# changelog

author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-555.el9]
changelog:
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Xin Long) [RHEL-73625]
  - sctp: fix possible UAF in sctp_v6_available() (Xin Long) [RHEL-73625] {CVE-2024-53139}
  - tipc: fix NULL deref in cleanup_bearer() (Xin Long) [RHEL-72258]
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Xin Long) [RHEL-72258] {CVE-2024-56642}
  - KVM: s390: add gen17 facilities to CPU model (Mete Durlu) [RHEL-50767]
  - KVM: s390: add msa11 to cpu model (Mete Durlu) [RHEL-50767]
  - KVM: s390: add concurrent-function facility to cpu model (Mete Durlu) [RHEL-50767]
  - s390/uv: Provide host-key hashes in sysfs (Mete Durlu) [RHEL-50752]
  - s390/uv: Refactor uv-sysfs creation (Mete Durlu) [RHEL-50752]
  - s390/uvdevice: Support longer secret lists (Mete Durlu) [RHEL-50754]
  - s390/uv: Retrieve UV secrets sysfs support (Mete Durlu) [RHEL-50754]
  - s390/uvdevice: Increase indent in IOCTL definitions (Mete Durlu) [RHEL-50754]
  - s390/uvdevice: Add Retrieve Secret IOCTL (Mete Durlu) [RHEL-50754]
  - s390/uv: Retrieve UV secrets support (Mete Durlu) [RHEL-50754]
  - s390/uv: Use a constant for more-data rc (Mete Durlu) [RHEL-50754]
  - s390: Remove protvirt and kvm config guards for uv code (Mete Durlu) [RHEL-50754]
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Guillaume Nault) [RHEL-73420]
  - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-72264] {CVE-2024-56644}
  - ipv6: Fix soft lockups in fib6_select_path under high next hop churn (Hangbin Liu) [RHEL-73281]
  - selftests: net: really check for bg process completion (Hangbin Liu) [RHEL-73281]
  - ipv6: release nexthop on device removal (Hangbin Liu) [RHEL-73281]
  - selftests: vrf_route_leaking: add local test (Hangbin Liu) [RHEL-73281]
  - ipv6: take care of scope when choosing the src addr (Hangbin Liu) [RHEL-73281]
  - ipv6: fix source address selection with route leak (Hangbin Liu) [RHEL-73281]
  - team: prevent adding a device which is already a team device lower (Hangbin Liu) [RHEL-73276]
  - team: Fix feature exposure when no ports are present (Hangbin Liu) [RHEL-73276]
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Hangbin Liu) [RHEL-73276]
  - team: Fix initial vlan_feature set in __team_compute_features (Hangbin Liu) [RHEL-73276]
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Hangbin Liu) [RHEL-73276]
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features (Hangbin Liu) [RHEL-73276]
  - net, team, bonding: Add netdev_base_features helper (Hangbin Liu) [RHEL-73276]
  - bonding: add ESP offload features when slaves support (Hangbin Liu) [RHEL-73276]
  - net: team: rename team to team_core for linking (Hangbin Liu) [RHEL-73276]
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (CKI Backport Bot) [RHEL-73275]
  - ptp: Fix error message on failed pin verification (CKI Backport Bot) [RHEL-73275]
  - vp_vdpa: fix id_table array not null terminated error (Jon Maloy) [RHEL-69651] {CVE-2024-53110}
  - vdpa/mlx5: Fix invalid mr resource destroy (Jon Maloy) [RHEL-63223] {CVE-2024-47687}
  - net: sched: fix ordering of qlen adjustment (CKI Backport Bot) [RHEL-72377 RHEL-73151] {CVE-2024-53164}
  - net_sched: sch_fq: don't follow the fast path if Tx is behind now (CKI Backport Bot) [RHEL-73151]
  - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for hnodes. (CKI Backport Bot) [RHEL-73151]
  - net: tun: Fix use-after-free in tun_detach() (Jon Maloy) [RHEL-63736] {CVE-2022-49014}
  - i40e: add ability to reset VF for Tx and Rx MDD events (Michal Schmidt) [RHEL-54223]
  - xfs: ensure submit buffers on LSN boundaries in error handlers (Bill O'Donnell) [RHEL-68860]
  - xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code (Bill O'Donnell) [RHEL-68860]
  - xfs: Fix the owner setting issue for rmap query in xfs fsmap (Bill O'Donnell) [RHEL-68860]
  - xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set (Bill O'Donnell) [RHEL-68860]
  - xfs: attr forks require attr, not attr2 (Bill O'Donnell) [RHEL-68860]
  - xfs: convert comma to semicolon (Bill O'Donnell) [RHEL-68860]
  - xfs: honor init_xattrs in xfs_init_new_inode for !ATTR fs (Bill O'Donnell) [RHEL-68860]
  - xfs: allow unlinked symlinks and dirs with zero size (Bill O'Donnell) [RHEL-68860]
  - xfs: restrict when we try to align cow fork delalloc to cowextsz hints (Bill O'Donnell) [RHEL-68860]
  - xfs: fix unlink vs cluster buffer instantiation race (Bill O'Donnell) [RHEL-68860]
  - xfs: match lock mode in xfs_buffered_write_iomap_begin() (Bill O'Donnell) [RHEL-68860]
  - xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery (Bill O'Donnell) [RHEL-68860]
  - xfs: shrink failure needs to hold AGI buffer (Bill O'Donnell) [RHEL-68860]
  - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-50916]
  - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-50916]
  - idpf: set completion tag for "empty" bufs associated with a packet (Michal Schmidt) [RHEL-50916]
  - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-50916]
  - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-50916]
  - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-50916]
  - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-50916]
  - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-50916]
  - idpf: refactor Tx completion routines (Michal Schmidt) [RHEL-50916]
  - idpf: convert to libeth Tx buffer completion (Michal Schmidt) [RHEL-50916]
  - idpf: remove redundant 'req_vec_chunks' NULL check (Michal Schmidt) [RHEL-50916]
  - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-50916 RHEL-58452] {CVE-2024-44932}
  - idpf: use libeth Rx buffer management for payload buffer (Michal Schmidt) [RHEL-50916]
  - idpf: convert header split mode to libeth + napi_build_skb() (Michal Schmidt) [RHEL-50916]
  - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-50916]
  - idpf: reuse libeth's definitions of parsed ptype structures (Michal Schmidt) [RHEL-50916]
  - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-50916]
  - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-50916 RHEL-57131] {CVE-2024-44964}
  - redhat/configs: set CONFIG_IDPF_SINGLEQ to disabled (Michal Schmidt) [RHEL-50916]
  - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-50916]
  - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-50916]
  - idpf: Don't hard code napi_struct size (Michal Schmidt) [RHEL-50916]
  - idpf: strictly assert cachelines of queue and queue vector structures (Michal Schmidt) [RHEL-50916]
  - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-50916]
  - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-50916]
  - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-50916]
  - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-50916]
  - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-50916]
  - idpf: sprinkle __counted_by{,_le}() in the virtchnl2 header (Michal Schmidt) [RHEL-50916]
  - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-50916]
  - selftests/powerpc: Fix build with USERCFLAGS set (Mamatha Inamdar) [RHEL-74480]
  - selftests/powerpc: make sub-folders buildable on their own (Mamatha Inamdar) [RHEL-74480]
  - selftests/powerpc: Add flags.mk to support pmu buildable (Mamatha Inamdar) [RHEL-74480]
  - selftests/powerpc: Re-order *FLAGS to follow lib.mk (Mamatha Inamdar) [RHEL-74480]
  - zram: don't free statically defined names (Ming Lei) [RHEL-63884] {CVE-2024-50064}
  - zram: free secondary algorithms names (Ming Lei) [RHEL-63884] {CVE-2024-50064}
  - net: Fix icmp host relookup triggering ip_rt_bug (Hangbin Liu) [RHEL-72380] {CVE-2024-56647}
  - powerpc/mm/fault: Fix kfence page fault reporting (Mamatha Inamdar) [RHEL-74445]
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Benjamin Coddington) [RHEL-72352] {CVE-2024-53173}
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Benjamin Coddington) [RHEL-72398] {CVE-2024-56688}
  - smb: Initialize cfid->tcon before performing network ops (Paulo Alcantara) [RHEL-72459] {CVE-2024-56729}
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71525] {CVE-2024-50275}
  - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (Sabrina Dubroca) [RHEL-68543] {CVE-2024-53091}
  - Bluetooth: hci_conn: Use disable_delayed_work_sync (CKI Backport Bot) [RHEL-72334] {CVE-2024-56591}
  - perf machine: Initialize machine->env to address a segfault (Michael Petlan) [RHEL-65416]
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (CKI Backport Bot) [RHEL-72297] {CVE-2024-56590}
  - crypto: aes-gcm-p10 - Use the correct bit to test for P10 (Mamatha Inamdar) [RHEL-58802]
  - crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMDand re-enable CRYPTO_AES_GCM_P10 (Mamatha Inamdar) [RHEL-58802]
  - crypto: powerpc/p10-aes-gcm - Register modules as SIMD (Mamatha Inamdar) [RHEL-58802]
  - crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (Mamatha Inamdar) [RHEL-58802]
  - crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 (Mamatha Inamdar) [RHEL-58802]
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (CKI Backport Bot) [RHEL-72291] {CVE-2024-56604}
  - Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (CKI Backport Bot) [RHEL-72255] {CVE-2024-56654}
  - zram: fix NULL pointer in comp_algorithm_show() (Ming Lei) [RHEL-72367] {CVE-2024-53222}
  - brd: defer automatic disk creation until module initialization succeeds (Ming Lei) [RHEL-72386] {CVE-2024-56693}
  - block, bfq: fix bfqq uaf in bfq_limit_depth() (Ming Lei) [RHEL-72358] {CVE-2024-53166}
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74381]
  - redhat: Add python3-docutils for selftests build dependency (Julio Faracco) [RHEL-74391]
  - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM (Waiman Long) [RHEL-72577]
  - mm/mglru: Revert 'Revert "don't sync disk for each aging cycle"' (Waiman Long) [RHEL-72577]
  - SUNRPC: make sure cache entry active before cache_show (Olga Kornievskaia) [RHEL-72340] {CVE-2024-53174}
  - powerpc/pseries/iommu: Don't unset window if it was never set (Mamatha Inamdar) [RHEL-74049]
  - NFSD: Prevent a potential integer overflow (Olga Kornievskaia) [RHEL-72114] {CVE-2024-53146}
  - nfsd: make sure exp active before svc_export_show (Olga Kornievskaia) [RHEL-72249] {CVE-2024-56558}
  - tools/rtla: Use pkg-config in lib_setup of Makefile.config (Luis Claudio R. Goncalves) [RHEL-69738]
  - tracing: Remove extra space at the end of hwlat_detector/mode (Luis Claudio R. Goncalves) [RHEL-69738]
  - trace/hwlat: Do not wipe the contents of per-cpu thread data (Luis Claudio R. Goncalves) [RHEL-69738]
  - trace/hwlat: Do not start per-cpu thread if it is already running (Luis Claudio R. Goncalves) [RHEL-69738]
  - trace/hwlat: make use of the helper function kthread_run_on_cpu() (Luis Claudio R. Goncalves) [RHEL-69738]
  - tracing/hwlat: Make some internal symbols static (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: Improve exception handling in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: Enhance argument parsing in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: Improve code readability in timerlat_load.py (Luis Claudio R. Goncalves) [RHEL-69738]
  - rtla/timerlat: Do not set params->user_workload with -U (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: fix collision with glibc sched_attr/sched_set_attr (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: drop __NR_sched_getattr (Luis Claudio R. Goncalves) [RHEL-69738]
  - rtla: Fix consistency in getopt_long for timerlat_hist (Luis Claudio R. Goncalves) [RHEL-69738]
  - rtla: use the definition for stdout fd when calling isatty() (Luis Claudio R. Goncalves) [RHEL-69738]
  - rtla: Fix the help text in osnoise and timerlat top tools (Luis Claudio R. Goncalves) [RHEL-69738]
  - tools/rtla: Fix installation from out-of-tree build (Luis Claudio R. Goncalves) [RHEL-69738]
  - rtla/osnoise: Prevent NULL dereference in error handling (Luis Claudio R. Goncalves) [RHEL-69738] {CVE-2024-45002}
  - rtla/timerlat: Make user-space threads the default (Luis Claudio R. Goncalves) [RHEL-69738]
  - bpf, sockmap: Fix race between element replace and close() (Felix Maurer) [RHEL-68071 RHEL-72246] {CVE-2024-56664}
  - xsk: Free skb when TX metadata options are invalid (Felix Maurer) [RHEL-40153 RHEL-68071]
  - xsk: always clear DMA mapping information when unmapping the pool (Felix Maurer) [RHEL-68071]
  - bpf: fix OOB devmap writes when deleting elements (Felix Maurer) [RHEL-68071]
  - xsk: fix OOB map writes when deleting elements (Felix Maurer) [RHEL-68071 RHEL-72252] {CVE-2024-56614}
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Felix Maurer) [RHEL-59445 RHEL-68071] {CVE-2024-46783}
  - bpf: Remove tst_run from lwt_seg6local_prog_ops. (Felix Maurer) [RHEL-59341 RHEL-68071] {CVE-2024-46754}
  - ice: implement low latency PHY timer updates (Petr Oros) [RHEL-25338]
  - ice: check low latency PHY timer update firmware capability (Petr Oros) [RHEL-25338]
  - ice: add lock to protect low latency interface (Petr Oros) [RHEL-25338]
  - ice: rename TS_LL_READ* macros to REG_LL_PROXY_H_* (Petr Oros) [RHEL-25338]
  - ice: use read_poll_timeout_atomic in ice_read_phy_tstamp_ll_e810 (Petr Oros) [RHEL-25338]
  - tpm_tis_spi: Add compatible string atmel,attpm20p (Štěpán Horáček) [RHEL-52747]
  - libstub,tpm: do not ignore failure case when reading final event log (Štěpán Horáček) [RHEL-52747]
  - tpm: fix unsigned/signed mismatch errors related to __calc_tpm2_event_size (Štěpán Horáček) [RHEL-52747]
  - tpm: do not ignore memblock_reserve return value (Štěpán Horáček) [RHEL-52747]
  - tpm: fix signed/unsigned bug when checking event logs (Štěpán Horáček) [RHEL-52747]
  - tpm: Lock TPM chip in tpm_pm_suspend() first (Štěpán Horáček) [RHEL-68209] {CVE-2024-53085}
  - tpm: Clean up TPM space after command failure (Štěpán Horáček) [RHEL-63357] {CVE-2024-49851}
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Štěpán Horáček) [RHEL-52747]
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Štěpán Horáček) [RHEL-52747]
  - tpm_tis_spi: add missing attpm20p SPI device ID entry (Štěpán Horáček) [RHEL-52747]
  - KEYS: trusted: Do not use WARN when encode fails (Štěpán Horáček) [RHEL-52747]
  - KEYS: trusted: tpm2: Use struct tpm_buf for sized buffers (Štěpán Horáček) [RHEL-52747]
  - tpm: Add tpm_buf_read_{u8,u16,u32} (Štěpán Horáček) [RHEL-52747]
  - tpm: TPM2B formatted buffers (Štěpán Horáček) [RHEL-52747]
  - tpm: Store the length of the tpm_buf data separately. (Štěpán Horáček) [RHEL-52747]
  - tpm: Update struct tpm_buf documentation comments (Štěpán Horáček) [RHEL-52747]
  - tpm: Move buffer handling from static inlines to real functions (Štěpán Horáček) [RHEL-52747]
  - tpm: Remove tpm_send() (Štěpán Horáček) [RHEL-52747]
  - tpm: Remove unused tpm_buf_tag() (Štěpán Horáček) [RHEL-52747]
  - tpm/eventlog: remove redundant assignment to variabel ret (Štěpán Horáček) [RHEL-52747]
  - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-73657] {CVE-2024-54680}
  - nvmet: Don't overflow subsysnqn (CKI Backport Bot) [RHEL-74081] {CVE-2024-53681}
  - PCI: Wait for Link before restoring Downstream Buses (Myron Stowe) [RHEL-71363]
  - PCI: Use an error code with PCIe failed link retraining (Myron Stowe) [RHEL-71363]
  - PCI: Correct error reporting with PCIe failed link retraining (Myron Stowe) [RHEL-71363]
  - PCI: Revert to the original speed after PCIe failed link retraining (Myron Stowe) [RHEL-71363]
  - PCI: Clear the LBMS bit after a link retrain (Myron Stowe) [RHEL-71363]
  - PCI: Wait for device readiness with Configuration RRS (Myron Stowe) [RHEL-71363]
  - s390/pci: Add pci_msg debug view to PCI report (Mete Durlu) [RHEL-50792]
  - s390/debug: Add a reverse mode for debug_dump() (Mete Durlu) [RHEL-50792]
  - s390/debug: Add debug_dump() to write debug view to a string buffer (Mete Durlu) [RHEL-50792]
  - s390/debug: Split private data alloc/free out of file operations (Mete Durlu) [RHEL-50792]
  - s390/debug: Simplify and document debug_next_entry() logic (Mete Durlu) [RHEL-50792]
  - s390/pci: Report PCI error recovery results via SCLP (Mete Durlu) [RHEL-50792]
  - s390/debug: Pass in and enforce output buffer size for format handlers (Mete Durlu) [RHEL-50792]
  - s390/sclp: Allow user-space to provide PCI reports for optical modules (Mete Durlu) [RHEL-71265]
  - Enable peer to peer DMA for ROCm (Mika Penttilä) [RHEL-9998]
  - pinmux: Use sequential access to access desc->pinmux data (David Arcari) [RHEL-73715] {CVE-2024-47141}
  - block: Prevent potential deadlocks in zone write plug error recovery (Ming Lei) [RHEL-71498]
  - dm: Fix dm-zoned-reclaim zone write pointer alignment (Ming Lei) [RHEL-71498]
  - block: Ignore REQ_NOWAIT for zone reset and zone finish operations (Ming Lei) [RHEL-71498]
  - block: Use a zone write plug BIO work for REQ_NOWAIT BIOs (Ming Lei) [RHEL-71498]
  - block: Prevent potential deadlock in blk_revalidate_disk_zones() (Ming Lei) [RHEL-71498]
  - block: Switch to using refcount_t for zone write plugs (Ming Lei) [RHEL-71498]
  - block: Add a public bdev_zone_is_seq() helper (Ming Lei) [RHEL-71498]
  - block: RCU protect disk->conv_zones_bitmap (Ming Lei) [RHEL-71498]
  - MAINTAINERS: Make Kristen Accardi the IAA crypto driver maintainer (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Remove potential infinite loop in check_completion() (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Fix potential use after free bug (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Use kmemdup() instead of kzalloc() and memcpy() (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Use cpumask_weight() when rebalancing (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Fix some errors in IAA documentation (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Change iaa statistics to atomic64_t (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Add global_stats file and remove individual stat files (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - Remove comp/decomp delay statistics (Vladis Dronov) [RHEL-49539]
  - crypto: iaa - fix decomp_bytes_in stats (Vladis Dronov) [RHEL-49539]
  - cppc_cpufreq: Remove HiSilicon CPPC workaround (Mark Langsdorf) [RHEL-65441]
  - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged (Mark Langsdorf) [RHEL-65441]
  - nbd: fix partial sending (Ming Lei) [RHEL-64338]
  - kernel.spec: perf: fix C++ demangle support (Michael Petlan) [RHEL-69463]
  - mptcp: fix TCP options overflow. (CKI Backport Bot) [RHEL-73516]
  - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x (CKI Backport Bot) [RHEL-70424]
  - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level (CKI Backport Bot) [RHEL-73350] {CVE-2024-56783}
  - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (Benjamin Coddington) [RHEL-67304]
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (CKI Backport Bot) [RHEL-73708]
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (CKI Backport Bot) [RHEL-73708]
  - netfilter: nft_inner: incorrect percpu area handling under softirq (CKI Backport Bot) [RHEL-73708]
  - netfilter: x_tables: fix LED ID check in led_tg_check() (CKI Backport Bot) [RHEL-73708]
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (CKI Backport Bot) [RHEL-73708]
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (CKI Backport Bot) [RHEL-73708]
  - netfilter: nf_tables: must hold rcu read lock while iterating expression type list (CKI Backport Bot) [RHEL-73708]
  - netfilter: fib: check correct rtable in vrf setups (CKI Backport Bot) [RHEL-73708]
  - netfilter: allow ipv6 fragments to arrive on different devices (CKI Backport Bot) [RHEL-73708]
  - netfilter: ctnetlink: support CTA_FILTER for flush (CKI Backport Bot) [RHEL-73708]
  - netfilter: nfnetlink: convert kfree_skb to consume_skb (CKI Backport Bot) [RHEL-73708]
  - netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router Discovery (CKI Backport Bot) [RHEL-73708]
  - netfilter: nf_tables: skip transaction if update object is not implemented (CKI Backport Bot) [RHEL-73708]
  - netfilter: ip6_tables: zero-initialize fragment offset (CKI Backport Bot) [RHEL-73708]
  - fadump: reserve param area if below boot_mem_top (Mamatha Inamdar) [RHEL-73120]
  - powerpc/fadump: allocate memory for additional parameters early (Mamatha Inamdar) [RHEL-73120]
  - Bluetooth: btusb: mediatek: change the conditions for ISO interface (Bastien Nocera) [RHEL-72839]
  - Bluetooth: btusb: mediatek: add intf release flow when usb disconnect (Bastien Nocera) [RHEL-72839] {CVE-2024-56757}
  - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (Bastien Nocera) [RHEL-72839]
  - Bluetooth: btusb: mediatek: move Bluetooth power off command position (Bastien Nocera) [RHEL-72839]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-556.el9]
changelog:
  - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74382]
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow (Radostin Stoyanov) [RHEL-63240] {CVE-2024-47739}
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Mete Durlu) [RHEL-74468]
  - bnxt_en: Fix DIM shutdown (Michal Schmidt) [RHEL-72033]
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Michal Schmidt) [RHEL-72033]
  - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michal Schmidt) [RHEL-72033]
  - bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (Michal Schmidt) [RHEL-72033]
  - bnxt_en: ethtool: Supply ntuple rss context action (Michal Schmidt) [RHEL-72033]
  - tools/perf/powerpc/util: Add support to handle compatible mode PVR for perf json events (Mamatha Inamdar) [RHEL-75636]
  - tools/perf/pmu-events/powerpc: Add support for compat events in json (Mamatha Inamdar) [RHEL-75636]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-557.el9]
changelog:
  - ipvlan: Support bonding events (Hangbin Liu) [RHEL-73836]
  - ipvlan: handle NETDEV_DOWN event (Hangbin Liu) [RHEL-73836]
  - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-73836]
  - ext4: update orig_path in ext4_find_extent() (Pavel Reichl) [RHEL-64615] {CVE-2024-49881}
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CKI Backport Bot) [RHEL-74097] {CVE-2024-57884}
  - ipvs: speed up reads from ip_vs_conn proc file (Florian Westphal) [RHEL-74064]
  - x86/tdx: Enable CPU topology enumeration (Vitaly Kuznetsov) [RHEL-29351]
  - x86/tdx: Dynamically disable SEPT violations from causing #VEs (Vitaly Kuznetsov) [RHEL-29351]
  - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() (Vitaly Kuznetsov) [RHEL-29351]
  - x86/tdx: Introduce wrappers to read and write TD metadata (Vitaly Kuznetsov) [RHEL-29351]
  - bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compilation error in get_uprobe_offset() (Jerome Marchand) [RHEL-63880]
  - bpf: disallow 40-bytes extra stack for bpf_fastcall patterns (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for trie_get_next_key() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Test with a very short loop (Jerome Marchand) [RHEL-63880]
  - bpf: Force checkpoint when jmp history is too long (Jerome Marchand) [RHEL-63880]
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() (Jerome Marchand) [RHEL-63880]
  - bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (Jerome Marchand) [RHEL-63880]
  - bpf,perf: Fix perf_event_detach_bpf_prog error handling (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for passing in uninit mtu_len (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for writes to .rodata (Jerome Marchand) [RHEL-63880]
  - bpf: Remove MEM_UNINIT from skb/xdp MTU helpers (Jerome Marchand) [RHEL-63880]
  - bpf: Fix overloading of MEM_UNINIT's meaning (Jerome Marchand) [RHEL-63880]
  - bpf: Add MEM_WRITE attribute (Jerome Marchand) [RHEL-63880]
  - bpf: Preserve param->string when parsing mount options (Jerome Marchand) [RHEL-63880]
  - bpf: Properly test iter/task tid filtering (Jerome Marchand) [RHEL-63880]
  - bpf: Fix iter/task tid filtering (Jerome Marchand) [RHEL-63880]
  - lib/buildid: Handle memfd_secret() files in build_id_parse() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for sign extension in coerce_subreg_to_size_sx() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for truncation after sign extension in coerce_reg_to_size_sx() (Jerome Marchand) [RHEL-63880]
  - bpf: Fix truncation bug in coerce_reg_to_size_sx() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Assert link info uprobe_multi count & path_size if unset (Jerome Marchand) [RHEL-63880]
  - bpf: Fix unpopulated path_size when uprobe_multi fields unset (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix cross-compiling urandom_read (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for kfunc module order (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Provide a generic [un]load_module helper (Jerome Marchand) [RHEL-63880]
  - bpf: fix kfunc btf caching for modules (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix error compiling cgroup_ancestor.c with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: fix perf_event link info name_len assertion (Jerome Marchand) [RHEL-63880]
  - bpf: fix unpopulated name_len field in perf_event link info (Jerome Marchand) [RHEL-63880]
  - bpf: use kvzmalloc to allocate BPF verifier environment (Jerome Marchand) [RHEL-63880]
  - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix backtrace printing for selftests crashes (Jerome Marchand) [RHEL-63880]
  - bpf: Fix memory leak in bpf_core_apply (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix uprobe_multi compilation error (Jerome Marchand) [RHEL-63880]
  - bpf: Sync uapi bpf.h header to tools directory (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Verify that sync_linked_regs preserves subreg_def (Jerome Marchand) [RHEL-63880]
  - bpf: sync_linked_regs() must preserve subreg_def (Jerome Marchand) [RHEL-63880]
  - btf: remove redundant CONFIG_BPF test in scripts/link-vmlinux.sh (Jerome Marchand) [RHEL-63880]
  - bpf: Call the missed kfree() when there is no special field in btf (Jerome Marchand) [RHEL-63880]
  - bpf: Call the missed btf_record_free() when map creation fails (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add a test case to write mtu result into .rodata (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add a test case to write strtol result into .rodata (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Rename ARG_PTR_TO_LONG test description (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test (Jerome Marchand) [RHEL-63880]
  - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (Jerome Marchand) [RHEL-63880]
  - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types (Jerome Marchand) [RHEL-63880]
  - bpf: Fix helper writes to read-only maps (Jerome Marchand) [RHEL-63880]
  - bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers (Jerome Marchand) [RHEL-63880]
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add tests for sdiv/smod overflow cases (Jerome Marchand) [RHEL-63880]
  - libbpf: Add bpf_object__token_fd accessor (Jerome Marchand) [RHEL-63880]
  - docs/bpf: Add missing BPF program types to docs (Jerome Marchand) [RHEL-63880]
  - docs/bpf: Add constant values for linkages (Jerome Marchand) [RHEL-63880]
  - bpf: Use fake pt_regs when doing bpf syscall tracepoint tracing (Jerome Marchand) [RHEL-63880]
  - bpf/selftests: Check errno when percpu map value size exceeds (Jerome Marchand) [RHEL-63880]
  - bpf: Check percpu map value size first (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix arena_atomics failure due to llvm change (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add build ID tests (Jerome Marchand) [RHEL-63880]
  - bpf: wire up sleepable bpf_get_stack() and bpf_get_task_stack() helpers (Jerome Marchand) [RHEL-63880]
  - bpf: decouple stack_map_get_build_id_offset() from perf_callchain_entry (Jerome Marchand) [RHEL-63880]
  - lib/buildid: don't limit .note.gnu.build-id to the first page in ELF (Jerome Marchand) [RHEL-63880]
  - lib/buildid: implement sleepable build_id_parse() API (Jerome Marchand) [RHEL-63880]
  - lib/buildid: rename build_id_parse() into build_id_parse_nofault() (Jerome Marchand) [RHEL-63880]
  - lib/buildid: remove single-page limit for PHDR search (Jerome Marchand) [RHEL-63880]
  - lib/buildid: take into account e_phoff when fetching program headers (Jerome Marchand) [RHEL-63880]
  - lib/buildid: add single folio-based file reader abstraction (Jerome Marchand) [RHEL-63880]
  - lib/buildid: harden build ID parsing logic (Jerome Marchand) [RHEL-63880]
  - build-id: require program headers to be right after ELF header (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for __nullable suffix in tp_btf (Jerome Marchand) [RHEL-63880]
  - bpf: Support __nullable argument suffix for tp_btf (Jerome Marchand) [RHEL-63880]
  - bpftool: Fix undefined behavior in qsort(NULL, 0, ...) (Jerome Marchand) [RHEL-63880]
  - libbpf: Fix uretprobe.multi.s programs auto attachment (Jerome Marchand) [RHEL-63880]
  - libbpf: Fix some typos in comments (Jerome Marchand) [RHEL-63880]
  - bpf: Fix error message on kfunc arg type mismatch (Jerome Marchand) [RHEL-63880]
  - bpftool: Fix typos (Jerome Marchand) [RHEL-63880]
  - bpftool: Fix undefined behavior caused by shifting into the sign bit (Jerome Marchand) [RHEL-63880]
  - libbpf: Fixed getting wrong return address on arm64 architecture (Jerome Marchand) [RHEL-63880]
  - libbpf: Workaround (another) -Wmaybe-uninitialized false positive (Jerome Marchand) [RHEL-63880]
  - bpftool: Improve btf c dump sorting stability (Jerome Marchand) [RHEL-63880]
  - bpf/selftests: coverage for tp and perf event progs using kfuncs (Jerome Marchand) [RHEL-63880]
  - bpf: allow kfuncs within tracepoint and perf event programs (Jerome Marchand) [RHEL-63880]
  - bpf: change int cmd argument in __sys_bpf into typed enum bpf_cmd (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add description for running vmtest on RV64 (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add riscv64 configurations to local vmtest (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add DENYLIST.riscv64 (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add config.riscv64 (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Enable cross platform testing for vmtest (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Support local rootfs image for vmtest (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Limit URLS parsing logic to actual scope in vmtest (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Prefer static linking for LLVM libraries (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Rename fallback in bpf_dctcp to avoid naming conflict (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Adapt OUTPUT appending logic to lower versions of Make (Jerome Marchand) [RHEL-63880]
  - libbpf: fix some typos in libbpf (Jerome Marchand) [RHEL-63880]
  - bpftool: fix some typos in bpftool (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: fix some typos in selftests (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add uprobe multi pid filter test for clone-ed processes (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add uprobe multi pid filter test for fork-ed processes (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add child argument to spawn_child function (Jerome Marchand) [RHEL-63880]
  - bpf: Fix uprobe multi pid filter check (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Enable test_bpf_syscall_macro: Syscall_arg1 on s390 and arm64 (Jerome Marchand) [RHEL-63880]
  - libbpf: Access first syscall argument with CO-RE direct read on arm64 (Jerome Marchand) [RHEL-63880]
  - libbpf: Access first syscall argument with CO-RE direct read on s390 (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add a selftest for x86 jit convergence issues (Jerome Marchand) [RHEL-63880]
  - bpf, x64: Fix a jit convergence issue (Jerome Marchand) [RHEL-63880]
  - selftests: bpf: Replace sizeof(arr)/sizeof(arr[0]) with ARRAY_SIZE (Jerome Marchand) [RHEL-63880]
  - bpf: Fix indentation issue in epilogue_idx (Jerome Marchand) [RHEL-63880]
  - bpf: Remove the insn_buf array stack usage from the inline_bpf_loop() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix procmap_query()'s params mismatch and compilation warning (Jerome Marchand) [RHEL-63880]
  - bpf, arm64: Jit BPF_CALL to direct call when possible (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Do not update vmlinux.h unnecessarily (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Specify libbpf headers required for %.bpf.o progs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Check if distilled base inherits source endianness (Jerome Marchand) [RHEL-63880]
  - bpf: Use sockfd_put() helper (Jerome Marchand) [RHEL-63880]
  - bpf: Remove custom build rule (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add tests for iter next method returning valid pointer (Jerome Marchand) [RHEL-63880]
  - bpf: Make the pointer returned by iter next method valid (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Test epilogue patching when the main prog has multiple BPF_EXIT (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: A pro/epilogue test when the main prog jumps back to the 1st insn (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add tailcall epilogue test (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Test gen_prologue and gen_epilogue (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: attach struct_ops maps before test prog runs (Jerome Marchand) [RHEL-63880]
  - bpf: Export bpf_base_func_proto (Jerome Marchand) [RHEL-63880]
  - bpf: Add gen_epilogue to bpf_verifier_ops (Jerome Marchand) [RHEL-63880]
  - bpf: Adjust BPF_JMP that jumps to the 1st insn of the prologue (Jerome Marchand) [RHEL-63880]
  - bpf: Move insn_buf[16] to bpf_verifier_env (Jerome Marchand) [RHEL-63880]
  - bpf: Use kvmemdup to simplify the code (Jerome Marchand) [RHEL-63880]
  - docs/bpf: Fix a typo in verifier.rst (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Make sure stashed kptr in local kptr is freed recursively (Jerome Marchand) [RHEL-63880]
  - libbpf: Fix bpf_object__open_skeleton()'s mishandling of options (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for zero offset or non-zero offset pointers as KF_ACQUIRE kfuncs argument (Jerome Marchand) [RHEL-63880]
  - bpf: Relax KF_ACQUIRE kfuncs strict type matching constraint (Jerome Marchand) [RHEL-63880]
  - bpf, arm64: Avoid blindly saving/restoring all callee-saved registers (Jerome Marchand) [RHEL-63880]
  - bpf, arm64: Get rid of fpb (Jerome Marchand) [RHEL-63880]
  - samples/bpf: tracex4: Fix failed to create kretprobe 'kmem_cache_alloc_node+0x0' (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add tests for bpf_copy_from_user_str kfunc. (Jerome Marchand) [RHEL-63880]
  - bpf: Add bpf_copy_from_user_str kfunc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Test bpf_kptr_xchg stashing into local kptr (Jerome Marchand) [RHEL-63880]
  - bpf: Support bpf_kptr_xchg into local kptr (Jerome Marchand) [RHEL-63880]
  - bpf: Rename ARG_PTR_TO_KPTR -> ARG_KPTR_XCHG_DEST (Jerome Marchand) [RHEL-63880]
  - bpf: Search for kptrs in prog BTF structs (Jerome Marchand) [RHEL-63880]
  - bpf: Let callers of btf_parse_kptr() track life cycle of prog btf (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add multi-uprobe benchmarks (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: make use of PROCMAP_QUERY ioctl if available (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: #define LOCAL_LABEL_LEN for jit_disasm_helpers.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: match both retq/rethunk in verifier_tailcall_jit (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: test_loader.c:get_current_arch() should not return 0 (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add testcase for updating attached freplace prog to prog_array map (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: check if bpf_fastcall is recognized for kfuncs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: by default use arch mask allowing all archs (Jerome Marchand) [RHEL-63880]
  - bpf: allow bpf_fastcall for bpf_cast_to_kern_ctx and bpf_rdonly_cast (Jerome Marchand) [RHEL-63880]
  - bpf: support bpf_fastcall patterns for kfuncs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: rename nocsr -> bpf_fastcall in selftests (Jerome Marchand) [RHEL-63880]
  - bpf: rename nocsr -> bpf_fastcall in verifier (Jerome Marchand) [RHEL-63880]
  - bpf: Fix percpu address space issues (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: test for malformed BPF_CORE_TYPE_ID_LOCAL relocation (Jerome Marchand) [RHEL-63880]
  - bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: validate __xlated same way as __jited (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: validate jit behaviour for tail calls (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: __jited test tag to check disassembly after jit (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: utility function to get program disassembly after jit (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: replace __regex macro with "{{...}}" patterns (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: fix to avoid __msg tag de-duplication by clang (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: correctly move 'log' upon successful match (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: less spam in the log for message matching (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: test passing iterator to a kfunc (Jerome Marchand) [RHEL-63880]
  - bpf: allow passing struct bpf_iter_<type> as kfunc arguments (Jerome Marchand) [RHEL-63880]
  - bpf: extract iterator argument type and name validation logic (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Disable strict aliasing for verifier_nocsr.c (Jerome Marchand) [RHEL-63880]
  - bpf: Allow bpf_current_task_under_cgroup() with BPF_CGROUP_* (Jerome Marchand) [RHEL-63880]
  - bpf: Enable generic kfuncs for BPF_CGROUP_* programs (Jerome Marchand) [RHEL-63880]
  - samples/bpf: Fix compilation errors with cf-protection option (Jerome Marchand) [RHEL-63880]
  - libbpf: Workaround -Wmaybe-uninitialized false positive (Jerome Marchand) [RHEL-63880]
  - bpf: Remove __btf_name_valid() and change to btf_name_valid_identifier() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: convert test_skb_cgroup_id_user to test_progs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Remove test_skb_cgroup_id.sh from TEST_PROGS (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add proper section name to bpf prog and rename it (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: convert get_current_cgroup_id_user to test_progs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Avoid subtraction after htons() in ipip tests (Jerome Marchand) [RHEL-63880]
  - bpf: factor out fetching bpf_map from FD and adding it to used_maps list (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add positive tests for new VFS based BPF kfuncs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add negative tests for new VFS based BPF kfuncs (Jerome Marchand) [RHEL-63880]
  - bpf: introduce new VFS based BPF kfuncs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix a btf_dump selftest failure (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: add wrong type test to cgroup dev (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: convert test_dev_cgroup to test_progs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: do not disable /dev/null device access in cgroup dev test (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix error compiling tc_redirect.c with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix using stdout, stderr as struct field names (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compile if backtrace support missing in libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix redefinition errors compiling lwt_reroute.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix C++ compile error from missing _Bool type (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix error compiling test_lru_map.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix arg parsing in veristat, test_progs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Use portable POSIX basename() (Jerome Marchand) [RHEL-63880]
  - tools/bpf: Fix the wrong format specifier (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Load struct_ops map in global_maps_resize test (Jerome Marchand) [RHEL-63880]
  - libbpf: Don't take direct pointers into BTF data from st_ops (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix errors compiling decap_sanity.c with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compiling core_reloc.c with musl-libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compiling flow_dissector.c with musl-libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compiling kfree_skb.c with musl-libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix include of <sys/fcntl.h> (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix missing BUILD_BUG_ON() declaration (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix missing UINT_MAX definitions in benchmarks (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Drop unneeded error.h includes (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Use pid_t consistently in test_progs.c (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Make %.test.d prerequisite order only (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: test no_caller_saved_registers spill/fill removal (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: __arch_* macro to limit test cases to specific archs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: allow checking xlated programs in verifier_* tests (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: extract test_loader->expect_msgs as a data structure (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: no need to track next_match_pos in struct test_loader (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: print correct offset for pseudo calls in disasm_insn() (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add reg_bounds tests for ldsx and subreg compare (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add tests for ldsx of pkt data/data_end/data_meta accesses (Jerome Marchand) [RHEL-63880]
  - bpf: Fail verification for sign-extension of packet data/data_end/data_meta (Jerome Marchand) [RHEL-63880]
  - tools/runqslower: Fix LDFLAGS and add LDLIBS support (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: extract utility function for BPF disassembly (Jerome Marchand) [RHEL-63880]
  - bpf, x86, riscv, arm: no_caller_saved_registers for bpf_get_smp_processor_id() (Jerome Marchand) [RHEL-63880]
  - bpf: no_caller_saved_registers attribute for helper calls (Jerome Marchand) [RHEL-63880]
  - riscv, bpf: inline bpf_get_smp_processor_id() (Jerome Marchand) [RHEL-63880]
  - bpf: add a get_helper_proto() utility function (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix wrong binary in Makefile log output (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add a test for mmap-able map in map (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix error linking uprobe_multi on mips (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add missing system defines for mips (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Don't include .d files on make clean (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add uprobe multi consumers test (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add uprobe fail tests for uprobe multi (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add verifier tests for bpf lsm (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add test for lsm tail call (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Avoid load failure for token_lsm.c (Jerome Marchand) [RHEL-63880]
  - bpf: Prevent tail call between progs attached to different hooks (Jerome Marchand) [RHEL-63880]
  - bpf, lsm: Add disabled BPF LSM hook list (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Ensure the unsupported struct_ops prog cannot be loaded (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Fix the missing tramp_1 to tramp_40 ops in cfi_stubs (Jerome Marchand) [RHEL-63880]
  - bpf: Check unsupported ops from the bpf_struct_ops's cfi_stubs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Add testcases for tailcall hierarchy fixing (Jerome Marchand) [RHEL-63880]
  - bpf, arm64: Fix tailcall hierarchy (Jerome Marchand) [RHEL-63880]
  - bpf, x64: Fix tailcall hierarchy (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Update comments find_equal_scalars->sync_linked_regs (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Tests for per-insn sync_linked_regs() precision tracking (Jerome Marchand) [RHEL-63880]
  - bpf: Remove mark_precise_scalar_ids() (Jerome Marchand) [RHEL-63880]
  - bpf: Track equal scalars history on per-instruction level (Jerome Marchand) [RHEL-63880]
  - selftests/bpf: Use auto-dependencies for test objects (Jerome Marchand) [RHEL-63880]
  - bpf: Simplify character output in seq_print_delegate_opts() (Jerome Marchand) [RHEL-63880]
  - bpf: Replace 8 seq_puts() calls by seq_putc() calls (Jerome Marchand) [RHEL-63880]
  - buildid: use kmap_local_page() (Jerome Marchand) [RHEL-63880]
  - xfs: Mark all experimental code as tech preview (Bill O'Donnell) [RHEL-64940]
  - x86/virt/tdx: Require the module to assert it has the NO_RBP_MOD mitigation (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Switch to use auto-generated global metadata reading code (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Use dedicated struct members for PAMT entry sizes (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Use auto-generated code to read global metadata (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Start to track all global metadata in one structure (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Rename 'struct tdx_tdmr_sysinfo' to reflect the spec better (Paolo Bonzini) [RHEL-71541]
  - x86/virt/tdx: Remove duplicate include (Paolo Bonzini) [RHEL-71541]
  - KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Short-circuit all of kvm_apic_set_base() if MSR value is unchanged (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Unpack msr_data structure prior to calling kvm_apic_set_base() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Rename APIC base setters to better capture their relationship (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Remove some unused declarations (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Move kvm_set_apic_base() implementation to lapic.c (from x86.c) (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Inline kvm_get_apic_mode() in lapic.h (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Get vcpu->arch.apic_base directly and drop kvm_get_apic_base() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Drop superfluous kvm_lapic_set_base() call when setting APIC state (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Short-circuit all kvm_lapic_set_base() if MSR value isn't changing (Paolo Bonzini) [RHEL-71541]
  - KVM: Allow calling kvm_release_page_{clean,dirty}() on a NULL page pointer (Paolo Bonzini) [RHEL-71541]
  - KVM: Drop KVM_ERR_PTR_BAD_PAGE and instead return NULL to indicate an error (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Unconditionally set irr_pending when updating APICv state (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Rename get_msr_feature() APIs to get_feature_msr() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Refactor kvm_x86_ops.get_msr_feature() to avoid kvm_msr_entry (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Register "emergency disable" callbacks when virt is enabled (Paolo Bonzini) [RHEL-71541]
  - x86/reboot: Unconditionally define cpu_emergency_virt_cb typedef (Paolo Bonzini) [RHEL-71541]
  - KVM: Add arch hooks for enabling/disabling virtualization (Paolo Bonzini) [RHEL-71541]
  - KVM: Add a module param to allow enabling virtualization when KVM is loaded (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Rename virtualization {en,dis}abling APIs to match common KVM (Paolo Bonzini) [RHEL-71541]
  - KVM: Rename arch hooks related to per-CPU virtualization enabling (Paolo Bonzini) [RHEL-71541]
  - KVM: Rename symbols related to enabling virtualization hardware (Paolo Bonzini) [RHEL-71541]
  - KVM: Register cpuhp and syscore callbacks when enabling hardware (Paolo Bonzini) [RHEL-71541]
  - Documentation: KVM: fix warning in "make htmldocs" (Paolo Bonzini) [RHEL-71541]
  - KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (Paolo Bonzini) [RHEL-71541] {CVE-2024-47744}
  - KVM: x86/mmu: fix KVM_X86_QUIRK_SLOT_ZAP_ALL for shadow MMU (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/mmu: Introduce a quirk to control memslot zap behavior (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Use '0' for guest RIP if PMI encounters protected guest state (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Bypass register cache when querying CPL from kvm_sched_out() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Ensure vcpu->mode is loaded from memory in kvm_vcpu_exit_request() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init (Paolo Bonzini) [RHEL-71541]
  - kvm: svm: Fix gctx page leak on invalid inputs (Paolo Bonzini) [RHEL-71541]
  - KVM: SVM: Fix an error code in sev_gmem_post_populate() (Paolo Bonzini) [RHEL-71541]
  - KVM: SVM: Fix uninitialized variable bug (Paolo Bonzini) [RHEL-71541]
  - KVM: selftests: Disable strict aliasing (Paolo Bonzini) [RHEL-71541]
  - KVM: selftests: Fix build on on non-x86 architectures (Paolo Bonzini) [RHEL-71541]
  - KVM: selftests: x86: Avoid using SSE/AVX instructions (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Add a struct to consolidate host values, e.g. EFER, XCR0, etc... (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/mmu: Fixup comments missed by the REMOVED_SPTE=>FROZEN_SPTE rename (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/tdp_mmu: Rename REMOVED_SPTE to FROZEN_SPTE (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/mmu: fix determination of max NPT mapping level for private pages (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/pmu: Add kvm_pmu_call() to simplify static calls of kvm_pmu_ops (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Introduce kvm_x86_call() to simplify static calls of kvm_x86_ops (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Replace static_call_cond() with static_call() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/mmu: Clean up make_huge_page_split_spte() definition and intro (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/tdp_mmu: Take a GFN in kvm_tdp_mmu_fast_pf_get_last_sptep() (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/tdp_mmu: Sprinkle __must_check (Paolo Bonzini) [RHEL-71541]
  - KVM: x86/mmu: Rephrase comment about synthetic PFERR flags in #PF handler (Paolo Bonzini) [RHEL-71541]
  - Revert "KVM: async_pf: avoid recursive flushing of work items" (Paolo Bonzini) [RHEL-71541]
  - KVM: x86: Move nEPT exit_qualification field from kvm_vcpu_arch to x86_exception (Paolo Bonzini) [RHEL-71541]
  - KVM: nVMX: Clear EXIT_QUALIFICATION when injecting an EPT Misconfig (Paolo Bonzini) [RHEL-71541]
  - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC (Phil Auld) [RHEL-70904]
  - sched/deadline: Fix warning in migrate_enable for boosted tasks (Phil Auld) [RHEL-70904]
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (Phil Auld) [RHEL-70904]
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (Phil Auld) [RHEL-70904]
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (Phil Auld) [RHEL-70904]
  - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel (Phil Auld) [RHEL-70904]
  - sched: fix warning in sched_setaffinity (Phil Auld) [RHEL-70904]
  - efi/cper: Print correctable AER information (CKI Backport Bot) [RHEL-56272]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-558.el9]
changelog:
  - PCI: Batch BAR sizing operations (Myron Stowe) [RHEL-76025]
  - powerpc/pseries/eeh: Fix get PE state translation (Mamatha Inamdar) [RHEL-74250]
  - Bluetooth: iso: Fix circular lock in iso_listen_bis (CKI Backport Bot) [RHEL-73661] {CVE-2024-54460}
  - CI: Enable pipelines for rt-64k variant (Juri Lelli) [RHEL-70289]
  - redhat: Add kernel-rt-64k variant (Juri Lelli) [RHEL-70289]
  - Bluetooth: hci_core: Fix sleeping function called from invalid context (CKI Backport Bot) [RHEL-74112] {CVE-2024-57894}
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Bastien Nocera) [RHEL-72279]
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (CKI Backport Bot) [RHEL-72279] {CVE-2024-56605}
  - redhat/configs: set new PKEY_UV option on s390 (Mete Durlu) [RHEL-50782]
  - s390/crypto: Add hardware acceleration for full AES-XTS mode (Mete Durlu) [RHEL-50783]
  - s390/crypto: Postpone the key split to key conversion (Mete Durlu) [RHEL-50783]
  - s390/crypto: Introduce function for tokenize clearkeys (Mete Durlu) [RHEL-50783]
  - s390/crypto: Generalize parameters for key conversion (Mete Durlu) [RHEL-50783]
  - s390/crypto: Use module-local structures for protected keys (Mete Durlu) [RHEL-50783]
  - s390/crypto: Convert to reverse x-mas tree, rename ret to rc (Mete Durlu) [RHEL-50783]
  - s390/pkey: Tolerate larger key blobs (Mete Durlu) [RHEL-50783]
  - s390/pkey: Add new pkey handler module pkey-uv (Mete Durlu) [RHEL-50782]
  - s390/pkey: Build module name array selectively based on kernel config options (Mete Durlu) [RHEL-50782]
  - s390/pkey: Fix checkpatch findings in pkey header file (Mete Durlu) [RHEL-50782]
  - s390/pkey: Rework pkey verify for protected keys (Mete Durlu) [RHEL-50782]
  - s390/pkey: Simplify protected key length calculation code (Mete Durlu) [RHEL-50782]
  - s390/zcrypt: Cleanup include zcrypt_api.h (Mete Durlu) [RHEL-50782]
  - s390/uv: export prot_virt_guest symbol in uv (Mete Durlu) [RHEL-50782]
  - cxl/core: Return error when cxl_endpoint_gather_bandwidth() handles a non-PCI device (John W. Linville) [RHEL-67033]
  - cxl/pci: Check Mem_info_valid bit for each applicable DVSEC (John W. Linville) [RHEL-67033]
  - cxl/pci: Remove duplicated implementation of waiting for memory_info_valid (John W. Linville) [RHEL-67033]
  - cxl: Calculate region bandwidth of targets with shared upstream link (John W. Linville) [RHEL-67033]
  - cxl: Preserve the CDAT access_coordinate for an endpoint (John W. Linville) [RHEL-67033]
  - EINJ, CXL: Fix CXL device SBDF calculation (John W. Linville) [RHEL-67033]
  - cxl/port: Prevent out-of-order decoder allocation (John W. Linville) [RHEL-67033]
  - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return (John W. Linville) [RHEL-67033]
  - cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() (John W. Linville) [RHEL-67033]
  - cxl/port: Fix CXL port initialization order when the subsystem is built-in (John W. Linville) [RHEL-67033]
  - cxl/events: Fix Trace DRAM Event Record (John W. Linville) [RHEL-67033]
  - cxl/pci: Fix to record only non-zero ranges (John W. Linville) [RHEL-67033]
  - cxl/test: Skip cxl_setup_parent_dport() for emulated dports (John W. Linville) [RHEL-67033]
  - cxl/pci: Get AER capability address from RCRB only for RCH dport (John W. Linville) [RHEL-67033]
  - cxl/region: Verify target positions using the ordered target list (John W. Linville) [RHEL-67033]
  - cxl: Restore XOR'd position bits during address translation (John W. Linville) [RHEL-67033]
  - cxl/core: Fix incorrect vendor debug UUID define (John W. Linville) [RHEL-67033]
  - hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (Tony Camuso) [RHEL-65221]
  - hid: intel-ish-hid: Add support for vendor customized firmware loading (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Use CPU generation string in driver_data (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Remove unused declarations (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: fix endian-conversion (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: add MODULE_DESCRIPTION() (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: fix ishtp_wait_resume() kernel-doc (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Fix build error for COMPILE_TEST (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: handler multiple MNG_RESET_NOTIFY messages (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Implement loading firmware from host feature (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Add driver_data for specifying the firmware filename (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: ipc: Add Lunar Lake-M PCI device ID (Tony Camuso) [RHEL-65221]
  - HID: intel-ish-hid: Use PCI_VDEVICE() and rename device ID macros (Tony Camuso) [RHEL-65221]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-559.el9]
changelog:
  - iommufd: Fix struct iommu_hwpt_pgfault init and padding (Eder Zulian) [RHEL-75942]
  - iommufd/fault: Use a separate spinlock to protect fault->deliver list (Eder Zulian) [RHEL-75942]
  - iommufd/fault: Destroy response and mutex in iommufd_fault_destroy() (Eder Zulian) [RHEL-75942]
  - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (Eder Zulian) [RHEL-75942]
  - iommu: iommufd: fix WARNING in iommufd_device_unbind (Eder Zulian) [RHEL-75942]
  - gpu: host1x: Set up device DMA parameters (Marcin Juszkiewicz) [RHEL-71795]
  - gitlab-ci: enable rt/aarch64 for RHEL>=9.6 (Michael Hofmann)
  - redhat: create 'debug' addon for UKI (Li Tian) [RHEL-75756]
  - octeon_ep_vf: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep_vf: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep: update tx/rx stats locally for persistence (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep: remove firmware stats fetch in ndo_get_stats64 (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep: add ndo ops for VFs in PF driver (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() (Kamal Heib) [RHEL-64635 RHEL-67691]
  - octeon_ep: Implement helper for iterating packets in Rx queue (Kamal Heib) [RHEL-64635 RHEL-67691]
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (CKI Backport Bot) [RHEL-74440] {CVE-2024-57929}
  - RDMA/bnxt_re: Fix error recovery sequence (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Disable use of reserved wqes (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Fix the check for 9060 condition (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Avoid initializing the software queue for user queues (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Fix max SGEs for the Work Request (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Remove always true dattr validity check (Mohammad Heib) [RHEL-74367]
  - RDMA/bnxt_re: Correct the sequence of device suspend (Mohammad Heib) [RHEL-74367]
  - redhat/configs: enable iBFT parsing on aarch64 (Chris Leech) [RHEL-56135]
  - Bluetooth: btintel_pcie: remove redundant assignment to variable ret (Bastien Nocera) [RHEL-71257]
  - Bluetooth: btintel: Do no pass vendor events to stack (Bastien Nocera) [RHEL-71257]
  - Bluetooth: btintel_pcie: Remove deadcode (Bastien Nocera) [RHEL-71257]
  - Bluetooth: btintel_pcie: Add recovery mechanism (Bastien Nocera) [RHEL-71257]
  - Bluetooth: btintel_pcie: Add handshake between driver and firmware (Bastien Nocera) [RHEL-71257]
  - net: Fix netns for ip_tunnel_init_flow() (Guillaume Nault) [RHEL-73391]
  - ipv4: give an IPv4 dev to blackhole_netdev (Guillaume Nault) [RHEL-73391]
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Charles Mirabile) [RHEL-72328] {CVE-2024-56562}
  - iommu/vt-d: Fix qi_batch NULL pointer with nested parent domain (Jerry Snitselaar) [RHEL-73035] {CVE-2024-56668}
  - iommu/vt-d: Remove cache tags before disabling ATS (Jerry Snitselaar) [RHEL-73035] {CVE-2024-56669}
  - iommufd: Fix out_fput in iommufd_fault_alloc() (Jerry Snitselaar) [RHEL-73035] {CVE-2024-56624}
  - iommu/vt-d: Fix checks and print in pgtable_walk() (Jerry Snitselaar) [RHEL-73035]
  - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes() (Jerry Snitselaar) [RHEL-73035]
  - iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB (Jerry Snitselaar) [RHEL-73035]
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Jerry Snitselaar) [RHEL-73035] {CVE-2024-56568}
  - dma-mapping: remove an outdated comment from dma-map-ops.h (Jerry Snitselaar) [RHEL-73035]
  - iommu/tegra241-cmdqv: Fix unused variable warning (Jerry Snitselaar) [RHEL-73035]
  - iommu/tegra241-cmdqv: Staticize cmdqv_debugfs_dir (Jerry Snitselaar) [RHEL-73035]
  - iommu/s390: Implement blocking domain (Jerry Snitselaar) [RHEL-73035] {CVE-2024-53232}
  - dmaengine: tegra: Return correct DMA status when paused (Jerry Snitselaar) [RHEL-73037]
  - linux/dmaengine.h: fix a few kernel-doc warnings (Jerry Snitselaar) [RHEL-73037]
  - dmaengine: dw: Select only supported masters for ACPI devices (Jerry Snitselaar) [RHEL-73037]
  - dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (Jerry Snitselaar) [RHEL-73037]
  - dmaengine: sh: rz-dmac: handle configs where one address is zero (Jerry Snitselaar) [RHEL-73037]
  - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (Jerry Snitselaar) [RHEL-73037]
  - usbip: move usbip modules to internal rpm (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - config: usb: enable usbip (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: tools: Fix detach_port() invalid port error path (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: Add USB_SPEED_SUPER_PLUS as valid arg (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usb: vhci-hcd: Do not drop references before new references are gained (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: Don't submit special requests twice (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - USB: usbip: vudc: Convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usb/usbip: fix wrong data added to platform device (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: Use platform_device_register_full() (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - USB: usbip: fix stub_dev hub disconnect (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - USB: usbip: Remove an unnecessary goto (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - USB: usbip: Remove an unnecessary NULL value (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: usbip_host: Replace strlcpy with strscpy (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: vhci_hcd: Convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usb/usbip: Fix v_recv_cmd_submit() to use PIPE_BULK define (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - USB: usbip: missing lock in stub down (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: convert sysfs snprintf to sysfs_emit (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: vudc: Convert snprintf() to sysfs_emit() (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - usbip: add USBIP_URB_* URB transfer flags (Jose Ignacio Tornos Martinez) [RHEL-56984]
  - ipmi: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Tony Camuso) [RHEL-67219]
  - ipmi: ssif_bmc: prevent integer overflow on 32bit systems (Tony Camuso) [RHEL-67219]
  - ipmi: kcs_bmc_npcm7xx: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - ipmi: kcs_bmc_aspeed: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - ipmi: ipmi_ssif: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - ipmi: ipmi_si_platform: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - ipmi: ipmi_powernv: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - ipmi: bt-bmc: Convert to platform remove callback returning void (Tony Camuso) [RHEL-67219]
  - char: ipmi: handle HAS_IOPORT dependencies (Tony Camuso) [RHEL-67219]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Mark Salter) [RHEL-5704]
  - perf: arm-ni: Fix an NULL vs IS_ERR() bug (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Use BR_RETIRED for HW branch event if enabled (Mark Salter) [RHEL-5704]
  - Enable event monitoring for ARM NI-700 interconnect (Mark Salter) [RHEL-5704]
  - perf: Add driver for Arm NI-700 interconnect PMU (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Improve format attr printing (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Support CMN S3 (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Refactor DTC PMU register access (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Make cycle counts less surprising (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Improve build-time assertion (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Ensure dtm_idx is big enough (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fix CCLA register offset (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Refactor node ID handling. Again. (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max] (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Record hardware counts correctly (Mark Salter) [RHEL-5704]
  - perf/dwc_pcie: Add support for QCOM vendor devices (Mark Salter) [RHEL-5704]
  - perf/dwc_pcie: Always register for PCIe bus notifier (Mark Salter) [RHEL-5704]
  - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances (Mark Salter) [RHEL-5704]
  - drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (Mark Salter) [RHEL-5704]
  - drivers/perf: apple_m1: add known PMU events (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Add support for Armv9.4 PMU instruction counter (Mark Salter) [RHEL-5704]
  - KVM: arm64: Refine PMU defines for number of counters (Mark Salter) [RHEL-5704]
  - arm64: perf/kvm: Use a common PMU cycle counter define (Mark Salter) [RHEL-5704]
  - KVM: arm64: pmu: Use generated define for PMSELR_EL0.SEL access (Mark Salter) [RHEL-5704]
  - KVM: arm64: pmu: Use arm_pmuv3.h register accessors (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Prepare for more than 32 counters (Mark Salter) [RHEL-5704]
  - perf: arm_pmu: Remove event index to counter remapping (Mark Salter) [RHEL-5704]
  - perf: arm_pmu: Use of_property_present() (Mark Salter) [RHEL-5704]
  - perf: add missing MODULE_DESCRIPTION() macros (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Include asm/arm_pmuv3.h from linux/perf/arm_pmuv3.h (Mark Salter) [RHEL-5704]
  - perf/arm: Move 32-bit PMU drivers to drivers/perf/ (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Drop unnecessary IS_ENABLED(CONFIG_ARM64) check (Mark Salter) [RHEL-5704]
  - perf: imx_perf: add support for i.MX95 platform (Mark Salter) [RHEL-5704]
  - perf: imx_perf: refactor driver for imx93 (Mark Salter) [RHEL-5704]
  - perf: imx_perf: let the driver manage the counter usage rather the user (Mark Salter) [RHEL-5704]
  - perf: imx_perf: add macro definitions for parsing config attr (Mark Salter) [RHEL-5704]
  - perf: pmuv3: Add new Cortex and Neoverse PMUs (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Enable support for tertiary match group (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Decouple wp_config registers from filter group number (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (Mark Salter) [RHEL-5704]
  - perf/arm-spe: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm-smmuv3: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm-dsu: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm-dmc620: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm-ccn: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm-cci: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/alibaba_uncore: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - perf/arm_pmu: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - perf/imx_ddr: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - perf/qcom: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - Documentation: qcom-pmu: Use /sys/bus/event_source/devices paths (Mark Salter) [RHEL-5704]
  - perf/thunderx2: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - Documentation: thunderx2-pmu: Use /sys/bus/event_source/devices paths (Mark Salter) [RHEL-5704]
  - perf/xgene: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - Documentation: xgene-pmu: Use /sys/bus/event_source/devices paths (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - perf/amlogic: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - perf/hisi-hns3: Assign parents for event_source device (Mark Salter) [RHEL-5704]
  - Documentation: hns-pmu: Use /sys/bus/event_source/devices paths (Mark Salter) [RHEL-5704]
  - perf/hisi-uncore: Assign parents for event_source devices (Mark Salter) [RHEL-5704]
  - Documentation: hisi-pmu: Drop reference to /sys/devices path (Mark Salter) [RHEL-5704]
  - perf/hisi-pcie: Assign parent for event_source device (Mark Salter) [RHEL-5704]
  - arm64: arm_pmuv3: Correctly extract and check the PMUVer (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Set PMU device parent (Mark Salter) [RHEL-5704]
  - perf/thunderx2: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/qcom_l2: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/hisi_uncore: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/hisi_pcie: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/dwc_pcie: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/arm_dsu: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - perf/alibaba_uncore_drw: Avoid placing cpumask on the stack (Mark Salter) [RHEL-5704]
  - cpumask: add cpumask_any_and_but() (Mark Salter) [RHEL-5704]
  - drivers/perf: thunderx2_pmu: Replace open coded acpi_match_acpi_device() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Merge find_related_event() and get_event_idx() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Relax the check on related events (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Check the target filter properly (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Add more events for counting TLP bandwidth (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Fix incorrect counting under metric mode (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Introduce hisi_pcie_pmu_get_event_ctrl_val() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Rename hisi_pcie_pmu_{config,clear}_filter() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Enable HiSilicon Erratum 162700402 quirk for HIP09 (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Add devicetree support (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Simplify counter reset (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Simplify attribute groups (Mark Salter) [RHEL-5704]
  - perf/arm_cspmu: Simplify initialisation (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Improve debugfs pretty-printing for large configs (Mark Salter) [RHEL-5704]
  - perf: xgene: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: thunderx2: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: qcom_l2: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: marvell_cn10k_tad: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: marvell_cn10k_ddr: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: hisilicon: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: fsl_imx9_ddr: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: fsl_imx8_ddr: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_spe: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_smmuv3: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_dsu: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_dmc620: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm-cmn: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm-ccn: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm-cci: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: amlogic: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: alibaba_uncore_drw: Convert to platform remove callback returning void (Mark Salter) [RHEL-5704]
  - perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold (Mark Salter) [RHEL-5704]
  - perf: imx_perf: fix counter start and config sequence (Mark Salter) [RHEL-5704]
  - drivers/perf: remove MODULE_LICENSE in non-modules (Mark Salter) [RHEL-5704]
  - arm64, riscv, perf: Remove RCU_NONIDLE() usage (Mark Salter) [RHEL-5704]
  - perf/arm-dmc620: Fix lockdep assert in ->event_init() (Mark Salter) [RHEL-5704]
  - redhat/configs: add DWC_PCIE_PMU disabled for RHEL (Mark Salter) [RHEL-5704]
  - arm: perf: Fix ARCH=arm build with GCC (Mark Salter) [RHEL-5704]
  - drivers/perf: add DesignWare PCIe PMU driver (Mark Salter) [RHEL-5704]
  - arm64: perf: Add support for event counting threshold (Mark Salter) [RHEL-5704]
  - arm: pmu: Share user ABI format mechanism with SPE (Mark Salter) [RHEL-5704]
  - arm64: perf: Include threshold control fields in PMEVTYPER mask (Mark Salter) [RHEL-5704]
  - arm: perf: Convert remaining fields to use GENMASK (Mark Salter) [RHEL-5704]
  - arm: perf: Use GENMASK for PMMIR fields (Mark Salter) [RHEL-5704]
  - drivers/perf: arm_dsu_pmu: Remove kerneldoc-style comment syntax (Mark Salter) [RHEL-5704]
  - drivers/perf: Remove usage of the deprecated ida_simple_xx() API (Mark Salter) [RHEL-5704]
  - perf: fsl_imx8_ddr: Add driver support for i.MX8DXL DDR Perf (Mark Salter) [RHEL-5704]
  - perf: fsl_imx8_ddr: Add AXI ID PORT CHANNEL filter support (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Fix some event id for HiSilicon UC pmu (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fix HN-F class_occup_id events (Mark Salter) [RHEL-5704]
  - redhat/configs: enable coresight PMUs (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fail DTC counter allocation correctly (Mark Salter) [RHEL-5704]
  - Documentation/arm64: Fix typos in elf_hwcaps (Mark Salter) [RHEL-5704]
  - docs/arm64: elf_hwcaps: Unify HWCAP lists as description lists (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: use acpi_dev_hid_uid_match() for matching _HID and _UID (Mark Salter) [RHEL-5704]
  - perf: qcom: use acpi_device_uid() for fetching _UID (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Initialize event->cpu only on success (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi_pcie: Check the type first in pmu::event_init() (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Enable per-DTC counter allocation (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Rework DTC counters (again) (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fix DTC domain detection (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process (Mark Salter) [RHEL-5704]
  - drivers/perf: xgene: Use device_get_match_data() (Mark Salter) [RHEL-5704]
  - perf/amlogic: add missing MODULE_DEVICE_TABLE (Mark Salter) [RHEL-5704]
  - docs/perf: Add ampere_cspmu to toctree to fix a build warning (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: ampere_cspmu: Add support for Ampere SoC PMU (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: Support implementation specific validation (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: Support implementation specific filters (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: Split 64-bit write to 32-bit writes (Mark Salter) [RHEL-5704]
  - perf: arm_cspmu: Separate Arm and vendor module (Mark Salter) [RHEL-5704]
  - arm_pmu: acpi: Add a representative platform device for TRBE (Mark Salter) [RHEL-5704]
  - redhat/configs: add CONFIG_FSL_IMX9_DDR_PMU (Mark Salter) [RHEL-5704]
  - arm_pmu: acpi: Refactor arm_spe_acpi_register_device() (Mark Salter) [RHEL-5704]
  - perf/imx_ddr: don't enable counter0 if none of 4 counters are used (Mark Salter) [RHEL-5704]
  - perf/imx_ddr: speed up overflow frequency of cycle (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Schedule perf session according to locality (Mark Salter) [RHEL-5704]
  - perf/arm-dmc620: Fix dmc620_pmu_irqs_lock/cpu_hotplug_lock circular lock dependency (Mark Salter) [RHEL-5704]
  - perf/smmuv3: Add MODULE_ALIAS for module auto loading (Mark Salter) [RHEL-5704]
  - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Mark Salter) [RHEL-5704]
  - perf: pmuv3: Remove comments from armv8pmu_[enable|disable]_event() (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Add CMN-700 r3 support (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Refactor HN-F event selector macros (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Remove spurious event aliases (Mark Salter) [RHEL-5704]
  - perf: pmuv3: Add Cortex A520, A715, A720, X3 and X4 PMUs (Mark Salter) [RHEL-5704]
  - perf/smmuv3: Remove build dependency on ACPI (Mark Salter) [RHEL-5704]
  - perf: xgene_pmu: Convert to devm_platform_ioremap_resource() (Mark Salter) [RHEL-5704]
  - driver/perf: Add identifier sysfs file for Yitian 710 DDR (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Add support for HiSilicon UC PMU driver (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Add support for HiSilicon H60PA and PAv3 PMU driver (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Add sysfs identifier (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Revamp model detection (Mark Salter) [RHEL-5704]
  - perf/arm_dmc620: Add cpumask (Mark Salter) [RHEL-5704]
  - dt-bindings: perf: fsl-imx-ddr: Add i.MX93 compatible (Mark Salter) [RHEL-5704]
  - drivers/perf: imx_ddr: Add support for NXP i.MX9 SoC DDRC PMU driver (Mark Salter) [RHEL-5704]
  - drivers/perf: apple_m1: Force 63bit counters for M2 CPUs (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fix DTC reset (Mark Salter) [RHEL-5704]
  - perf: qcom_l2_pmu: Make l2_cache_pmu_probe_cluster() more robust (Mark Salter) [RHEL-5704]
  - perf/arm-cci: Slightly optimize cci_pmu_sync_counters() (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: add NULL check for name (Mark Salter) [RHEL-5704]
  - drivers/perf: hisi: Remove redundant initialized of pmu->name (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Fix port detection for CMN-700 (Mark Salter) [RHEL-5704]
  - perf/arm-cmn: Validate cycles events fully (Mark Salter) [RHEL-5704]
  - drivers/perf: apple_m1: Add Apple M2 support (Mark Salter) [RHEL-5704]
  - drivers/perf: Use devm_platform_get_and_ioremap_resource() (Mark Salter) [RHEL-5704]
  - perf: qcom: Use devm_platform_get_and_ioremap_resource() (Mark Salter) [RHEL-5704]
  - perf: arm: Use devm_platform_get_and_ioremap_resource() (Mark Salter) [RHEL-5704]
  - erofs: add required kernel config (Ian Kent) [RHEL-31991]
  - erofs: fix refcount on the metabuf used for inode lookup (Ian Kent) [RHEL-31991]
  - erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading beyond EOF (Ian Kent) [RHEL-31991]
  - erofs: clean up z_erofs_pcluster_readmore() (Ian Kent) [RHEL-31991]
  - erofs: avoid obsolete {collector,collection} terms (Ian Kent) [RHEL-31991]
  - erofs: fix memory leak on short-lived bounced pages (Ian Kent) [RHEL-31991]
  - erofs: kill hooked chains to avoid loops on deduplicated compressed images (Ian Kent) [RHEL-31991]
  - erofs: fix lockdep false positives on initializing erofs_pseudo_mnt (Ian Kent) [RHEL-31991]
  - erofs: drop unnecessary WARN_ON() in erofs_kill_sb() (Ian Kent) [RHEL-31991]
  - erofs: fix uninitialized page cache reported by KMSAN (Ian Kent) [RHEL-31991]
  - erofs: refine z_erofs_transform_plain() for sub-page block support (Ian Kent) [RHEL-31991]
  - erofs: simplify z_erofs_transform_plain() (Ian Kent) [RHEL-31991]
  - erofs: initialize packed inode after root inode is assigned (Ian Kent) [RHEL-31991]
  - erofs: fix memory leak of LZMA global compressed deduplication (Ian Kent) [RHEL-31991] {CVE-2023-52526}
  - erofs: fix wrong primary bvec selection on deduplicated extents (Ian Kent) [RHEL-31991]
  - erofs: get rid of `buf->kmap_type` (Ian Kent) [RHEL-31991]
  - erofs: sunset erofs_dbg() (Ian Kent) [RHEL-31991]
  - erofs: set block size to the on-disk block size (Ian Kent) [RHEL-31991]
  - erofs: avoid hardcoded blocksize for subpage block support (Ian Kent) [RHEL-31991]
  - erofs: port device access to file (Ian Kent) [RHEL-31991]
  - erofs: fix NULL dereference of dif->bdev_handle in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: Convert to use bdev_open_by_path() (Ian Kent) [RHEL-31991]
  - erofs: use wrapper i_blocksize() in erofs_file_read_iter() (Ian Kent) [RHEL-31991]
  - erofs: get rid of a useless DBG_BUGON (Ian Kent) [RHEL-31991]
  - erofs: Revert "erofs: fix kvcalloc() misuse with __GFP_NOFAIL" (Ian Kent) [RHEL-31991]
  - erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms (Ian Kent) [RHEL-31991]
  - erofs: mark z_erofs_lzma_init/erofs_pcpubuf_init w/ __init (Ian Kent) [RHEL-31991]
  - erofs: fix an error code in z_erofs_init_zip_subsystem() (Ian Kent) [RHEL-31991]
  - erofs: unify anonymous inodes for blob (Ian Kent) [RHEL-31991]
  - erofs: relinquish volume with mutex held (Ian Kent) [RHEL-31991]
  - erofs: maintain cookies of share domain in self-contained list (Ian Kent) [RHEL-31991]
  - erofs: remove unused device mapping in meta routine (Ian Kent) [RHEL-31991]
  - MAINTAINERS: erofs: Add Documentation/ABI/testing/sysfs-fs-erofs (Ian Kent) [RHEL-31991]
  - Documentation/ABI: sysfs-fs-erofs: update supported features (Ian Kent) [RHEL-31991]
  - erofs: remove unused EROFS_GET_BLOCKS_RAW flag (Ian Kent) [RHEL-31991]
  - erofs: update print symbols for various flags in trace (Ian Kent) [RHEL-31991]
  - erofs: make kobj_type structures constant (Ian Kent) [RHEL-31991]
  - erofs: add per-cpu threads for decompression as an option (Ian Kent) [RHEL-31991]
  - erofs: tidy up internal.h (Ian Kent) [RHEL-31991]
  - erofs: get rid of z_erofs_do_map_blocks() forward declaration (Ian Kent) [RHEL-31991]
  - erofs: move zdata.h into zdata.c (Ian Kent) [RHEL-31991]
  - erofs: remove tagged pointer helpers (Ian Kent) [RHEL-31991]
  - erofs: avoid tagged pointers to mark sync decompression (Ian Kent) [RHEL-31991]
  - fs: fix leaked psi pressure state (Ian Kent) [RHEL-31991]
  - erofs: get rid of erofs_inode_datablocks() (Ian Kent) [RHEL-31991]
  - erofs: handle NONHEAD !delta[1] lclusters gracefully (Ian Kent) [RHEL-31991]
  - erofs: fix compact 4B support for 16k block size (Ian Kent) [RHEL-31991]
  - erofs: simplify iloc() (Ian Kent) [RHEL-31991]
  - erofs: get rid of debug_one_dentry() (Ian Kent) [RHEL-31991]
  - erofs: remove linux/buffer_head.h dependency (Ian Kent) [RHEL-31991]
  - erofs: clean up erofs_iget() (Ian Kent) [RHEL-31991]
  - erofs: clean up parsing of fscache related options (Ian Kent) [RHEL-31991]
  - erofs: add documentation for 'domain_id' mount option (Ian Kent) [RHEL-31991]
  - erofs: fix kvcalloc() misuse with __GFP_NOFAIL (Ian Kent) [RHEL-31991]
  - erofs/zmap.c: Fix incorrect offset calculation (Ian Kent) [RHEL-31991]
  - erofs: validate the extent length for uncompressed pclusters (Ian Kent) [RHEL-31991]
  - erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails (Ian Kent) [RHEL-31991]
  - erofs: Fix pcluster memleak when its block address is zero (Ian Kent) [RHEL-31991]
  - erofs: use kmap_local_page() only for erofs_bread() (Ian Kent) [RHEL-31991]
  - erofs: enable large folios for fscache mode (Ian Kent) [RHEL-31991]
  - erofs: support large folios for fscache mode (Ian Kent) [RHEL-31991]
  - erofs: switch to prepare_ondemand_read() in fscache mode (Ian Kent) [RHEL-31991]
  - fscache,cachefiles: add prepare_ondemand_read() callback (Ian Kent) [RHEL-31991]
  - erofs: clean up cached I/O strategies (Ian Kent) [RHEL-31991]
  - erofs: update documentation (Ian Kent) [RHEL-31991]
  - erofs: check the uniqueness of fsid in shared domain in advance (Ian Kent) [RHEL-31991]
  - erofs: enable large folios for iomap mode (Ian Kent) [RHEL-31991]
  - erofs: fix missing xas_retry() in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: fix use-after-free of fsid and domain_id string (Ian Kent) [RHEL-31991]
  - erofs: get correct count for unmapped range in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: put metabuf in error path in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: fix general protection fault when reading fragment (Ian Kent) [RHEL-31991]
  - erofs: protect s_inodes with s_inode_list_lock for fscache (Ian Kent) [RHEL-31991]
  - erofs: fix up inplace decompression success rate (Ian Kent) [RHEL-31991]
  - erofs: shouldn't churn the mapping page for duplicated copies (Ian Kent) [RHEL-31991]
  - erofs: fix illegal unmapped accesses in z_erofs_fill_inode_lazy() (Ian Kent) [RHEL-31991]
  - erofs: clean up erofs_iget() (Ian Kent) [RHEL-31991]
  - erofs: clean up unnecessary code and comments (Ian Kent) [RHEL-31991]
  - erofs: fold in z_erofs_reload_indexes() (Ian Kent) [RHEL-31991]
  - erofs: introduce partial-referenced pclusters (Ian Kent) [RHEL-31991]
  - erofs: support on-disk compressed fragments data (Ian Kent) [RHEL-31991]
  - erofs: support interlaced uncompressed data for compressed files (Ian Kent) [RHEL-31991]
  - erofs: clean up .read_folio() and .readahead() in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: add manual PSI accounting for the compressed address space (Ian Kent) [RHEL-31991]
  - erofs: introduce 'domain_id' mount option (Ian Kent) [RHEL-31991]
  - erofs: Support sharing cookies in the same domain (Ian Kent) [RHEL-31991]
  - erofs: introduce a pseudo mnt to manage shared cookies (Ian Kent) [RHEL-31991]
  - erofs: introduce fscache-based domain (Ian Kent) [RHEL-31991]
  - erofs: code clean up for fscache (Ian Kent) [RHEL-31991]
  - erofs: use kill_anon_super() to kill super in fscache mode (Ian Kent) [RHEL-31991]
  - erofs: fix pcluster use-after-free on UP platforms (Ian Kent) [RHEL-31991] {CVE-2022-48674}
  - erofs: avoid the potentially wrong m_plen for big pcluster (Ian Kent) [RHEL-31991]
  - erofs: fix error return code in erofs_fscache_{meta_,}read_folio (Ian Kent) [RHEL-31991]
  - erofs: update ctx->pos for every emitted dirent (Ian Kent) [RHEL-31991]
  - erofs: get rid of the leftover PAGE_SIZE in dir.c (Ian Kent) [RHEL-31991]
  - erofs: get rid of erofs_prepare_dio() helper (Ian Kent) [RHEL-31991]
  - erofs: introduce multi-reference pclusters (fully-referenced) (Ian Kent) [RHEL-31991]
  - erofs: record the longest decompressed size in this round (Ian Kent) [RHEL-31991]
  - erofs: introduce z_erofs_do_decompressed_bvec() (Ian Kent) [RHEL-31991]
  - erofs: try to leave (de)compressed_pages on stack if possible (Ian Kent) [RHEL-31991]
  - erofs: introduce struct z_erofs_decompress_backend (Ian Kent) [RHEL-31991]
  - erofs: get rid of `z_pagemap_global' (Ian Kent) [RHEL-31991]
  - erofs: clean up `enum z_erofs_collectmode' (Ian Kent) [RHEL-31991]
  - erofs: get rid of `enum z_erofs_page_type' (Ian Kent) [RHEL-31991]
  - erofs: rework online page handling (Ian Kent) [RHEL-31991]
  - erofs: switch compressed_pages[] to bufvec (Ian Kent) [RHEL-31991]
  - erofs: introduce `z_erofs_parse_in_bvecs' (Ian Kent) [RHEL-31991]
  - erofs: drop the old pagevec approach (Ian Kent) [RHEL-31991]
  - erofs: introduce bufvec to store decompressed buffers (Ian Kent) [RHEL-31991]
  - erofs: introduce `z_erofs_parse_out_bvecs()' (Ian Kent) [RHEL-31991]
  - erofs: clean up z_erofs_collector_begin() (Ian Kent) [RHEL-31991]
  - erofs: get rid of unneeded `inode', `map' and `sb' (Ian Kent) [RHEL-31991]
  - erofs: avoid consecutive detection for Highmem memory (Ian Kent) [RHEL-31991]
  - erofs: wake up all waiters after z_erofs_lzma_head ready (Ian Kent) [RHEL-31991]
  - MAINTAINERS: erofs: add myself as reviewer (Ian Kent) [RHEL-31991]
  - MAINTAINERS: erofs: add myself as reviewer (Ian Kent) [RHEL-31991]
  - erofs: missing hunks (Ian Kent) [RHEL-31991]
  - erofs: fix 'backmost' member of z_erofs_decompress_frontend (Ian Kent) [RHEL-31991]
  - erofs: simplify z_erofs_pcluster_readmore() (Ian Kent) [RHEL-31991]
  - erofs: get rid of label `restart_now' (Ian Kent) [RHEL-31991]
  - erofs: get rid of `struct z_erofs_collection' (Ian Kent) [RHEL-31991]
  - erofs: update documentation (Ian Kent) [RHEL-31991]
  - erofs: fix crash when enable tracepoint cachefiles_prep_read (Ian Kent) [RHEL-31991]
  - erofs: leave compressed inodes unsupported in fscache mode for now (Ian Kent) [RHEL-31991]
  - erofs: scan devices from device table (Ian Kent) [RHEL-31991]
  - erofs: change to use asynchronous io for fscache readpage/readahead (Ian Kent) [RHEL-31991]
  - erofs: add 'fsid' mount option (Ian Kent) [RHEL-31991]
  - erofs: implement fscache-based data readahead (Ian Kent) [RHEL-31991]
  - erofs: implement fscache-based data read for inline layout (Ian Kent) [RHEL-31991]
  - erofs: implement fscache-based data read for non-inline layout (Ian Kent) [RHEL-31991]
  - erofs: implement fscache-based metadata read (Ian Kent) [RHEL-31991]
  - erofs: register fscache context for extra data blobs (Ian Kent) [RHEL-31991]
  - erofs: register fscache context for primary data blob (Ian Kent) [RHEL-31991]
  - erofs: add erofs_fscache_read_folios() helper (Ian Kent) [RHEL-31991]
  - erofs: add anonymous inode caching metadata for data blobs (Ian Kent) [RHEL-31991]
  - erofs: add fscache context helper functions (Ian Kent) [RHEL-31991]
  - erofs: register fscache volume (Ian Kent) [RHEL-31991]
  - erofs: add fscache mode check helper (Ian Kent) [RHEL-31991]
  - erofs: make erofs_map_blocks() generally available (Ian Kent) [RHEL-31991]
  - cachefiles: document on-demand read mode (Ian Kent) [RHEL-31991]
  - erofs: make filesystem exportable (Ian Kent) [RHEL-31991]
  - erofs: fix buffer copy overflow of ztailpacking feature (Ian Kent) [RHEL-31991]
  - erofs: refine on-disk definition comments (Ian Kent) [RHEL-31991]
  - erofs: remove obsoleted comments (Ian Kent) [RHEL-31991]
  - erofs: do not prompt for risk any more when using big pcluster (Ian Kent) [RHEL-31991]
  - erofs: Convert to release_folio (Ian Kent) [RHEL-31991]
  - erofs: Convert erofs zdata to read_folio (Ian Kent) [RHEL-31991]
  - erofs: fix use-after-free of on-stack io[] (Ian Kent) [RHEL-31991]
  - erofs: Convert from invalidatepage to invalidate_folio (Ian Kent) [RHEL-31991]
  - erofs: rename ctime to mtime (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for inode lookup (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for reading directories (Ian Kent) [RHEL-31991]
  - fs: erofs: add sanity check for kobject in erofs_unregister_sysfs (Ian Kent) [RHEL-31991]
  - erofs: refine managed inode stuffs (Ian Kent) [RHEL-31991]
  - erofs: clean up z_erofs_extent_lookback (Ian Kent) [RHEL-31991]
  - erofs: silence warnings related to impossible m_plen (Ian Kent) [RHEL-31991]
  - erofs: clean up preload_compressed_pages() (Ian Kent) [RHEL-31991]
  - erofs: get rid of `struct z_erofs_collector' (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for erofs_read_superblock() (Ian Kent) [RHEL-31991]
  - erofs: fix ztailpacking on > 4GiB filesystems (Ian Kent) [RHEL-31991]
  - erofs: fix small compressed files inlining (Ian Kent) [RHEL-31991]
  - erofs: avoid unnecessary z_erofs_decompressqueue_work() declaration (Ian Kent) [RHEL-31991]
  - erofs: fix fsdax partition offset handling (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for zmap operations (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for xattr operations (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for super operations (Ian Kent) [RHEL-31991]
  - erofs: use meta buffers for inode operations (Ian Kent) [RHEL-31991]
  - erofs: introduce meta buffer operations (Ian Kent) [RHEL-31991]
  - erofs: add on-disk compressed tail-packing inline support (Ian Kent) [RHEL-31991]
  - erofs: support inline data decompression (Ian Kent) [RHEL-31991]
  - erofs: support unaligned data decompression (Ian Kent) [RHEL-31991]
  - erofs: introduce z_erofs_fixup_insize (Ian Kent) [RHEL-31991]
  - erofs: tidy up z_erofs_lz4_decompress (Ian Kent) [RHEL-31991]
  - erofs: clean up erofs_map_blocks tracepoints (Ian Kent) [RHEL-31991]
  - erofs: Replace zero-length array with flexible-array member (Ian Kent) [RHEL-31991]
  - erofs: add sysfs node to control sync decompression strategy (Ian Kent) [RHEL-31991]
  - erofs: add sysfs interface (Ian Kent) [RHEL-31991]
  - erofs: rename lz4_0pading to zero_padding (Ian Kent) [RHEL-31991]
  - erofs: don't trigger WARN() when decompression fails (Ian Kent) [RHEL-31991]
  - erofs: get rid of ->lru usage (Ian Kent) [RHEL-31991]
  - erofs: lzma compression support (Ian Kent) [RHEL-31991]
  - lib/xz, lib/decompress_unxz.c: Fix spelling in comments (Ian Kent) [RHEL-31991]
  - lib/xz: Add MicroLZMA decoder (Ian Kent) [RHEL-31991]
  - lib/xz: Move s->lzma.len = 0 initialization to lzma_reset() (Ian Kent) [RHEL-31991]
  - lib/xz: Validate the value before assigning it to an enum variable (Ian Kent) [RHEL-31991]
  - lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (Ian Kent) [RHEL-31991]
  - erofs: rename some generic methods in decompressor (Ian Kent) [RHEL-31991]
  - erofs: introduce readmore decompression strategy (Ian Kent) [RHEL-31991]
  - erofs: introduce the secondary compression head (Ian Kent) [RHEL-31991]
  - erofs: get compression algorithms directly on mapping (Ian Kent) [RHEL-31991]
  - erofs: add multiple device support (Ian Kent) [RHEL-31991]
  - erofs: decouple basic mount options from fs_context (Ian Kent) [RHEL-31991]
  - erofs: remove the fast path of per-CPU buffer decompression (Ian Kent) [RHEL-31991]
  - erofs: fix unsafe pagevec reuse of hooked pclusters (Ian Kent) [RHEL-31991]
  - erofs: remove useless cache strategy of DELAYEDALLOC (Ian Kent) [RHEL-31991]
  - erofs: fix deadlock when shrink erofs slab (Ian Kent) [RHEL-31991]
  - erofs: apply proper VMA alignment for memory mapped files on THP (Ian Kent) [RHEL-31991]
  - erofs: dax support for non-tailpacking regular file (Ian Kent) [RHEL-31991]
  - erofs: directly use wrapper erofs_page_is_managed() when shrinking (Ian Kent) [RHEL-31991]
  - erofs: remove the mapping parameter from erofs_try_to_free_cached_page() (Ian Kent) [RHEL-31991]
  - erofs: add fiemap support with iomap (Ian Kent) [RHEL-31991]
  - erofs: add support for the full decompressed length (Ian Kent) [RHEL-31991]
  - erofs: clear compacted_2b if compacted_4b_initial > totalidx (Ian Kent) [RHEL-31991]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-560.el9]
changelog:
  - rhel-only: Fix up kfunc definitions in filter.c (Toke Høiland-Jørgensen) [RHEL-65787]
  - selftests/bpf: Test bpf_sock_destroy (Toke Høiland-Jørgensen) [RHEL-65787]
  - selftests/bpf: Add helper to get port using getsockname (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: Add bpf_sock_destroy kfunc (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: Avoid iter->offset making backward progress in bpf_iter_udp (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: iter_udp: Retry with a larger batch size without going back to the previous bucket (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: udp: Implement batching for sockets iterator (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: seq_file: Remove bpf_seq_afinfo from udp_iter_state (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: udp: Encapsulate logic to get udp table (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: seq_file: Helper function to match socket attributes (Toke Høiland-Jørgensen) [RHEL-65787]
  - bpf: tcp: Avoid taking fast sock lock in iterator (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Access &udp_table via net. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Set NULL to udp_seq_afinfo.udp_table. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Set NULL to sk->sk_prot->h.udp_table. (Toke Høiland-Jørgensen) [RHEL-65787]
  - udp: Clean up some functions. (Toke Høiland-Jørgensen) [RHEL-65787]
  - exfat: fix the infinite loop in exfat_readdir() (CKI Backport Bot) [RHEL-75663] {CVE-2024-57940}
  - exec: Fix ToCToU between perm check and set-uid/gid usage (CKI Backport Bot) [RHEL-55562] {CVE-2024-43882}
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (CKI Backport Bot) [RHEL-72355] {CVE-2024-53213}
  - net: xgbe: Convert tasklet API to new bottom half workqueue mechanism (Michal Schmidt) [RHEL-62004]
  - net: xgbe: remove extraneous #ifdef checks (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Avoid potential string truncation in name (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: propagate the correct speed and duplex status (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: handle the corner-case during tx completion (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: handle corner-case during sfp hotplug (Michal Schmidt) [RHEL-62004]
  - net: ethernet: Use device_get_match_data() (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - net: ethernet: amd: Convert to platform remove callback returning void (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: extend 10Mbps support to MAC version 21H (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix the false linkup in xgbe_phy_status (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix mismatched prototype (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add support for rx-adaptation (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add 2.5GbE support to 10G BaseT mode (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Replace MII_ADDR_C45 with XGBE_ADDR_C45 (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Separate C22 and C45 transactions (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Delay AN timeout during KR training (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Add support for 10 Mbps speed (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: add missed tasklet_kill (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Check only the minimum speed for active/passive cables (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Fix logic around active and passive cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: add the bit rate quirk for Molex cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix the SFP compliance codes check for DAC cables (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: enable PLL_CTL for fixed PHY modes only (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: use enums for mailbox cmd and sub_cmds (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: Yellow carp devices do not need rrc (Michal Schmidt) [RHEL-62004]
  - amd-xgbe: fix clang -Wformat warnings (Michal Schmidt) [RHEL-62004]
  - amd/xgbe: fix repeated words in comments (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: fix clang -Wformat warning (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: disable interrupts during pci removal (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: ensure to reset the tx_timer_active flag (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Disable the CDR workaround path for Yellow Carp Devices (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Alter the port speed bit range (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Add Support for Yellow Carp Ethernet device (Michal Schmidt) [RHEL-62004]
  - net: amd-xgbe: Toggle PLL settings during rate change (Michal Schmidt) [RHEL-62004]
  - net: convert users of bitmap_foo() to linkmode_foo() (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: constify references to netdev->dev_addr in drivers (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: Remove redundant 'flush_workqueue()' calls (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (amd-xgbe) (Michal Schmidt) [RHEL-62004]
  - signal: restore the override_rlimit logic (Radostin Stoyanov) [RHEL-68020] {CVE-2024-50271}
  - ucounts: Split rlimit and ucount values and max values (Radostin Stoyanov) [RHEL-68020] {CVE-2024-50271}
  - virtio_net: Add hash_key_length check (Jon Maloy) [RHEL-68253] {CVE-2024-53082}


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.1-3
changelog:
  - Subpackage python2-pysocks has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-7
changelog:
  - Make the python-setuptools-wheel subpackage versioned (python3-setuptools-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.10-3
changelog:
  - Drop redundant BuildRequires for nose
  - Instead of the mock backport, use unittest.mock from the standard library


author: Karolina Surma <ksurma@redhat.com> - 1.26.5-1
changelog:
  - Update to 1.26.5
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1972639


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-6
changelog:
  - Security fix for CVE-2024-37891
  - Backport upstream patch to fix TypeError for http connection if the PoolManager
  - is instantiated with server_hostname
  Resolves: RHEL-43172
  Resolves: RHEL-39285


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: systemd maintenance team <systemd-maint@redhat.com> - 252-39
changelog:
  - enable FIDO2 support (RHEL-36276)
  - netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT (RHEL-44630)
  - netif-naming-scheme: make actually possible to use rhel-9.5 scheme (RHEL-44630)
  - generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-33436)
  - ci: add support for rhel-only parameters (RHEL-30372)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-41
changelog:
  - timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020)
  - cryptsetup-tokens: fix pin asserts (RHEL-36276)
  - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276)
  - kernel-install: check machine ID (RHEL-50672)
  - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672)
  - hwdb: Add Lenovo G580 (RHEL-5950)
  - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950)
  - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950)
  - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950)
  - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950)
  - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950)
  - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950)
  - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950)
  - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950)
  - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950)
  - Update 60-evdev.hwdb (#25704) (RHEL-5950)
  - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950)
  - hwdb: drop trailing space (RHEL-5950)
  - hwdb: add comments about matching entries (RHEL-5950)
  - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950)
  - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950)
  - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950)
  - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950)
  - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950)
  - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950)
  - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950)
  - hwdb: remove spurious whitespace (RHEL-5950)
  - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950)
  - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: Add mount matrix for Linx 1020 (RHEL-5950)
  - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950)
  - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950)
  - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update autosuspend db (RHEL-5950)
  - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950)
  - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950)
  - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950)
  - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950)
  - hwdb: add override for IdeaPad5 insert key (RHEL-5950)
  - hwdb: update database (RHEL-5950)
  - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950)
  - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950)
  - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950)
  - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950)
  - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950)
  - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950)
  - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950)
  - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950)
  - hwdb: drop redundant entry (RHEL-5950)
  - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950)
  - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950)
  - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950)
  - hwdb: Add support for "Passion Model P612F" (RHEL-5950)
  - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950)
  - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950)
  - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950)
  - hwdb: Fix rotation for BMAX Y13 (RHEL-5950)
  - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950)
  - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950)
  - hwdb: do not include '#' in modalias (RHEL-5950)
  - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950)
  - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950)
  - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950)
  - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950)
  - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950)
  - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950)
  - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950)
  - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950)
  - hwdb: Add override for headset form-factors (RHEL-5950)
  - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950)
  - hwdb: drop trailing white space (RHEL-5950)
  - hwdb: merge multiple keyboard entries with same setting (RHEL-5950)
  - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950)
  - hwdb update for v246-rc1 (RHEL-5950)
  - update hwdb autosuspend data for v254 (RHEL-5950)
  - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950)
  - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950)
  - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950)
  - Add alternate name for MX Ergo as found on some devices (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950)
  - Update 60-sensor.hwdb (#28804) (RHEL-5950)
  - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950)
  - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950)
  - hwdb: keyboard: D330 FnLk toggle (RHEL-5950)
  - hwdb: Add Logitech G502 X (RHEL-5950)
  - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950)
  - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950)
  - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950)
  - hwdb: Bush tablet rotation support (#29268) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950)
  - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950)
  - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950)
  - add udev rule for micmute (f20) (RHEL-5950)
  - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update hwdb autosuspend rules (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950)
  - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: rename .html=>.csv (RHEL-5950)
  - hwdb/acpi-update.py: streamline python code (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: add Predator PHN16-71 (RHEL-5950)
  - Update 60-autosuspend.hwdb (#30131) (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950)
  - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950)
  - Add three Dell platforms to sensor accel location base (RHEL-5950)
  - Add Bosto BT-12HD series to hwdb (RHEL-5950)
  - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950)
  - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950)
  - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950)
  - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950)
  - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950)
  - hwdb: add resolution setting for GAOMON S620 (RHEL-5950)
  - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950)
  - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950)
  - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950)
  - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950)
  - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950)
  - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950)
  - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950)
  - Update USB ids of hwdb (RHEL-5950)
  - Added resolution for Huion Kamvas Pro 19 (RHEL-5950)
  - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950)
  - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950)
  - Fixed resolution for pen and touchpad (RHEL-5950)
  - hwdb: fix missing colon (#32108) (RHEL-5950)
  - hwdb: update for v256 (RHEL-5950)
  - autosuspend: update for v256 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950)
  - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950)
  - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950)
  - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950)
  - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950)
  - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950)
  - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950)
  - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950)
  - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950)
  - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950)
  - hwdb: add a vmbus id for HyperV Video device (RHEL-5950)
  - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950)
  - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950)
  - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950)
  - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950)
  - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950)
  - Add OrangePi NEO Scancodes (RHEL-5950)
  - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950)
  - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950)
  - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950)
  - hwdb: Add some HP IR cameras (RHEL-5950)
  - hwdb: add more AV controllers (RHEL-5950)
  - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950)
  - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950)
  - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950)
  - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950)
  - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950)
  - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950)
  - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - add udev rules for trezor hw wallet devices (RHEL-5950)
  - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950)
  - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950)
  - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-43
changelog:
  - udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103)
  - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103)
  - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103)
  - Include <threads.h> if possible to get thread_local definition (RHEL-50651)
  - add APIs for detecting confidential virtualization (RHEL-50651)
  - detect-virt: add --cvm option (RHEL-50651)
  - detect-virt: add --list-cvm option (RHEL-50651)
  - unit: add "cvm" option for ConditionSecurity (RHEL-50651)
  - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651)
  - core: log detected confidential virtualization type (RHEL-50651)
  - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651)
  - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-50651)
  - confidential-virt: add detection for s390x target (RHEL-50651)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: Jiri Hnidek <jhnidek@redhat.com> 4-1
changelog:
  * Tue Jul 26 2022 Jiri Hnidek <jhnidek@redhat.com> 3-1
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - test: drop unused reference-image file (ptoscano@redhat.com)
  - Drop the static npm-shrinkwrap.json (ptoscano@redhat.com)
  - Bump cockpit test API to 273 + run-tests scheduler fix (martin@piware.de)
  - spec: suggest insights-client on RHEL (ptoscano@redhat.com)
  - tito: remove autogenerated spec file before tagging (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 5-1
changelog:
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2077759: invoke cockpit.translate() after document loading
    (ptoscano@redhat.com)
  - test: Drop outdated copy of packagelib.py (martin@piware.de)
  - Added missing keys to react components (jhnidek@redhat.com)
  - Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - test: Sync packagelib.py with cockpit main (martin@piware.de)
  - New target and added one project directory to .gitignore (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ 6dcc9ec2 (bz 2124605)
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 0e560296 (bz 2174916)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-7
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
  - Use proper SPDX license identifiers
  - Fix a test failure


author: Vladis Dronov <vdronov@redhat.com> - 6.17-1
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-64951)


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
changelog:
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
changelog:
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links


author: Dan Horák <dhorak@redhat.com> - 2:2.24.0-1
changelog:
  - rebased to 2.24.0 (#2110310)
  - KVM: Tool to process encrypted Secure Execution guest dumps (#2044198)
  - zdev: Site-aware device configuration (#2044202)
  - Support IBM z16 Processor-Activity-Instrumentation Facility (#2110298)
  - Transparent DASD PPRC (Peer-to-Peer Remote Copy) handling (#2126617)
  - Support IBM z16 Processor Activity Instrumentation Extension 1 (#2127435)
  - Display Processor Activity Instrumentation CPACF counters (#2111012)
  - Resolves: #2110310 #2044198 #2044202 #2110298 #2126617 #2127435 #2111012


author: Dan Horák <dhorak@redhat.com> - 2:2.25.0-1
changelog:
  - rebased to 2.25.0 (#2110310)
  - zipl: Support for Secure Boot IPL and Dump from ECKD DASD (#2044200)
  - zipl: Add secure boot trailer (#2142883)
  - Resolves: #2110310 #2044200 #2142883


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-1
changelog:
  - rebased to 2.27.0 (#2160062)
  - lszcrypt fails when querying a specific domain (#2177612)
  - DASD autoquiesce support (#2196517)
  - zcrypt DD: AP command filtering (#2170360)
  - vmconvert and zgetdump consolidation (#2173924)
  - Support for List-Directed dump from ECKD DASD (#2160052)
  - Support for List-Directed IPL and re-IPL from ECKD DASD (#2160040)
  - Resolves: #2160062 #2177612 #2196517 #2170360 #2173924 #2160052 #2160040


author: Dan Horák <dhorak@redhat.com> - 2:2.27.0-2
changelog:
  - zdev: cleanup patches to fix warnings (#2223304)
  - zdev: add missing label in the udev-rules (#2222900)
  - Resolves: #2223304 #2222900


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.44-1
changelog:
  - Allow coreos-installer-generator work with partitions
  Resolves: RHEL-38614
  - Label /etc/mdadm.conf.d with mdadm_conf_t
  Resolves: RHEL-38614
  - Change file context specification to /var/run/metadata
  Resolves: RHEL-49735
  - Allow initrc_t transition to passwd_t
  Resolves: RHEL-17404
  - systemd: allow systemd_notify_t to send data to kernel_t datagram sockets
  Resolves: RHEL-25514
  - systemd: allow sys_admin capability for systemd_notify_t
  Resolves: RHEL-25514
  - Change systemd-network-generator transition to include class file
  Resolves: RHEL-47033
  - Allow sshd_keygen_t connect to userdbd over a unix stream socket
  Resolves: RHEL-47033


author: Zdenek Pytela <zpytela@redhat.com> - 35.1.46-1
changelog:
  - Label /run/modprobe.d with modules_conf_t
  Resolves: RHEL-61453
  - Allow boothd connect to kernel over a unix socket
  Resolves: RHEL-57104
  - Allow boothd connect to systemd-userdbd over a unix socket
  Resolves: RHEL-57104
  - Additional updates stalld policy for bpf usage
  Resolves: RHEL-57075
  - Update stalld policy for bpf usage
  Resolves: RHEL-57075
  - Allow ptp4l the sys_admin capability
  Resolves: RHEL-55133
  - Label /dev/hfi1_[0-9]+ devices
  Resolves: RHEL-54996
  - Confine iio-sensor-proxy
  Resolves: RHEL-17346


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.47-1
changelog:
  - Label /etc/sysctl.d and /run/sysctl.d with system_conf_t
  Resolves: RHEL-56988
  - Allow lldpad create and use netlink_generic_socket
  Resolves: RHEL-61832
  - Allow unconfined_t execute kmod in the kmod domain
  Resolves: RHEL-54710
  - Allow confined users r/w to screen unix stream socket
  Resolves: RHEL-50379
  - Label /root/.screenrc and /root/.tmux.conf with screen_home_t
  Resolves: RHEL-50375
  - Allow iio-sensor-proxy the bpf capability
  Resolves: RHEL-17346


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.48-1
changelog:
  - Revert "Allow unconfined_t execute kmod in the kmod domain"
  Resolves: RHEL-65008
  - Add policy for /usr/libexec/samba/samba-bgqd
  Resolves: RHEL-53124


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.49-1
changelog:
  - Update virtlogd policy
  Resolves: RHEL-69433
  - Allow svirt_t the sys_rawio capability
  Resolves: RHEL-56955
  - Allow qemu-ga the dac_override and dac_read_search capabilities
  Resolves: RHEL-52476
  - Allow ip the setexec permission
  Resolves: RHEL-62923
  - Allow alsa get attributes filesystems with extended attributes
  Resolves: RHEL-61472
  - Allow bacula execute container in the container domain
  Resolves: RHEL-21168
  - Allow httpd get attributes of dirsrv unit files
  Resolves: RHEL-46808
  - Update samba-bgqd policy
  Resolves: RHEL-69517
  - Allow samba-bgqd read cups config files
  Resolves: RHEL-69517
  - Update policy for samba-bgqd
  Resolves: RHEL-69517
  - Update bootupd policy for the removing-state-file test
  Resolves: RHEL-66584
  - Allow qatlib search the content of the kernel debugging filesystem
  Resolves: RHEL-53864
  - Allow qatlib connect to systemd-machined over a unix socket
  Resolves: RHEL-53864
  - Update qatlib policy for v24.02 with new features
  Resolves: RHEL-53864


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.50-1
changelog:
  - Allow auditctl signal auditd
  Resolves: RHEL-68969
  - Fix the cups_read_pid_files() interface to use read_files_pattern
  Resolves: RHEL-69517
  - Dontaudit systemd-coredump the sys_resource capability
  Resolves: RHEL-46339
  - Allow rpcd read network sysctls
  Resolves: RHEL-1558
  - Allow irqbalance setpcap capability in the user namespace
  Resolves: RHEL-69564
  - Allow traceroute_t bind rawip sockets to unreserved ports
  Resolves: RHEL-54561
  - Allow svirt_t the sys_rawio capability
  Resolves: RHEL-56955
  - Change /run/sysctl\.d(/.*)? fc entry to /var/run/sysctl\.d(/.*)?
  Resolves: RHEL-56988
  - Exclude container-selinux manpage from selinux-policy-doc
  Resolves: RHEL-69916


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.51-1
changelog:
  - Allow rsyslog read systemd-logind session files
  Resolves: RHEL-73839
  - Allow samba-bgqd connect to cupsd over an unix domain stream socket
  Resolves: RHEL-72860
  - Allow svirt_t read sysfs files
  Resolves: RHEL-70839
  - Allow xdm dbus chat with power-profiles-daemon
  Resolves: RHEL-61117
  - Update power-profiles-daemon policy
  Resolves: RHEL-61117
  - Confine power-profiles-daemon
  Resolves: RHEL-61117
  - Allow virtqemud domain transition to nbdkit
  Resolves: RHEL-56029
  - Add nbdkit interfaces defined conditionally
  Resolves: RHEL-56029
  - Confine the switcheroo-control service
  Resolves: RHEL-24268


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.52-1
changelog:
  - Add the files_read_root_files() interface
  Resolves: RHEL-70849
  - Dontaudit systemd-logind remove all files
  Resolves: RHEL-59145
  - Add the files_dontaudit_read_all_dirs() interface
  Resolves: RHEL-59145
  - Add the files_dontaudit_delete_all_files() interface
  Resolves: RHEL-59145
  - Allow rhsmcertd notify virt-who
  Resolves: RHEL-77152
  - Allow irqbalance to run unconfined scripts conditionally
  Resolves: RHEL-1556
  - Backport bootupd policy from current Fedora rawhide
  Resolves: RHEL-70849
  - Support using systemd containers
  Resolves: RHEL-76352
  - Allow svirt_t connect to unconfined_t over a unix domain socket
  Resolves: RHEL-37539
  - Allow virt_domain to use pulseaudio - conditional
  Resolves: RHEL-1379
  - Allow telnetd read network sysctls
  Resolves: RHEL-58825
  - Allow alsa watch generic device directories
  Resolves: RHEL-61472
  - Update switcheroo policy
  Resolves: RHEL-24268


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.53-1
changelog:
  - Allow svirt_t to connect to nbdkit over a unix stream socket
  Resolves: RHEL-56029
  - Allow power-profiles-daemon the bpf capability
  Resolves: RHEL-61117
  - Allow systemd-machined the kill user-namespace capability
  Resolves: RHEL-76352


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.54-1
changelog:
  - Confine tuned-ppd
  Resolves: RHEL-69526
  - Make tuned work with mls policy
  Resolves: RHEL-69526
  - Allow afterburn to mount and read config drives
  Resolves: RHEL-79319


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.55-1
changelog:
  - Allow tuned-ppd read sssd public files
  Resolves: RHEL-69526
  - Allow systemd-journal-upload read init pid files
  Resolves: RHEL-62196
  - Label SetroubleshootPrivileged.py with setroubleshootd_exec_t
  Resolves: RHEL-77319
  - Allow chronyd-restricted sendto to chronyc
  Resolves: RHEL-82308
  - Allow chronyc sendto to chronyd-restricted
  Resolves: RHEL-82308


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Martin Osvald <mosvald@redhat.com> - 2.13.6-1
changelog:
  - csh.login: set PATH again (if empty) to prevent interpreter error (#1744106)
  - aliases: add pcp user (#1744091)
  - lang.csh: fix several variable substitution bugs and typos (#1746749)
  - don't set LANG as a per-shell variable
  - fix lang.csh script so it doesn't break tcsh -e scripts II (#1620004)
  - use full path for non-builtins in csh.cshrc, csh.login, lang.csh, lang.sh and profile (#1747493)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-9
changelog:
  - libsubid: creation and nsswitch support. Resolves: #1859252
  - Creation of subid and subid-devel subpackages
  - man: mention NSS in new[ug]idmap manpages
  - libsubid: move development header to shadow folder
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - useradd: fix SUB_UID_COUNT=0
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - man: clarify subid delegation
  - libsubid: make shadow_logfd not extern
  - login.defs: include HMAC_CRYPTO_ALGO key


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - useradd: modify check ID range for system users. Resolves: #2004911
  - Fix release sources
  - Add subid requirement for subid-devel


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Pavel Moravec <pmoravec@redhat.com> = 4.6.1-1
changelog:
  - rebase to upstream 4.6.1
    Resolves: RHEL-21174
  - [redhat] Change authentication method for RHEL
    Resolves: RHEL-21178


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-1
changelog:
  - Update to 4.9.1 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Abhi Das <adas@redhat.com> - 4.4-9.git1
changelog:
  - CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    rhbz#2000638


author: Abhi Das <adas@redhat.com> - 4.4-10.git1
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    rhbz#2007304


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).
  - Cater for RHEL 9 license requirement idiosyncrasies (#2103032).


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-1
changelog:
  - Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
  - Updated the SPDX license expression.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-2
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.12-1
changelog:
  - Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
    "-isystem /usr/include" from CPPFLAGS (RHEL-8646).


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: Clemens Lang <cllang@redhat.com> - 5.62-2
changelog:
  - Fix stunnel in FIPS mode
    Resolves: rhbz#2050617
  - Fail build if tests fail
    Resolves: rhbz#2051083


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2468
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Clemens Lang <cllang@redhat.com> - 5.71-2
changelog:
  - Speed up loading client CA list from CAfile
    Resolves: RHEL-52321
  - Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
    Resolves: RHEL-52317


author: William Poteat <wpoteat@redhat.com> 1.29.10-1
changelog:
  - Switch dates returned by D-Bus ListInstalledProducts to ISO 8601
    (ptoscano@redhat.com)
  - 1793501: switch dates returned by D-Bus GetPool to ISO 8601
    (ptoscano@redhat.com)
  - Add format_iso8601_date.format_iso8601_date() (ptoscano@redhat.com)
  - Make sure, re-register works for deb repos (suttner@atix.de)
  - 1863039: Fix issue with dnf/yum variables (jhnidek@redhat.com)
  - 1879856: suppress the warning message when setting syspurpose values
    (tmerry@redhat.com)
  - ENT-2779: call format() on translated string (ptoscano@redhat.com)
  - 1930037: cockpit: ensure /etc/pki/product exist (ptoscano@redhat.com)
  - 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Reword ambiguous message (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - cockpit: fix extraction of plural messages (ptoscano@redhat.com)
  - 1672805: 'Addons' is failing spell check and should be changed to 'Add-ons'
    to match documentation (tmerry@redhat.com)
  - 1731109: improve man page & help for registering with --force option
    (tmerry@redhat.com)
  - 1749395: Proper handling when a user does not have an org
    (wpoteat@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1916540: Negative proxy tests occasionally encounter the wrong exception
    handling (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-3711: Fix a couple of typos (tmerry@redhat.com)
  - ENT-2468: Use format strings with named arguments for translator context
    (tmerry@redhat.com)
  - ENT-3276: refactor test_managercli.py by modules (ptoscano@redhat.com)
  - 1897767: what does 'No Valid values provided for usage' mean to the user
    (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Replace optparse with argparse (wpoteat@redhat.com)
  - Fix variable for RestlibException exception (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Correction for condition that was breaking 3 nosetests (wpoteat@redhat.com)
  - maybe this time? (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Remove extra '%' in string (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - cockpit: Adjust for changed services image (martin@piware.de)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (wpoteat@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1897767: what does 'No valid values provided for usage' mean to the user
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    (tmerry@localhost.localdomain)
  - 1880920: check for invalid addons (ptoscano@redhat.com)
  - Add AbstractSyspurposeCommand._are_provided_values_valid helper
    (ptoscano@redhat.com)
  - 1924166: improve man text of syspurpose --show (ptoscano@redhat.com)
  - 1646718 debrand a message so that it doesn't say Red Hat Subscription Manager
    but instead an entitlement server (tmerry@localhost.localdomain)


author: William Poteat <wpoteat@redhat.com> 1.29.11-1
changelog:
  - Add subscription-manager dependency to apt-katello-transport (kolb@atix.de)
  - 1898552: refactor/fix collection of IP v4/v6 address info
    (ptoscano@redhat.com)
  - cockpit: Enable TLS for mock insights server (martin@piware.de)
  - adding timoeout to jenkins pipeline (#2585) (jmolet@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1819555: cockpit: translate untranslatable messages (ptoscano@redhat.com)
  - Replace hardcoded errno value with constant (ptoscano@redhat.com)
  - 1940658: bash: complete also the syspurpose subcommand (ptoscano@redhat.com)
  - 1878736: use our i18n functions instead of dnf ones (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.12-1
changelog:
  - 1953069: bash: fix listing of config options (#2609) (ptoscano@redhat.com)
  - Cleanup old *.egg-info dirs in %post (csnyder@redhat.com)
  - 1953047: bash: drop completion for subscribe & unsubscribe
    (ptoscano@redhat.com)
  - 1952228: fix formatting of log error messages (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.13-1
changelog:
  - Updated translations for Korean, Chinese (simiplified, zh_CN), Italian
  - Refactoring of cloud collector/detector and facts (#2515)
    (jhnidek@redhat.com)
  - 1920020: show error message when setting invalid default_log_level as well as
    on every run until changed to a valid value (tmerry@redhat.com)
  - 1959048: improve wording for missing or empty syspurpose values
    (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1960765: fix typo "explicity" in man page (ptoscano@redhat.com)
  - cockpit: Lower cockpit-ws dependency to Recommends (martin@piware.de)
  - test: Robustify and trim down cockpit-ws installation (martin@piware.de)
  - jenkins: switch stylish job to Python 3 (ptoscano@redhat.com)
  - flake8: add more locally found issues (ptoscano@redhat.com)
  - Remove extra whitespace before '(' (ptoscano@redhat.com)
  - 1952879: extract messages from argparse instead of optparse
    (ptoscano@redhat.com)
  - po: set Project-Id-Version to rhsm (ptoscano@redhat.com)
  - po: fuzzy messages with invalid/missing placeholders (ptoscano@redhat.com)
  - po: ko: manually fix placeholder (ptoscano@redhat.com)
  - Update script reference to base branch to main (wpoteat@redhat.com)
  - 1896715: Set proper read permissions on certs (wpoteat@redhat.com)
  - cockpit: Use PF4 based empty state (mmarusak@redhat.com)
  - cockpit: Drop uglification (mmarusak@redhat.com)
  - cockpit: Use 'noreferrer' for external links (mmarusak@redhat.com)
  - cockpit: Add `standard-jsx` eslint plugin (mmarusak@redhat.com)
  - cockpit: Remove loaders for .es6 files (mmarusak@redhat.com)
  - cockpit: Add package-lock.json to .gitignore (mmarusak@redhat.com)
  - build: drop version requirements for pep8 and flake8 (ptoscano@redhat.com)
  - build: remove pyqver test requirement (ptoscano@redhat.com)
  - Add flake8 configuration (ptoscano@redhat.com)
  - Add missing second empty line after class/function (ptoscano@redhat.com)
  - Fix some over-indented code blocks (ptoscano@redhat.com)
  - jenkins: disambiguate virtualenv names (ptoscano@redhat.com)
  - 1956654: Fix issue with proxy and cockpit plugin (jhnidek@redhat.com)
  - Releaser for Centos (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.14-1
changelog:
  - Drop more files/references of old standalone syspurpose tool
    (ptoscano@redhat.com)
  - 1967780: improve placeholders in help text (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1898563: move syspurpose subcommands within the 'syspurpose' command
    (ptoscano@redhat.com)
  - Rename internal variable for syspurpose --show (ptoscano@redhat.com)
  - Drop command name from args when parsing them (ptoscano@redhat.com)
  - 1941904: disable initial-setup in RHEL >= 9 (ptoscano@redhat.com)
  - 1959048: improve wording for invalid syspurpose values (ptoscano@redhat.com)
  - Enable subman to run normally in containers for development/test
    (csnyder@redhat.com)
  - Fixed reporting of AWS cloud facts (null value) (jhnidek@redhat.com)
  - cockpit: Test also system purpose (mmarusak@redhat.com)
  - cockpit: Use current PF4 components and design (mmarusak@redhat.com)
  - test: Update cockpit test/common library (mmarusak@redhat.com)
  - cockpit: Update babel (mmarusak@redhat.com)
  - cockpit: Sync lib/patternfly with Cockpit (mmarusak@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.15-1
changelog:
  - 1941904: actually disable initial-setup in RHEL >= 9, and Fedora too (#2675)
    (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.16-1
changelog:
  - 1941904: remove packages (#2692)
    (31166354+tlhmerry9@users.noreply.github.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Move cloud detector/collector to cloud-what package (#2680)
    (jhnidek@redhat.com)
  - 1975552: add '[SUBMODULE]' in syspurpose usage string (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1973807: fix wording on error when listing syspurpose values (#2684)
    (ptoscano@redhat.com)
  - 1975552: remove extra '[OPTIONS]' from syspurpose usage string (#2682)
    (ptoscano@redhat.com)
  - Make Azure cloud collector more reliable (#2645) (jhnidek@redhat.com)
  - 1967210: Do not print warning, when valid value is provided
    (jhnidek@redhat.com)
  - 1968420: improve description of rhsm.conf format (ptoscano@redhat.com)
  - Delete server repo file (suttner@atix.de)


author: Christopher Snyder <csnyder@redhat.com> 1.29.17-1
changelog:
  - Remove no arch from python3-cloud-what package (csnyder@redhat.com)
  - 1938878: Fix issues discovered by static code analyzers (#2644)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.18-1
changelog:
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - Slightly improve our container detection (#2611) (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1976225: read lscpu from its JSON output if available (#2699)
    (ptoscano@redhat.com)
  - 1975589: Correct typo in dnf plugin message (wpoteat@redhat.com)
  - 1924126: Fix profile upload on AWS systems (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.19-1
changelog:
  - ENT-4083: Fix flake8 error E402 (mhorky@redhat.com)
  - ENT-4085: Fix flake8 error E713 (mhorky@redhat.com)
  - 2003777: Show available organizations before asking for input
    (mhorky@redhat.com)
  - ENT-4302: Remove "u" prefix from strings (mhorky@redhat.com)
  - ENT-4326: Drop "-*- coding" comment (mhorky@redhat.com)
  - ENT-4277: Drop __future__ imports (mhorky@redhat.com)
  - 1979323: Cockpit - do not show red red icon in SCA mode (jhnidek@redhat.com)
  - Remove outdated comments from the coverage Jenkins job (mhorky@redhat.com)
  - ENT-4252: Migrate from nose to pytest (mhorky@redhat.com)
  - Debian / Ubuntu multi-architectures support
    (sbernhard@users.noreply.github.com)
  - Translated using Weblate (Spanish) (ehespinosa57@gmail.com)
  - 1859157: Display better error message on incorrect --org (mhorky@redhat.com)
  - New D-Bus method GetOrg() (jhnidek@redhat.com)
  - 1924338: list prints not status and dates in SCA mode (jhnidek@redhat.com)
  - 1983144: More useful feedback on unknown argument (mhorky@redhat.com)
  - ENT-4089: Fix flake8 error E741 (mhorky@redhat.com)
  - ENT-4090: Fix flake8 error F821 (mhorky@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - ENT-4091: Fix flake8 error F841 (mhorky@redhat.com)
  - ENT-4228: Format rhsmlib exception (mhorky@redhat.com)
  - ENT-4228: Always format restlib exceptions (mhorky@redhat.com)
  - Update exception handling (mhorky@redhat.com)
  - Drop unused M2Crypto bits (ptoscano@redhat.com)
  - 1995465: Do not use deprecated collections.MutableMapping
    (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1983074: Remove invalid log level (mhorky@redhat.com)
  - ENT-4213: Remove deprecated pep8 package (mhorky@redhat.com)
  - build: switch to os.makedirs(..., exist_ok=True) (ptoscano@redhat.com)
  - build: call create_dest_dir() only when running callback
    (ptoscano@redhat.com)
  - flake8: enable E131, E714 (ptoscano@redhat.com)
  - 1859569: Abort on invalid username/token option in syspurpose commands
    (mhorky@redhat.com)
  - Drop logging.conf (ptoscano@redhat.com)
  - Drop long-dead sat5to6 script (ptoscano@redhat.com)
  - Drop RHN migration (ptoscano@redhat.com)
  - 1922151: Add /var/cache/cloud-what to python3-cloud-what RPM.
    (jhnidek@redhat.com)
  - ENT-164: Remove ga_loader importer (mhorky@redhat.com)
  - ENT-164: Drop rhsm-gtk (mhorky@redhat.com)
  - ENT-164: Drop subscription-manager-gui & rhsm-icon (mhorky@redhat.com)
  - Add minimal documentation for the plugins directories (ptoscano@redhat.com)
  - ENT-4168: Unify description of --org in syspurpose subcommands
    (mhorky@redhat.com)
  - 1922151: Use in-memory cache on AWS too (jhnidek@redhat.com)
  - Move zypper plugins to an own directory (ptoscano@redhat.com)
  - Move dnf plugins to an own directory (ptoscano@redhat.com)
  - Move libdnf plugins to an own directory (ptoscano@redhat.com)
  - Drop support for YUM plugins (ptoscano@redhat.com)
  - Drop YUM plugins (ptoscano@redhat.com)
  - Add 'syspurpose' to list of commands in manpage (mhorky@redhat.com)
  - ENT-4152: Drop initial-setup addon (mhorky@redhat.com)
  - ENT-4136: Drop firstboot support (mhorky@redhat.com)
  - ENT-3764: Change comments to follow Conscious language initiative
    (mhorky@redhat.com)
  - ENT-3764: Update variable names in hwprobe.py (mhorky@redhat.com)
  - ENT-3764: Update project URLs to new versions (mhorky@redhat.com)
  - ENT-3764: Remove BLACKLISTED_LOCALES (mhorky@redhat.com)
  - 1980418: Add 'active' field to module stream profile (ianballou67@gmail.com)
  - repos: document order of --enable & --disable (ptoscano@redhat.com)
  - 1984133: repos: respect order of --enable & --disable (ptoscano@redhat.com)
  - Include D-Bus sender in User-Agent http header; Singleton
    (jhnidek@redhat.com)
  - hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU
    (m.mizuma@jp.fujitsu.com)
  - flake8: enable E121, E122, E123, E126, E127, E128 (ptoscano@redhat.com)
  - flake8: disable E122 for test/test_utils.py (ptoscano@redhat.com)
  - Wrap first argument/element in function calls & containers
    (ptoscano@redhat.com)
  - Fix indentation of some continuation lines (ptoscano@redhat.com)
  - 1974641: Fix tab completion with multiple optional commands
    (mhorky@redhat.com)
  - 1876828: Try to suppress errors in stderr when not run as root
    (mhorky@redhat.com)
  - 1977452: typo in string format change Add quotes to a {filename} and remove
    an extra space. (tmerry@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1976240: Improve HTTP code/message reporting in error strings
    (mhorky@redhat.com)
  - Added new stage for running libdnf unit tests. (jhnidek@redhat.com)
  - make sure gpg key download doesn't fail because of private certs
    (sbernhard@users.noreply.github.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.20-1
changelog:
  - ENT-4279: Switch away from rhsmlib.compat.subprocess_compat
    (mhorky@redhat.com)
  - 2021578: Remove proxy server test as it is unnecessary (wpoteat@redhat.com)
  - cockpit: validate SSL connection to mock-insights (ptoscano@redhat.com)
  - cockpit: fix hostname of the fake Insights server (ptoscano@redhat.com)
  - cockpit: validate the SSL connection to candlepin (ptoscano@redhat.com)
  - cockpit: resolve hostname of service machine (ptoscano@redhat.com)
  - cockpit: use CANDLEPIN_URL consistently (ptoscano@redhat.com)
  - 1719690: Update to message formatting (wpoteat@redhat.com)
  - cockpit: account for missing insights-client on non-RHEL systems
    (ptoscano@redhat.com)
  - cockpit: skip Insights tests on non-RHEL OSes (ptoscano@redhat.com)
  - ENT-4370: Drop old dbus_interface.py (mhorky@redhat.com)
  - ENT-4278: Drop unittest2 imports (mhorky@redhat.com)
  - 1985845: Fix sub-man service-level --show (jhnidek@redhat.com)
  - spec: drop non-systemd support (ptoscano@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 33 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)
  - spec: drop support for SUSE < 15 (ptoscano@redhat.com)
  - 2015173: chmod /etc/pki/entitlement/*.pem only when existing
    (ptoscano@redhat.com)
  - cockpit: port subscriptions info icons to PF4 icons (kkoukiou@redhat.com)
  - cockpit: translate some untranslated aria-labels (kkoukiou@redhat.com)
  - cockpit: Port Po2JSONPlugin to webpack 5 (kkoukiou@redhat.com)
  - cockpit: stop including PF3 - it's not used anymore (kkoukiou@redhat.com)
  - cockpit: port Insights dialog remaining non PF4 parts (kkoukiou@redhat.com)
  - cockpit: port subscriptions register dialog to Patternfly 4
    (kkoukiou@redhat.com)
  - cockpit: make default TEST_OS rhel-8-4 (kkoukiou@redhat.com)
  - cockpit: port spinners to PF4 spinners (kkoukiou@redhat.com)
  - cockpit: replace custom Revealer component with 'ExpandableSection' from PF4
    (kkoukiou@redhat.com)
  - cockpit: replace pficon and fa classes with svgs form react-icons
    (kkoukiou@redhat.com)
  - cockpit: remove jquery unused dependency (kkoukiou@redhat.com)
  - cockpit: patternfly is a normal dependency - not just dev
    (kkoukiou@redhat.com)
  - cockpit: update patternfly modules and explicitely specify react-icons
    dependency (kkoukiou@redhat.com)
  - cockpit: clean up package.json from unused dependencies and move to webpack 5
    (kkoukiou@redhat.com)
  - webpack: Use relative resolve path for npm 7 compatibility
    (kkoukiou@redhat.com)
  - cockpit: Stop using a custom Select, use the one from PF instead
    (kkoukiou@redhat.com)
  - cockpit: checkout Cockpit's PF/React/build library instead of keeping a
    direct copy of it locally (kkoukiou@redhat.com)
  - cockpit: update npmshrinkwrap file (kkoukiou@redhat.com)
  - Use pytest --forked for D-Bus unit tests (jhnidek@redhat.com)
  - Support of python3 of zypper rhsm script (suttner@atix.de)
  - 2003777: Fix organizations hint in syspurpose commands (mhorky@redhat.com)
  - Small style changes of d-bus server and d-bus unit tests (jhnidek@redhat.com)
  - * Removed GLib.threads_init() (jhnidek@redhat.com)
  - Added cleanup for one patcher; fixed some comments. (jhnidek@redhat.com)
  - cockpit: skip RHEL 9 tests using insights-client (ptoscano@redhat.com)
  - cockpit: fix system installation of subscription-manager
    (ptoscano@redhat.com)
  - cockpit: wait 5 seconds for candlepin at first (ptoscano@redhat.com)
  - cockpit: use the self-signed key in mock-insights (ptoscano@redhat.com)
  - test: Building requires gcc (mmarusak@redhat.com)
  - test: Tell tests about rhel-9 package manager (mmarusak@redhat.com)
  - facts: drop dead/unused code from CleanupCollector (ptoscano@redhat.com)
  - 1989955: use /proc/device-tree/ibm,partition-uuid on POWER LPARs
    (ptoscano@redhat.com)
  - facts: prepare _get_devicetree_uuid() for multiple files
    (ptoscano@redhat.com)
  - facts: refactor device-tree parts of VirtUuidCollector (ptoscano@redhat.com)
  - cockpit: Move from obsolete node-sass to Dart sass (martin@piware.de)
  - Cloud-what: Make saving token file more robust (jhnidek@redhat.com)
  - Fix redundant API calls to Candlepin (hyu@redhat.com)
  - Remove i-notify watchers on the end of the loop (jhnidek@redhat.com)
  - build: pin flake8 to < 4 (ptoscano@redhat.com)
  - Only rpmlint our specfiles (csnyder@redhat.com)
  - Version our obsoletes of syspurpose and the container plugin
    (csnyder@redhat.com)
  - Remove unnecessary comment and sles/suse tests (csnyder@redhat.com)
  - ENT-4273: Drop usage of six.moves (mhorky@redhat.com)
  - ENT-4379: Remove function make_utf8 (mhorky@redhat.com)
  - ENT-4087: Fix flake8 error E722 (mhorky@redhat.com)
  - make spec file SUSE / Open Build Service compliant (p.seiler@linuxmail.org)
  - 2003777: Only hint organizations if it's needed (mhorky@redhat.com)
  - Drop old GUI docs leftovers (ptoscano@redhat.com)
  - tests: drop no more needed rhsm_display (ptoscano@redhat.com)
  - build: remove old specific check for GUI file (ptoscano@redhat.com)
  - Drop async_utils & its tests (ptoscano@redhat.com)
  - Remove rhsm-icon leftovers (ptoscano@redhat.com)
  - build: remove unused detect_overindent function (ptoscano@redhat.com)
  - build: drop lxml leftovers (ptoscano@redhat.com)
  - build: drop Glade leftovers (ptoscano@redhat.com)
  - Add rhsm proxy support to apt-transport-katello (suttner@atix.de)
  - ENT-4289: Drop Sphinx (mhorky@redhat.com)
  - ENT-4340: Resolve deprecation warnings (mhorky@redhat.com)
  - Fixed one unused import of six (jhnidek@redhat.com)
  - ENT-4272: Remove Python 2 conditionals (mhorky@redhat.com)
  - ENT-4274: Remove six.assert* methods (mhorky@redhat.com)
  - ENT-4275: Switch away from six.BytesIO and six.StringIO (mhorky@redhat.com)
  - ENT-4082: Fix flake8 error E265 (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.21-1
changelog:
  - 2020248: handle server-side consumer deletion in syspurpose commands
    (ptoscano@redhat.com)
  - connection: recognize proxy errors (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Ignore debian architecture ALL (schmidt@atix.de)
  - 2028894: Don't allow service-level --serverurl on registered system
    (mhorky@redhat.com)
  - 2037771: Cockpit registration dialog: enable insights by default
    (jhnidek@redhat.com)
  - 2039322: fix string representation of DMI facts (ptoscano@redhat.com)
  - Drop usage of six.python_2_unicode_compatible (ptoscano@redhat.com)
  - ENT-4588: Switch away from six iterators (mhorky@redhat.com)
  - ENT-4590: Switch away from six.callable (mhorky@redhat.com)
  - ENT-4587: Switch away from six types (mhorky@redhat.com)
  - Adding permissive coverage publishing (jmolet@redhat.com)
  - Ensure that prompted environment entry follows state of multiples
    (wpoteat@redhat.com)
  - 2026316: Do not delete cache of content_access during refresh
    (jhnidek@redhat.com)
  - More SUSE compliance (jhnidek@redhat.com)
  - Updates for non-multi-environment scenario (wpoteat@redhat.com)
  - Fix some minor issues related to syspurpose (jhnidek@redhat.com)
  - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
  - service-level: drop useless check (ptoscano@redhat.com)
  - 2026286: consider user-specified --org in any case (ptoscano@redhat.com)
  - 1995032: Use multiple environments (wpoteat@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - Switch away from Thread.getName() (ptoscano@redhat.com)
  - Fix indentation of ProductStatus. (jhnidek@redhat.com)
  - 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
  - Switch comma-separated join to space-separated join (schmidt@atix.de)
  - 2029927: Fix bash autocompletion (mhorky@redhat.com)
  - utils: use shutil.get_terminal_size() (ptoscano@redhat.com)
  - Remove PyXML leftovers (ptoscano@redhat.com)
  - 2026320: fix format of HTTP-date headers (ptoscano@redhat.com)
  - connection: move HTTP-date formatting to own helper (ptoscano@redhat.com)
  - Ensure datetime.timezone.utc objects for parsed UTC dates
    (ptoscano@redhat.com)
  - rhsm: drop custom which() implementation (ptoscano@redhat.com)
  - facts: switch to shutil.which() (ptoscano@redhat.com)
  - test: unconditionally use hashlib (ptoscano@redhat.com)
  - 1999048: Fixed partially subscribed product in Cockpit plugin
    (jhnidek@redhat.com)
  - test: rename tests to default pytest filename pattern (ptoscano@redhat.com)
  - Fixed last bits related to updated D-Bus Register method.
    (jhnidek@redhat.com)
  - Cockpit plugin: display syspurpose card without attributes
    (jhnidek@redhat.com)
  - 2023257: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2023257: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
  - Ignore enable_content option in RegisterWithActivationKeys()
    (jhnidek@redhat.com)
  - Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
  - Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
  - Added refresh() method to entitlement service (jhnidek@redhat.com)
  - Fixed issue with status cache (jhnidek@redhat.com)
  - Add information about content access mode to consumer (jhnidek@redhat.com)
  - 2024929: build: fix build on 'build' target (ptoscano@redhat.com)
  - 2023391: libdnf: respect environment CFLAGS (ptoscano@redhat.com)
  - Drop unused ssl_verify_depth config option (ptoscano@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.23-1
changelog:
  - Ignore debian architecture ALL (schmidt@atix.de)
  - 2028894: Don't allow service-level --serverurl on registered system
    (mhorky@redhat.com)
  - 2037771: Cockpit registration dialog: enable insights by default
    (jhnidek@redhat.com)
  - 2039322: fix string representation of DMI facts (ptoscano@redhat.com)
  - Drop usage of six.python_2_unicode_compatible (ptoscano@redhat.com)
  - ENT-4588: Switch away from six iterators (mhorky@redhat.com)
  - ENT-4590: Switch away from six.callable (mhorky@redhat.com)
  - ENT-4587: Switch away from six types (mhorky@redhat.com)
  - Adding permissive coverage publishing (jmolet@redhat.com)
  - Ensure that prompted environment entry follows state of multiples
    (wpoteat@redhat.com)
  - 2026316: Do not delete cache of content_access during refresh
    (jhnidek@redhat.com)
  - More SUSE compliance (jhnidek@redhat.com)
  - Updates for non-multi-environment scenario (wpoteat@redhat.com)
  - Fix some minor issues related to syspurpose (jhnidek@redhat.com)
  - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
  - service-level: drop useless check (ptoscano@redhat.com)
  - 2026286: consider user-specified --org in any case (ptoscano@redhat.com)
  - Drop the Vagrant bits (ptoscano@redhat.com)
  - 1995032: Use multiple environments (wpoteat@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - Switch away from Thread.getName() (ptoscano@redhat.com)
  - Fix indentation of ProductStatus. (jhnidek@redhat.com)
  - 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
  - Switch comma-separated join to space-separated join (schmidt@atix.de)
  - 2029927: Fix bash autocompletion (mhorky@redhat.com)
  - utils: use shutil.get_terminal_size() (ptoscano@redhat.com)
  - Remove PyXML leftovers (ptoscano@redhat.com)
  - 2026320: fix format of HTTP-date headers (ptoscano@redhat.com)
  - connection: move HTTP-date formatting to own helper (ptoscano@redhat.com)
  - Ensure datetime.timezone.utc objects for parsed UTC dates
    (ptoscano@redhat.com)
  - rhsm: drop custom which() implementation (ptoscano@redhat.com)
  - facts: switch to shutil.which() (ptoscano@redhat.com)
  - test: unconditionally use hashlib (ptoscano@redhat.com)
  - 1999048: Fixed partially subscribed product in Cockpit plugin
    (jhnidek@redhat.com)
  - test: rename tests to default pytest filename pattern (ptoscano@redhat.com)
  - Fixed last bits related to updated D-Bus Register method.
    (jhnidek@redhat.com)
  - Cockpit plugin: display syspurpose card without attributes
    (jhnidek@redhat.com)
  - 2023257: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2023257: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
  - Ignore enable_content option in RegisterWithActivationKeys()
    (jhnidek@redhat.com)
  - Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
  - Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
  - Added refresh() method to entitlement service (jhnidek@redhat.com)
  - Fixed issue with status cache (jhnidek@redhat.com)
  - Add information about content access mode to consumer (jhnidek@redhat.com)
  - 2024929: build: fix build on 'build' target (ptoscano@redhat.com)
  - 2023391: libdnf: respect environment CFLAGS (ptoscano@redhat.com)
  - Drop unused ssl_verify_depth config option (ptoscano@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.24-1
changelog:
  - 2023430: Cockpit: another improvement of curtain view (jhnidek@redhat.com)
  - environments: fix list for account in env-less org (ptoscano@redhat.com)
  - Reverting disabling AutoAttach() and PoolAttach() in SCA mode
    (jhnidek@redhat.com)
  - 2023430: cockpit: improve handling of main curtain view (ptoscano@redhat.com)
  - Squelch DeprecationWarning's when importing pyinotify (ptoscano@redhat.com)
  - Drop tox.ini, no more needed now (ptoscano@redhat.com)
  - flake8: improve, and integrate bits from tox.ini (ptoscano@redhat.com)
  - flake8: misc fixes in tito/tests (ptoscano@redhat.com)
  - 2035662: facts: tweak message for dmidecode warnings (ptoscano@redhat.com)
  - facts: improve/tweak logging of warnings (ptoscano@redhat.com)
  - jenkins: use custom settings for the RH internal npmjs repo
    (ptoscano@redhat.com)
  - jenkins: switch away from readFile() (ptoscano@redhat.com)
  - jenkins: simplify script filenames & labels (ptoscano@redhat.com)
  - jenkins: remove old scripts (ptoscano@redhat.com)
  - ENT-4671: Improve debug logging to stdout (mhorky@redhat.com)
  - Drop non-systemd support (ptoscano@redhat.com)
  - ENT-4650: Remove python-six from build system (mhorky@redhat.com)
  - ENT-4093: Fix flake8 warning W605 (mhorky@redhat.com)
  - ENT-4618: Switch away from six.get_method_* (mhorky@redhat.com)
  - ENT-4414: Remove RhsmIconCache (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ENT-4589: Switch away from six.reraise (mhorky@redhat.com)
  - 2041968: Update man and help for environments options (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.25-1
changelog:
  - 2046516: register: do not check environments w/ activation keys
    (ptoscano@redhat.com)
  - No-op refactor of RegisterCommand._process_environments()
    (ptoscano@redhat.com)
  - 1935446: Use updated cert with SHA-256 algorithm (jhnidek@redhat.com)
  - build: pin pytest to < 7 (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)


author: Christopher Snyder <csnyder@redhat.com> 1.29.26-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Revert "1935446: Use updated cert with SHA-256 algorithm"
    (csnyder@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 20220608-1
changelog:
  - New package built with tito
  - Using new version pattern for subscription-manager-rhsm-certificates


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-12
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  Resolves: rhbz#1902758
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Zoltan Fridrich <zfridric@redhat.com> - 1.9.5p2-2
changelog:
  - change ldap.conf to sudo-ldap.conf
  Resolves: rhbz#1908882
  - remove /usr/local/* from secure_path
  Resolves: rhbz#1908923
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1916655
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917039
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1917735


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-5
changelog:
  RHEL 9 BETA
  - sync with rhel8 spec
  Resolves: rhbz#1908882
  Resolves: rhbz#1942383
  Resolves: rhbz#1946707
  Resolves: rhbz#1946709
  Resolves: rhbz#1981278


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-7
changelog:
  - utmp resource leak in sudo
  Resolves: rhbz#1986579
  - sudo does not list /etc/dnf/protected.d/sudo.conf in the rpm config files listing
  Resolves: rhbz#1997030
  - sudo uses Recommends for sudo-python-plugin(x86-64) = 1.9.5p2-2.el9 and vim-minimal
  Resolves: rhbz#1947908
  - review of important potential issues detected by static analyzers in sudo-1.9.5p2-2.el9
  Resolves: rhbz#1938879


author: Lukas Javorsky <ljavorsk@redhat.com> - 2:1.34-4
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Jan Macku <jamacku@redhat.com> - 3:2.1.1-1
changelog:
  - rebase to 2.1.1 (RHEL-67117)
      Interpret ipv4-mapped ipv6 addresses (::ffff:A.B.C.D) as true ipv4.

  	   There are no ipv4-mapped addresses in the real network which we
  	   operate on, so use just ipv4 in such cases, but allow users
  	   to specify it this way for convenience.

  	  Return back more robast poll(2) loop handling.


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.18-6
changelog:
  - Update tuna command line interface
  - Move get_policy_and_rtprio call to parser level
  - Remove threads print statement
  Resolves: rhbz#2062865


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.18-9
changelog:
  - Remove import and fix help message
  - Update manpages for argparse CLI changes
  Resolves: rhbz#2138692


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.17-3
changelog:
  - Fix typo for variable parm
  - Handle get_policy_and_rtprio exceptions
  - Remove finally block in get_policy_and_rtprio
  Resolves: rhbz#2049303


author: John Kacur <jkacur@redhat.com> - 0.19-3
changelog:
  - Don't start the gui if a display is not available
  - Change to SPDX licence tag in the specfile
  Resolves: RHEL-8859


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.2.rc1
changelog:
  - post RC.1 fixes
    related: rhbz#2133815
  - fixed possible traceback on SIGHUP
    resolves: rhbz#2169712


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.21.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2182117
    - plugin_scheduler: fix perf fd leaks
      resolves: rhbz#2173938
    - allow skipping rollback when restarting TuneD or switching profile
      resolves: rhbz#2203142
    - function_calc_isolated_cores: no errors for offline CPUs
      resolves: rhbz#2217015


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50568
    - spec: create /etc/tuned/profiles directory
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
      resolves: RHEL-31757
    - daemon: buffer sighup signal
      resolves: RHEL-31180
    - added an option to configure profile directories
      resolves: RHEL-26157
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
      resolves: RHEL-25613
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
      resolves: RHEL-46560
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.2.rc1
changelog:
  - fixed functions packaging and added explicit conflict with power-profiles-daemon
    related: RHEL-50568


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50568
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-2
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66638
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66615


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-70457
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
      resolves: RHEL-51760
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
      resolves: RHEL-58820
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
      resolves: RHEL-72981
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
      resolves: RHEL-60906
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - sap-hana: Set transparent_hugepages to madvise
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion
      resolves: RHEL-75773


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-2
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-26860)


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.


author: Patsy Griffin <pats@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74308)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84741)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-56
changelog:
  - Use the C crc implementation instead of the asm (i686 only, other arches already use C)
  Related: rhbz#2045075


author: Jakub Martisko <jamartis@redhat.com> - 6.0-57
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45994


author: Sérgio Basto <sergio@serjux.com> - 2.6.0-3
changelog:
  - Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Sérgio Basto <sergio@serjux.com> - 2.6.1-1
changelog:
  - Update usb_modeswitch to 2.6.1
  - Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&t=2733
  - Drop BR jimtcl-devel, if we don't install dynlink-dispatcher


author: Jiri Kucera <jkucera@redhat.com> - 1.114-3
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1984417


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-1
changelog:
  - Rebased to upstream candidate.
  - Resolves: rhbz#1955374
  - Removed all python based tools, and all management should now be done with
    LVM.
  - Resolves: rhbz#1949159
  - vdostats is now a C program
  - Resolves: rhbz#1972302


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-1
changelog:
  - Fixed off-by-one issue in vdostats.
  - Resolves: rhbz#1999056
  - Improved error handling and path validation in vdostats.
  - Resolves: rhbz#2004576


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-1
changelog:
  - Fixed vdostats output issues.
  - Resolves: rhbz#2004576
  - Removed incorrect assumptions about major device numbers in vdostats.
  - Resolves: rhbz#2045885
  - Made improvements to the vdorecover script.
  - Resolves: rhbz#2047543
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#2047543


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-8
changelog:
  - 2016202 - CVE-2021-3872 vim: heap-based buffer overflow in win_redr_status() drawscreen.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028342 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028431 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-10
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-11
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0319 vim: heap-based out-of-bounds read
  - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0368 vim: Out-of-bounds Read in vim
  - CVE-2022-0417 vim: heap-based-buffer-overflow in ex_retab() of src/indent.c
  - CVE-2022-0408 vim: Stack-based Buffer Overflow in spellsuggest.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-16
changelog:
  - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior
  - CVE-2022-0943 vim: Heap-based Buffer Overflow occurs in vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-17
changelog:
  - CVE-2022-1154 vim: use after free in utf_ptr2char
  - CVE-2022-1420 vim: Out-of-range Pointer Offset


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-19
changelog:
  - CVE-2022-1785 vim: Out-of-bounds Write
  - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
  - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-4
changelog:
  - Explicitly allow/disallow unsafe legacy renegotiation on configuration base.
    Resolves: rhbz#2077973


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-3
changelog:
  - xfsdump: restoring inventory prevents non-directory files being restored from tape,
  - actually fixed by rebase to 3.1.12
  - related: bz#2166557
  - xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue
  - related: bz#2034327


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-4
changelog:
  - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x
  - Related: RHEL-8000


author: Pavel Reichl <preichl@redhat.com> - 5.19.0-1
changelog:
  - New upstream release
  - Tolerate tiny (<300MB) filesystems
  - Rename xfsprogs-5.12.0-default-bigtime-inobtcnt-on.patch to
      xfsprogs-5.19.0-disable-old-kernel-bigtime-inobtcnt-on.patch
      and amend it to reflect upstream changes
  - Backport all "Fixing" patches relevant to 5.19
    Related: rhbz#2142910


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Jakub Martisko <jamartis@redhat.com> - 3.0-31
changelog:
  - Add the missing linker flags
  - Add the patch that allows to configure the linker flags from the spec file
    Resolves: rhbz #2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-33
changelog:
  - Disable the asm implementation of some functions and use the C instead
  - This should fix some of the annocheck issues
    Related: rhbz#2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-34
changelog:
  - Fix the regression introduced in 3.0-33 that caused some of the zip build flags to be dropped
  Resolves: rhbz#2162688


author: Jakub Martisko <jamartis@redhat.com> - 3.0-35
changelog:
  - Fix the annocheck issus from 3-0-33 without reintroducing the regression from 3.0-34
  Related: rhbz#2162688


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


