<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="107">
<package pkgid="998d19ca18bc8f5b845037717d8d49e0cf94d2fd4748c5d6a1a4d1fdf85fcde3" name="gmp" arch="aarch64">
  <version epoch="1" ver="6.1.2" rel="10.el8"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:6.1.2-1" date="1482235200">- rebase</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-3" date="1487332800">- Build process updated to correctly build .debug_info for i386
  and to correctly use hardening flags</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-4" date="1489406400">- Fix the build process for ix89 family</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-5" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-6" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-7" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-8" date="1532606400">- Missing fipschecks added into build process (bug #1553679)
- --enable-fat option added to %configure (bug #1493218)</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.1.2-9" date="1560254400">- Add support for intel CET and -fcf-protection
- Add missing compiler/linker flags
Related: #1630567</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.1.2-10" date="1560513600">- Add gating.yaml
Related: #1681026</changelog>
</package>
<package pkgid="266b01b645a592e0106046cf091e1e86ad38a85fd40229f9bb9133b7751af500" name="gmp" arch="src">
  <version epoch="1" ver="6.1.2" rel="10.el8"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:6.1.2-1" date="1482235200">- rebase</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-3" date="1487332800">- Build process updated to correctly build .debug_info for i386
  and to correctly use hardening flags</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-4" date="1489406400">- Fix the build process for ix89 family</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-5" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-6" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-7" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-8" date="1532606400">- Missing fipschecks added into build process (bug #1553679)
- --enable-fat option added to %configure (bug #1493218)</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.1.2-9" date="1560254400">- Add support for intel CET and -fcf-protection
- Add missing compiler/linker flags
Related: #1630567</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.1.2-10" date="1560513600">- Add gating.yaml
Related: #1681026</changelog>
</package>
<package pkgid="580a94f679ac4c2839fefd3ee7a861ee388e21a5d61584986e2a5b411b5c663f" name="gmp-c++" arch="aarch64">
  <version epoch="1" ver="6.1.2" rel="10.el8"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:6.1.2-1" date="1482235200">- rebase</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-3" date="1487332800">- Build process updated to correctly build .debug_info for i386
  and to correctly use hardening flags</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-4" date="1489406400">- Fix the build process for ix89 family</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-5" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-6" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-7" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-8" date="1532606400">- Missing fipschecks added into build process (bug #1553679)
- --enable-fat option added to %configure (bug #1493218)</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.1.2-9" date="1560254400">- Add support for intel CET and -fcf-protection
- Add missing compiler/linker flags
Related: #1630567</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.1.2-10" date="1560513600">- Add gating.yaml
Related: #1681026</changelog>
</package>
<package pkgid="f7f180afde871cbc5806492e1be48547d8cf86ef8d3972e2cdbb92e869ea159e" name="gmp-devel" arch="aarch64">
  <version epoch="1" ver="6.1.2" rel="10.el8"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:6.1.2-1" date="1482235200">- rebase</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-3" date="1487332800">- Build process updated to correctly build .debug_info for i386
  and to correctly use hardening flags</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-4" date="1489406400">- Fix the build process for ix89 family</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-5" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-6" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:6.1.2-7" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 1:6.1.2-8" date="1532606400">- Missing fipschecks added into build process (bug #1553679)
- --enable-fat option added to %configure (bug #1493218)</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.1.2-9" date="1560254400">- Add support for intel CET and -fcf-protection
- Add missing compiler/linker flags
Related: #1630567</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.1.2-10" date="1560513600">- Add gating.yaml
Related: #1681026</changelog>
</package>
<package pkgid="8b25f2750107c1903145e1e34c933fbaf2392756f9bb90c789e7feb56f5e9432" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.6.14" rel="8.0.1.el8"/>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; - 3.6.13-3" date="1590408000">- Add an option to gnutls-cli to wait for resumption under TLS 1.3 (#1677754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-1" date="1591272000">- Update to upstream 3.6.14 release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-2" date="1591272001">- Return false from gnutls_fips140_mode_enabled() if selftests failed (#1827687)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-3" date="1591358400">- Update gnutls-3.6.14-fips-mode-check.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-4" date="1593432000">- Tighten FIPS DH primes check according to SP800-56A (rev 3) (#1849079)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-5" date="1595073600">- Perform validation checks on (EC)DH public keys and share secrets (#1855803)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942929)</changelog>
  <changelog author="Federico Ram&#xED;rez &lt;federico.r.ramirez@oracle.com&gt; - 3.6.14-8.0.1" date="1630497600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]</changelog>
</package>
<package pkgid="80db739c75c76699f45b9031f813148e0fe23b858a80aa299c7a69359e6af913" name="gnutls" arch="src">
  <version epoch="0" ver="3.6.14" rel="8.0.1.el8"/>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; - 3.6.13-3" date="1590408000">- Add an option to gnutls-cli to wait for resumption under TLS 1.3 (#1677754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-1" date="1591272000">- Update to upstream 3.6.14 release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-2" date="1591272001">- Return false from gnutls_fips140_mode_enabled() if selftests failed (#1827687)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-3" date="1591358400">- Update gnutls-3.6.14-fips-mode-check.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-4" date="1593432000">- Tighten FIPS DH primes check according to SP800-56A (rev 3) (#1849079)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-5" date="1595073600">- Perform validation checks on (EC)DH public keys and share secrets (#1855803)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942929)</changelog>
  <changelog author="Federico Ram&#xED;rez &lt;federico.r.ramirez@oracle.com&gt; - 3.6.14-8.0.1" date="1630497600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]</changelog>
</package>
<package pkgid="dc3d72b9c034a38e57e93e44c7ca99dab45185a02b0ed6023576047818a18355" name="gnutls" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="4.0.1.el8_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Ilya Okomin &lt;ilya.okomin@oracle.com&gt; - 3.6.16-4.0.1_fips" date="1638878400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="689ff86393246049f50795c0120cf3d578375b52dcd2ecb2f49251ad8d7633be" name="gnutls" arch="src">
  <version epoch="10" ver="3.6.16" rel="4.0.1.el8_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Ilya Okomin &lt;ilya.okomin@oracle.com&gt; - 3.6.16-4.0.1_fips" date="1638878400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="3cdf1aee31d76c785e841a17af9fbe48194c2e105ab4f6c791ffa733ca5bdc96" name="gnutls" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="5.el8_6_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109787)</changelog>
  <changelog author="Alan Steinberg &lt;alan.steinberg@oracle.com&gt; - 3.6.16-5_fips" date="1679659200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="b8dd071abf7ecb5bd90a046bd2d9f287ead75d647ec090282afcb6b76a631aee" name="gnutls" arch="src">
  <version epoch="10" ver="3.6.16" rel="5.el8_6_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109787)</changelog>
  <changelog author="Alan Steinberg &lt;alan.steinberg@oracle.com&gt; - 3.6.16-5_fips" date="1679659200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="e32efae278d2861b76eae1820018d97f57a938d3680c1a5928d24e5fdd9d00a7" name="gnutls" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="6.el8_7_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-6_fips" date="1682078400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="6ba16513d51d28a0a22387e384d03a81b34ea989b8f821b9605ad5256f4f42e5" name="gnutls" arch="src">
  <version epoch="10" ver="3.6.16" rel="6.el8_7_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-6_fips" date="1682078400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="6a603081d5ffbf6ff92c1c47565985b357b3424ae0015f39eaed46ba33f37a66" name="gnutls" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Kevin Lyons &lt;kevin.x.lyons@oracle.com&gt; - 3.6.16-8.3_fips" date="1745323200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="ee6da899292d41d7d72e1812619e04bda1eccc6be29475a9f19c57cc5d83df86" name="gnutls" arch="src">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Kevin Lyons &lt;kevin.x.lyons@oracle.com&gt; - 3.6.16-8.3_fips" date="1745323200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="3055f265c583006af4cfe82154e9de3cde90f3a7be7f35f50cae9d7df3704349" name="gnutls" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.4_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Teo Gonzalez &lt;teo.g.gonzalez@oracle.com&gt; - 3.6.16-8.4_fips" date="1759924800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="5a13e8fa9d606442e4b24da6c9f9fd7e34c44b6fa13b835508663446fbc0c7f9" name="gnutls" arch="src">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.4_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Teo Gonzalez &lt;teo.g.gonzalez@oracle.com&gt; - 3.6.16-8.4_fips" date="1759924800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="0dd131832d8d792c89295ccacf274ee3495e75c928bb5011209481ee48e8717e" name="gnutls" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.5_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.5_fips" date="1774440000">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="3319dc87c3bcc787cf91441d6033fd5895aa3b496a8d5cf01ba94fd8a523a1dd" name="gnutls" arch="src">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.5_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.5_fips" date="1774440000">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="d86eb483e8fb0386d38b65aceae1239ae4891f1bfc2e9f05366e99a90ad81a56" name="gnutls" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.6_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.6.16-8.6" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1817 (session parameter loading robustness)</changelog>
  <changelog author="Akshata Konala &lt;akshata.konala@oracle.com&gt; - 3.6.16-8.6_fips" date="1781697600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="bd655688edb85be2d960d59f7243dbf1ebbcbf5a0bb37e68d2636b84d5753609" name="gnutls" arch="src">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.6_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.6.16-8.6" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1817 (session parameter loading robustness)</changelog>
  <changelog author="Akshata Konala &lt;akshata.konala@oracle.com&gt; - 3.6.16-8.6_fips" date="1781697600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="987452fe77326ac4b9a12484b95d015307906037d648866322bed4c6203199f4" name="gnutls" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.1_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.1_fips" date="1706702400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="f1c77ac373303df316e37dcadc9c2308abb97828ff48294a8f15a75b5d636daf" name="gnutls" arch="src">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.1_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.1_fips" date="1706702400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="f4f38595121bafe55f370ca622ea3a2f4251b92f87ac6602e73e37b9d51a3da3" name="gnutls" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16753)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705579200">- auth/rsa-psk: minimize branching after decryption (RHEL-21586)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-28957)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-8.3_fips" date="1712836800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10_fips</changelog>
</package>
<package pkgid="c8a67bc6c25b218bd6f0790f0f2c40464531afc6a718217fccb4a501d624a457" name="gnutls" arch="src">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16753)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705579200">- auth/rsa-psk: minimize branching after decryption (RHEL-21586)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-28957)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-8.3_fips" date="1712836800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10_fips</changelog>
</package>
<package pkgid="133198737423d19556dde96afa9beee84f0fb4b843e60e74234cd1399f03307d" name="gnutls" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8" date="1704888000">- timing side-channel in the RSA-PSK authentication (CVE-2023-5981)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8_fips" date="1704974400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="b45698c1c569822f40c0e360009f8047fad4dfee427c8be91108de5c3e1a1b67" name="gnutls" arch="src">
  <version epoch="10" ver="3.6.16" rel="8.el8_9_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8" date="1704888000">- timing side-channel in the RSA-PSK authentication (CVE-2023-5981)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8_fips" date="1704974400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="65a4445f107766c8f75244151debb9da88aec0561877f6b06fd700c66a99e09c" name="gnutls-c++" arch="aarch64">
  <version epoch="0" ver="3.6.14" rel="8.0.1.el8"/>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; - 3.6.13-3" date="1590408000">- Add an option to gnutls-cli to wait for resumption under TLS 1.3 (#1677754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-1" date="1591272000">- Update to upstream 3.6.14 release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-2" date="1591272001">- Return false from gnutls_fips140_mode_enabled() if selftests failed (#1827687)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-3" date="1591358400">- Update gnutls-3.6.14-fips-mode-check.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-4" date="1593432000">- Tighten FIPS DH primes check according to SP800-56A (rev 3) (#1849079)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-5" date="1595073600">- Perform validation checks on (EC)DH public keys and share secrets (#1855803)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942929)</changelog>
  <changelog author="Federico Ram&#xED;rez &lt;federico.r.ramirez@oracle.com&gt; - 3.6.14-8.0.1" date="1630497600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]</changelog>
</package>
<package pkgid="2b31c73c83ebe04f76091df64e9d461b7fb62f76178fc0f0876cc4248638a9f4" name="gnutls-c++" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="4.0.1.el8_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Ilya Okomin &lt;ilya.okomin@oracle.com&gt; - 3.6.16-4.0.1_fips" date="1638878400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="012e75638c68c5a0aea66553eebccd3519f8ea3fed0fc4cf9392f817055cee86" name="gnutls-c++" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="5.el8_6_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109787)</changelog>
  <changelog author="Alan Steinberg &lt;alan.steinberg@oracle.com&gt; - 3.6.16-5_fips" date="1679659200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="f91392739661dde8539f2db4d38287307e098acf8bfc2a17582e0738d1163411" name="gnutls-c++" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="6.el8_7_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-6_fips" date="1682078400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="7a8b775991daaec7a876da06e6a7e4e170f45b59bd21648a80be89b68e6ff28e" name="gnutls-c++" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Kevin Lyons &lt;kevin.x.lyons@oracle.com&gt; - 3.6.16-8.3_fips" date="1745323200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="c312f7d21a2852daa8bae98f329246da159dcc63144dd6ce0f10f906c4c99b11" name="gnutls-c++" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.4_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Teo Gonzalez &lt;teo.g.gonzalez@oracle.com&gt; - 3.6.16-8.4_fips" date="1759924800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="4ba719fd5303d82303cd60a0461926319b69542e77627a87ca3b39207add4974" name="gnutls-c++" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.5_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.5_fips" date="1774440000">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="107ccb4ccc46a22d76fc3689aa444000e8a2938472342bedc844cbc9cf952bce" name="gnutls-c++" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.6_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.6.16-8.6" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1817 (session parameter loading robustness)</changelog>
  <changelog author="Akshata Konala &lt;akshata.konala@oracle.com&gt; - 3.6.16-8.6_fips" date="1781697600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="6226c09d1295dcb944f4cdbe95ea5ae1ac3dc3559af819367b8150d5f92731a6" name="gnutls-c++" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.1_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.1_fips" date="1706702400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="f74728d5cb6856225119d92700910816fe64dc1e15078e4433ae038812aefb5d" name="gnutls-c++" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16753)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705579200">- auth/rsa-psk: minimize branching after decryption (RHEL-21586)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-28957)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-8.3_fips" date="1712836800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10_fips</changelog>
</package>
<package pkgid="37408d032d10dbff5b1626321a6bf8a19f1d9886cd66178fd6bc6e9edd749bc0" name="gnutls-c++" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8" date="1704888000">- timing side-channel in the RSA-PSK authentication (CVE-2023-5981)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8_fips" date="1704974400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="29db93238d94b51c448e796eb1abaa4ea6833d560acf05ba6ef99e4fcb11d029" name="gnutls-dane" arch="aarch64">
  <version epoch="0" ver="3.6.14" rel="8.0.1.el8"/>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; - 3.6.13-3" date="1590408000">- Add an option to gnutls-cli to wait for resumption under TLS 1.3 (#1677754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-1" date="1591272000">- Update to upstream 3.6.14 release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-2" date="1591272001">- Return false from gnutls_fips140_mode_enabled() if selftests failed (#1827687)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-3" date="1591358400">- Update gnutls-3.6.14-fips-mode-check.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-4" date="1593432000">- Tighten FIPS DH primes check according to SP800-56A (rev 3) (#1849079)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-5" date="1595073600">- Perform validation checks on (EC)DH public keys and share secrets (#1855803)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942929)</changelog>
  <changelog author="Federico Ram&#xED;rez &lt;federico.r.ramirez@oracle.com&gt; - 3.6.14-8.0.1" date="1630497600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]</changelog>
</package>
<package pkgid="aa7fdb4bebb03f328b98e84162db91e5fdcdecc18a070b785701b72907bcaace" name="gnutls-dane" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="4.0.1.el8_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Ilya Okomin &lt;ilya.okomin@oracle.com&gt; - 3.6.16-4.0.1_fips" date="1638878400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="8990d32e8cc742df9286a156b45d4d77f5cae74e32faa716b0e90a6a3a044f26" name="gnutls-dane" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="5.el8_6_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109787)</changelog>
  <changelog author="Alan Steinberg &lt;alan.steinberg@oracle.com&gt; - 3.6.16-5_fips" date="1679659200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="d57ee413918f84f146842b00dfd9835736a40c4f591f080d7c834e7130e31e5b" name="gnutls-dane" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="6.el8_7_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-6_fips" date="1682078400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="d7fce3aa256b08986831bdf8895f44bcad3688f701e0b5d82cb866ec4c0ba6a6" name="gnutls-dane" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Kevin Lyons &lt;kevin.x.lyons@oracle.com&gt; - 3.6.16-8.3_fips" date="1745323200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="260dfa9cd8da6ed8220449f69ff8a601fffc9ab6d120de87887f0c4c59344e1c" name="gnutls-dane" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.4_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Teo Gonzalez &lt;teo.g.gonzalez@oracle.com&gt; - 3.6.16-8.4_fips" date="1759924800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="f7921042fa7bcbe5b9caa9913819e42d7a708f57b7534be93c79be46d639cbf1" name="gnutls-dane" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.5_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.5_fips" date="1774440000">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="e1d3dadbaaa7e32045397a96cb6c4dc1e3ab7819fe5f3ae970736711103a8dce" name="gnutls-dane" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.6_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.6.16-8.6" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1817 (session parameter loading robustness)</changelog>
  <changelog author="Akshata Konala &lt;akshata.konala@oracle.com&gt; - 3.6.16-8.6_fips" date="1781697600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="85499ea7ffe388118a4d3364886fe7e645a0c5a3ba8445aa376deb84933498f5" name="gnutls-dane" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.1_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.1_fips" date="1706702400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="e521370c340d3e11c487158ca60317156f1ab379c41fa6c861dc379980c68685" name="gnutls-dane" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16753)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705579200">- auth/rsa-psk: minimize branching after decryption (RHEL-21586)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-28957)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-8.3_fips" date="1712836800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10_fips</changelog>
</package>
<package pkgid="a1cf09acf83945f82aef46ca95e48f4aa80dae320bf743ed6a0fce9033dab4dd" name="gnutls-dane" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8" date="1704888000">- timing side-channel in the RSA-PSK authentication (CVE-2023-5981)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8_fips" date="1704974400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="c6d6bb9b9b1e81ccd68183307c774b1d4faca3b014b2e54557459ee9f216ab02" name="gnutls-devel" arch="aarch64">
  <version epoch="0" ver="3.6.14" rel="8.0.1.el8"/>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; - 3.6.13-3" date="1590408000">- Add an option to gnutls-cli to wait for resumption under TLS 1.3 (#1677754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-1" date="1591272000">- Update to upstream 3.6.14 release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-2" date="1591272001">- Return false from gnutls_fips140_mode_enabled() if selftests failed (#1827687)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-3" date="1591358400">- Update gnutls-3.6.14-fips-mode-check.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-4" date="1593432000">- Tighten FIPS DH primes check according to SP800-56A (rev 3) (#1849079)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-5" date="1595073600">- Perform validation checks on (EC)DH public keys and share secrets (#1855803)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942929)</changelog>
  <changelog author="Federico Ram&#xED;rez &lt;federico.r.ramirez@oracle.com&gt; - 3.6.14-8.0.1" date="1630497600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]</changelog>
</package>
<package pkgid="909ba86e7dcf34c785da9e48273ec15aa388844154177b5d7e7c1d5a227fdd7c" name="gnutls-devel" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="4.0.1.el8_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Ilya Okomin &lt;ilya.okomin@oracle.com&gt; - 3.6.16-4.0.1_fips" date="1638878400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="c5753caf41c4410ae0b46be6be57d9e4d3cb268a09565193e0f2b6559f61d6b4" name="gnutls-devel" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="5.el8_6_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109787)</changelog>
  <changelog author="Alan Steinberg &lt;alan.steinberg@oracle.com&gt; - 3.6.16-5_fips" date="1679659200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="345b99118e24d3418c48010e843d649724ceafc7d7b16a7ca6183b8a593e2cdd" name="gnutls-devel" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="6.el8_7_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-6_fips" date="1682078400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="5c9398547102f877afa885ba58bfbf8dedcfc8a0f964e8605949204812435596" name="gnutls-devel" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Kevin Lyons &lt;kevin.x.lyons@oracle.com&gt; - 3.6.16-8.3_fips" date="1745323200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="07d4a5db87111f55655a0909dab9667e27c15ecf8bc43e9ba349f86026ac2da3" name="gnutls-devel" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.4_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Teo Gonzalez &lt;teo.g.gonzalez@oracle.com&gt; - 3.6.16-8.4_fips" date="1759924800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="2d606776d230abe60832e0cd4a4173689a707a1aaf78db4cf99b841ee9fec538" name="gnutls-devel" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.5_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.5_fips" date="1774440000">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="23fa72521c3cb86f89d4a038c6e002164031ba78d55c7ee4e86d4b015be3c7fa" name="gnutls-devel" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.6_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.6.16-8.6" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1817 (session parameter loading robustness)</changelog>
  <changelog author="Akshata Konala &lt;akshata.konala@oracle.com&gt; - 3.6.16-8.6_fips" date="1781697600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="2a278d3f3a1f25a0726f49b15c80bb71698c8f78be85e170dc692d00a799ccb9" name="gnutls-devel" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.1_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.1_fips" date="1706702400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="231457fb9ab796f35d1f62d690b15472fa34d81b488e72db3e2ca41bad059971" name="gnutls-devel" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16753)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705579200">- auth/rsa-psk: minimize branching after decryption (RHEL-21586)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-28957)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-8.3_fips" date="1712836800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10_fips</changelog>
</package>
<package pkgid="2087cb1617e1fc7c769e7b0fa46b095f3331cfd68a5834fc6d4201dd20897c8f" name="gnutls-devel" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8" date="1704888000">- timing side-channel in the RSA-PSK authentication (CVE-2023-5981)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8_fips" date="1704974400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="89d9828d20c62815e8647c8ebd6dc7aa6defe2955e1004f898a1c042d7fe157b" name="gnutls-utils" arch="aarch64">
  <version epoch="0" ver="3.6.14" rel="8.0.1.el8"/>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; - 3.6.13-3" date="1590408000">- Add an option to gnutls-cli to wait for resumption under TLS 1.3 (#1677754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-1" date="1591272000">- Update to upstream 3.6.14 release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-2" date="1591272001">- Return false from gnutls_fips140_mode_enabled() if selftests failed (#1827687)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-3" date="1591358400">- Update gnutls-3.6.14-fips-mode-check.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-4" date="1593432000">- Tighten FIPS DH primes check according to SP800-56A (rev 3) (#1849079)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-5" date="1595073600">- Perform validation checks on (EC)DH public keys and share secrets (#1855803)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942929)</changelog>
  <changelog author="Federico Ram&#xED;rez &lt;federico.r.ramirez@oracle.com&gt; - 3.6.14-8.0.1" date="1630497600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]</changelog>
</package>
<package pkgid="b59dcb0e001e52331d6de092c03ed30636e30936d92fe8eb62880b888d5d67f0" name="gnutls-utils" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="4.0.1.el8_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Ilya Okomin &lt;ilya.okomin@oracle.com&gt; - 3.6.16-4.0.1_fips" date="1638878400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="802d3ebdd1de326ecb2eeadd78a4a9c55cfd982c2ebe5a7fa4edb6d99d7cf03d" name="gnutls-utils" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="5.el8_6_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109787)</changelog>
  <changelog author="Alan Steinberg &lt;alan.steinberg@oracle.com&gt; - 3.6.16-5_fips" date="1679659200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="7c7edc2829d9db4901b3c53ae92e382cbbc3ebbc64528e1d5b2fe8567b40b485" name="gnutls-utils" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="6.el8_7_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-6_fips" date="1682078400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="0e7ad3a4ee76ff405f0d1a793f5f80c477585dcf47b74aa3319195e86db72c01" name="gnutls-utils" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Kevin Lyons &lt;kevin.x.lyons@oracle.com&gt; - 3.6.16-8.3_fips" date="1745323200">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="58d09852dd0a500316a81d380105f76472b6ea5ea3ec08850f004a45001cdb53" name="gnutls-utils" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.4_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Teo Gonzalez &lt;teo.g.gonzalez@oracle.com&gt; - 3.6.16-8.4_fips" date="1759924800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="142f08f94afd9e861a9303a9f3a5b5b23a9a96bd0fc9c3e416378b704b3d9f43" name="gnutls-utils" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.5_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.5_fips" date="1774440000">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="71c292a3fbc679337f28ef7e64b314a045b5f2f89d88a6e7eb7f1df1e06eef68" name="gnutls-utils" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_10.6_fips"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-35231)</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.3" date="1739361600">- Backport the fix for CVE-2024-12243</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.4" date="1739361601">- Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedki@redhat.com&gt; - 3.6.16-8.5" date="1770897600">- Backport the fixes for CVE-2025-9820 and CVE-2025-14831</changelog>
  <changelog author="Alexander Sosedkin &lt;asosedkin@redhat.com&gt; - 3.6.16-8.6" date="1777550400">- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
- Fix upstream security issue #1808 (PSK rehandshake)
- Fix upstream security issue #1810 (EKU OID prefix match)
- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)
- Fix upstream security issue #1819 (PKCS#11 trust removal error path)
- Fix upstream security issue #1817 (session parameter loading robustness)</changelog>
  <changelog author="Akshata Konala &lt;akshata.konala@oracle.com&gt; - 3.6.16-8.6_fips" date="1781697600">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="a2e6afd4a0696a0b48f77e85ea032e409b78aec5ebbb1829b20548c5a465f726" name="gnutls-utils" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.1_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16754)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705924800">- auth/rsa-psk: minimize branching after decryption (RHEL-21550)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8.1_fips" date="1706702400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="4d77e2f045102dcae15e7d8edac4c185a33ebc1b4d53ef4c14e7178e7dc7b8c1" name="gnutls-utils" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9.3_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8" date="1701864000">- auth/rsa_psk: side-step potential side-channel (RHEL-16753)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.1" date="1705579200">- auth/rsa-psk: minimize branching after decryption (RHEL-21586)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.2" date="1711368000">- Fix timing side-channel in deterministic ECDSA (RHEL-28957)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-8.3" date="1711454400">- Fix memleak with older GMP (RHEL-28957)</changelog>
  <changelog author="John McWalters &lt;john.mcwalters@oracle.com&gt; - 3.6.16-8.3_fips" date="1712836800">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10_fips</changelog>
</package>
<package pkgid="f711a6f7f65679457fd9d350162d84f239e71b05b276e9ae8a7641df3168566a" name="gnutls-utils" arch="aarch64">
  <version epoch="10" ver="3.6.16" rel="8.el8_9_fips"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109788)</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 3.6.16-6" date="1677153600">- Fix x86_64 CPU feature detection when AVX is not available (#2131152)
- Fix timing side-channel in TLS RSA key exchange (#2162598)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-7" date="1687780800">- Clear server's session ticket indication at rehandshake (#2089817)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8" date="1704888000">- timing side-channel in the RSA-PSK authentication (CVE-2023-5981)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; - 3.6.16-8_fips" date="1704974400">- Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length
  as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526]
- Allow bigger known RSA modulus sizes when calling
  rsa_generate_fips186_4_keypair directly [Orabug: 33200526]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="d901d973372ab37fcb6ee80132c472862c5864b3f5b7cbacd37f80c176f7bc15" name="kernel-uek" arch="aarch64">
  <version epoch="0" ver="5.4.17" rel="2102.202.5.el8uek"/>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.0.el8uek]" date="1617451200">- uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel)  [Orabug: 32532663]  
- RDMA/rxe:  ipc_bench fails on SoftRoCE with shpd (Rao Shoaib)  [Orabug: 32716155]  
- vhost-vdpa: set v-&gt;config_ctx to NULL if eventfd_ctx_fdget() fails (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- vhost-vdpa: fix use-after-free of v-&gt;config_ctx (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 32669269]  {CVE-2021-28950} 
- fuse: fix bad inode (Miklos Szeredi)  [Orabug: 32669269]  {CVE-2021-28950} 
- RDMA/core: Fix corrupted SL on passive side (Håkon Bugge)  [Orabug: 32662965]  
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651473]  {CVE-2021-28038} 
- RDMA/rxe: Compute the maximum sges and inline size based on the WQE size (Rao Shoaib)  [Orabug: 32648060]  
- KVM: kvmclock: Fix vCPUs &gt; 64 can't be online/hotpluged (Wanpeng Li)  [Orabug: 32641672]  
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32640116]  
- uek-rpm: ol7: aarch64: add CONFIG_ACPI_HOTPLUG_MEMORY (Mihai Carabas)  [Orabug: 32638660]  
- KVM: SVM: Disable AVIC before setting V_IRQ (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: Introduce kvm_make_all_cpus_request_except() (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: X86: correct meaningless kvm_apicv_activated() check (Paolo Bonzini)  [Orabug: 32603569]  
- KVM: Disable preemption in kvm_get_running_vcpu() (Marc Zyngier)  [Orabug: 32603569]  
- KVM: Move running VCPU from ARM to common code (Paolo Bonzini)  [Orabug: 32603569]  
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697850]  {CVE-2021-28688} 
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui)  [Orabug: 32651461]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.1.el8uek]" date="1618056000">- IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751624]  
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709120]  {CVE-2021-29650} 
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang)  [Orabug: 32669468]  {CVE-2021-28971} 
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669450]  {CVE-2021-28964}</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.2.el8uek]" date="1618747200">- md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam)  [Orabug: 32764237]  
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang)  [Orabug: 32763849]  
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet)  [Orabug: 32760314]  
- Revert "x86/vmlinux: Use INT3 instead of NOP for linker fill bytes" (John Donnelly)  [Orabug: 32576398]  {CVE-2021-3411} 
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi)  [Orabug: 32734148]  
- LTS tag: v5.4.85 (Jack Vogel)   
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (Xiaochen Shen)   
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (James Morse)   
- membarrier: Explicitly sync remote cores when SYNC_CORE is requested (Andy Lutomirski)   
- Revert "selftests/ftrace: check for do_sys_openat2 in user-memory test" (Kamal Mostafa)   
- KVM: mmu: Fix SPTE encoding of MMIO generation upper half (Maciej S. Szmigiero)   
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)   
- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)   
- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)   
- xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (Hans de Goede)   
- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)   
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)   
- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)   
- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)   
- ktest.pl: If size of log is too big to email, email error message (Steven Rostedt (VMware))   
- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)   
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)   
- net: ll_temac: Fix potential NULL dereference in temac_probe() (Zhang Changzhong)   
- lan743x: fix for potential NULL pointer dereference with bare card (Sergej Bauer)   
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)   
- tcp: select sane initial rcvq_space.space for big MSS (Eric Dumazet)   
- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)   
- bridge: Fix a deadlock when enabling multicast snooping (Joseph Huang)   
- enetc: Fix reporting of h/w packet counters (Claudiu Manoil)   
- udp: fix the proto value passed to ip_protocol_deliver_rcu for the segments (Xin Long)   
- net: hns3: remove a misused pragma packed (Huazhong Tan)   
- vrf: packets with lladdr src needs dst at input with orig_iif when needs strict (Stephen Suryaputra)   
- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)   
- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)   
- ipv4: fix error return code in rtm_to_fib_config() (Zhang Changzhong)   
- ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (Peilin Ye)   
- LTS tag: v5.4.84 (Jack Vogel)   
- compiler.h: fix barrier_data() on clang (Arvind Sankar)   
- mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING (Minchan Kim)   
- x86/apic/vector: Fix ordering in vector assignment (Thomas Gleixner)   
- x86/membarrier: Get rid of a dubious optimization (Andy Lutomirski)   
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)   
- scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" (Dan Carpenter)   
- proc: use untagged_addr() for pagemap_read addresses (Miles Chen)   
- kbuild: avoid static_assert for genksyms (Arnd Bergmann)   
- drm/i915/display/dp: Compute the correct slice count for VDSC on DP (Manasi Navare)   
- mmc: block: Fixup condition for CMD13 polling for RPMB requests (Bean Huo)   
- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)   
- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)   
- Input: cm109 - do not stomp on control URB (Dmitry Torokhov)   
- ktest.pl: Fix incorrect reboot for grub2bls (Libo Chen)   
- can: m_can: m_can_dev_setup(): add support for bosch mcan version 3.3.0 (Pankaj Sharma)   
- platform/x86: touchscreen_dmi: Add info for the Irbis TW118 tablet (Hans de Goede)   
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC (Max Verevkin)   
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)   
- platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen (Hans de Goede)   
- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e (Hans de Goede)   
- arm64: tegra: Disable the ACONNECT for Jetson TX2 (Jon Hunter)   
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)   
- spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts (Ran Wang)   
- irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend (Xu Qiang)   
- ibmvnic: skip tx timeout reset while in resetting (Lijun Pan)   
- interconnect: qcom: qcs404: Remove GPU and display RPM IDs (Georgi Djakov)   
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)   
- ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)   
- arm64: dts: broadcom: clear the warnings caused by empty dma-ranges (Zhen Lei)   
- powerpc: Drop -me200 addition to build flags (Michael Ellerman)   
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)   
- iwlwifi: pcie: set LTR to avoid completion timeout (Johannes Berg)   
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)   
- iwlwifi: pcie: limit memory read spin time (Johannes Berg)   
- x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S (Fangrui Song)   
- Kbuild: do not emit debug info for assembly with LLVM_IAS=1 (Nick Desaulniers)</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.3.el8uek]" date="1619179200">- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)  [Orabug: 32805544]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.0.el8uek]" date="1619265600">- LTS tag: v5.4.86 (Jack Vogel)   
- x86/CPU/AMD: Save AMD NodeId as cpu_die_id (Yazen Ghannam)   
- Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS" (Steven Rostedt (VMware))   
- rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (Nikita Shubin)   
- regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (DingHua Ma)   
- PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)   
- platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (Carlos Garnacho)   
- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)   
- xen/xenbus: Count pending messages for each watch (SeongJae Park)   
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)   
- dma-buf/dma-resv: Respect num_fences when initializing the shared fence list. (Maarten Lankhorst)   
- device-dax/core: Fix memory leak when rmmod dax.ko (Wang Hai)   
- clk: tegra: Do not return 0 on failure (Nicolin Chen)   
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)   
- clk: ingenic: Fix divider calculation with div tables (Paul Cercueil)   
- pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler (Yangtao Li)   
- md/cluster: fix deadlock when node is doing resync job (Zhao Heming)   
- md/cluster: block reshape with remote resync job (Zhao Heming)   
- iio:adc:ti-ads124s08: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:adc:ti-ads124s08: Fix buffer being too long. (Jonathan Cameron)   
- iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)   
- iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)   
- iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:light:st_uvis25: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)   
- iio: buffer: Fix demux update (Nuno Sá)   
- scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi)   
- mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (Sergei Antonov)   
- mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (Praveenkumar I)   
- mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)   
- mtd: spinand: Fix OOB read (Miquel Raynal)   
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)   
- spi: atmel-quadspi: Fix AHB memory accesses (Tudor Ambarus)   
- spi: atmel-quadspi: Disable clock in probe error path (Lukas Wunner)   
- spi: mt7621: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: mt7621: Disable clock in probe error path (Lukas Wunner)   
- spi: synquacer: Disable clock in probe error path (Lukas Wunner)   
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)   
- spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner)   
- spi: mxic: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: gpio: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: fsl: fix use of spisel_boot signal on MPC8309 (Rasmus Villemoes)   
- spi: davinci: Fix use-after-free on unbind (Lukas Wunner)   
- spi: atmel-quadspi: Fix use-after-free on unbind (Lukas Wunner)   
- spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)   
- spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)   
- drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)   
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)   
- drm/amd/display: Fix memory leaks in S3 resume (Stylon Wang)   
- platform/x86: mlx-platform: remove an unused variable (Arnd Bergmann)   
- jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)   
- jffs2: Fix ignoring mounting options problem during remounting (lizhe)   
- jffs2: Fix GC exit abnormally (Zhe Li)   
- ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger)   
- SMB3: avoid confusing warning message on mount to Azure (Steve French)   
- ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)   
- um: Remove use of asprinf in umid.c (Anton Ivanov)   
- ima: Don't modify file descriptor mode on the fly (Roberto Sassu)   
- powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (David Hildenbrand)   
- powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand)   
- powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- powerpc/mm: Fix verification of MMU_FTR_TYPE_44x (Christophe Leroy)   
- powerpc/8xx: Fix early debug when SMC1 is relocated (Christophe Leroy)   
- powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)   
- powerpc/feature: Add CPU_FTR_NOEXECUTE to G2_LE (Christophe Leroy)   
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)   
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)   
- xprtrdma: Fix XDRBUF_SPARSE_PAGES support (Chuck Lever)   
- ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)   
- ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES (H. Nikolaus Schaller)   
- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)   
- ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)   
- ext4: fix a memory leak of ext4_free_data (Chunguang Xu)   
- btrfs: trim: fix underflow in trim length to prevent access beyond device boundary (Qu Wenruo)   
- btrfs: do not shorten unpin len for caching block groups (Josef Bacik)   
- USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)   
- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)   
- USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)   
- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)   
- USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)   
- USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)   
- EDAC/amd64: Fix PCI component registration (Borislav Petkov)   
- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)   
- crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata (Ard Biesheuvel)   
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)   
- powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)   
- perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake (Kan Liang)   
- perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY (Kan Liang)   
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)   
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (Takashi Iwai)   
- binder: add flag to clear buffer on txn complete (Todd Kjos)   
- s390/dasd: fix list corruption of lcu list (Stefan Haberland)   
- s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)   
- s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)   
- s390/dasd: fix hanging device offline processing (Stefan Haberland)   
- s390/kexec_file: fix diag308 subcode when loading crash kernel (Philipp Rudo)   
- s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)   
- ALSA: core: memalloc: add page alignment for iram (Robin Gong)   
- ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai)   
- ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (Amadej Kastelic)   
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (Chris Chiu)   
- ALSA: hda/realtek: Add quirk for MSI-GP73 (Takashi Iwai)   
- ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (Chris Chiu)   
- ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)   
- ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (Kailang Yang)   
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)   
- ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (Chris Chiu)   
- ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (Hui Wang)   
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg. (Connor McAdams)   
- ALSA: hda: Fix regressions on clear and reconfig sysfs (Takashi Iwai)   
- ACPI: PNP: compare the string length in the matching_id() (Hui Wang)   
- Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (Daniel Scally)   
- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)   
- ALSA: hda/ca0132 - Change Input Source enum strings. (Connor McAdams)   
- Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)   
- media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (Sakari Ailus)   
- media: ipu3-cio2: Validate mbus format in setting subdev format (Sakari Ailus)   
- media: ipu3-cio2: Serialise access to pad format (Sakari Ailus)   
- media: ipu3-cio2: Return actual subdev format (Sakari Ailus)   
- media: ipu3-cio2: Remove traces of returned buffers (Sakari Ailus)   
- media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner)   
- media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)   
- media: gspca: Fix memory leak in probe (Alan Stern)   
- vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)   
- initramfs: fix clang build failure (Arnd Bergmann)   
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)   
- drm/amdkfd: Fix leak in dmabuf import (Felix Kuehling)   
- drm/amd/display: Prevent bandwidth overflow (Chris Park)   
- lwt: Disable BH too in run_lwt_bpf() (Dongdong Wang)   
- fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)   
- cfg80211: initialize rekey_data (Sara Sharon)   
- ARM: sunxi: Add machine match for the Allwinner V3 SoC (Paul Kocialkowski)   
- perf probe: Fix memory leak when synthesizing SDT probes (Arnaldo Carvalho de Melo)   
- kconfig: fix return value of do_error_if() (Masahiro Yamada)   
- clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)   
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)   
- clk: at91: sam9x60: remove atmel,osc-bypass support (Alexandre Belloni)   
- virtio_ring: Fix two use after free bugs (Dan Carpenter)   
- virtio_net: Fix error code in probe() (Dan Carpenter)   
- virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (Dan Carpenter)   
- qlcnic: Fix error code in probe (Dan Carpenter)   
- perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)   
- pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)   
- pwm: zx: Add missing cleanup in error path (Uwe Kleine-König)   
- clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)   
- watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)   
- watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)   
- libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (Zhang Qilong)   
- net: korina: fix return value (Vincent Stehlé)   
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)   
- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)   
- lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck)   
- checkpatch: fix unescaped left brace (Dwaipayan Ray)   
- mm: don't wake kswapd prematurely when watermark boosting is disabled (Johannes Weiner)   
- sparc: fix handling of page table constructor failure (Matthew Wilcox (Oracle))   
- powerpc/ps3: use dma_mapping_error() (Vincent Stehlé)   
- nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)   
- RDMA/cma: Don't overwrite sgid_attr after device is released (Leon Romanovsky)   
- sunrpc: fix xs_read_xdr_buf for partial pages receive (Dan Aloni)   
- um: chan_xterm: Fix fd leak (Anton Ivanov)   
- um: tty: Fix handling of close in tty lines (Anton Ivanov)   
- um: Monitor error events in IRQ controller (Anton Ivanov)   
- ubifs: Fix error return code in ubifs_init_authentication() (Wang ShaoBo)   
- watchdog: Fix potential dereferencing of null pointer (Wang Wensheng)   
- watchdog: sprd: check busy bit before new loading rather than after that (Lingling Xu)   
- watchdog: sprd: remove watchdog disable from resume fail path (Lingling Xu)   
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)   
- ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (Dan Carpenter)   
- mac80211: don't set set TDLS STA bandwidth wider than possible (Johannes Berg)   
- crypto: atmel-i2c - select CONFIG_BITREVERSE (Arnd Bergmann)   
- extcon: max77693: Fix modalias string (Marek Szyprowski)   
- mtd: rawnand: gpmi: Fix the random DMA timeout issue (Han Xu)   
- mtd: rawnand: meson: Fix a resource leak in init (Dan Carpenter)   
- mtd: rawnand: gpmi: fix reference count leak in gpmi ops (Zhang Qilong)   
- clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)   
- remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (Zhang Changzhong)   
- remoteproc: qcom: fix reference leak in adsp_start (Zhang Qilong)   
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (Zhang Qilong)   
- RDMA/core: Do not indicate device ready when device enablement fails (Jack Morgenstein)   
- can: m_can: m_can_config_endisable(): remove double clearing of clock stop request bit (Sean Nyekjaer)   
- erofs: avoid using generic_block_bmap (Huang Jianan)   
- iwlwifi: mvm: hook up missing RX handlers (Johannes Berg)   
- s390/cio: fix use-after-free in ccw_device_destroy_console (Qinglang Miao)   
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (Zhang Changzhong)   
- platform/chrome: cros_ec_spi: Don't overwrite spi::mode (Stephen Boyd)   
- x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)   
- nfs_common: need lock during iterate through the list (Cheng Lin)   
- nfsd: Fix message level for normal termination (kazuo ito)   
- speakup: fix uninitialized flush_lock (Yang Yingliang)   
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)   
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)   
- powerpc/mm: sanity_check_fault() should work for all, not only BOOK3S (Christophe Leroy)   
- ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (Chuhong Yuan)   
- drm/mediatek: avoid dereferencing a null hdmi_phy on an error message (Colin Ian King)   
- powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)   
- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)   
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (Vadim Pasternak)   
- scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)   
- seq_buf: Avoid type mismatch for seq_buf_init (Arnd Bergmann)   
- scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)   
- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)   
- arm64: dts: meson: g12a: x96-max: fix PHY deassert timing requirements (Stefan Agner)   
- ARM: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- arm64: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (Jing Xiangfeng)   
- Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (Jing Xiangfeng)   
- cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: sun50i: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: qcom: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)   
- clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu)   
- phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure (Wang Li)   
- dm ioctl: fix error return code in target_message (Qinglang Miao)   
- ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)   
- net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)   
- MIPS: Don't round up kernel sections size for memblock_add() (Alexander Sverdlin)   
- memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)   
- arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)   
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)   
- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() (Andrii Nakryiko)   
- ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)   
- iio: hrtimer-trigger: Mark hrtimer to expire in hard interrupt context (Lars-Peter Clausen)   
- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)   
- clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (Yang Yingliang)   
- powerpc/64: Fix an EMIT_BUG_ENTRY in head_64.S (Jordan Niethe)   
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (Athira Rajeev)   
- media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)   
- hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable (Zhang Qilong)   
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)   
- selftests/seccomp: Update kernel config (Mickaël Salaün)   
- NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)   
- net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' (Fedor Tokarev)   
- NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Trond Myklebust)   
- SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (Trond Myklebust)   
- NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia)   
- SUNRPC: rpc_wake_up() should wake up tasks in the correct order (Trond Myklebust)   
- ath10k: Release some resources in an error handling path (Christophe JAILLET)   
- ath10k: Fix an error handling path (Christophe JAILLET)   
- ath10k: Fix the parsing error in service available event (Rakesh Pillai)   
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (Qinglang Miao)   
- ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)   
- soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (Yu Kuai)   
- arm64: dts: meson-sm1: fix typo in opp table (Dongjin Kim)   
- arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 (Artem Lapkin)   
- PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)   
- PCI: Fix overflow in command-line resource alignment requests (Colin Ian King)   
- PCI: Bounds-check command-line resource alignment requests (Bjorn Helgaas)   
- arm64: dts: qcom: c630: Polish i2c-hid devices (Bjorn Andersson)   
- arm64: dts: ls1028a: fix ENETC PTP clock input (Michael Walle)   
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier)   
- power: supply: bq24190_charger: fix reference leak (Zhang Qilong)   
- power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (Hans de Goede)   
- arm64: dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc (Chen-Yu Tsai)   
- arm64: dts: armada-3720-turris-mox: update ethernet-phy handle name (Marek Behún)   
- ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)   
- HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng)   
- slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (Bjorn Andersson)   
- media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)   
- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)   
- media: imx214: Fix stop streaming (Daniel Gomez)   
- samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)   
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (Vadim Pasternak)   
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (Vadim Pasternak)   
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)   
- arm64: tegra: Fix DT binding for IO High Voltage entry (Vidya Sagar)   
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (Zhihao Cheng)   
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)   
- rsi: fix error return code in rsi_reset_card() (Zhang Changzhong)   
- qtnfmac: fix error return code in qtnf_pcie_probe() (Wang Hai)   
- orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)   
- mmc: pxamci: Fix error return code in pxamci_probe (Zhihao Cheng)   
- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)   
- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)   
- memstick: fix a double-free bug in memstick_check (Qinglang Miao)   
- RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)   
- clk: meson: Kconfig: fix dependency for G12A (Kevin Hilman)   
- Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)   
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)   
- soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)   
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)   
- spi: fix resource leak for drivers without .remove callback (Uwe Kleine-König)   
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)   
- crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (Nathan Chancellor)   
- EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Yazen Ghannam)   
- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)   
- powerpc: Avoid broken GCC __attribute__((optimize)) (Ard Biesheuvel)   
- selftests/bpf: Fix broken riscv build (Björn Töpel)   
- spi: mxs: fix reference leak in mxs_spi_probe (Zhang Qilong)   
- usb/max3421: fix return error code in max3421_probe() (Yang Yingliang)   
- Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)   
- Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)   
- Input: ads7846 - fix race that causes missing releases (David Jander)   
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)   
- video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() (Yang Yingliang)   
- media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)   
- scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)   
- ASoC: meson: fix COMPILE_TEST error (Jerome Brunet)   
- media: v4l2-fwnode: Return -EINVAL for invalid bus-type (Lad Prabhakar)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (Yu Kuai)   
- media: tm6000: Fix sizeof() mismatches (Colin Ian King)   
- staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c (Jing Xiangfeng)   
- staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)   
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (Jack Xu)   
- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)   
- RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)   
- ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)   
- spi: sprd: fix reference leak in sprd_spi_remove (Zhang Qilong)   
- ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)   
- selftest/bpf: Add missed ip6ip6 test back (Hangbin Liu)   
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)   
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (Qinglang Miao)   
- spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)   
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)   
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)   
- spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (Qinglang Miao)   
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)   
- Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)   
- Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)   
- arm64: dts: exynos: Correct psci compatible used on Exynos7 (Paweł Chmiel)   
- arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 (Paweł Chmiel)   
- brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} (Seung-Woo Kim)   
- spi: stm32: fix reference leak in stm32_spi_resume (Zhang Qilong)   
- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)   
- ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)   
- spi: spi-mem: fix reference leak in spi_mem_access_start (Zhang Qilong)   
- drm/msm/dsi_pll_10nm: restore VCO rate during restore_state (Dmitry Baryshkov)   
- f2fs: call f2fs_get_meta_page_retry for nat page (Jaegeuk Kim)   
- spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)   
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (Jordan Niethe)   
- drm/amdgpu: fix build_coefficients() argument (Arnd Bergmann)   
- ARM: dts: aspeed: tiogapass: Remove vuart (Vijay Khemka)   
- ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (Clément Péron)   
- crypto: inside-secure - Fix sizeof() mismatch (Colin Ian King)   
- crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)   
- crypto: talitos - Endianess in current_desc_hdr() (Christophe Leroy)   
- drm/amdgpu: fix incorrect enum type (Arnd Bergmann)   
- sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)   
- sched/deadline: Fix sched_dl_global_validate() (Peng Liu)   
- x86/apic: Fix x2apic enablement without interrupt remapping (David Woodhouse)   
- ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)   
- x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)   
- RDMA/rxe: Compute PSN windows correctly (Bob Pearson)   
- ARM: dts: aspeed: s2600wf: Fix VGA memory region location (Joel Stanley)   
- selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)   
- rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (Dan Carpenter)   
- RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)   
- Revert "i2c: i2c-qcom-geni: Fix DMA transfer race" (Douglas Anderson)   
- soc: qcom: geni: More properly switch to DMA mode (Douglas Anderson)   
- soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)   
- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)   
- arm64: dts: renesas: cat875: Remove rxc-skew-ps from ethernet-phy node (Biju Das)   
- arm64: dts: renesas: hihope-rzg2-ex: Drop rxc-skew-ps from ethernet-phy node (Biju Das)   
- drm/tve200: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/mcde: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/aspeed: Fix Kconfig warning &amp; subsequent build errors (Randy Dunlap)   
- drm/gma500: fix double free of gma_connector (Tom Rix)   
- md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)   
- crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)   
- media: msi2500: assign SPI bus number dynamically (Antti Palosaari)   
- quota: Sanity-check quota file headers on load (Jan Kara)   
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)   
- serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)   
- HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)   
- scsi: megaraid_sas: Check user-provided offsets (Arnd Bergmann)   
- coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (Sai Prakash Ranjan)   
- coresight: tmc-etr: Fix barrier packet insertion for perf buffer (Suzuki K Poulose)   
- coresight: tmc-etr: Check if page is valid before dma_map_page() (Mao Jinlong)   
- coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (Sai Prakash Ranjan)   
- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)   
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)   
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)   
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)   
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)   
- USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)   
- USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)   
- usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (Dan Carpenter)   
- soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)   
- kbuild: avoid split lines in .mod files (Masahiro Yamada)   
- perf/x86/intel: Check PEBS status correctly (Stephane Eranian)   
- drm/amd/display: Init clock value by current vbios CLKs (Brandon Syu)   
- iwlwifi: pcie: add one missing entry for AX210 (Luca Coelho)   
- dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)   
- scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)   
- vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)   
- vxlan: Add needed_headroom for lower device (Sven Eckelmann)   
- arm64: syscall: exit userspace before unmasking exceptions (Mark Rutland)   
- habanalabs: put devices before driver removal (Ofir Bitton)   
- drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)   
- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)   
- drm/tegra: replace idr_init() by idr_init_base() (Deepak R Varma)   
- net: mvpp2: add mvpp2_phylink_to_port() helper (Russell King)   
- selftests: fix poll error in udpgro.sh (Paolo Abeni)   
- ixgbe: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: optimise prefetch page refcount (Li RongQing)   
- i40e: Refactor rx_bi accesses (Björn Töpel)   
- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)   
- selftests/bpf/test_offload.py: Reset ethtool features after failed setting (Toke Høiland-Jørgensen)   
- netfilter: nft_ct: Remove confirmation check for NFT_CT_ID (Brett Mastbergen)   
- gpio: eic-sprd: break loop when getting NULL device resource (Chunyan Zhang)   
- Revert "gpio: eic-sprd: Use devm_platform_ioremap_resource()" (Baolin Wang)   
- afs: Fix memory leak when mounting with multiple source parameters (David Howells)   
- netfilter: nft_dynset: fix timeouts later than 23 days (Pablo Neira Ayuso)   
- netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal)   
- netfilter: x_tables: Switch synchronization to RCU (Subash Abhinov Kasiviswanathan)   
- pinctrl: aspeed: Fix GPIO requests on pass-through banks (Andrew Jeffery)   
- blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Douglas Anderson)   
- block: factor out requeue handling from dispatch code (Johannes Thumshirn)   
- block: Simplify REQ_OP_ZONE_RESET_ALL handling (Damien Le Moal)   
- clk: renesas: r9a06g032: Drop __packed for portability (Geert Uytterhoeven)   
- can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)   
- xsk: Replace datagram_poll by sock_poll_wait (Xuan Zhuo)   
- xsk: Fix xsk_poll()'s return type (Luc Van Oostenryck)   
- scsi: bnx2i: Requires MMU (Randy Dunlap)   
- gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)   
- gpio: zynq: fix reference leak in zynq_gpio functions (Qinglang Miao)   
- PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong)   
- ARM: dts: imx6qdl-kontron-samx6i: fix I2C_PM scl pin (Bernd Bauer)   
- ARM: dts: imx6qdl-wandboard-revd1: Remove PAD_GPIO_6 from enetgrp (Fabio Estevam)   
- ARM: dts: sun7i: pcduino3-nano: enable RGMII RX/TX delay on PHY (Adam Sampson)   
- ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)   
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)   
- pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)   
- ARM: dts: sun8i: v40: bananapi-m2-berry: Fix ethernet node (Pablo Greco)   
- ARM: dts: sun8i: r40: bananapi-m2-berry: Fix dcdc1 regulator (Pablo Greco)   
- RAS/CEC: Correct ce_add_elem()'s returned values (William Roche)  [Orabug: 32774757]  
- bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk)  [Orabug: 32759959]  {CVE-2021-29154} 
- KVM: SVM: avoid infinite loop on NPF from bad address (John Donnelly)  [Orabug: 32759746]  {CVE-2020-36310} 
- uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 32795492]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.1.el8uek]" date="1620043200">- LTS tag: v5.4.90 (Jack Vogel)   
- regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() (Dan Carpenter)   
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)   
- block: fix use-after-free in disk_part_iter_next (Ming Lei)   
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier)   
- net: mvpp2: disable force link UP during port init procedure (Stefan Chulski)   
- regulator: qcom-rpmh-regulator: correct hfsmps515 definition (Dmitry Baryshkov)   
- wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)   
- regmap: debugfs: Fix a memory leak when calling regmap_attach_dev (Xiaolei Wang)   
- net/mlx5e: Fix two double free cases (Dinghao Liu)   
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)   
- iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)   
- lightnvm: select CONFIG_CRC32 (Arnd Bergmann)   
- block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)   
- wil6210: select CONFIG_CRC32 (Arnd Bergmann)   
- qed: select CONFIG_CRC32 (Arnd Bergmann)   
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)   
- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() (Shravya Kumbham)   
- dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)   
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function (Christophe JAILLET)   
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated (Hans de Goede)   
- spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)   
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)   
- can: kvaser_pciefd: select CONFIG_CRC32 (Arnd Bergmann)   
- can: m_can: m_can_class_unregister(): remove erroneous m_can_clk_stop() (Marc Kleine-Budde)   
- can: tcan4x5x: fix bittiming const, use common bittiming from m_can driver (Marc Kleine-Budde)   
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() (Dan Carpenter)   
- i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)   
- ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)   
- HID: wacom: Fix memory leakage caused by kfifo_alloc (Ping Cheng)   
- iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)   
- vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)   
- exfat: Month timestamp metadata accidentally incremented (Valdis Kletnieks)   
- x86/resctrl: Don't move a task to the same resource group (Fenghua Yu)   
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)   
- chtls: Fix chtls resources release sequence (Ayush Sawal)   
- chtls: Added a check to avoid NULL pointer dereference (Ayush Sawal)   
- chtls: Replace skb_dequeue with skb_peek (Ayush Sawal)   
- chtls: Fix panic when route to peer not configured (Ayush Sawal)   
- chtls: Remove invalid set_tcb call (Ayush Sawal)   
- chtls: Fix hardware tid leak (Ayush Sawal)   
- net/mlx5e: ethtool, Fix restriction of autoneg with 56G (Aya Levin)   
- net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address (Mark Zhang)   
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (Aleksander Jan Bajkowski)   
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (Julian Wiedmann)   
- nexthop: Unlink nexthop group entry in error path (Ido Schimmel)   
- nexthop: Fix off-by-one error in error path (Ido Schimmel)   
- octeontx2-af: fix memory leak of lmac and lmac-&gt;name (Colin Ian King)   
- net: ip: always refragment ip defragmented packets (Florian Westphal)   
- net: fix pmtu check in nopmtudisc mode (Florian Westphal)   
- tools: selftests: add test for changing routes with PTMU exceptions (Sean Tranchetti)   
- net: ipv6: fib: flush exceptions when purging route (Sean Tranchetti)   
- net/sonic: Fix some resource leaks in error handling paths (Christophe JAILLET)   
- net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)   
- net: stmmac: dwmac-sun8i: Balance internal PHY power (Samuel Holland)   
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (Samuel Holland)   
- net: hns3: fix a phy loopback fail issue (Yonglong Liu)   
- net: hns3: fix the number of queues actually used by ARQ (Yufeng Mo)   
- net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppänen)   
- vfio iommu: Add dma available capability (Matthew Rosato)   
- x86/asm/32: Add ENDs to some functions and relabel with SYM_CODE_* (Jiri Slaby)   
- LTS tag: v5.4.89 (Jack Vogel)   
- scsi: target: Fix XCOPY NAA identifier lookup (David Disseldorp)   {CVE-2020-28374} 
- KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)   
- x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)   
- netfilter: nft_dynset: report EOPNOTSUPP on missing set feature (Pablo Neira Ayuso)   
- netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)   
- netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)   
- netfilter: x_tables: Update remaining dereference to RCU (Subash Abhinov Kasiviswanathan)   
- drm/i915: clear the gpu reloc batch (Matthew Auld)   
- dmabuf: fix use-after-free of dmabuf's file-&gt;f_inode (Charan Teja Reddy)   
- Revert "device property: Keep secondary firmware node secondary by type" (Bard Liao)   
- btrfs: send: fix wrong file path when there is an inode with a pending rmdir (Filipe Manana)   
- ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256. (PeiSen Hou)   
- ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (Kai-Heng Feng)   
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)   
- ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)   
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (Takashi Iwai)   
- kvm: check tlbs_dirty directly (Lai Jiangshan)   
- x86/mm: Fix leak of pmd ptlock (Dan Williams)   
- USB: serial: keyspan_pda: remove unused variable (Johan Hovold)   
- usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)   
- usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)   
- usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)   
- USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)   
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani)   
- usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)   
- usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)   
- usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)   
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)   
- USB: usblp: fix DMA to stack (Johan Hovold)   
- USB: yurex: fix control-URB timeout handling (Johan Hovold)   
- USB: serial: option: add Quectel EM160R-GL (Bjørn Mork)   
- USB: serial: option: add LongSung M5710 module support (Daniel Palmer)   
- USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)   
- usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)   
- usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)   
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)   
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)   
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)   
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa)   
- USB: cdc-acm: blacklist another IR Droid device (Sean Young)   
- usb: gadget: enable super speed plus (taehyun.cho)   
- staging: mt7621-dma: Fix a resource leak in an error handling path (Christophe JAILLET)   
- powerpc: Handle .text.{hot,unlikely}.* in linker script (Nathan Chancellor)   
- crypto: asym_tpm: correct zero out potential secrets (Greg Kroah-Hartman)   
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)   
- Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close (Hans de Goede)   
- kbuild: don't hardcode depmod path (Dominique Martinet)   
- net/sched: sch_taprio: ensure to reset/destroy all child qdiscs (Davide Caratti)   
- ionic: account for vlan tag len in rx buffer len (Shannon Nelson)   
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)   
- net: usb: qmi_wwan: add Quectel EM160R-GL (Bjørn Mork)   
- CDC-NCM: remove "connected" log message (Roland Dreier)   
- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (Martin Blumenstingl)   
- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (Martin Blumenstingl)   
- r8169: work around power-saving bug on some chip versions (Heiner Kallweit)   
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)   
- erspan: fix version 1 check in gre_parse_header() (Cong Wang)   
- net: hns: fix return value check in __lb_other_process() (Yunjian Wang)   
- net: sched: prevent invalid Scell_log shift count (Randy Dunlap)   
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)   
- net: mvpp2: fix pkt coalescing int-threshold configuration (Stefan Chulski)   
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang)   
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)   
- net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_rxqs (Antoine Tenart)   
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)   
- net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)   
- net/ncsi: Use real net-device for response handler (John Wang)   
- virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)   
- qede: fix offload for IPIP tunnel packets (Manish Chopra)   
- net: ethernet: mvneta: Fix error handling in mvneta_probe (Dinghao Liu)   
- ibmvnic: continue fatal error reset after passive init (Lijun Pan)   
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)   
- atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)   
- ethernet: ucc_geth: set dev-&gt;max_mtu to 1518 (Rasmus Villemoes)   
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)   
- net: systemport: set dev-&gt;max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)   
- net: mvpp2: prs: fix PPPoE with ipv6 packet parse (Stefan Chulski)   
- net: mvpp2: Add TCAM entry to drop flow control pause frames (Stefan Chulski)   
- iavf: fix double-release of rtnl_lock (Jakub Kicinski)   
- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (Sylwester Dziedziuch)   
- proc: fix lookup in /proc/net subdirectories after setns(2) (Alexey Dobriyan)   
- proc: change -&gt;nlink under proc_subdir_lock (Alexey Dobriyan)   
- depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)   
- lib/genalloc: fix the overflow when size is too big (Huang Shijie)   
- scsi: scsi_transport_spi: Set RQF_PM for domain validation commands (Bart Van Assche)   
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)   
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk -&gt;poweroff() (Adrian Hunter)   
- scsi: ufs: Fix wrong print message in dev_err() (Bean Huo)   
- workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)   
- LTS tag: v5.4.88 (Jack Vogel)   
- exec: Transform exec_update_mutex into a rw_semaphore (Eric W. Biederman)   
- rwsem: Implement down_read_interruptible (Eric W. Biederman)   
- rwsem: Implement down_read_killable_nested (Eric W. Biederman)   
- perf: Break deadlock involving exec_update_mutex (peterz@infradead.org)   
- iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)   
- kdev_t: always inline major/minor helper functions (Josh Poimboeuf)   
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc (Tudor Ambarus)   
- Revert "mtd: spinand: Fix OOB read" (Felix Fietkau)   
- Revert "drm/amd/display: Fix memory leaks in S3 resume" (Alex Deucher)   
- LTS tag: v5.4.87 (Jack Vogel)   
- dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)   
- ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)   
- tick/sched: Remove bogus boot "safety" check (Thomas Gleixner)   
- um: ubd: Submit all data segments atomically (Gabriel Krisman Bertazi)   
- fs/namespace.c: WARN if mnt_count has become negative (Eric Biggers)   
- module: delay kobject uevent until after module init call (Jessica Yu)   
- f2fs: avoid race condition for shrinker count (Jaegeuk Kim)   
- NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode (Trond Myklebust)   
- i3c master: fix missing destroy_workqueue() on error in i3c_master_register (Qinglang Miao)   
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)   
- rtc: pl031: fix resource leak in pl031_probe (Zheng Liang)   
- quota: Don't overflow quota file offsets (Jan Kara)   
- module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)   
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)   
- fcntl: Fix potential deadlock in send_sig{io, urg}() (Boqun Feng)   
- bfs: don't use WARNING: string when it's just info. (Randy Dunlap)   
- ALSA: rawmidi: Access runtime-&gt;avail always in spinlock (Takashi Iwai)   
- ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)   
- f2fs: fix shift-out-of-bounds in sanity_check_raw_super() (Chao Yu)   
- media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)   
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)   
- reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)   
- Bluetooth: hci_h5: close serdev device and free hu in h5_close (Anant Thazhemadam)   
- scsi: cxgb4i: Fix TLS dependency (Randy Dunlap)   
- cgroup: Fix memory leak when parsing multiple source parameters (Qinglang Miao)   
- of: fix linker-section match-table corruption (Johan Hovold)   
- null_blk: Fix zone size initialization (Damien Le Moal)   
- tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo)   
- uapi: move constants from &lt;linux/kernel.h&gt; to &lt;linux/const.h&gt; (Petr Vorel)   
- scsi: block: Fix a race in the runtime power management code (Bart Van Assche)   
- jffs2: Fix NULL pointer dereference in rp_size fs option parsing (Jamie Iles)   
- jffs2: Allow setting rp_size to zero during remounting (lizhe)   
- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)   
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Paolo Bonzini)   
- KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Paolo Bonzini)   
- ext4: don't remount read-only with errors=continue on reboot (Jan Kara)   
- btrfs: fix race when defragmenting leads to unnecessary IO (Filipe Manana)   
- vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)   
- fscrypt: remove kernel-internal constants from UAPI header (Eric Biggers)   
- fscrypt: add fscrypt_is_nokey_name() (Eric Biggers)   
- f2fs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ubifs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ext4: prevent creating duplicate encrypted filenames (Eric Biggers)   
- thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed (Zhuguangqing)   
- md/raid10: initialize r10_bio-&gt;read_slot before use. (Kevin Vigor)   
- net/sched: sch_taprio: reset child qdiscs before freeing them (Davide Caratti)   
- uek/ol/config-aarch64: Update uek6 kernel with RPI IOT configs (Vijay Kumar)  [Orabug: 32833361]  
- dts/bcm2711: set gpio6 to level=0 and pull=down (Vijay Kumar)  [Orabug: 32833361]  
- dts: bcm283x: Fix vc4's firmware bus DMA limitations (Nicolas Saenz Julienne)  [Orabug: 32833361]  
- uek6/config-aarch64-rpi: Enable CONFIG_RTC_DRV_ABEOZ9 (Vijay Kumar)  [Orabug: 32833361]  
- rtc/ab-eoz9: Add support for ABEOA9 SPI chip (Vijay Kumar)  [Orabug: 32833361]  
- rtc: abracon: add abeoa9 device id (Tom Saeger)  [Orabug: 32833361]  
- arm64/dts/bcm2711: Set SPI_CE0_N to output for GPIO8 (Vijay Kumar)  [Orabug: 32833361]  
- uek-rpm/ol8: Build rpi kernel (Tom Saeger)  [Orabug: 32833361]  
- uek-rpm: add rpi specific config (Tom Saeger)  [Orabug: 32833361]  
- firmware/raspberrypi: Notify firmware of a reboot (Phil Elwell)  [Orabug: 32833361]  
- firmware: raspberrypi: Report the fw variant during probe (Dave Stevenson)  [Orabug: 32833361]  
- raspberrypi-firmware: Export the general transaction function. (Eric Anholt)  [Orabug: 32833361]  
- firmware: bcm2835: Support ARCH_BCM270x (Noralf Trønnes)  [Orabug: 32833361]  
- Add NO_WAIT_RESP flag (Phil Elwell)  [Orabug: 32833361]  
- bcm2835-dma: Add proper 40-bit DMA support (Phil Elwell)  [Orabug: 32833361]  
- dmaengine: Add support for BCM2708 (Florian Meier)  [Orabug: 32833361]  
- dmaengine: bcm2835: Load driver early and support legacy API (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: char: broadcom: Add vcio module (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: Add /dev/gpiomem device for rootless user GPIO access (Luke Wren)  [Orabug: 32833361]  
- RPi: vcsm: VideoCore shared memory service for BCM2835 (Tim Gover)  [Orabug: 32833361]  
- RPi: vc_mem: Add vc_mem driver for querying firmware memory addresses (popcornmix)  [Orabug: 32833361]  
- RPi4/dts: set alias for i2c device (Vijay Kumar)  [Orabug: 32833361]  
- dts: Enable i2c4 for RPi4 (Vijay Kumar)  [Orabug: 32833361]  
- RPi:dts/bcm2711: Enable pwm for RPi4 board (Vijay Kumar)  [Orabug: 32833361]  
- RPi: transplant rpi_backlight to it's expected place (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 for BCM2711 (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 give expected gpio numbering (notro)  [Orabug: 32833361]  
- RPi: spidev: add rpi4 spidev0 (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: rpi4 add gpiomem (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: enable rpi4 touchscreen, i2c, and spi (Tom Saeger)  [Orabug: 32833361]  
- RPi: rpi_display: add backlight driver and overlay (P33M)  [Orabug: 32833361]  
- HID: quirks: Add quirk for Lenovo optical mouse (Saeed Mirzamohammadi)  [Orabug: 32820273]  
- x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817184]  
- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (Kan Liang)  [Orabug: 32806848]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.2.el8uek]" date="1620129600">- vfio/pci: restore remap elision logic in vfio_pci_mmap_fault() (Ankur Arora)  [Orabug: 32478548]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.3.el8uek]" date="1620475200">- LTS tag: v5.4.94 (Jack Vogel)   
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)   
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)   
- dm integrity: conditionally disable "recalculate" feature (Mikulas Patocka)   
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (Jean-Philippe Brucker)   
- SMB3.1.1: do not log warning message if server doesn't populate salt (Steve French)   
- arm64: mm: use single quantity to represent the PA to VA translation (Ard Biesheuvel)   
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)   
- io_uring: Fix current-&gt;fs handling in io_sq_wq_submit_work() (Nicolai Stange)   
- HID: wacom: Correct NULL dereference on AES pen proximity (Jason Gerecke)   
- Revert "mm/slub: fix a memory leak in sysfs_slab_add()" (Wang Hai)   
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)   
- LTS tag: v5.4.93 (Jack Vogel)   
- tcp: fix TCP_USER_TIMEOUT with zero window (Enke Chen)   
- net: dsa: b53: fix an off by one in checking "vlan-&gt;vid" (Dan Carpenter)   
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (Tariq Toukan)   
- net: mscc: ocelot: allow offloading of bridge on top of LAG (Vladimir Oltean)   
- ipv6: set multicast flag on the multicast route (Matteo Croce)   
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)   
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)   
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)   
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)   
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow (Lecopzer Chen)   
- kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (Lecopzer Chen)   
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)   
- lightnvm: fix memory leak when submit fails (Pan Bian)   
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)   
- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (Rasmus Villemoes)   
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)   
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)   
- x86/cpu/amd: Set __max_die_per_package on AMD (Yazen Ghannam)   
- pinctrl: ingenic: Fix JZ4760 support (Paul Cercueil)   
- driver core: Extend device_is_dependent() (Rafael J. Wysocki)   
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)   
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)   
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)   
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)   
- usb: gadget: aspeed: fix stop dma register setting. (Ryan Chen)   
- USB: ehci: fix an interrupt calltrace error (Longfang Liu)   
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)   
- serial: mvebu-uart: fix tx lost characters at power off (Pali Rohár)   
- stm class: Fix module init return on allocation failure (Wang Hui)   
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)   
- x86/mmx: Use KFPU_387 for MMX string operations (Andy Lutomirski)   
- x86/topology: Make __max_die_per_package available unconditionally (Borislav Petkov)   
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (Andy Lutomirski)   
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)   
- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (Ronnie Sahlberg)   
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)   
- can: peak_usb: fix use after free bugs (Vincent Mailhol)   
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)   
- can: dev: can_restart: fix use after free bug (Vincent Mailhol)   
- selftests: net: fib_tests: remove duplicate log test (Hangbin Liu)   
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (Hans de Goede)   
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)   
- powerpc: Fix alignment bug within the init sections (Ariel Marcovitch)   
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann)   
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (Billy Tsai)   
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (Youling Tang)   
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (Ben Skeggs)   
- drm/nouveau/mmu: fix vram heap sizing (Ben Skeggs)   
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)   
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)   
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)   
- drm/amd/display: Fix to be able to stop crc calculation (Wayne Lin)   
- drm/amdgpu/psp: fix psp gfx ctrl cmds (Victor Zhao)   
- riscv: defconfig: enable gpio support for HiFive Unleashed (Sagar Shrikant Kadam)   
- dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (Sagar Shrikant Kadam)   
- x86/xen: Add xen_no_vector_callback option to test PCI INTX delivery (David Woodhouse)   
- xen: Fix event channel callback via INTX/GSI (David Woodhouse)   
- arm64: make atomic helpers __always_inline (Arnd Bergmann)   
- clk: tegra30: Add hda clock default rates to clock driver (Peter Geis)   
- HID: Ignore battery for Elan touchscreen on ASUS UX550 (Seth Miller)   
- HID: logitech-dj: add the G602 receiver (Filipe Laíns)   
- riscv: Fix sifive serial driver (Damien Le Moal)   
- riscv: Fix kernel time_init() (Damien Le Moal)   
- scsi: sd: Suppress spurious errors when WRITE SAME is being disabled (Ewan D. Milne)   
- scsi: qedi: Correct max length of CHAP secret (Nilesh Javali)   
- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)   
- dm integrity: select CRYPTO_SKCIPHER (Anthony Iliopoulos)   
- HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device (Kai-Heng Feng)   
- ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)   
- drm/i915/gt: Prevent use of engine-&gt;wa_ctx after error (Chris Wilson)   
- drm/syncobj: Fix use-after-free (Daniel Vetter)   
- drm/atomic: put state on error path (Pan Bian)   
- dm integrity: fix a crash if "recalculate" used without "internal_hash" (Mikulas Patocka)   
- dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)   
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)   
- mmc: core: don't initialize block size from ext_csd if not present (Peter Collingbourne)   
- btrfs: send: fix invalid clone operations when cloning from the same file and root (Filipe Manana)   
- btrfs: don't clear ret in btrfs_start_dirty_block_groups (Josef Bacik)   
- btrfs: fix lockdep splat in btrfs_recover_relocation (Josef Bacik)   
- btrfs: don't get an EINTR during drop_snapshot for reloc (Josef Bacik)   
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)   
- ALSA: hda/via: Add minimum mute flag (Takashi Iwai)   
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)   
- platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 (Jiaxun Yang)   
- platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes (Heikki Krogerus)   
- i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)   
- LTS tag: v5.4.92 (Jack Vogel)   
- spi: cadence: cache reference clock rate during probe (Michael Hennerich)   
- mac80211: check if atf has been disabled in __ieee80211_schedule_txq (Lorenzo Bianconi)   
- mac80211: do not drop tx nulldata packets on encrypted links (Felix Fietkau)   
- tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)   
- net, sctp, filter: remap copy_from_user failure error (Daniel Borkmann)   
- rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)   
- net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)   
- net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski)   
- net: stmmac: Fixed mtu channged by cache aligned (David Wu)   
- rxrpc: Call state should be read with READ_ONCE() under some circumstances (Baptiste Lepers)   
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)   
- net: dcb: Validate netlink message in DCB handler (Petr Machata)   
- esp: avoid unneeded kmap_atomic call (Willem de Bruijn)   
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)   
- net: mvpp2: Remove Pause and Asym_Pause support (Stefan Chulski)   
- mlxsw: core: Increase critical threshold for ASIC thermal zone (Vadim Pasternak)   
- mlxsw: core: Add validation of transceiver temperature thresholds (Vadim Pasternak)   
- net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)   
- netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)   
- udp: Prevent reuseport_select_sock from reading uninitialized socks (Baptiste Lepers)   
- bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback (Mircea Cirjaliu)   
- bpf: Don't leak memory in bpf getsockopt when optlen == 0 (Stanislav Fomichev)   
- nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields)   
- spi: npcm-fiu: Disable clock in probe error path (Lukas Wunner)   
- spi: npcm-fiu: simplify the return expression of npcm_fiu_probe() (Qinglang Miao)   
- elfcore: fix building with clang (Arnd Bergmann)   
- xen/privcmd: allow fetching resource sizes (Roger Pau Monne)   
- compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)   
- usb: ohci: Make distrust_firmware param default to false (Hamish Martin)   
- LTS tag: v5.4.91 (Jack Vogel)   
- netfilter: nft_compat: remove flush counter optimization (Florian Westphal)   
- netfilter: nf_nat: Fix memleak in nf_nat_init (Dinghao Liu)   
- netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)   
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)   
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)   
- dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)   
- net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de)   
- iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() (Lu Baolu)   
- mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)   
- drm/i915/dsi: Use unconditional msleep for the panel_on_delay when there is no reset-deassert MIPI-sequence (Hans de Goede)   
- IB/mlx5: Fix error unwinding when set_has_smi_cap fails (Parav Pandit)   
- RDMA/mlx5: Fix wrong free of blue flame register on error (Mark Bloch)   
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded. (Michael Chan)   
- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)   
- RDMA/restrack: Don't treat as an error allocation ID wrapping (Leon Romanovsky)   
- ext4: fix superblock checksum failure when setting password salt (Jan Kara)   
- NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)   
- NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter (Trond Myklebust)   
- pNFS: Stricter ordering of layoutget and layoutreturn (Trond Myklebust)   
- pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)   
- pNFS: We want return-on-close to complete when evicting the inode (Trond Myklebust)   
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)   
- nvme-tcp: fix possible data corruption with bio merges (Sagi Grimberg)   
- ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)   
- ASoC: meson: axg-tdmin: fix axg skew offset (Jerome Brunet)   
- ASoC: meson: axg-tdm-interface: fix loopback (Jerome Brunet)   
- dump_common_audit_data(): fix racy accesses to -&gt;d_name (Al Viro)   
- perf intel-pt: Fix 'CPU too large' error (Adrian Hunter)   
- ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)   
- drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor)   
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)   
- usb: typec: Fix copy paste error for NVIDIA alt-mode description (Peter Robinson)   
- drm/amdgpu: fix a GPU hang issue when remove device (Dennis Li)   
- nvmet-rdma: Fix list_del corruption on queue establishment failure (Israel Rukshin)   
- nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN (Gopal Tiwari)   
- selftests: fix the return value for UDP GRO test (Po-Hsu Lin)   
- net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)   
- misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)   
- arch/arc: add copy_user_page() to &lt;asm/page.h&gt; to fix build error on ARC (Randy Dunlap)   
- bfq: Fix computation of shallow depth (Jan Kara)   
- lib/raid6: Let $(UNROLL) rules work with macOS userland (John Millikin)   
- hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values (Uwe Kleine-König)   
- habanalabs: Fix memleak in hl_device_reset (Dinghao Liu)   
- habanalabs: register to pci shutdown callback (Oded Gabbay)   
- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)   
- regulator: bd718x7: Add enable times (Guido Günther)   
- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)   
- netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin)   
- ARC: build: move symlink creation to arch/arc/Makefile to avoid race (Masahiro Yamada)   
- ARC: build: add boot_targets to PHONY (Masahiro Yamada)   
- ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)   
- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)   
- dm integrity: fix flush with external metadata device (Mikulas Patocka)   
- cifs: fix interrupted close commands (Paulo Alcantara)   
- smb3: remove unused flag passed into close functions (Steve French)   
- ext4: don't leak old mountpoint samples (Theodore Ts'o)   
- ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)   
- drm/i915/backlight: fix CPU mode backlight takeover on LPT (Jani Nikula)   
- btrfs: tree-checker: check if chunk item end overflows (Su Yue)   
- r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)   
- dm integrity: fix the maximum number of arguments (Mikulas Patocka)   
- dm snapshot: flush merged data before committing metadata (Akilesh Kailash)   
- dm raid: fix discard limits for raid1 (Mike Snitzer)   
- mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)   
- ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)   
- RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (Tom Rix)   
- MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)   
- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)   
- mips: lib: uncached: fix non-standard usage of variable 'sp' (Anders Roxell)   
- mips: fix Section mismatch in reference (Anders Roxell)   
- tracing/kprobes: Do the notrace functions check without kprobes on ftrace (Masami Hiramatsu)   
- x86/hyperv: check cpu mask after interrupt has been disabled (Wei Liu)   
- ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)   
- btrfs: prevent NULL pointer dereference in extent_io_tree_panic (Su Yue)   
- kbuild: enforce -Werror=return-type (Olaf Hering)   
- IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32852998]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.4.el8uek]" date="1621080000">- uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi)  [Orabug: 32837542]  
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley)  [Orabug: 32867569]  
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft))  [Orabug: 32867569]  
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley)  [Orabug: 32867569]  
- uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour)  [Orabug: 32816428]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.5.el8uek]" date="1621684800">- sctp: delay auto_asconf init until binding the first addr (Xin Long)  [Orabug: 32907967]  {CVE-2021-23133} {CVE-2021-23133} 
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860491]  {CVE-2021-31916} 
- uek-rpm: update kABI lists for the new symbols (Saeed Mirzamohammadi)  [Orabug: 32883836]  
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements)  [Orabug: 32888143]  
- scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (James Smart)  [Orabug: 32827840]</changelog>
</package>
<package pkgid="e257e1e2a36ee246761aa2fb583d2fa896778d2c2e79555f7132b5cd8a3b32c9" name="kernel-uek" arch="src">
  <version epoch="0" ver="5.4.17" rel="2102.202.5.el8uek"/>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.0.el8uek]" date="1617451200">- uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel)  [Orabug: 32532663]  
- RDMA/rxe:  ipc_bench fails on SoftRoCE with shpd (Rao Shoaib)  [Orabug: 32716155]  
- vhost-vdpa: set v-&gt;config_ctx to NULL if eventfd_ctx_fdget() fails (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- vhost-vdpa: fix use-after-free of v-&gt;config_ctx (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 32669269]  {CVE-2021-28950} 
- fuse: fix bad inode (Miklos Szeredi)  [Orabug: 32669269]  {CVE-2021-28950} 
- RDMA/core: Fix corrupted SL on passive side (Håkon Bugge)  [Orabug: 32662965]  
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651473]  {CVE-2021-28038} 
- RDMA/rxe: Compute the maximum sges and inline size based on the WQE size (Rao Shoaib)  [Orabug: 32648060]  
- KVM: kvmclock: Fix vCPUs &gt; 64 can't be online/hotpluged (Wanpeng Li)  [Orabug: 32641672]  
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32640116]  
- uek-rpm: ol7: aarch64: add CONFIG_ACPI_HOTPLUG_MEMORY (Mihai Carabas)  [Orabug: 32638660]  
- KVM: SVM: Disable AVIC before setting V_IRQ (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: Introduce kvm_make_all_cpus_request_except() (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: X86: correct meaningless kvm_apicv_activated() check (Paolo Bonzini)  [Orabug: 32603569]  
- KVM: Disable preemption in kvm_get_running_vcpu() (Marc Zyngier)  [Orabug: 32603569]  
- KVM: Move running VCPU from ARM to common code (Paolo Bonzini)  [Orabug: 32603569]  
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697850]  {CVE-2021-28688} 
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui)  [Orabug: 32651461]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.1.el8uek]" date="1618056000">- IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751624]  
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709120]  {CVE-2021-29650} 
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang)  [Orabug: 32669468]  {CVE-2021-28971} 
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669450]  {CVE-2021-28964}</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.2.el8uek]" date="1618747200">- md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam)  [Orabug: 32764237]  
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang)  [Orabug: 32763849]  
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet)  [Orabug: 32760314]  
- Revert "x86/vmlinux: Use INT3 instead of NOP for linker fill bytes" (John Donnelly)  [Orabug: 32576398]  {CVE-2021-3411} 
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi)  [Orabug: 32734148]  
- LTS tag: v5.4.85 (Jack Vogel)   
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (Xiaochen Shen)   
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (James Morse)   
- membarrier: Explicitly sync remote cores when SYNC_CORE is requested (Andy Lutomirski)   
- Revert "selftests/ftrace: check for do_sys_openat2 in user-memory test" (Kamal Mostafa)   
- KVM: mmu: Fix SPTE encoding of MMIO generation upper half (Maciej S. Szmigiero)   
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)   
- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)   
- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)   
- xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (Hans de Goede)   
- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)   
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)   
- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)   
- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)   
- ktest.pl: If size of log is too big to email, email error message (Steven Rostedt (VMware))   
- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)   
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)   
- net: ll_temac: Fix potential NULL dereference in temac_probe() (Zhang Changzhong)   
- lan743x: fix for potential NULL pointer dereference with bare card (Sergej Bauer)   
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)   
- tcp: select sane initial rcvq_space.space for big MSS (Eric Dumazet)   
- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)   
- bridge: Fix a deadlock when enabling multicast snooping (Joseph Huang)   
- enetc: Fix reporting of h/w packet counters (Claudiu Manoil)   
- udp: fix the proto value passed to ip_protocol_deliver_rcu for the segments (Xin Long)   
- net: hns3: remove a misused pragma packed (Huazhong Tan)   
- vrf: packets with lladdr src needs dst at input with orig_iif when needs strict (Stephen Suryaputra)   
- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)   
- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)   
- ipv4: fix error return code in rtm_to_fib_config() (Zhang Changzhong)   
- ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (Peilin Ye)   
- LTS tag: v5.4.84 (Jack Vogel)   
- compiler.h: fix barrier_data() on clang (Arvind Sankar)   
- mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING (Minchan Kim)   
- x86/apic/vector: Fix ordering in vector assignment (Thomas Gleixner)   
- x86/membarrier: Get rid of a dubious optimization (Andy Lutomirski)   
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)   
- scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" (Dan Carpenter)   
- proc: use untagged_addr() for pagemap_read addresses (Miles Chen)   
- kbuild: avoid static_assert for genksyms (Arnd Bergmann)   
- drm/i915/display/dp: Compute the correct slice count for VDSC on DP (Manasi Navare)   
- mmc: block: Fixup condition for CMD13 polling for RPMB requests (Bean Huo)   
- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)   
- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)   
- Input: cm109 - do not stomp on control URB (Dmitry Torokhov)   
- ktest.pl: Fix incorrect reboot for grub2bls (Libo Chen)   
- can: m_can: m_can_dev_setup(): add support for bosch mcan version 3.3.0 (Pankaj Sharma)   
- platform/x86: touchscreen_dmi: Add info for the Irbis TW118 tablet (Hans de Goede)   
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC (Max Verevkin)   
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)   
- platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen (Hans de Goede)   
- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e (Hans de Goede)   
- arm64: tegra: Disable the ACONNECT for Jetson TX2 (Jon Hunter)   
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)   
- spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts (Ran Wang)   
- irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend (Xu Qiang)   
- ibmvnic: skip tx timeout reset while in resetting (Lijun Pan)   
- interconnect: qcom: qcs404: Remove GPU and display RPM IDs (Georgi Djakov)   
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)   
- ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)   
- arm64: dts: broadcom: clear the warnings caused by empty dma-ranges (Zhen Lei)   
- powerpc: Drop -me200 addition to build flags (Michael Ellerman)   
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)   
- iwlwifi: pcie: set LTR to avoid completion timeout (Johannes Berg)   
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)   
- iwlwifi: pcie: limit memory read spin time (Johannes Berg)   
- x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S (Fangrui Song)   
- Kbuild: do not emit debug info for assembly with LLVM_IAS=1 (Nick Desaulniers)</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.3.el8uek]" date="1619179200">- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)  [Orabug: 32805544]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.0.el8uek]" date="1619265600">- LTS tag: v5.4.86 (Jack Vogel)   
- x86/CPU/AMD: Save AMD NodeId as cpu_die_id (Yazen Ghannam)   
- Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS" (Steven Rostedt (VMware))   
- rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (Nikita Shubin)   
- regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (DingHua Ma)   
- PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)   
- platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (Carlos Garnacho)   
- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)   
- xen/xenbus: Count pending messages for each watch (SeongJae Park)   
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)   
- dma-buf/dma-resv: Respect num_fences when initializing the shared fence list. (Maarten Lankhorst)   
- device-dax/core: Fix memory leak when rmmod dax.ko (Wang Hai)   
- clk: tegra: Do not return 0 on failure (Nicolin Chen)   
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)   
- clk: ingenic: Fix divider calculation with div tables (Paul Cercueil)   
- pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler (Yangtao Li)   
- md/cluster: fix deadlock when node is doing resync job (Zhao Heming)   
- md/cluster: block reshape with remote resync job (Zhao Heming)   
- iio:adc:ti-ads124s08: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:adc:ti-ads124s08: Fix buffer being too long. (Jonathan Cameron)   
- iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)   
- iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)   
- iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:light:st_uvis25: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)   
- iio: buffer: Fix demux update (Nuno Sá)   
- scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi)   
- mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (Sergei Antonov)   
- mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (Praveenkumar I)   
- mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)   
- mtd: spinand: Fix OOB read (Miquel Raynal)   
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)   
- spi: atmel-quadspi: Fix AHB memory accesses (Tudor Ambarus)   
- spi: atmel-quadspi: Disable clock in probe error path (Lukas Wunner)   
- spi: mt7621: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: mt7621: Disable clock in probe error path (Lukas Wunner)   
- spi: synquacer: Disable clock in probe error path (Lukas Wunner)   
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)   
- spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner)   
- spi: mxic: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: gpio: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: fsl: fix use of spisel_boot signal on MPC8309 (Rasmus Villemoes)   
- spi: davinci: Fix use-after-free on unbind (Lukas Wunner)   
- spi: atmel-quadspi: Fix use-after-free on unbind (Lukas Wunner)   
- spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)   
- spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)   
- drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)   
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)   
- drm/amd/display: Fix memory leaks in S3 resume (Stylon Wang)   
- platform/x86: mlx-platform: remove an unused variable (Arnd Bergmann)   
- jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)   
- jffs2: Fix ignoring mounting options problem during remounting (lizhe)   
- jffs2: Fix GC exit abnormally (Zhe Li)   
- ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger)   
- SMB3: avoid confusing warning message on mount to Azure (Steve French)   
- ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)   
- um: Remove use of asprinf in umid.c (Anton Ivanov)   
- ima: Don't modify file descriptor mode on the fly (Roberto Sassu)   
- powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (David Hildenbrand)   
- powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand)   
- powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- powerpc/mm: Fix verification of MMU_FTR_TYPE_44x (Christophe Leroy)   
- powerpc/8xx: Fix early debug when SMC1 is relocated (Christophe Leroy)   
- powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)   
- powerpc/feature: Add CPU_FTR_NOEXECUTE to G2_LE (Christophe Leroy)   
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)   
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)   
- xprtrdma: Fix XDRBUF_SPARSE_PAGES support (Chuck Lever)   
- ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)   
- ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES (H. Nikolaus Schaller)   
- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)   
- ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)   
- ext4: fix a memory leak of ext4_free_data (Chunguang Xu)   
- btrfs: trim: fix underflow in trim length to prevent access beyond device boundary (Qu Wenruo)   
- btrfs: do not shorten unpin len for caching block groups (Josef Bacik)   
- USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)   
- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)   
- USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)   
- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)   
- USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)   
- USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)   
- EDAC/amd64: Fix PCI component registration (Borislav Petkov)   
- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)   
- crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata (Ard Biesheuvel)   
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)   
- powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)   
- perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake (Kan Liang)   
- perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY (Kan Liang)   
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)   
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (Takashi Iwai)   
- binder: add flag to clear buffer on txn complete (Todd Kjos)   
- s390/dasd: fix list corruption of lcu list (Stefan Haberland)   
- s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)   
- s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)   
- s390/dasd: fix hanging device offline processing (Stefan Haberland)   
- s390/kexec_file: fix diag308 subcode when loading crash kernel (Philipp Rudo)   
- s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)   
- ALSA: core: memalloc: add page alignment for iram (Robin Gong)   
- ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai)   
- ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (Amadej Kastelic)   
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (Chris Chiu)   
- ALSA: hda/realtek: Add quirk for MSI-GP73 (Takashi Iwai)   
- ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (Chris Chiu)   
- ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)   
- ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (Kailang Yang)   
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)   
- ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (Chris Chiu)   
- ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (Hui Wang)   
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg. (Connor McAdams)   
- ALSA: hda: Fix regressions on clear and reconfig sysfs (Takashi Iwai)   
- ACPI: PNP: compare the string length in the matching_id() (Hui Wang)   
- Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (Daniel Scally)   
- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)   
- ALSA: hda/ca0132 - Change Input Source enum strings. (Connor McAdams)   
- Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)   
- media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (Sakari Ailus)   
- media: ipu3-cio2: Validate mbus format in setting subdev format (Sakari Ailus)   
- media: ipu3-cio2: Serialise access to pad format (Sakari Ailus)   
- media: ipu3-cio2: Return actual subdev format (Sakari Ailus)   
- media: ipu3-cio2: Remove traces of returned buffers (Sakari Ailus)   
- media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner)   
- media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)   
- media: gspca: Fix memory leak in probe (Alan Stern)   
- vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)   
- initramfs: fix clang build failure (Arnd Bergmann)   
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)   
- drm/amdkfd: Fix leak in dmabuf import (Felix Kuehling)   
- drm/amd/display: Prevent bandwidth overflow (Chris Park)   
- lwt: Disable BH too in run_lwt_bpf() (Dongdong Wang)   
- fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)   
- cfg80211: initialize rekey_data (Sara Sharon)   
- ARM: sunxi: Add machine match for the Allwinner V3 SoC (Paul Kocialkowski)   
- perf probe: Fix memory leak when synthesizing SDT probes (Arnaldo Carvalho de Melo)   
- kconfig: fix return value of do_error_if() (Masahiro Yamada)   
- clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)   
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)   
- clk: at91: sam9x60: remove atmel,osc-bypass support (Alexandre Belloni)   
- virtio_ring: Fix two use after free bugs (Dan Carpenter)   
- virtio_net: Fix error code in probe() (Dan Carpenter)   
- virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (Dan Carpenter)   
- qlcnic: Fix error code in probe (Dan Carpenter)   
- perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)   
- pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)   
- pwm: zx: Add missing cleanup in error path (Uwe Kleine-König)   
- clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)   
- watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)   
- watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)   
- libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (Zhang Qilong)   
- net: korina: fix return value (Vincent Stehlé)   
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)   
- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)   
- lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck)   
- checkpatch: fix unescaped left brace (Dwaipayan Ray)   
- mm: don't wake kswapd prematurely when watermark boosting is disabled (Johannes Weiner)   
- sparc: fix handling of page table constructor failure (Matthew Wilcox (Oracle))   
- powerpc/ps3: use dma_mapping_error() (Vincent Stehlé)   
- nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)   
- RDMA/cma: Don't overwrite sgid_attr after device is released (Leon Romanovsky)   
- sunrpc: fix xs_read_xdr_buf for partial pages receive (Dan Aloni)   
- um: chan_xterm: Fix fd leak (Anton Ivanov)   
- um: tty: Fix handling of close in tty lines (Anton Ivanov)   
- um: Monitor error events in IRQ controller (Anton Ivanov)   
- ubifs: Fix error return code in ubifs_init_authentication() (Wang ShaoBo)   
- watchdog: Fix potential dereferencing of null pointer (Wang Wensheng)   
- watchdog: sprd: check busy bit before new loading rather than after that (Lingling Xu)   
- watchdog: sprd: remove watchdog disable from resume fail path (Lingling Xu)   
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)   
- ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (Dan Carpenter)   
- mac80211: don't set set TDLS STA bandwidth wider than possible (Johannes Berg)   
- crypto: atmel-i2c - select CONFIG_BITREVERSE (Arnd Bergmann)   
- extcon: max77693: Fix modalias string (Marek Szyprowski)   
- mtd: rawnand: gpmi: Fix the random DMA timeout issue (Han Xu)   
- mtd: rawnand: meson: Fix a resource leak in init (Dan Carpenter)   
- mtd: rawnand: gpmi: fix reference count leak in gpmi ops (Zhang Qilong)   
- clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)   
- remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (Zhang Changzhong)   
- remoteproc: qcom: fix reference leak in adsp_start (Zhang Qilong)   
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (Zhang Qilong)   
- RDMA/core: Do not indicate device ready when device enablement fails (Jack Morgenstein)   
- can: m_can: m_can_config_endisable(): remove double clearing of clock stop request bit (Sean Nyekjaer)   
- erofs: avoid using generic_block_bmap (Huang Jianan)   
- iwlwifi: mvm: hook up missing RX handlers (Johannes Berg)   
- s390/cio: fix use-after-free in ccw_device_destroy_console (Qinglang Miao)   
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (Zhang Changzhong)   
- platform/chrome: cros_ec_spi: Don't overwrite spi::mode (Stephen Boyd)   
- x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)   
- nfs_common: need lock during iterate through the list (Cheng Lin)   
- nfsd: Fix message level for normal termination (kazuo ito)   
- speakup: fix uninitialized flush_lock (Yang Yingliang)   
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)   
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)   
- powerpc/mm: sanity_check_fault() should work for all, not only BOOK3S (Christophe Leroy)   
- ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (Chuhong Yuan)   
- drm/mediatek: avoid dereferencing a null hdmi_phy on an error message (Colin Ian King)   
- powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)   
- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)   
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (Vadim Pasternak)   
- scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)   
- seq_buf: Avoid type mismatch for seq_buf_init (Arnd Bergmann)   
- scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)   
- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)   
- arm64: dts: meson: g12a: x96-max: fix PHY deassert timing requirements (Stefan Agner)   
- ARM: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- arm64: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (Jing Xiangfeng)   
- Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (Jing Xiangfeng)   
- cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: sun50i: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: qcom: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)   
- clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu)   
- phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure (Wang Li)   
- dm ioctl: fix error return code in target_message (Qinglang Miao)   
- ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)   
- net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)   
- MIPS: Don't round up kernel sections size for memblock_add() (Alexander Sverdlin)   
- memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)   
- arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)   
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)   
- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() (Andrii Nakryiko)   
- ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)   
- iio: hrtimer-trigger: Mark hrtimer to expire in hard interrupt context (Lars-Peter Clausen)   
- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)   
- clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (Yang Yingliang)   
- powerpc/64: Fix an EMIT_BUG_ENTRY in head_64.S (Jordan Niethe)   
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (Athira Rajeev)   
- media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)   
- hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable (Zhang Qilong)   
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)   
- selftests/seccomp: Update kernel config (Mickaël Salaün)   
- NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)   
- net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' (Fedor Tokarev)   
- NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Trond Myklebust)   
- SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (Trond Myklebust)   
- NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia)   
- SUNRPC: rpc_wake_up() should wake up tasks in the correct order (Trond Myklebust)   
- ath10k: Release some resources in an error handling path (Christophe JAILLET)   
- ath10k: Fix an error handling path (Christophe JAILLET)   
- ath10k: Fix the parsing error in service available event (Rakesh Pillai)   
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (Qinglang Miao)   
- ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)   
- soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (Yu Kuai)   
- arm64: dts: meson-sm1: fix typo in opp table (Dongjin Kim)   
- arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 (Artem Lapkin)   
- PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)   
- PCI: Fix overflow in command-line resource alignment requests (Colin Ian King)   
- PCI: Bounds-check command-line resource alignment requests (Bjorn Helgaas)   
- arm64: dts: qcom: c630: Polish i2c-hid devices (Bjorn Andersson)   
- arm64: dts: ls1028a: fix ENETC PTP clock input (Michael Walle)   
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier)   
- power: supply: bq24190_charger: fix reference leak (Zhang Qilong)   
- power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (Hans de Goede)   
- arm64: dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc (Chen-Yu Tsai)   
- arm64: dts: armada-3720-turris-mox: update ethernet-phy handle name (Marek Behún)   
- ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)   
- HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng)   
- slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (Bjorn Andersson)   
- media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)   
- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)   
- media: imx214: Fix stop streaming (Daniel Gomez)   
- samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)   
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (Vadim Pasternak)   
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (Vadim Pasternak)   
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)   
- arm64: tegra: Fix DT binding for IO High Voltage entry (Vidya Sagar)   
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (Zhihao Cheng)   
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)   
- rsi: fix error return code in rsi_reset_card() (Zhang Changzhong)   
- qtnfmac: fix error return code in qtnf_pcie_probe() (Wang Hai)   
- orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)   
- mmc: pxamci: Fix error return code in pxamci_probe (Zhihao Cheng)   
- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)   
- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)   
- memstick: fix a double-free bug in memstick_check (Qinglang Miao)   
- RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)   
- clk: meson: Kconfig: fix dependency for G12A (Kevin Hilman)   
- Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)   
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)   
- soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)   
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)   
- spi: fix resource leak for drivers without .remove callback (Uwe Kleine-König)   
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)   
- crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (Nathan Chancellor)   
- EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Yazen Ghannam)   
- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)   
- powerpc: Avoid broken GCC __attribute__((optimize)) (Ard Biesheuvel)   
- selftests/bpf: Fix broken riscv build (Björn Töpel)   
- spi: mxs: fix reference leak in mxs_spi_probe (Zhang Qilong)   
- usb/max3421: fix return error code in max3421_probe() (Yang Yingliang)   
- Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)   
- Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)   
- Input: ads7846 - fix race that causes missing releases (David Jander)   
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)   
- video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() (Yang Yingliang)   
- media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)   
- scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)   
- ASoC: meson: fix COMPILE_TEST error (Jerome Brunet)   
- media: v4l2-fwnode: Return -EINVAL for invalid bus-type (Lad Prabhakar)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (Yu Kuai)   
- media: tm6000: Fix sizeof() mismatches (Colin Ian King)   
- staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c (Jing Xiangfeng)   
- staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)   
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (Jack Xu)   
- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)   
- RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)   
- ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)   
- spi: sprd: fix reference leak in sprd_spi_remove (Zhang Qilong)   
- ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)   
- selftest/bpf: Add missed ip6ip6 test back (Hangbin Liu)   
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)   
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (Qinglang Miao)   
- spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)   
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)   
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)   
- spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (Qinglang Miao)   
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)   
- Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)   
- Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)   
- arm64: dts: exynos: Correct psci compatible used on Exynos7 (Paweł Chmiel)   
- arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 (Paweł Chmiel)   
- brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} (Seung-Woo Kim)   
- spi: stm32: fix reference leak in stm32_spi_resume (Zhang Qilong)   
- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)   
- ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)   
- spi: spi-mem: fix reference leak in spi_mem_access_start (Zhang Qilong)   
- drm/msm/dsi_pll_10nm: restore VCO rate during restore_state (Dmitry Baryshkov)   
- f2fs: call f2fs_get_meta_page_retry for nat page (Jaegeuk Kim)   
- spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)   
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (Jordan Niethe)   
- drm/amdgpu: fix build_coefficients() argument (Arnd Bergmann)   
- ARM: dts: aspeed: tiogapass: Remove vuart (Vijay Khemka)   
- ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (Clément Péron)   
- crypto: inside-secure - Fix sizeof() mismatch (Colin Ian King)   
- crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)   
- crypto: talitos - Endianess in current_desc_hdr() (Christophe Leroy)   
- drm/amdgpu: fix incorrect enum type (Arnd Bergmann)   
- sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)   
- sched/deadline: Fix sched_dl_global_validate() (Peng Liu)   
- x86/apic: Fix x2apic enablement without interrupt remapping (David Woodhouse)   
- ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)   
- x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)   
- RDMA/rxe: Compute PSN windows correctly (Bob Pearson)   
- ARM: dts: aspeed: s2600wf: Fix VGA memory region location (Joel Stanley)   
- selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)   
- rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (Dan Carpenter)   
- RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)   
- Revert "i2c: i2c-qcom-geni: Fix DMA transfer race" (Douglas Anderson)   
- soc: qcom: geni: More properly switch to DMA mode (Douglas Anderson)   
- soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)   
- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)   
- arm64: dts: renesas: cat875: Remove rxc-skew-ps from ethernet-phy node (Biju Das)   
- arm64: dts: renesas: hihope-rzg2-ex: Drop rxc-skew-ps from ethernet-phy node (Biju Das)   
- drm/tve200: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/mcde: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/aspeed: Fix Kconfig warning &amp; subsequent build errors (Randy Dunlap)   
- drm/gma500: fix double free of gma_connector (Tom Rix)   
- md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)   
- crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)   
- media: msi2500: assign SPI bus number dynamically (Antti Palosaari)   
- quota: Sanity-check quota file headers on load (Jan Kara)   
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)   
- serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)   
- HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)   
- scsi: megaraid_sas: Check user-provided offsets (Arnd Bergmann)   
- coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (Sai Prakash Ranjan)   
- coresight: tmc-etr: Fix barrier packet insertion for perf buffer (Suzuki K Poulose)   
- coresight: tmc-etr: Check if page is valid before dma_map_page() (Mao Jinlong)   
- coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (Sai Prakash Ranjan)   
- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)   
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)   
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)   
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)   
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)   
- USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)   
- USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)   
- usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (Dan Carpenter)   
- soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)   
- kbuild: avoid split lines in .mod files (Masahiro Yamada)   
- perf/x86/intel: Check PEBS status correctly (Stephane Eranian)   
- drm/amd/display: Init clock value by current vbios CLKs (Brandon Syu)   
- iwlwifi: pcie: add one missing entry for AX210 (Luca Coelho)   
- dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)   
- scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)   
- vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)   
- vxlan: Add needed_headroom for lower device (Sven Eckelmann)   
- arm64: syscall: exit userspace before unmasking exceptions (Mark Rutland)   
- habanalabs: put devices before driver removal (Ofir Bitton)   
- drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)   
- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)   
- drm/tegra: replace idr_init() by idr_init_base() (Deepak R Varma)   
- net: mvpp2: add mvpp2_phylink_to_port() helper (Russell King)   
- selftests: fix poll error in udpgro.sh (Paolo Abeni)   
- ixgbe: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: optimise prefetch page refcount (Li RongQing)   
- i40e: Refactor rx_bi accesses (Björn Töpel)   
- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)   
- selftests/bpf/test_offload.py: Reset ethtool features after failed setting (Toke Høiland-Jørgensen)   
- netfilter: nft_ct: Remove confirmation check for NFT_CT_ID (Brett Mastbergen)   
- gpio: eic-sprd: break loop when getting NULL device resource (Chunyan Zhang)   
- Revert "gpio: eic-sprd: Use devm_platform_ioremap_resource()" (Baolin Wang)   
- afs: Fix memory leak when mounting with multiple source parameters (David Howells)   
- netfilter: nft_dynset: fix timeouts later than 23 days (Pablo Neira Ayuso)   
- netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal)   
- netfilter: x_tables: Switch synchronization to RCU (Subash Abhinov Kasiviswanathan)   
- pinctrl: aspeed: Fix GPIO requests on pass-through banks (Andrew Jeffery)   
- blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Douglas Anderson)   
- block: factor out requeue handling from dispatch code (Johannes Thumshirn)   
- block: Simplify REQ_OP_ZONE_RESET_ALL handling (Damien Le Moal)   
- clk: renesas: r9a06g032: Drop __packed for portability (Geert Uytterhoeven)   
- can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)   
- xsk: Replace datagram_poll by sock_poll_wait (Xuan Zhuo)   
- xsk: Fix xsk_poll()'s return type (Luc Van Oostenryck)   
- scsi: bnx2i: Requires MMU (Randy Dunlap)   
- gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)   
- gpio: zynq: fix reference leak in zynq_gpio functions (Qinglang Miao)   
- PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong)   
- ARM: dts: imx6qdl-kontron-samx6i: fix I2C_PM scl pin (Bernd Bauer)   
- ARM: dts: imx6qdl-wandboard-revd1: Remove PAD_GPIO_6 from enetgrp (Fabio Estevam)   
- ARM: dts: sun7i: pcduino3-nano: enable RGMII RX/TX delay on PHY (Adam Sampson)   
- ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)   
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)   
- pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)   
- ARM: dts: sun8i: v40: bananapi-m2-berry: Fix ethernet node (Pablo Greco)   
- ARM: dts: sun8i: r40: bananapi-m2-berry: Fix dcdc1 regulator (Pablo Greco)   
- RAS/CEC: Correct ce_add_elem()'s returned values (William Roche)  [Orabug: 32774757]  
- bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk)  [Orabug: 32759959]  {CVE-2021-29154} 
- KVM: SVM: avoid infinite loop on NPF from bad address (John Donnelly)  [Orabug: 32759746]  {CVE-2020-36310} 
- uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 32795492]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.1.el8uek]" date="1620043200">- LTS tag: v5.4.90 (Jack Vogel)   
- regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() (Dan Carpenter)   
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)   
- block: fix use-after-free in disk_part_iter_next (Ming Lei)   
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier)   
- net: mvpp2: disable force link UP during port init procedure (Stefan Chulski)   
- regulator: qcom-rpmh-regulator: correct hfsmps515 definition (Dmitry Baryshkov)   
- wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)   
- regmap: debugfs: Fix a memory leak when calling regmap_attach_dev (Xiaolei Wang)   
- net/mlx5e: Fix two double free cases (Dinghao Liu)   
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)   
- iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)   
- lightnvm: select CONFIG_CRC32 (Arnd Bergmann)   
- block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)   
- wil6210: select CONFIG_CRC32 (Arnd Bergmann)   
- qed: select CONFIG_CRC32 (Arnd Bergmann)   
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)   
- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() (Shravya Kumbham)   
- dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)   
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function (Christophe JAILLET)   
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated (Hans de Goede)   
- spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)   
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)   
- can: kvaser_pciefd: select CONFIG_CRC32 (Arnd Bergmann)   
- can: m_can: m_can_class_unregister(): remove erroneous m_can_clk_stop() (Marc Kleine-Budde)   
- can: tcan4x5x: fix bittiming const, use common bittiming from m_can driver (Marc Kleine-Budde)   
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() (Dan Carpenter)   
- i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)   
- ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)   
- HID: wacom: Fix memory leakage caused by kfifo_alloc (Ping Cheng)   
- iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)   
- vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)   
- exfat: Month timestamp metadata accidentally incremented (Valdis Kletnieks)   
- x86/resctrl: Don't move a task to the same resource group (Fenghua Yu)   
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)   
- chtls: Fix chtls resources release sequence (Ayush Sawal)   
- chtls: Added a check to avoid NULL pointer dereference (Ayush Sawal)   
- chtls: Replace skb_dequeue with skb_peek (Ayush Sawal)   
- chtls: Fix panic when route to peer not configured (Ayush Sawal)   
- chtls: Remove invalid set_tcb call (Ayush Sawal)   
- chtls: Fix hardware tid leak (Ayush Sawal)   
- net/mlx5e: ethtool, Fix restriction of autoneg with 56G (Aya Levin)   
- net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address (Mark Zhang)   
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (Aleksander Jan Bajkowski)   
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (Julian Wiedmann)   
- nexthop: Unlink nexthop group entry in error path (Ido Schimmel)   
- nexthop: Fix off-by-one error in error path (Ido Schimmel)   
- octeontx2-af: fix memory leak of lmac and lmac-&gt;name (Colin Ian King)   
- net: ip: always refragment ip defragmented packets (Florian Westphal)   
- net: fix pmtu check in nopmtudisc mode (Florian Westphal)   
- tools: selftests: add test for changing routes with PTMU exceptions (Sean Tranchetti)   
- net: ipv6: fib: flush exceptions when purging route (Sean Tranchetti)   
- net/sonic: Fix some resource leaks in error handling paths (Christophe JAILLET)   
- net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)   
- net: stmmac: dwmac-sun8i: Balance internal PHY power (Samuel Holland)   
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (Samuel Holland)   
- net: hns3: fix a phy loopback fail issue (Yonglong Liu)   
- net: hns3: fix the number of queues actually used by ARQ (Yufeng Mo)   
- net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppänen)   
- vfio iommu: Add dma available capability (Matthew Rosato)   
- x86/asm/32: Add ENDs to some functions and relabel with SYM_CODE_* (Jiri Slaby)   
- LTS tag: v5.4.89 (Jack Vogel)   
- scsi: target: Fix XCOPY NAA identifier lookup (David Disseldorp)   {CVE-2020-28374} 
- KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)   
- x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)   
- netfilter: nft_dynset: report EOPNOTSUPP on missing set feature (Pablo Neira Ayuso)   
- netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)   
- netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)   
- netfilter: x_tables: Update remaining dereference to RCU (Subash Abhinov Kasiviswanathan)   
- drm/i915: clear the gpu reloc batch (Matthew Auld)   
- dmabuf: fix use-after-free of dmabuf's file-&gt;f_inode (Charan Teja Reddy)   
- Revert "device property: Keep secondary firmware node secondary by type" (Bard Liao)   
- btrfs: send: fix wrong file path when there is an inode with a pending rmdir (Filipe Manana)   
- ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256. (PeiSen Hou)   
- ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (Kai-Heng Feng)   
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)   
- ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)   
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (Takashi Iwai)   
- kvm: check tlbs_dirty directly (Lai Jiangshan)   
- x86/mm: Fix leak of pmd ptlock (Dan Williams)   
- USB: serial: keyspan_pda: remove unused variable (Johan Hovold)   
- usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)   
- usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)   
- usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)   
- USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)   
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani)   
- usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)   
- usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)   
- usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)   
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)   
- USB: usblp: fix DMA to stack (Johan Hovold)   
- USB: yurex: fix control-URB timeout handling (Johan Hovold)   
- USB: serial: option: add Quectel EM160R-GL (Bjørn Mork)   
- USB: serial: option: add LongSung M5710 module support (Daniel Palmer)   
- USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)   
- usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)   
- usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)   
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)   
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)   
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)   
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa)   
- USB: cdc-acm: blacklist another IR Droid device (Sean Young)   
- usb: gadget: enable super speed plus (taehyun.cho)   
- staging: mt7621-dma: Fix a resource leak in an error handling path (Christophe JAILLET)   
- powerpc: Handle .text.{hot,unlikely}.* in linker script (Nathan Chancellor)   
- crypto: asym_tpm: correct zero out potential secrets (Greg Kroah-Hartman)   
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)   
- Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close (Hans de Goede)   
- kbuild: don't hardcode depmod path (Dominique Martinet)   
- net/sched: sch_taprio: ensure to reset/destroy all child qdiscs (Davide Caratti)   
- ionic: account for vlan tag len in rx buffer len (Shannon Nelson)   
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)   
- net: usb: qmi_wwan: add Quectel EM160R-GL (Bjørn Mork)   
- CDC-NCM: remove "connected" log message (Roland Dreier)   
- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (Martin Blumenstingl)   
- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (Martin Blumenstingl)   
- r8169: work around power-saving bug on some chip versions (Heiner Kallweit)   
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)   
- erspan: fix version 1 check in gre_parse_header() (Cong Wang)   
- net: hns: fix return value check in __lb_other_process() (Yunjian Wang)   
- net: sched: prevent invalid Scell_log shift count (Randy Dunlap)   
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)   
- net: mvpp2: fix pkt coalescing int-threshold configuration (Stefan Chulski)   
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang)   
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)   
- net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_rxqs (Antoine Tenart)   
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)   
- net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)   
- net/ncsi: Use real net-device for response handler (John Wang)   
- virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)   
- qede: fix offload for IPIP tunnel packets (Manish Chopra)   
- net: ethernet: mvneta: Fix error handling in mvneta_probe (Dinghao Liu)   
- ibmvnic: continue fatal error reset after passive init (Lijun Pan)   
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)   
- atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)   
- ethernet: ucc_geth: set dev-&gt;max_mtu to 1518 (Rasmus Villemoes)   
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)   
- net: systemport: set dev-&gt;max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)   
- net: mvpp2: prs: fix PPPoE with ipv6 packet parse (Stefan Chulski)   
- net: mvpp2: Add TCAM entry to drop flow control pause frames (Stefan Chulski)   
- iavf: fix double-release of rtnl_lock (Jakub Kicinski)   
- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (Sylwester Dziedziuch)   
- proc: fix lookup in /proc/net subdirectories after setns(2) (Alexey Dobriyan)   
- proc: change -&gt;nlink under proc_subdir_lock (Alexey Dobriyan)   
- depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)   
- lib/genalloc: fix the overflow when size is too big (Huang Shijie)   
- scsi: scsi_transport_spi: Set RQF_PM for domain validation commands (Bart Van Assche)   
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)   
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk -&gt;poweroff() (Adrian Hunter)   
- scsi: ufs: Fix wrong print message in dev_err() (Bean Huo)   
- workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)   
- LTS tag: v5.4.88 (Jack Vogel)   
- exec: Transform exec_update_mutex into a rw_semaphore (Eric W. Biederman)   
- rwsem: Implement down_read_interruptible (Eric W. Biederman)   
- rwsem: Implement down_read_killable_nested (Eric W. Biederman)   
- perf: Break deadlock involving exec_update_mutex (peterz@infradead.org)   
- iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)   
- kdev_t: always inline major/minor helper functions (Josh Poimboeuf)   
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc (Tudor Ambarus)   
- Revert "mtd: spinand: Fix OOB read" (Felix Fietkau)   
- Revert "drm/amd/display: Fix memory leaks in S3 resume" (Alex Deucher)   
- LTS tag: v5.4.87 (Jack Vogel)   
- dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)   
- ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)   
- tick/sched: Remove bogus boot "safety" check (Thomas Gleixner)   
- um: ubd: Submit all data segments atomically (Gabriel Krisman Bertazi)   
- fs/namespace.c: WARN if mnt_count has become negative (Eric Biggers)   
- module: delay kobject uevent until after module init call (Jessica Yu)   
- f2fs: avoid race condition for shrinker count (Jaegeuk Kim)   
- NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode (Trond Myklebust)   
- i3c master: fix missing destroy_workqueue() on error in i3c_master_register (Qinglang Miao)   
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)   
- rtc: pl031: fix resource leak in pl031_probe (Zheng Liang)   
- quota: Don't overflow quota file offsets (Jan Kara)   
- module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)   
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)   
- fcntl: Fix potential deadlock in send_sig{io, urg}() (Boqun Feng)   
- bfs: don't use WARNING: string when it's just info. (Randy Dunlap)   
- ALSA: rawmidi: Access runtime-&gt;avail always in spinlock (Takashi Iwai)   
- ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)   
- f2fs: fix shift-out-of-bounds in sanity_check_raw_super() (Chao Yu)   
- media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)   
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)   
- reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)   
- Bluetooth: hci_h5: close serdev device and free hu in h5_close (Anant Thazhemadam)   
- scsi: cxgb4i: Fix TLS dependency (Randy Dunlap)   
- cgroup: Fix memory leak when parsing multiple source parameters (Qinglang Miao)   
- of: fix linker-section match-table corruption (Johan Hovold)   
- null_blk: Fix zone size initialization (Damien Le Moal)   
- tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo)   
- uapi: move constants from &lt;linux/kernel.h&gt; to &lt;linux/const.h&gt; (Petr Vorel)   
- scsi: block: Fix a race in the runtime power management code (Bart Van Assche)   
- jffs2: Fix NULL pointer dereference in rp_size fs option parsing (Jamie Iles)   
- jffs2: Allow setting rp_size to zero during remounting (lizhe)   
- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)   
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Paolo Bonzini)   
- KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Paolo Bonzini)   
- ext4: don't remount read-only with errors=continue on reboot (Jan Kara)   
- btrfs: fix race when defragmenting leads to unnecessary IO (Filipe Manana)   
- vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)   
- fscrypt: remove kernel-internal constants from UAPI header (Eric Biggers)   
- fscrypt: add fscrypt_is_nokey_name() (Eric Biggers)   
- f2fs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ubifs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ext4: prevent creating duplicate encrypted filenames (Eric Biggers)   
- thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed (Zhuguangqing)   
- md/raid10: initialize r10_bio-&gt;read_slot before use. (Kevin Vigor)   
- net/sched: sch_taprio: reset child qdiscs before freeing them (Davide Caratti)   
- uek/ol/config-aarch64: Update uek6 kernel with RPI IOT configs (Vijay Kumar)  [Orabug: 32833361]  
- dts/bcm2711: set gpio6 to level=0 and pull=down (Vijay Kumar)  [Orabug: 32833361]  
- dts: bcm283x: Fix vc4's firmware bus DMA limitations (Nicolas Saenz Julienne)  [Orabug: 32833361]  
- uek6/config-aarch64-rpi: Enable CONFIG_RTC_DRV_ABEOZ9 (Vijay Kumar)  [Orabug: 32833361]  
- rtc/ab-eoz9: Add support for ABEOA9 SPI chip (Vijay Kumar)  [Orabug: 32833361]  
- rtc: abracon: add abeoa9 device id (Tom Saeger)  [Orabug: 32833361]  
- arm64/dts/bcm2711: Set SPI_CE0_N to output for GPIO8 (Vijay Kumar)  [Orabug: 32833361]  
- uek-rpm/ol8: Build rpi kernel (Tom Saeger)  [Orabug: 32833361]  
- uek-rpm: add rpi specific config (Tom Saeger)  [Orabug: 32833361]  
- firmware/raspberrypi: Notify firmware of a reboot (Phil Elwell)  [Orabug: 32833361]  
- firmware: raspberrypi: Report the fw variant during probe (Dave Stevenson)  [Orabug: 32833361]  
- raspberrypi-firmware: Export the general transaction function. (Eric Anholt)  [Orabug: 32833361]  
- firmware: bcm2835: Support ARCH_BCM270x (Noralf Trønnes)  [Orabug: 32833361]  
- Add NO_WAIT_RESP flag (Phil Elwell)  [Orabug: 32833361]  
- bcm2835-dma: Add proper 40-bit DMA support (Phil Elwell)  [Orabug: 32833361]  
- dmaengine: Add support for BCM2708 (Florian Meier)  [Orabug: 32833361]  
- dmaengine: bcm2835: Load driver early and support legacy API (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: char: broadcom: Add vcio module (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: Add /dev/gpiomem device for rootless user GPIO access (Luke Wren)  [Orabug: 32833361]  
- RPi: vcsm: VideoCore shared memory service for BCM2835 (Tim Gover)  [Orabug: 32833361]  
- RPi: vc_mem: Add vc_mem driver for querying firmware memory addresses (popcornmix)  [Orabug: 32833361]  
- RPi4/dts: set alias for i2c device (Vijay Kumar)  [Orabug: 32833361]  
- dts: Enable i2c4 for RPi4 (Vijay Kumar)  [Orabug: 32833361]  
- RPi:dts/bcm2711: Enable pwm for RPi4 board (Vijay Kumar)  [Orabug: 32833361]  
- RPi: transplant rpi_backlight to it's expected place (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 for BCM2711 (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 give expected gpio numbering (notro)  [Orabug: 32833361]  
- RPi: spidev: add rpi4 spidev0 (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: rpi4 add gpiomem (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: enable rpi4 touchscreen, i2c, and spi (Tom Saeger)  [Orabug: 32833361]  
- RPi: rpi_display: add backlight driver and overlay (P33M)  [Orabug: 32833361]  
- HID: quirks: Add quirk for Lenovo optical mouse (Saeed Mirzamohammadi)  [Orabug: 32820273]  
- x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817184]  
- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (Kan Liang)  [Orabug: 32806848]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.2.el8uek]" date="1620129600">- vfio/pci: restore remap elision logic in vfio_pci_mmap_fault() (Ankur Arora)  [Orabug: 32478548]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.3.el8uek]" date="1620475200">- LTS tag: v5.4.94 (Jack Vogel)   
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)   
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)   
- dm integrity: conditionally disable "recalculate" feature (Mikulas Patocka)   
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (Jean-Philippe Brucker)   
- SMB3.1.1: do not log warning message if server doesn't populate salt (Steve French)   
- arm64: mm: use single quantity to represent the PA to VA translation (Ard Biesheuvel)   
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)   
- io_uring: Fix current-&gt;fs handling in io_sq_wq_submit_work() (Nicolai Stange)   
- HID: wacom: Correct NULL dereference on AES pen proximity (Jason Gerecke)   
- Revert "mm/slub: fix a memory leak in sysfs_slab_add()" (Wang Hai)   
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)   
- LTS tag: v5.4.93 (Jack Vogel)   
- tcp: fix TCP_USER_TIMEOUT with zero window (Enke Chen)   
- net: dsa: b53: fix an off by one in checking "vlan-&gt;vid" (Dan Carpenter)   
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (Tariq Toukan)   
- net: mscc: ocelot: allow offloading of bridge on top of LAG (Vladimir Oltean)   
- ipv6: set multicast flag on the multicast route (Matteo Croce)   
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)   
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)   
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)   
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)   
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow (Lecopzer Chen)   
- kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (Lecopzer Chen)   
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)   
- lightnvm: fix memory leak when submit fails (Pan Bian)   
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)   
- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (Rasmus Villemoes)   
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)   
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)   
- x86/cpu/amd: Set __max_die_per_package on AMD (Yazen Ghannam)   
- pinctrl: ingenic: Fix JZ4760 support (Paul Cercueil)   
- driver core: Extend device_is_dependent() (Rafael J. Wysocki)   
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)   
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)   
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)   
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)   
- usb: gadget: aspeed: fix stop dma register setting. (Ryan Chen)   
- USB: ehci: fix an interrupt calltrace error (Longfang Liu)   
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)   
- serial: mvebu-uart: fix tx lost characters at power off (Pali Rohár)   
- stm class: Fix module init return on allocation failure (Wang Hui)   
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)   
- x86/mmx: Use KFPU_387 for MMX string operations (Andy Lutomirski)   
- x86/topology: Make __max_die_per_package available unconditionally (Borislav Petkov)   
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (Andy Lutomirski)   
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)   
- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (Ronnie Sahlberg)   
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)   
- can: peak_usb: fix use after free bugs (Vincent Mailhol)   
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)   
- can: dev: can_restart: fix use after free bug (Vincent Mailhol)   
- selftests: net: fib_tests: remove duplicate log test (Hangbin Liu)   
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (Hans de Goede)   
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)   
- powerpc: Fix alignment bug within the init sections (Ariel Marcovitch)   
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann)   
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (Billy Tsai)   
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (Youling Tang)   
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (Ben Skeggs)   
- drm/nouveau/mmu: fix vram heap sizing (Ben Skeggs)   
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)   
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)   
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)   
- drm/amd/display: Fix to be able to stop crc calculation (Wayne Lin)   
- drm/amdgpu/psp: fix psp gfx ctrl cmds (Victor Zhao)   
- riscv: defconfig: enable gpio support for HiFive Unleashed (Sagar Shrikant Kadam)   
- dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (Sagar Shrikant Kadam)   
- x86/xen: Add xen_no_vector_callback option to test PCI INTX delivery (David Woodhouse)   
- xen: Fix event channel callback via INTX/GSI (David Woodhouse)   
- arm64: make atomic helpers __always_inline (Arnd Bergmann)   
- clk: tegra30: Add hda clock default rates to clock driver (Peter Geis)   
- HID: Ignore battery for Elan touchscreen on ASUS UX550 (Seth Miller)   
- HID: logitech-dj: add the G602 receiver (Filipe Laíns)   
- riscv: Fix sifive serial driver (Damien Le Moal)   
- riscv: Fix kernel time_init() (Damien Le Moal)   
- scsi: sd: Suppress spurious errors when WRITE SAME is being disabled (Ewan D. Milne)   
- scsi: qedi: Correct max length of CHAP secret (Nilesh Javali)   
- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)   
- dm integrity: select CRYPTO_SKCIPHER (Anthony Iliopoulos)   
- HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device (Kai-Heng Feng)   
- ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)   
- drm/i915/gt: Prevent use of engine-&gt;wa_ctx after error (Chris Wilson)   
- drm/syncobj: Fix use-after-free (Daniel Vetter)   
- drm/atomic: put state on error path (Pan Bian)   
- dm integrity: fix a crash if "recalculate" used without "internal_hash" (Mikulas Patocka)   
- dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)   
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)   
- mmc: core: don't initialize block size from ext_csd if not present (Peter Collingbourne)   
- btrfs: send: fix invalid clone operations when cloning from the same file and root (Filipe Manana)   
- btrfs: don't clear ret in btrfs_start_dirty_block_groups (Josef Bacik)   
- btrfs: fix lockdep splat in btrfs_recover_relocation (Josef Bacik)   
- btrfs: don't get an EINTR during drop_snapshot for reloc (Josef Bacik)   
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)   
- ALSA: hda/via: Add minimum mute flag (Takashi Iwai)   
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)   
- platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 (Jiaxun Yang)   
- platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes (Heikki Krogerus)   
- i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)   
- LTS tag: v5.4.92 (Jack Vogel)   
- spi: cadence: cache reference clock rate during probe (Michael Hennerich)   
- mac80211: check if atf has been disabled in __ieee80211_schedule_txq (Lorenzo Bianconi)   
- mac80211: do not drop tx nulldata packets on encrypted links (Felix Fietkau)   
- tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)   
- net, sctp, filter: remap copy_from_user failure error (Daniel Borkmann)   
- rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)   
- net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)   
- net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski)   
- net: stmmac: Fixed mtu channged by cache aligned (David Wu)   
- rxrpc: Call state should be read with READ_ONCE() under some circumstances (Baptiste Lepers)   
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)   
- net: dcb: Validate netlink message in DCB handler (Petr Machata)   
- esp: avoid unneeded kmap_atomic call (Willem de Bruijn)   
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)   
- net: mvpp2: Remove Pause and Asym_Pause support (Stefan Chulski)   
- mlxsw: core: Increase critical threshold for ASIC thermal zone (Vadim Pasternak)   
- mlxsw: core: Add validation of transceiver temperature thresholds (Vadim Pasternak)   
- net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)   
- netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)   
- udp: Prevent reuseport_select_sock from reading uninitialized socks (Baptiste Lepers)   
- bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback (Mircea Cirjaliu)   
- bpf: Don't leak memory in bpf getsockopt when optlen == 0 (Stanislav Fomichev)   
- nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields)   
- spi: npcm-fiu: Disable clock in probe error path (Lukas Wunner)   
- spi: npcm-fiu: simplify the return expression of npcm_fiu_probe() (Qinglang Miao)   
- elfcore: fix building with clang (Arnd Bergmann)   
- xen/privcmd: allow fetching resource sizes (Roger Pau Monne)   
- compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)   
- usb: ohci: Make distrust_firmware param default to false (Hamish Martin)   
- LTS tag: v5.4.91 (Jack Vogel)   
- netfilter: nft_compat: remove flush counter optimization (Florian Westphal)   
- netfilter: nf_nat: Fix memleak in nf_nat_init (Dinghao Liu)   
- netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)   
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)   
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)   
- dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)   
- net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de)   
- iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() (Lu Baolu)   
- mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)   
- drm/i915/dsi: Use unconditional msleep for the panel_on_delay when there is no reset-deassert MIPI-sequence (Hans de Goede)   
- IB/mlx5: Fix error unwinding when set_has_smi_cap fails (Parav Pandit)   
- RDMA/mlx5: Fix wrong free of blue flame register on error (Mark Bloch)   
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded. (Michael Chan)   
- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)   
- RDMA/restrack: Don't treat as an error allocation ID wrapping (Leon Romanovsky)   
- ext4: fix superblock checksum failure when setting password salt (Jan Kara)   
- NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)   
- NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter (Trond Myklebust)   
- pNFS: Stricter ordering of layoutget and layoutreturn (Trond Myklebust)   
- pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)   
- pNFS: We want return-on-close to complete when evicting the inode (Trond Myklebust)   
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)   
- nvme-tcp: fix possible data corruption with bio merges (Sagi Grimberg)   
- ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)   
- ASoC: meson: axg-tdmin: fix axg skew offset (Jerome Brunet)   
- ASoC: meson: axg-tdm-interface: fix loopback (Jerome Brunet)   
- dump_common_audit_data(): fix racy accesses to -&gt;d_name (Al Viro)   
- perf intel-pt: Fix 'CPU too large' error (Adrian Hunter)   
- ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)   
- drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor)   
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)   
- usb: typec: Fix copy paste error for NVIDIA alt-mode description (Peter Robinson)   
- drm/amdgpu: fix a GPU hang issue when remove device (Dennis Li)   
- nvmet-rdma: Fix list_del corruption on queue establishment failure (Israel Rukshin)   
- nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN (Gopal Tiwari)   
- selftests: fix the return value for UDP GRO test (Po-Hsu Lin)   
- net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)   
- misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)   
- arch/arc: add copy_user_page() to &lt;asm/page.h&gt; to fix build error on ARC (Randy Dunlap)   
- bfq: Fix computation of shallow depth (Jan Kara)   
- lib/raid6: Let $(UNROLL) rules work with macOS userland (John Millikin)   
- hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values (Uwe Kleine-König)   
- habanalabs: Fix memleak in hl_device_reset (Dinghao Liu)   
- habanalabs: register to pci shutdown callback (Oded Gabbay)   
- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)   
- regulator: bd718x7: Add enable times (Guido Günther)   
- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)   
- netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin)   
- ARC: build: move symlink creation to arch/arc/Makefile to avoid race (Masahiro Yamada)   
- ARC: build: add boot_targets to PHONY (Masahiro Yamada)   
- ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)   
- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)   
- dm integrity: fix flush with external metadata device (Mikulas Patocka)   
- cifs: fix interrupted close commands (Paulo Alcantara)   
- smb3: remove unused flag passed into close functions (Steve French)   
- ext4: don't leak old mountpoint samples (Theodore Ts'o)   
- ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)   
- drm/i915/backlight: fix CPU mode backlight takeover on LPT (Jani Nikula)   
- btrfs: tree-checker: check if chunk item end overflows (Su Yue)   
- r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)   
- dm integrity: fix the maximum number of arguments (Mikulas Patocka)   
- dm snapshot: flush merged data before committing metadata (Akilesh Kailash)   
- dm raid: fix discard limits for raid1 (Mike Snitzer)   
- mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)   
- ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)   
- RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (Tom Rix)   
- MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)   
- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)   
- mips: lib: uncached: fix non-standard usage of variable 'sp' (Anders Roxell)   
- mips: fix Section mismatch in reference (Anders Roxell)   
- tracing/kprobes: Do the notrace functions check without kprobes on ftrace (Masami Hiramatsu)   
- x86/hyperv: check cpu mask after interrupt has been disabled (Wei Liu)   
- ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)   
- btrfs: prevent NULL pointer dereference in extent_io_tree_panic (Su Yue)   
- kbuild: enforce -Werror=return-type (Olaf Hering)   
- IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32852998]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.4.el8uek]" date="1621080000">- uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi)  [Orabug: 32837542]  
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley)  [Orabug: 32867569]  
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft))  [Orabug: 32867569]  
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley)  [Orabug: 32867569]  
- uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour)  [Orabug: 32816428]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.5.el8uek]" date="1621684800">- sctp: delay auto_asconf init until binding the first addr (Xin Long)  [Orabug: 32907967]  {CVE-2021-23133} {CVE-2021-23133} 
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860491]  {CVE-2021-31916} 
- uek-rpm: update kABI lists for the new symbols (Saeed Mirzamohammadi)  [Orabug: 32883836]  
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements)  [Orabug: 32888143]  
- scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (James Smart)  [Orabug: 32827840]</changelog>
</package>
<package pkgid="aa846abc60f57554a08de4b0dcbf8169816413c090726a44e3215fca5fd65e52" name="kernel-uek-debug" arch="aarch64">
  <version epoch="0" ver="5.4.17" rel="2102.202.5.el8uek"/>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.0.el8uek]" date="1617451200">- uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel)  [Orabug: 32532663]  
- RDMA/rxe:  ipc_bench fails on SoftRoCE with shpd (Rao Shoaib)  [Orabug: 32716155]  
- vhost-vdpa: set v-&gt;config_ctx to NULL if eventfd_ctx_fdget() fails (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- vhost-vdpa: fix use-after-free of v-&gt;config_ctx (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 32669269]  {CVE-2021-28950} 
- fuse: fix bad inode (Miklos Szeredi)  [Orabug: 32669269]  {CVE-2021-28950} 
- RDMA/core: Fix corrupted SL on passive side (Håkon Bugge)  [Orabug: 32662965]  
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651473]  {CVE-2021-28038} 
- RDMA/rxe: Compute the maximum sges and inline size based on the WQE size (Rao Shoaib)  [Orabug: 32648060]  
- KVM: kvmclock: Fix vCPUs &gt; 64 can't be online/hotpluged (Wanpeng Li)  [Orabug: 32641672]  
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32640116]  
- uek-rpm: ol7: aarch64: add CONFIG_ACPI_HOTPLUG_MEMORY (Mihai Carabas)  [Orabug: 32638660]  
- KVM: SVM: Disable AVIC before setting V_IRQ (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: Introduce kvm_make_all_cpus_request_except() (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: X86: correct meaningless kvm_apicv_activated() check (Paolo Bonzini)  [Orabug: 32603569]  
- KVM: Disable preemption in kvm_get_running_vcpu() (Marc Zyngier)  [Orabug: 32603569]  
- KVM: Move running VCPU from ARM to common code (Paolo Bonzini)  [Orabug: 32603569]  
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697850]  {CVE-2021-28688} 
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui)  [Orabug: 32651461]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.1.el8uek]" date="1618056000">- IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751624]  
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709120]  {CVE-2021-29650} 
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang)  [Orabug: 32669468]  {CVE-2021-28971} 
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669450]  {CVE-2021-28964}</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.2.el8uek]" date="1618747200">- md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam)  [Orabug: 32764237]  
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang)  [Orabug: 32763849]  
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet)  [Orabug: 32760314]  
- Revert "x86/vmlinux: Use INT3 instead of NOP for linker fill bytes" (John Donnelly)  [Orabug: 32576398]  {CVE-2021-3411} 
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi)  [Orabug: 32734148]  
- LTS tag: v5.4.85 (Jack Vogel)   
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (Xiaochen Shen)   
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (James Morse)   
- membarrier: Explicitly sync remote cores when SYNC_CORE is requested (Andy Lutomirski)   
- Revert "selftests/ftrace: check for do_sys_openat2 in user-memory test" (Kamal Mostafa)   
- KVM: mmu: Fix SPTE encoding of MMIO generation upper half (Maciej S. Szmigiero)   
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)   
- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)   
- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)   
- xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (Hans de Goede)   
- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)   
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)   
- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)   
- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)   
- ktest.pl: If size of log is too big to email, email error message (Steven Rostedt (VMware))   
- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)   
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)   
- net: ll_temac: Fix potential NULL dereference in temac_probe() (Zhang Changzhong)   
- lan743x: fix for potential NULL pointer dereference with bare card (Sergej Bauer)   
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)   
- tcp: select sane initial rcvq_space.space for big MSS (Eric Dumazet)   
- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)   
- bridge: Fix a deadlock when enabling multicast snooping (Joseph Huang)   
- enetc: Fix reporting of h/w packet counters (Claudiu Manoil)   
- udp: fix the proto value passed to ip_protocol_deliver_rcu for the segments (Xin Long)   
- net: hns3: remove a misused pragma packed (Huazhong Tan)   
- vrf: packets with lladdr src needs dst at input with orig_iif when needs strict (Stephen Suryaputra)   
- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)   
- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)   
- ipv4: fix error return code in rtm_to_fib_config() (Zhang Changzhong)   
- ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (Peilin Ye)   
- LTS tag: v5.4.84 (Jack Vogel)   
- compiler.h: fix barrier_data() on clang (Arvind Sankar)   
- mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING (Minchan Kim)   
- x86/apic/vector: Fix ordering in vector assignment (Thomas Gleixner)   
- x86/membarrier: Get rid of a dubious optimization (Andy Lutomirski)   
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)   
- scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" (Dan Carpenter)   
- proc: use untagged_addr() for pagemap_read addresses (Miles Chen)   
- kbuild: avoid static_assert for genksyms (Arnd Bergmann)   
- drm/i915/display/dp: Compute the correct slice count for VDSC on DP (Manasi Navare)   
- mmc: block: Fixup condition for CMD13 polling for RPMB requests (Bean Huo)   
- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)   
- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)   
- Input: cm109 - do not stomp on control URB (Dmitry Torokhov)   
- ktest.pl: Fix incorrect reboot for grub2bls (Libo Chen)   
- can: m_can: m_can_dev_setup(): add support for bosch mcan version 3.3.0 (Pankaj Sharma)   
- platform/x86: touchscreen_dmi: Add info for the Irbis TW118 tablet (Hans de Goede)   
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC (Max Verevkin)   
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)   
- platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen (Hans de Goede)   
- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e (Hans de Goede)   
- arm64: tegra: Disable the ACONNECT for Jetson TX2 (Jon Hunter)   
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)   
- spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts (Ran Wang)   
- irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend (Xu Qiang)   
- ibmvnic: skip tx timeout reset while in resetting (Lijun Pan)   
- interconnect: qcom: qcs404: Remove GPU and display RPM IDs (Georgi Djakov)   
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)   
- ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)   
- arm64: dts: broadcom: clear the warnings caused by empty dma-ranges (Zhen Lei)   
- powerpc: Drop -me200 addition to build flags (Michael Ellerman)   
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)   
- iwlwifi: pcie: set LTR to avoid completion timeout (Johannes Berg)   
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)   
- iwlwifi: pcie: limit memory read spin time (Johannes Berg)   
- x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S (Fangrui Song)   
- Kbuild: do not emit debug info for assembly with LLVM_IAS=1 (Nick Desaulniers)</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.3.el8uek]" date="1619179200">- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)  [Orabug: 32805544]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.0.el8uek]" date="1619265600">- LTS tag: v5.4.86 (Jack Vogel)   
- x86/CPU/AMD: Save AMD NodeId as cpu_die_id (Yazen Ghannam)   
- Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS" (Steven Rostedt (VMware))   
- rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (Nikita Shubin)   
- regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (DingHua Ma)   
- PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)   
- platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (Carlos Garnacho)   
- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)   
- xen/xenbus: Count pending messages for each watch (SeongJae Park)   
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)   
- dma-buf/dma-resv: Respect num_fences when initializing the shared fence list. (Maarten Lankhorst)   
- device-dax/core: Fix memory leak when rmmod dax.ko (Wang Hai)   
- clk: tegra: Do not return 0 on failure (Nicolin Chen)   
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)   
- clk: ingenic: Fix divider calculation with div tables (Paul Cercueil)   
- pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler (Yangtao Li)   
- md/cluster: fix deadlock when node is doing resync job (Zhao Heming)   
- md/cluster: block reshape with remote resync job (Zhao Heming)   
- iio:adc:ti-ads124s08: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:adc:ti-ads124s08: Fix buffer being too long. (Jonathan Cameron)   
- iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)   
- iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)   
- iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:light:st_uvis25: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)   
- iio: buffer: Fix demux update (Nuno Sá)   
- scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi)   
- mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (Sergei Antonov)   
- mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (Praveenkumar I)   
- mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)   
- mtd: spinand: Fix OOB read (Miquel Raynal)   
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)   
- spi: atmel-quadspi: Fix AHB memory accesses (Tudor Ambarus)   
- spi: atmel-quadspi: Disable clock in probe error path (Lukas Wunner)   
- spi: mt7621: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: mt7621: Disable clock in probe error path (Lukas Wunner)   
- spi: synquacer: Disable clock in probe error path (Lukas Wunner)   
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)   
- spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner)   
- spi: mxic: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: gpio: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: fsl: fix use of spisel_boot signal on MPC8309 (Rasmus Villemoes)   
- spi: davinci: Fix use-after-free on unbind (Lukas Wunner)   
- spi: atmel-quadspi: Fix use-after-free on unbind (Lukas Wunner)   
- spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)   
- spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)   
- drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)   
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)   
- drm/amd/display: Fix memory leaks in S3 resume (Stylon Wang)   
- platform/x86: mlx-platform: remove an unused variable (Arnd Bergmann)   
- jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)   
- jffs2: Fix ignoring mounting options problem during remounting (lizhe)   
- jffs2: Fix GC exit abnormally (Zhe Li)   
- ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger)   
- SMB3: avoid confusing warning message on mount to Azure (Steve French)   
- ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)   
- um: Remove use of asprinf in umid.c (Anton Ivanov)   
- ima: Don't modify file descriptor mode on the fly (Roberto Sassu)   
- powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (David Hildenbrand)   
- powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand)   
- powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- powerpc/mm: Fix verification of MMU_FTR_TYPE_44x (Christophe Leroy)   
- powerpc/8xx: Fix early debug when SMC1 is relocated (Christophe Leroy)   
- powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)   
- powerpc/feature: Add CPU_FTR_NOEXECUTE to G2_LE (Christophe Leroy)   
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)   
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)   
- xprtrdma: Fix XDRBUF_SPARSE_PAGES support (Chuck Lever)   
- ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)   
- ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES (H. Nikolaus Schaller)   
- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)   
- ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)   
- ext4: fix a memory leak of ext4_free_data (Chunguang Xu)   
- btrfs: trim: fix underflow in trim length to prevent access beyond device boundary (Qu Wenruo)   
- btrfs: do not shorten unpin len for caching block groups (Josef Bacik)   
- USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)   
- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)   
- USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)   
- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)   
- USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)   
- USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)   
- EDAC/amd64: Fix PCI component registration (Borislav Petkov)   
- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)   
- crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata (Ard Biesheuvel)   
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)   
- powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)   
- perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake (Kan Liang)   
- perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY (Kan Liang)   
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)   
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (Takashi Iwai)   
- binder: add flag to clear buffer on txn complete (Todd Kjos)   
- s390/dasd: fix list corruption of lcu list (Stefan Haberland)   
- s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)   
- s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)   
- s390/dasd: fix hanging device offline processing (Stefan Haberland)   
- s390/kexec_file: fix diag308 subcode when loading crash kernel (Philipp Rudo)   
- s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)   
- ALSA: core: memalloc: add page alignment for iram (Robin Gong)   
- ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai)   
- ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (Amadej Kastelic)   
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (Chris Chiu)   
- ALSA: hda/realtek: Add quirk for MSI-GP73 (Takashi Iwai)   
- ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (Chris Chiu)   
- ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)   
- ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (Kailang Yang)   
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)   
- ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (Chris Chiu)   
- ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (Hui Wang)   
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg. (Connor McAdams)   
- ALSA: hda: Fix regressions on clear and reconfig sysfs (Takashi Iwai)   
- ACPI: PNP: compare the string length in the matching_id() (Hui Wang)   
- Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (Daniel Scally)   
- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)   
- ALSA: hda/ca0132 - Change Input Source enum strings. (Connor McAdams)   
- Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)   
- media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (Sakari Ailus)   
- media: ipu3-cio2: Validate mbus format in setting subdev format (Sakari Ailus)   
- media: ipu3-cio2: Serialise access to pad format (Sakari Ailus)   
- media: ipu3-cio2: Return actual subdev format (Sakari Ailus)   
- media: ipu3-cio2: Remove traces of returned buffers (Sakari Ailus)   
- media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner)   
- media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)   
- media: gspca: Fix memory leak in probe (Alan Stern)   
- vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)   
- initramfs: fix clang build failure (Arnd Bergmann)   
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)   
- drm/amdkfd: Fix leak in dmabuf import (Felix Kuehling)   
- drm/amd/display: Prevent bandwidth overflow (Chris Park)   
- lwt: Disable BH too in run_lwt_bpf() (Dongdong Wang)   
- fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)   
- cfg80211: initialize rekey_data (Sara Sharon)   
- ARM: sunxi: Add machine match for the Allwinner V3 SoC (Paul Kocialkowski)   
- perf probe: Fix memory leak when synthesizing SDT probes (Arnaldo Carvalho de Melo)   
- kconfig: fix return value of do_error_if() (Masahiro Yamada)   
- clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)   
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)   
- clk: at91: sam9x60: remove atmel,osc-bypass support (Alexandre Belloni)   
- virtio_ring: Fix two use after free bugs (Dan Carpenter)   
- virtio_net: Fix error code in probe() (Dan Carpenter)   
- virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (Dan Carpenter)   
- qlcnic: Fix error code in probe (Dan Carpenter)   
- perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)   
- pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)   
- pwm: zx: Add missing cleanup in error path (Uwe Kleine-König)   
- clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)   
- watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)   
- watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)   
- libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (Zhang Qilong)   
- net: korina: fix return value (Vincent Stehlé)   
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)   
- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)   
- lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck)   
- checkpatch: fix unescaped left brace (Dwaipayan Ray)   
- mm: don't wake kswapd prematurely when watermark boosting is disabled (Johannes Weiner)   
- sparc: fix handling of page table constructor failure (Matthew Wilcox (Oracle))   
- powerpc/ps3: use dma_mapping_error() (Vincent Stehlé)   
- nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)   
- RDMA/cma: Don't overwrite sgid_attr after device is released (Leon Romanovsky)   
- sunrpc: fix xs_read_xdr_buf for partial pages receive (Dan Aloni)   
- um: chan_xterm: Fix fd leak (Anton Ivanov)   
- um: tty: Fix handling of close in tty lines (Anton Ivanov)   
- um: Monitor error events in IRQ controller (Anton Ivanov)   
- ubifs: Fix error return code in ubifs_init_authentication() (Wang ShaoBo)   
- watchdog: Fix potential dereferencing of null pointer (Wang Wensheng)   
- watchdog: sprd: check busy bit before new loading rather than after that (Lingling Xu)   
- watchdog: sprd: remove watchdog disable from resume fail path (Lingling Xu)   
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)   
- ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (Dan Carpenter)   
- mac80211: don't set set TDLS STA bandwidth wider than possible (Johannes Berg)   
- crypto: atmel-i2c - select CONFIG_BITREVERSE (Arnd Bergmann)   
- extcon: max77693: Fix modalias string (Marek Szyprowski)   
- mtd: rawnand: gpmi: Fix the random DMA timeout issue (Han Xu)   
- mtd: rawnand: meson: Fix a resource leak in init (Dan Carpenter)   
- mtd: rawnand: gpmi: fix reference count leak in gpmi ops (Zhang Qilong)   
- clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)   
- remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (Zhang Changzhong)   
- remoteproc: qcom: fix reference leak in adsp_start (Zhang Qilong)   
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (Zhang Qilong)   
- RDMA/core: Do not indicate device ready when device enablement fails (Jack Morgenstein)   
- can: m_can: m_can_config_endisable(): remove double clearing of clock stop request bit (Sean Nyekjaer)   
- erofs: avoid using generic_block_bmap (Huang Jianan)   
- iwlwifi: mvm: hook up missing RX handlers (Johannes Berg)   
- s390/cio: fix use-after-free in ccw_device_destroy_console (Qinglang Miao)   
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (Zhang Changzhong)   
- platform/chrome: cros_ec_spi: Don't overwrite spi::mode (Stephen Boyd)   
- x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)   
- nfs_common: need lock during iterate through the list (Cheng Lin)   
- nfsd: Fix message level for normal termination (kazuo ito)   
- speakup: fix uninitialized flush_lock (Yang Yingliang)   
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)   
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)   
- powerpc/mm: sanity_check_fault() should work for all, not only BOOK3S (Christophe Leroy)   
- ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (Chuhong Yuan)   
- drm/mediatek: avoid dereferencing a null hdmi_phy on an error message (Colin Ian King)   
- powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)   
- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)   
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (Vadim Pasternak)   
- scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)   
- seq_buf: Avoid type mismatch for seq_buf_init (Arnd Bergmann)   
- scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)   
- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)   
- arm64: dts: meson: g12a: x96-max: fix PHY deassert timing requirements (Stefan Agner)   
- ARM: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- arm64: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (Jing Xiangfeng)   
- Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (Jing Xiangfeng)   
- cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: sun50i: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: qcom: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)   
- clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu)   
- phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure (Wang Li)   
- dm ioctl: fix error return code in target_message (Qinglang Miao)   
- ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)   
- net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)   
- MIPS: Don't round up kernel sections size for memblock_add() (Alexander Sverdlin)   
- memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)   
- arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)   
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)   
- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() (Andrii Nakryiko)   
- ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)   
- iio: hrtimer-trigger: Mark hrtimer to expire in hard interrupt context (Lars-Peter Clausen)   
- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)   
- clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (Yang Yingliang)   
- powerpc/64: Fix an EMIT_BUG_ENTRY in head_64.S (Jordan Niethe)   
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (Athira Rajeev)   
- media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)   
- hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable (Zhang Qilong)   
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)   
- selftests/seccomp: Update kernel config (Mickaël Salaün)   
- NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)   
- net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' (Fedor Tokarev)   
- NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Trond Myklebust)   
- SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (Trond Myklebust)   
- NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia)   
- SUNRPC: rpc_wake_up() should wake up tasks in the correct order (Trond Myklebust)   
- ath10k: Release some resources in an error handling path (Christophe JAILLET)   
- ath10k: Fix an error handling path (Christophe JAILLET)   
- ath10k: Fix the parsing error in service available event (Rakesh Pillai)   
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (Qinglang Miao)   
- ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)   
- soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (Yu Kuai)   
- arm64: dts: meson-sm1: fix typo in opp table (Dongjin Kim)   
- arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 (Artem Lapkin)   
- PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)   
- PCI: Fix overflow in command-line resource alignment requests (Colin Ian King)   
- PCI: Bounds-check command-line resource alignment requests (Bjorn Helgaas)   
- arm64: dts: qcom: c630: Polish i2c-hid devices (Bjorn Andersson)   
- arm64: dts: ls1028a: fix ENETC PTP clock input (Michael Walle)   
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier)   
- power: supply: bq24190_charger: fix reference leak (Zhang Qilong)   
- power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (Hans de Goede)   
- arm64: dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc (Chen-Yu Tsai)   
- arm64: dts: armada-3720-turris-mox: update ethernet-phy handle name (Marek Behún)   
- ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)   
- HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng)   
- slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (Bjorn Andersson)   
- media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)   
- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)   
- media: imx214: Fix stop streaming (Daniel Gomez)   
- samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)   
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (Vadim Pasternak)   
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (Vadim Pasternak)   
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)   
- arm64: tegra: Fix DT binding for IO High Voltage entry (Vidya Sagar)   
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (Zhihao Cheng)   
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)   
- rsi: fix error return code in rsi_reset_card() (Zhang Changzhong)   
- qtnfmac: fix error return code in qtnf_pcie_probe() (Wang Hai)   
- orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)   
- mmc: pxamci: Fix error return code in pxamci_probe (Zhihao Cheng)   
- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)   
- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)   
- memstick: fix a double-free bug in memstick_check (Qinglang Miao)   
- RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)   
- clk: meson: Kconfig: fix dependency for G12A (Kevin Hilman)   
- Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)   
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)   
- soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)   
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)   
- spi: fix resource leak for drivers without .remove callback (Uwe Kleine-König)   
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)   
- crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (Nathan Chancellor)   
- EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Yazen Ghannam)   
- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)   
- powerpc: Avoid broken GCC __attribute__((optimize)) (Ard Biesheuvel)   
- selftests/bpf: Fix broken riscv build (Björn Töpel)   
- spi: mxs: fix reference leak in mxs_spi_probe (Zhang Qilong)   
- usb/max3421: fix return error code in max3421_probe() (Yang Yingliang)   
- Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)   
- Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)   
- Input: ads7846 - fix race that causes missing releases (David Jander)   
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)   
- video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() (Yang Yingliang)   
- media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)   
- scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)   
- ASoC: meson: fix COMPILE_TEST error (Jerome Brunet)   
- media: v4l2-fwnode: Return -EINVAL for invalid bus-type (Lad Prabhakar)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (Yu Kuai)   
- media: tm6000: Fix sizeof() mismatches (Colin Ian King)   
- staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c (Jing Xiangfeng)   
- staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)   
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (Jack Xu)   
- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)   
- RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)   
- ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)   
- spi: sprd: fix reference leak in sprd_spi_remove (Zhang Qilong)   
- ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)   
- selftest/bpf: Add missed ip6ip6 test back (Hangbin Liu)   
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)   
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (Qinglang Miao)   
- spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)   
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)   
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)   
- spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (Qinglang Miao)   
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)   
- Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)   
- Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)   
- arm64: dts: exynos: Correct psci compatible used on Exynos7 (Paweł Chmiel)   
- arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 (Paweł Chmiel)   
- brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} (Seung-Woo Kim)   
- spi: stm32: fix reference leak in stm32_spi_resume (Zhang Qilong)   
- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)   
- ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)   
- spi: spi-mem: fix reference leak in spi_mem_access_start (Zhang Qilong)   
- drm/msm/dsi_pll_10nm: restore VCO rate during restore_state (Dmitry Baryshkov)   
- f2fs: call f2fs_get_meta_page_retry for nat page (Jaegeuk Kim)   
- spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)   
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (Jordan Niethe)   
- drm/amdgpu: fix build_coefficients() argument (Arnd Bergmann)   
- ARM: dts: aspeed: tiogapass: Remove vuart (Vijay Khemka)   
- ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (Clément Péron)   
- crypto: inside-secure - Fix sizeof() mismatch (Colin Ian King)   
- crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)   
- crypto: talitos - Endianess in current_desc_hdr() (Christophe Leroy)   
- drm/amdgpu: fix incorrect enum type (Arnd Bergmann)   
- sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)   
- sched/deadline: Fix sched_dl_global_validate() (Peng Liu)   
- x86/apic: Fix x2apic enablement without interrupt remapping (David Woodhouse)   
- ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)   
- x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)   
- RDMA/rxe: Compute PSN windows correctly (Bob Pearson)   
- ARM: dts: aspeed: s2600wf: Fix VGA memory region location (Joel Stanley)   
- selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)   
- rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (Dan Carpenter)   
- RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)   
- Revert "i2c: i2c-qcom-geni: Fix DMA transfer race" (Douglas Anderson)   
- soc: qcom: geni: More properly switch to DMA mode (Douglas Anderson)   
- soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)   
- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)   
- arm64: dts: renesas: cat875: Remove rxc-skew-ps from ethernet-phy node (Biju Das)   
- arm64: dts: renesas: hihope-rzg2-ex: Drop rxc-skew-ps from ethernet-phy node (Biju Das)   
- drm/tve200: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/mcde: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/aspeed: Fix Kconfig warning &amp; subsequent build errors (Randy Dunlap)   
- drm/gma500: fix double free of gma_connector (Tom Rix)   
- md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)   
- crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)   
- media: msi2500: assign SPI bus number dynamically (Antti Palosaari)   
- quota: Sanity-check quota file headers on load (Jan Kara)   
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)   
- serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)   
- HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)   
- scsi: megaraid_sas: Check user-provided offsets (Arnd Bergmann)   
- coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (Sai Prakash Ranjan)   
- coresight: tmc-etr: Fix barrier packet insertion for perf buffer (Suzuki K Poulose)   
- coresight: tmc-etr: Check if page is valid before dma_map_page() (Mao Jinlong)   
- coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (Sai Prakash Ranjan)   
- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)   
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)   
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)   
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)   
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)   
- USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)   
- USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)   
- usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (Dan Carpenter)   
- soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)   
- kbuild: avoid split lines in .mod files (Masahiro Yamada)   
- perf/x86/intel: Check PEBS status correctly (Stephane Eranian)   
- drm/amd/display: Init clock value by current vbios CLKs (Brandon Syu)   
- iwlwifi: pcie: add one missing entry for AX210 (Luca Coelho)   
- dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)   
- scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)   
- vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)   
- vxlan: Add needed_headroom for lower device (Sven Eckelmann)   
- arm64: syscall: exit userspace before unmasking exceptions (Mark Rutland)   
- habanalabs: put devices before driver removal (Ofir Bitton)   
- drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)   
- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)   
- drm/tegra: replace idr_init() by idr_init_base() (Deepak R Varma)   
- net: mvpp2: add mvpp2_phylink_to_port() helper (Russell King)   
- selftests: fix poll error in udpgro.sh (Paolo Abeni)   
- ixgbe: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: optimise prefetch page refcount (Li RongQing)   
- i40e: Refactor rx_bi accesses (Björn Töpel)   
- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)   
- selftests/bpf/test_offload.py: Reset ethtool features after failed setting (Toke Høiland-Jørgensen)   
- netfilter: nft_ct: Remove confirmation check for NFT_CT_ID (Brett Mastbergen)   
- gpio: eic-sprd: break loop when getting NULL device resource (Chunyan Zhang)   
- Revert "gpio: eic-sprd: Use devm_platform_ioremap_resource()" (Baolin Wang)   
- afs: Fix memory leak when mounting with multiple source parameters (David Howells)   
- netfilter: nft_dynset: fix timeouts later than 23 days (Pablo Neira Ayuso)   
- netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal)   
- netfilter: x_tables: Switch synchronization to RCU (Subash Abhinov Kasiviswanathan)   
- pinctrl: aspeed: Fix GPIO requests on pass-through banks (Andrew Jeffery)   
- blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Douglas Anderson)   
- block: factor out requeue handling from dispatch code (Johannes Thumshirn)   
- block: Simplify REQ_OP_ZONE_RESET_ALL handling (Damien Le Moal)   
- clk: renesas: r9a06g032: Drop __packed for portability (Geert Uytterhoeven)   
- can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)   
- xsk: Replace datagram_poll by sock_poll_wait (Xuan Zhuo)   
- xsk: Fix xsk_poll()'s return type (Luc Van Oostenryck)   
- scsi: bnx2i: Requires MMU (Randy Dunlap)   
- gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)   
- gpio: zynq: fix reference leak in zynq_gpio functions (Qinglang Miao)   
- PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong)   
- ARM: dts: imx6qdl-kontron-samx6i: fix I2C_PM scl pin (Bernd Bauer)   
- ARM: dts: imx6qdl-wandboard-revd1: Remove PAD_GPIO_6 from enetgrp (Fabio Estevam)   
- ARM: dts: sun7i: pcduino3-nano: enable RGMII RX/TX delay on PHY (Adam Sampson)   
- ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)   
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)   
- pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)   
- ARM: dts: sun8i: v40: bananapi-m2-berry: Fix ethernet node (Pablo Greco)   
- ARM: dts: sun8i: r40: bananapi-m2-berry: Fix dcdc1 regulator (Pablo Greco)   
- RAS/CEC: Correct ce_add_elem()'s returned values (William Roche)  [Orabug: 32774757]  
- bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk)  [Orabug: 32759959]  {CVE-2021-29154} 
- KVM: SVM: avoid infinite loop on NPF from bad address (John Donnelly)  [Orabug: 32759746]  {CVE-2020-36310} 
- uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 32795492]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.1.el8uek]" date="1620043200">- LTS tag: v5.4.90 (Jack Vogel)   
- regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() (Dan Carpenter)   
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)   
- block: fix use-after-free in disk_part_iter_next (Ming Lei)   
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier)   
- net: mvpp2: disable force link UP during port init procedure (Stefan Chulski)   
- regulator: qcom-rpmh-regulator: correct hfsmps515 definition (Dmitry Baryshkov)   
- wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)   
- regmap: debugfs: Fix a memory leak when calling regmap_attach_dev (Xiaolei Wang)   
- net/mlx5e: Fix two double free cases (Dinghao Liu)   
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)   
- iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)   
- lightnvm: select CONFIG_CRC32 (Arnd Bergmann)   
- block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)   
- wil6210: select CONFIG_CRC32 (Arnd Bergmann)   
- qed: select CONFIG_CRC32 (Arnd Bergmann)   
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)   
- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() (Shravya Kumbham)   
- dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)   
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function (Christophe JAILLET)   
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated (Hans de Goede)   
- spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)   
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)   
- can: kvaser_pciefd: select CONFIG_CRC32 (Arnd Bergmann)   
- can: m_can: m_can_class_unregister(): remove erroneous m_can_clk_stop() (Marc Kleine-Budde)   
- can: tcan4x5x: fix bittiming const, use common bittiming from m_can driver (Marc Kleine-Budde)   
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() (Dan Carpenter)   
- i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)   
- ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)   
- HID: wacom: Fix memory leakage caused by kfifo_alloc (Ping Cheng)   
- iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)   
- vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)   
- exfat: Month timestamp metadata accidentally incremented (Valdis Kletnieks)   
- x86/resctrl: Don't move a task to the same resource group (Fenghua Yu)   
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)   
- chtls: Fix chtls resources release sequence (Ayush Sawal)   
- chtls: Added a check to avoid NULL pointer dereference (Ayush Sawal)   
- chtls: Replace skb_dequeue with skb_peek (Ayush Sawal)   
- chtls: Fix panic when route to peer not configured (Ayush Sawal)   
- chtls: Remove invalid set_tcb call (Ayush Sawal)   
- chtls: Fix hardware tid leak (Ayush Sawal)   
- net/mlx5e: ethtool, Fix restriction of autoneg with 56G (Aya Levin)   
- net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address (Mark Zhang)   
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (Aleksander Jan Bajkowski)   
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (Julian Wiedmann)   
- nexthop: Unlink nexthop group entry in error path (Ido Schimmel)   
- nexthop: Fix off-by-one error in error path (Ido Schimmel)   
- octeontx2-af: fix memory leak of lmac and lmac-&gt;name (Colin Ian King)   
- net: ip: always refragment ip defragmented packets (Florian Westphal)   
- net: fix pmtu check in nopmtudisc mode (Florian Westphal)   
- tools: selftests: add test for changing routes with PTMU exceptions (Sean Tranchetti)   
- net: ipv6: fib: flush exceptions when purging route (Sean Tranchetti)   
- net/sonic: Fix some resource leaks in error handling paths (Christophe JAILLET)   
- net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)   
- net: stmmac: dwmac-sun8i: Balance internal PHY power (Samuel Holland)   
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (Samuel Holland)   
- net: hns3: fix a phy loopback fail issue (Yonglong Liu)   
- net: hns3: fix the number of queues actually used by ARQ (Yufeng Mo)   
- net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppänen)   
- vfio iommu: Add dma available capability (Matthew Rosato)   
- x86/asm/32: Add ENDs to some functions and relabel with SYM_CODE_* (Jiri Slaby)   
- LTS tag: v5.4.89 (Jack Vogel)   
- scsi: target: Fix XCOPY NAA identifier lookup (David Disseldorp)   {CVE-2020-28374} 
- KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)   
- x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)   
- netfilter: nft_dynset: report EOPNOTSUPP on missing set feature (Pablo Neira Ayuso)   
- netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)   
- netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)   
- netfilter: x_tables: Update remaining dereference to RCU (Subash Abhinov Kasiviswanathan)   
- drm/i915: clear the gpu reloc batch (Matthew Auld)   
- dmabuf: fix use-after-free of dmabuf's file-&gt;f_inode (Charan Teja Reddy)   
- Revert "device property: Keep secondary firmware node secondary by type" (Bard Liao)   
- btrfs: send: fix wrong file path when there is an inode with a pending rmdir (Filipe Manana)   
- ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256. (PeiSen Hou)   
- ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (Kai-Heng Feng)   
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)   
- ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)   
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (Takashi Iwai)   
- kvm: check tlbs_dirty directly (Lai Jiangshan)   
- x86/mm: Fix leak of pmd ptlock (Dan Williams)   
- USB: serial: keyspan_pda: remove unused variable (Johan Hovold)   
- usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)   
- usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)   
- usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)   
- USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)   
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani)   
- usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)   
- usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)   
- usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)   
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)   
- USB: usblp: fix DMA to stack (Johan Hovold)   
- USB: yurex: fix control-URB timeout handling (Johan Hovold)   
- USB: serial: option: add Quectel EM160R-GL (Bjørn Mork)   
- USB: serial: option: add LongSung M5710 module support (Daniel Palmer)   
- USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)   
- usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)   
- usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)   
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)   
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)   
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)   
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa)   
- USB: cdc-acm: blacklist another IR Droid device (Sean Young)   
- usb: gadget: enable super speed plus (taehyun.cho)   
- staging: mt7621-dma: Fix a resource leak in an error handling path (Christophe JAILLET)   
- powerpc: Handle .text.{hot,unlikely}.* in linker script (Nathan Chancellor)   
- crypto: asym_tpm: correct zero out potential secrets (Greg Kroah-Hartman)   
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)   
- Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close (Hans de Goede)   
- kbuild: don't hardcode depmod path (Dominique Martinet)   
- net/sched: sch_taprio: ensure to reset/destroy all child qdiscs (Davide Caratti)   
- ionic: account for vlan tag len in rx buffer len (Shannon Nelson)   
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)   
- net: usb: qmi_wwan: add Quectel EM160R-GL (Bjørn Mork)   
- CDC-NCM: remove "connected" log message (Roland Dreier)   
- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (Martin Blumenstingl)   
- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (Martin Blumenstingl)   
- r8169: work around power-saving bug on some chip versions (Heiner Kallweit)   
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)   
- erspan: fix version 1 check in gre_parse_header() (Cong Wang)   
- net: hns: fix return value check in __lb_other_process() (Yunjian Wang)   
- net: sched: prevent invalid Scell_log shift count (Randy Dunlap)   
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)   
- net: mvpp2: fix pkt coalescing int-threshold configuration (Stefan Chulski)   
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang)   
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)   
- net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_rxqs (Antoine Tenart)   
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)   
- net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)   
- net/ncsi: Use real net-device for response handler (John Wang)   
- virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)   
- qede: fix offload for IPIP tunnel packets (Manish Chopra)   
- net: ethernet: mvneta: Fix error handling in mvneta_probe (Dinghao Liu)   
- ibmvnic: continue fatal error reset after passive init (Lijun Pan)   
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)   
- atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)   
- ethernet: ucc_geth: set dev-&gt;max_mtu to 1518 (Rasmus Villemoes)   
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)   
- net: systemport: set dev-&gt;max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)   
- net: mvpp2: prs: fix PPPoE with ipv6 packet parse (Stefan Chulski)   
- net: mvpp2: Add TCAM entry to drop flow control pause frames (Stefan Chulski)   
- iavf: fix double-release of rtnl_lock (Jakub Kicinski)   
- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (Sylwester Dziedziuch)   
- proc: fix lookup in /proc/net subdirectories after setns(2) (Alexey Dobriyan)   
- proc: change -&gt;nlink under proc_subdir_lock (Alexey Dobriyan)   
- depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)   
- lib/genalloc: fix the overflow when size is too big (Huang Shijie)   
- scsi: scsi_transport_spi: Set RQF_PM for domain validation commands (Bart Van Assche)   
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)   
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk -&gt;poweroff() (Adrian Hunter)   
- scsi: ufs: Fix wrong print message in dev_err() (Bean Huo)   
- workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)   
- LTS tag: v5.4.88 (Jack Vogel)   
- exec: Transform exec_update_mutex into a rw_semaphore (Eric W. Biederman)   
- rwsem: Implement down_read_interruptible (Eric W. Biederman)   
- rwsem: Implement down_read_killable_nested (Eric W. Biederman)   
- perf: Break deadlock involving exec_update_mutex (peterz@infradead.org)   
- iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)   
- kdev_t: always inline major/minor helper functions (Josh Poimboeuf)   
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc (Tudor Ambarus)   
- Revert "mtd: spinand: Fix OOB read" (Felix Fietkau)   
- Revert "drm/amd/display: Fix memory leaks in S3 resume" (Alex Deucher)   
- LTS tag: v5.4.87 (Jack Vogel)   
- dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)   
- ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)   
- tick/sched: Remove bogus boot "safety" check (Thomas Gleixner)   
- um: ubd: Submit all data segments atomically (Gabriel Krisman Bertazi)   
- fs/namespace.c: WARN if mnt_count has become negative (Eric Biggers)   
- module: delay kobject uevent until after module init call (Jessica Yu)   
- f2fs: avoid race condition for shrinker count (Jaegeuk Kim)   
- NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode (Trond Myklebust)   
- i3c master: fix missing destroy_workqueue() on error in i3c_master_register (Qinglang Miao)   
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)   
- rtc: pl031: fix resource leak in pl031_probe (Zheng Liang)   
- quota: Don't overflow quota file offsets (Jan Kara)   
- module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)   
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)   
- fcntl: Fix potential deadlock in send_sig{io, urg}() (Boqun Feng)   
- bfs: don't use WARNING: string when it's just info. (Randy Dunlap)   
- ALSA: rawmidi: Access runtime-&gt;avail always in spinlock (Takashi Iwai)   
- ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)   
- f2fs: fix shift-out-of-bounds in sanity_check_raw_super() (Chao Yu)   
- media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)   
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)   
- reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)   
- Bluetooth: hci_h5: close serdev device and free hu in h5_close (Anant Thazhemadam)   
- scsi: cxgb4i: Fix TLS dependency (Randy Dunlap)   
- cgroup: Fix memory leak when parsing multiple source parameters (Qinglang Miao)   
- of: fix linker-section match-table corruption (Johan Hovold)   
- null_blk: Fix zone size initialization (Damien Le Moal)   
- tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo)   
- uapi: move constants from &lt;linux/kernel.h&gt; to &lt;linux/const.h&gt; (Petr Vorel)   
- scsi: block: Fix a race in the runtime power management code (Bart Van Assche)   
- jffs2: Fix NULL pointer dereference in rp_size fs option parsing (Jamie Iles)   
- jffs2: Allow setting rp_size to zero during remounting (lizhe)   
- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)   
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Paolo Bonzini)   
- KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Paolo Bonzini)   
- ext4: don't remount read-only with errors=continue on reboot (Jan Kara)   
- btrfs: fix race when defragmenting leads to unnecessary IO (Filipe Manana)   
- vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)   
- fscrypt: remove kernel-internal constants from UAPI header (Eric Biggers)   
- fscrypt: add fscrypt_is_nokey_name() (Eric Biggers)   
- f2fs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ubifs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ext4: prevent creating duplicate encrypted filenames (Eric Biggers)   
- thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed (Zhuguangqing)   
- md/raid10: initialize r10_bio-&gt;read_slot before use. (Kevin Vigor)   
- net/sched: sch_taprio: reset child qdiscs before freeing them (Davide Caratti)   
- uek/ol/config-aarch64: Update uek6 kernel with RPI IOT configs (Vijay Kumar)  [Orabug: 32833361]  
- dts/bcm2711: set gpio6 to level=0 and pull=down (Vijay Kumar)  [Orabug: 32833361]  
- dts: bcm283x: Fix vc4's firmware bus DMA limitations (Nicolas Saenz Julienne)  [Orabug: 32833361]  
- uek6/config-aarch64-rpi: Enable CONFIG_RTC_DRV_ABEOZ9 (Vijay Kumar)  [Orabug: 32833361]  
- rtc/ab-eoz9: Add support for ABEOA9 SPI chip (Vijay Kumar)  [Orabug: 32833361]  
- rtc: abracon: add abeoa9 device id (Tom Saeger)  [Orabug: 32833361]  
- arm64/dts/bcm2711: Set SPI_CE0_N to output for GPIO8 (Vijay Kumar)  [Orabug: 32833361]  
- uek-rpm/ol8: Build rpi kernel (Tom Saeger)  [Orabug: 32833361]  
- uek-rpm: add rpi specific config (Tom Saeger)  [Orabug: 32833361]  
- firmware/raspberrypi: Notify firmware of a reboot (Phil Elwell)  [Orabug: 32833361]  
- firmware: raspberrypi: Report the fw variant during probe (Dave Stevenson)  [Orabug: 32833361]  
- raspberrypi-firmware: Export the general transaction function. (Eric Anholt)  [Orabug: 32833361]  
- firmware: bcm2835: Support ARCH_BCM270x (Noralf Trønnes)  [Orabug: 32833361]  
- Add NO_WAIT_RESP flag (Phil Elwell)  [Orabug: 32833361]  
- bcm2835-dma: Add proper 40-bit DMA support (Phil Elwell)  [Orabug: 32833361]  
- dmaengine: Add support for BCM2708 (Florian Meier)  [Orabug: 32833361]  
- dmaengine: bcm2835: Load driver early and support legacy API (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: char: broadcom: Add vcio module (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: Add /dev/gpiomem device for rootless user GPIO access (Luke Wren)  [Orabug: 32833361]  
- RPi: vcsm: VideoCore shared memory service for BCM2835 (Tim Gover)  [Orabug: 32833361]  
- RPi: vc_mem: Add vc_mem driver for querying firmware memory addresses (popcornmix)  [Orabug: 32833361]  
- RPi4/dts: set alias for i2c device (Vijay Kumar)  [Orabug: 32833361]  
- dts: Enable i2c4 for RPi4 (Vijay Kumar)  [Orabug: 32833361]  
- RPi:dts/bcm2711: Enable pwm for RPi4 board (Vijay Kumar)  [Orabug: 32833361]  
- RPi: transplant rpi_backlight to it's expected place (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 for BCM2711 (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 give expected gpio numbering (notro)  [Orabug: 32833361]  
- RPi: spidev: add rpi4 spidev0 (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: rpi4 add gpiomem (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: enable rpi4 touchscreen, i2c, and spi (Tom Saeger)  [Orabug: 32833361]  
- RPi: rpi_display: add backlight driver and overlay (P33M)  [Orabug: 32833361]  
- HID: quirks: Add quirk for Lenovo optical mouse (Saeed Mirzamohammadi)  [Orabug: 32820273]  
- x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817184]  
- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (Kan Liang)  [Orabug: 32806848]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.2.el8uek]" date="1620129600">- vfio/pci: restore remap elision logic in vfio_pci_mmap_fault() (Ankur Arora)  [Orabug: 32478548]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.3.el8uek]" date="1620475200">- LTS tag: v5.4.94 (Jack Vogel)   
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)   
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)   
- dm integrity: conditionally disable "recalculate" feature (Mikulas Patocka)   
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (Jean-Philippe Brucker)   
- SMB3.1.1: do not log warning message if server doesn't populate salt (Steve French)   
- arm64: mm: use single quantity to represent the PA to VA translation (Ard Biesheuvel)   
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)   
- io_uring: Fix current-&gt;fs handling in io_sq_wq_submit_work() (Nicolai Stange)   
- HID: wacom: Correct NULL dereference on AES pen proximity (Jason Gerecke)   
- Revert "mm/slub: fix a memory leak in sysfs_slab_add()" (Wang Hai)   
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)   
- LTS tag: v5.4.93 (Jack Vogel)   
- tcp: fix TCP_USER_TIMEOUT with zero window (Enke Chen)   
- net: dsa: b53: fix an off by one in checking "vlan-&gt;vid" (Dan Carpenter)   
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (Tariq Toukan)   
- net: mscc: ocelot: allow offloading of bridge on top of LAG (Vladimir Oltean)   
- ipv6: set multicast flag on the multicast route (Matteo Croce)   
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)   
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)   
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)   
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)   
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow (Lecopzer Chen)   
- kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (Lecopzer Chen)   
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)   
- lightnvm: fix memory leak when submit fails (Pan Bian)   
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)   
- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (Rasmus Villemoes)   
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)   
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)   
- x86/cpu/amd: Set __max_die_per_package on AMD (Yazen Ghannam)   
- pinctrl: ingenic: Fix JZ4760 support (Paul Cercueil)   
- driver core: Extend device_is_dependent() (Rafael J. Wysocki)   
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)   
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)   
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)   
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)   
- usb: gadget: aspeed: fix stop dma register setting. (Ryan Chen)   
- USB: ehci: fix an interrupt calltrace error (Longfang Liu)   
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)   
- serial: mvebu-uart: fix tx lost characters at power off (Pali Rohár)   
- stm class: Fix module init return on allocation failure (Wang Hui)   
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)   
- x86/mmx: Use KFPU_387 for MMX string operations (Andy Lutomirski)   
- x86/topology: Make __max_die_per_package available unconditionally (Borislav Petkov)   
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (Andy Lutomirski)   
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)   
- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (Ronnie Sahlberg)   
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)   
- can: peak_usb: fix use after free bugs (Vincent Mailhol)   
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)   
- can: dev: can_restart: fix use after free bug (Vincent Mailhol)   
- selftests: net: fib_tests: remove duplicate log test (Hangbin Liu)   
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (Hans de Goede)   
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)   
- powerpc: Fix alignment bug within the init sections (Ariel Marcovitch)   
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann)   
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (Billy Tsai)   
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (Youling Tang)   
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (Ben Skeggs)   
- drm/nouveau/mmu: fix vram heap sizing (Ben Skeggs)   
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)   
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)   
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)   
- drm/amd/display: Fix to be able to stop crc calculation (Wayne Lin)   
- drm/amdgpu/psp: fix psp gfx ctrl cmds (Victor Zhao)   
- riscv: defconfig: enable gpio support for HiFive Unleashed (Sagar Shrikant Kadam)   
- dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (Sagar Shrikant Kadam)   
- x86/xen: Add xen_no_vector_callback option to test PCI INTX delivery (David Woodhouse)   
- xen: Fix event channel callback via INTX/GSI (David Woodhouse)   
- arm64: make atomic helpers __always_inline (Arnd Bergmann)   
- clk: tegra30: Add hda clock default rates to clock driver (Peter Geis)   
- HID: Ignore battery for Elan touchscreen on ASUS UX550 (Seth Miller)   
- HID: logitech-dj: add the G602 receiver (Filipe Laíns)   
- riscv: Fix sifive serial driver (Damien Le Moal)   
- riscv: Fix kernel time_init() (Damien Le Moal)   
- scsi: sd: Suppress spurious errors when WRITE SAME is being disabled (Ewan D. Milne)   
- scsi: qedi: Correct max length of CHAP secret (Nilesh Javali)   
- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)   
- dm integrity: select CRYPTO_SKCIPHER (Anthony Iliopoulos)   
- HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device (Kai-Heng Feng)   
- ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)   
- drm/i915/gt: Prevent use of engine-&gt;wa_ctx after error (Chris Wilson)   
- drm/syncobj: Fix use-after-free (Daniel Vetter)   
- drm/atomic: put state on error path (Pan Bian)   
- dm integrity: fix a crash if "recalculate" used without "internal_hash" (Mikulas Patocka)   
- dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)   
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)   
- mmc: core: don't initialize block size from ext_csd if not present (Peter Collingbourne)   
- btrfs: send: fix invalid clone operations when cloning from the same file and root (Filipe Manana)   
- btrfs: don't clear ret in btrfs_start_dirty_block_groups (Josef Bacik)   
- btrfs: fix lockdep splat in btrfs_recover_relocation (Josef Bacik)   
- btrfs: don't get an EINTR during drop_snapshot for reloc (Josef Bacik)   
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)   
- ALSA: hda/via: Add minimum mute flag (Takashi Iwai)   
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)   
- platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 (Jiaxun Yang)   
- platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes (Heikki Krogerus)   
- i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)   
- LTS tag: v5.4.92 (Jack Vogel)   
- spi: cadence: cache reference clock rate during probe (Michael Hennerich)   
- mac80211: check if atf has been disabled in __ieee80211_schedule_txq (Lorenzo Bianconi)   
- mac80211: do not drop tx nulldata packets on encrypted links (Felix Fietkau)   
- tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)   
- net, sctp, filter: remap copy_from_user failure error (Daniel Borkmann)   
- rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)   
- net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)   
- net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski)   
- net: stmmac: Fixed mtu channged by cache aligned (David Wu)   
- rxrpc: Call state should be read with READ_ONCE() under some circumstances (Baptiste Lepers)   
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)   
- net: dcb: Validate netlink message in DCB handler (Petr Machata)   
- esp: avoid unneeded kmap_atomic call (Willem de Bruijn)   
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)   
- net: mvpp2: Remove Pause and Asym_Pause support (Stefan Chulski)   
- mlxsw: core: Increase critical threshold for ASIC thermal zone (Vadim Pasternak)   
- mlxsw: core: Add validation of transceiver temperature thresholds (Vadim Pasternak)   
- net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)   
- netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)   
- udp: Prevent reuseport_select_sock from reading uninitialized socks (Baptiste Lepers)   
- bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback (Mircea Cirjaliu)   
- bpf: Don't leak memory in bpf getsockopt when optlen == 0 (Stanislav Fomichev)   
- nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields)   
- spi: npcm-fiu: Disable clock in probe error path (Lukas Wunner)   
- spi: npcm-fiu: simplify the return expression of npcm_fiu_probe() (Qinglang Miao)   
- elfcore: fix building with clang (Arnd Bergmann)   
- xen/privcmd: allow fetching resource sizes (Roger Pau Monne)   
- compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)   
- usb: ohci: Make distrust_firmware param default to false (Hamish Martin)   
- LTS tag: v5.4.91 (Jack Vogel)   
- netfilter: nft_compat: remove flush counter optimization (Florian Westphal)   
- netfilter: nf_nat: Fix memleak in nf_nat_init (Dinghao Liu)   
- netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)   
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)   
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)   
- dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)   
- net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de)   
- iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() (Lu Baolu)   
- mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)   
- drm/i915/dsi: Use unconditional msleep for the panel_on_delay when there is no reset-deassert MIPI-sequence (Hans de Goede)   
- IB/mlx5: Fix error unwinding when set_has_smi_cap fails (Parav Pandit)   
- RDMA/mlx5: Fix wrong free of blue flame register on error (Mark Bloch)   
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded. (Michael Chan)   
- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)   
- RDMA/restrack: Don't treat as an error allocation ID wrapping (Leon Romanovsky)   
- ext4: fix superblock checksum failure when setting password salt (Jan Kara)   
- NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)   
- NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter (Trond Myklebust)   
- pNFS: Stricter ordering of layoutget and layoutreturn (Trond Myklebust)   
- pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)   
- pNFS: We want return-on-close to complete when evicting the inode (Trond Myklebust)   
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)   
- nvme-tcp: fix possible data corruption with bio merges (Sagi Grimberg)   
- ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)   
- ASoC: meson: axg-tdmin: fix axg skew offset (Jerome Brunet)   
- ASoC: meson: axg-tdm-interface: fix loopback (Jerome Brunet)   
- dump_common_audit_data(): fix racy accesses to -&gt;d_name (Al Viro)   
- perf intel-pt: Fix 'CPU too large' error (Adrian Hunter)   
- ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)   
- drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor)   
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)   
- usb: typec: Fix copy paste error for NVIDIA alt-mode description (Peter Robinson)   
- drm/amdgpu: fix a GPU hang issue when remove device (Dennis Li)   
- nvmet-rdma: Fix list_del corruption on queue establishment failure (Israel Rukshin)   
- nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN (Gopal Tiwari)   
- selftests: fix the return value for UDP GRO test (Po-Hsu Lin)   
- net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)   
- misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)   
- arch/arc: add copy_user_page() to &lt;asm/page.h&gt; to fix build error on ARC (Randy Dunlap)   
- bfq: Fix computation of shallow depth (Jan Kara)   
- lib/raid6: Let $(UNROLL) rules work with macOS userland (John Millikin)   
- hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values (Uwe Kleine-König)   
- habanalabs: Fix memleak in hl_device_reset (Dinghao Liu)   
- habanalabs: register to pci shutdown callback (Oded Gabbay)   
- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)   
- regulator: bd718x7: Add enable times (Guido Günther)   
- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)   
- netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin)   
- ARC: build: move symlink creation to arch/arc/Makefile to avoid race (Masahiro Yamada)   
- ARC: build: add boot_targets to PHONY (Masahiro Yamada)   
- ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)   
- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)   
- dm integrity: fix flush with external metadata device (Mikulas Patocka)   
- cifs: fix interrupted close commands (Paulo Alcantara)   
- smb3: remove unused flag passed into close functions (Steve French)   
- ext4: don't leak old mountpoint samples (Theodore Ts'o)   
- ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)   
- drm/i915/backlight: fix CPU mode backlight takeover on LPT (Jani Nikula)   
- btrfs: tree-checker: check if chunk item end overflows (Su Yue)   
- r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)   
- dm integrity: fix the maximum number of arguments (Mikulas Patocka)   
- dm snapshot: flush merged data before committing metadata (Akilesh Kailash)   
- dm raid: fix discard limits for raid1 (Mike Snitzer)   
- mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)   
- ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)   
- RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (Tom Rix)   
- MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)   
- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)   
- mips: lib: uncached: fix non-standard usage of variable 'sp' (Anders Roxell)   
- mips: fix Section mismatch in reference (Anders Roxell)   
- tracing/kprobes: Do the notrace functions check without kprobes on ftrace (Masami Hiramatsu)   
- x86/hyperv: check cpu mask after interrupt has been disabled (Wei Liu)   
- ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)   
- btrfs: prevent NULL pointer dereference in extent_io_tree_panic (Su Yue)   
- kbuild: enforce -Werror=return-type (Olaf Hering)   
- IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32852998]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.4.el8uek]" date="1621080000">- uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi)  [Orabug: 32837542]  
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley)  [Orabug: 32867569]  
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft))  [Orabug: 32867569]  
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley)  [Orabug: 32867569]  
- uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour)  [Orabug: 32816428]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.5.el8uek]" date="1621684800">- sctp: delay auto_asconf init until binding the first addr (Xin Long)  [Orabug: 32907967]  {CVE-2021-23133} {CVE-2021-23133} 
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860491]  {CVE-2021-31916} 
- uek-rpm: update kABI lists for the new symbols (Saeed Mirzamohammadi)  [Orabug: 32883836]  
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements)  [Orabug: 32888143]  
- scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (James Smart)  [Orabug: 32827840]</changelog>
</package>
<package pkgid="d10d422ac558ba38d32fbf7548d2f3ec7c5fd8abdcceb584ac4c140fb777fa47" name="kernel-uek-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.4.17" rel="2102.202.5.el8uek"/>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.0.el8uek]" date="1617451200">- uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel)  [Orabug: 32532663]  
- RDMA/rxe:  ipc_bench fails on SoftRoCE with shpd (Rao Shoaib)  [Orabug: 32716155]  
- vhost-vdpa: set v-&gt;config_ctx to NULL if eventfd_ctx_fdget() fails (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- vhost-vdpa: fix use-after-free of v-&gt;config_ctx (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 32669269]  {CVE-2021-28950} 
- fuse: fix bad inode (Miklos Szeredi)  [Orabug: 32669269]  {CVE-2021-28950} 
- RDMA/core: Fix corrupted SL on passive side (Håkon Bugge)  [Orabug: 32662965]  
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651473]  {CVE-2021-28038} 
- RDMA/rxe: Compute the maximum sges and inline size based on the WQE size (Rao Shoaib)  [Orabug: 32648060]  
- KVM: kvmclock: Fix vCPUs &gt; 64 can't be online/hotpluged (Wanpeng Li)  [Orabug: 32641672]  
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32640116]  
- uek-rpm: ol7: aarch64: add CONFIG_ACPI_HOTPLUG_MEMORY (Mihai Carabas)  [Orabug: 32638660]  
- KVM: SVM: Disable AVIC before setting V_IRQ (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: Introduce kvm_make_all_cpus_request_except() (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: X86: correct meaningless kvm_apicv_activated() check (Paolo Bonzini)  [Orabug: 32603569]  
- KVM: Disable preemption in kvm_get_running_vcpu() (Marc Zyngier)  [Orabug: 32603569]  
- KVM: Move running VCPU from ARM to common code (Paolo Bonzini)  [Orabug: 32603569]  
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697850]  {CVE-2021-28688} 
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui)  [Orabug: 32651461]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.1.el8uek]" date="1618056000">- IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751624]  
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709120]  {CVE-2021-29650} 
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang)  [Orabug: 32669468]  {CVE-2021-28971} 
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669450]  {CVE-2021-28964}</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.2.el8uek]" date="1618747200">- md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam)  [Orabug: 32764237]  
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang)  [Orabug: 32763849]  
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet)  [Orabug: 32760314]  
- Revert "x86/vmlinux: Use INT3 instead of NOP for linker fill bytes" (John Donnelly)  [Orabug: 32576398]  {CVE-2021-3411} 
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi)  [Orabug: 32734148]  
- LTS tag: v5.4.85 (Jack Vogel)   
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (Xiaochen Shen)   
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (James Morse)   
- membarrier: Explicitly sync remote cores when SYNC_CORE is requested (Andy Lutomirski)   
- Revert "selftests/ftrace: check for do_sys_openat2 in user-memory test" (Kamal Mostafa)   
- KVM: mmu: Fix SPTE encoding of MMIO generation upper half (Maciej S. Szmigiero)   
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)   
- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)   
- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)   
- xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (Hans de Goede)   
- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)   
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)   
- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)   
- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)   
- ktest.pl: If size of log is too big to email, email error message (Steven Rostedt (VMware))   
- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)   
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)   
- net: ll_temac: Fix potential NULL dereference in temac_probe() (Zhang Changzhong)   
- lan743x: fix for potential NULL pointer dereference with bare card (Sergej Bauer)   
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)   
- tcp: select sane initial rcvq_space.space for big MSS (Eric Dumazet)   
- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)   
- bridge: Fix a deadlock when enabling multicast snooping (Joseph Huang)   
- enetc: Fix reporting of h/w packet counters (Claudiu Manoil)   
- udp: fix the proto value passed to ip_protocol_deliver_rcu for the segments (Xin Long)   
- net: hns3: remove a misused pragma packed (Huazhong Tan)   
- vrf: packets with lladdr src needs dst at input with orig_iif when needs strict (Stephen Suryaputra)   
- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)   
- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)   
- ipv4: fix error return code in rtm_to_fib_config() (Zhang Changzhong)   
- ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (Peilin Ye)   
- LTS tag: v5.4.84 (Jack Vogel)   
- compiler.h: fix barrier_data() on clang (Arvind Sankar)   
- mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING (Minchan Kim)   
- x86/apic/vector: Fix ordering in vector assignment (Thomas Gleixner)   
- x86/membarrier: Get rid of a dubious optimization (Andy Lutomirski)   
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)   
- scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" (Dan Carpenter)   
- proc: use untagged_addr() for pagemap_read addresses (Miles Chen)   
- kbuild: avoid static_assert for genksyms (Arnd Bergmann)   
- drm/i915/display/dp: Compute the correct slice count for VDSC on DP (Manasi Navare)   
- mmc: block: Fixup condition for CMD13 polling for RPMB requests (Bean Huo)   
- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)   
- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)   
- Input: cm109 - do not stomp on control URB (Dmitry Torokhov)   
- ktest.pl: Fix incorrect reboot for grub2bls (Libo Chen)   
- can: m_can: m_can_dev_setup(): add support for bosch mcan version 3.3.0 (Pankaj Sharma)   
- platform/x86: touchscreen_dmi: Add info for the Irbis TW118 tablet (Hans de Goede)   
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC (Max Verevkin)   
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)   
- platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen (Hans de Goede)   
- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e (Hans de Goede)   
- arm64: tegra: Disable the ACONNECT for Jetson TX2 (Jon Hunter)   
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)   
- spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts (Ran Wang)   
- irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend (Xu Qiang)   
- ibmvnic: skip tx timeout reset while in resetting (Lijun Pan)   
- interconnect: qcom: qcs404: Remove GPU and display RPM IDs (Georgi Djakov)   
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)   
- ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)   
- arm64: dts: broadcom: clear the warnings caused by empty dma-ranges (Zhen Lei)   
- powerpc: Drop -me200 addition to build flags (Michael Ellerman)   
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)   
- iwlwifi: pcie: set LTR to avoid completion timeout (Johannes Berg)   
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)   
- iwlwifi: pcie: limit memory read spin time (Johannes Berg)   
- x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S (Fangrui Song)   
- Kbuild: do not emit debug info for assembly with LLVM_IAS=1 (Nick Desaulniers)</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.3.el8uek]" date="1619179200">- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)  [Orabug: 32805544]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.0.el8uek]" date="1619265600">- LTS tag: v5.4.86 (Jack Vogel)   
- x86/CPU/AMD: Save AMD NodeId as cpu_die_id (Yazen Ghannam)   
- Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS" (Steven Rostedt (VMware))   
- rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (Nikita Shubin)   
- regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (DingHua Ma)   
- PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)   
- platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (Carlos Garnacho)   
- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)   
- xen/xenbus: Count pending messages for each watch (SeongJae Park)   
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)   
- dma-buf/dma-resv: Respect num_fences when initializing the shared fence list. (Maarten Lankhorst)   
- device-dax/core: Fix memory leak when rmmod dax.ko (Wang Hai)   
- clk: tegra: Do not return 0 on failure (Nicolin Chen)   
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)   
- clk: ingenic: Fix divider calculation with div tables (Paul Cercueil)   
- pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler (Yangtao Li)   
- md/cluster: fix deadlock when node is doing resync job (Zhao Heming)   
- md/cluster: block reshape with remote resync job (Zhao Heming)   
- iio:adc:ti-ads124s08: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:adc:ti-ads124s08: Fix buffer being too long. (Jonathan Cameron)   
- iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)   
- iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)   
- iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:light:st_uvis25: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)   
- iio: buffer: Fix demux update (Nuno Sá)   
- scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi)   
- mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (Sergei Antonov)   
- mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (Praveenkumar I)   
- mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)   
- mtd: spinand: Fix OOB read (Miquel Raynal)   
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)   
- spi: atmel-quadspi: Fix AHB memory accesses (Tudor Ambarus)   
- spi: atmel-quadspi: Disable clock in probe error path (Lukas Wunner)   
- spi: mt7621: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: mt7621: Disable clock in probe error path (Lukas Wunner)   
- spi: synquacer: Disable clock in probe error path (Lukas Wunner)   
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)   
- spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner)   
- spi: mxic: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: gpio: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: fsl: fix use of spisel_boot signal on MPC8309 (Rasmus Villemoes)   
- spi: davinci: Fix use-after-free on unbind (Lukas Wunner)   
- spi: atmel-quadspi: Fix use-after-free on unbind (Lukas Wunner)   
- spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)   
- spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)   
- drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)   
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)   
- drm/amd/display: Fix memory leaks in S3 resume (Stylon Wang)   
- platform/x86: mlx-platform: remove an unused variable (Arnd Bergmann)   
- jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)   
- jffs2: Fix ignoring mounting options problem during remounting (lizhe)   
- jffs2: Fix GC exit abnormally (Zhe Li)   
- ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger)   
- SMB3: avoid confusing warning message on mount to Azure (Steve French)   
- ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)   
- um: Remove use of asprinf in umid.c (Anton Ivanov)   
- ima: Don't modify file descriptor mode on the fly (Roberto Sassu)   
- powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (David Hildenbrand)   
- powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand)   
- powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- powerpc/mm: Fix verification of MMU_FTR_TYPE_44x (Christophe Leroy)   
- powerpc/8xx: Fix early debug when SMC1 is relocated (Christophe Leroy)   
- powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)   
- powerpc/feature: Add CPU_FTR_NOEXECUTE to G2_LE (Christophe Leroy)   
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)   
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)   
- xprtrdma: Fix XDRBUF_SPARSE_PAGES support (Chuck Lever)   
- ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)   
- ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES (H. Nikolaus Schaller)   
- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)   
- ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)   
- ext4: fix a memory leak of ext4_free_data (Chunguang Xu)   
- btrfs: trim: fix underflow in trim length to prevent access beyond device boundary (Qu Wenruo)   
- btrfs: do not shorten unpin len for caching block groups (Josef Bacik)   
- USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)   
- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)   
- USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)   
- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)   
- USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)   
- USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)   
- EDAC/amd64: Fix PCI component registration (Borislav Petkov)   
- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)   
- crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata (Ard Biesheuvel)   
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)   
- powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)   
- perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake (Kan Liang)   
- perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY (Kan Liang)   
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)   
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (Takashi Iwai)   
- binder: add flag to clear buffer on txn complete (Todd Kjos)   
- s390/dasd: fix list corruption of lcu list (Stefan Haberland)   
- s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)   
- s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)   
- s390/dasd: fix hanging device offline processing (Stefan Haberland)   
- s390/kexec_file: fix diag308 subcode when loading crash kernel (Philipp Rudo)   
- s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)   
- ALSA: core: memalloc: add page alignment for iram (Robin Gong)   
- ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai)   
- ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (Amadej Kastelic)   
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (Chris Chiu)   
- ALSA: hda/realtek: Add quirk for MSI-GP73 (Takashi Iwai)   
- ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (Chris Chiu)   
- ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)   
- ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (Kailang Yang)   
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)   
- ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (Chris Chiu)   
- ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (Hui Wang)   
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg. (Connor McAdams)   
- ALSA: hda: Fix regressions on clear and reconfig sysfs (Takashi Iwai)   
- ACPI: PNP: compare the string length in the matching_id() (Hui Wang)   
- Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (Daniel Scally)   
- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)   
- ALSA: hda/ca0132 - Change Input Source enum strings. (Connor McAdams)   
- Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)   
- media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (Sakari Ailus)   
- media: ipu3-cio2: Validate mbus format in setting subdev format (Sakari Ailus)   
- media: ipu3-cio2: Serialise access to pad format (Sakari Ailus)   
- media: ipu3-cio2: Return actual subdev format (Sakari Ailus)   
- media: ipu3-cio2: Remove traces of returned buffers (Sakari Ailus)   
- media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner)   
- media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)   
- media: gspca: Fix memory leak in probe (Alan Stern)   
- vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)   
- initramfs: fix clang build failure (Arnd Bergmann)   
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)   
- drm/amdkfd: Fix leak in dmabuf import (Felix Kuehling)   
- drm/amd/display: Prevent bandwidth overflow (Chris Park)   
- lwt: Disable BH too in run_lwt_bpf() (Dongdong Wang)   
- fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)   
- cfg80211: initialize rekey_data (Sara Sharon)   
- ARM: sunxi: Add machine match for the Allwinner V3 SoC (Paul Kocialkowski)   
- perf probe: Fix memory leak when synthesizing SDT probes (Arnaldo Carvalho de Melo)   
- kconfig: fix return value of do_error_if() (Masahiro Yamada)   
- clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)   
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)   
- clk: at91: sam9x60: remove atmel,osc-bypass support (Alexandre Belloni)   
- virtio_ring: Fix two use after free bugs (Dan Carpenter)   
- virtio_net: Fix error code in probe() (Dan Carpenter)   
- virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (Dan Carpenter)   
- qlcnic: Fix error code in probe (Dan Carpenter)   
- perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)   
- pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)   
- pwm: zx: Add missing cleanup in error path (Uwe Kleine-König)   
- clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)   
- watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)   
- watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)   
- libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (Zhang Qilong)   
- net: korina: fix return value (Vincent Stehlé)   
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)   
- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)   
- lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck)   
- checkpatch: fix unescaped left brace (Dwaipayan Ray)   
- mm: don't wake kswapd prematurely when watermark boosting is disabled (Johannes Weiner)   
- sparc: fix handling of page table constructor failure (Matthew Wilcox (Oracle))   
- powerpc/ps3: use dma_mapping_error() (Vincent Stehlé)   
- nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)   
- RDMA/cma: Don't overwrite sgid_attr after device is released (Leon Romanovsky)   
- sunrpc: fix xs_read_xdr_buf for partial pages receive (Dan Aloni)   
- um: chan_xterm: Fix fd leak (Anton Ivanov)   
- um: tty: Fix handling of close in tty lines (Anton Ivanov)   
- um: Monitor error events in IRQ controller (Anton Ivanov)   
- ubifs: Fix error return code in ubifs_init_authentication() (Wang ShaoBo)   
- watchdog: Fix potential dereferencing of null pointer (Wang Wensheng)   
- watchdog: sprd: check busy bit before new loading rather than after that (Lingling Xu)   
- watchdog: sprd: remove watchdog disable from resume fail path (Lingling Xu)   
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)   
- ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (Dan Carpenter)   
- mac80211: don't set set TDLS STA bandwidth wider than possible (Johannes Berg)   
- crypto: atmel-i2c - select CONFIG_BITREVERSE (Arnd Bergmann)   
- extcon: max77693: Fix modalias string (Marek Szyprowski)   
- mtd: rawnand: gpmi: Fix the random DMA timeout issue (Han Xu)   
- mtd: rawnand: meson: Fix a resource leak in init (Dan Carpenter)   
- mtd: rawnand: gpmi: fix reference count leak in gpmi ops (Zhang Qilong)   
- clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)   
- remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (Zhang Changzhong)   
- remoteproc: qcom: fix reference leak in adsp_start (Zhang Qilong)   
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (Zhang Qilong)   
- RDMA/core: Do not indicate device ready when device enablement fails (Jack Morgenstein)   
- can: m_can: m_can_config_endisable(): remove double clearing of clock stop request bit (Sean Nyekjaer)   
- erofs: avoid using generic_block_bmap (Huang Jianan)   
- iwlwifi: mvm: hook up missing RX handlers (Johannes Berg)   
- s390/cio: fix use-after-free in ccw_device_destroy_console (Qinglang Miao)   
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (Zhang Changzhong)   
- platform/chrome: cros_ec_spi: Don't overwrite spi::mode (Stephen Boyd)   
- x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)   
- nfs_common: need lock during iterate through the list (Cheng Lin)   
- nfsd: Fix message level for normal termination (kazuo ito)   
- speakup: fix uninitialized flush_lock (Yang Yingliang)   
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)   
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)   
- powerpc/mm: sanity_check_fault() should work for all, not only BOOK3S (Christophe Leroy)   
- ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (Chuhong Yuan)   
- drm/mediatek: avoid dereferencing a null hdmi_phy on an error message (Colin Ian King)   
- powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)   
- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)   
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (Vadim Pasternak)   
- scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)   
- seq_buf: Avoid type mismatch for seq_buf_init (Arnd Bergmann)   
- scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)   
- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)   
- arm64: dts: meson: g12a: x96-max: fix PHY deassert timing requirements (Stefan Agner)   
- ARM: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- arm64: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (Jing Xiangfeng)   
- Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (Jing Xiangfeng)   
- cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: sun50i: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: qcom: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)   
- clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu)   
- phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure (Wang Li)   
- dm ioctl: fix error return code in target_message (Qinglang Miao)   
- ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)   
- net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)   
- MIPS: Don't round up kernel sections size for memblock_add() (Alexander Sverdlin)   
- memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)   
- arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)   
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)   
- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() (Andrii Nakryiko)   
- ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)   
- iio: hrtimer-trigger: Mark hrtimer to expire in hard interrupt context (Lars-Peter Clausen)   
- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)   
- clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (Yang Yingliang)   
- powerpc/64: Fix an EMIT_BUG_ENTRY in head_64.S (Jordan Niethe)   
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (Athira Rajeev)   
- media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)   
- hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable (Zhang Qilong)   
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)   
- selftests/seccomp: Update kernel config (Mickaël Salaün)   
- NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)   
- net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' (Fedor Tokarev)   
- NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Trond Myklebust)   
- SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (Trond Myklebust)   
- NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia)   
- SUNRPC: rpc_wake_up() should wake up tasks in the correct order (Trond Myklebust)   
- ath10k: Release some resources in an error handling path (Christophe JAILLET)   
- ath10k: Fix an error handling path (Christophe JAILLET)   
- ath10k: Fix the parsing error in service available event (Rakesh Pillai)   
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (Qinglang Miao)   
- ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)   
- soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (Yu Kuai)   
- arm64: dts: meson-sm1: fix typo in opp table (Dongjin Kim)   
- arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 (Artem Lapkin)   
- PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)   
- PCI: Fix overflow in command-line resource alignment requests (Colin Ian King)   
- PCI: Bounds-check command-line resource alignment requests (Bjorn Helgaas)   
- arm64: dts: qcom: c630: Polish i2c-hid devices (Bjorn Andersson)   
- arm64: dts: ls1028a: fix ENETC PTP clock input (Michael Walle)   
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier)   
- power: supply: bq24190_charger: fix reference leak (Zhang Qilong)   
- power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (Hans de Goede)   
- arm64: dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc (Chen-Yu Tsai)   
- arm64: dts: armada-3720-turris-mox: update ethernet-phy handle name (Marek Behún)   
- ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)   
- HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng)   
- slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (Bjorn Andersson)   
- media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)   
- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)   
- media: imx214: Fix stop streaming (Daniel Gomez)   
- samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)   
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (Vadim Pasternak)   
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (Vadim Pasternak)   
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)   
- arm64: tegra: Fix DT binding for IO High Voltage entry (Vidya Sagar)   
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (Zhihao Cheng)   
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)   
- rsi: fix error return code in rsi_reset_card() (Zhang Changzhong)   
- qtnfmac: fix error return code in qtnf_pcie_probe() (Wang Hai)   
- orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)   
- mmc: pxamci: Fix error return code in pxamci_probe (Zhihao Cheng)   
- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)   
- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)   
- memstick: fix a double-free bug in memstick_check (Qinglang Miao)   
- RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)   
- clk: meson: Kconfig: fix dependency for G12A (Kevin Hilman)   
- Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)   
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)   
- soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)   
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)   
- spi: fix resource leak for drivers without .remove callback (Uwe Kleine-König)   
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)   
- crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (Nathan Chancellor)   
- EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Yazen Ghannam)   
- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)   
- powerpc: Avoid broken GCC __attribute__((optimize)) (Ard Biesheuvel)   
- selftests/bpf: Fix broken riscv build (Björn Töpel)   
- spi: mxs: fix reference leak in mxs_spi_probe (Zhang Qilong)   
- usb/max3421: fix return error code in max3421_probe() (Yang Yingliang)   
- Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)   
- Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)   
- Input: ads7846 - fix race that causes missing releases (David Jander)   
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)   
- video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() (Yang Yingliang)   
- media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)   
- scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)   
- ASoC: meson: fix COMPILE_TEST error (Jerome Brunet)   
- media: v4l2-fwnode: Return -EINVAL for invalid bus-type (Lad Prabhakar)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (Yu Kuai)   
- media: tm6000: Fix sizeof() mismatches (Colin Ian King)   
- staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c (Jing Xiangfeng)   
- staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)   
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (Jack Xu)   
- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)   
- RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)   
- ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)   
- spi: sprd: fix reference leak in sprd_spi_remove (Zhang Qilong)   
- ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)   
- selftest/bpf: Add missed ip6ip6 test back (Hangbin Liu)   
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)   
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (Qinglang Miao)   
- spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)   
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)   
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)   
- spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (Qinglang Miao)   
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)   
- Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)   
- Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)   
- arm64: dts: exynos: Correct psci compatible used on Exynos7 (Paweł Chmiel)   
- arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 (Paweł Chmiel)   
- brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} (Seung-Woo Kim)   
- spi: stm32: fix reference leak in stm32_spi_resume (Zhang Qilong)   
- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)   
- ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)   
- spi: spi-mem: fix reference leak in spi_mem_access_start (Zhang Qilong)   
- drm/msm/dsi_pll_10nm: restore VCO rate during restore_state (Dmitry Baryshkov)   
- f2fs: call f2fs_get_meta_page_retry for nat page (Jaegeuk Kim)   
- spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)   
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (Jordan Niethe)   
- drm/amdgpu: fix build_coefficients() argument (Arnd Bergmann)   
- ARM: dts: aspeed: tiogapass: Remove vuart (Vijay Khemka)   
- ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (Clément Péron)   
- crypto: inside-secure - Fix sizeof() mismatch (Colin Ian King)   
- crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)   
- crypto: talitos - Endianess in current_desc_hdr() (Christophe Leroy)   
- drm/amdgpu: fix incorrect enum type (Arnd Bergmann)   
- sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)   
- sched/deadline: Fix sched_dl_global_validate() (Peng Liu)   
- x86/apic: Fix x2apic enablement without interrupt remapping (David Woodhouse)   
- ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)   
- x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)   
- RDMA/rxe: Compute PSN windows correctly (Bob Pearson)   
- ARM: dts: aspeed: s2600wf: Fix VGA memory region location (Joel Stanley)   
- selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)   
- rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (Dan Carpenter)   
- RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)   
- Revert "i2c: i2c-qcom-geni: Fix DMA transfer race" (Douglas Anderson)   
- soc: qcom: geni: More properly switch to DMA mode (Douglas Anderson)   
- soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)   
- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)   
- arm64: dts: renesas: cat875: Remove rxc-skew-ps from ethernet-phy node (Biju Das)   
- arm64: dts: renesas: hihope-rzg2-ex: Drop rxc-skew-ps from ethernet-phy node (Biju Das)   
- drm/tve200: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/mcde: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/aspeed: Fix Kconfig warning &amp; subsequent build errors (Randy Dunlap)   
- drm/gma500: fix double free of gma_connector (Tom Rix)   
- md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)   
- crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)   
- media: msi2500: assign SPI bus number dynamically (Antti Palosaari)   
- quota: Sanity-check quota file headers on load (Jan Kara)   
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)   
- serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)   
- HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)   
- scsi: megaraid_sas: Check user-provided offsets (Arnd Bergmann)   
- coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (Sai Prakash Ranjan)   
- coresight: tmc-etr: Fix barrier packet insertion for perf buffer (Suzuki K Poulose)   
- coresight: tmc-etr: Check if page is valid before dma_map_page() (Mao Jinlong)   
- coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (Sai Prakash Ranjan)   
- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)   
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)   
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)   
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)   
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)   
- USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)   
- USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)   
- usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (Dan Carpenter)   
- soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)   
- kbuild: avoid split lines in .mod files (Masahiro Yamada)   
- perf/x86/intel: Check PEBS status correctly (Stephane Eranian)   
- drm/amd/display: Init clock value by current vbios CLKs (Brandon Syu)   
- iwlwifi: pcie: add one missing entry for AX210 (Luca Coelho)   
- dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)   
- scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)   
- vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)   
- vxlan: Add needed_headroom for lower device (Sven Eckelmann)   
- arm64: syscall: exit userspace before unmasking exceptions (Mark Rutland)   
- habanalabs: put devices before driver removal (Ofir Bitton)   
- drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)   
- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)   
- drm/tegra: replace idr_init() by idr_init_base() (Deepak R Varma)   
- net: mvpp2: add mvpp2_phylink_to_port() helper (Russell King)   
- selftests: fix poll error in udpgro.sh (Paolo Abeni)   
- ixgbe: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: optimise prefetch page refcount (Li RongQing)   
- i40e: Refactor rx_bi accesses (Björn Töpel)   
- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)   
- selftests/bpf/test_offload.py: Reset ethtool features after failed setting (Toke Høiland-Jørgensen)   
- netfilter: nft_ct: Remove confirmation check for NFT_CT_ID (Brett Mastbergen)   
- gpio: eic-sprd: break loop when getting NULL device resource (Chunyan Zhang)   
- Revert "gpio: eic-sprd: Use devm_platform_ioremap_resource()" (Baolin Wang)   
- afs: Fix memory leak when mounting with multiple source parameters (David Howells)   
- netfilter: nft_dynset: fix timeouts later than 23 days (Pablo Neira Ayuso)   
- netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal)   
- netfilter: x_tables: Switch synchronization to RCU (Subash Abhinov Kasiviswanathan)   
- pinctrl: aspeed: Fix GPIO requests on pass-through banks (Andrew Jeffery)   
- blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Douglas Anderson)   
- block: factor out requeue handling from dispatch code (Johannes Thumshirn)   
- block: Simplify REQ_OP_ZONE_RESET_ALL handling (Damien Le Moal)   
- clk: renesas: r9a06g032: Drop __packed for portability (Geert Uytterhoeven)   
- can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)   
- xsk: Replace datagram_poll by sock_poll_wait (Xuan Zhuo)   
- xsk: Fix xsk_poll()'s return type (Luc Van Oostenryck)   
- scsi: bnx2i: Requires MMU (Randy Dunlap)   
- gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)   
- gpio: zynq: fix reference leak in zynq_gpio functions (Qinglang Miao)   
- PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong)   
- ARM: dts: imx6qdl-kontron-samx6i: fix I2C_PM scl pin (Bernd Bauer)   
- ARM: dts: imx6qdl-wandboard-revd1: Remove PAD_GPIO_6 from enetgrp (Fabio Estevam)   
- ARM: dts: sun7i: pcduino3-nano: enable RGMII RX/TX delay on PHY (Adam Sampson)   
- ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)   
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)   
- pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)   
- ARM: dts: sun8i: v40: bananapi-m2-berry: Fix ethernet node (Pablo Greco)   
- ARM: dts: sun8i: r40: bananapi-m2-berry: Fix dcdc1 regulator (Pablo Greco)   
- RAS/CEC: Correct ce_add_elem()'s returned values (William Roche)  [Orabug: 32774757]  
- bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk)  [Orabug: 32759959]  {CVE-2021-29154} 
- KVM: SVM: avoid infinite loop on NPF from bad address (John Donnelly)  [Orabug: 32759746]  {CVE-2020-36310} 
- uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 32795492]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.1.el8uek]" date="1620043200">- LTS tag: v5.4.90 (Jack Vogel)   
- regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() (Dan Carpenter)   
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)   
- block: fix use-after-free in disk_part_iter_next (Ming Lei)   
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier)   
- net: mvpp2: disable force link UP during port init procedure (Stefan Chulski)   
- regulator: qcom-rpmh-regulator: correct hfsmps515 definition (Dmitry Baryshkov)   
- wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)   
- regmap: debugfs: Fix a memory leak when calling regmap_attach_dev (Xiaolei Wang)   
- net/mlx5e: Fix two double free cases (Dinghao Liu)   
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)   
- iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)   
- lightnvm: select CONFIG_CRC32 (Arnd Bergmann)   
- block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)   
- wil6210: select CONFIG_CRC32 (Arnd Bergmann)   
- qed: select CONFIG_CRC32 (Arnd Bergmann)   
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)   
- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() (Shravya Kumbham)   
- dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)   
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function (Christophe JAILLET)   
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated (Hans de Goede)   
- spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)   
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)   
- can: kvaser_pciefd: select CONFIG_CRC32 (Arnd Bergmann)   
- can: m_can: m_can_class_unregister(): remove erroneous m_can_clk_stop() (Marc Kleine-Budde)   
- can: tcan4x5x: fix bittiming const, use common bittiming from m_can driver (Marc Kleine-Budde)   
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() (Dan Carpenter)   
- i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)   
- ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)   
- HID: wacom: Fix memory leakage caused by kfifo_alloc (Ping Cheng)   
- iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)   
- vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)   
- exfat: Month timestamp metadata accidentally incremented (Valdis Kletnieks)   
- x86/resctrl: Don't move a task to the same resource group (Fenghua Yu)   
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)   
- chtls: Fix chtls resources release sequence (Ayush Sawal)   
- chtls: Added a check to avoid NULL pointer dereference (Ayush Sawal)   
- chtls: Replace skb_dequeue with skb_peek (Ayush Sawal)   
- chtls: Fix panic when route to peer not configured (Ayush Sawal)   
- chtls: Remove invalid set_tcb call (Ayush Sawal)   
- chtls: Fix hardware tid leak (Ayush Sawal)   
- net/mlx5e: ethtool, Fix restriction of autoneg with 56G (Aya Levin)   
- net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address (Mark Zhang)   
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (Aleksander Jan Bajkowski)   
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (Julian Wiedmann)   
- nexthop: Unlink nexthop group entry in error path (Ido Schimmel)   
- nexthop: Fix off-by-one error in error path (Ido Schimmel)   
- octeontx2-af: fix memory leak of lmac and lmac-&gt;name (Colin Ian King)   
- net: ip: always refragment ip defragmented packets (Florian Westphal)   
- net: fix pmtu check in nopmtudisc mode (Florian Westphal)   
- tools: selftests: add test for changing routes with PTMU exceptions (Sean Tranchetti)   
- net: ipv6: fib: flush exceptions when purging route (Sean Tranchetti)   
- net/sonic: Fix some resource leaks in error handling paths (Christophe JAILLET)   
- net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)   
- net: stmmac: dwmac-sun8i: Balance internal PHY power (Samuel Holland)   
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (Samuel Holland)   
- net: hns3: fix a phy loopback fail issue (Yonglong Liu)   
- net: hns3: fix the number of queues actually used by ARQ (Yufeng Mo)   
- net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppänen)   
- vfio iommu: Add dma available capability (Matthew Rosato)   
- x86/asm/32: Add ENDs to some functions and relabel with SYM_CODE_* (Jiri Slaby)   
- LTS tag: v5.4.89 (Jack Vogel)   
- scsi: target: Fix XCOPY NAA identifier lookup (David Disseldorp)   {CVE-2020-28374} 
- KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)   
- x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)   
- netfilter: nft_dynset: report EOPNOTSUPP on missing set feature (Pablo Neira Ayuso)   
- netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)   
- netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)   
- netfilter: x_tables: Update remaining dereference to RCU (Subash Abhinov Kasiviswanathan)   
- drm/i915: clear the gpu reloc batch (Matthew Auld)   
- dmabuf: fix use-after-free of dmabuf's file-&gt;f_inode (Charan Teja Reddy)   
- Revert "device property: Keep secondary firmware node secondary by type" (Bard Liao)   
- btrfs: send: fix wrong file path when there is an inode with a pending rmdir (Filipe Manana)   
- ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256. (PeiSen Hou)   
- ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (Kai-Heng Feng)   
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)   
- ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)   
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (Takashi Iwai)   
- kvm: check tlbs_dirty directly (Lai Jiangshan)   
- x86/mm: Fix leak of pmd ptlock (Dan Williams)   
- USB: serial: keyspan_pda: remove unused variable (Johan Hovold)   
- usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)   
- usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)   
- usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)   
- USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)   
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani)   
- usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)   
- usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)   
- usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)   
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)   
- USB: usblp: fix DMA to stack (Johan Hovold)   
- USB: yurex: fix control-URB timeout handling (Johan Hovold)   
- USB: serial: option: add Quectel EM160R-GL (Bjørn Mork)   
- USB: serial: option: add LongSung M5710 module support (Daniel Palmer)   
- USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)   
- usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)   
- usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)   
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)   
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)   
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)   
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa)   
- USB: cdc-acm: blacklist another IR Droid device (Sean Young)   
- usb: gadget: enable super speed plus (taehyun.cho)   
- staging: mt7621-dma: Fix a resource leak in an error handling path (Christophe JAILLET)   
- powerpc: Handle .text.{hot,unlikely}.* in linker script (Nathan Chancellor)   
- crypto: asym_tpm: correct zero out potential secrets (Greg Kroah-Hartman)   
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)   
- Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close (Hans de Goede)   
- kbuild: don't hardcode depmod path (Dominique Martinet)   
- net/sched: sch_taprio: ensure to reset/destroy all child qdiscs (Davide Caratti)   
- ionic: account for vlan tag len in rx buffer len (Shannon Nelson)   
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)   
- net: usb: qmi_wwan: add Quectel EM160R-GL (Bjørn Mork)   
- CDC-NCM: remove "connected" log message (Roland Dreier)   
- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (Martin Blumenstingl)   
- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (Martin Blumenstingl)   
- r8169: work around power-saving bug on some chip versions (Heiner Kallweit)   
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)   
- erspan: fix version 1 check in gre_parse_header() (Cong Wang)   
- net: hns: fix return value check in __lb_other_process() (Yunjian Wang)   
- net: sched: prevent invalid Scell_log shift count (Randy Dunlap)   
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)   
- net: mvpp2: fix pkt coalescing int-threshold configuration (Stefan Chulski)   
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang)   
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)   
- net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_rxqs (Antoine Tenart)   
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)   
- net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)   
- net/ncsi: Use real net-device for response handler (John Wang)   
- virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)   
- qede: fix offload for IPIP tunnel packets (Manish Chopra)   
- net: ethernet: mvneta: Fix error handling in mvneta_probe (Dinghao Liu)   
- ibmvnic: continue fatal error reset after passive init (Lijun Pan)   
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)   
- atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)   
- ethernet: ucc_geth: set dev-&gt;max_mtu to 1518 (Rasmus Villemoes)   
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)   
- net: systemport: set dev-&gt;max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)   
- net: mvpp2: prs: fix PPPoE with ipv6 packet parse (Stefan Chulski)   
- net: mvpp2: Add TCAM entry to drop flow control pause frames (Stefan Chulski)   
- iavf: fix double-release of rtnl_lock (Jakub Kicinski)   
- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (Sylwester Dziedziuch)   
- proc: fix lookup in /proc/net subdirectories after setns(2) (Alexey Dobriyan)   
- proc: change -&gt;nlink under proc_subdir_lock (Alexey Dobriyan)   
- depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)   
- lib/genalloc: fix the overflow when size is too big (Huang Shijie)   
- scsi: scsi_transport_spi: Set RQF_PM for domain validation commands (Bart Van Assche)   
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)   
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk -&gt;poweroff() (Adrian Hunter)   
- scsi: ufs: Fix wrong print message in dev_err() (Bean Huo)   
- workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)   
- LTS tag: v5.4.88 (Jack Vogel)   
- exec: Transform exec_update_mutex into a rw_semaphore (Eric W. Biederman)   
- rwsem: Implement down_read_interruptible (Eric W. Biederman)   
- rwsem: Implement down_read_killable_nested (Eric W. Biederman)   
- perf: Break deadlock involving exec_update_mutex (peterz@infradead.org)   
- iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)   
- kdev_t: always inline major/minor helper functions (Josh Poimboeuf)   
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc (Tudor Ambarus)   
- Revert "mtd: spinand: Fix OOB read" (Felix Fietkau)   
- Revert "drm/amd/display: Fix memory leaks in S3 resume" (Alex Deucher)   
- LTS tag: v5.4.87 (Jack Vogel)   
- dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)   
- ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)   
- tick/sched: Remove bogus boot "safety" check (Thomas Gleixner)   
- um: ubd: Submit all data segments atomically (Gabriel Krisman Bertazi)   
- fs/namespace.c: WARN if mnt_count has become negative (Eric Biggers)   
- module: delay kobject uevent until after module init call (Jessica Yu)   
- f2fs: avoid race condition for shrinker count (Jaegeuk Kim)   
- NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode (Trond Myklebust)   
- i3c master: fix missing destroy_workqueue() on error in i3c_master_register (Qinglang Miao)   
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)   
- rtc: pl031: fix resource leak in pl031_probe (Zheng Liang)   
- quota: Don't overflow quota file offsets (Jan Kara)   
- module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)   
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)   
- fcntl: Fix potential deadlock in send_sig{io, urg}() (Boqun Feng)   
- bfs: don't use WARNING: string when it's just info. (Randy Dunlap)   
- ALSA: rawmidi: Access runtime-&gt;avail always in spinlock (Takashi Iwai)   
- ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)   
- f2fs: fix shift-out-of-bounds in sanity_check_raw_super() (Chao Yu)   
- media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)   
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)   
- reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)   
- Bluetooth: hci_h5: close serdev device and free hu in h5_close (Anant Thazhemadam)   
- scsi: cxgb4i: Fix TLS dependency (Randy Dunlap)   
- cgroup: Fix memory leak when parsing multiple source parameters (Qinglang Miao)   
- of: fix linker-section match-table corruption (Johan Hovold)   
- null_blk: Fix zone size initialization (Damien Le Moal)   
- tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo)   
- uapi: move constants from &lt;linux/kernel.h&gt; to &lt;linux/const.h&gt; (Petr Vorel)   
- scsi: block: Fix a race in the runtime power management code (Bart Van Assche)   
- jffs2: Fix NULL pointer dereference in rp_size fs option parsing (Jamie Iles)   
- jffs2: Allow setting rp_size to zero during remounting (lizhe)   
- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)   
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Paolo Bonzini)   
- KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Paolo Bonzini)   
- ext4: don't remount read-only with errors=continue on reboot (Jan Kara)   
- btrfs: fix race when defragmenting leads to unnecessary IO (Filipe Manana)   
- vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)   
- fscrypt: remove kernel-internal constants from UAPI header (Eric Biggers)   
- fscrypt: add fscrypt_is_nokey_name() (Eric Biggers)   
- f2fs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ubifs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ext4: prevent creating duplicate encrypted filenames (Eric Biggers)   
- thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed (Zhuguangqing)   
- md/raid10: initialize r10_bio-&gt;read_slot before use. (Kevin Vigor)   
- net/sched: sch_taprio: reset child qdiscs before freeing them (Davide Caratti)   
- uek/ol/config-aarch64: Update uek6 kernel with RPI IOT configs (Vijay Kumar)  [Orabug: 32833361]  
- dts/bcm2711: set gpio6 to level=0 and pull=down (Vijay Kumar)  [Orabug: 32833361]  
- dts: bcm283x: Fix vc4's firmware bus DMA limitations (Nicolas Saenz Julienne)  [Orabug: 32833361]  
- uek6/config-aarch64-rpi: Enable CONFIG_RTC_DRV_ABEOZ9 (Vijay Kumar)  [Orabug: 32833361]  
- rtc/ab-eoz9: Add support for ABEOA9 SPI chip (Vijay Kumar)  [Orabug: 32833361]  
- rtc: abracon: add abeoa9 device id (Tom Saeger)  [Orabug: 32833361]  
- arm64/dts/bcm2711: Set SPI_CE0_N to output for GPIO8 (Vijay Kumar)  [Orabug: 32833361]  
- uek-rpm/ol8: Build rpi kernel (Tom Saeger)  [Orabug: 32833361]  
- uek-rpm: add rpi specific config (Tom Saeger)  [Orabug: 32833361]  
- firmware/raspberrypi: Notify firmware of a reboot (Phil Elwell)  [Orabug: 32833361]  
- firmware: raspberrypi: Report the fw variant during probe (Dave Stevenson)  [Orabug: 32833361]  
- raspberrypi-firmware: Export the general transaction function. (Eric Anholt)  [Orabug: 32833361]  
- firmware: bcm2835: Support ARCH_BCM270x (Noralf Trønnes)  [Orabug: 32833361]  
- Add NO_WAIT_RESP flag (Phil Elwell)  [Orabug: 32833361]  
- bcm2835-dma: Add proper 40-bit DMA support (Phil Elwell)  [Orabug: 32833361]  
- dmaengine: Add support for BCM2708 (Florian Meier)  [Orabug: 32833361]  
- dmaengine: bcm2835: Load driver early and support legacy API (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: char: broadcom: Add vcio module (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: Add /dev/gpiomem device for rootless user GPIO access (Luke Wren)  [Orabug: 32833361]  
- RPi: vcsm: VideoCore shared memory service for BCM2835 (Tim Gover)  [Orabug: 32833361]  
- RPi: vc_mem: Add vc_mem driver for querying firmware memory addresses (popcornmix)  [Orabug: 32833361]  
- RPi4/dts: set alias for i2c device (Vijay Kumar)  [Orabug: 32833361]  
- dts: Enable i2c4 for RPi4 (Vijay Kumar)  [Orabug: 32833361]  
- RPi:dts/bcm2711: Enable pwm for RPi4 board (Vijay Kumar)  [Orabug: 32833361]  
- RPi: transplant rpi_backlight to it's expected place (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 for BCM2711 (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 give expected gpio numbering (notro)  [Orabug: 32833361]  
- RPi: spidev: add rpi4 spidev0 (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: rpi4 add gpiomem (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: enable rpi4 touchscreen, i2c, and spi (Tom Saeger)  [Orabug: 32833361]  
- RPi: rpi_display: add backlight driver and overlay (P33M)  [Orabug: 32833361]  
- HID: quirks: Add quirk for Lenovo optical mouse (Saeed Mirzamohammadi)  [Orabug: 32820273]  
- x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817184]  
- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (Kan Liang)  [Orabug: 32806848]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.2.el8uek]" date="1620129600">- vfio/pci: restore remap elision logic in vfio_pci_mmap_fault() (Ankur Arora)  [Orabug: 32478548]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.3.el8uek]" date="1620475200">- LTS tag: v5.4.94 (Jack Vogel)   
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)   
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)   
- dm integrity: conditionally disable "recalculate" feature (Mikulas Patocka)   
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (Jean-Philippe Brucker)   
- SMB3.1.1: do not log warning message if server doesn't populate salt (Steve French)   
- arm64: mm: use single quantity to represent the PA to VA translation (Ard Biesheuvel)   
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)   
- io_uring: Fix current-&gt;fs handling in io_sq_wq_submit_work() (Nicolai Stange)   
- HID: wacom: Correct NULL dereference on AES pen proximity (Jason Gerecke)   
- Revert "mm/slub: fix a memory leak in sysfs_slab_add()" (Wang Hai)   
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)   
- LTS tag: v5.4.93 (Jack Vogel)   
- tcp: fix TCP_USER_TIMEOUT with zero window (Enke Chen)   
- net: dsa: b53: fix an off by one in checking "vlan-&gt;vid" (Dan Carpenter)   
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (Tariq Toukan)   
- net: mscc: ocelot: allow offloading of bridge on top of LAG (Vladimir Oltean)   
- ipv6: set multicast flag on the multicast route (Matteo Croce)   
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)   
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)   
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)   
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)   
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow (Lecopzer Chen)   
- kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (Lecopzer Chen)   
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)   
- lightnvm: fix memory leak when submit fails (Pan Bian)   
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)   
- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (Rasmus Villemoes)   
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)   
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)   
- x86/cpu/amd: Set __max_die_per_package on AMD (Yazen Ghannam)   
- pinctrl: ingenic: Fix JZ4760 support (Paul Cercueil)   
- driver core: Extend device_is_dependent() (Rafael J. Wysocki)   
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)   
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)   
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)   
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)   
- usb: gadget: aspeed: fix stop dma register setting. (Ryan Chen)   
- USB: ehci: fix an interrupt calltrace error (Longfang Liu)   
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)   
- serial: mvebu-uart: fix tx lost characters at power off (Pali Rohár)   
- stm class: Fix module init return on allocation failure (Wang Hui)   
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)   
- x86/mmx: Use KFPU_387 for MMX string operations (Andy Lutomirski)   
- x86/topology: Make __max_die_per_package available unconditionally (Borislav Petkov)   
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (Andy Lutomirski)   
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)   
- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (Ronnie Sahlberg)   
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)   
- can: peak_usb: fix use after free bugs (Vincent Mailhol)   
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)   
- can: dev: can_restart: fix use after free bug (Vincent Mailhol)   
- selftests: net: fib_tests: remove duplicate log test (Hangbin Liu)   
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (Hans de Goede)   
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)   
- powerpc: Fix alignment bug within the init sections (Ariel Marcovitch)   
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann)   
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (Billy Tsai)   
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (Youling Tang)   
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (Ben Skeggs)   
- drm/nouveau/mmu: fix vram heap sizing (Ben Skeggs)   
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)   
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)   
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)   
- drm/amd/display: Fix to be able to stop crc calculation (Wayne Lin)   
- drm/amdgpu/psp: fix psp gfx ctrl cmds (Victor Zhao)   
- riscv: defconfig: enable gpio support for HiFive Unleashed (Sagar Shrikant Kadam)   
- dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (Sagar Shrikant Kadam)   
- x86/xen: Add xen_no_vector_callback option to test PCI INTX delivery (David Woodhouse)   
- xen: Fix event channel callback via INTX/GSI (David Woodhouse)   
- arm64: make atomic helpers __always_inline (Arnd Bergmann)   
- clk: tegra30: Add hda clock default rates to clock driver (Peter Geis)   
- HID: Ignore battery for Elan touchscreen on ASUS UX550 (Seth Miller)   
- HID: logitech-dj: add the G602 receiver (Filipe Laíns)   
- riscv: Fix sifive serial driver (Damien Le Moal)   
- riscv: Fix kernel time_init() (Damien Le Moal)   
- scsi: sd: Suppress spurious errors when WRITE SAME is being disabled (Ewan D. Milne)   
- scsi: qedi: Correct max length of CHAP secret (Nilesh Javali)   
- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)   
- dm integrity: select CRYPTO_SKCIPHER (Anthony Iliopoulos)   
- HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device (Kai-Heng Feng)   
- ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)   
- drm/i915/gt: Prevent use of engine-&gt;wa_ctx after error (Chris Wilson)   
- drm/syncobj: Fix use-after-free (Daniel Vetter)   
- drm/atomic: put state on error path (Pan Bian)   
- dm integrity: fix a crash if "recalculate" used without "internal_hash" (Mikulas Patocka)   
- dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)   
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)   
- mmc: core: don't initialize block size from ext_csd if not present (Peter Collingbourne)   
- btrfs: send: fix invalid clone operations when cloning from the same file and root (Filipe Manana)   
- btrfs: don't clear ret in btrfs_start_dirty_block_groups (Josef Bacik)   
- btrfs: fix lockdep splat in btrfs_recover_relocation (Josef Bacik)   
- btrfs: don't get an EINTR during drop_snapshot for reloc (Josef Bacik)   
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)   
- ALSA: hda/via: Add minimum mute flag (Takashi Iwai)   
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)   
- platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 (Jiaxun Yang)   
- platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes (Heikki Krogerus)   
- i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)   
- LTS tag: v5.4.92 (Jack Vogel)   
- spi: cadence: cache reference clock rate during probe (Michael Hennerich)   
- mac80211: check if atf has been disabled in __ieee80211_schedule_txq (Lorenzo Bianconi)   
- mac80211: do not drop tx nulldata packets on encrypted links (Felix Fietkau)   
- tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)   
- net, sctp, filter: remap copy_from_user failure error (Daniel Borkmann)   
- rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)   
- net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)   
- net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski)   
- net: stmmac: Fixed mtu channged by cache aligned (David Wu)   
- rxrpc: Call state should be read with READ_ONCE() under some circumstances (Baptiste Lepers)   
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)   
- net: dcb: Validate netlink message in DCB handler (Petr Machata)   
- esp: avoid unneeded kmap_atomic call (Willem de Bruijn)   
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)   
- net: mvpp2: Remove Pause and Asym_Pause support (Stefan Chulski)   
- mlxsw: core: Increase critical threshold for ASIC thermal zone (Vadim Pasternak)   
- mlxsw: core: Add validation of transceiver temperature thresholds (Vadim Pasternak)   
- net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)   
- netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)   
- udp: Prevent reuseport_select_sock from reading uninitialized socks (Baptiste Lepers)   
- bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback (Mircea Cirjaliu)   
- bpf: Don't leak memory in bpf getsockopt when optlen == 0 (Stanislav Fomichev)   
- nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields)   
- spi: npcm-fiu: Disable clock in probe error path (Lukas Wunner)   
- spi: npcm-fiu: simplify the return expression of npcm_fiu_probe() (Qinglang Miao)   
- elfcore: fix building with clang (Arnd Bergmann)   
- xen/privcmd: allow fetching resource sizes (Roger Pau Monne)   
- compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)   
- usb: ohci: Make distrust_firmware param default to false (Hamish Martin)   
- LTS tag: v5.4.91 (Jack Vogel)   
- netfilter: nft_compat: remove flush counter optimization (Florian Westphal)   
- netfilter: nf_nat: Fix memleak in nf_nat_init (Dinghao Liu)   
- netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)   
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)   
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)   
- dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)   
- net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de)   
- iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() (Lu Baolu)   
- mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)   
- drm/i915/dsi: Use unconditional msleep for the panel_on_delay when there is no reset-deassert MIPI-sequence (Hans de Goede)   
- IB/mlx5: Fix error unwinding when set_has_smi_cap fails (Parav Pandit)   
- RDMA/mlx5: Fix wrong free of blue flame register on error (Mark Bloch)   
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded. (Michael Chan)   
- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)   
- RDMA/restrack: Don't treat as an error allocation ID wrapping (Leon Romanovsky)   
- ext4: fix superblock checksum failure when setting password salt (Jan Kara)   
- NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)   
- NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter (Trond Myklebust)   
- pNFS: Stricter ordering of layoutget and layoutreturn (Trond Myklebust)   
- pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)   
- pNFS: We want return-on-close to complete when evicting the inode (Trond Myklebust)   
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)   
- nvme-tcp: fix possible data corruption with bio merges (Sagi Grimberg)   
- ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)   
- ASoC: meson: axg-tdmin: fix axg skew offset (Jerome Brunet)   
- ASoC: meson: axg-tdm-interface: fix loopback (Jerome Brunet)   
- dump_common_audit_data(): fix racy accesses to -&gt;d_name (Al Viro)   
- perf intel-pt: Fix 'CPU too large' error (Adrian Hunter)   
- ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)   
- drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor)   
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)   
- usb: typec: Fix copy paste error for NVIDIA alt-mode description (Peter Robinson)   
- drm/amdgpu: fix a GPU hang issue when remove device (Dennis Li)   
- nvmet-rdma: Fix list_del corruption on queue establishment failure (Israel Rukshin)   
- nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN (Gopal Tiwari)   
- selftests: fix the return value for UDP GRO test (Po-Hsu Lin)   
- net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)   
- misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)   
- arch/arc: add copy_user_page() to &lt;asm/page.h&gt; to fix build error on ARC (Randy Dunlap)   
- bfq: Fix computation of shallow depth (Jan Kara)   
- lib/raid6: Let $(UNROLL) rules work with macOS userland (John Millikin)   
- hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values (Uwe Kleine-König)   
- habanalabs: Fix memleak in hl_device_reset (Dinghao Liu)   
- habanalabs: register to pci shutdown callback (Oded Gabbay)   
- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)   
- regulator: bd718x7: Add enable times (Guido Günther)   
- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)   
- netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin)   
- ARC: build: move symlink creation to arch/arc/Makefile to avoid race (Masahiro Yamada)   
- ARC: build: add boot_targets to PHONY (Masahiro Yamada)   
- ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)   
- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)   
- dm integrity: fix flush with external metadata device (Mikulas Patocka)   
- cifs: fix interrupted close commands (Paulo Alcantara)   
- smb3: remove unused flag passed into close functions (Steve French)   
- ext4: don't leak old mountpoint samples (Theodore Ts'o)   
- ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)   
- drm/i915/backlight: fix CPU mode backlight takeover on LPT (Jani Nikula)   
- btrfs: tree-checker: check if chunk item end overflows (Su Yue)   
- r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)   
- dm integrity: fix the maximum number of arguments (Mikulas Patocka)   
- dm snapshot: flush merged data before committing metadata (Akilesh Kailash)   
- dm raid: fix discard limits for raid1 (Mike Snitzer)   
- mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)   
- ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)   
- RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (Tom Rix)   
- MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)   
- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)   
- mips: lib: uncached: fix non-standard usage of variable 'sp' (Anders Roxell)   
- mips: fix Section mismatch in reference (Anders Roxell)   
- tracing/kprobes: Do the notrace functions check without kprobes on ftrace (Masami Hiramatsu)   
- x86/hyperv: check cpu mask after interrupt has been disabled (Wei Liu)   
- ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)   
- btrfs: prevent NULL pointer dereference in extent_io_tree_panic (Su Yue)   
- kbuild: enforce -Werror=return-type (Olaf Hering)   
- IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32852998]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.4.el8uek]" date="1621080000">- uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi)  [Orabug: 32837542]  
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley)  [Orabug: 32867569]  
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft))  [Orabug: 32867569]  
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley)  [Orabug: 32867569]  
- uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour)  [Orabug: 32816428]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.5.el8uek]" date="1621684800">- sctp: delay auto_asconf init until binding the first addr (Xin Long)  [Orabug: 32907967]  {CVE-2021-23133} {CVE-2021-23133} 
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860491]  {CVE-2021-31916} 
- uek-rpm: update kABI lists for the new symbols (Saeed Mirzamohammadi)  [Orabug: 32883836]  
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements)  [Orabug: 32888143]  
- scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (James Smart)  [Orabug: 32827840]</changelog>
</package>
<package pkgid="adb6c4ffaa6c3a78bc9301bfa71ee09715b7a39a6a2bf727e0fab9a48fdf49d8" name="kernel-uek-devel" arch="aarch64">
  <version epoch="0" ver="5.4.17" rel="2102.202.5.el8uek"/>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.0.el8uek]" date="1617451200">- uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel)  [Orabug: 32532663]  
- RDMA/rxe:  ipc_bench fails on SoftRoCE with shpd (Rao Shoaib)  [Orabug: 32716155]  
- vhost-vdpa: set v-&gt;config_ctx to NULL if eventfd_ctx_fdget() fails (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- vhost-vdpa: fix use-after-free of v-&gt;config_ctx (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 32669269]  {CVE-2021-28950} 
- fuse: fix bad inode (Miklos Szeredi)  [Orabug: 32669269]  {CVE-2021-28950} 
- RDMA/core: Fix corrupted SL on passive side (Håkon Bugge)  [Orabug: 32662965]  
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651473]  {CVE-2021-28038} 
- RDMA/rxe: Compute the maximum sges and inline size based on the WQE size (Rao Shoaib)  [Orabug: 32648060]  
- KVM: kvmclock: Fix vCPUs &gt; 64 can't be online/hotpluged (Wanpeng Li)  [Orabug: 32641672]  
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32640116]  
- uek-rpm: ol7: aarch64: add CONFIG_ACPI_HOTPLUG_MEMORY (Mihai Carabas)  [Orabug: 32638660]  
- KVM: SVM: Disable AVIC before setting V_IRQ (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: Introduce kvm_make_all_cpus_request_except() (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: X86: correct meaningless kvm_apicv_activated() check (Paolo Bonzini)  [Orabug: 32603569]  
- KVM: Disable preemption in kvm_get_running_vcpu() (Marc Zyngier)  [Orabug: 32603569]  
- KVM: Move running VCPU from ARM to common code (Paolo Bonzini)  [Orabug: 32603569]  
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697850]  {CVE-2021-28688} 
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui)  [Orabug: 32651461]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.1.el8uek]" date="1618056000">- IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751624]  
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709120]  {CVE-2021-29650} 
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang)  [Orabug: 32669468]  {CVE-2021-28971} 
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669450]  {CVE-2021-28964}</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.2.el8uek]" date="1618747200">- md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam)  [Orabug: 32764237]  
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang)  [Orabug: 32763849]  
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet)  [Orabug: 32760314]  
- Revert "x86/vmlinux: Use INT3 instead of NOP for linker fill bytes" (John Donnelly)  [Orabug: 32576398]  {CVE-2021-3411} 
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi)  [Orabug: 32734148]  
- LTS tag: v5.4.85 (Jack Vogel)   
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (Xiaochen Shen)   
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (James Morse)   
- membarrier: Explicitly sync remote cores when SYNC_CORE is requested (Andy Lutomirski)   
- Revert "selftests/ftrace: check for do_sys_openat2 in user-memory test" (Kamal Mostafa)   
- KVM: mmu: Fix SPTE encoding of MMIO generation upper half (Maciej S. Szmigiero)   
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)   
- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)   
- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)   
- xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (Hans de Goede)   
- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)   
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)   
- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)   
- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)   
- ktest.pl: If size of log is too big to email, email error message (Steven Rostedt (VMware))   
- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)   
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)   
- net: ll_temac: Fix potential NULL dereference in temac_probe() (Zhang Changzhong)   
- lan743x: fix for potential NULL pointer dereference with bare card (Sergej Bauer)   
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)   
- tcp: select sane initial rcvq_space.space for big MSS (Eric Dumazet)   
- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)   
- bridge: Fix a deadlock when enabling multicast snooping (Joseph Huang)   
- enetc: Fix reporting of h/w packet counters (Claudiu Manoil)   
- udp: fix the proto value passed to ip_protocol_deliver_rcu for the segments (Xin Long)   
- net: hns3: remove a misused pragma packed (Huazhong Tan)   
- vrf: packets with lladdr src needs dst at input with orig_iif when needs strict (Stephen Suryaputra)   
- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)   
- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)   
- ipv4: fix error return code in rtm_to_fib_config() (Zhang Changzhong)   
- ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (Peilin Ye)   
- LTS tag: v5.4.84 (Jack Vogel)   
- compiler.h: fix barrier_data() on clang (Arvind Sankar)   
- mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING (Minchan Kim)   
- x86/apic/vector: Fix ordering in vector assignment (Thomas Gleixner)   
- x86/membarrier: Get rid of a dubious optimization (Andy Lutomirski)   
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)   
- scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" (Dan Carpenter)   
- proc: use untagged_addr() for pagemap_read addresses (Miles Chen)   
- kbuild: avoid static_assert for genksyms (Arnd Bergmann)   
- drm/i915/display/dp: Compute the correct slice count for VDSC on DP (Manasi Navare)   
- mmc: block: Fixup condition for CMD13 polling for RPMB requests (Bean Huo)   
- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)   
- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)   
- Input: cm109 - do not stomp on control URB (Dmitry Torokhov)   
- ktest.pl: Fix incorrect reboot for grub2bls (Libo Chen)   
- can: m_can: m_can_dev_setup(): add support for bosch mcan version 3.3.0 (Pankaj Sharma)   
- platform/x86: touchscreen_dmi: Add info for the Irbis TW118 tablet (Hans de Goede)   
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC (Max Verevkin)   
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)   
- platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen (Hans de Goede)   
- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e (Hans de Goede)   
- arm64: tegra: Disable the ACONNECT for Jetson TX2 (Jon Hunter)   
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)   
- spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts (Ran Wang)   
- irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend (Xu Qiang)   
- ibmvnic: skip tx timeout reset while in resetting (Lijun Pan)   
- interconnect: qcom: qcs404: Remove GPU and display RPM IDs (Georgi Djakov)   
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)   
- ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)   
- arm64: dts: broadcom: clear the warnings caused by empty dma-ranges (Zhen Lei)   
- powerpc: Drop -me200 addition to build flags (Michael Ellerman)   
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)   
- iwlwifi: pcie: set LTR to avoid completion timeout (Johannes Berg)   
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)   
- iwlwifi: pcie: limit memory read spin time (Johannes Berg)   
- x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S (Fangrui Song)   
- Kbuild: do not emit debug info for assembly with LLVM_IAS=1 (Nick Desaulniers)</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.3.el8uek]" date="1619179200">- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)  [Orabug: 32805544]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.0.el8uek]" date="1619265600">- LTS tag: v5.4.86 (Jack Vogel)   
- x86/CPU/AMD: Save AMD NodeId as cpu_die_id (Yazen Ghannam)   
- Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS" (Steven Rostedt (VMware))   
- rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (Nikita Shubin)   
- regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (DingHua Ma)   
- PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)   
- platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (Carlos Garnacho)   
- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)   
- xen/xenbus: Count pending messages for each watch (SeongJae Park)   
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)   
- dma-buf/dma-resv: Respect num_fences when initializing the shared fence list. (Maarten Lankhorst)   
- device-dax/core: Fix memory leak when rmmod dax.ko (Wang Hai)   
- clk: tegra: Do not return 0 on failure (Nicolin Chen)   
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)   
- clk: ingenic: Fix divider calculation with div tables (Paul Cercueil)   
- pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler (Yangtao Li)   
- md/cluster: fix deadlock when node is doing resync job (Zhao Heming)   
- md/cluster: block reshape with remote resync job (Zhao Heming)   
- iio:adc:ti-ads124s08: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:adc:ti-ads124s08: Fix buffer being too long. (Jonathan Cameron)   
- iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)   
- iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)   
- iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:light:st_uvis25: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)   
- iio: buffer: Fix demux update (Nuno Sá)   
- scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi)   
- mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (Sergei Antonov)   
- mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (Praveenkumar I)   
- mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)   
- mtd: spinand: Fix OOB read (Miquel Raynal)   
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)   
- spi: atmel-quadspi: Fix AHB memory accesses (Tudor Ambarus)   
- spi: atmel-quadspi: Disable clock in probe error path (Lukas Wunner)   
- spi: mt7621: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: mt7621: Disable clock in probe error path (Lukas Wunner)   
- spi: synquacer: Disable clock in probe error path (Lukas Wunner)   
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)   
- spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner)   
- spi: mxic: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: gpio: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: fsl: fix use of spisel_boot signal on MPC8309 (Rasmus Villemoes)   
- spi: davinci: Fix use-after-free on unbind (Lukas Wunner)   
- spi: atmel-quadspi: Fix use-after-free on unbind (Lukas Wunner)   
- spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)   
- spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)   
- drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)   
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)   
- drm/amd/display: Fix memory leaks in S3 resume (Stylon Wang)   
- platform/x86: mlx-platform: remove an unused variable (Arnd Bergmann)   
- jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)   
- jffs2: Fix ignoring mounting options problem during remounting (lizhe)   
- jffs2: Fix GC exit abnormally (Zhe Li)   
- ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger)   
- SMB3: avoid confusing warning message on mount to Azure (Steve French)   
- ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)   
- um: Remove use of asprinf in umid.c (Anton Ivanov)   
- ima: Don't modify file descriptor mode on the fly (Roberto Sassu)   
- powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (David Hildenbrand)   
- powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand)   
- powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- powerpc/mm: Fix verification of MMU_FTR_TYPE_44x (Christophe Leroy)   
- powerpc/8xx: Fix early debug when SMC1 is relocated (Christophe Leroy)   
- powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)   
- powerpc/feature: Add CPU_FTR_NOEXECUTE to G2_LE (Christophe Leroy)   
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)   
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)   
- xprtrdma: Fix XDRBUF_SPARSE_PAGES support (Chuck Lever)   
- ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)   
- ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES (H. Nikolaus Schaller)   
- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)   
- ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)   
- ext4: fix a memory leak of ext4_free_data (Chunguang Xu)   
- btrfs: trim: fix underflow in trim length to prevent access beyond device boundary (Qu Wenruo)   
- btrfs: do not shorten unpin len for caching block groups (Josef Bacik)   
- USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)   
- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)   
- USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)   
- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)   
- USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)   
- USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)   
- EDAC/amd64: Fix PCI component registration (Borislav Petkov)   
- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)   
- crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata (Ard Biesheuvel)   
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)   
- powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)   
- perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake (Kan Liang)   
- perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY (Kan Liang)   
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)   
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (Takashi Iwai)   
- binder: add flag to clear buffer on txn complete (Todd Kjos)   
- s390/dasd: fix list corruption of lcu list (Stefan Haberland)   
- s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)   
- s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)   
- s390/dasd: fix hanging device offline processing (Stefan Haberland)   
- s390/kexec_file: fix diag308 subcode when loading crash kernel (Philipp Rudo)   
- s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)   
- ALSA: core: memalloc: add page alignment for iram (Robin Gong)   
- ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai)   
- ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (Amadej Kastelic)   
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (Chris Chiu)   
- ALSA: hda/realtek: Add quirk for MSI-GP73 (Takashi Iwai)   
- ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (Chris Chiu)   
- ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)   
- ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (Kailang Yang)   
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)   
- ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (Chris Chiu)   
- ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (Hui Wang)   
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg. (Connor McAdams)   
- ALSA: hda: Fix regressions on clear and reconfig sysfs (Takashi Iwai)   
- ACPI: PNP: compare the string length in the matching_id() (Hui Wang)   
- Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (Daniel Scally)   
- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)   
- ALSA: hda/ca0132 - Change Input Source enum strings. (Connor McAdams)   
- Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)   
- media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (Sakari Ailus)   
- media: ipu3-cio2: Validate mbus format in setting subdev format (Sakari Ailus)   
- media: ipu3-cio2: Serialise access to pad format (Sakari Ailus)   
- media: ipu3-cio2: Return actual subdev format (Sakari Ailus)   
- media: ipu3-cio2: Remove traces of returned buffers (Sakari Ailus)   
- media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner)   
- media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)   
- media: gspca: Fix memory leak in probe (Alan Stern)   
- vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)   
- initramfs: fix clang build failure (Arnd Bergmann)   
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)   
- drm/amdkfd: Fix leak in dmabuf import (Felix Kuehling)   
- drm/amd/display: Prevent bandwidth overflow (Chris Park)   
- lwt: Disable BH too in run_lwt_bpf() (Dongdong Wang)   
- fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)   
- cfg80211: initialize rekey_data (Sara Sharon)   
- ARM: sunxi: Add machine match for the Allwinner V3 SoC (Paul Kocialkowski)   
- perf probe: Fix memory leak when synthesizing SDT probes (Arnaldo Carvalho de Melo)   
- kconfig: fix return value of do_error_if() (Masahiro Yamada)   
- clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)   
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)   
- clk: at91: sam9x60: remove atmel,osc-bypass support (Alexandre Belloni)   
- virtio_ring: Fix two use after free bugs (Dan Carpenter)   
- virtio_net: Fix error code in probe() (Dan Carpenter)   
- virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (Dan Carpenter)   
- qlcnic: Fix error code in probe (Dan Carpenter)   
- perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)   
- pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)   
- pwm: zx: Add missing cleanup in error path (Uwe Kleine-König)   
- clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)   
- watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)   
- watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)   
- libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (Zhang Qilong)   
- net: korina: fix return value (Vincent Stehlé)   
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)   
- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)   
- lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck)   
- checkpatch: fix unescaped left brace (Dwaipayan Ray)   
- mm: don't wake kswapd prematurely when watermark boosting is disabled (Johannes Weiner)   
- sparc: fix handling of page table constructor failure (Matthew Wilcox (Oracle))   
- powerpc/ps3: use dma_mapping_error() (Vincent Stehlé)   
- nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)   
- RDMA/cma: Don't overwrite sgid_attr after device is released (Leon Romanovsky)   
- sunrpc: fix xs_read_xdr_buf for partial pages receive (Dan Aloni)   
- um: chan_xterm: Fix fd leak (Anton Ivanov)   
- um: tty: Fix handling of close in tty lines (Anton Ivanov)   
- um: Monitor error events in IRQ controller (Anton Ivanov)   
- ubifs: Fix error return code in ubifs_init_authentication() (Wang ShaoBo)   
- watchdog: Fix potential dereferencing of null pointer (Wang Wensheng)   
- watchdog: sprd: check busy bit before new loading rather than after that (Lingling Xu)   
- watchdog: sprd: remove watchdog disable from resume fail path (Lingling Xu)   
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)   
- ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (Dan Carpenter)   
- mac80211: don't set set TDLS STA bandwidth wider than possible (Johannes Berg)   
- crypto: atmel-i2c - select CONFIG_BITREVERSE (Arnd Bergmann)   
- extcon: max77693: Fix modalias string (Marek Szyprowski)   
- mtd: rawnand: gpmi: Fix the random DMA timeout issue (Han Xu)   
- mtd: rawnand: meson: Fix a resource leak in init (Dan Carpenter)   
- mtd: rawnand: gpmi: fix reference count leak in gpmi ops (Zhang Qilong)   
- clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)   
- remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (Zhang Changzhong)   
- remoteproc: qcom: fix reference leak in adsp_start (Zhang Qilong)   
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (Zhang Qilong)   
- RDMA/core: Do not indicate device ready when device enablement fails (Jack Morgenstein)   
- can: m_can: m_can_config_endisable(): remove double clearing of clock stop request bit (Sean Nyekjaer)   
- erofs: avoid using generic_block_bmap (Huang Jianan)   
- iwlwifi: mvm: hook up missing RX handlers (Johannes Berg)   
- s390/cio: fix use-after-free in ccw_device_destroy_console (Qinglang Miao)   
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (Zhang Changzhong)   
- platform/chrome: cros_ec_spi: Don't overwrite spi::mode (Stephen Boyd)   
- x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)   
- nfs_common: need lock during iterate through the list (Cheng Lin)   
- nfsd: Fix message level for normal termination (kazuo ito)   
- speakup: fix uninitialized flush_lock (Yang Yingliang)   
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)   
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)   
- powerpc/mm: sanity_check_fault() should work for all, not only BOOK3S (Christophe Leroy)   
- ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (Chuhong Yuan)   
- drm/mediatek: avoid dereferencing a null hdmi_phy on an error message (Colin Ian King)   
- powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)   
- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)   
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (Vadim Pasternak)   
- scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)   
- seq_buf: Avoid type mismatch for seq_buf_init (Arnd Bergmann)   
- scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)   
- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)   
- arm64: dts: meson: g12a: x96-max: fix PHY deassert timing requirements (Stefan Agner)   
- ARM: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- arm64: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (Jing Xiangfeng)   
- Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (Jing Xiangfeng)   
- cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: sun50i: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: qcom: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)   
- clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu)   
- phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure (Wang Li)   
- dm ioctl: fix error return code in target_message (Qinglang Miao)   
- ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)   
- net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)   
- MIPS: Don't round up kernel sections size for memblock_add() (Alexander Sverdlin)   
- memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)   
- arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)   
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)   
- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() (Andrii Nakryiko)   
- ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)   
- iio: hrtimer-trigger: Mark hrtimer to expire in hard interrupt context (Lars-Peter Clausen)   
- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)   
- clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (Yang Yingliang)   
- powerpc/64: Fix an EMIT_BUG_ENTRY in head_64.S (Jordan Niethe)   
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (Athira Rajeev)   
- media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)   
- hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable (Zhang Qilong)   
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)   
- selftests/seccomp: Update kernel config (Mickaël Salaün)   
- NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)   
- net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' (Fedor Tokarev)   
- NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Trond Myklebust)   
- SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (Trond Myklebust)   
- NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia)   
- SUNRPC: rpc_wake_up() should wake up tasks in the correct order (Trond Myklebust)   
- ath10k: Release some resources in an error handling path (Christophe JAILLET)   
- ath10k: Fix an error handling path (Christophe JAILLET)   
- ath10k: Fix the parsing error in service available event (Rakesh Pillai)   
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (Qinglang Miao)   
- ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)   
- soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (Yu Kuai)   
- arm64: dts: meson-sm1: fix typo in opp table (Dongjin Kim)   
- arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 (Artem Lapkin)   
- PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)   
- PCI: Fix overflow in command-line resource alignment requests (Colin Ian King)   
- PCI: Bounds-check command-line resource alignment requests (Bjorn Helgaas)   
- arm64: dts: qcom: c630: Polish i2c-hid devices (Bjorn Andersson)   
- arm64: dts: ls1028a: fix ENETC PTP clock input (Michael Walle)   
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier)   
- power: supply: bq24190_charger: fix reference leak (Zhang Qilong)   
- power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (Hans de Goede)   
- arm64: dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc (Chen-Yu Tsai)   
- arm64: dts: armada-3720-turris-mox: update ethernet-phy handle name (Marek Behún)   
- ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)   
- HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng)   
- slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (Bjorn Andersson)   
- media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)   
- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)   
- media: imx214: Fix stop streaming (Daniel Gomez)   
- samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)   
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (Vadim Pasternak)   
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (Vadim Pasternak)   
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)   
- arm64: tegra: Fix DT binding for IO High Voltage entry (Vidya Sagar)   
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (Zhihao Cheng)   
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)   
- rsi: fix error return code in rsi_reset_card() (Zhang Changzhong)   
- qtnfmac: fix error return code in qtnf_pcie_probe() (Wang Hai)   
- orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)   
- mmc: pxamci: Fix error return code in pxamci_probe (Zhihao Cheng)   
- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)   
- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)   
- memstick: fix a double-free bug in memstick_check (Qinglang Miao)   
- RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)   
- clk: meson: Kconfig: fix dependency for G12A (Kevin Hilman)   
- Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)   
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)   
- soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)   
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)   
- spi: fix resource leak for drivers without .remove callback (Uwe Kleine-König)   
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)   
- crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (Nathan Chancellor)   
- EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Yazen Ghannam)   
- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)   
- powerpc: Avoid broken GCC __attribute__((optimize)) (Ard Biesheuvel)   
- selftests/bpf: Fix broken riscv build (Björn Töpel)   
- spi: mxs: fix reference leak in mxs_spi_probe (Zhang Qilong)   
- usb/max3421: fix return error code in max3421_probe() (Yang Yingliang)   
- Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)   
- Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)   
- Input: ads7846 - fix race that causes missing releases (David Jander)   
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)   
- video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() (Yang Yingliang)   
- media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)   
- scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)   
- ASoC: meson: fix COMPILE_TEST error (Jerome Brunet)   
- media: v4l2-fwnode: Return -EINVAL for invalid bus-type (Lad Prabhakar)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (Yu Kuai)   
- media: tm6000: Fix sizeof() mismatches (Colin Ian King)   
- staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c (Jing Xiangfeng)   
- staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)   
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (Jack Xu)   
- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)   
- RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)   
- ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)   
- spi: sprd: fix reference leak in sprd_spi_remove (Zhang Qilong)   
- ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)   
- selftest/bpf: Add missed ip6ip6 test back (Hangbin Liu)   
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)   
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (Qinglang Miao)   
- spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)   
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)   
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)   
- spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (Qinglang Miao)   
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)   
- Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)   
- Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)   
- arm64: dts: exynos: Correct psci compatible used on Exynos7 (Paweł Chmiel)   
- arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 (Paweł Chmiel)   
- brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} (Seung-Woo Kim)   
- spi: stm32: fix reference leak in stm32_spi_resume (Zhang Qilong)   
- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)   
- ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)   
- spi: spi-mem: fix reference leak in spi_mem_access_start (Zhang Qilong)   
- drm/msm/dsi_pll_10nm: restore VCO rate during restore_state (Dmitry Baryshkov)   
- f2fs: call f2fs_get_meta_page_retry for nat page (Jaegeuk Kim)   
- spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)   
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (Jordan Niethe)   
- drm/amdgpu: fix build_coefficients() argument (Arnd Bergmann)   
- ARM: dts: aspeed: tiogapass: Remove vuart (Vijay Khemka)   
- ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (Clément Péron)   
- crypto: inside-secure - Fix sizeof() mismatch (Colin Ian King)   
- crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)   
- crypto: talitos - Endianess in current_desc_hdr() (Christophe Leroy)   
- drm/amdgpu: fix incorrect enum type (Arnd Bergmann)   
- sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)   
- sched/deadline: Fix sched_dl_global_validate() (Peng Liu)   
- x86/apic: Fix x2apic enablement without interrupt remapping (David Woodhouse)   
- ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)   
- x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)   
- RDMA/rxe: Compute PSN windows correctly (Bob Pearson)   
- ARM: dts: aspeed: s2600wf: Fix VGA memory region location (Joel Stanley)   
- selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)   
- rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (Dan Carpenter)   
- RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)   
- Revert "i2c: i2c-qcom-geni: Fix DMA transfer race" (Douglas Anderson)   
- soc: qcom: geni: More properly switch to DMA mode (Douglas Anderson)   
- soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)   
- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)   
- arm64: dts: renesas: cat875: Remove rxc-skew-ps from ethernet-phy node (Biju Das)   
- arm64: dts: renesas: hihope-rzg2-ex: Drop rxc-skew-ps from ethernet-phy node (Biju Das)   
- drm/tve200: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/mcde: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/aspeed: Fix Kconfig warning &amp; subsequent build errors (Randy Dunlap)   
- drm/gma500: fix double free of gma_connector (Tom Rix)   
- md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)   
- crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)   
- media: msi2500: assign SPI bus number dynamically (Antti Palosaari)   
- quota: Sanity-check quota file headers on load (Jan Kara)   
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)   
- serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)   
- HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)   
- scsi: megaraid_sas: Check user-provided offsets (Arnd Bergmann)   
- coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (Sai Prakash Ranjan)   
- coresight: tmc-etr: Fix barrier packet insertion for perf buffer (Suzuki K Poulose)   
- coresight: tmc-etr: Check if page is valid before dma_map_page() (Mao Jinlong)   
- coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (Sai Prakash Ranjan)   
- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)   
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)   
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)   
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)   
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)   
- USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)   
- USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)   
- usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (Dan Carpenter)   
- soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)   
- kbuild: avoid split lines in .mod files (Masahiro Yamada)   
- perf/x86/intel: Check PEBS status correctly (Stephane Eranian)   
- drm/amd/display: Init clock value by current vbios CLKs (Brandon Syu)   
- iwlwifi: pcie: add one missing entry for AX210 (Luca Coelho)   
- dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)   
- scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)   
- vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)   
- vxlan: Add needed_headroom for lower device (Sven Eckelmann)   
- arm64: syscall: exit userspace before unmasking exceptions (Mark Rutland)   
- habanalabs: put devices before driver removal (Ofir Bitton)   
- drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)   
- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)   
- drm/tegra: replace idr_init() by idr_init_base() (Deepak R Varma)   
- net: mvpp2: add mvpp2_phylink_to_port() helper (Russell King)   
- selftests: fix poll error in udpgro.sh (Paolo Abeni)   
- ixgbe: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: optimise prefetch page refcount (Li RongQing)   
- i40e: Refactor rx_bi accesses (Björn Töpel)   
- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)   
- selftests/bpf/test_offload.py: Reset ethtool features after failed setting (Toke Høiland-Jørgensen)   
- netfilter: nft_ct: Remove confirmation check for NFT_CT_ID (Brett Mastbergen)   
- gpio: eic-sprd: break loop when getting NULL device resource (Chunyan Zhang)   
- Revert "gpio: eic-sprd: Use devm_platform_ioremap_resource()" (Baolin Wang)   
- afs: Fix memory leak when mounting with multiple source parameters (David Howells)   
- netfilter: nft_dynset: fix timeouts later than 23 days (Pablo Neira Ayuso)   
- netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal)   
- netfilter: x_tables: Switch synchronization to RCU (Subash Abhinov Kasiviswanathan)   
- pinctrl: aspeed: Fix GPIO requests on pass-through banks (Andrew Jeffery)   
- blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Douglas Anderson)   
- block: factor out requeue handling from dispatch code (Johannes Thumshirn)   
- block: Simplify REQ_OP_ZONE_RESET_ALL handling (Damien Le Moal)   
- clk: renesas: r9a06g032: Drop __packed for portability (Geert Uytterhoeven)   
- can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)   
- xsk: Replace datagram_poll by sock_poll_wait (Xuan Zhuo)   
- xsk: Fix xsk_poll()'s return type (Luc Van Oostenryck)   
- scsi: bnx2i: Requires MMU (Randy Dunlap)   
- gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)   
- gpio: zynq: fix reference leak in zynq_gpio functions (Qinglang Miao)   
- PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong)   
- ARM: dts: imx6qdl-kontron-samx6i: fix I2C_PM scl pin (Bernd Bauer)   
- ARM: dts: imx6qdl-wandboard-revd1: Remove PAD_GPIO_6 from enetgrp (Fabio Estevam)   
- ARM: dts: sun7i: pcduino3-nano: enable RGMII RX/TX delay on PHY (Adam Sampson)   
- ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)   
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)   
- pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)   
- ARM: dts: sun8i: v40: bananapi-m2-berry: Fix ethernet node (Pablo Greco)   
- ARM: dts: sun8i: r40: bananapi-m2-berry: Fix dcdc1 regulator (Pablo Greco)   
- RAS/CEC: Correct ce_add_elem()'s returned values (William Roche)  [Orabug: 32774757]  
- bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk)  [Orabug: 32759959]  {CVE-2021-29154} 
- KVM: SVM: avoid infinite loop on NPF from bad address (John Donnelly)  [Orabug: 32759746]  {CVE-2020-36310} 
- uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 32795492]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.1.el8uek]" date="1620043200">- LTS tag: v5.4.90 (Jack Vogel)   
- regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() (Dan Carpenter)   
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)   
- block: fix use-after-free in disk_part_iter_next (Ming Lei)   
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier)   
- net: mvpp2: disable force link UP during port init procedure (Stefan Chulski)   
- regulator: qcom-rpmh-regulator: correct hfsmps515 definition (Dmitry Baryshkov)   
- wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)   
- regmap: debugfs: Fix a memory leak when calling regmap_attach_dev (Xiaolei Wang)   
- net/mlx5e: Fix two double free cases (Dinghao Liu)   
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)   
- iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)   
- lightnvm: select CONFIG_CRC32 (Arnd Bergmann)   
- block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)   
- wil6210: select CONFIG_CRC32 (Arnd Bergmann)   
- qed: select CONFIG_CRC32 (Arnd Bergmann)   
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)   
- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() (Shravya Kumbham)   
- dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)   
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function (Christophe JAILLET)   
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated (Hans de Goede)   
- spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)   
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)   
- can: kvaser_pciefd: select CONFIG_CRC32 (Arnd Bergmann)   
- can: m_can: m_can_class_unregister(): remove erroneous m_can_clk_stop() (Marc Kleine-Budde)   
- can: tcan4x5x: fix bittiming const, use common bittiming from m_can driver (Marc Kleine-Budde)   
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() (Dan Carpenter)   
- i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)   
- ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)   
- HID: wacom: Fix memory leakage caused by kfifo_alloc (Ping Cheng)   
- iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)   
- vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)   
- exfat: Month timestamp metadata accidentally incremented (Valdis Kletnieks)   
- x86/resctrl: Don't move a task to the same resource group (Fenghua Yu)   
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)   
- chtls: Fix chtls resources release sequence (Ayush Sawal)   
- chtls: Added a check to avoid NULL pointer dereference (Ayush Sawal)   
- chtls: Replace skb_dequeue with skb_peek (Ayush Sawal)   
- chtls: Fix panic when route to peer not configured (Ayush Sawal)   
- chtls: Remove invalid set_tcb call (Ayush Sawal)   
- chtls: Fix hardware tid leak (Ayush Sawal)   
- net/mlx5e: ethtool, Fix restriction of autoneg with 56G (Aya Levin)   
- net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address (Mark Zhang)   
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (Aleksander Jan Bajkowski)   
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (Julian Wiedmann)   
- nexthop: Unlink nexthop group entry in error path (Ido Schimmel)   
- nexthop: Fix off-by-one error in error path (Ido Schimmel)   
- octeontx2-af: fix memory leak of lmac and lmac-&gt;name (Colin Ian King)   
- net: ip: always refragment ip defragmented packets (Florian Westphal)   
- net: fix pmtu check in nopmtudisc mode (Florian Westphal)   
- tools: selftests: add test for changing routes with PTMU exceptions (Sean Tranchetti)   
- net: ipv6: fib: flush exceptions when purging route (Sean Tranchetti)   
- net/sonic: Fix some resource leaks in error handling paths (Christophe JAILLET)   
- net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)   
- net: stmmac: dwmac-sun8i: Balance internal PHY power (Samuel Holland)   
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (Samuel Holland)   
- net: hns3: fix a phy loopback fail issue (Yonglong Liu)   
- net: hns3: fix the number of queues actually used by ARQ (Yufeng Mo)   
- net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppänen)   
- vfio iommu: Add dma available capability (Matthew Rosato)   
- x86/asm/32: Add ENDs to some functions and relabel with SYM_CODE_* (Jiri Slaby)   
- LTS tag: v5.4.89 (Jack Vogel)   
- scsi: target: Fix XCOPY NAA identifier lookup (David Disseldorp)   {CVE-2020-28374} 
- KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)   
- x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)   
- netfilter: nft_dynset: report EOPNOTSUPP on missing set feature (Pablo Neira Ayuso)   
- netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)   
- netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)   
- netfilter: x_tables: Update remaining dereference to RCU (Subash Abhinov Kasiviswanathan)   
- drm/i915: clear the gpu reloc batch (Matthew Auld)   
- dmabuf: fix use-after-free of dmabuf's file-&gt;f_inode (Charan Teja Reddy)   
- Revert "device property: Keep secondary firmware node secondary by type" (Bard Liao)   
- btrfs: send: fix wrong file path when there is an inode with a pending rmdir (Filipe Manana)   
- ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256. (PeiSen Hou)   
- ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (Kai-Heng Feng)   
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)   
- ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)   
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (Takashi Iwai)   
- kvm: check tlbs_dirty directly (Lai Jiangshan)   
- x86/mm: Fix leak of pmd ptlock (Dan Williams)   
- USB: serial: keyspan_pda: remove unused variable (Johan Hovold)   
- usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)   
- usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)   
- usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)   
- USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)   
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani)   
- usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)   
- usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)   
- usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)   
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)   
- USB: usblp: fix DMA to stack (Johan Hovold)   
- USB: yurex: fix control-URB timeout handling (Johan Hovold)   
- USB: serial: option: add Quectel EM160R-GL (Bjørn Mork)   
- USB: serial: option: add LongSung M5710 module support (Daniel Palmer)   
- USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)   
- usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)   
- usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)   
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)   
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)   
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)   
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa)   
- USB: cdc-acm: blacklist another IR Droid device (Sean Young)   
- usb: gadget: enable super speed plus (taehyun.cho)   
- staging: mt7621-dma: Fix a resource leak in an error handling path (Christophe JAILLET)   
- powerpc: Handle .text.{hot,unlikely}.* in linker script (Nathan Chancellor)   
- crypto: asym_tpm: correct zero out potential secrets (Greg Kroah-Hartman)   
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)   
- Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close (Hans de Goede)   
- kbuild: don't hardcode depmod path (Dominique Martinet)   
- net/sched: sch_taprio: ensure to reset/destroy all child qdiscs (Davide Caratti)   
- ionic: account for vlan tag len in rx buffer len (Shannon Nelson)   
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)   
- net: usb: qmi_wwan: add Quectel EM160R-GL (Bjørn Mork)   
- CDC-NCM: remove "connected" log message (Roland Dreier)   
- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (Martin Blumenstingl)   
- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (Martin Blumenstingl)   
- r8169: work around power-saving bug on some chip versions (Heiner Kallweit)   
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)   
- erspan: fix version 1 check in gre_parse_header() (Cong Wang)   
- net: hns: fix return value check in __lb_other_process() (Yunjian Wang)   
- net: sched: prevent invalid Scell_log shift count (Randy Dunlap)   
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)   
- net: mvpp2: fix pkt coalescing int-threshold configuration (Stefan Chulski)   
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang)   
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)   
- net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_rxqs (Antoine Tenart)   
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)   
- net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)   
- net/ncsi: Use real net-device for response handler (John Wang)   
- virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)   
- qede: fix offload for IPIP tunnel packets (Manish Chopra)   
- net: ethernet: mvneta: Fix error handling in mvneta_probe (Dinghao Liu)   
- ibmvnic: continue fatal error reset after passive init (Lijun Pan)   
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)   
- atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)   
- ethernet: ucc_geth: set dev-&gt;max_mtu to 1518 (Rasmus Villemoes)   
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)   
- net: systemport: set dev-&gt;max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)   
- net: mvpp2: prs: fix PPPoE with ipv6 packet parse (Stefan Chulski)   
- net: mvpp2: Add TCAM entry to drop flow control pause frames (Stefan Chulski)   
- iavf: fix double-release of rtnl_lock (Jakub Kicinski)   
- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (Sylwester Dziedziuch)   
- proc: fix lookup in /proc/net subdirectories after setns(2) (Alexey Dobriyan)   
- proc: change -&gt;nlink under proc_subdir_lock (Alexey Dobriyan)   
- depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)   
- lib/genalloc: fix the overflow when size is too big (Huang Shijie)   
- scsi: scsi_transport_spi: Set RQF_PM for domain validation commands (Bart Van Assche)   
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)   
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk -&gt;poweroff() (Adrian Hunter)   
- scsi: ufs: Fix wrong print message in dev_err() (Bean Huo)   
- workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)   
- LTS tag: v5.4.88 (Jack Vogel)   
- exec: Transform exec_update_mutex into a rw_semaphore (Eric W. Biederman)   
- rwsem: Implement down_read_interruptible (Eric W. Biederman)   
- rwsem: Implement down_read_killable_nested (Eric W. Biederman)   
- perf: Break deadlock involving exec_update_mutex (peterz@infradead.org)   
- iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)   
- kdev_t: always inline major/minor helper functions (Josh Poimboeuf)   
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc (Tudor Ambarus)   
- Revert "mtd: spinand: Fix OOB read" (Felix Fietkau)   
- Revert "drm/amd/display: Fix memory leaks in S3 resume" (Alex Deucher)   
- LTS tag: v5.4.87 (Jack Vogel)   
- dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)   
- ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)   
- tick/sched: Remove bogus boot "safety" check (Thomas Gleixner)   
- um: ubd: Submit all data segments atomically (Gabriel Krisman Bertazi)   
- fs/namespace.c: WARN if mnt_count has become negative (Eric Biggers)   
- module: delay kobject uevent until after module init call (Jessica Yu)   
- f2fs: avoid race condition for shrinker count (Jaegeuk Kim)   
- NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode (Trond Myklebust)   
- i3c master: fix missing destroy_workqueue() on error in i3c_master_register (Qinglang Miao)   
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)   
- rtc: pl031: fix resource leak in pl031_probe (Zheng Liang)   
- quota: Don't overflow quota file offsets (Jan Kara)   
- module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)   
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)   
- fcntl: Fix potential deadlock in send_sig{io, urg}() (Boqun Feng)   
- bfs: don't use WARNING: string when it's just info. (Randy Dunlap)   
- ALSA: rawmidi: Access runtime-&gt;avail always in spinlock (Takashi Iwai)   
- ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)   
- f2fs: fix shift-out-of-bounds in sanity_check_raw_super() (Chao Yu)   
- media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)   
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)   
- reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)   
- Bluetooth: hci_h5: close serdev device and free hu in h5_close (Anant Thazhemadam)   
- scsi: cxgb4i: Fix TLS dependency (Randy Dunlap)   
- cgroup: Fix memory leak when parsing multiple source parameters (Qinglang Miao)   
- of: fix linker-section match-table corruption (Johan Hovold)   
- null_blk: Fix zone size initialization (Damien Le Moal)   
- tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo)   
- uapi: move constants from &lt;linux/kernel.h&gt; to &lt;linux/const.h&gt; (Petr Vorel)   
- scsi: block: Fix a race in the runtime power management code (Bart Van Assche)   
- jffs2: Fix NULL pointer dereference in rp_size fs option parsing (Jamie Iles)   
- jffs2: Allow setting rp_size to zero during remounting (lizhe)   
- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)   
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Paolo Bonzini)   
- KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Paolo Bonzini)   
- ext4: don't remount read-only with errors=continue on reboot (Jan Kara)   
- btrfs: fix race when defragmenting leads to unnecessary IO (Filipe Manana)   
- vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)   
- fscrypt: remove kernel-internal constants from UAPI header (Eric Biggers)   
- fscrypt: add fscrypt_is_nokey_name() (Eric Biggers)   
- f2fs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ubifs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ext4: prevent creating duplicate encrypted filenames (Eric Biggers)   
- thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed (Zhuguangqing)   
- md/raid10: initialize r10_bio-&gt;read_slot before use. (Kevin Vigor)   
- net/sched: sch_taprio: reset child qdiscs before freeing them (Davide Caratti)   
- uek/ol/config-aarch64: Update uek6 kernel with RPI IOT configs (Vijay Kumar)  [Orabug: 32833361]  
- dts/bcm2711: set gpio6 to level=0 and pull=down (Vijay Kumar)  [Orabug: 32833361]  
- dts: bcm283x: Fix vc4's firmware bus DMA limitations (Nicolas Saenz Julienne)  [Orabug: 32833361]  
- uek6/config-aarch64-rpi: Enable CONFIG_RTC_DRV_ABEOZ9 (Vijay Kumar)  [Orabug: 32833361]  
- rtc/ab-eoz9: Add support for ABEOA9 SPI chip (Vijay Kumar)  [Orabug: 32833361]  
- rtc: abracon: add abeoa9 device id (Tom Saeger)  [Orabug: 32833361]  
- arm64/dts/bcm2711: Set SPI_CE0_N to output for GPIO8 (Vijay Kumar)  [Orabug: 32833361]  
- uek-rpm/ol8: Build rpi kernel (Tom Saeger)  [Orabug: 32833361]  
- uek-rpm: add rpi specific config (Tom Saeger)  [Orabug: 32833361]  
- firmware/raspberrypi: Notify firmware of a reboot (Phil Elwell)  [Orabug: 32833361]  
- firmware: raspberrypi: Report the fw variant during probe (Dave Stevenson)  [Orabug: 32833361]  
- raspberrypi-firmware: Export the general transaction function. (Eric Anholt)  [Orabug: 32833361]  
- firmware: bcm2835: Support ARCH_BCM270x (Noralf Trønnes)  [Orabug: 32833361]  
- Add NO_WAIT_RESP flag (Phil Elwell)  [Orabug: 32833361]  
- bcm2835-dma: Add proper 40-bit DMA support (Phil Elwell)  [Orabug: 32833361]  
- dmaengine: Add support for BCM2708 (Florian Meier)  [Orabug: 32833361]  
- dmaengine: bcm2835: Load driver early and support legacy API (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: char: broadcom: Add vcio module (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: Add /dev/gpiomem device for rootless user GPIO access (Luke Wren)  [Orabug: 32833361]  
- RPi: vcsm: VideoCore shared memory service for BCM2835 (Tim Gover)  [Orabug: 32833361]  
- RPi: vc_mem: Add vc_mem driver for querying firmware memory addresses (popcornmix)  [Orabug: 32833361]  
- RPi4/dts: set alias for i2c device (Vijay Kumar)  [Orabug: 32833361]  
- dts: Enable i2c4 for RPi4 (Vijay Kumar)  [Orabug: 32833361]  
- RPi:dts/bcm2711: Enable pwm for RPi4 board (Vijay Kumar)  [Orabug: 32833361]  
- RPi: transplant rpi_backlight to it's expected place (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 for BCM2711 (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 give expected gpio numbering (notro)  [Orabug: 32833361]  
- RPi: spidev: add rpi4 spidev0 (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: rpi4 add gpiomem (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: enable rpi4 touchscreen, i2c, and spi (Tom Saeger)  [Orabug: 32833361]  
- RPi: rpi_display: add backlight driver and overlay (P33M)  [Orabug: 32833361]  
- HID: quirks: Add quirk for Lenovo optical mouse (Saeed Mirzamohammadi)  [Orabug: 32820273]  
- x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817184]  
- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (Kan Liang)  [Orabug: 32806848]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.2.el8uek]" date="1620129600">- vfio/pci: restore remap elision logic in vfio_pci_mmap_fault() (Ankur Arora)  [Orabug: 32478548]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.3.el8uek]" date="1620475200">- LTS tag: v5.4.94 (Jack Vogel)   
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)   
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)   
- dm integrity: conditionally disable "recalculate" feature (Mikulas Patocka)   
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (Jean-Philippe Brucker)   
- SMB3.1.1: do not log warning message if server doesn't populate salt (Steve French)   
- arm64: mm: use single quantity to represent the PA to VA translation (Ard Biesheuvel)   
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)   
- io_uring: Fix current-&gt;fs handling in io_sq_wq_submit_work() (Nicolai Stange)   
- HID: wacom: Correct NULL dereference on AES pen proximity (Jason Gerecke)   
- Revert "mm/slub: fix a memory leak in sysfs_slab_add()" (Wang Hai)   
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)   
- LTS tag: v5.4.93 (Jack Vogel)   
- tcp: fix TCP_USER_TIMEOUT with zero window (Enke Chen)   
- net: dsa: b53: fix an off by one in checking "vlan-&gt;vid" (Dan Carpenter)   
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (Tariq Toukan)   
- net: mscc: ocelot: allow offloading of bridge on top of LAG (Vladimir Oltean)   
- ipv6: set multicast flag on the multicast route (Matteo Croce)   
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)   
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)   
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)   
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)   
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow (Lecopzer Chen)   
- kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (Lecopzer Chen)   
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)   
- lightnvm: fix memory leak when submit fails (Pan Bian)   
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)   
- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (Rasmus Villemoes)   
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)   
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)   
- x86/cpu/amd: Set __max_die_per_package on AMD (Yazen Ghannam)   
- pinctrl: ingenic: Fix JZ4760 support (Paul Cercueil)   
- driver core: Extend device_is_dependent() (Rafael J. Wysocki)   
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)   
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)   
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)   
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)   
- usb: gadget: aspeed: fix stop dma register setting. (Ryan Chen)   
- USB: ehci: fix an interrupt calltrace error (Longfang Liu)   
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)   
- serial: mvebu-uart: fix tx lost characters at power off (Pali Rohár)   
- stm class: Fix module init return on allocation failure (Wang Hui)   
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)   
- x86/mmx: Use KFPU_387 for MMX string operations (Andy Lutomirski)   
- x86/topology: Make __max_die_per_package available unconditionally (Borislav Petkov)   
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (Andy Lutomirski)   
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)   
- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (Ronnie Sahlberg)   
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)   
- can: peak_usb: fix use after free bugs (Vincent Mailhol)   
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)   
- can: dev: can_restart: fix use after free bug (Vincent Mailhol)   
- selftests: net: fib_tests: remove duplicate log test (Hangbin Liu)   
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (Hans de Goede)   
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)   
- powerpc: Fix alignment bug within the init sections (Ariel Marcovitch)   
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann)   
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (Billy Tsai)   
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (Youling Tang)   
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (Ben Skeggs)   
- drm/nouveau/mmu: fix vram heap sizing (Ben Skeggs)   
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)   
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)   
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)   
- drm/amd/display: Fix to be able to stop crc calculation (Wayne Lin)   
- drm/amdgpu/psp: fix psp gfx ctrl cmds (Victor Zhao)   
- riscv: defconfig: enable gpio support for HiFive Unleashed (Sagar Shrikant Kadam)   
- dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (Sagar Shrikant Kadam)   
- x86/xen: Add xen_no_vector_callback option to test PCI INTX delivery (David Woodhouse)   
- xen: Fix event channel callback via INTX/GSI (David Woodhouse)   
- arm64: make atomic helpers __always_inline (Arnd Bergmann)   
- clk: tegra30: Add hda clock default rates to clock driver (Peter Geis)   
- HID: Ignore battery for Elan touchscreen on ASUS UX550 (Seth Miller)   
- HID: logitech-dj: add the G602 receiver (Filipe Laíns)   
- riscv: Fix sifive serial driver (Damien Le Moal)   
- riscv: Fix kernel time_init() (Damien Le Moal)   
- scsi: sd: Suppress spurious errors when WRITE SAME is being disabled (Ewan D. Milne)   
- scsi: qedi: Correct max length of CHAP secret (Nilesh Javali)   
- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)   
- dm integrity: select CRYPTO_SKCIPHER (Anthony Iliopoulos)   
- HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device (Kai-Heng Feng)   
- ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)   
- drm/i915/gt: Prevent use of engine-&gt;wa_ctx after error (Chris Wilson)   
- drm/syncobj: Fix use-after-free (Daniel Vetter)   
- drm/atomic: put state on error path (Pan Bian)   
- dm integrity: fix a crash if "recalculate" used without "internal_hash" (Mikulas Patocka)   
- dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)   
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)   
- mmc: core: don't initialize block size from ext_csd if not present (Peter Collingbourne)   
- btrfs: send: fix invalid clone operations when cloning from the same file and root (Filipe Manana)   
- btrfs: don't clear ret in btrfs_start_dirty_block_groups (Josef Bacik)   
- btrfs: fix lockdep splat in btrfs_recover_relocation (Josef Bacik)   
- btrfs: don't get an EINTR during drop_snapshot for reloc (Josef Bacik)   
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)   
- ALSA: hda/via: Add minimum mute flag (Takashi Iwai)   
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)   
- platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 (Jiaxun Yang)   
- platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes (Heikki Krogerus)   
- i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)   
- LTS tag: v5.4.92 (Jack Vogel)   
- spi: cadence: cache reference clock rate during probe (Michael Hennerich)   
- mac80211: check if atf has been disabled in __ieee80211_schedule_txq (Lorenzo Bianconi)   
- mac80211: do not drop tx nulldata packets on encrypted links (Felix Fietkau)   
- tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)   
- net, sctp, filter: remap copy_from_user failure error (Daniel Borkmann)   
- rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)   
- net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)   
- net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski)   
- net: stmmac: Fixed mtu channged by cache aligned (David Wu)   
- rxrpc: Call state should be read with READ_ONCE() under some circumstances (Baptiste Lepers)   
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)   
- net: dcb: Validate netlink message in DCB handler (Petr Machata)   
- esp: avoid unneeded kmap_atomic call (Willem de Bruijn)   
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)   
- net: mvpp2: Remove Pause and Asym_Pause support (Stefan Chulski)   
- mlxsw: core: Increase critical threshold for ASIC thermal zone (Vadim Pasternak)   
- mlxsw: core: Add validation of transceiver temperature thresholds (Vadim Pasternak)   
- net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)   
- netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)   
- udp: Prevent reuseport_select_sock from reading uninitialized socks (Baptiste Lepers)   
- bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback (Mircea Cirjaliu)   
- bpf: Don't leak memory in bpf getsockopt when optlen == 0 (Stanislav Fomichev)   
- nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields)   
- spi: npcm-fiu: Disable clock in probe error path (Lukas Wunner)   
- spi: npcm-fiu: simplify the return expression of npcm_fiu_probe() (Qinglang Miao)   
- elfcore: fix building with clang (Arnd Bergmann)   
- xen/privcmd: allow fetching resource sizes (Roger Pau Monne)   
- compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)   
- usb: ohci: Make distrust_firmware param default to false (Hamish Martin)   
- LTS tag: v5.4.91 (Jack Vogel)   
- netfilter: nft_compat: remove flush counter optimization (Florian Westphal)   
- netfilter: nf_nat: Fix memleak in nf_nat_init (Dinghao Liu)   
- netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)   
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)   
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)   
- dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)   
- net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de)   
- iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() (Lu Baolu)   
- mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)   
- drm/i915/dsi: Use unconditional msleep for the panel_on_delay when there is no reset-deassert MIPI-sequence (Hans de Goede)   
- IB/mlx5: Fix error unwinding when set_has_smi_cap fails (Parav Pandit)   
- RDMA/mlx5: Fix wrong free of blue flame register on error (Mark Bloch)   
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded. (Michael Chan)   
- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)   
- RDMA/restrack: Don't treat as an error allocation ID wrapping (Leon Romanovsky)   
- ext4: fix superblock checksum failure when setting password salt (Jan Kara)   
- NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)   
- NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter (Trond Myklebust)   
- pNFS: Stricter ordering of layoutget and layoutreturn (Trond Myklebust)   
- pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)   
- pNFS: We want return-on-close to complete when evicting the inode (Trond Myklebust)   
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)   
- nvme-tcp: fix possible data corruption with bio merges (Sagi Grimberg)   
- ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)   
- ASoC: meson: axg-tdmin: fix axg skew offset (Jerome Brunet)   
- ASoC: meson: axg-tdm-interface: fix loopback (Jerome Brunet)   
- dump_common_audit_data(): fix racy accesses to -&gt;d_name (Al Viro)   
- perf intel-pt: Fix 'CPU too large' error (Adrian Hunter)   
- ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)   
- drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor)   
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)   
- usb: typec: Fix copy paste error for NVIDIA alt-mode description (Peter Robinson)   
- drm/amdgpu: fix a GPU hang issue when remove device (Dennis Li)   
- nvmet-rdma: Fix list_del corruption on queue establishment failure (Israel Rukshin)   
- nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN (Gopal Tiwari)   
- selftests: fix the return value for UDP GRO test (Po-Hsu Lin)   
- net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)   
- misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)   
- arch/arc: add copy_user_page() to &lt;asm/page.h&gt; to fix build error on ARC (Randy Dunlap)   
- bfq: Fix computation of shallow depth (Jan Kara)   
- lib/raid6: Let $(UNROLL) rules work with macOS userland (John Millikin)   
- hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values (Uwe Kleine-König)   
- habanalabs: Fix memleak in hl_device_reset (Dinghao Liu)   
- habanalabs: register to pci shutdown callback (Oded Gabbay)   
- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)   
- regulator: bd718x7: Add enable times (Guido Günther)   
- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)   
- netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin)   
- ARC: build: move symlink creation to arch/arc/Makefile to avoid race (Masahiro Yamada)   
- ARC: build: add boot_targets to PHONY (Masahiro Yamada)   
- ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)   
- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)   
- dm integrity: fix flush with external metadata device (Mikulas Patocka)   
- cifs: fix interrupted close commands (Paulo Alcantara)   
- smb3: remove unused flag passed into close functions (Steve French)   
- ext4: don't leak old mountpoint samples (Theodore Ts'o)   
- ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)   
- drm/i915/backlight: fix CPU mode backlight takeover on LPT (Jani Nikula)   
- btrfs: tree-checker: check if chunk item end overflows (Su Yue)   
- r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)   
- dm integrity: fix the maximum number of arguments (Mikulas Patocka)   
- dm snapshot: flush merged data before committing metadata (Akilesh Kailash)   
- dm raid: fix discard limits for raid1 (Mike Snitzer)   
- mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)   
- ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)   
- RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (Tom Rix)   
- MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)   
- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)   
- mips: lib: uncached: fix non-standard usage of variable 'sp' (Anders Roxell)   
- mips: fix Section mismatch in reference (Anders Roxell)   
- tracing/kprobes: Do the notrace functions check without kprobes on ftrace (Masami Hiramatsu)   
- x86/hyperv: check cpu mask after interrupt has been disabled (Wei Liu)   
- ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)   
- btrfs: prevent NULL pointer dereference in extent_io_tree_panic (Su Yue)   
- kbuild: enforce -Werror=return-type (Olaf Hering)   
- IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32852998]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.4.el8uek]" date="1621080000">- uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi)  [Orabug: 32837542]  
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley)  [Orabug: 32867569]  
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft))  [Orabug: 32867569]  
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley)  [Orabug: 32867569]  
- uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour)  [Orabug: 32816428]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.5.el8uek]" date="1621684800">- sctp: delay auto_asconf init until binding the first addr (Xin Long)  [Orabug: 32907967]  {CVE-2021-23133} {CVE-2021-23133} 
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860491]  {CVE-2021-31916} 
- uek-rpm: update kABI lists for the new symbols (Saeed Mirzamohammadi)  [Orabug: 32883836]  
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements)  [Orabug: 32888143]  
- scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (James Smart)  [Orabug: 32827840]</changelog>
</package>
<package pkgid="f4af9b5a19e92e634ff4f210f58324c06150fc38cf5093860b444d0ef8858377" name="kernel-uek-doc" arch="noarch">
  <version epoch="0" ver="5.4.17" rel="2102.202.5.el8uek"/>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.0.el8uek]" date="1617451200">- uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel)  [Orabug: 32532663]  
- RDMA/rxe:  ipc_bench fails on SoftRoCE with shpd (Rao Shoaib)  [Orabug: 32716155]  
- vhost-vdpa: set v-&gt;config_ctx to NULL if eventfd_ctx_fdget() fails (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- vhost-vdpa: fix use-after-free of v-&gt;config_ctx (Stefano Garzarella)  [Orabug: 32696005]  {CVE-2021-29266} 
- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 32669269]  {CVE-2021-28950} 
- fuse: fix bad inode (Miklos Szeredi)  [Orabug: 32669269]  {CVE-2021-28950} 
- RDMA/core: Fix corrupted SL on passive side (Håkon Bugge)  [Orabug: 32662965]  
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651473]  {CVE-2021-28038} 
- RDMA/rxe: Compute the maximum sges and inline size based on the WQE size (Rao Shoaib)  [Orabug: 32648060]  
- KVM: kvmclock: Fix vCPUs &gt; 64 can't be online/hotpluged (Wanpeng Li)  [Orabug: 32641672]  
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32640116]  
- uek-rpm: ol7: aarch64: add CONFIG_ACPI_HOTPLUG_MEMORY (Mihai Carabas)  [Orabug: 32638660]  
- KVM: SVM: Disable AVIC before setting V_IRQ (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: Introduce kvm_make_all_cpus_request_except() (Suravee Suthikulpanit)  [Orabug: 32603569]  
- KVM: X86: correct meaningless kvm_apicv_activated() check (Paolo Bonzini)  [Orabug: 32603569]  
- KVM: Disable preemption in kvm_get_running_vcpu() (Marc Zyngier)  [Orabug: 32603569]  
- KVM: Move running VCPU from ARM to common code (Paolo Bonzini)  [Orabug: 32603569]  
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697850]  {CVE-2021-28688} 
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui)  [Orabug: 32651461]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.1.el8uek]" date="1618056000">- IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751624]  
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709120]  {CVE-2021-29650} 
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang)  [Orabug: 32669468]  {CVE-2021-28971} 
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669450]  {CVE-2021-28964}</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.2.el8uek]" date="1618747200">- md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam)  [Orabug: 32764237]  
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang)  [Orabug: 32763849]  
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet)  [Orabug: 32760314]  
- Revert "x86/vmlinux: Use INT3 instead of NOP for linker fill bytes" (John Donnelly)  [Orabug: 32576398]  {CVE-2021-3411} 
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi)  [Orabug: 32734148]  
- LTS tag: v5.4.85 (Jack Vogel)   
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (Xiaochen Shen)   
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (James Morse)   
- membarrier: Explicitly sync remote cores when SYNC_CORE is requested (Andy Lutomirski)   
- Revert "selftests/ftrace: check for do_sys_openat2 in user-memory test" (Kamal Mostafa)   
- KVM: mmu: Fix SPTE encoding of MMIO generation upper half (Maciej S. Szmigiero)   
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)   
- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)   
- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)   
- xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (Hans de Goede)   
- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)   
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)   
- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)   
- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)   
- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)   
- ktest.pl: If size of log is too big to email, email error message (Steven Rostedt (VMware))   
- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)   
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)   
- net: ll_temac: Fix potential NULL dereference in temac_probe() (Zhang Changzhong)   
- lan743x: fix for potential NULL pointer dereference with bare card (Sergej Bauer)   
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)   
- tcp: select sane initial rcvq_space.space for big MSS (Eric Dumazet)   
- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)   
- bridge: Fix a deadlock when enabling multicast snooping (Joseph Huang)   
- enetc: Fix reporting of h/w packet counters (Claudiu Manoil)   
- udp: fix the proto value passed to ip_protocol_deliver_rcu for the segments (Xin Long)   
- net: hns3: remove a misused pragma packed (Huazhong Tan)   
- vrf: packets with lladdr src needs dst at input with orig_iif when needs strict (Stephen Suryaputra)   
- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)   
- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)   
- ipv4: fix error return code in rtm_to_fib_config() (Zhang Changzhong)   
- ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (Peilin Ye)   
- LTS tag: v5.4.84 (Jack Vogel)   
- compiler.h: fix barrier_data() on clang (Arvind Sankar)   
- mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING (Minchan Kim)   
- x86/apic/vector: Fix ordering in vector assignment (Thomas Gleixner)   
- x86/membarrier: Get rid of a dubious optimization (Andy Lutomirski)   
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)   
- scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" (Dan Carpenter)   
- proc: use untagged_addr() for pagemap_read addresses (Miles Chen)   
- kbuild: avoid static_assert for genksyms (Arnd Bergmann)   
- drm/i915/display/dp: Compute the correct slice count for VDSC on DP (Manasi Navare)   
- mmc: block: Fixup condition for CMD13 polling for RPMB requests (Bean Huo)   
- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)   
- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)   
- Input: cm109 - do not stomp on control URB (Dmitry Torokhov)   
- ktest.pl: Fix incorrect reboot for grub2bls (Libo Chen)   
- can: m_can: m_can_dev_setup(): add support for bosch mcan version 3.3.0 (Pankaj Sharma)   
- platform/x86: touchscreen_dmi: Add info for the Irbis TW118 tablet (Hans de Goede)   
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC (Max Verevkin)   
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)   
- platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen (Hans de Goede)   
- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e (Hans de Goede)   
- arm64: tegra: Disable the ACONNECT for Jetson TX2 (Jon Hunter)   
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)   
- spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts (Ran Wang)   
- irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend (Xu Qiang)   
- ibmvnic: skip tx timeout reset while in resetting (Lijun Pan)   
- interconnect: qcom: qcs404: Remove GPU and display RPM IDs (Georgi Djakov)   
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)   
- ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)   
- arm64: dts: broadcom: clear the warnings caused by empty dma-ranges (Zhen Lei)   
- powerpc: Drop -me200 addition to build flags (Michael Ellerman)   
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)   
- iwlwifi: pcie: set LTR to avoid completion timeout (Johannes Berg)   
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)   
- iwlwifi: pcie: limit memory read spin time (Johannes Berg)   
- x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S (Fangrui Song)   
- Kbuild: do not emit debug info for assembly with LLVM_IAS=1 (Nick Desaulniers)</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.201.3.el8uek]" date="1619179200">- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi)  [Orabug: 32805544]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.0.el8uek]" date="1619265600">- LTS tag: v5.4.86 (Jack Vogel)   
- x86/CPU/AMD: Save AMD NodeId as cpu_die_id (Yazen Ghannam)   
- Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS" (Steven Rostedt (VMware))   
- rtc: ep93xx: Fix NULL pointer dereference in ep93xx_rtc_read_time (Nikita Shubin)   
- regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x (DingHua Ma)   
- PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)   
- platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 (Carlos Garnacho)   
- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)   
- xen/xenbus: Count pending messages for each watch (SeongJae Park)   
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park)   
- dma-buf/dma-resv: Respect num_fences when initializing the shared fence list. (Maarten Lankhorst)   
- device-dax/core: Fix memory leak when rmmod dax.ko (Wang Hai)   
- clk: tegra: Do not return 0 on failure (Nicolin Chen)   
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)   
- clk: ingenic: Fix divider calculation with div tables (Paul Cercueil)   
- pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler (Yangtao Li)   
- md/cluster: fix deadlock when node is doing resync job (Zhao Heming)   
- md/cluster: block reshape with remote resync job (Zhao Heming)   
- iio:adc:ti-ads124s08: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:adc:ti-ads124s08: Fix buffer being too long. (Jonathan Cameron)   
- iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)   
- iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)   
- iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)   
- iio:light:st_uvis25: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)   
- iio: buffer: Fix demux update (Nuno Sá)   
- scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi)   
- mtd: rawnand: meson: fix meson_nfc_dma_buffer_release() arguments (Sergei Antonov)   
- mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read (Praveenkumar I)   
- mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)   
- mtd: spinand: Fix OOB read (Miquel Raynal)   
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)   
- spi: atmel-quadspi: Fix AHB memory accesses (Tudor Ambarus)   
- spi: atmel-quadspi: Disable clock in probe error path (Lukas Wunner)   
- spi: mt7621: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: mt7621: Disable clock in probe error path (Lukas Wunner)   
- spi: synquacer: Disable clock in probe error path (Lukas Wunner)   
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)   
- spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner)   
- spi: mxic: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: gpio: Don't leak SPI master in probe error path (Lukas Wunner)   
- spi: fsl: fix use of spisel_boot signal on MPC8309 (Rasmus Villemoes)   
- spi: davinci: Fix use-after-free on unbind (Lukas Wunner)   
- spi: atmel-quadspi: Fix use-after-free on unbind (Lukas Wunner)   
- spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)   
- spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)   
- drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)   
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)   
- drm/amd/display: Fix memory leaks in S3 resume (Stylon Wang)   
- platform/x86: mlx-platform: remove an unused variable (Arnd Bergmann)   
- jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)   
- jffs2: Fix ignoring mounting options problem during remounting (lizhe)   
- jffs2: Fix GC exit abnormally (Zhe Li)   
- ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger)   
- SMB3: avoid confusing warning message on mount to Azure (Steve French)   
- ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)   
- um: Remove use of asprinf in umid.c (Anton Ivanov)   
- ima: Don't modify file descriptor mode on the fly (Roberto Sassu)   
- powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (David Hildenbrand)   
- powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand)   
- powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- powerpc/mm: Fix verification of MMU_FTR_TYPE_44x (Christophe Leroy)   
- powerpc/8xx: Fix early debug when SMC1 is relocated (Christophe Leroy)   
- powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)   
- powerpc/feature: Add CPU_FTR_NOEXECUTE to G2_LE (Christophe Leroy)   
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)   
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)   
- xprtrdma: Fix XDRBUF_SPARSE_PAGES support (Chuck Lever)   
- ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)   
- ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES (H. Nikolaus Schaller)   
- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)   
- ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)   
- ext4: fix a memory leak of ext4_free_data (Chunguang Xu)   
- btrfs: trim: fix underflow in trim length to prevent access beyond device boundary (Qu Wenruo)   
- btrfs: do not shorten unpin len for caching block groups (Josef Bacik)   
- USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)   
- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)   
- USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)   
- USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)   
- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)   
- USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)   
- USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)   
- EDAC/amd64: Fix PCI component registration (Borislav Petkov)   
- EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)   
- crypto: arm/aes-ce - work around Cortex-A57/A72 silion errata (Ard Biesheuvel)   
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)   
- powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)   
- perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake (Kan Liang)   
- perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY (Kan Liang)   
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)   
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (Takashi Iwai)   
- binder: add flag to clear buffer on txn complete (Todd Kjos)   
- s390/dasd: fix list corruption of lcu list (Stefan Haberland)   
- s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)   
- s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)   
- s390/dasd: fix hanging device offline processing (Stefan Haberland)   
- s390/kexec_file: fix diag308 subcode when loading crash kernel (Philipp Rudo)   
- s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)   
- ALSA: core: memalloc: add page alignment for iram (Robin Gong)   
- ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai)   
- ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices (Amadej Kastelic)   
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (Chris Chiu)   
- ALSA: hda/realtek: Add quirk for MSI-GP73 (Takashi Iwai)   
- ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G (Chris Chiu)   
- ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)   
- ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button (Kailang Yang)   
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)   
- ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 (Chris Chiu)   
- ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop (Hui Wang)   
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg. (Connor McAdams)   
- ALSA: hda: Fix regressions on clear and reconfig sysfs (Takashi Iwai)   
- ACPI: PNP: compare the string length in the matching_id() (Hui Wang)   
- Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (Daniel Scally)   
- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)   
- ALSA: hda/ca0132 - Change Input Source enum strings. (Connor McAdams)   
- Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)   
- media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE (Sakari Ailus)   
- media: ipu3-cio2: Validate mbus format in setting subdev format (Sakari Ailus)   
- media: ipu3-cio2: Serialise access to pad format (Sakari Ailus)   
- media: ipu3-cio2: Return actual subdev format (Sakari Ailus)   
- media: ipu3-cio2: Remove traces of returned buffers (Sakari Ailus)   
- media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner)   
- media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)   
- media: gspca: Fix memory leak in probe (Alan Stern)   
- vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (Alexey Kardashevskiy)   
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)   
- initramfs: fix clang build failure (Arnd Bergmann)   
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)   
- drm/amdkfd: Fix leak in dmabuf import (Felix Kuehling)   
- drm/amd/display: Prevent bandwidth overflow (Chris Park)   
- lwt: Disable BH too in run_lwt_bpf() (Dongdong Wang)   
- fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)   
- cfg80211: initialize rekey_data (Sara Sharon)   
- ARM: sunxi: Add machine match for the Allwinner V3 SoC (Paul Kocialkowski)   
- perf probe: Fix memory leak when synthesizing SDT probes (Arnaldo Carvalho de Melo)   
- kconfig: fix return value of do_error_if() (Masahiro Yamada)   
- clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)   
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)   
- clk: at91: sam9x60: remove atmel,osc-bypass support (Alexandre Belloni)   
- virtio_ring: Fix two use after free bugs (Dan Carpenter)   
- virtio_net: Fix error code in probe() (Dan Carpenter)   
- virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() (Dan Carpenter)   
- qlcnic: Fix error code in probe (Dan Carpenter)   
- perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)   
- pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)   
- pwm: zx: Add missing cleanup in error path (Uwe Kleine-König)   
- clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)   
- watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)   
- watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)   
- libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (Zhang Qilong)   
- net: korina: fix return value (Vincent Stehlé)   
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)   
- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)   
- lan743x: fix rx_napi_poll/interrupt ping-pong (Sven Van Asbroeck)   
- checkpatch: fix unescaped left brace (Dwaipayan Ray)   
- mm: don't wake kswapd prematurely when watermark boosting is disabled (Johannes Weiner)   
- sparc: fix handling of page table constructor failure (Matthew Wilcox (Oracle))   
- powerpc/ps3: use dma_mapping_error() (Vincent Stehlé)   
- nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)   
- RDMA/cma: Don't overwrite sgid_attr after device is released (Leon Romanovsky)   
- sunrpc: fix xs_read_xdr_buf for partial pages receive (Dan Aloni)   
- um: chan_xterm: Fix fd leak (Anton Ivanov)   
- um: tty: Fix handling of close in tty lines (Anton Ivanov)   
- um: Monitor error events in IRQ controller (Anton Ivanov)   
- ubifs: Fix error return code in ubifs_init_authentication() (Wang ShaoBo)   
- watchdog: Fix potential dereferencing of null pointer (Wang Wensheng)   
- watchdog: sprd: check busy bit before new loading rather than after that (Lingling Xu)   
- watchdog: sprd: remove watchdog disable from resume fail path (Lingling Xu)   
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- watchdog: armada_37xx: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)   
- ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (Dan Carpenter)   
- mac80211: don't set set TDLS STA bandwidth wider than possible (Johannes Berg)   
- crypto: atmel-i2c - select CONFIG_BITREVERSE (Arnd Bergmann)   
- extcon: max77693: Fix modalias string (Marek Szyprowski)   
- mtd: rawnand: gpmi: Fix the random DMA timeout issue (Han Xu)   
- mtd: rawnand: meson: Fix a resource leak in init (Dan Carpenter)   
- mtd: rawnand: gpmi: fix reference count leak in gpmi ops (Zhang Qilong)   
- clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)   
- remoteproc: qcom: Fix potential NULL dereference in adsp_init_mmio() (Zhang Changzhong)   
- remoteproc: qcom: fix reference leak in adsp_start (Zhang Qilong)   
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable (Zhang Qilong)   
- RDMA/core: Do not indicate device ready when device enablement fails (Jack Morgenstein)   
- can: m_can: m_can_config_endisable(): remove double clearing of clock stop request bit (Sean Nyekjaer)   
- erofs: avoid using generic_block_bmap (Huang Jianan)   
- iwlwifi: mvm: hook up missing RX handlers (Johannes Berg)   
- s390/cio: fix use-after-free in ccw_device_destroy_console (Qinglang Miao)   
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (Zhang Changzhong)   
- platform/chrome: cros_ec_spi: Don't overwrite spi::mode (Stephen Boyd)   
- x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)   
- nfs_common: need lock during iterate through the list (Cheng Lin)   
- nfsd: Fix message level for normal termination (kazuo ito)   
- speakup: fix uninitialized flush_lock (Yang Yingliang)   
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)   
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)   
- powerpc/mm: sanity_check_fault() should work for all, not only BOOK3S (Christophe Leroy)   
- ASoC: amd: change clk_get() to devm_clk_get() and add missed checks (Chuhong Yuan)   
- drm/mediatek: avoid dereferencing a null hdmi_phy on an error message (Colin Ian King)   
- powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)   
- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)   
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (Vadim Pasternak)   
- scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)   
- seq_buf: Avoid type mismatch for seq_buf_init (Arnd Bergmann)   
- scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)   
- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)   
- arm64: dts: meson: g12a: x96-max: fix PHY deassert timing requirements (Stefan Agner)   
- ARM: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- arm64: dts: meson: fix PHY deassert timing requirements (Stefan Agner)   
- Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() (Jing Xiangfeng)   
- Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() (Jing Xiangfeng)   
- cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohár)   
- cpufreq: sun50i: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: qcom: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- cpufreq: ap806: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)   
- clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne (Keqian Zhu)   
- phy: renesas: rcar-gen3-usb2: disable runtime pm in case of failure (Wang Li)   
- dm ioctl: fix error return code in target_message (Qinglang Miao)   
- ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)   
- net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)   
- MIPS: Don't round up kernel sections size for memblock_add() (Alexander Sverdlin)   
- memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)   
- arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)   
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)   
- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() (Andrii Nakryiko)   
- ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)   
- iio: hrtimer-trigger: Mark hrtimer to expire in hard interrupt context (Lars-Peter Clausen)   
- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)   
- clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path (Yang Yingliang)   
- powerpc/64: Fix an EMIT_BUG_ENTRY in head_64.S (Jordan Niethe)   
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (Athira Rajeev)   
- media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)   
- hwmon: (ina3221) Fix PM usage counter unbalance in ina3221_write_enable (Zhang Qilong)   
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)   
- selftests/seccomp: Update kernel config (Mickaël Salaün)   
- NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)   
- net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' (Fedor Tokarev)   
- NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Trond Myklebust)   
- SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (Trond Myklebust)   
- NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia)   
- SUNRPC: rpc_wake_up() should wake up tasks in the correct order (Trond Myklebust)   
- ath10k: Release some resources in an error handling path (Christophe JAILLET)   
- ath10k: Fix an error handling path (Christophe JAILLET)   
- ath10k: Fix the parsing error in service available event (Rakesh Pillai)   
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (Qinglang Miao)   
- ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)   
- soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() (Yu Kuai)   
- arm64: dts: meson-sm1: fix typo in opp table (Dongjin Kim)   
- arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 (Artem Lapkin)   
- PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)   
- PCI: Fix overflow in command-line resource alignment requests (Colin Ian King)   
- PCI: Bounds-check command-line resource alignment requests (Bjorn Helgaas)   
- arm64: dts: qcom: c630: Polish i2c-hid devices (Bjorn Andersson)   
- arm64: dts: ls1028a: fix ENETC PTP clock input (Michael Walle)   
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier)   
- power: supply: bq24190_charger: fix reference leak (Zhang Qilong)   
- power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching (Hans de Goede)   
- arm64: dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc (Chen-Yu Tsai)   
- arm64: dts: armada-3720-turris-mox: update ethernet-phy handle name (Marek Behún)   
- ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)   
- HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng)   
- slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI (Bjorn Andersson)   
- media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)   
- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)   
- media: imx214: Fix stop streaming (Daniel Gomez)   
- samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)   
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (Vadim Pasternak)   
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (Vadim Pasternak)   
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)   
- arm64: tegra: Fix DT binding for IO High Voltage entry (Vidya Sagar)   
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() (Zhihao Cheng)   
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)   
- rsi: fix error return code in rsi_reset_card() (Zhang Changzhong)   
- qtnfmac: fix error return code in qtnf_pcie_probe() (Wang Hai)   
- orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)   
- mmc: pxamci: Fix error return code in pxamci_probe (Zhihao Cheng)   
- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)   
- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)   
- memstick: fix a double-free bug in memstick_check (Qinglang Miao)   
- RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)   
- clk: meson: Kconfig: fix dependency for G12A (Kevin Hilman)   
- Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)   
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)   
- soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)   
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)   
- spi: fix resource leak for drivers without .remove callback (Uwe Kleine-König)   
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)   
- crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd (Nathan Chancellor)   
- EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Yazen Ghannam)   
- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)   
- powerpc: Avoid broken GCC __attribute__((optimize)) (Ard Biesheuvel)   
- selftests/bpf: Fix broken riscv build (Björn Töpel)   
- spi: mxs: fix reference leak in mxs_spi_probe (Zhang Qilong)   
- usb/max3421: fix return error code in max3421_probe() (Yang Yingliang)   
- Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)   
- Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)   
- Input: ads7846 - fix race that causes missing releases (David Jander)   
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)   
- video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() (Yang Yingliang)   
- media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)   
- scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)   
- ASoC: meson: fix COMPILE_TEST error (Jerome Brunet)   
- media: v4l2-fwnode: Return -EINVAL for invalid bus-type (Lad Prabhakar)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_enc_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)   
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_init_dec_pm() (Yu Kuai)   
- media: tm6000: Fix sizeof() mismatches (Colin Ian King)   
- staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c (Jing Xiangfeng)   
- staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)   
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (Jack Xu)   
- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)   
- RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)   
- ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)   
- spi: sprd: fix reference leak in sprd_spi_remove (Zhang Qilong)   
- ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)   
- selftest/bpf: Add missed ip6ip6 test back (Hangbin Liu)   
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)   
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (Qinglang Miao)   
- spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)   
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)   
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)   
- spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe (Qinglang Miao)   
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)   
- Bluetooth: hci_h5: fix memory leak in h5_close (Anant Thazhemadam)   
- Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)   
- arm64: dts: exynos: Correct psci compatible used on Exynos7 (Paweł Chmiel)   
- arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 (Paweł Chmiel)   
- brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} (Seung-Woo Kim)   
- spi: stm32: fix reference leak in stm32_spi_resume (Zhang Qilong)   
- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)   
- ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)   
- spi: spi-mem: fix reference leak in spi_mem_access_start (Zhang Qilong)   
- drm/msm/dsi_pll_10nm: restore VCO rate during restore_state (Dmitry Baryshkov)   
- f2fs: call f2fs_get_meta_page_retry for nat page (Jaegeuk Kim)   
- spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)   
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (Jordan Niethe)   
- drm/amdgpu: fix build_coefficients() argument (Arnd Bergmann)   
- ARM: dts: aspeed: tiogapass: Remove vuart (Vijay Khemka)   
- ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode (Clément Péron)   
- crypto: inside-secure - Fix sizeof() mismatch (Colin Ian King)   
- crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)   
- crypto: talitos - Endianess in current_desc_hdr() (Christophe Leroy)   
- drm/amdgpu: fix incorrect enum type (Arnd Bergmann)   
- sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)   
- sched/deadline: Fix sched_dl_global_validate() (Peng Liu)   
- x86/apic: Fix x2apic enablement without interrupt remapping (David Woodhouse)   
- ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)   
- x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)   
- RDMA/rxe: Compute PSN windows correctly (Bob Pearson)   
- ARM: dts: aspeed: s2600wf: Fix VGA memory region location (Joel Stanley)   
- selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)   
- rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (Dan Carpenter)   
- RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)   
- Revert "i2c: i2c-qcom-geni: Fix DMA transfer race" (Douglas Anderson)   
- soc: qcom: geni: More properly switch to DMA mode (Douglas Anderson)   
- soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)   
- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)   
- arm64: dts: renesas: cat875: Remove rxc-skew-ps from ethernet-phy node (Biju Das)   
- arm64: dts: renesas: hihope-rzg2-ex: Drop rxc-skew-ps from ethernet-phy node (Biju Das)   
- drm/tve200: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/mcde: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
- drm/aspeed: Fix Kconfig warning &amp; subsequent build errors (Randy Dunlap)   
- drm/gma500: fix double free of gma_connector (Tom Rix)   
- md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)   
- crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)   
- media: msi2500: assign SPI bus number dynamically (Antti Palosaari)   
- quota: Sanity-check quota file headers on load (Jan Kara)   
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)   
- serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)   
- HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)   
- scsi: megaraid_sas: Check user-provided offsets (Arnd Bergmann)   
- coresight: etb10: Fix possible NULL ptr dereference in etb_enable_perf() (Sai Prakash Ranjan)   
- coresight: tmc-etr: Fix barrier packet insertion for perf buffer (Suzuki K Poulose)   
- coresight: tmc-etr: Check if page is valid before dma_map_page() (Mao Jinlong)   
- coresight: tmc-etf: Fix NULL ptr dereference in tmc_enable_etf_sink_perf() (Sai Prakash Ranjan)   
- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)   
- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)   
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)   
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)   
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)   
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)   
- USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)   
- USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)   
- usb: mtu3: fix memory corruption in mtu3_debugfs_regset() (Dan Carpenter)   
- soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)   
- kbuild: avoid split lines in .mod files (Masahiro Yamada)   
- perf/x86/intel: Check PEBS status correctly (Stephane Eranian)   
- drm/amd/display: Init clock value by current vbios CLKs (Brandon Syu)   
- iwlwifi: pcie: add one missing entry for AX210 (Luca Coelho)   
- dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)   
- scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)   
- vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)   
- vxlan: Add needed_headroom for lower device (Sven Eckelmann)   
- arm64: syscall: exit userspace before unmasking exceptions (Mark Rutland)   
- habanalabs: put devices before driver removal (Ofir Bitton)   
- drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)   
- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)   
- drm/tegra: replace idr_init() by idr_init_base() (Deepak R Varma)   
- net: mvpp2: add mvpp2_phylink_to_port() helper (Russell King)   
- selftests: fix poll error in udpgro.sh (Paolo Abeni)   
- ixgbe: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: avoid premature Rx buffer reuse (Björn Töpel)   
- i40e: optimise prefetch page refcount (Li RongQing)   
- i40e: Refactor rx_bi accesses (Björn Töpel)   
- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)   
- selftests/bpf/test_offload.py: Reset ethtool features after failed setting (Toke Høiland-Jørgensen)   
- netfilter: nft_ct: Remove confirmation check for NFT_CT_ID (Brett Mastbergen)   
- gpio: eic-sprd: break loop when getting NULL device resource (Chunyan Zhang)   
- Revert "gpio: eic-sprd: Use devm_platform_ioremap_resource()" (Baolin Wang)   
- afs: Fix memory leak when mounting with multiple source parameters (David Howells)   
- netfilter: nft_dynset: fix timeouts later than 23 days (Pablo Neira Ayuso)   
- netfilter: nft_compat: make sure xtables destructors have run (Florian Westphal)   
- netfilter: x_tables: Switch synchronization to RCU (Subash Abhinov Kasiviswanathan)   
- pinctrl: aspeed: Fix GPIO requests on pass-through banks (Andrew Jeffery)   
- blk-mq: In blk_mq_dispatch_rq_list() "no budget" is a reason to kick (Douglas Anderson)   
- block: factor out requeue handling from dispatch code (Johannes Thumshirn)   
- block: Simplify REQ_OP_ZONE_RESET_ALL handling (Damien Le Moal)   
- clk: renesas: r9a06g032: Drop __packed for portability (Geert Uytterhoeven)   
- can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)   
- xsk: Replace datagram_poll by sock_poll_wait (Xuan Zhuo)   
- xsk: Fix xsk_poll()'s return type (Luc Van Oostenryck)   
- scsi: bnx2i: Requires MMU (Randy Dunlap)   
- gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)   
- gpio: zynq: fix reference leak in zynq_gpio functions (Qinglang Miao)   
- PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter (Zhang Qilong)   
- ARM: dts: imx6qdl-kontron-samx6i: fix I2C_PM scl pin (Bernd Bauer)   
- ARM: dts: imx6qdl-wandboard-revd1: Remove PAD_GPIO_6 from enetgrp (Fabio Estevam)   
- ARM: dts: sun7i: pcduino3-nano: enable RGMII RX/TX delay on PHY (Adam Sampson)   
- ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)   
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)   
- pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)   
- ARM: dts: sun8i: v40: bananapi-m2-berry: Fix ethernet node (Pablo Greco)   
- ARM: dts: sun8i: r40: bananapi-m2-berry: Fix dcdc1 regulator (Pablo Greco)   
- RAS/CEC: Correct ce_add_elem()'s returned values (William Roche)  [Orabug: 32774757]  
- bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk)  [Orabug: 32759959]  {CVE-2021-29154} 
- KVM: SVM: avoid infinite loop on NPF from bad address (John Donnelly)  [Orabug: 32759746]  {CVE-2020-36310} 
- uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 32795492]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.1.el8uek]" date="1620043200">- LTS tag: v5.4.90 (Jack Vogel)   
- regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() (Dan Carpenter)   
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)   
- block: fix use-after-free in disk_part_iter_next (Ming Lei)   
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier)   
- net: mvpp2: disable force link UP during port init procedure (Stefan Chulski)   
- regulator: qcom-rpmh-regulator: correct hfsmps515 definition (Dmitry Baryshkov)   
- wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)   
- regmap: debugfs: Fix a memory leak when calling regmap_attach_dev (Xiaolei Wang)   
- net/mlx5e: Fix two double free cases (Dinghao Liu)   
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)   
- iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)   
- lightnvm: select CONFIG_CRC32 (Arnd Bergmann)   
- block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)   
- wil6210: select CONFIG_CRC32 (Arnd Bergmann)   
- qed: select CONFIG_CRC32 (Arnd Bergmann)   
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)   
- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() (Shravya Kumbham)   
- dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)   
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function (Christophe JAILLET)   
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated (Hans de Goede)   
- spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)   
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)   
- can: kvaser_pciefd: select CONFIG_CRC32 (Arnd Bergmann)   
- can: m_can: m_can_class_unregister(): remove erroneous m_can_clk_stop() (Marc Kleine-Budde)   
- can: tcan4x5x: fix bittiming const, use common bittiming from m_can driver (Marc Kleine-Budde)   
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk() (Dan Carpenter)   
- i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)   
- ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)   
- HID: wacom: Fix memory leakage caused by kfifo_alloc (Ping Cheng)   
- iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)   
- vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)   
- exfat: Month timestamp metadata accidentally incremented (Valdis Kletnieks)   
- x86/resctrl: Don't move a task to the same resource group (Fenghua Yu)   
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)   
- chtls: Fix chtls resources release sequence (Ayush Sawal)   
- chtls: Added a check to avoid NULL pointer dereference (Ayush Sawal)   
- chtls: Replace skb_dequeue with skb_peek (Ayush Sawal)   
- chtls: Fix panic when route to peer not configured (Ayush Sawal)   
- chtls: Remove invalid set_tcb call (Ayush Sawal)   
- chtls: Fix hardware tid leak (Ayush Sawal)   
- net/mlx5e: ethtool, Fix restriction of autoneg with 56G (Aya Levin)   
- net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address (Mark Zhang)   
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE (Aleksander Jan Bajkowski)   
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (Julian Wiedmann)   
- nexthop: Unlink nexthop group entry in error path (Ido Schimmel)   
- nexthop: Fix off-by-one error in error path (Ido Schimmel)   
- octeontx2-af: fix memory leak of lmac and lmac-&gt;name (Colin Ian King)   
- net: ip: always refragment ip defragmented packets (Florian Westphal)   
- net: fix pmtu check in nopmtudisc mode (Florian Westphal)   
- tools: selftests: add test for changing routes with PTMU exceptions (Sean Tranchetti)   
- net: ipv6: fib: flush exceptions when purging route (Sean Tranchetti)   
- net/sonic: Fix some resource leaks in error handling paths (Christophe JAILLET)   
- net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)   
- net: stmmac: dwmac-sun8i: Balance internal PHY power (Samuel Holland)   
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (Samuel Holland)   
- net: hns3: fix a phy loopback fail issue (Yonglong Liu)   
- net: hns3: fix the number of queues actually used by ARQ (Yufeng Mo)   
- net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppänen)   
- vfio iommu: Add dma available capability (Matthew Rosato)   
- x86/asm/32: Add ENDs to some functions and relabel with SYM_CODE_* (Jiri Slaby)   
- LTS tag: v5.4.89 (Jack Vogel)   
- scsi: target: Fix XCOPY NAA identifier lookup (David Disseldorp)   {CVE-2020-28374} 
- KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)   
- x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)   
- netfilter: nft_dynset: report EOPNOTSUPP on missing set feature (Pablo Neira Ayuso)   
- netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)   
- netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)   
- netfilter: x_tables: Update remaining dereference to RCU (Subash Abhinov Kasiviswanathan)   
- drm/i915: clear the gpu reloc batch (Matthew Auld)   
- dmabuf: fix use-after-free of dmabuf's file-&gt;f_inode (Charan Teja Reddy)   
- Revert "device property: Keep secondary firmware node secondary by type" (Bard Liao)   
- btrfs: send: fix wrong file path when there is an inode with a pending rmdir (Filipe Manana)   
- ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256. (PeiSen Hou)   
- ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 (Kai-Heng Feng)   
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)   
- ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)   
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (Takashi Iwai)   
- kvm: check tlbs_dirty directly (Lai Jiangshan)   
- x86/mm: Fix leak of pmd ptlock (Dan Williams)   
- USB: serial: keyspan_pda: remove unused variable (Johan Hovold)   
- usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)   
- usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)   
- usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)   
- USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)   
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani)   
- usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)   
- usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)   
- usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)   
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)   
- USB: usblp: fix DMA to stack (Johan Hovold)   
- USB: yurex: fix control-URB timeout handling (Johan Hovold)   
- USB: serial: option: add Quectel EM160R-GL (Bjørn Mork)   
- USB: serial: option: add LongSung M5710 module support (Daniel Palmer)   
- USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)   
- usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)   
- usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)   
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)   
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)   
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)   
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa)   
- USB: cdc-acm: blacklist another IR Droid device (Sean Young)   
- usb: gadget: enable super speed plus (taehyun.cho)   
- staging: mt7621-dma: Fix a resource leak in an error handling path (Christophe JAILLET)   
- powerpc: Handle .text.{hot,unlikely}.* in linker script (Nathan Chancellor)   
- crypto: asym_tpm: correct zero out potential secrets (Greg Kroah-Hartman)   
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)   
- Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close (Hans de Goede)   
- kbuild: don't hardcode depmod path (Dominique Martinet)   
- net/sched: sch_taprio: ensure to reset/destroy all child qdiscs (Davide Caratti)   
- ionic: account for vlan tag len in rx buffer len (Shannon Nelson)   
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)   
- net: usb: qmi_wwan: add Quectel EM160R-GL (Bjørn Mork)   
- CDC-NCM: remove "connected" log message (Roland Dreier)   
- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (Martin Blumenstingl)   
- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (Martin Blumenstingl)   
- r8169: work around power-saving bug on some chip versions (Heiner Kallweit)   
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)   
- erspan: fix version 1 check in gre_parse_header() (Cong Wang)   
- net: hns: fix return value check in __lb_other_process() (Yunjian Wang)   
- net: sched: prevent invalid Scell_log shift count (Randy Dunlap)   
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)   
- net: mvpp2: fix pkt coalescing int-threshold configuration (Stefan Chulski)   
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (Yunjian Wang)   
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)   
- net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_rxqs (Antoine Tenart)   
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)   
- net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)   
- net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)   
- net/ncsi: Use real net-device for response handler (John Wang)   
- virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)   
- qede: fix offload for IPIP tunnel packets (Manish Chopra)   
- net: ethernet: mvneta: Fix error handling in mvneta_probe (Dinghao Liu)   
- ibmvnic: continue fatal error reset after passive init (Lijun Pan)   
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)   
- atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)   
- ethernet: ucc_geth: set dev-&gt;max_mtu to 1518 (Rasmus Villemoes)   
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)   
- net: systemport: set dev-&gt;max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)   
- net: mvpp2: prs: fix PPPoE with ipv6 packet parse (Stefan Chulski)   
- net: mvpp2: Add TCAM entry to drop flow control pause frames (Stefan Chulski)   
- iavf: fix double-release of rtnl_lock (Jakub Kicinski)   
- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (Sylwester Dziedziuch)   
- proc: fix lookup in /proc/net subdirectories after setns(2) (Alexey Dobriyan)   
- proc: change -&gt;nlink under proc_subdir_lock (Alexey Dobriyan)   
- depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)   
- lib/genalloc: fix the overflow when size is too big (Huang Shijie)   
- scsi: scsi_transport_spi: Set RQF_PM for domain validation commands (Bart Van Assche)   
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)   
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk -&gt;poweroff() (Adrian Hunter)   
- scsi: ufs: Fix wrong print message in dev_err() (Bean Huo)   
- workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)   
- LTS tag: v5.4.88 (Jack Vogel)   
- exec: Transform exec_update_mutex into a rw_semaphore (Eric W. Biederman)   
- rwsem: Implement down_read_interruptible (Eric W. Biederman)   
- rwsem: Implement down_read_killable_nested (Eric W. Biederman)   
- perf: Break deadlock involving exec_update_mutex (peterz@infradead.org)   
- iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)   
- kdev_t: always inline major/minor helper functions (Josh Poimboeuf)   
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() (Yu Kuai)   
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc (Tudor Ambarus)   
- Revert "mtd: spinand: Fix OOB read" (Felix Fietkau)   
- Revert "drm/amd/display: Fix memory leaks in S3 resume" (Alex Deucher)   
- LTS tag: v5.4.87 (Jack Vogel)   
- dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)   
- ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)   
- tick/sched: Remove bogus boot "safety" check (Thomas Gleixner)   
- um: ubd: Submit all data segments atomically (Gabriel Krisman Bertazi)   
- fs/namespace.c: WARN if mnt_count has become negative (Eric Biggers)   
- module: delay kobject uevent until after module init call (Jessica Yu)   
- f2fs: avoid race condition for shrinker count (Jaegeuk Kim)   
- NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode (Trond Myklebust)   
- i3c master: fix missing destroy_workqueue() on error in i3c_master_register (Qinglang Miao)   
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)   
- rtc: pl031: fix resource leak in pl031_probe (Zheng Liang)   
- quota: Don't overflow quota file offsets (Jan Kara)   
- module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)   
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)   
- fcntl: Fix potential deadlock in send_sig{io, urg}() (Boqun Feng)   
- bfs: don't use WARNING: string when it's just info. (Randy Dunlap)   
- ALSA: rawmidi: Access runtime-&gt;avail always in spinlock (Takashi Iwai)   
- ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)   
- f2fs: fix shift-out-of-bounds in sanity_check_raw_super() (Chao Yu)   
- media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)   
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)   
- reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)   
- Bluetooth: hci_h5: close serdev device and free hu in h5_close (Anant Thazhemadam)   
- scsi: cxgb4i: Fix TLS dependency (Randy Dunlap)   
- cgroup: Fix memory leak when parsing multiple source parameters (Qinglang Miao)   
- of: fix linker-section match-table corruption (Johan Hovold)   
- null_blk: Fix zone size initialization (Damien Le Moal)   
- tools headers UAPI: Sync linux/const.h with the kernel headers (Arnaldo Carvalho de Melo)   
- uapi: move constants from &lt;linux/kernel.h&gt; to &lt;linux/const.h&gt; (Petr Vorel)   
- scsi: block: Fix a race in the runtime power management code (Bart Van Assche)   
- jffs2: Fix NULL pointer dereference in rp_size fs option parsing (Jamie Iles)   
- jffs2: Allow setting rp_size to zero during remounting (lizhe)   
- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)   
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Paolo Bonzini)   
- KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Paolo Bonzini)   
- ext4: don't remount read-only with errors=continue on reboot (Jan Kara)   
- btrfs: fix race when defragmenting leads to unnecessary IO (Filipe Manana)   
- vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)   
- fscrypt: remove kernel-internal constants from UAPI header (Eric Biggers)   
- fscrypt: add fscrypt_is_nokey_name() (Eric Biggers)   
- f2fs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ubifs: prevent creating duplicate encrypted filenames (Eric Biggers)   
- ext4: prevent creating duplicate encrypted filenames (Eric Biggers)   
- thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed (Zhuguangqing)   
- md/raid10: initialize r10_bio-&gt;read_slot before use. (Kevin Vigor)   
- net/sched: sch_taprio: reset child qdiscs before freeing them (Davide Caratti)   
- uek/ol/config-aarch64: Update uek6 kernel with RPI IOT configs (Vijay Kumar)  [Orabug: 32833361]  
- dts/bcm2711: set gpio6 to level=0 and pull=down (Vijay Kumar)  [Orabug: 32833361]  
- dts: bcm283x: Fix vc4's firmware bus DMA limitations (Nicolas Saenz Julienne)  [Orabug: 32833361]  
- uek6/config-aarch64-rpi: Enable CONFIG_RTC_DRV_ABEOZ9 (Vijay Kumar)  [Orabug: 32833361]  
- rtc/ab-eoz9: Add support for ABEOA9 SPI chip (Vijay Kumar)  [Orabug: 32833361]  
- rtc: abracon: add abeoa9 device id (Tom Saeger)  [Orabug: 32833361]  
- arm64/dts/bcm2711: Set SPI_CE0_N to output for GPIO8 (Vijay Kumar)  [Orabug: 32833361]  
- uek-rpm/ol8: Build rpi kernel (Tom Saeger)  [Orabug: 32833361]  
- uek-rpm: add rpi specific config (Tom Saeger)  [Orabug: 32833361]  
- firmware/raspberrypi: Notify firmware of a reboot (Phil Elwell)  [Orabug: 32833361]  
- firmware: raspberrypi: Report the fw variant during probe (Dave Stevenson)  [Orabug: 32833361]  
- raspberrypi-firmware: Export the general transaction function. (Eric Anholt)  [Orabug: 32833361]  
- firmware: bcm2835: Support ARCH_BCM270x (Noralf Trønnes)  [Orabug: 32833361]  
- Add NO_WAIT_RESP flag (Phil Elwell)  [Orabug: 32833361]  
- bcm2835-dma: Add proper 40-bit DMA support (Phil Elwell)  [Orabug: 32833361]  
- dmaengine: Add support for BCM2708 (Florian Meier)  [Orabug: 32833361]  
- dmaengine: bcm2835: Load driver early and support legacy API (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: char: broadcom: Add vcio module (Noralf Trønnes)  [Orabug: 32833361]  
- RPi: Add /dev/gpiomem device for rootless user GPIO access (Luke Wren)  [Orabug: 32833361]  
- RPi: vcsm: VideoCore shared memory service for BCM2835 (Tim Gover)  [Orabug: 32833361]  
- RPi: vc_mem: Add vc_mem driver for querying firmware memory addresses (popcornmix)  [Orabug: 32833361]  
- RPi4/dts: set alias for i2c device (Vijay Kumar)  [Orabug: 32833361]  
- dts: Enable i2c4 for RPi4 (Vijay Kumar)  [Orabug: 32833361]  
- RPi:dts/bcm2711: Enable pwm for RPi4 board (Vijay Kumar)  [Orabug: 32833361]  
- RPi: transplant rpi_backlight to it's expected place (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 for BCM2711 (Andrew Thomas)  [Orabug: 32833361]  
- RPi: pinctrl-bcm2835: Set base to 0 give expected gpio numbering (notro)  [Orabug: 32833361]  
- RPi: spidev: add rpi4 spidev0 (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: rpi4 add gpiomem (Tom Saeger)  [Orabug: 32833361]  
- RPi: dts: enable rpi4 touchscreen, i2c, and spi (Tom Saeger)  [Orabug: 32833361]  
- RPi: rpi_display: add backlight driver and overlay (P33M)  [Orabug: 32833361]  
- HID: quirks: Add quirk for Lenovo optical mouse (Saeed Mirzamohammadi)  [Orabug: 32820273]  
- x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817184]  
- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (Kan Liang)  [Orabug: 32806848]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.2.el8uek]" date="1620129600">- vfio/pci: restore remap elision logic in vfio_pci_mmap_fault() (Ankur Arora)  [Orabug: 32478548]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.3.el8uek]" date="1620475200">- LTS tag: v5.4.94 (Jack Vogel)   
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)   
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)   
- dm integrity: conditionally disable "recalculate" feature (Mikulas Patocka)   
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (Jean-Philippe Brucker)   
- SMB3.1.1: do not log warning message if server doesn't populate salt (Steve French)   
- arm64: mm: use single quantity to represent the PA to VA translation (Ard Biesheuvel)   
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)   
- io_uring: Fix current-&gt;fs handling in io_sq_wq_submit_work() (Nicolai Stange)   
- HID: wacom: Correct NULL dereference on AES pen proximity (Jason Gerecke)   
- Revert "mm/slub: fix a memory leak in sysfs_slab_add()" (Wang Hai)   
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)   
- LTS tag: v5.4.93 (Jack Vogel)   
- tcp: fix TCP_USER_TIMEOUT with zero window (Enke Chen)   
- net: dsa: b53: fix an off by one in checking "vlan-&gt;vid" (Dan Carpenter)   
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (Tariq Toukan)   
- net: mscc: ocelot: allow offloading of bridge on top of LAG (Vladimir Oltean)   
- ipv6: set multicast flag on the multicast route (Matteo Croce)   
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)   
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)   
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)   
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)   
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow (Lecopzer Chen)   
- kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (Lecopzer Chen)   
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)   
- lightnvm: fix memory leak when submit fails (Pan Bian)   
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)   
- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (Rasmus Villemoes)   
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)   
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)   
- x86/cpu/amd: Set __max_die_per_package on AMD (Yazen Ghannam)   
- pinctrl: ingenic: Fix JZ4760 support (Paul Cercueil)   
- driver core: Extend device_is_dependent() (Rafael J. Wysocki)   
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)   
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)   
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)   
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)   
- usb: gadget: aspeed: fix stop dma register setting. (Ryan Chen)   
- USB: ehci: fix an interrupt calltrace error (Longfang Liu)   
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)   
- serial: mvebu-uart: fix tx lost characters at power off (Pali Rohár)   
- stm class: Fix module init return on allocation failure (Wang Hui)   
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)   
- x86/mmx: Use KFPU_387 for MMX string operations (Andy Lutomirski)   
- x86/topology: Make __max_die_per_package available unconditionally (Borislav Petkov)   
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (Andy Lutomirski)   
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)   
- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (Ronnie Sahlberg)   
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)   
- can: peak_usb: fix use after free bugs (Vincent Mailhol)   
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)   
- can: dev: can_restart: fix use after free bug (Vincent Mailhol)   
- selftests: net: fib_tests: remove duplicate log test (Hangbin Liu)   
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (Hans de Goede)   
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)   
- powerpc: Fix alignment bug within the init sections (Ariel Marcovitch)   
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann)   
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (Billy Tsai)   
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (Youling Tang)   
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (Ben Skeggs)   
- drm/nouveau/mmu: fix vram heap sizing (Ben Skeggs)   
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)   
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)   
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)   
- drm/amd/display: Fix to be able to stop crc calculation (Wayne Lin)   
- drm/amdgpu/psp: fix psp gfx ctrl cmds (Victor Zhao)   
- riscv: defconfig: enable gpio support for HiFive Unleashed (Sagar Shrikant Kadam)   
- dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (Sagar Shrikant Kadam)   
- x86/xen: Add xen_no_vector_callback option to test PCI INTX delivery (David Woodhouse)   
- xen: Fix event channel callback via INTX/GSI (David Woodhouse)   
- arm64: make atomic helpers __always_inline (Arnd Bergmann)   
- clk: tegra30: Add hda clock default rates to clock driver (Peter Geis)   
- HID: Ignore battery for Elan touchscreen on ASUS UX550 (Seth Miller)   
- HID: logitech-dj: add the G602 receiver (Filipe Laíns)   
- riscv: Fix sifive serial driver (Damien Le Moal)   
- riscv: Fix kernel time_init() (Damien Le Moal)   
- scsi: sd: Suppress spurious errors when WRITE SAME is being disabled (Ewan D. Milne)   
- scsi: qedi: Correct max length of CHAP secret (Nilesh Javali)   
- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)   
- dm integrity: select CRYPTO_SKCIPHER (Anthony Iliopoulos)   
- HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device (Kai-Heng Feng)   
- ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)   
- drm/i915/gt: Prevent use of engine-&gt;wa_ctx after error (Chris Wilson)   
- drm/syncobj: Fix use-after-free (Daniel Vetter)   
- drm/atomic: put state on error path (Pan Bian)   
- dm integrity: fix a crash if "recalculate" used without "internal_hash" (Mikulas Patocka)   
- dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)   
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)   
- mmc: core: don't initialize block size from ext_csd if not present (Peter Collingbourne)   
- btrfs: send: fix invalid clone operations when cloning from the same file and root (Filipe Manana)   
- btrfs: don't clear ret in btrfs_start_dirty_block_groups (Josef Bacik)   
- btrfs: fix lockdep splat in btrfs_recover_relocation (Josef Bacik)   
- btrfs: don't get an EINTR during drop_snapshot for reloc (Josef Bacik)   
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)   
- ALSA: hda/via: Add minimum mute flag (Takashi Iwai)   
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)   
- platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 (Jiaxun Yang)   
- platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes (Heikki Krogerus)   
- i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)   
- LTS tag: v5.4.92 (Jack Vogel)   
- spi: cadence: cache reference clock rate during probe (Michael Hennerich)   
- mac80211: check if atf has been disabled in __ieee80211_schedule_txq (Lorenzo Bianconi)   
- mac80211: do not drop tx nulldata packets on encrypted links (Felix Fietkau)   
- tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)   
- net, sctp, filter: remap copy_from_user failure error (Daniel Borkmann)   
- rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)   
- net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)   
- net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski)   
- net: stmmac: Fixed mtu channged by cache aligned (David Wu)   
- rxrpc: Call state should be read with READ_ONCE() under some circumstances (Baptiste Lepers)   
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)   
- net: dcb: Validate netlink message in DCB handler (Petr Machata)   
- esp: avoid unneeded kmap_atomic call (Willem de Bruijn)   
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)   
- net: mvpp2: Remove Pause and Asym_Pause support (Stefan Chulski)   
- mlxsw: core: Increase critical threshold for ASIC thermal zone (Vadim Pasternak)   
- mlxsw: core: Add validation of transceiver temperature thresholds (Vadim Pasternak)   
- net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)   
- netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)   
- udp: Prevent reuseport_select_sock from reading uninitialized socks (Baptiste Lepers)   
- bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback (Mircea Cirjaliu)   
- bpf: Don't leak memory in bpf getsockopt when optlen == 0 (Stanislav Fomichev)   
- nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields)   
- spi: npcm-fiu: Disable clock in probe error path (Lukas Wunner)   
- spi: npcm-fiu: simplify the return expression of npcm_fiu_probe() (Qinglang Miao)   
- elfcore: fix building with clang (Arnd Bergmann)   
- xen/privcmd: allow fetching resource sizes (Roger Pau Monne)   
- compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)   
- usb: ohci: Make distrust_firmware param default to false (Hamish Martin)   
- LTS tag: v5.4.91 (Jack Vogel)   
- netfilter: nft_compat: remove flush counter optimization (Florian Westphal)   
- netfilter: nf_nat: Fix memleak in nf_nat_init (Dinghao Liu)   
- netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)   
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)   
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)   
- dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)   
- net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de)   
- iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() (Lu Baolu)   
- mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)   
- drm/i915/dsi: Use unconditional msleep for the panel_on_delay when there is no reset-deassert MIPI-sequence (Hans de Goede)   
- IB/mlx5: Fix error unwinding when set_has_smi_cap fails (Parav Pandit)   
- RDMA/mlx5: Fix wrong free of blue flame register on error (Mark Bloch)   
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded. (Michael Chan)   
- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)   
- RDMA/restrack: Don't treat as an error allocation ID wrapping (Leon Romanovsky)   
- ext4: fix superblock checksum failure when setting password salt (Jan Kara)   
- NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)   
- NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter (Trond Myklebust)   
- pNFS: Stricter ordering of layoutget and layoutreturn (Trond Myklebust)   
- pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)   
- pNFS: We want return-on-close to complete when evicting the inode (Trond Myklebust)   
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)   
- nvme-tcp: fix possible data corruption with bio merges (Sagi Grimberg)   
- ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)   
- ASoC: meson: axg-tdmin: fix axg skew offset (Jerome Brunet)   
- ASoC: meson: axg-tdm-interface: fix loopback (Jerome Brunet)   
- dump_common_audit_data(): fix racy accesses to -&gt;d_name (Al Viro)   
- perf intel-pt: Fix 'CPU too large' error (Adrian Hunter)   
- ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)   
- drm/msm: Call msm_init_vram before binding the gpu (Craig Tatlor)   
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)   
- usb: typec: Fix copy paste error for NVIDIA alt-mode description (Peter Robinson)   
- drm/amdgpu: fix a GPU hang issue when remove device (Dennis Li)   
- nvmet-rdma: Fix list_del corruption on queue establishment failure (Israel Rukshin)   
- nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN (Gopal Tiwari)   
- selftests: fix the return value for UDP GRO test (Po-Hsu Lin)   
- net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)   
- misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)   
- arch/arc: add copy_user_page() to &lt;asm/page.h&gt; to fix build error on ARC (Randy Dunlap)   
- bfq: Fix computation of shallow depth (Jan Kara)   
- lib/raid6: Let $(UNROLL) rules work with macOS userland (John Millikin)   
- hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values (Uwe Kleine-König)   
- habanalabs: Fix memleak in hl_device_reset (Dinghao Liu)   
- habanalabs: register to pci shutdown callback (Oded Gabbay)   
- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)   
- regulator: bd718x7: Add enable times (Guido Günther)   
- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)   
- netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin)   
- ARC: build: move symlink creation to arch/arc/Makefile to avoid race (Masahiro Yamada)   
- ARC: build: add boot_targets to PHONY (Masahiro Yamada)   
- ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)   
- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)   
- dm integrity: fix flush with external metadata device (Mikulas Patocka)   
- cifs: fix interrupted close commands (Paulo Alcantara)   
- smb3: remove unused flag passed into close functions (Steve French)   
- ext4: don't leak old mountpoint samples (Theodore Ts'o)   
- ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)   
- drm/i915/backlight: fix CPU mode backlight takeover on LPT (Jani Nikula)   
- btrfs: tree-checker: check if chunk item end overflows (Su Yue)   
- r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)   
- dm integrity: fix the maximum number of arguments (Mikulas Patocka)   
- dm snapshot: flush merged data before committing metadata (Akilesh Kailash)   
- dm raid: fix discard limits for raid1 (Mike Snitzer)   
- mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)   
- ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)   
- RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() (Tom Rix)   
- MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)   
- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)   
- mips: lib: uncached: fix non-standard usage of variable 'sp' (Anders Roxell)   
- mips: fix Section mismatch in reference (Anders Roxell)   
- tracing/kprobes: Do the notrace functions check without kprobes on ftrace (Masami Hiramatsu)   
- x86/hyperv: check cpu mask after interrupt has been disabled (Wei Liu)   
- ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)   
- btrfs: prevent NULL pointer dereference in extent_io_tree_panic (Su Yue)   
- kbuild: enforce -Werror=return-type (Olaf Hering)   
- IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32852998]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.4.el8uek]" date="1621080000">- uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi)  [Orabug: 32837542]  
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley)  [Orabug: 32867569]  
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft))  [Orabug: 32867569]  
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley)  [Orabug: 32867569]  
- uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour)  [Orabug: 32816428]</changelog>
  <changelog author="Jack Vogel &lt;jack.vogel@oracle.com&gt; [5.4.17-2102.202.5.el8uek]" date="1621684800">- sctp: delay auto_asconf init until binding the first addr (Xin Long)  [Orabug: 32907967]  {CVE-2021-23133} {CVE-2021-23133} 
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860491]  {CVE-2021-31916} 
- uek-rpm: update kABI lists for the new symbols (Saeed Mirzamohammadi)  [Orabug: 32883836]  
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements)  [Orabug: 32888143]  
- scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (James Smart)  [Orabug: 32827840]</changelog>
</package>
<package pkgid="9a364fe2f3371d6e504cd98337cfed4e876999d65796576208bcd156fa75a79b" name="libgcrypt" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="4.0.1.el8"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.1-3" date="1512475200">- do not try to access() /dev/urandom either if getrandom() works</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.2-1" date="1513857600">- new upstream version 1.8.2</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.2-2" date="1517918400">- fix behavior when getrandom syscall is not present (#1542453)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-1" date="1528977600">- new upstream version 1.8.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-2" date="1531396800">- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-3" date="1559563200">- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-4" date="1561377600">- improve the continuous FIPS entropy test</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-3" date="1588075200">- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-4" date="1592222400">- add PBKDF2 selftest for FIPS POST</changelog>
  <changelog author="Federico Ramirez &lt;federico.r.ramirez@oracle.com&gt; 1.8.5-4.0.1" date="1625486400">- add API to provide hash calculation in RSA/DSA/ECDSA signature 
  operations [Orabug: 33081130]
- enable hardware acceleration features in FIPS mode [Orabug: 33157241]</changelog>
</package>
<package pkgid="f604a2ab08b52c1ac1627bfcf257dcbcbe18ae73040498bdd847f2b13b386cba" name="libgcrypt" arch="src">
  <version epoch="0" ver="1.8.5" rel="4.0.1.el8"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.1-3" date="1512475200">- do not try to access() /dev/urandom either if getrandom() works</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.2-1" date="1513857600">- new upstream version 1.8.2</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.2-2" date="1517918400">- fix behavior when getrandom syscall is not present (#1542453)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-1" date="1528977600">- new upstream version 1.8.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-2" date="1531396800">- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-3" date="1559563200">- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-4" date="1561377600">- improve the continuous FIPS entropy test</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-3" date="1588075200">- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-4" date="1592222400">- add PBKDF2 selftest for FIPS POST</changelog>
  <changelog author="Federico Ramirez &lt;federico.r.ramirez@oracle.com&gt; 1.8.5-4.0.1" date="1625486400">- add API to provide hash calculation in RSA/DSA/ECDSA signature 
  operations [Orabug: 33081130]
- enable hardware acceleration features in FIPS mode [Orabug: 33157241]</changelog>
</package>
<package pkgid="817aba6f5babbc33c22aa2c979190f020c36d5bf37612ac884b710133c99849d" name="libgcrypt" arch="aarch64">
  <version epoch="10" ver="1.8.5" rel="6.el8_fips"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.2-2" date="1517918400">- fix behavior when getrandom syscall is not present (#1542453)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-1" date="1528977600">- new upstream version 1.8.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-2" date="1531396800">- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-3" date="1559563200">- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-4" date="1561377600">- improve the continuous FIPS entropy test</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-3" date="1588075200">- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-4" date="1592222400">- add PBKDF2 selftest for FIPS POST</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-5" date="1620907200">- Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-6" date="1624881600">- Fix for CVE-2021-33560 (#1971421)
- Enable HW optimizations in FIPS (#1976137)
- Performance enchancements for ChaCha20 and Poly1305 (#1855231)</changelog>
  <changelog author="Federico Ram&#xED;rez &lt;federico.r.ramirez@oracle.com&gt; 1.8.5-6_fips" date="1647950400">- Add API to provide hash calculation in RSA/DSA/ECDSA signature
  operations [Orabug: 33081130]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="57a08b9ce8629983c0b07f3ee2108b7a247c26b1b39bb4227264ef5be650c7a9" name="libgcrypt" arch="src">
  <version epoch="10" ver="1.8.5" rel="6.el8_fips"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.2-2" date="1517918400">- fix behavior when getrandom syscall is not present (#1542453)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-1" date="1528977600">- new upstream version 1.8.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-2" date="1531396800">- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-3" date="1559563200">- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-4" date="1561377600">- improve the continuous FIPS entropy test</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-3" date="1588075200">- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-4" date="1592222400">- add PBKDF2 selftest for FIPS POST</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-5" date="1620907200">- Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-6" date="1624881600">- Fix for CVE-2021-33560 (#1971421)
- Enable HW optimizations in FIPS (#1976137)
- Performance enchancements for ChaCha20 and Poly1305 (#1855231)</changelog>
  <changelog author="Federico Ram&#xED;rez &lt;federico.r.ramirez@oracle.com&gt; 1.8.5-6_fips" date="1647950400">- Add API to provide hash calculation in RSA/DSA/ECDSA signature
  operations [Orabug: 33081130]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="52cf7765a2956a4028d374972cd7095496104ac6f560c28ed306f4e80310e6b5" name="libgcrypt" arch="aarch64">
  <version epoch="10" ver="1.8.5" rel="7.el8_6_fips"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-1" date="1528977600">- new upstream version 1.8.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-2" date="1531396800">- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-3" date="1559563200">- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-4" date="1561377600">- improve the continuous FIPS entropy test</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-3" date="1588075200">- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-4" date="1592222400">- add PBKDF2 selftest for FIPS POST</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-5" date="1620907200">- Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-6" date="1624881600">- Fix for CVE-2021-40528 (#1971421)
- Enable HW optimizations in FIPS (#1976137)
- Performance enchancements for ChaCha20 and Poly1305 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-7" date="1649160000">- Fix CVE-2021-33560 (#2018525)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; -  1.8.5-7_fips" date="1656676800">- Add API to provide hash calculation in RSA/DSA/ECDSA signature
  operations [Orabug: 33081130]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="e8fdc9802cbeb90650f663ce670e4c4f92e32c89d6f23a9f10dffddb283e5d30" name="libgcrypt" arch="src">
  <version epoch="10" ver="1.8.5" rel="7.el8_6_fips"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-1" date="1528977600">- new upstream version 1.8.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-2" date="1531396800">- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-3" date="1559563200">- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-4" date="1561377600">- improve the continuous FIPS entropy test</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-3" date="1588075200">- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-4" date="1592222400">- add PBKDF2 selftest for FIPS POST</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-5" date="1620907200">- Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-6" date="1624881600">- Fix for CVE-2021-40528 (#1971421)
- Enable HW optimizations in FIPS (#1976137)
- Performance enchancements for ChaCha20 and Poly1305 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-7" date="1649160000">- Fix CVE-2021-33560 (#2018525)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; -  1.8.5-7_fips" date="1656676800">- Add API to provide hash calculation in RSA/DSA/ECDSA signature
  operations [Orabug: 33081130]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="a8704fa9808d4e31912ca7fe6fc8fad8765dbafe36a9eccea08a58e202f09c9e" name="libgcrypt-devel" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="4.0.1.el8"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.1-3" date="1512475200">- do not try to access() /dev/urandom either if getrandom() works</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.2-1" date="1513857600">- new upstream version 1.8.2</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.2-2" date="1517918400">- fix behavior when getrandom syscall is not present (#1542453)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-1" date="1528977600">- new upstream version 1.8.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-2" date="1531396800">- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-3" date="1559563200">- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-4" date="1561377600">- improve the continuous FIPS entropy test</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-3" date="1588075200">- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-4" date="1592222400">- add PBKDF2 selftest for FIPS POST</changelog>
  <changelog author="Federico Ramirez &lt;federico.r.ramirez@oracle.com&gt; 1.8.5-4.0.1" date="1625486400">- add API to provide hash calculation in RSA/DSA/ECDSA signature 
  operations [Orabug: 33081130]
- enable hardware acceleration features in FIPS mode [Orabug: 33157241]</changelog>
</package>
<package pkgid="4ac220f46233d5af73bf52c043a9aa2ed907d6c1f88569c37df1a82d5b8d072d" name="libgcrypt-devel" arch="aarch64">
  <version epoch="10" ver="1.8.5" rel="6.el8_fips"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.2-2" date="1517918400">- fix behavior when getrandom syscall is not present (#1542453)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-1" date="1528977600">- new upstream version 1.8.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-2" date="1531396800">- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-3" date="1559563200">- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-4" date="1561377600">- improve the continuous FIPS entropy test</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-3" date="1588075200">- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-4" date="1592222400">- add PBKDF2 selftest for FIPS POST</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-5" date="1620907200">- Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-6" date="1624881600">- Fix for CVE-2021-33560 (#1971421)
- Enable HW optimizations in FIPS (#1976137)
- Performance enchancements for ChaCha20 and Poly1305 (#1855231)</changelog>
  <changelog author="Federico Ram&#xED;rez &lt;federico.r.ramirez@oracle.com&gt; 1.8.5-6_fips" date="1647950400">- Add API to provide hash calculation in RSA/DSA/ECDSA signature
  operations [Orabug: 33081130]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="9c9a7e1cc475d1df8dc4e02e54172b37c900905d4aac60c0440c8e81175ddcdf" name="libgcrypt-devel" arch="aarch64">
  <version epoch="10" ver="1.8.5" rel="7.el8_6_fips"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-1" date="1528977600">- new upstream version 1.8.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-2" date="1531396800">- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-3" date="1559563200">- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-4" date="1561377600">- improve the continuous FIPS entropy test</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-3" date="1588075200">- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-4" date="1592222400">- add PBKDF2 selftest for FIPS POST</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-5" date="1620907200">- Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-6" date="1624881600">- Fix for CVE-2021-40528 (#1971421)
- Enable HW optimizations in FIPS (#1976137)
- Performance enchancements for ChaCha20 and Poly1305 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-7" date="1649160000">- Fix CVE-2021-33560 (#2018525)</changelog>
  <changelog author="Pooja Senthil Kumar &lt;pooja.senthil.kumar@oracle.com&gt; -  1.8.5-7_fips" date="1656676800">- Add API to provide hash calculation in RSA/DSA/ECDSA signature
  operations [Orabug: 33081130]
- Change Epoch from 1 to 10</changelog>
</package>
<package pkgid="b96706ce967fdf39beeeb4b7402b24e87fd490993ba272f301118d8d80416447" name="libkcapi" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="2.0.1.el8"/>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-15" date="1533816000">- Build and tests require perl</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-15_1" date="1533816001">- [RHEL] Apply 'Build and tests require perl'</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-16" date="1533816002">- Add missing dependencies to the tests package
- Update patch from upstream</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-16_1" date="1533816003">- [RHEL] Apply 'Add missing dependencies to the tests package'
- [RHEL] Apply 'Update patch from upstream'</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.1.5-1" date="1587988800">- [RHEL] Update to upstream version 1.1.5
- [RHEL] Sync with Fedora branch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.1.5-2" date="1588161600">- Drop the license from the doc subpackage to avoid conflicts</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.1.5-3" date="1588248000">- Enables building on old kernels [sync fix in Fedora from omosnance].
- This is required for covscans as they run on RHEL7 machines.</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.2.0-1" date="1590408000">- [RHEL] Update to upstream version 1.2.0</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.2.0-2" date="1590494400">- Fix double free issue in hasher()</changelog>
  <changelog author="EL Errata &lt;el-errata_ww@oracle.com&gt; - 1.2.0-2.0.1" date="1597233600">- Change distroname_ext in spec file to oracle</changelog>
</package>
<package pkgid="d94ed45ea05fc26cd436001047fbe6cd68e22fcac5120bc7915d0c45764859a5" name="libkcapi" arch="src">
  <version epoch="0" ver="1.2.0" rel="2.0.1.el8"/>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-15" date="1533816000">- Build and tests require perl</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-15_1" date="1533816001">- [RHEL] Apply 'Build and tests require perl'</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-16" date="1533816002">- Add missing dependencies to the tests package
- Update patch from upstream</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-16_1" date="1533816003">- [RHEL] Apply 'Add missing dependencies to the tests package'
- [RHEL] Apply 'Update patch from upstream'</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.1.5-1" date="1587988800">- [RHEL] Update to upstream version 1.1.5
- [RHEL] Sync with Fedora branch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.1.5-2" date="1588161600">- Drop the license from the doc subpackage to avoid conflicts</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.1.5-3" date="1588248000">- Enables building on old kernels [sync fix in Fedora from omosnance].
- This is required for covscans as they run on RHEL7 machines.</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.2.0-1" date="1590408000">- [RHEL] Update to upstream version 1.2.0</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.2.0-2" date="1590494400">- Fix double free issue in hasher()</changelog>
  <changelog author="EL Errata &lt;el-errata_ww@oracle.com&gt; - 1.2.0-2.0.1" date="1597233600">- Change distroname_ext in spec file to oracle</changelog>
</package>
<package pkgid="af9cc855a73a009fab5d88790f0f3bf3f5f73d88e71adf47c09cd2c27141f343" name="libkcapi-hmaccalc" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="2.0.1.el8"/>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-15" date="1533816000">- Build and tests require perl</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-15_1" date="1533816001">- [RHEL] Apply 'Build and tests require perl'</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-16" date="1533816002">- Add missing dependencies to the tests package
- Update patch from upstream</changelog>
  <changelog author="Ondrej Mosn&#xE1;&#x10D;ek &lt;omosnace@redhat.com&gt; - 1.1.1-16_1" date="1533816003">- [RHEL] Apply 'Add missing dependencies to the tests package'
- [RHEL] Apply 'Update patch from upstream'</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.1.5-1" date="1587988800">- [RHEL] Update to upstream version 1.1.5
- [RHEL] Sync with Fedora branch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.1.5-2" date="1588161600">- Drop the license from the doc subpackage to avoid conflicts</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.1.5-3" date="1588248000">- Enables building on old kernels [sync fix in Fedora from omosnance].
- This is required for covscans as they run on RHEL7 machines.</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.2.0-1" date="1590408000">- [RHEL] Update to upstream version 1.2.0</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.2.0-2" date="1590494400">- Fix double free issue in hasher()</changelog>
  <changelog author="EL Errata &lt;el-errata_ww@oracle.com&gt; - 1.2.0-2.0.1" date="1597233600">- Change distroname_ext in spec file to oracle</changelog>
</package>
<package pkgid="d974ef507137188ec6d93c7d738dd93b19d4d33966e2f6251812315cc38e967b" name="nettle" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="4.el8_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-4" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 3.3-5" date="1502280000">- Removed executables from the library to allow parallel installation
  of x86-64 and x86 packages. The executables had testing purpose, and
  may be re-introduced in a separate package if needed.</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 3.4-1" date="1511179200">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.4-4" date="1539691200">- Cover the gaps in annotation coverage for assembler sources
- Add .hmac checksums for FIPS mode integrity checking</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.4.1-1" date="1544529600">- New upstream release</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; - 3.4.1-2" date="1589544000">- Enable Intel CET support (#1737542)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.4.1-3" date="1617105600">- Port fixes for potential miscalculation in ecdsa_verify (#1942924)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.4.1-4" date="1617796800">- Fix patch application</changelog>
</package>
<package pkgid="9a12dcc769246962c9f853ef4fbed1b22adfd3320dc355185656896bdbeac53b" name="nettle" arch="src">
  <version epoch="0" ver="3.4.1" rel="4.el8_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-4" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 3.3-5" date="1502280000">- Removed executables from the library to allow parallel installation
  of x86-64 and x86 packages. The executables had testing purpose, and
  may be re-introduced in a separate package if needed.</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 3.4-1" date="1511179200">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.4-4" date="1539691200">- Cover the gaps in annotation coverage for assembler sources
- Add .hmac checksums for FIPS mode integrity checking</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.4.1-1" date="1544529600">- New upstream release</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; - 3.4.1-2" date="1589544000">- Enable Intel CET support (#1737542)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.4.1-3" date="1617105600">- Port fixes for potential miscalculation in ecdsa_verify (#1942924)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.4.1-4" date="1617796800">- Fix patch application</changelog>
</package>
<package pkgid="76d83dae7fc2276a5498a746d84aa64d586f5dd57ad661e892705e3b2da5c971" name="nettle-devel" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="4.el8_3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-4" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 3.3-5" date="1502280000">- Removed executables from the library to allow parallel installation
  of x86-64 and x86 packages. The executables had testing purpose, and
  may be re-introduced in a separate package if needed.</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 3.4-1" date="1511179200">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.4-4" date="1539691200">- Cover the gaps in annotation coverage for assembler sources
- Add .hmac checksums for FIPS mode integrity checking</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.4.1-1" date="1544529600">- New upstream release</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; - 3.4.1-2" date="1589544000">- Enable Intel CET support (#1737542)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.4.1-3" date="1617105600">- Port fixes for potential miscalculation in ecdsa_verify (#1942924)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.4.1-4" date="1617796800">- Fix patch application</changelog>
</package>
<package pkgid="2a7d6ee943aa8255ff17b870b898a8d8061c05ee804a071c4bb12a748dde24e9" name="nss" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="8bc2c893cc33da3988c9b4af150ee50a4b882a758dfe6aab22f4b8486b908558" name="nss" arch="src">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="b6f9abc9ad965b26fc0556a79aeeb3c2161cf54dba1a4e5fab5185f5cb5c7b3f" name="nss-devel" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="0c9e932596993890430378ef6fc5e7e13bec494d9ffc72bfc45d2c891bd6fb80" name="nss-softokn" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="2f43033ea2e7b108f27502ad05af8da086fb25d715cdc6a17411b26d0641313f" name="nss-softokn-devel" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="ba09ef9c1fea0e1eba2e0385e4e5849b94fcd965c7c0614557830c57a2f17027" name="nss-softokn-freebl" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="66d4a564a474d848c87a8955fd02a008fc624dfc422f73f4a3f435d7a1e328b1" name="nss-softokn-freebl-devel" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="da06944ec59245456586bec2775977ab47a528bc41a154036ce95e58ff1fb3cc" name="nss-sysinit" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="a9e825ed650c4c6a926bd055f4918dd1879fc93ba8a0ed5d4cbe16dcbc69b7d7" name="nss-tools" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="f60756251cfc3753ad345172ce2cf4817788080677aa32cb43631c5d079ccfd5" name="nss-util" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="6a8b772b5759b35eda918f8b2a69a24f585a21e021061064db0e756788ee53bb" name="nss-util-devel" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="17.el8_3"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-8" date="1596024000">- Disable Delegated Credentials for TLS</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-9" date="1596110400">- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-10" date="1596110401">- Disable dh timing test because it's unreliable on s390</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-11" date="1596110402">- Fix issue with upgradedb where upgradedb expects standard to
  generate dbm databases, not sql databases (default in RHEL8)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-12" date="1603108800">- fips need to reject small primes even if they are approved
- code to autodetect whether or not to use the cache needs to do so
  in a way that doesn't mess with filesystem negative file caching.
- add kdf selftests</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-13" date="1603713600">- Add OAEP interface so applications can wrap keys with RSA-OAEP
  rather than RSA-PKCS-1.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-14" date="1603972800">- Add support for enable/disable in policy. Now if your policy
  file has disallow=x enable=y it will act just like our other 
  libraries.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-15" date="1604491200">- Revert some policy changes the generate ABI runtime issues.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-16" date="1605787200">- Fix the following CVE
- CVE-2020-12403 chacha-poly issues
- CVE-2020-12400 constant time ECC.
- CVE-2020-6829  constant time ECC.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-17" date="1606996800">- Fix various corner cases with ike v1 app b support.</changelog>
</package>
<package pkgid="6ab514a9ba782868ade4f318a1852054313aa6ecfe1a139c7bbe1d23ff7544c2" name="openssl" arch="aarch64">
  <version epoch="1" ver="1.1.1g" rel="15.el8_3"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-5" date="1590580800">- Allow only well known DH groups in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-6" date="1591185600">- Add FIPS selftest for PBKDF2 and KBKDF</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-7" date="1591617600">- Disallow dropping Extended Master Secret extension
  on renegotiation
- Return alert from s_server if ALPN protocol does not match
- SHA1 is allowed in @SECLEVEL=2 only if allowed by
  TLS SigAlgs configuration</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-9" date="1592913600">- Rewire FIPS_drbg API to use the RAND_DRBG
- Use the well known DH groups in TLS even for 2048 and 1024 bit parameters</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-11" date="1595246400">- Further changes for SP 800-56A rev3 requirements</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-11.1" date="1604318400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-12" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1616587200">- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1616587201">- CVE-2021-3450 openssl: CA certificate check
  bypass with X509_V_FLAG_X509_STRICT</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-15" date="1616673600">- version bump</changelog>
</package>
<package pkgid="6c190b771b62b820e590110320e1f6345872fe7435ec86ac5a11db3453ccda96" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1g" rel="15.el8_3"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-5" date="1590580800">- Allow only well known DH groups in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-6" date="1591185600">- Add FIPS selftest for PBKDF2 and KBKDF</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-7" date="1591617600">- Disallow dropping Extended Master Secret extension
  on renegotiation
- Return alert from s_server if ALPN protocol does not match
- SHA1 is allowed in @SECLEVEL=2 only if allowed by
  TLS SigAlgs configuration</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-9" date="1592913600">- Rewire FIPS_drbg API to use the RAND_DRBG
- Use the well known DH groups in TLS even for 2048 and 1024 bit parameters</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-11" date="1595246400">- Further changes for SP 800-56A rev3 requirements</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-11.1" date="1604318400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-12" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1616587200">- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1616587201">- CVE-2021-3450 openssl: CA certificate check
  bypass with X509_V_FLAG_X509_STRICT</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-15" date="1616673600">- version bump</changelog>
</package>
<package pkgid="919f06870a466b3e383de2512e26c96306a9782b9eeb6b0120c702cc0a765ac6" name="openssl-devel" arch="aarch64">
  <version epoch="1" ver="1.1.1g" rel="15.el8_3"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-5" date="1590580800">- Allow only well known DH groups in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-6" date="1591185600">- Add FIPS selftest for PBKDF2 and KBKDF</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-7" date="1591617600">- Disallow dropping Extended Master Secret extension
  on renegotiation
- Return alert from s_server if ALPN protocol does not match
- SHA1 is allowed in @SECLEVEL=2 only if allowed by
  TLS SigAlgs configuration</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-9" date="1592913600">- Rewire FIPS_drbg API to use the RAND_DRBG
- Use the well known DH groups in TLS even for 2048 and 1024 bit parameters</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-11" date="1595246400">- Further changes for SP 800-56A rev3 requirements</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-11.1" date="1604318400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-12" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1616587200">- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1616587201">- CVE-2021-3450 openssl: CA certificate check
  bypass with X509_V_FLAG_X509_STRICT</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-15" date="1616673600">- version bump</changelog>
</package>
<package pkgid="ffc7220e226727ae3e5b04e119826056014b3cdde9858c020a5b46b8ff4bd89b" name="openssl-libs" arch="aarch64">
  <version epoch="1" ver="1.1.1g" rel="15.el8_3"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-5" date="1590580800">- Allow only well known DH groups in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-6" date="1591185600">- Add FIPS selftest for PBKDF2 and KBKDF</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-7" date="1591617600">- Disallow dropping Extended Master Secret extension
  on renegotiation
- Return alert from s_server if ALPN protocol does not match
- SHA1 is allowed in @SECLEVEL=2 only if allowed by
  TLS SigAlgs configuration</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-9" date="1592913600">- Rewire FIPS_drbg API to use the RAND_DRBG
- Use the well known DH groups in TLS even for 2048 and 1024 bit parameters</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-11" date="1595246400">- Further changes for SP 800-56A rev3 requirements</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-11.1" date="1604318400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-12" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1616587200">- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1616587201">- CVE-2021-3450 openssl: CA certificate check
  bypass with X509_V_FLAG_X509_STRICT</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-15" date="1616673600">- version bump</changelog>
</package>
<package pkgid="4e939a237508965477e92a498994933cc4aee8dd31ea05a6daced977b7e16ba6" name="openssl-perl" arch="aarch64">
  <version epoch="1" ver="1.1.1g" rel="15.el8_3"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-5" date="1590580800">- Allow only well known DH groups in the FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-6" date="1591185600">- Add FIPS selftest for PBKDF2 and KBKDF</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-7" date="1591617600">- Disallow dropping Extended Master Secret extension
  on renegotiation
- Return alert from s_server if ALPN protocol does not match
- SHA1 is allowed in @SECLEVEL=2 only if allowed by
  TLS SigAlgs configuration</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-9" date="1592913600">- Rewire FIPS_drbg API to use the RAND_DRBG
- Use the well known DH groups in TLS even for 2048 and 1024 bit parameters</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-11" date="1595246400">- Further changes for SP 800-56A rev3 requirements</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1g-11.1" date="1604318400">- Implemented new FIPS requirements in regards to KDF and DH selftests
- Disallow certificates with explicit EC parameters</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-12" date="1607083200">- Fix CVE-2020-1971 ediparty null pointer dereference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-13" date="1616587200">- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1616587201">- CVE-2021-3450 openssl: CA certificate check
  bypass with X509_V_FLAG_X509_STRICT</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-15" date="1616673600">- version bump</changelog>
</package>
</otherdata>