status function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: generalize cdt fault length function (Izabela Bakollari) [RHEL-33716]
  - net: Use of_property_present() for testing DT property presence (Izabela Bakollari) [RHEL-33716]
  - net: phylink: move phylink_pcs_neg_mode() into phylink.c (Izabela Bakollari) [RHEL-33716]
  - net: mdio_bus: add refcounting for fwnodes to mdiobus (Izabela Bakollari) [RHEL-33716]
  - net: phy: linux/phy.h: fix Excess kernel-doc description warning (Izabela Bakollari) [RHEL-33716]
  - net: phy: nxp-c45-tja11xx: implement mdo_insert_tx_tag (Izabela Bakollari) [RHEL-33716]
  - net: phy: nxp-c45-tja11xx: add MACsec statistics (Izabela Bakollari) [RHEL-33716]
  - net: phy: nxp-c45-tja11xx: add MACsec support (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: better align function varibles to open parenthesis (Izabela Bakollari) [RHEL-33716]
  - net: sfp: fix PHY discovery for FS SFP-10G-T module (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: replace msleep(1) with usleep_range (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: remove extra space after cast (Izabela Bakollari) [RHEL-33716]
  - net: phy: add support for PHY package MMD read/write (Izabela Bakollari) [RHEL-33716]
  - net: phy: restructure __phy_write/read_mmd to helper and phydev user (Izabela Bakollari) [RHEL-33716]
  - net: phy: extend PHY package API to support multiple global address (Izabela Bakollari) [RHEL-33716]
  - net: phy: make addr type u8 in phy_package_shared struct (Izabela Bakollari) [RHEL-33716]
  - net: phylink: reimplement population of pl->supported for in-band (Izabela Bakollari) [RHEL-33716]
  - net: phy: skip LED triggers on PHYs on SFP modules (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: make read specific status function more generic (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific qca808x config_aneg to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: Add support for the DP83TG720S Ethernet PHY (Izabela Bakollari) [RHEL-33716]
  - net: phy: c45: add genphy_c45_pma_read_ext_abilities() function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: drop specific PHY ID check from cable test functions (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move at8035 specific DT parse to dedicated probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move at8031 functions in dedicated section (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: make at8031 related DT functions name more specific (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 config_intr to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 WOL bits to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 config_init to dedicated function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific at8031 probe mode check to dedicated probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move specific DT option for at8031 to specific probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move qca83xx specific check in dedicated functions (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: raname hw_stats functions to qca83xx specific name (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: move disable WOL to specific at8031 probe (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: fix passing the wrong reference for config_intr (Izabela Bakollari) [RHEL-33716]
  - net: mdio_bus: replace deprecated strncpy with strscpy (Izabela Bakollari) [RHEL-33716]
  - net: sfp: Convert to platform remove callback returning void (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: allow usage of generic ethernet-phy clock (Izabela Bakollari) [RHEL-33716]
  - net: phy: adin: allow control of Fast Link Down (Izabela Bakollari) [RHEL-33716]
  - net: phylink: use the PHY's possible_interfaces if populated (Izabela Bakollari) [RHEL-33716]
  - net: phylink: split out PHY validation from phylink_bringup_phy() (Izabela Bakollari) [RHEL-33716]
  - net: phylink: pass PHY into phylink_validate_mask() (Izabela Bakollari) [RHEL-33716]
  - net: phylink: pass PHY into phylink_validate_one() (Izabela Bakollari) [RHEL-33716]
  - net: phylink: split out per-interface validation (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: fill in possible_interfaces for AQR113C (Izabela Bakollari) [RHEL-33716]
  - net: phy: bcm84881: fill in possible_interfaces (Izabela Bakollari) [RHEL-33716]
  - net: phy: marvell10g: fill in possible_interfaces (Izabela Bakollari) [RHEL-33716]
  - net: phy: marvell10g: table driven mactype decode (Izabela Bakollari) [RHEL-33716]
  - net: phy: add possible interfaces (Izabela Bakollari) [RHEL-33716]
  - net: sfp: rework the RollBall PHY waiting code (Izabela Bakollari) [RHEL-33716]
  - net: phy: correctly check soft_reset ret ONLY if defined for PHY (Izabela Bakollari) [RHEL-33716]
  - net: phylink: use for_each_set_bit() (Izabela Bakollari) [RHEL-33716]
  - net: phy: broadcom: Wire suspend/resume for BCM54612E (Izabela Bakollari) [RHEL-33716]
  - net: sfp: use linkmode_*() rather than open coding (Izabela Bakollari) [RHEL-33716]
  - net: phylink: use linkmode_fill() (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: add firmware load support (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: move MMD_VEND define to header (Izabela Bakollari) [RHEL-33716]
  - net: phy: aquantia: move to separate directory (Izabela Bakollari) [RHEL-33716]
  - net: mdio: fix typo in header (Izabela Bakollari) [RHEL-33716]
  - net: phylink: initialize carrier state at creation (Izabela Bakollari) [RHEL-33716]
  - net: phy: fill in missing MODULE_DESCRIPTION()s (Izabela Bakollari) [RHEL-33716]
  - net: mdio: fill in missing MODULE_DESCRIPTION()s (Izabela Bakollari) [RHEL-33716]
  - net: phy: micrel: Fix forced link mode for KSZ886X switches (Izabela Bakollari) [RHEL-33716]
  - net: dsa: microchip: ksz8: Enable MIIM PHY Control reg access (Izabela Bakollari) [RHEL-33716]
  - net: phy: mscc: macsec: reject PN update requests (Izabela Bakollari) [RHEL-33716]
  - net: phy: dp83867: Add support for hardware blinking LEDs (Izabela Bakollari) [RHEL-33716]
  - net: sfp: improve Nokia GPON sfp fixup (Izabela Bakollari) [RHEL-33716]
  - net: sfp: re-implement ignoring the hardware TX_FAULT signal (Izabela Bakollari) [RHEL-33716]
  - net: sfp: add quirk for FS's 2.5G copper SFP (Izabela Bakollari) [RHEL-33716]
  - net: phy: amd: Support the Altima AMI101L (Izabela Bakollari) [RHEL-33716]
  - net: sfp: add quirk for Fiberstone GPON-ONU-34-20BI (Izabela Bakollari) [RHEL-33716]
  - net: phy: fix regression with AX88772A PHY driver (Izabela Bakollari) [RHEL-33716]
  - net: phy: convert phy_stop() to use split state machine (Izabela Bakollari) [RHEL-33716]
  - net: phy: split locked and unlocked section of phy_state_machine() (Izabela Bakollari) [RHEL-33716]
  - net: phy: move phy_state_machine() (Izabela Bakollari) [RHEL-33716]
  - net: phy: move phy_suspend() to end of phy_state_machine() (Izabela Bakollari) [RHEL-33716]
  - net: phy: move call to start aneg (Izabela Bakollari) [RHEL-33716]
  - net: phy: call phy_error_precise() while holding the lock (Izabela Bakollari) [RHEL-33716]
  - net: phy: always call phy_process_state_change() under lock (Izabela Bakollari) [RHEL-33716]
  - net: phy: marvell: Add support for offloading LED blinking (Izabela Bakollari) [RHEL-33716]
  - net: phy: phy_device: Call into the PHY driver to set LED offload (Izabela Bakollari) [RHEL-33716]
  - net: sfp: Remove unused function declaration sfp_link_configure() (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: add qca8081 fifo reset on the link changed (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: remove qca8081 1G fast retrain and slave seed config (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: support qca8081 1G chip type (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: enable qca8081 slave seed conditionally (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: merge qca8081 slave seed function (Izabela Bakollari) [RHEL-33716]
  - net: phy: at803x: support qca8081 genphy_c45_pma_read_abilities (Izabela Bakollari) [RHEL-33716]
  - net: mdio: Introduce a regmap-based mdio driver (Izabela Bakollari) [RHEL-33716]
  - net: phylib: fix phy_read*_poll_timeout() (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add mdio_device_get() and mdio_device_put() (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add clause 73 to ethtool conversion helper (Izabela Bakollari) [RHEL-33716]
  - mdio_bus: unhide mdio_bus_init prototype (Izabela Bakollari) [RHEL-33716]
  - net: mdio: fix owner field for mdio buses registered using ACPI (Izabela Bakollari) [RHEL-33716]
  - net: phy: improve phy_read_poll_timeout (Izabela Bakollari) [RHEL-33716]
  - net: mdio: add mdiodev_c45_(read|write) (Izabela Bakollari) [RHEL-33716]
  - docs: networking: phy: add missing space (Izabela Bakollari) [RHEL-33716]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.el9]
changelog:
  - Revert "Merge: scsi: fnic: driver update" (John Meneghini) [RHEL-36420]
  - dev/parport: fix the array out-of-bounds risk (CKI Backport Bot) [RHEL-54990] {CVE-2024-42301}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54835] {CVE-2024-43830}
  - null_blk: fix validation of block size (Ming Lei) [RHEL-51322] {CVE-2024-41077}
  - s390/fpu: Re-add exception handling in load_fpu_state() (Aristeu Rozanski) [RHEL-39346]
  - redhat: spec: add cachestat to kselftest package (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: Fix build warnings on ppc64 (Eric Chanudet) [RHEL-50302]
  - selftests/cachestat: Fix print_cachestat format (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: use proper syscall number macro (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: properly link in librt (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: catch failing fsync test on tmpfs (Eric Chanudet) [RHEL-50302]
  - selftests: cachestat: test for cachestat availability (Eric Chanudet) [RHEL-50302]
  - selftests: add selftests for cachestat (Eric Chanudet) [RHEL-50302]


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0 (rhbz#2121920)
  - Rebuild for LLVM 15 (rhbz#2118995)
  - Download the cereal library (not packaged into RHEL9)
  - Fixed several tools (rhbz#1975148, rhbz#2088577, rhbz#2128208, rhbz#2073675,
    rhbz#2073770)
  - Resolve conflicts between bpftrace and bcc manpages (rhbz#2075076)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-2
changelog:
  - Fix missing kprobe attachpoints for bio* tools (s390x, ppc64le)
  - Rebuild for libbpf 1.0.0
  - Resolves: rhbz#2157829
  - Related: rhbz#2157592


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Anand Jain <anand.jain@oracle.com> - 5.15.1-1.el9
changelog:
  - Release: 5.15.1-1: Fix for missing by-uuid link after mkfs (Anand Jain)  
  - btrfs-progs: fix stray fd close in open_ctree_fs_info() (Qu Wenruo)  [Orabug: 36214038] 
  - btrfs-progs: rename struct open_ctree_flags to open_ctree_args (Anand Jain)  [Orabug: 36214038] 
  - btrfs-progs: mkfs: keep file descriptors open during whole time (Qu Wenruo)  [Orabug: 36214038] 
  - btrfs-progs: mkfs: run device preparation in parallel (Li Zhang)  [Orabug: 36214038]


author: Anand Jain <anand.jain@oralce.com> 5.15.1-2
changelog:
  - Fix for btrfs-convert csum error after ext4 convert [Orabug: 37353780]
  - Fix for btrfs-convert uninitialized ext4 extent [Orabug: 36581591]


author: Anand Jain <anand.jain@oracle.com> - 6.12.0-1.el9
changelog:
  - btrfs-progs: release 6.12.0-1 (Anand Jain)  
  - btrfs-progs: resize: remove the misleading warning for the 'max' option (Anand Jain)  
  - btrfs-progs: btrfstune: add ability to remove squotas (Boris Burkov)  
  - btrfs-progs: add a helper for clearing all the items in a tree (Boris Burkov)  
  - btrfs-progs: btrfstune: fix documentation for --enable-simple-quota (Boris Burkov)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.0-0.50
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/4b3aaee)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.0-0.51
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/2189882)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.0-0.52
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/718f2b4)
  - Related: #2000051


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/7b559a3)
  - Related: #2067533


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/c43a389)
  - Resolves: #2136848


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.2-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/5b86d15)
  - Resolves: #2150432


author: Jindrich Novy <jnovy@redhat.com> - 1:1.27.3-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.27
    (https://github.com/containers/buildah/commit/4785fdb)
  - Resolves: #2152042


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/8ca903b)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/c541c35)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/4b72f05)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-0.4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/078a7ff)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/94b723c)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.0-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/c822cc6)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/7fa17a8)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1:1.29.1-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.29
    (https://github.com/containers/buildah/commit/f07d2c9)
  - Resolves: #2183632


author: Jindrich Novy <jnovy@redhat.com> - 1:1.30.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175073
  - Resolves: #2179958
  - Resolves: #2187332
  - Resolves: #2187375
  - Resolves: #2203696
  - Resolves: #2207518


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 1.31.4-1.0.1
changelog:
  - update to https://github.com/containers/buildah/releases/tag/v1.31
  - https://github.com/containers/buildah/commit/11bbf33


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.31.3-2
changelog:
  - Rebuild for CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
  - Related: Jira:RHEL-2779
  - Related: Jira:RHEL-7451


author: Jindrich Novy <jnovy@redhat.com> - 1:1.31.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.31
    (https://github.com/containers/buildah/commit/11bbf33)
  - Resolves: RHEL-19617


author: Jindrich Novy <jnovy@redhat.com> - 1:1.31.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.31
    (https://github.com/containers/buildah/commit/5fd539c)
  - Resolves: RHEL-26775


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b95e962)
  - Resolves: RHEL-28230


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/997beea)
  - Resolves: RHEL-28731


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-5
changelog:
  - rebuild to address CVE-2024-34155 CVE-2024-34156 CVE-2024-34158
  - Resolves: RHEL-58191 RHEL-57972 RHEL-57910


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.9-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/4dc26b9)
  - Resolves: RHEL-61116


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.10-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/bd85c17)
  - Resolves: RHEL-61842


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.33.1-3
changelog:
  - Rebuild for CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
  - Related: Jira:RHEL-2779


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.0-1
changelog:
  - update to https://github.com/containers/buildah/releases/tag/v1.37.0
  - Resolves: RHEL-47164 RHEL-40808


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/fd39521)
  - Resolves: RHEL-67617


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/f31d99d)
  - Resolves: RHEL-61148


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/c060201)
  - Related: RHEL-60277


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5.1
changelog:
  - Resolves: rhbz#2209519 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.2.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Josh Stone <jistone@redhat.com> - 1.71.0-2
changelog:
  - Relax the suspicious_double_ref_op lint (rhbz2225471)
  - Enable the profiler runtime for native hosts (rhbz2213875)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-1
changelog:
  - update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
    RHEL-12411)
  - add chronyd-restricted service (RHEL-9972)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-3
changelog:
  - don't repeat error log messages when reloading sourcedir (RHEL-51786)
  - add support for leap-seconds.list file (RHEL-53484)


author: EL Errata <el-errata_ww@oracle.com> - 4.5-3.0.1
changelog:
  - Fixed chrony starting before network-online service [Orabug: 36813717]
  - Change chrony.conf to use pool.ntp.org [Orabug: 28627760]


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61877)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65421)


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: <pooja.senthil.kumar@oracle.com> - 0.6.1-13
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation: Action required on updates
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: EL Errata <el-errata_ww@oracle.com> - 264.1-1.0.1
changelog:
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Replace Oracle URLs
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: EL Errata <el-errata_ww@oracle.com> - 264.2-1.0.1
changelog:
  - Replace upstream references [Orabug: 34398512]
  - Fix "virtual" network device detection code [Orabug: 33865214]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Replace Oracle URLs
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Packit <hello@packit.dev> - 272-1
changelog:
  - Firewall: Edit custom services
  - Services: Pin services as favorites
  - Login: Dark mode
  - Unprivileged cockpit/ws container mode


author: Packit <hello@packit.dev> - 273-1
changelog:
  - Metrics: Display CPU temperature
  - Networking: Suggest netmask and gateway addresses
  - Software Updates: Optionally reboot after updating
  - cockpit/ws container: Support modern SSH keys


author: Packit <hello@packit.dev> - 274-1
changelog:
  - ws: Fix segfault with channel closing (#17492)
  - Services: Fix time picker behaviour in Timer creation dialog
  - Metrics: Improve CPU temperature sensors detection


author: EL Errata <el-errata_ww@oracle.com> - 276.1-1.0.1
changelog:
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]


author: Packit <hello@packit.dev> - 286.1-1
changelog:
  - Users: Fix broken alignment of the first column in groups table
  - Translation updates (rhbz#2139644)


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 286.2-1.0.1
changelog:
  - NBDE on block devices without a filesystem is broken. (BZ#2207498)
  - node_modules: update chrome-remote-interface for chromium 111.


author: Packit <hello@packit.dev> - 299-1
changelog:
  - Kdump: Show location of kdump to verify the successful configuration test
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Packit <hello@packit.dev> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Alex Burmashev <alexander.burmashev@oracle.com> - 300.1-1.0.1
changelog:
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]
  - Update spec file for new release


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 300.3-1.0.1
changelog:
  - Update to 300.3
  - Resolves: RHEL-3537 - cockpit.peer: don't explode on authorize messages
  - Resolves: RHEL-5341 - Fix large file uploads through cockpit.spawn()
  - Resolves: RHEL-5765 - cockpit.superuser: prevent 'any' from being set


author: Mark Will <mark.will@oracle.com> - 300.4-1.0.1
changelog:
  - client: Provide fallback for GLib.get_user_state_dir() (RHEL-18989)
  - bridge: Add back menu/tool names to cockpit-bridge --packages (RHEL-19004)
  - bridge: Add back support for x.min.js files (RHEL-19005)


author: EL Errata <el-errata_ww@oracle.com> - 311.2-1.0.1
changelog:
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]
  - Update spec file for new release


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Packit <hello@packit.dev> - 323-1
changelog:
  - metrics: Install valkey instead of redis on RHEL/CentOS 10
  - login: Prevent multiple logins in a single browser session
  - Update documentation links


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 323.1-1.0.1
changelog:
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
  - Update spec file for new release


author: Packit <hello@packit.dev> - 330-1
changelog:
  - Web server: Increased sandboxing, setuid removal, bootc support
  - Development: New install mode using systemd-sysext
  - ws container: Move to Fedora 41


author: Packit <hello@packit.dev> - 331-1
changelog:
  - ws: Prevent search engine indexing with robots.txt
  - container/ws: Support using an external SSH agent


author: Packit <hello@packit.dev> - 332-1
changelog:
  - containers/ws: Include cockpit-files
  - login: Beibooting to all supported OSes
  - metrics: Show system boots in metrics


author: EL Errata <el-errata_ww@oracle.com> - 333-1.0.1
changelog:
  - Storage: Enable btrfs support [Orabug: 37464632]
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
  - Update spec file for new release


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063147
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2091968


author: Federico Ramírez <federico.r.ramirez@oracle.com> - 1:1.1.1k-4.0.1
changelog:
  - Backport upstream PRs 18446 and 18481 which update
    certificates used for the self-tests [Orabug: 34326055]


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061316


author: Phil Sutter <psutter@redhat.com> - 1.4.5-10
changelog:
  - Drop lazy binding via patch from upstream
  - Add patches to fix for failing RPC header search
  - Enable hardened builds again
  - Fix source compile in tests.yml


author: Phil Sutter <psutter@redhat.com> - 1.4.5-10.1
changelog:
  - conntrackd: use correct max unix path length
  - conntrackd: Use strdup in lexer
  - conntrackd: use strncpy() to unix path


author: Phil Sutter <psutter@redhat.com> - 1.4.5-15
changelog:
  - conntrack: fix compiler warnings
  - src: fix strncpy -Wstringop-truncation warnings
  - connntrack: Fix for memleak when parsing -j arg
  - Drop pointless assignments
  - Don't call exit() from signal handler
  - read_config_yy: Drop extra argument from dlog() call
  - helpers: ftp: Avoid ugly casts
  - Fix potential buffer overrun in snprintf() calls
  - cache: Fix features array allocation
  - hash: Flush tables when destroying


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-4
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179960
  - Resolves: #2187333
  - Resolves: #2187376
  - Resolves: #2203705
  - Resolves: #2207519


author: Darren Archibald <darren.archibald@oracle.com> - 1:1.3.0-6
changelog:
  - rebuild for following CVEs:
  CVE-2023-29409 CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
  - Resolves: #2228743
  - Resolves: #2237773
  - Resolves: #2237776
  - Resolves: #2237777
  - Resolves: #2237778


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Sohan Kunkerkar <skunkerk@redhat.com> - 0.11.0-1
changelog:
  - New release
  - Fix inadvertent inclusion of coreos-installer-dracut in -bootinfra on RHEL
  - Have -dracut own 51coreos-installer directory on RHEL


author: Jan Friesse <jfriesse@redhat.com> - 3.1.4-1
changelog:
  - Related: rhbz#1948974
  - Resolves: rhbz#1967485

  - New upstream release (rhbz#1948974)
  - stats: fix crash when iterating over deleted keys (rhbz#1967485)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - add support for relocation of the PCH data (pch/71934, #2044917)
  - remove 30_threads/future/members/poll.cc (#2050090)
  - avoid overly-greedy match in dejagnu regexp (#2050089)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: Qing Zhao <qing.zhao@oracle.com> 11.2.1-9.4.0.1
changelog:
  - Merge all Oracle patches:
  - Add complex divide improvement (11.2.1-2.2.0.1)
    backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
  - Add CTF/BTF support (11.2.1-2.2.0.1)
  - Add -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.1)
  - Add more fixes for -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.2)
  - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
    PR104550 and PR102276. (11.2.1-2.2.0.3)
  - NOTE: adjust gcc12-ctf-pre-1-write_symbols-to-support-bitmasks.patch
    for c-family/c-pch.c for 11.2.1-9.4
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 11.2.1-9.4.0.2
changelog:
  - Add support for -mharden-sls on X86 from GCC11
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.1
changelog:
  - Merge all Oracle patches:
  - Add complex divide improvement (11.2.1-2.2.0.1)
    backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
  - Add CTF/BTF support (11.2.1-2.2.0.1)
  - Add -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.1)
  - Add more fixes for -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.2)
  - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
    PR104550 and PR102276. (11.2.1-2.2.0.3)
  - NOTE: adjust gcc12-ctf-pre-1-write_symbols-to-support-bitmasks.patch
    for c-family/c-pch.c for 11.2.1-9.4
  - Fix Orabug - 35137216 Backport fix for upstream PR debug/105089 to OL9 GCC
    (11.3.1-2.1.0.2)
    - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
      using the following upstream commits:
      613a6fca75156aadc2e79d78a23e547d39762c1e,
      d0b00e74bf59c73b79471bbe9de19373b8661e20, and
      d634c5d7c78c6ec0fa39d96984460475564519c8
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
         c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
         c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
         c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
         c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
         c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
         c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
         c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
         debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
         fortran/85877, fortran/95107, fortran/96024, fortran/96025,
         fortran/99036, fortran/103259, fortran/104332, fortran/106209,
         fortran/106945, fortran/107576, fortran/107872, fortran/108131,
         fortran/108349, fortran/108420, fortran/108421, fortran/108451,
         fortran/108453, fortran/108501, fortran/108502, fortran/108527,
         fortran/108529, fortran/108609, fortran/108937, fortran/109186,
         fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
         libquadmath/87204, libquadmath/94756, libstdc++/91456,
         libstdc++/103934, libstdc++/104866, libstdc++/104875,
         libstdc++/105844, libstdc++/106183, libstdc++/107801,
         libstdc++/107814, libstdc++/108030, libstdc++/108118,
         libstdc++/108265, libstdc++/108636, libstdc++/108856,
         libstdc++/108952, libstdc++/109064, libstdc++/109261,
         libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
         middle-end/106190, middle-end/107317, middle-end/108237,
         middle-end/108264, middle-end/108435, middle-end/108459,
         middle-end/108546, middle-end/108625, middle-end/108685,
         middle-end/108854, other/108560, other/109306,
         rtl-optimization/106751, rtl-optimization/107482,
         rtl-optimization/108193, rtl-optimization/108596,
         rtl-optimization/109585, target/70243, target/90458, target/96373,
         target/98776, target/100758, target/104871, target/104921,
         target/105554, target/105599, target/106736, target/106875,
         target/107568, target/107714, target/107863, target/108272,
         target/108348, target/108589, target/108699, target/108807,
         target/108812, target/108881, target/109067, target/109140,
         target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
         testsuite/108973, testsuite/108985, tree-optimization/105484,
         tree-optimization/106809, tree-optimization/107107,
         tree-optimization/107212, tree-optimization/107254,
         tree-optimization/107323, tree-optimization/107451,
         tree-optimization/107554, tree-optimization/107898,
         tree-optimization/107997, tree-optimization/108068,
         tree-optimization/108076, tree-optimization/108095,
         tree-optimization/108199, tree-optimization/108498,
         tree-optimization/108688, tree-optimization/108692,
         tree-optimization/108821, tree-optimization/108950,
         tree-optimization/109176, tree-optimization/109410,
         tree-optimization/109473, tree-optimization/109491,
         tree-optimization/109502, tree-optimization/109573,
         tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
         tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.4
changelog:
  - CVE-2023-4039 GCC mitigation.
    Orabug 35751837.
  - CVE-2022-40982 "Intel Downfall" mitigation.
    Orabug 35751842.
    Add two patches originally from GCC upstream releases/gcc-11 branch.
    gcc11-downfall-disable-gather-in-vec.patch
    gcc11-downfall-support-mno-gather.patch
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> 11.4.1-2.1.0.1
changelog:
  - Forward-port Oracle patches to 11.4.1-2.1.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Qing Zhao <qing.zhao@oracle.com> 11.5.0-2.0.1
changelog:
  - Merge Oracle patches to 11.5.0-2.
    Oracle history:
    July-22-2024 Qing Zhao <qing.zhao@oracle.com> 11.5.0-1.0.1
    - Merge Oracle patches to 11.5.0-1.
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 11.4.1-3.0.1
    - Merge Oracle patches to 11.4.1-3.
    - Delete all the Oracle patches for CVE-2023-4039 and CVE-2022-40982
      since the new gcc includes these patches already.
    October-9-2023 David Faust <david.faust@oracle.com> 11.4.1-2.1.0.1
    - Forward-port Oracle patches to 11.4.1-2.1.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.4
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751837.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751842.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.1
    - Merge all Oracle patches:
    - Add complex divide improvement (11.2.1-2.2.0.1)
      backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
    - Add CTF/BTF support (11.2.1-2.2.0.1)
    - Add -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.1)
    - Add more fixes for -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.2)
    - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
      PR104550 and PR102276. (11.2.1-2.2.0.3)
    - NOTE: adjust gcc12-ctf-pre-1-write_symbols-to-support-bitmasks.patch
      for c-family/c-pch.c for 11.2.1-9.4
    - Fix Orabug - 35137216 Backport fix for upstream PR debug/105089 to OL9 GCC
      (11.3.1-2.1.0.2)
      - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
        using the following upstream commits:
        613a6fca75156aadc2e79d78a23e547d39762c1e,
        d0b00e74bf59c73b79471bbe9de19373b8661e20, and
        d634c5d7c78c6ec0fa39d96984460475564519c8
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 11.5.0-5.0.1
changelog:
  - Merge Oracle patches on 11.5.0-5.
    Oracle history:
    February-18-2025 Qing Zhao <qing.zhao@oracle.com> 11.5.0-4.0.1
    - Merge Oracle patches on 11.5.0-4.
    July-23-2024 Qing Zhao <qing.zhao@oracle.com> 11.5.0-2.0.1
    - Merge Oracle patches to 11.5.0-2.
    July-22-2024 Qing Zhao <qing.zhao@oracle.com> 11.5.0-1.0.1
    - Merge Oracle patches to 11.5.0-1.
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 11.4.1-3.0.1
    - Merge Oracle patches to 11.4.1-3.
    - Delete all the Oracle patches for CVE-2023-4039 and CVE-2022-40982
      since the new gcc includes these patches already.
    October-9-2023 David Faust <david.faust@oracle.com> 11.4.1-2.1.0.1
    - Forward-port Oracle patches to 11.4.1-2.1.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.4
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751837.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751842.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.1
    - Merge all Oracle patches:
    - Add complex divide improvement (11.2.1-2.2.0.1)
      backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
    - Add CTF/BTF support (11.2.1-2.2.0.1)
    - Add -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.1)
    - Add more fixes for -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.2)
    - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
      PR104550 and PR102276. (11.2.1-2.2.0.3)
    - NOTE: adjust gcc12-ctf-pre-1-write_symbols-to-support-bitmasks.patch
      for c-family/c-pch.c for 11.2.1-9.4
    - Fix Orabug - 35137216 Backport fix for upstream PR debug/105089 to OL9 GCC
      (11.3.1-2.1.0.2)
      - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
        using the following upstream commits:
        613a6fca75156aadc2e79d78a23e547d39762c1e,
        d0b00e74bf59c73b79471bbe9de19373b8661e20, and
        d634c5d7c78c6ec0fa39d96984460475564519c8
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 11.5.0-5.0.1
changelog:
  - Merge Oracle patches to 11.5.0-5.
    Oracle history:
    July-23-2024 Qing Zhao <qing.zhao@oracle.com> 11.5.0-2.0.1
    - Merge Oracle patches to 11.5.0-2.
    July-22-2024 Qing Zhao <qing.zhao@oracle.com> 11.5.0-1.0.1
    - Merge Oracle patches to 11.5.0-1.
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 11.4.1-3.0.1
    - Merge Oracle patches to 11.4.1-3.
    - Delete all the Oracle patches for CVE-2023-4039 and CVE-2022-40982
      since the new gcc includes these patches already.
    October-9-2023 David Faust <david.faust@oracle.com> 11.4.1-2.1.0.1
    - Forward-port Oracle patches to 11.4.1-2.1.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.4
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751837.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751842.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.1
    - Merge all Oracle patches:
    - Add complex divide improvement (11.2.1-2.2.0.1)
      backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
    - Add CTF/BTF support (11.2.1-2.2.0.1)
    - Add -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.1)
    - Add more fixes for -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.2)
    - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
      PR104550 and PR102276. (11.2.1-2.2.0.3)
    - NOTE: adjust gcc12-ctf-pre-1-write_symbols-to-support-bitmasks.patch
      for c-family/c-pch.c for 11.2.1-9.4
    - Fix Orabug - 35137216 Backport fix for upstream PR debug/105089 to OL9 GCC
      (11.3.1-2.1.0.2)
      - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
        using the following upstream commits:
        613a6fca75156aadc2e79d78a23e547d39762c1e,
        d0b00e74bf59c73b79471bbe9de19373b8661e20, and
        d634c5d7c78c6ec0fa39d96984460475564519c8
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: David Faust <david.faust@oracle.com> - 11.2.1-4.0.1
changelog:
  - Sync with gcc-toolset-11-gcc version 11.2.1-9.1.0.3
  - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
    using the following upstream commits (Indu Bhagat):
      613a6fca75156aadc2e79d78a23e547d39762c1e,
      d0b00e74bf59c73b79471bbe9de19373b8661e20, and
      d634c5d7c78c6ec0fa39d96984460475564519c8
  - Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-5.0.2
changelog:
  - CVE-2023-4039 mitigation.
    Orabug 35752004.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.4.1-3.0.1
changelog:
  - Initial release for OL9.
  - Build libisl from source on OL9 to avoid dependency issues.
  - Sync with gcc-toolset-11-gcc version 11.4.1-3.0.1
  - Remove patches for CVE-2023-4039, the fixes are present in updated sources.
  - Remove patches for ampere1, the changes are present in updated sources.
  - Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.5.0-2.0.1
changelog:
  - Sync with gcc-toolset-11-gcc version 11.5.0-2.0.1
  - Merge Oracle patches to 11.5.0-2 (Qing Zhao).
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.4.3-5.1
changelog:
  - patch: Run PBKDF benchmark with 8 bytes long well-known passphrase.
  - patch: Change tests to use passphrases with minimal 8 chars length.
  - patch: Add FIPS related error message in keyslot add code.
  - Resolves: #2151576


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Ondrej Kozina <okozina@redhat.com> - 2.7.2-2
changelog:
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - patch: Abort online reencryption for misconfigured devices.
  - patch: Harden online reencryption checks in initialization phase.
  - patch: Fix detection of direct-io with suspended devices.
  - patch: Return suspended status also for unknow target types.
  - patch: Do not handle device as suspended on error.
  - Resolves: RHEL-39003 RHEL-41238


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013578 - Rebase to Samba 4.15.3
  - resolves: rhbz#2028026 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#2033317 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-100
changelog:
  - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
  - resolves: #2039154 - Fix CVE-2021-20316
  - resolves: #2044238 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7x
  - resolves: #2044239 - [smb] Segmentation fault when joining the domain
  - resolves: #2044241 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED
  - resolves: #2044255 - Fix CVE-2021-43566


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-100
changelog:
  - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
  - resolves: #2046129 - Fix CVE-2021-44141
  - resolves: #2046154 - Fix CVE-2021-44142
  - resolves: #2044405 - Fix printing no longer works on Windows 7
  - resolves: #2049485 - Fix systemd notifications
  - resolves: #2049604 - Disable NTLMSSP for ldap client connections


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-101
changelog:
  - resolves: #2050111 - [RFE] Change change password change prompt phrasing
  - resolves: #2054110 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Andreas Schneider <asn@redhat.com> - 4.15.5-105
changelog:
  - resolves: rhbz#2064765 - Fix 'create krb5 conf = yes` when a KDC has a single
                            IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-108
changelog:
  - resolves: rhbz#2079302 - Fix username map for unix groups
  - resolves: rhbz#2079301 - PAM Kerberos authentication fails with a clock skew error
  - resolves: rhbz#2079305 - Fix UPNs handling in lookup_name*() calls


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.2-101
changelog:
  - resolves: rhbz#2093833 - Fix weak dependency on logrotate
  - resolves: rhbz#2096813 - Fix printer displays only after 300 seconds timeout


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-101
changelog:
  - related: rhbz#2077487 - Rebase Samba to 4.16.3
  - resolves: rhbz#2097655 - The pcap background queue process should not be stopped
  - resolves: rhbz#2100105 - Fix net ads info LDAP server and LDAP server name


author: Andreas Schneider <asn@redhat.com> - 4.17.2-102
changelog:
  - Fix CVE-2022-1615 GnuTLS gnutls_rnd() can fail and give predictable random values
  - resolves: rhbz#2126175


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-103
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2131993


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.4-100
changelog:
  - related: rhbz#2131993 - Update to version 4.17.4
  - resolves: rhbz#2154373 - Fix CVE-2022-38023
  - resolves: rhbz#2143196 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2114884 - Fix id command to return new groups after successful user login
  - resolves: rhbz#2154885 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-102
changelog:
  - resolves: rhbz#2169980 - Fix winbind memory leak
  - resolves: rhbz#2156056 - Fix Samba shares not accessible issue


author: Darren Archibald <darren.archibald@oracle.com> - 4.17.5-103
changelog:
  - resolves: rhbz#2223600 - Fix trust relationship between workstation and DC
  - resolves: rhbz#2222895 - Fix CVE-2023-3347


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.6-101
changelog:
  - resolves: RHEL-11937
    Fix CVE-2023-3961 - smbd must check the pipename
  - resolves: RHEL-11937
    Fix CVE-2023-4091 - SMB clients can truncate files
  - resolves: RHEL-11937
    Fix CVE-2023-42669 - Remove rpcecho server


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: EL Errata <el-errata_ww@oracle.com> - 4.19.4-105.0.1
changelog:
  - s3: winbindd: winbindd_pam: fix leak in extract_pac_vrfy_sigs [Orabug: 36566309]
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371906]


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-9
changelog:
  - 2018948 - Unauthenticated users can't move print jobs in Web UI
  - 1999955 - Printing of banner before PCL file only prints banner
  - 2006713 - Trying to restart and hold a job doesn't work


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - 2217177 - Delays printing to lpd when reserved ports are exhausted
  - 2217284 - The command "cancel -x <job>" does not remove job files
  - 2217954 - Enlarge backlog queue for listen() in cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-26
changelog:
  - RHEL-40388 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: EL Errata <el-errata_ww@oracle.com> - 1.28.7-10.0.1
changelog:
  - header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com)
  - Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-16
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-8
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-14.el9_0.1
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-14.el9_0.5
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Alan Steinberg <alan.steinberg@oracle.com> - 7.76.1-23.el9_2.2
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 7.76.1-23.el9_2.4
changelog:
  - curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545)
  - curl: cookie injection with none file (CVE-2023-38546)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Alan Steinberg <alan.steinberg@oracle.com> - 7.76.1-26.el9_3.3
changelog:
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-7
changelog:
  - Resolves: #2096149 - Fatal error when running "squatter -r user"
  - Resolves: #2096885 - Enhanced TMT testing for centos-stream


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Jakub Martisko <jamartis@redhat.com> - 28-5.1
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  - Add gating.yaml
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Mark Wielaard <mjw@fedoraproject.org> - 0.1-3
changelog:
  - Fix some rpmlint issues, add comments, add license and doc,
    gpg verification, use pkgconfig BuildRequires, enable _hardened_build


author: Mark Wielaard <mjw@redhat.com> - 5.0-1
changelog:
  - Upgrade to upstream 5.0 release.
    - Removes find-debuginfo .sh suffix.
    - This release still has a find-debuginfo.sh -> find-debuginfo symlink.


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Kalev Lember <klember@redhat.com> - 0.26-1
changelog:
  - Update to 0.26
  - Switch to the meson build system
  - Avoid hardcoding man page extensions
  - Drop old emacs-desktop-file-utils obsoletes/provides


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-1
changelog:
  - Fix mpath filtering of NVMe devices.
  - Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
  - Limit pool metadata spare to 16GiB.
  - Improves conversion and allocation of pool metadata.
  - Fix different limits used for metadata by lvm2 and thin-tools.
  - Fix interrupting lvconvert --splitcache command with striped origin volumes.
  - Fix problem with wiping of converted LVs.
  - Fix memleak in scanning.
  - Fix corner case allocation for thin-pools.
  - Fix pvck handling MDA at offset different from 4096.
  - Partial or degraded activation of writecache is not allowed.
  - Enhance error handling in fsadm and handle correct fsck result.
  - Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
  - Support using BLKZEROOUT for clearing devices.
  - Fixed interrup handling.
  - Fix block cache when device has too many failing writes.
  - Fix block cache waiting for IO completion with failing disks.
  - Add configure --enable-editline support as an alternative to readline.
  - Enhance reporting and error handling when creating thin volumes.
  - Enable vgsplit for VDO volumes.
  - Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
  - Restore lost signal blocking while VG lock is held.
  - Improve estimation of needed extents when creating thin-pool.
  - Use extra 1% when resizing thin-pool metadata LV with --use-policy.
  - Enhance --use-policy percentage rounding.
  - Allow pvmove of writecache origin.
  - Report integrity fields.
  - Integrity volumes defaults to journal mode.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.13-1
changelog:
  - Update to upstream version 2.03.13.
  - Change in obtain_devices_list_from_udev default.
  - See WHATS_NEW and WHATS_NEW_DM for more information.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-4
changelog:
  - Remove service based autoactivation.
  - New lvmautoactivation(7) man page.
  - Fix missing PVIDs for multipath devices in system.devices file.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-2
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Restore --reportformat option in pvdisplay.
  - Improve multipath backlist option handling.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-3
changelog:
  - Fix effect of setting multipath_component_detection to 0.
  - Fix lvmdbusd using lvm shell with editline.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-3
changelog:
  - Add 0024-libmultipath-use-typedef-for-keyword-handler-functio.patch
  - Add 0025-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0026-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0027-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0028-libmultipath-improve-checks-for-set_str.patch
  - Add 0029-libmultipath-deprecate-file-and-directory-config-opt.patch
  - Add 0030-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0031-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0032-libmultipath-don-t-return-error-on-invalid-values.patch
    * The above 9 patches fix bz #2017969
  - Add 0033-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2017979
  - Add 0034-multipath-fix-exit-status-of-multipath-T.patch
  - Resolves: bz #2017969, #2017979


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-4
changelog:
  - Add 0035-RH-mpathconf-fix-setting-property_blacklist.patch
  - Add 0036-libmultipath-fix-disassemble-status-for-historical-s.patch
    * Fixes bz #2042032
  - Add 0037-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0038-multipathd-trigger-udev-change-on-path-addition.patch
    * Fixes bz #2028835
  - Resolves: bz #2028835, #2042032


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-5
changelog:
  - Add 0039-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
    * Fixes bz #2050421
  - Add 0040-RH-add-support-to-mpathconf-for-setting-recheck_wwid.patch
    * Fixes bz #2039749
  - Resolves: bz #2039749, #2050421


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-6
changelog:
  - Add 0041-multipathd-handle-fpin-events.patch
  - Add 0042-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
    * Add "marginal_pathgroups fpin" for responding to PFIN-Li events
    * Fixes bz #2053642
  - Modify tests/restate_module
    * Always offline the path with the lowest priority
    * Fixes bz #2052633
  - Resolves: bz #2052633, #2053642


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-9
changelog:
  - Add 0045-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2084356
  - Add 0046-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2084358
  - Add 0047-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0048-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0049-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0050-libmultipath-make-protocol_name-global.patch
  - Add 0051-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0052-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0053-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0054-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0055-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0056-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement the feature from bz #2084365
  - Add 0057-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2084357
  Resolves: bz #2084365, #2084357, #2084358, #2084365


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-11
changelog:
  - Add 0059-multipathd-Add-missing-ctype-include.patch
  - Add 0060-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119896


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-13
changelog:
  - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2125357


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-14
changelog:
  - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133999
  - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133989
  - Resolves: bz #2133989, #2133999


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-15
changelog:
  - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2141860
  - Add 0068-libmultipath-cleanup-remove_feature.patch
  - Add 0069-libmultipath-cleanup-add_feature.patch
  - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2033080
  - Resolves: bz #2033080, #2141860


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-17
changelog:
  - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2145225


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-21
changelog:
  - Add 0085-multipathd-make-pr-registration-consistent.patch
  - Add 0086-libmultipath-make-prflag-an-enum.patch
  - Add 0087-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0088-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164869


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-22
changelog:
  - Add 0089-RH-Add-mpathcleanup.patch
    * Fixes RHEL-782
  - Add 0090-RH-make-listing-return-an-error-if-the-config-file-i.patch
  - Install mpathcleanup
    * Fixes RHEL-781
  - Resolves: #781, #782


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-23
changelog:
  - Add 0091-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Fixes RHEL-6678 (Add support in multipathd for NVMe to listen for FPIN-Li
      events and mark effected paths as marginal)
  - Add 0092-multipath-tools-add-HPE-Alletra-9000-NVMe-to-hardwar.patch
    * Fixes RHEL-1830 (Changes to Arcus NVMeoFC multipath.conf settings for RHEL
      9.x to be included in kernel by default)
  - Resolves: RHEL-6678
  - Resolves: RHEL-1830


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-24
changelog:
  - Add 0093-RH-multipath-add-mpathcleanup-man-page.patch
    * Fixes RHEL-1266 ("There is no man page for mpathcleanup")
  - Resolves: RHEL-1266


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-25
changelog:
  - Add 0094-libmultipath-Add-max_retries-config-option.patch
    * Fixes RHEL-1729 ("Allow multipathd to set the max_retries of the
      scsi_device for paths")
  - Add 0095-libmutipath-Retain-device-size-if-sysfs_get_size-fai.patch
  - Add 0096-multipathd-check-and-update-all-paths-when-in-cli_re.patch
  - Add 0097-multipathd-move-post-reloading-commands-into-resize_.patch
  - Add 0098-multipathd-move-resize_map-to-multipathd-main.c.patch
  - Add 0099-multipathd-Add-auto_resize-config-option.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986
  - Resolves: RHEL-1729


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35
changelog:
  - Add 0124-libmultipath-add-missing-assert-to-checkers.c.patch
  - Add 0125-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch
    * Fixes RHEL-73413
  - Add 0126-libmultipath-export-udev-pthread-cleanup-functions.patch
  - Add 0127-multipathd-set-rport-port_state-to-marginal-for-NVMe.patch
    * Fixes RHEL-67472
  - Resolves: RHEL-73413
  - Resolves: RHEL-67472


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-5
changelog:
  - Add 0018-multipath.conf-fix-typo-in-ghost_delay-description.patch
  - Add 0019-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1982613
  - Add 0020-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1982615
  - Add 0021-libmultipath-deal-with-dynamic-PTHREAD_STACK_MIN.patch
    * Fixes bz #1984921
  - Resolves: bz #1982613, #1982615, #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-6
changelog:
  - Add 0022-multipathd-cli_handlers-cleanup-setting-reply-length.patch
    * Found by corosync
  - Related: bz #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-1
changelog:
  - Update Source to upstream version 0.8.7 plus upstream staged commits
    * Previous patches 0011-0016 & 0018-0022 are included in the source tarball
    * Fixes bz#2017592
  - Rename files
    * Previous patches 0001-0010 are now patches 0013-0022
  - Modify 0018-RH-add-mpathconf.patch
    * merged with previous patch 0017
  - Add 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch
    * Fixes bz#1984303
  - Fix multipath_conf_syntax test to work with bz #1984303
  - Resolves: bz #1984303, #2017592


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-2
changelog:
  - Modify 0017-RH-use-rpm-optflags-if-present.patch
    * use RPM_LF_FLAGS
  - Modify 0018-RH-add-mpathconf.patch
    * update default config to match multipath changes
  - Modify 0022-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
    * fix cmocka vpd tests
  - Rename 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch to
           0023-libmultipath-add-section-name-to-invalid-keyword-out.patch
  - Resolves: bz#2017592


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-2
changelog:
  - Allow non-zero values in unused index block entries.
  - Fix boundary check on the bitset for cached blocks.
  - Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
  - Fix thin_repair checking keys on a node with a zero key.
  - Enhance error message in cache_check suggesting fix when applicable.


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-3
changelog:
  - Fix --version string compatibility with LVM tools.
  - Fix confusing Broken pipe warning when used in lvconvert --repair.


author: Marian Csontos <mcsontos@redhat.com> - 1.1.0-1
changelog:
  - Update to latest upstream release 1.1.0.
  - Support listing the highest mapped block in thin_ls.
  - Introduce thin_migrate for volume migration.
  - See CHANGES.


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Lichen Liu <lichliu@redhat.com> - 1:3.5-2
changelog:
  - Add processor support from SMBIOS-3.6.0
  - Consistently use read_file when reading from a dump file


author: Petr Menšík <pemensik@redhat.com> - 2.85-3
changelog:
  - Send queries only to best domain-specific server (#2047510)
  - Offer alternate DHCPv6 address if requested is already leased (#1998448)


author: Apoorva Eliza John <apoorva.eliza.john@oracle.com> - 6.0.128-2.0.1
changelog:
  - Update to .NET 6.0 to SDK 6.0.128 and Runtime 6.0.28
  - Resolves RHEL-27540
  - CheckCertificateRevocationList flag for SHA1 CAs : Allow certificate validation with SHA-1 signatures
  - Resolves RHEL-28359 and RHEL-25254


author: Tom Deseyn <tom.deseyn@gmail.com> - 6.0.128-2
changelog:
  - We disable checking the signature of the last certificate in a chain
    if the certificate is supposedly self-signed. A side effect of not
    checking the self-signature of such a certificate is that disabled
    or unsupported message digests used for the signature are not
    treated as fatal errors.
  - Resolves: RHEL-28359


author: John McWalters <john.mcwalters@oracle.com> - 7.0.100-0.2.rc1.0.1
changelog:
  - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]


author: Alex Burmashev <alexander.burmashev@oracle.com> - - 7.0.117-1.0.1
changelog:
  - Update to .NET SDK 7.0.117 and Runtime 7.0.17
  - Port revert "Disable implicit rejection for RSA PKCS#1 (#95217)" patch


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.2
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-4074


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-3
changelog:
  - We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
    A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
    digests used for the signature are not treated as fatal errors.
  - Resolves: RHEL-28344


author: Alex Burmashev <alexander.burmashev@oracle.com> - 8.0.102-2.0.1
changelog:
  - Update to .NET SDK 8.0.102 and Runtime 8.0.2
  - Add -dbg subpackages for symbol files
  - Resolves: RHEL-23070


author: Alex Burmashev <alexander.burmashev@oracle.com> - - 8.0.103-2.0.1
changelog:
  - Update to .NET SDK 8.0.103 and Runtime 8.0.3
  - Disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
  - Resolves: RHEL-25254
  - Backport MSBuild locale fix
  - Resolves: RHEL-23936


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-2
changelog:
  - We disable checking the signature of the last certificate in a chain
    if the certificate is supposedly self-signed. A side effect of not
    checking the self-signature of such a certificate is that disabled
    or unsupported message digests used for the signature are not
    treated as fatal errors.
  - Resolves: RHEL-28343


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-11.1
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55211)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55225)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.14-1
changelog:
  - dovecot updated to 2.3.14, pigeonhole to 0.5.14
  - use OpenSSL's implementation of HMAC
  - Remove autocreate, expire, snarf and mail-filter plugins.
  - Remove cydir storage driver.
  - Remove XZ/LZMA write support. Read support will be removed in future release.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.15-1
changelog:
  - dovecot updated to 2.3.15, pigeonhole updated to 0.5.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access (#1979833)
  - CVE-2021-33515: On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client
  - Add TSLv1.3 support to min_protocols.


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Timothy Redaelli <tredaelli@redhat.com> - 21.11.2-1
changelog:
  - Rebase to 21.11.2 (#2126159)
  - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616)


author: Lukas Nykryn <lnykryn@redhat.com> - 055-6.git20210709
changelog:
  - fix(network-manager): don't pull in systemd-udev-settle
  - fix(dracut.sh): handle '-i' option to include files beginning with '.'
  - fix(dracut.sh): handle symlinks appropriately while using '-i' option
  - fix(squash): create relative symlinks
  - feat(squash): install umount util


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 055-38.git20220322
changelog:
  - revert(lvm): remove snapshot feature
  - revert(lvm): remove lvmetad config changes
  - revert(lvm): remove 69-dm-lvm-metad.rules
  - fix(lvm): replace --partial option
  - feat(lvm): update lvm command options
  - feat(lvm): use generated filter when none is set
  - feat(lvm): only run lvchange for LV that is seen on devices
  - fix(lvm): restore setting LVM_MD_PV_ACTIVATED


author: Pavel Valena <pvalena@redhat.com> - 055-40.git20220404
changelog:
  - fix(kernel-modules): detect block device's hardware driver
  - fix(dracut-initramfs-restore.sh): check if SELINUXTYPE is set


author: Pavel Valena <pvalena@redhat.com> - 055-45.git20220404
changelog:
  - fix(bluetooth): nullglob should not be needed
  - fix(dracut-install): do not fail when SOURCE is optional and
  - fix(test): nullglob should not be needed
  - fix(10i18n): stop leaking shell options
  - docs: do not mention nullglob in cases where it's not needed


author: EL Errata <el-errata_ww@oracle.com> - 055-45.git20220404.0.1
changelog:
  - network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: EL Errata <el-errata_ww@oracle.com> - 057-44.git20230822.0.1
changelog:
  - fix(systemd): add missing modprobe@.service [Orabug: 35267570]
  - Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
  - network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: EL Errata <el-errata_ww@oracle.com> - 057-70.git20240819.0.1
changelog:
  - Ship Oracle IMA certificate [Orabug: 35992862]
  - Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate [Orabug: 35992862]
  - fix(systemd): add missing modprobe@.service [Orabug: 35267570]
  - Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
  - network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 057-80.git20250411
changelog:
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - feat(dracut.sh): add --add-confdir option


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.18-1
changelog:
  - New release: 1.18
  - Use debugging info to pretty print raw data
  - Store percpu variables in vmlinux BTF.
  - Fixes to address segfaults on the gdb testsuite binaries
  - Bail out on partial units for now, avoiding segfaults and providing warning to user.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.19-1
changelog:
  - New release: 1.19
  - Split BTF
  - DWARF workarounds for DW_AT_declaration
  - Support cross-compiled ELF binaries with different endianness
  - Support showing typedefs for anonymous types
  - Speedups using libbpf algorithms
  - See changes-v1.19 for a complete and more detailed list of changes


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.20-1
changelog:
  - New release: v1.20
  - btf_encoder:
  - Improve ELF error reporting using elf_errmsg(elf_errno())
  - Improve objcopy error handling.
  - Fix handling of 'restrict' qualifier, that was being treated as a 'const'.
  - Support SHN_XINDEX in st_shndx symbol indexes
  - Cope with functions without a name
  - Fix BTF variable generation for kernel modules
  - Fix address size to match what is in the ELF file being processed.
  - Use kernel module ftrace addresses when finding which functions to encode.
  - libbpf:
  - Allow use of packaged version.
  - dwarf_loader:
  - Support DW_AT_data_bit_offset
  - DW_FORM_implicit_const in attr_numeric() and attr_offset()
  - Support DW_TAG_GNU_call_site, standardized rename of DW_TAG_GNU_call_site.
  - build:
  - Fix compilation on 32-bit architectures.


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-2
changelog:
  - edk2-build-script-update.patch [bz#2183230]
  - edk2-PcdDxeNxMemoryProtectionPolicy-update.patch [bz#2183230]
  - Resolves: bz#2183230
    ([edk2] Instruction abort exception when booting a VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-3
changelog:
  - edk2-add-aarch64-qcow2-images.patch [bz#2186754]
  - edk2-update-json-files.patch [bz#2186754]
  - edk2-add-libvirt-version-conflict.patch [bz#2186754]
  - edk2-add-dbx-update-blob-rh-only.patch [RHEL-377]
  - edk2-spec-apply-dbx-update-rh-only.patch [RHEL-377]
  - Resolves: bz#2186754
    (edk2: Add firmware images in qcow2 format)
  - Resolves: RHEL-377
    (edk2: ship secure build variable store with latest dbx updates)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-4
changelog:
  - edk2-OvmfPkg-Clarify-invariants-for-NestedInterruptTplLib.patch [bz#2189136]
  - edk2-OvmfPkg-Relax-assertion-that-interrupts-do-not-occur.patch [bz#2189136]
  - Resolves: bz#2189136
    (windows 11 installation broken with edk2-20230301gitf80f052277c8-1.el9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-5
changelog:
  - edk2-dbx-update-2023-05-09-black-lotus-edition.patch [RHEL-470]
  - edk2-json-descriptors-explicitly-set-mode-split.patch [RHEL-469]
  - Resolves: RHEL-470
    (edk2: update variable store with latest dbx updates (may 9, black lotus edition))
  - Resolves: RHEL-469
    (explicitly set mode = split in firmware json description files)


author: Oliver Steffen <osteffen@redhat.com> - 20230524-1
changelog:
  - Rebase to edk2-stable202305 tag [RHEL-585]
    Resolves: RHEL-585
    ([rhel-9.3] rebase EDK2 to edk2-stable202305)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-2
changelog:
  - edk2-ArmVirt-add-VirtioSerialDxe-to-ArmVirtQemu-builds.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtio.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtioPc.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-set-up-virtio-serial-.patch [RHEL-643]
  - edk2-OvmfPkg-VirtioSerialDxe-use-TPL_NOTIFY.patch [RHEL-643]
  - edk2-OvmfPkg-VirtioSerialDxe-Remove-noisy-debug-print-on-.patch [RHEL-643]
  - edk2-OvmfPkg-PlatformInitLib-limit-phys-bits-to-46.patch [bz#2174749]
  - edk2-Revert-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174749]
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2124143]
  - edk2-OvmfPkg-PlatformInitLib-check-PcdUse1GPageTable.patch [RHEL-644]
  - edk2-OvmfPkg-OvmfPkgIa32X64-enable-1G-pages.patch [RHEL-644]
  - edk2-OvmfPkg-MicrovmX64-enable-1G-pages.patch [RHEL-644]
  - Resolves: RHEL-643
    (add virtio serial support to armvirt)
  - Resolves: bz#2174749
    ([edk2] re-enable dynamic mmio window)
  - Resolves: bz#2124143
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-9])
  - Resolves: RHEL-644
    (enable gigabyte pages)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-3
changelog:
  - edk2-OvmfPkg-AmdSev-fix-BdsPlatform.c-assertion-failure-d.patch [bz#2190244]
  - edk2-OvmfPkg-IoMmuDxe-add-locking-to-IoMmuAllocateBounceB.patch [bz#2211060]
  - edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch [bz#2218196]
  - Resolves: bz#2190244
    ([EDK2] [AMDSERVER 9.3 Bug] OVMF AP Creation Fixes)
  - Resolves: bz#2211060
    (SEV-es guest randomly stuck at boot to hard drive screen from powerdown and boot again)
  - Resolves: bz#2218196
    (Add vtpm devices with OVMF.amdsev.fd causes VM reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-4
changelog:
  - edk2-OvmfPkg-ResetVector-Fix-assembler-bit-test-flag-chec.patch [RHEL-9943]
  - Resolves: RHEL-9943
    ([EDK2][AMDSERVER Bug] OvmfPkg/ResetVector: Fix assembler bit test flag check [rhel-9.3.0.z])


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 20230524-4.el9_3.2
changelog:
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Updating-SecurityFixes.yaml.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - Resolves: RHEL-21841
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-9])
  - Resolves: RHEL-21843
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-9])
  - Resolves: RHEL-21845
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-9])
  - Resolves: RHEL-21847
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-9])
  - Resolves: RHEL-21849
    (TRIAGE CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-9])
  - Resolves: RHEL-21851
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-9])
  - Resolves: RHEL-21853
    (TRIAGE CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-9
changelog:
  - edk2-remove-amd-sev-feature-flag-from-secure-boot-builds-.patch [bz#2169247]
  - Resolves: bz#2169247
    ([edk2] Install a sev guest with enrolled secure boot failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-1
changelog:
  - Rebase to edk2-stable202311 [RHEL-12323]
  - Switch to OpenSSL 3.0 [RHEL-49]
  - Resolves: RHEL-12323
    (Rebase EDK2 for RHEL 9.4)
  - Resolves: RHEL-49
    (consume / bundle RHEL-9 OpenSSL (version 3.0.x) in RHEL-9 edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-2
changelog:
  - edk2-OvmfPkg-RiscVVirt-use-gEfiAuthenticatedVariableGuid-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-3
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21155]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21155]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21155]
  - Resolves: RHEL-21155
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-4
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-5
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411-2.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-411-3.patch [RHEL-21157]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21157]
  - edk2-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch [RHEL-21704]
  - edk2-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch [RHEL-21704]
  - edk2-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch [RHEL-21704]
  - edk2-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch [RHEL-21704]
  - Resolves: RHEL-21157
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-9])
  - Resolves: RHEL-21704
    (vGPU VM take several minutes to show tianocore logo if firmware is ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-6.el9_4.1
changelog:
  - edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-30156]
  - edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-30156]
  - Resolves: RHEL-30156
    (CVE-2022-36765 edk2: integer overflow in CreateHob() could lead to HOB OOB R/W [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-6.el9_4.2
changelog:
  - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch [RHEL-40270 RHEL-40272]
  - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch [RHEL-40270 RHEL-40272]
  - edk2-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch [RHEL-40270 RHEL-40272]
  - edk2-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch [RHEL-40270 RHEL-40272]
  - edk2-SecurityPkg-RngDxe-add-rng-test.patch [RHEL-40270 RHEL-40272]
  - edk2-OvmfPkg-wire-up-RngDxe.patch [RHEL-40270 RHEL-40272]
  - edk2-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch [RHEL-40270 RHEL-40272]
  - edk2-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch [RHEL-40270 RHEL-40272]
  - Resolves: RHEL-40270
    (CVE-2023-45237 edk2: Use of a Weak PseudoRandom Number Generator [rhel-9.4.z])
  - Resolves: RHEL-40272
    (CVE-2023-45236 edk2: Predictable TCP Initial Sequence Numbers [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-6.el9_4.3
changelog:
  - edk2-OvmfPkg-Add-Hash2DxeCrypto-to-OvmfPkg.patch [RHEL-46976]
  - edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-54188]
  - edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-54188]
  - Resolves: RHEL-46976
    (No http boot support on edk2-ovmf-20231122-6.el9_4.2)
  - Resolves: RHEL-54188
    ([RHEL-9.4.z] edk2 hit Failed to generate random data)


author: Jon Maloy <jmaloy@redhat.com> - 20231122-6.el9_4.4
changelog:
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55337]
  - Resolves: RHEL-55337
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240214-2
changelog:
  - edk2-OvmfPkg-PlatformPei-log-a-warning-when-memory-is-tig.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-consider-AP-stacks-for-pei-memor.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-rewrite-page-table-calculation.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-log-pei-memory-cap-details.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p2.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p3.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p4.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p5.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-return-early-in-GetBspNumber.patch [RHEL-22202]
  - Resolves: RHEL-22202
    ([EDK2] Support booting with 4096 vcpus)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-1
changelog:
  - Rebase to edk2-stable202405
  - Bumo openssl to 8e5beb77088b
  - Resolves: RHEL-32486
    (rebase to edk2-stable202405 [rhel-9])
  - Resolves: RHEL-36446
    (edk2: enable MOR [rhel-9])
  - Resolves: RHEL-21653
    (CVE-2023-6237 edk2: openssl: Excessive time spent checking invalid RSA public keys [rhel-9])
  - Resolves: RHEL-21150
    (CVE-2023-6129 edk2: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC)
  - Resolves: RHEL-22490
    (CVE-2024-0727 edk2: openssl: denial of service via null dereference [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-2
changelog:
  - edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-43442]
  - Resolves: RHEL-43442
    (edk2 disconnects abnormally before loading the kernel)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-3
changelog:
  - edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45899]
  - edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45899]
  - Resolves: RHEL-45899
    ([RHEL-9.5.0] edk2 hit Failed to generate random data)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-4
changelog:
  - edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]
  - Resolves: RHEL-56081
    ([EDK2] Shim fallback reboot workaround might not work on SNP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-5
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]
  - Resolves: RHEL-45847
    ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-6
changelog:
  - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]
  - Resolves: RHEL-56974
    (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])
  - Resolves: RHEL-55336
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])


author: Alex Burmashev <alexander.burmashev@oracle.com> - 20240524-6.0.1.el9_5.3
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]
  - Resolves: RHEL-65725
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])
  - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]
  - Resolves: RHEL-56248
    (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])
  - Resolves: RHEL-60833
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20221207gitfff6d81270b5-8
changelog:
  - edk2-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174605]
  - Resolves: bz#2174605
    ([EDK2] disable dynamic mmio window)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-7
changelog:
  - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]
  - Resolves: RHEL-56248
    (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])
  - Resolves: RHEL-60833
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-8
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]
  - Resolves: RHEL-65725
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.183-1
changelog:
  - Upgrade to upstream 0.183
    - debuginfod: New thread-busy metric and more detailed error metrics.
      New --fdcache-mintmp and tracking of filesystem freespace.
    - debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h can
      be used to dlopen the libdebuginfod.so library.
      New function debuginfod_set_verbose_fd and DEBUGINFOD_VERBOSE
      environment variable.
    - config: profile.sh and profile.csh won't export DEBUGINFOD_URLS
      unless configured --enable-debuginfod-urls[=URLS]
    - elflint, readelf: Recognize SHF_GNU_RETAIN.
      Handle SHT_X86_64_UNWIND as valid relocation target type.


author: Mark Wielaard <mjw@redhat.com> - 0.185-1
changelog:
  - Upgrade to upstream 0.185
    - debuginfod-client: Simplify curl handle reuse so downloads which
                         return an error are retried.
    - elfcompress: Always exit with code 0 when the operation succeeds
                   (even when nothing was done). On error the exit code
                   is now always 1.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)
  - Disable xwidgets (RHEL-33447)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-11.el9_5.1
changelog:
  - Fix man.el shell injection vulnerability (RHEL-79021)
  - Eliminate use of obsolete patch syntax (RHEL-80450)


author: Bhavin Gandhi <bhavin7392@gmail.com> - 1:27.1-1
changelog:
  - emacs-27.1 is available (#1867841)
  - Add systemd-devel to support Type=notify in unit file
  - Build with Cairo and Jansson support
  - Remove ImageMagick dependency as it's no longer used


author: Jan Synáček <jsynacek@redhat.com> - 1:27.1-2
changelog:
  - use make macros (original patch provided by Tom Stellard)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-8.1
changelog:
  - Fix etags local command injection vulnerability (#2184369)
  - Fix htmlfontify.el command injection vulnerability (#2184368)
  - Fix ruby-mode.el local command injection vulnerability (#2184367)
  - Fix ob-latex.el command injection vulnerability (#2184377)


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.9-1.1
changelog:
  - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
  - Resolves: CVE-2022-43680


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-1.1
changelog:
  - CVE-2023-52425: Fix parsing of large tokens
  - CVE-2024-28757: Reject direct parameter entity recursion
  - Resolves: RHEL-29698
  - Resolves: RHEL-29695


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2.1
changelog:
  - Fix multiple CVEs
  - Fix CVE-2024-45492 integer overflow
  - Fix CVE-2024-45491 Integer Overflow or Wraparound
  - Fix CVE-2024-45490 Negative Length Parsing Vulnerability
  - Resolves: RHEL-57510
  - Resolves: RHEL-57497
  - Resolves: RHEL-56763


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Radovan Sroka <rsroka@redhat.com> - 1.1-103
changelog:
  RHEL 9.0.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069122


author: Radovan Sroka <rsroka@redhat.com> - 1.1-104
changelog:
  RHEL 9.1.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069123
  - Faulty handling of static applications
  Resolves: rhbz#2096457


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-102
changelog:
  RHEL 9.1.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100041
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2097385
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070655
  - Introduce ppid rule attribute
  Resolves: rhbz#2102558
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111244
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111938
  - Remove dnf plugin
  Resolves: rhbz#2113959
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2115849


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-102.7
changelog:
  RHEL 9.1.0.Z ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2137254
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2137263


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-104
changelog:
  RHEL 9.2.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2097077
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2136802
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2160517
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2160518
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: RHEL-192


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-627
  - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
  Resolves: RHEL-817
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-730
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-816


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-16
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2081235


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-25
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2093216


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-30.1
changelog:
  - fence_ibm_vpc: add token cache support
    Resolves: rhbz#2127878
  - add azure-identity and dependencies
    Resolves: rhbz#2127882


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-45
changelog:
  - fence_aws: add --skip-race-check parameter to allow running outside
    of AWS network
    Resolves: rhbz#2183162


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
changelog:
  - bundled dateutil: fix tarfile CVE-2007-4559
    Resolves: rhbz#2217902
  - fence_ipmilan: fix typos in metadata
    Resolves: rhbz#2224267


author: Alan Steinberg <alan.steinberg@oracle.com> - 4.10.0-55.2
changelog:
  - python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)
  - python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)


author: Akshata Konala <akshata.konala@oracle.com> - 4.10.0-55.3
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5396
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-9446


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62.1
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29668


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-66
changelog:
  - Add missing licenses to spec-file
    Resolves: RHEL-27929
  - ha-cloud-support: fix aliyun-cli
    Resolves: RHEL-28097


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-69
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29649


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-70
changelog:
  - fence_aliyun: add credentials file support, filter parameter, and
    optimize log output
    Resolves: RHEL-31488, RHEL-31485, RHEL-31483


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-73
changelog:
  - fence_vmware_rest: detect if the API user has sufficient rights to
    manage the fence device
    Resolves: RHEL-25256


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-76.1
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-59882


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-76.6
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83487


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-77
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-59878
  - ha-cloud-support: remove bundled awscli and use awscli2 package
    instead
    Resolves: RHEL-60020


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-80
changelog:
  - fence_mpath: add support for hex-key format (used in multipath.conf)
    Resolves: RHEL-56138
  - fence_scsi/fence_mpath: add support for SPC-4 disks
    Resolves: RHEL-7629


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-81
changelog:
  - fence_ibm_powervs: add private endpoint and token file support
    Resolves: RHEL-62206
  - ha-cloud-support: bundle libs for the powervs-subnet resource agent
    Resolves: RHEL-64023


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-85
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76493


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: EL Errata <el-errata_ww@oracle.com> - 102.3.0-6.0.1
changelog:
  - Removed Upstream references
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Darren Archibald <darren.archibald@oracle.com> - 115.5.0-1.0.1
changelog:
  - Update to 115.5.0 build1
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 115.6.0-1.0.1
changelog:
  - Udate to 115.6.0 build1
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Codrin Pruteanu <codrin.pruteanu@oracle.com> - 128.10.0-1.0.1
changelog:
  - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Fixes: RHEL-64749


author: EL Errata <el-errata_ww@oracle.com> - 91.10.0-1.0.1
changelog:
  - Replaced upstream package with oracle-indexhtml [Orabug: 33802044]
  - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
  - Removed Upstream references


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-3
changelog:
  - Add back fullname property at the scan matching phase for the backward compatibility.
    Resolves: rhbz#1902881


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-1
changelog:
  - Update to 20201107 version (#1895648)
  - removed %gittag0 macro, as it cause problem to automated package update script


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Antonio Torres <antorres@redhat.com> - 3.0.21-25
changelog:
  - Revert "Allow to connect to partially open LDAP handle"
  - Use infinite timeout (openldap default) when using LDAP+start-TLS
  - Update openssl dependency to not check epoch (was causing detection issues)
    Related: rhbz#1992551


author: Antonio Torres <antorres@redhat.com> - 3.0.21-31
changelog:
  - Update OpenSSL 3.0 support backport to current v3.0.x branch state
  - Add "--enable-fips-workaround" to build options
    Related: rhbz#2083699


author: Antonio Torres <antorres@redhat.com> - 3.0.21-34
changelog:
  - Use GID / UID 95 as it's reserved for FreeRADIUS (https://pagure.io/setup/blob/07f8debf03dfb0e5ed36051c13c86c8cd00cd241/f/uidgid#_107)
    Resolves: #2095403


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83105


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Akira TAGOH <tagoh@redhat.com> - 1.0.8-2
changelog:
  - Restore the deprecated API that was accidentally removed in the previous release.
    Resolves: rhbz#1787293


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-4
changelog:
  - Resolves: #1958155 - Upgrading frr unconditionally creates /etc/frr/frr.conf, breaking existing configuration


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-1
changelog:
  - Resolves: #2129731 - Rebase FRR to the latest version
  - Resolves: #2129743 - Add targeted SELinux policy for FRR
  - Resolves: #2127494 - BGP incorrectly withdraws routes on graceful restart capable routers


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-2
changelog:
  - Resolves: #2128738 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-6
changelog:
  - Resolves: #2184870 - Reachable assertion in peek_for_as4_capability function
  - Resolves: #2196795 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196796 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196794 - out-of-bounds read exists in the BGP daemon of FRRouting


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 8.3.1-11.1
changelog:
  - Resolves: #2231001 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-12
changelog:
  - Resolves: RHEL-3541 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-4.1
changelog:
  - Resolves: RHEL-78365 - FRR gives false warning when Graceful Restart enabled
  - Resolves: RHEL-78357 - BGP with BFD has a dropped Connection before peering established
  - Resolves: RHEL-78319 - BFD status down in FRR does not bring down BGP session between peers


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: EL Errata <el-errata_ww@oracle.com> - 1.7.4-2.0.1
changelog:
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)
  - Update SBAT data to include Oracle [Oracle: 33072886]


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: EL Errata <el-errata_ww@oracle.com> - 1.7.9-1.0.1
changelog:
  - Update signing certificate [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)
  - Update SBAT data to include Oracle [Oracle: 33072886]


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: EL Errata <el-errata_ww@oracle.com> - 1.8.16-1.0.1
changelog:
  - Drop pesign.service restart in postun [Orabug: 34760075]
  - Update signing certificate [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)
  - Update SBAT data to include Oracle [Oracle: 33072886]


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Michal Schorm <mschorm@redhat.com> - 26.4.8-2
changelog:
  - Switch from SCONS build tooling to CMAKE build tooling
  - Use upstream variants of Systemd service file and Systemd service file wrapper srcipt


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 26.4.11-1.0.1
changelog:
  - Requirement to delete garbd-wrapper script and lp1184034 test case
    without using patches. Patches from previous release have been deleted
  - Drop nmap-ncat requirement. [Orabug: 34116228]
  - Added galera-skip-lp1184034-testcase.patch
  - Added backport-removes-nmap-probing-in-garbd-wrapper.patch


author: David Sloboda <david.x.sloboda@oracle.com> - 26.4.16-1.0.1
changelog:
  - Drop nmap-ncat requirement. [Orabug: 34116228]
  - Requirement to delete garbd-wrapper script and lp1184034 test case
    without using patches. [Orabug: 34116228]


author: Darren Archibald <darren.archibald@oracle.com> - 26.4.20-1.0.1
changelog:
  - Drop nmap-ncat requirement. [Orabug: 34116228]
  - Requirement to delete lp1184034 test case without using patches.


author: Mark Will <mark.will@oracle.com> - 26.4.9-2.0.1
changelog:
  - Drop nmap-ncat requirement. [Orabug: 34116228]
  - Added galera-skip-lp1184034-testcase.patch
  - Added backport-removes-nmap-probing-in-garbd-wrapper.patch


author: David Sloboda <david.x.sloboda@oracle.com> - 26.4.9-2.0.2
changelog:
  - Requirement to delete garbd-wrapper script and lp1184034 test case
    without using patches. Patches from previous release have been deleted


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 10.97-1
changelog:
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)


author: Nick Clifton <nickc@redhat.com> - 11.02-1
changelog:
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.2
changelog:
  - CVE-2023-4039 GCC mitigation.
    Orabug 35751965.
  - CVE-2022-40982 "Intel Downfall" mitigation.
    Orabug 35751972.
    Add two patches originally from GCC upstream releases/gcc-11 branch.
    gcc12-downfall-disable-gather-in-vec.patch
    gcc12-downfall-support-mno-gather.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Jose E. Marchesi <jose.marchesi@oracle.com> 12.2.1-7.6.0.1
changelog:
  - Forward-port Oracle patches to 12.2.1-7.6.
    - Reviewed by: Cupertino Miranda <cupertino.miranda@oracle.com>
    Oracle history:
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.2
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751965.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751972.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      gcc12-downfall-disable-gather-in-vec.patch
      gcc12-downfall-support-mno-gather.patch
    - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.7.0.1
changelog:
  - Merge Oracle patches to 12.2.1-7.7.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    May-15-2024 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.6.0.2
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
    gcc14-pr111407.patch
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Add support for -mpreserve-args in aarch64.
    Orabug 36399592.
    Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    Oracle history:
    May-03-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 12.2.1-7.6.0.1
    - Forward-port Oracle patches to 12.2.1-7.6.
      - Reviewed by: Cupertino Miranda <cupertino.miranda@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.2
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751965.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751972.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      gcc12-downfall-disable-gather-in-vec.patch
      gcc12-downfall-support-mno-gather.patch
    - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.7.0.2
changelog:
  - Fix Orabug 36878992, i.e, the same bug as GCC PR116585.
    gcc15-pr116585.patch
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    September-3-2024 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.7.0.1
    - Merge Oracle patches to 12.2.1-7.7.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-15-2024 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.6.0.2
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
    gcc14-pr111407.patch
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    - Add support for -mpreserve-args in aarch64.
    Orabug 36399592.
    Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>
    Oracle history:
    May-03-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 12.2.1-7.6.0.1
    - Forward-port Oracle patches to 12.2.1-7.6.
      - Reviewed by: Cupertino Miranda <cupertino.miranda@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 12.2.1-7.4.0.2
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751965.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751972.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      gcc12-downfall-disable-gather-in-vec.patch
      gcc12-downfall-support-mno-gather.patch
    - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217814)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-1
changelog:
  - Rebase to 2.40.
  - Retire: binutils-package-metadata.patch
  - Retire: binutils-gas-dwarf-skip-empty-functions.patch
  - Retire: binutils-CVE-38128-dwarf-abbrev-parsing.patch
  - Retire: binutils-readelf-no-sections.patch
  - Retire: binutils-libiberty-configure-compile-warnings.patch
  - Retire: binutils-CVE-2022-4285.patch


author: Nick Clifton <nickc@redhat.com> - 2.40-2
changelog:
  - Spec file: Remove duplicate gprofng debug file entries.
  - Spec file: Fix testsuite failures for RiscV64.


author: Nick Clifton <nickc@redhat.com> - 2.40-7
changelog:
  - Spec File: Fix typo.  (#2186396)
  - BFD library: Fix illegal memory access when loading corrupt symbol version info.  (#2186579)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.40-21.0.1
changelog:
  - Forward-port Oracle patchs to 2.40-21.
    - Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    Oracle history:
    December-15-2023 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.40-13.0.1
    - libctf, link: fix CU-mapped links with CTF_LINK_EMPTY_CU_MAPPINGS.
      Backport of upstream commit 869a750c0ec0abcab84e38a43a1ed73321ef4371.
      [Orabug: 36113992]
    - Reviewed-by: David Faust <david.faust@oracle.com>


author: Marek Polacek <polacek@redhat.com> 13.1.1-1
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - GCC 13.1 release
    - PRs c/107041, target/109566
  - remove libcc1


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/91618, c++/96604, c++/109506, c++/109640, c++/109642, c++/109666,
  	c++/109671, c++/109756, c/107682, c/109409, c/109412, debug/109676,
  	fortran/109622, libffi/109447, libgomp/108098, libstdc++/40380,
  	libstdc++/109694, libstdc++/109703, rtl-optimization/109585,
  	target/108758, target/109069, target/109535, target/109661,
  	target/109762, tree-optimization/109573, tree-optimization/109609,
  	tree-optimization/109724, tree-optimization/109778


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-3
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/80488, c++/83258, c++/97700, c++/103807, c++/109651, c++/109745,
  	c++/109761, c++/109774, c++/109868, c++/109884, fortran/109641,
  	fortran/109846, libstdc++/109816, libstdc++/109883, target/104338,
  	target/109697


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Jose E. Marchesi <jose.marchesi@oracle.com> 13.1.1-4.2.0.1
changelog:
  - gfortran needs install-info at installation time.
    Orabug: 36472775
  - Add missing .2 in DEV-PHASE.
  - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com>


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Qing Zhao <qing.zhao@oracle.com> 13.3.1-2.2.0.1
changelog:
  - Merge Oracle patches to 13.3.1-2.2.
    Oracle history:
    November-20-2024 Qing Zhao <qing.zhao@oracle.com> 13.3.1-2.1.0.1
    - gfortran needs install-info at installation time.
      Orabug: 36472775


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-16940)


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el9
changelog:
  - Backport five patches to support glibc 2.34 with merged libpthread.
    (Simon Marchi and Kevin Buettner, RH BZ 1971095)


author: Keith Seitz <keiths@redhat.com> - 10.2-6.el9
changelog:
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    (Rogerio Alves, RHBZ 1870029)
  - Backport patches for "Support prefixed instructions in GDB"
    (Will Schmidt and Luis Machado, RHBZ 1870031)


author: Weimin Pan <weimin.pan@oracle.com> - 10.2-9.0.1
changelog:
  - Take out fix for (RHBZ 1935517) which disables libctf.
  - Forward-port CTF patches.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Weimin Pan <weimin.pan@oracle.com> - 10.2-10.0.2
changelog:
  - Add missing patch gdb-orclbz33627477-redirect-output-crash.patch.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Bruno Larsen <blarsen@redhat.com>
changelog:
  - Bakport "Fix assertion failure in copy_type"
    (Tom Tromey, RHBZ 2155439)
  - Bakport "[gdb/testsuite] Fix PR20630 regression test in gdb.base/printcmds.exp"
    (Tom de Vries)


author: Bruno Larsen <blarsen@redhat.com> - 10.2-11.el9
changelog:
  - Backport "libiberty: prevent buffer overflow when decoding user input"
    (Luís Ferreira, RHBZ2132600)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.1.0.1
changelog:
  - Merge Oracle patches for ol9
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    December-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.3
    - OraBug 35407694 Interrupting pstack with ctrl+c  prompts for a kill even if process is not spawned by gdb
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    December-13-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.2
    - OraBug 36055910 Support RDTSCP in RECORD/REPLAY in interpreter mode (record full)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.1
    - Merge Oracle patches for ol9
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-10-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-10.0.2
    - Add missing patch gdb-orclbz33627477-redirect-output-crash.patch.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-10.0.1
    - Forward-port CTF patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-26-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-9.0.1
    - Take out fix for (RHBZ 1935517) which disables libctf.
    - Forward-port CTF patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Weimin Pan <weimin.pan@oracle.com> - 10.2-9.0.1
changelog:
  - Take out fix for (RHBZ 1935517) which disables libctf.
  - Forward port CTF patches.
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-1.el9
changelog:
  - Rebase to gdb-14.2 and update all bug references
    (Resolves: RHEL-39554)
    (Resolves: RHEL-39553)
    (Resolves: RHEL-10550)
    (Resolves: RHEL-39555)
    (Resolves: RHEL-39585)
    (Resolves: RHEL-36211)


author: Claudiu Zissulescu <claudiu.zissulescu-ianculescu@oracle.com> - 14.2-3.0.1
changelog:
  - Merge Oracle patches for ol9-u4.
    Reviewed-by: [TBD]
    Oracle history:
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-13.0.1
    - Merge Oracle patches for ol9-u4.
      Reviewed-by: David Faust <david.faust@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-13.0.1
    - Merge Oracle patches for ol9-u4 beta.
     Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    December-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.1.0.1
    - Merge Oracle patches for ol9
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    December-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.3
    - OraBug 35407694 Interrupting pstack with ctrl+c  prompts for a kill even if process is not spawned by gdb
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    December-13-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.2
    - OraBug 36055910 Support RDTSCP in RECORD/REPLAY in interpreter mode (record full)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.1
    - Merge Oracle patches for ol9
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-10-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-10.0.2
    - Add missing patch gdb-orclbz33627477-redirect-output-crash.patch.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-10.0.1
    - Forward-port CTF patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-26-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-9.0.1
    - Take out fix for (RHBZ 1935517) which disables libctf.
    - Forward-port CTF patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Claudiu Zissulescu <claudiu.zissulescu-ianculescu@oracle.com> - 14.2-4.0.1
changelog:
  - Merge Oracle patches for ol9-u5.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    October-22-2024 Claudiu Zissulescu <claudiu.zissulescu-ianculescu@oracle.com> - 14.2-3.0.1
    - Merge Oracle patches for ol9-u4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-13.0.1
    - Merge Oracle patches for ol9-u4.
      Reviewed-by: David Faust <david.faust@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-13.0.1
    - Merge Oracle patches for ol9-u4 beta.
     Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    December-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.1.0.1
    - Merge Oracle patches for ol9
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    December-14-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.3
    - OraBug 35407694 Interrupting pstack with ctrl+c  prompts for a kill even if process is not spawned by gdb
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    December-13-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.2
    - OraBug 36055910 Support RDTSCP in RECORD/REPLAY in interpreter mode (record full)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 10.2-11.0.1
    - Merge Oracle patches for ol9
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-10-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-10.0.2
    - Add missing patch gdb-orclbz33627477-redirect-output-crash.patch.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-10.0.1
    - Forward-port CTF patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-26-2022 Weimin Pan  <weimin.pan@oracle.com> - 10.2-9.0.1
    - Take out fix for (RHBZ 1935517) which disables libctf.
    - Forward-port CTF patches.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Ray Strode <rstrode@redhat.com> - 40.1-9
changelog:
  - Synchronize permission and group ownership for log dir between
    rpm file manifest and daemon expectations.
    Resolves: #1999586


author: Ray Strode <rstrode@redhat.com> - 40.1-12
changelog:
  - More fixes from RHEL 8:
    - Fix DisallowTCP=false
    - Fix crash when both wayland and xorg are unavailable
    Related: #2056931


author: Ray Strode <rstrode@redhat.com> - 40.1-13.4
changelog:
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2073372


author: Ray Strode <rstrode@redhat.com> - 40.1-15
changelog:
  - Fix accountsservice user templates
    Resolves: #2062827
  - Properly force Xorg on matrox cards
    Related: #2074013
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2074014


author: Ray Strode <rstrode@redhat.com> - 40.1-23
changelog:
  - Make /var/log/gdm tmpfiles.d snippet match files manifest
    to fix installability test
    Related: RHEL-19410


author: Milan Crha <mcrha@redhat.com> - 2.6.0-8
changelog:
  - Backport Fedora change to provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format)
  - Resolves: RHEL-78739


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-15
changelog:
  - RHEL-39110 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Josef Ridky <jridky@redhat.com> - 2:2.99.8-4
changelog:
  - Applying fixes for vulnerabilities that led to possible RCE conditions.
  - Fixes: CVE-2023-44441 CVE-2023-44442 CVE-2023-44443 CVE-2023-44444
  - Resolves: RHEL-86048 RHEL-86045 RHEL-86042 RHEL-86039


author: Josef Ridky <jridky@redhat.com> - 2:2.99.8-4
changelog:
  - Applying fixes for vulnerabilities that led to possible RCE conditions.
  - Fixes: CVE-2023-44441 CVE-2023-44442 CVE-2023-44443 CVE-2023-44444
  - Resolves: RHEL-86049 RHEL-86046 RHEL-86043 RHEL-86040


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.31.1-3
changelog:
  - Fixes CVE-2022-23521 and CVE-2022-41903
  - Tests: try harder to find open ports for apache, git, and svn
  - Resolves: #2162069


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 2.12.0-1
changelog:
  - Update to latest version (#1874604)
  - Remove duplicate docs/man directory (#1852765)
  - Add an option to disable modifying the git filter config (#1768060)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Florian Weimer <fweimer@redhat.com> - 2.34-100.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34318)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
  - CVE-2024-33601: nscd: crash on out-of-memory condition
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
changelog:
  - Forward-port Oracle patches for ol9-u4
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patsy Griffin <patsy@redhat.com> - 2.34-100.3
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39993)


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
changelog:
  Oracle history:
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patsy Griffin <patsy@redhat.com> - 2.34-100.4
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-46763)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.4
changelog:
  - Forward-port Oracle patches for ol9-u4
    Reviewed by: David Faust <david.faust@oracle.com>
    Oracle history:
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patsy Griffin <patsy@redhat.com> - 2.34-113
changelog:
  - CVE-2024-33601 glibc: netgroup cache may terminate daemon on
    memory allocation failure (RHEL-34272)
  - CVE-2024-33602 glibc: netgroup cache assumes NSS callback 
    uses in-buffer strings (RHEL-34274)


author: Patsy Griffin <patsy@redhat.com> - 2.34-115
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39992)


author: Arjun Shankar <arjun@redhat.com> - 2.34-118
changelog:
  - manual: Improve documentation of putc, putwc, getc, and getwc (RHEL-46741)

   Wed Jul 17 2024 DJ Delorie <dj@redhat.com> - 2.34-117
  - manual: add syscalls (RHEL-25257)


author: Patsy Griffin <patsy@redhat.com> - 2.34-122
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36148)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-122.0.1
changelog:
  - Forward-port Oracle patches for ol-stream-9-u5
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    October-1-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.4
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-125.0.1.1
changelog:
  - Forward-port Oracle patches for ol9-u5
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    October-1-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.4
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-125.0.1.3
changelog:
  - Forward-port Oracle patches for ol9-u5 (glibc-2.34-125.0.1.3)
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    November-12-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-125.0.1.1
    - Forward-port Oracle patches for ol9-u5
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-1-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.4
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Claudiu Zissulescu-Ianculescu <claudiu.zissulescu-ianculescu@oracle.com> - 2.34-125.0.1.8
changelog:
  - Forward-port Oracle patches for ol9-u5 (glibc-2.34-125.0.1.8)
    Reviewed by: David Faust <david.faust@oracle.com>
    Oracle history:
    March-10-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-125.0.1.3
    - Forward-port Oracle patches for ol9-u5 (glibc-2.34-125.0.1.3)
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-12-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-125.0.1.1
    - Forward-port Oracle patches for ol9-u5
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-1-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.4
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1
changelog:
  - Forward-port Oracle patches for ol9-u6
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    February-18-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-160.0.1
    - Forward-port Oracle patches for ol9-u6 DP
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-12-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-125.0.1.1
    - Forward-port Oracle patches for ol9-u5
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-1-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.4
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


