# changelog

author: Thomas Haller <thaller@redhat.com> - 1:1.41.6-1
changelog:
  - Update to 1.41.6 release (development)
  - add support for loopback interfaces (rh #2073512)
  - ovs: support VLAN trunks for OVS port (rh #2111959)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.41.7-1
changelog:
  - Update to 1.41.7 release (development)
  - macsec: fix tracking of parent ifindex (rh #2122564)
  - cloud-setup: set preserve-external-ip flag during reapply (rh #2132754)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.41.8-1
changelog:
  - Update to 1.41.8 release (development)
  - core: add support for equal-cost multi-path (ECMP) routes (rh #2081302)
  - device: preserve the DHCP lease during reapply (rh #2117352)
  - ovs: add support for 'other_config' settings (rh #2151455)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.41.90-1
changelog:
  - Update to 1.41.90 release (release candidate)
  - l3cfg: schedule an update after every commit-type/config-data register/unregister (rh #2158394)
  - all: add support for ovs-dpdk n-rxq-desc and n-txq-desc (rh #2156385)
  - core: fix consistency for internal cache for IPv6 routes (rh #2060684)


author: Lubomir Rintel <lkundrak@v3.sk> - - 1:1.41.91-1
changelog:
  - Update to 1.41.91 release (release candidate)
  - core: retry if a rtnetlink socket runs out of buffer space (rh #2154350)
  - dns: allow changing resolv.conf options alone via global-dns (rh #2019306)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.42.2-1
changelog:
  - Update to 1.42.2 release
  - fix hostname lookup from IPv6 address (rh #2167816)
  - add new connection property to remove the autogenerated local route rule (rh #2167805)
  - fix race condition while setting the MAC of a OVS interface (rh #2168477)
  - expose the DHCP IAID in the lease information (rh #2169869)


author: EL Errata <el-errata_ww@oracle.com> - 1.42.2-1.0.1
changelog:
  - disable MPTCP handling by default [Orabug: 34801142]
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Disable the build of NetworkManager-config-connectivity-* subpackage for 9.0


author: Tomas Orsava <torsava@redhat.com> - 5.4.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: David Sloboda <david.x.sloboda@oracle.com> - 5.4.1-6.0.1
changelog:
  - Rebuild with python-rpm-generators-12-8.el9 to automatically
    obsolete python39-foo packages [Orabug: 34704236]


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Al Stone <ahs3@redhat.com> - 20200925-1
changelog:
  - Update to 20200925 source tree
  - Completely revamp the old big-endian patches (maintainability was the goal).
    This results in a much larger patch set, but each patch is more clearly used
    for a specific purpose.
  - The acpinames command has been deprecated upstream; acpiexec provides 
    replacement functionality.


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Dean Nelson <dnelson@redhat.com> - 20210604-4
changelog:
  - Add in big-endian patches for PRMT, RGRT and SVKL tables.
  - Fix big-endian related prmt.asl compiler errors.


author: Dean Nelson <dnelson@redhat.com> - 20210604-5
changelog:
  - Backport 19b11f91660b ("Add the subtable CFMWS to the CEDT table").
  - Backport d9798f5275bb ("Fix Compile issue with CEDT and add template").
  - Backport 0914618b553d ("Automated cleanup; No functional changes").
  - Backport 7021087eedb0 ("Remove a duplicate of ACPI_SIG_CEDT").
  - Add in big-endian patch for CEDT tble.


author: Sumit Bose <sbose@redhat.com> - 0.9.0-6
changelog:
  - Include the latest upstream patches with use-ldaps fixes, man page
    improvements and a new sub-command to create managed service accounts


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-28
changelog:
  - bz2056320 - Using -hosts option does not work in RHEL 9
    - fix root offset error handling.
    - fix nonstrict fail handling of last offset mount.
    - dont fail on duplicate offset entry tree add.
    - fix loop under run in cache_get_offset_parent().
    - simplify cache_add() a little.
    - fix use after free in tree_mapent_delete_offset_tree().
    - fix memory leak in xdr_exports().
    - avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
    - fix sysconf(3) return handling.
    - remove rpcgen dependedncy, it hasn't been needed since rev 10.
  - Related: rhbz#2056320


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-29
changelog:
  - bz2056321 - autofs attempts unmount on directory in use
    - remove nonstrict parameter from tree_mapent_umount_offsets().
    - fix handling of incorrect return from umount_ent().
  - Resolves: rhbz#2056321


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-30
changelog:
  - bz2084108 - autofs is slow to mount when doing lookups returns multiple entries
    - make NFS version check flags consistent.
    - refactor get_nfs_info().
    - also require TCP_REQUESTED when setting NFS port.
    - bailout on rpc systemerror.
    - fix nfsv4 only mounts should not use rpcbind.


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-31
changelog:
  - bz2087535 - libnss_sss: threads stuck at sss_nss_lock from initgroups
    - dont use initgroups() at spawn.
    - comment out Patch1 and Patch2 since they have been merged into
      the distribution tar (and so are not applied).
  - Resolves: rhbz#2087535


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-32
changelog:
  - bz2122565 - automount -m crashes with Segmentation fault (core dumped)
    - fix invalid tsv access.
  - bz2126176 - autofs: %changelog entries are out of order
    - fix changelog date of out of order entry.
  - Resolves: rhbz#2122565 rhbz#2126176


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-33
changelog:
  - bz2131907 - autofs: missing unlock in sasl_do_kinit_ext_cc()
    - fix missing unlock in sasl_do_kinit_ext_cc().
  - Resolves: rhbz#2131907


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-34
changelog:
  - bz2147491 - segfault due to lookup_mod->context address being freed
    and reused while multiple threads were using it
    - fix parse module instance mutex naming.
    - serialise lookup module open and reinit.
    - coverity fix for invalid access.
    - fix hosts map deadlock on restart.
    - fix deadlock with hosts map reload.
    - fix memory leak in update_hosts_mounts().
  - Resolves: rhbz#2147491


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-35
changelog:
  - bz2145251 - RHEL9: automount does not handle null option string after
    "-" anymore
    - fix minus only option handling in concat_options().
  - Resolves: rhbz#2145251


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-36
changelog:
  - bz2149013 - autofs: errors in autofs-5.1.4-83.el8.x86_64 when restarting
    autofs with busy directories
    - fix incorrect path for is_mounted() in try_remount().
  - Resolves: rhbz#2149013


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
changelog:
  - Forward-port Oracle patches from 2.35.2-24.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-8.91.2.el9uek]
changelog:
  - RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch)  [Orabug: 35060575]  
  - net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch)  [Orabug: 35042697]  
  - sched/core: Remove sched_uek cmdline parameter (Konrad Rzeszutek Wilk)  [Orabug: 35049222]  
  - uek-misc: Initial version (Konrad Rzeszutek Wilk)  [Orabug: 35049222]  
  - treewide: Move the definition in a global file (Konrad Rzeszutek Wilk)  [Orabug: 35049222]  
  - treewide: Rename wake_affine_idle_pull into on_exadata (Konrad Rzeszutek Wilk)  [Orabug: 35049222]  
  - sched/core: Remove sched_uek=preempt (Konrad Rzeszutek Wilk)  [Orabug: 35049222]  
  - perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang)  [Orabug: 35038311]  
  - perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang)  [Orabug: 35038311]  
  - perf/x86/uncore: Ignore broken units in discovery table (Kan Liang)  [Orabug: 35038311]  
  - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang)  [Orabug: 35038311]  
  - perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang)  [Orabug: 35038311]  
  - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (Alexander Antonov)  [Orabug: 35038311]  
  - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (Alexander Antonov)  [Orabug: 35038311]  
  - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (Alexander Antonov)  [Orabug: 35038311]  
  - perf/x86/intel/uncore: Introduce UPI topology type (Alexander Antonov)  [Orabug: 35038311]  
  - perf/x86/intel/uncore: Get UPI NodeID and GroupID (Alexander Antonov)  [Orabug: 35038311]  
  - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (Alexander Antonov)  [Orabug: 35038311]  
  - perf/x86/intel/uncore: Generalize IIO topology support (Alexander Antonov)  [Orabug: 35038311]  
  - net/rds: Delegate fan-out to a background worker (Gerd Rausch)  [Orabug: 34994148]  
  - i40e: Add basic support for I710 devices (Stanislaw Grzeszczak)  [Orabug: 35059783]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-8.91.3.el9uek]
changelog:
  - Update README with UEK Text Description (Somasundaram Krishnasamy)  [Orabug: 35084845]  
  - uek-rpm: config-x86-64*: Disable CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (Alejandro Jimenez)  [Orabug: 35059109]  
  - Revert "RDMA/irdma: Fix warning, move switch variable into case" (Jack Vogel)  [Orabug: 35048858]  
  - Revert "RDMA/irdma: Move variable into switch case" (Jack Vogel)  [Orabug: 35048858]  
  - Revert "ACPI/IORT: Move variables in switch, fix for build warnings." (Jack Vogel)  [Orabug: 35048858]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-8.91.4.el9uek]
changelog:
  - selftests/vm: remove ARRAY_SIZE define from individual tests (Shuah Khan)  [Orabug: 35088471]  
  - selftests: Provide local define of __cpuid_count() (Reinette Chatre)  [Orabug: 35088471]  
  - tools: fix ARRAY_SIZE defines in tools and selftests hdrs (Shuah Khan)  [Orabug: 35088471]  
  - uek-rpm: aarch64 enable DETECT_HUNG_TASK (Tom Saeger)  [Orabug: 34580801]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-9.91.1.el9uek]
changelog:
  - uek-rpm: Add new modules to core rpm (Somasundaram Krishnasamy)  [Orabug: 35063942]  
  - certs: Reference revocation list for all keyrings (Eric Snowberg)  [Orabug: 35098234]  
  - uek-container: Drop unnecessary setting of CONFIG_DEBUG_SECTION_MISMATCH (Liam Merwick)  [Orabug: 35109824]  
  - uek-container: Pass binutils workaround via EXTRA_CFLAGS (Liam Merwick)  [Orabug: 35109824]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-9.96.2.el9uek]
changelog:
  - LTS version: v5.15.96 (Jack Vogel)   
  - bpf: add missing header file include (Linus Torvalds)   
  - Revert "net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs" (Vladimir Oltean)   
  - lib/Kconfig.debug: Allow BTF + DWARF5 with pahole 1.21+ (Nathan Chancellor)   
  - lib/Kconfig.debug: Use CONFIG_PAHOLE_VERSION (Nathan Chancellor)   
  - scripts/pahole-flags.sh: Use pahole-version.sh (Nathan Chancellor)   
  - kbuild: Add CONFIG_PAHOLE_VERSION (Nathan Chancellor)   
  - ext4: Fix function prototype mismatch for ext4_feat_ktype (Kees Cook)   
  - audit: update the mailing list in MAINTAINERS (Paul Moore)   
  - wifi: mwifiex: Add missing compatible string for SD8787 (Lukas Wunner)   
  - nbd: fix possible overflow on 'first_minor' in nbd_dev_add() (Zhang Wensheng)   
  - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 (Alessandro Astone)   
  - binder: Address corner cases in deferred copy and fixup (Alessandro Astone)   
  - binder: fix pointer cast warning (Arnd Bergmann)   
  - binder: defer copies of pre-patched txn data (Todd Kjos)   
  - binder: read pre-translated fds from sender buffer (Todd Kjos)   
  - uaccess: Add speculation barrier to copy_from_user() (Dave Hansen)   
  - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry (Zheng Wang)   
  - powerpc/64s/radix: Fix RWX mapping with relocated kernel (Michael Ellerman)   
  - powerpc/64s/radix: Fix crash with unaligned relocated kernel (Michael Ellerman)   
  - powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (Michael Ellerman)   
  - powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (Michael Ellerman)   
  - powerpc: use generic version of arch_is_kernel_initmem_freed() (Christophe Leroy)   
  - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 (Sean Anderson)   
  - can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len (Marc Kleine-Budde)   
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jim Mattson) [Orabug: 34982693] {CVE-2022-2196}
  - KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (Sean Christopherson)   
  - KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (Sean Christopherson)   
  - random: always mix cycle counter in add_latent_entropy() (Jason A. Donenfeld)   
  - clk: mxl: syscon_node_to_regmap() returns error pointers (Rahul Tanwar)   
  - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G (Sean Anderson)   
  - clk: mxl: Fix a clk entry by adding relevant flags (Rahul Tanwar)   
  - clk: mxl: Add option to override gate clks (Rahul Tanwar)   
  - clk: mxl: Remove redundant spinlocks (Rahul Tanwar)   
  - clk: mxl: Switch from direct readl/writel based IO to regmap based IO (Rahul Tanwar)   
  - drm/edid: Fix minimum bpc supported with DSC1.2 for HDMI sink (Ankit Nautiyal)   
  - wifi: rtl8xxxu: gen2: Turn on the rate control (Bitterblue Smith)   
  - drm/etnaviv: don't truncate physical page address (Lucas Stach)   
  - LTS version: v5.15.95 (Jack Vogel)   
  - platform/x86/amd: pmc: add CONFIG_SERIO dependency (Arnd Bergmann)   
  - net: sched: sch: Fix off by one in htb_activate_prios() (Dan Carpenter)   
  - ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak (Pierre-Louis Bossart)   
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN (Thomas Gleixner)   
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman)   
  - net/sched: tcindex: search key must be 16 bits (Pedro Tammela)   
  - i40e: Add checking for null for nlmsg_find_attr() (Natalia Petrova)   
  - net/sched: act_ctinfo: use percpu stats (Pedro Tammela)   
  - flow_offload: fill flags to action structure (Baowen Zheng)   
  - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (Matt Roper)   
  - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (Raviteja Goud Talla)   
  - mm/filemap: fix page end in filemap_get_read_batch (Qian Yingjin)   
  - nilfs2: fix underflow in second superblock position calculations (Ryusuke Konishi)   
  - ipv6: Fix tcp socket connection with DSCP. (Guillaume Nault)   
  - ipv6: Fix datagram socket connection with DSCP. (Guillaume Nault)   
  - ixgbe: add double of VLAN header when computing the max MTU (Jason Xing)   
  - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski)   
  - net: stmmac: Restrict warning on disabling DMA store and fwd mode (Cristian Ciocaltea)   
  - bnxt_en: Fix mqprio and XDP ring checking logic (Michael Chan)   
  - net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence (Johannes Zink)   
  - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (Hangyu Hua)   
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson)   
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima)   
  - net/sched: tcindex: update imperfect hash filters respecting rcu (Pedro Tammela)   
  - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (Pietro Borrello)   
  - net: ethernet: ti: am65-cpsw: Add RX DMA Channel Teardown Quirk (Siddharth Vadapalli)   
  - net: bgmac: fix BCM5358 support by setting correct flags (Rafał Miłecki)   
  - i40e: add double of VLAN header when computing the max MTU (Jason Xing)   
  - ixgbe: allow to increase MTU to 3K with XDP enabled (Jason Xing)   
  - revert "squashfs: harden sanity check in squashfs_read_xattr_id_table" (Andrew Morton)   
  - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Felix Riemann)   
  - Revert "mm: Always release pages to the buddy allocator in memblock_free_late()." (Aaron Thompson)   
  - selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (Misono Tomohiro)   
  - of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem (Isaac J. Manjarres)   
  - hugetlb: check for undefined shift on 32 bit architectures (Mike Kravetz)   
  - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Munehisa Kamata)   
  - ALSA: hda/realtek - fixed wrong gpio assigned (Kailang Yang)   
  - ALSA: hda/conexant: add a new hda codec SN6180 (Bo Liu)   
  - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang)   
  - mmc: sdio: fix possible resource leaks in some error paths (Yang Yingliang)   
  - mmc: jz4740: Work around bug on JZ4760(B) (Paul Cercueil)   
  - tcp: Fix listen() regression in 5.15.88. (Kuniyuki Iwashima)   
  - netfilter: nft_tproxy: restrict to prerouting hook (Florian Westphal)   
  - platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN (Mario Limonciello)   
  - platform/x86: amd-pmc: Correct usage of SMU version (Mario Limonciello)   
  - platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (Hans de Goede)   
  - platform/x86: amd-pmc: Export Idlemask values based on the APU (Sanket Goswami)   
  - drm/amd/display: Fail atomic_check early on normalize_zpos error (Leo Li)   
  - aio: fix mremap after fork null-deref (Seth Jenkins)   
  - mptcp: do not wait for bare sockets' timeout (Paolo Abeni)   
  - xfs: don't leak btree cursor when insrec fails after a split (Darrick J. Wong)   
  - xfs: purge dquots after inode walk fails during quotacheck (Darrick J. Wong)   
  - xfs: assert in xfs_btree_del_cursor should take into account error (Dave Chinner)   
  - xfs: don't assert fail on perag references on teardown (Dave Chinner)   
  - xfs: avoid unnecessary runtime sibling pointer endian conversions (Dave Chinner)   
  - xfs: validate v5 feature fields (Dave Chinner)   
  - xfs: set XFS_FEAT_NLINK correctly (Dave Chinner)   
  - xfs: detect self referencing btree sibling pointers (Dave Chinner)   
  - xfs: fix potential log item leak (Dave Chinner)   
  - xfs: zero inode fork buffer at allocation (Dave Chinner)   
  - nvmem: core: fix return value (Russell King (Oracle))   
  - nvmem: core: fix registration vs use race (Russell King (Oracle))   
  - nvmem: core: fix cleanup after dev_set_name() (Russell King (Oracle))   
  - nvmem: core: add error handling for dev_set_name (Gaosheng Cui)   
  - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (Hans de Goede)   
  - drm/amd/display: Properly handle additional cases where DCN is not supported (Alex Deucher)   
  - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (Amit Engel)   
  - s390/decompressor: specify __decompress() buf len to avoid overflow (Vasily Gorbik)   
  - net: sched: sch: Bounds check priority (Kees Cook)   
  - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (Ben Skeggs)   
  - net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC (Andrey Konovalov)   
  - net/rose: Fix to not accept on connected socket (Hyunwoo Kim)   
  - tools/virtio: fix the vringh test for virtio ring changes (Shunsuke Mie)   
  - ASoC: cs42l56: fix DT probe (Arnd Bergmann)   
  - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (Jakub Sitnicki)   
  - ALSA: hda: Do not unset preset when cleaning up codec (Cezary Rojewski)   
  - selftests/bpf: Verify copy_register_state() preserves parent/live fields (Eduard Zingerman)   
  - ASoC: Intel: sof_cs42l42: always set dpcm_capture for amplifiers (Pierre-Louis Bossart)   
  - ASoC: Intel: sof_rt5682: always set dpcm_capture for amplifiers (Pierre-Louis Bossart)   
  - ACPI / x86: Add support for LPS0 callback handler (Mario Limonciello)   
  - riscv: kprobe: Fixup misaligned load text (Guo Ren)   
  - kprobes: treewide: Cleanup the error messages for kprobes (Masami Hiramatsu)   
  - mptcp: fix locking for in-kernel listener creation (Paolo Abeni)   
  - LTS version: v5.15.94 (Jack Vogel)   
  - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions (Tom Lendacky)   
  - KVM: x86: Mitigate the cross-thread return address predictions bug (Tom Lendacky)   
  - x86/speculation: Identify processors vulnerable to SMT RSB predictions (Tom Lendacky)   
  - drm/i915: Fix VBT DSI DVO port handling (Ville Syrjälä)   
  - drm/i915: Initialize the obj flags for shmem objects (Aravind Iddamsetty)   
  - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (Guilherme G. Piccoli)   
  - Fix page corruption caused by racy check in __free_pages (David Chen)   
  - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (Heiner Kallweit)   
  - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (Heiner Kallweit)   
  - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (Heiner Kallweit)   
  - rtmutex: Ensure that the top waiter is always woken up (Wander Lairson Costa)   
  - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (Nicholas Piggin)   
  - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte (Guo Ren)   
  - ceph: flush cap releases when the session is flushed (Xiubo Li)   
  - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (Paul Cercueil)   
  - usb: typec: altmodes/displayport: Fix probe pin assign check (Prashant Malani)   
  - usb: core: add quirk for Alcor Link AK9563 smartcard reader (Mark Pearson)   
  - btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain)   
  - mptcp: be careful on subflow status propagation on errors (Paolo Abeni)   
  - net: USB: Fix wrong-direction WARNING in plusb.c (Alan Stern)   
  - cifs: Fix use-after-free in rdata->read_into_pages() (ZhaoLong Wang)   
  - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (Andy Shevchenko)   
  - spi: dw: Fix wrong FIFO level setting for long xfers (Serge Semin)   
  - pinctrl: single: fix potential NULL dereference (Maxim Korotkov)   
  - pinctrl: aspeed: Fix confusing types in return value (Joel Stanley)   
  - pinctrl: mediatek: Fix the drive register definition of some Pins (Guodong Liu)   
  - ASoC: topology: Return -ENOMEM on memory allocation failure (Amadeusz Sławiński)   
  - riscv: stacktrace: Fix missing the first frame (Liu Shixin)   
  - ALSA: pci: lx6464es: fix a debug loop (Dan Carpenter)   
  - selftests: forwarding: lib: quote the sysctl values (Hangbin Liu)   
  - igc: Add ndo_tx_timeout support (Sasha Neftin)   
  - net/mlx5: Serialize module cleanup with reload and remove (Shay Drory)   
  - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (Shay Drory)   
  - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (Shay Drory)   
  - net/mlx5e: IPoIB, Show unknown speed instead of error (Dragos Tatulea)   
  - net/mlx5: Bridge, fix ageing of peer FDB entries (Vlad Buslov)   
  - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (Adham Faris)   
  - net/mlx5e: Introduce the mlx5e_flush_rq function (Maxim Mikityanskiy)   
  - net/mlx5e: Move repeating clear_bit in mlx5e_rx_reporter_err_rq_cqe_recover (Maxim Mikityanskiy)   
  - net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" (Vladimir Oltean)   
  - net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware (Vladimir Oltean)   
  - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (Anirudh Venkataramanan)   
  - uapi: add missing ip/ipv6 header dependencies for linux/stddef.h (Herton R. Krzesinski)   
  - ionic: clean interrupt before enabling queue to avoid credit race (Neel Patel)   
  - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (Heiner Kallweit)   
  - bonding: fix error checking in bond_debug_reregister() (Qi Zheng)   
  - net: phylink: move phy_device_free() to correctly release phy device (Clément Léger)   
  - xfrm: fix bug with DSCP copy to v6 from v4 tunnel (Christian Hopps)   
  - RDMA/usnic: use iommu_map_atomic() under spin_lock() (Yang Yingliang)   
  - RDMA/irdma: Fix potential NULL-ptr-dereference (Nikita Zhandarovich)   
  - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Dragos Tatulea)   
  - xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() (Eric Dumazet)   
  - IB/hfi1: Restore allocated resources on failed copyout (Dean Luick)   
  - xfrm: compat: change expression for switch in xfrm_xlate64 (Anastasia Belova)   
  - can: j1939: do not wait 250 ms if the same addr was already claimed (Devid Antonio Filoni)   
  - of/address: Return an error when no valid dma-ranges are found (Mark Brown)   
  - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (Shiju Jose)   
  - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (Elvis Angelaccio)   
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (Guillaume Pinot)   
  - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (Artemii Karasev)   
  - ALSA: hda/realtek: Add Positivo N14KP6-TG (Edson Juliano Drosdeck)   
  - btrfs: zlib: zero-initialize zlib workspace (Alexander Potapenko)   
  - btrfs: limit device extents to the device size (Josef Bacik)   
  - migrate: hugetlb: check for hugetlb shared PMD in node migration (Mike Kravetz)   
  - mm/migration: return errno when isolate_huge_page failed (Miaohe Lin)   
  - LTS version: v5.15.93 (Jack Vogel)   
  - bpf: Skip invalid kfunc call in backtrack_insn (Hao Sun)   
  - gfs2: Always check inode size of inline inodes (Andreas Gruenbacher)   
  - gfs2: Cosmetic gfs2_dinode_{in,out} cleanup (Andreas Gruenbacher)   
  - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (Minsuk Kang)   
  - f2fs: fix to do sanity check on i_extra_isize in is_alive() (Chao Yu)   
  - fbdev: smscufx: fix error handling code in ufx_usb_probe (Dongliang Mu)   
  - ovl: Use "buf" flexible array for memcpy() destination (Kees Cook)   
  - fs/ntfs3: Validate attribute data and valid sizes (Abdun Nihaal)   
  - powerpc/imc-pmu: Revert nest_init_lock to being a mutex (Michael Ellerman)   
  - iio:adc:twl6030: Enable measurement of VAC (Andreas Kemnade)   
  - bpf: Do not reject when the stack read size is different from the tracked scalar size (Martin KaFai Lau)   
  - bpf: Fix incorrect state pruning for <8B spill/fill (Paul Chaignon)   
  - phy: qcom-qmp-combo: fix runtime suspend (Johan Hovold)   
  - phy: qcom-qmp-combo: fix broken power on (Johan Hovold)   
  - phy: qcom-qmp-usb: fix memleak on probe deferral (Johan Hovold)   
  - phy: qcom-qmp-combo: fix memleak on probe deferral (Johan Hovold)   
  - phy: qcom-qmp-combo: disable runtime PM on unbind (Johan Hovold)   
  - serial: 8250_dma: Fix DMA Rx rearm race (Ilpo Järvinen)   
  - serial: 8250_dma: Fix DMA Rx completion race (Ilpo Järvinen)   
  - nvmem: core: fix cell removal on error (Michael Walle)   
  - nvmem: core: remove nvmem_config wp_gpio (Russell King (Oracle))   
  - nvmem: core: initialise nvmem->id early (Russell King (Oracle))   
  - drm/i915: Fix potential bit_17 double-free (Rob Clark)   
  - Squashfs: fix handling and sanity checking of xattr_ids count (Phillip Lougher)   
  - highmem: round down the address passed to kunmap_flush_on_unmap() (Matthew Wilcox (Oracle))   
  - mm/swapfile: add cond_resched() in get_swap_pages() (Longlong Xia)   
  - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (Zheng Yongjun)   
  - x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses (Joerg Roedel)   
  - kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman)   
  - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (Pratham Pratap)   
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps (Mike Kravetz)   
  - riscv: disable generation of unwind tables (Andreas Schwab)   
  - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case (Helge Deller)   
  - parisc: Fix return code of pdc_iodc_print() (Helge Deller)   
  - nvmem: qcom-spmi-sdam: fix module autoloading (Johan Hovold)   
  - iio: imu: fxos8700: fix MAGN sensor scale and unit (Carlos Song)   
  - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (Carlos Song)   
  - iio: imu: fxos8700: fix failed initialization ODR mode assignment (Carlos Song)   
  - iio: imu: fxos8700: fix incorrect ODR mode readback (Carlos Song)   
  - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (Carlos Song)   
  - iio: imu: fxos8700: fix map label of channel type to MAGN sensor (Carlos Song)   
  - iio: imu: fxos8700: fix IMU data bits returned to user space (Carlos Song)   
  - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (Carlos Song)   
  - iio: imu: fxos8700: fix ACCEL measurement range selection (Carlos Song)   
  - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (Andreas Kemnade)   
  - iio: adc: berlin2-adc: Add missing of_node_put() in error path (Xiongfeng Wang)   
  - iio: hid: fix the retval in gyro_3d_capture_sample (Dmitry Perchanov)   
  - iio: hid: fix the retval in accel_3d_capture_sample (Dmitry Perchanov)   
  - efi: Accept version 2 of memory attributes table (Ard Biesheuvel)   
  - ALSA: hda/realtek: Add Acer Predator PH315-54 (Victor Shyba)   
  - watchdog: diag288_wdt: fix __diag288() inline assembly (Alexander Egorenkov)   
  - watchdog: diag288_wdt: do not use stack buffers for hardware data (Alexander Egorenkov)   
  - net: qrtr: free memory on error path in radix_tree_insert() (Natalia Petrova)   
  - fbcon: Check font dimension limits (Samuel Thibault)   
  - Input: i8042 - add Clevo PCX0DX to i8042 quirk table (Werner Sembach)   
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy)   
  - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami)   
  - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (Neil Armstrong)   
  - iio: adc: stm32-dfsdm: fill module aliases (Olivier Moysan)   
  - drm/amd/display: Fix timing not changning when freesync video is enabled (Aurabindo Pillai)   
  - net/x25: Fix to not accept on connected socket (Hyunwoo Kim)   
  - platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (Kevin Kuriakose)   
  - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (Koba Ko)   
  - i2c: rk3x: fix a bunch of kernel-doc warnings (Randy Dunlap)   
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie)   
  - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (Mike Christie)   
  - perf/x86/intel: Add Emerald Rapids (Kan Liang)   
  - scsi: target: core: Fix warning on RT kernels (Maurizio Lombardi)   
  - i2c: mxs: suppress probe-deferral error message (Stefan Wahren)   
  - i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (Basavaraj Natikar)   
  - efi: fix potential NULL deref in efi_mem_reserve_persistent (Anton Gusev)   
  - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin)   
  - virtio-net: Keep stop() to follow mirror sequence of open() (Parav Pandit)   
  - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (Andrei Gherzan)   
  - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (Andrei Gherzan)   
  - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (Andrei Gherzan)   
  - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (Andrei Gherzan)   
  - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (Damien Le Moal)   
  - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (Ziyang Xuan)   
  - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (Tom Rix)   
  - riscv: kprobe: Fixup kernel panic when probing an illegal position (Guo Ren)   
  - ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address (Thomas Winter)   
  - ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address (Thomas Winter)   
  - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (Chris Healy)   
  - squashfs: harden sanity check in squashfs_read_xattr_id_table (Fedor Pchelkin)   
  - netfilter: br_netfilter: disable sabotage_in hook after first suppression (Florian Westphal)   
  - drm/i915/adlp: Fix typo for reference clock (Chaitanya Kumar Borah)   
  - drm/i915/guc: Fix locking when searching for a hung request (John Harrison)   
  - netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim)   
  - block, bfq: fix uaf for bfqq in bic_set_bfqq() (Yu Kuai)   
  - block, bfq: replace 0/1 with false/true in bic apis (Yu Kuai)   
  - block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC" (NeilBrown)   
  - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (Andre Kalb)   
  - sfc: correctly advertise tunneled IPv6 segmentation (Íñigo Huguet)   
  - dpaa2-eth: execute xdp_do_flush() before napi_complete_done() (Magnus Karlsson)   
  - dpaa_eth: execute xdp_do_flush() before napi_complete_done() (Magnus Karlsson)   
  - virtio-net: execute xdp_do_flush() before napi_complete_done() (Magnus Karlsson)   
  - qede: execute xdp_do_flush() before napi_complete_done() (Magnus Karlsson)   
  - ice: Prevent set_channel from changing queues while RDMA active (Dave Ertman)   
  - fix "direction" argument of iov_iter_kvec() (Al Viro)   
  - fix iov_iter_bvec() "direction" argument (Al Viro)   
  - READ is "data destination", not source... (Al Viro)   
  - WRITE is "data source", not destination... (Al Viro)   
  - vhost/net: Clear the pending messages when the backend is removed (Eric Auger)   
  - scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" (Martin K. Petersen)   
  - drm/vc4: hdmi: make CEC adapter name unique (Hans Verkuil)   
  - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (Pierluigi Passaro)   
  - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener (Jakub Sitnicki)   
  - bpf: Fix to preserve reg parent/live fields when copying range info (Eduard Zingerman)   
  - bpf: Support <8-byte scalar spill and refill (Martin KaFai Lau)   
  - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Artemii Karasev)   
  - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (Yonghong Song)   
  - ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use (Andy Shevchenko)   
  - ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use (Andy Shevchenko)   
  - ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use (Andy Shevchenko)   
  - ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use (Andy Shevchenko)   
  - ASoC: Intel: bytcht_es8316: move comment to the right place (Pierre-Louis Bossart)   
  - ASoC: Intel: boards: fix spelling in comments (Pierre-Louis Bossart)   
  - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (Yuan Can)   
  - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (Takashi Sakamoto)   
  - LTS version: v5.15.92 (Jack Vogel)   
  - net: mctp: purge receive queues on sk destruction (Jeremy Kerr)   
  - net: fix NULL pointer in skb_segment_list (Yan Zhai)   
  - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (Soenke Huster)   
  - extcon: usbc-tusb320: fix kernel-doc warning (Rong Chen)   
  - ext4: fix bad checksum after online resize (Baokun Li)   
  - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara)   
  - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (Hui Wang)   
  - HID: playstation: sanity check DualSense calibration data. (Roderick Colenbrander)   
  - blk-cgroup: fix missing pd_online_fn() while activating policy (Yu Kuai)   
  - erofs/zmap.c: Fix incorrect offset calculation (Siddh Raman Pant)   
  - bpf: Skip task with pid=1 in send_signal_common() (Hao Sun)   
  - firmware: arm_scmi: Clear stale xfer->hdr.status (Cristian Marussi)   
  - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (Krzysztof Kozlowski)   
  - arm64: dts: freescale: Fix pca954x i2c-mux node names (Geert Uytterhoeven)   
  - ARM: dts: vf610: Fix pca9548 i2c-mux node names (Geert Uytterhoeven)   
  - ARM: dts: imx: Fix pca9547 i2c-mux node name (Geert Uytterhoeven)   
  - ipmi:ssif: Add a timer between request retries (Corey Minyard)  [Orabug: 35099122]  
  - ipmi:ssif: resend_msg() cannot fail (Corey Minyard)  [Orabug: 35099122]  
  - ipmi:ssif: Increase the message retry time (Corey Minyard)  [Orabug: 35099122]  
  - scsi: scsi_transport_fc: Use %u for dev_loss_tmo (Martin Wilck)  [Orabug: 34665293]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-9.96.3.el9uek]
changelog:
  - rds: ib: Destroy fastreg resources correctly (Håkon Bugge)  [Orabug: 35140656]  
  - rds: ib: Use one-bit booleans in struct rds_ib_device and keep them adjacent (Håkon Bugge)  [Orabug: 35140646]  
  - ipc: update semtimedop() to use hrtimer (Prakash Sangappa)  [Orabug: 35069805]  
  - uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 35016481]  
  - ACPI: CPPC: Disable FIE if registers in PCC regions (Jeremy Linton)  [Orabug: 34993360]  
  - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (Zheng Bin)  [Orabug: 34993360]  
  - uek-rpm: Add opbmc to core rpm (Somasundaram Krishnasamy)  [Orabug: 34769938]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-100.96.29.el9uek]
changelog:
  - NFSD: register/unregister of nfsd-client shrinker at nfsd startup/shutdown time (Dai Ngo)  [Orabug: 35059907]  
  - NFSD: refactoring courtesy_client_reaper to a generic low memory shrinker (Dai Ngo)  [Orabug: 35059907]  
  - NFSD: unregister shrinker when nfsd_init_net() fails (Tetsuo Handa)  [Orabug: 35059907]  
  - NFSD: add shrinker to reap courtesy clients on low memory condition (Dai Ngo)  [Orabug: 35059907]  
  - NFSD: keep track of the number of courtesy clients in the system (Dai Ngo)  [Orabug: 35059907]  
  - crypto: drbg - oversampling of Jitter RNG (Saeed Mirzamohammadi)  [Orabug: 35141114]  
  - crypto: tcrypt - KAT for ffdhe* algorithms (Saeed Mirzamohammadi)  [Orabug: 35141114]  
  - crypto: jitter - panic on health test failure (Saeed Mirzamohammadi)  [Orabug: 35141114]  
  - scsi: qla2xxx: Update version to 10.02.08.100-k (Nilesh Javali)  [Orabug: 35007285]  
  - scsi: qla2xxx: Fix IOCB resource check warning (Nilesh Javali)  [Orabug: 35007285]  
  - scsi: qla2xxx: Remove increment of interface err cnt (Saurav Kashyap)  [Orabug: 35007285]  
  - scsi: qla2xxx: Fix erroneous link down (Quinn Tran)  [Orabug: 35007285]  
  - scsi: qla2xxx: Remove unintended flag clearing (Quinn Tran)  [Orabug: 35007285]  
  - scsi: qla2xxx: Fix stalled login (Quinn Tran)  [Orabug: 35007285]  
  - scsi: qla2xxx: Fix exchange oversubscription for management commands (Quinn Tran)  [Orabug: 35007285]  
  - scsi: qla2xxx: Fix exchange oversubscription (Quinn Tran)  [Orabug: 35007285]  
  - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (Arun Easi)  [Orabug: 35007285]  
  - scsi: qla2xxx: Fix link failure in NPIV environment (Quinn Tran)  [Orabug: 35007285]  
  - scsi: qla2xxx: Check if port is online before sending ELS (Shreyas Deodhar)  [Orabug: 35007285]  
  - scsi: qla2xxx: Initialize vha->unknown_atio_[list, work] for NPIV hosts (Gleb Chesnokov)  [Orabug: 35007285]  
  - scsi: qla2xxx: Remove duplicate of vha->iocb_work initialization (Gleb Chesnokov)  [Orabug: 35007285]  
  - scsi: qla2xxx: Remove unused variable 'found_devs' (Colin Ian King)  [Orabug: 35007285]  
  - scsi: qla2xxx: Fix serialization of DCBX TLV data request (Rafael Mendonca)  [Orabug: 35007285]  
  - scsi: qla2xxx: Remove unused declarations for qla2xxx (Gaosheng Cui)  [Orabug: 35007285]  
  - scsi: qla2xxx: Fix spelling mistake "definiton" -> "definition" (Colin Ian King)  [Orabug: 35007285]  
  - scsi: qla2xxx: Drop DID_TARGET_FAILURE use (Mike Christie)  [Orabug: 35007285]  
  - ACPI: processor: idle: Disable ACPI C-state probing for xen hvm guest (Joe Jin)  [Orabug: 35043629]  
  - uek-rpm: x86_64 enable CONFIG_SLS (Maciej S. Szmigiero)  [Orabug: 35073535]  
  - net: qede: Remove unnecessary synchronize_irq() before free_irq() (Minghao Chi)  [Orabug: 34901373]  
  - uek-rpm: Disable CONFIG_USB_NET_RNDIS_WLAN (Rhythm Mahajan)  [Orabug: 35037701]  
  - certs: Add FIPS selftests (David Howells)  [Orabug: 35080500]  
  - certs: Move load_certificate_list() to be with the asymmetric keys code (David Howells)  [Orabug: 35080500]  
  - uek-rpm: Enable RFC7919 config (Saeed Mirzamohammadi)  [Orabug: 35080500]  
  - Revert "KVM: x86/xen: Maintain valid mapping of Xen shared_info page" (Vijayendra Suman)  [Orabug: 34929435]  
  - Revert "KVM: x86: Fix wall clock writes in Xen shared_info not to mark page dirty" (Vijayendra Suman)  [Orabug: 34929435]  
  - Revert "crypto: rsa - flag instantiations as FIPS compliant" (Saeed Mirzamohammadi)  [Orabug: 35054646]  
  - uek-rpm/config-aarch64: Enable CONFIG_CLK_RASPBERRYPI (Vijay Kumar)  [Orabug: 35018498]  
  - vfio/mlx5: Allow loading of larger images than 512 MB (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Fix UBSAN note (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: error pointer dereference in error handling (Dan Carpenter)  [Orabug: 35027279]  
  - vfio/mlx5: fix error code in mlx5vf_precopy_ioctl() (Dan Carpenter)  [Orabug: 35027279]  
  - vfio/mlx5: Enable MIGRATION_PRE_COPY flag (Shay Drory)  [Orabug: 35027279]  
  - vfio/mlx5: Fallback to STOP_COPY upon specific PRE_COPY error (Shay Drory)  [Orabug: 35027279]  
  - vfio/mlx5: Introduce multiple loads (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Consider temporary end of stream as part of PRE_COPY (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Introduce vfio precopy ioctl implementation (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Introduce SW headers for migration states (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Introduce device transitions of PRE_COPY (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Refactor to use queue based data chunks (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Refactor migration file state (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Refactor MKEY usage (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Refactor PD usage (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Enforce a single SAVE command at a time (Yishai Hadas)  [Orabug: 35027279]  
  - vfio: Extend the device migration protocol with PRE_COPY (Jason Gunthorpe)  [Orabug: 35027279]  
  - net/mlx5: Introduce ifc bits for pre_copy (Shay Drory)  [Orabug: 35027279]  
  - net/mlx5: Add the log_min_mkey_entity_size capability (Maxim Mikityanskiy)  [Orabug: 35027279]  
  - vfio/iova_bitmap: refactor iova_bitmap_set() to better handle page boundaries (Joao Martins)  [Orabug: 35027279]  
  - vfio/mlx5: Fix a typo in mlx5vf_cmd_load_vhca_state() (Yishai Hadas)  [Orabug: 35027279]  
  - vfio: Add an option to get migration data size (Yishai Hadas)  [Orabug: 35027279]  
  - vfio/mlx5: Switch to use module_pci_driver() macro (Shang XiaoJing)  [Orabug: 35027279]  
  - uek-rpm: core: Move few modules which are recently enabled to core. (Harshit Mogalapalli)  [Orabug: 34774213]  
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 34977257]  
  - crypto: panic on PCT failure for dh and ecdh (Saeed Mirzamohammadi)  [Orabug: 34971139]  
  - uek-rpm: mod-extra: Move modules which are recently enabled to extras (Harshit Mogalapalli)  [Orabug: 34774213]  
  - Allow the ima keyring to trust all keys in the machine keyring (Eric Snowberg)  [Orabug: 34873856]  
  - Revert "X.509: Parse Basic Constraints for CA" (Eric Snowberg)  [Orabug: 34873856]  
  - Revert "KEYS: CA link restriction" (Eric Snowberg)  [Orabug: 34873856]  
  - Revert "integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca" (Eric Snowberg)  [Orabug: 34873856]  
  - Revert "integrity: change ima link restriction to trust the machine keyring" (Eric Snowberg)  [Orabug: 34873856]  
  - net/mlx5: Drain fw_reset when removing device (Shay Drory)  [Orabug: 34816080]  
  - net/mlx5e: CT: Fix setting flow_source for smfs ct tuples (Paul Blakey)  [Orabug: 34816080]  
  - net/mlx5e: CT: Fix support for GRE tuples (Paul Blakey)  [Orabug: 34816080]  
  - net/mlx5e: Remove HW-GRO from reported features (Gal Pressman)  [Orabug: 34816080]  
  - net/mlx5e: Properly block HW GRO when XDP is enabled (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Properly block LRO when XDP is enabled (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Block rx-gro-hw feature in switchdev mode (Aya Levin)  [Orabug: 34816080]  
  - net/mlx5e: Wrap mlx5e_trap_napi_poll into rcu_read_lock (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it (Yevgeny Kliteynik)  [Orabug: 34816080]  
  - net/mlx5: Initialize flow steering during driver probe (Shay Drory)  [Orabug: 34816080]  
  - mlxsw: Avoid warning during ip6gre device removal (Amit Cohen)  [Orabug: 34816080]  
  - net/mlx5: Fix matching on inner TTC (Mark Bloch)  [Orabug: 34816080]  
  - net/mlx5e: Avoid checking offload capability in post_parse action (Ariel Levkovich)  [Orabug: 34816080]  
  - net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Ariel Levkovich)  [Orabug: 34816080]  
  - net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (Ariel Levkovich)  [Orabug: 34816080]  
  - net/mlx5e: Fix wrong source vport matching on tunnel rule (Ariel Levkovich)  [Orabug: 34816080]  
  - net: Handle l3mdev in ip_tunnel_init_flow (David Ahern)  [Orabug: 34816080]  
  - net/mlx5e: Fix build warning, detected write beyond size of field (Saeed Mahameed)  [Orabug: 34816080]  
  - net/mlx5e: HTB, remove unused function declaration (Saeed Mahameed)  [Orabug: 34816080]  
  - net/mlx5e: Statify function mlx5_cmd_trigger_completions (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5e: Remove MLX5E_XDP_TX_DS_COUNT (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Permit XDP with non-linear legacy RQ (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Support multi buffer XDP_TX (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Unindent the else-block in mlx5e_xmit_xdp_buff (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Implement sending multi buffer XDP frames (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Don't prefill WQEs in XDP SQ in the multi buffer mode (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Remove assignment of inline_hdr.sz on XDP TX (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Move mlx5e_xdpi_fifo_push out of xmit_xdp_frame (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Store DMA address inside struct page (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Add XDP multi buffer support to the non-linear legacy RQ (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Use page-sized fragments with XDP multi buffer (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Use fragments of the same size in non-linear legacy RQ with XDP (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Prepare non-linear legacy RQ for XDP multi buffer support (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5: Remove unused fill page array API function (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5: Remove unused exported contiguous coherent buffer allocation API (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5: CT: Remove extra rhashtable remove on tuple entries (Paul Blakey)  [Orabug: 34816080]  
  - net/mlx5: DR, Remove hw_ste from mlx5dr_ste to reduce memory (Rongwei Liu)  [Orabug: 34816080]  
  - net/mlx5: DR, Remove 4 members from mlx5dr_ste_htbl to reduce memory (Rongwei Liu)  [Orabug: 34816080]  
  - net/mlx5: DR, Remove num_of_entries byte_size from struct mlx5_dr_icm_chunk (Rongwei Liu)  [Orabug: 34816080]  
  - net/mlx5: DR, Remove icm_addr from mlx5dr_icm_chunk to reduce memory (Rongwei Liu)  [Orabug: 34816080]  
  - net/mlx5: DR, Remove mr_addr rkey from struct mlx5dr_icm_chunk (Rongwei Liu)  [Orabug: 34816080]  
  - net/mlx5: DR, Adjust structure member to reduce memory hole (Rongwei Liu)  [Orabug: 34816080]  
  - net/mlx5e: Drop cqe_bcnt32 from mlx5e_skb_from_cqe_mpwrq_linear (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Drop the len output parameter from mlx5e_xdp_handle (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: RX, Test the XDP program existence out of the handler (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5e: Build SKB in place over the first fragment in non-linear legacy RQ (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Add headroom only to the first fragment in legacy RQ (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Validate MTU when building non-linear legacy RQ fragments info (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: MPLSoUDP encap, support action vlan pop_eth explicitly (Maor Dickman)  [Orabug: 34816080]  
  - net/mlx5e: MPLSoUDP decap, use vlan push_eth instead of pedit (Maor Dickman)  [Orabug: 34816080]  
  - net/sched: add vlan push_eth and pop_eth action to the hardware IR (Maor Dickman)  [Orabug: 34816080]  
  - net: Add l3mdev index to flow struct and avoid oif reset for port devices (David Ahern)  [Orabug: 34816080]  
  - net/mlx5e: Fix use-after-free in mlx5e_stats_grp_sw_update_stats (Saeed Mahameed)  [Orabug: 34816080]  
  - net/mlx4_en: use kzalloc (Julia Lawall)  [Orabug: 34816080]  
  - net/mlx5: Parse module mapping using mlx5_ifc (Gal Pressman)  [Orabug: 34816080]  
  - net/mlx5: Query the maximum MCIA register read size from firmware (Gal Pressman)  [Orabug: 34816080]  
  - net/mlx5: CT: Create smfs dr matchers dynamically (Paul Blakey)  [Orabug: 34816080]  
  - net/mlx5: CT: Add software steering ct flow steering provider (Paul Blakey)  [Orabug: 34816080]  
  - net/mlx5: Add smfs lib to export direct steering API to CT (Paul Blakey)  [Orabug: 34816080]  
  - net/mlx5: DR, Add helper to get backing dr table from a mlx5 flow table (Paul Blakey)  [Orabug: 34816080]  
  - net/mlx5: CT: Introduce a platform for multiple flow steering providers (Paul Blakey)  [Orabug: 34816080]  
  - net/mlx5: Node-aware allocation for the doorbell pgdir (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5: Node-aware allocation for UAR (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5: Node-aware allocation for the EQs (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5: Node-aware allocation for the EQ table (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5: Node-aware allocation for the IRQ table (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5: Delete useless module.h include (Leon Romanovsky)  [Orabug: 34816080]  
  - net/mlx4: Delete useless moduleparam include (Leon Romanovsky)  [Orabug: 34816080]  
  - net/mlx5: DR, Add support for ConnectX-7 steering (Yevgeny Kliteynik)  [Orabug: 34816080]  
  - net/mlx5: DR, Refactor ste_ctx handling for STE v0/1 (Yevgeny Kliteynik)  [Orabug: 34816080]  
  - net/mlx5: DR, Rename action modify fields to reflect naming in HW spec (Yevgeny Kliteynik)  [Orabug: 34816080]  
  - net/mlx5: DR, Fix handling of different actions on the same STE in STEv1 (Yevgeny Kliteynik)  [Orabug: 34816080]  
  - net/mlx5: DR, Remove unneeded comments (Yevgeny Kliteynik)  [Orabug: 34816080]  
  - net/mlx5: DR, Add support for matching on Internet Header Length (IHL) (Yevgeny Kliteynik)  [Orabug: 34816080]  
  - net/mlx5: DR, Align mlx5dv_dr API vport action with FW behavior (Shun Hao)  [Orabug: 34816080]  
  - net/mlx5: Add debugfs counters for page commands failures (Moshe Shemesh)  [Orabug: 34816080]  
  - net/mlx5: Add pages debugfs (Moshe Shemesh)  [Orabug: 34816080]  
  - net/mlx5: Move debugfs entries to separate struct (Moshe Shemesh)  [Orabug: 34816080]  
  - net/mlx5: Change release_all_pages cap bit location (Moshe Shemesh)  [Orabug: 34816080]  
  - net/mlx5: Remove redundant error on reclaim pages (Moshe Shemesh)  [Orabug: 34816080]  
  - net/mlx5: Remove redundant error on give pages (Moshe Shemesh)  [Orabug: 34816080]  
  - net/mlx5: Remove redundant notify fail on give pages (Moshe Shemesh)  [Orabug: 34816080]  
  - net/mlx5: Add command failures data to debugfs (Moshe Shemesh)  [Orabug: 34816080]  
  - net/mlx5e: TC, Fix use after free in mlx5e_clone_flow_attr_for_post_act() (Dan Carpenter)  [Orabug: 34816080]  
  - net/mlx5: Support GRE conntrack offload (Toshiaki Makita)  [Orabug: 34816080]  
  - mlxsw: Add support for IFLA_OFFLOAD_XSTATS_L3_STATS (Petr Machata)  [Orabug: 34816080]  
  - mlxsw: Extract classification of router-related events to a helper (Petr Machata)  [Orabug: 34816080]  
  - mlxsw: spectrum_router: Drop mlxsw_sp arg from counter alloc/free functions (Petr Machata)  [Orabug: 34816080]  
  - mlxsw: reg: Fix packing of router interface counters (Petr Machata)  [Orabug: 34816080]  
  - net: rtnetlink: Add UAPI toggle for IFLA_OFFLOAD_XSTATS_L3_STATS (Petr Machata)  [Orabug: 34816080]  
  - net: rtnetlink: Add RTM_SETSTATS (Petr Machata)  [Orabug: 34816080]  
  - net: rtnetlink: Add UAPI for obtaining L3 offload xstats (Petr Machata)  [Orabug: 34816080]  
  - net: dev: Add hardware stats support (Petr Machata)  [Orabug: 34816080]  
  - net: rtnetlink: Propagate extack to rtnl_offload_xstats_fill() (Petr Machata)  [Orabug: 34816080]  
  - net: rtnetlink: RTM_GETSTATS: Allow filtering inside nests (Petr Machata)  [Orabug: 34816080]  
  - net: rtnetlink: Stop assuming that IFLA_OFFLOAD_XSTATS_* are dev-backed (Petr Machata)  [Orabug: 34816080]  
  - net: rtnetlink: Namespace functions related to IFLA_OFFLOAD_XSTATS_* (Petr Machata)  [Orabug: 34816080]  
  - mlx5: add support for page_pool_get_stats (Joe Damato)  [Orabug: 34816080]  
  - flow_offload: reject offload for all drivers with invalid police parameters (Jianbo Liu)  [Orabug: 34816080]  
  - net: flow_offload: add tc police action parameters (Jianbo Liu)  [Orabug: 34816080]  
  - net/mlx5: Add clarification on sync reset failure (Moshe Shemesh)  [Orabug: 34816080]  
  - net/mlx5: Add reset_state field to MFRL register (Moshe Shemesh)  [Orabug: 34816080]  
  - net/mlx5: cmdif, Refactor error handling and reporting of async commands (Saeed Mahameed)  [Orabug: 34816080]  
  - net/mlx5: Use mlx5_cmd_do() in core create_{cq,dct} (Saeed Mahameed)  [Orabug: 34816080]  
  - net/mlx5: cmdif, Add new api for command execution (Saeed Mahameed)  [Orabug: 34816080]  
  - net/mlx5: cmdif, cmd_check refactoring (Saeed Mahameed)  [Orabug: 34816080]  
  - net/mlx5: cmdif, Return value improvements (Saeed Mahameed)  [Orabug: 34816080]  
  - net/mlx5: Lag, offload active-backup drops to hardware (Mark Bloch)  [Orabug: 34816080]  
  - net/mlx5: Lag, record inactive state of bond device (Mark Bloch)  [Orabug: 34816080]  
  - net/mlx5: Lag, don't use magic numbers for ports (Mark Bloch)  [Orabug: 34816080]  
  - net/mlx5: Lag, use local variable already defined to access E-Switch (Mark Bloch)  [Orabug: 34816080]  
  - net/mlx5: E-switch, add drop rule support to ingress ACL (Mark Bloch)  [Orabug: 34816080]  
  - net/mlx5: E-switch, remove special uplink ingress ACL handling (Mark Bloch)  [Orabug: 34816080]  
  - net/mlx5: E-Switch, reserve and use same uplink metadata across ports (Sunil Rani)  [Orabug: 34816080]  
  - net/mlx5: Add ability to insert to specific flow group (Mark Bloch)  [Orabug: 34816080]  
  - mlx5: remove unused static inlines (Jakub Kicinski)  [Orabug: 34816080]  
  - mlxsw: core: Add support for OSFP transceiver modules (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: Remove resource query check (Ido Schimmel)  [Orabug: 34816080]  
  - mlxsw: core: Unify method of trap support validation (Vadim Pasternak)  [Orabug: 34816080]  
  - mlxsw: spectrum: Remove SP{1,2,3} defines for FW minor and subminor (Jiri Pirko)  [Orabug: 34816080]  
  - mlxsw: core: Remove unnecessary asserts (Vadim Pasternak)  [Orabug: 34816080]  
  - mlxsw: reg: Add "mgpir_" prefix to MGPIR fields comments (Vadim Pasternak)  [Orabug: 34816080]  
  - mlxsw: core_thermal: Remove obsolete API for query resource (Vadim Pasternak)  [Orabug: 34816080]  
  - mlxsw: core_thermal: Rename labels according to naming convention (Vadim Pasternak)  [Orabug: 34816080]  
  - mlxsw: core_hwmon: Fix variable names for hwmon attributes (Vadim Pasternak)  [Orabug: 34816080]  
  - mlxsw: core_thermal: Avoid creation of virtual hwmon objects by thermal module (Vadim Pasternak)  [Orabug: 34816080]  
  - mlxsw: spectrum_span: Ignore VLAN entries not used by the bridge in mirroring (Ido Schimmel)  [Orabug: 34816080]  
  - mlxsw: core: Prevent trap group setting if driver does not support EMAD (Vadim Pasternak)  [Orabug: 34816080]  
  - mlxsw: spectrum: remove guards against !BRIDGE_VLAN_INFO_BRENTRY (Vladimir Oltean)  [Orabug: 34816080]  
  - net/mlx5e: TC, Allow sample action with CT (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: TC, Make post_act parse CT and sample actions (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: TC, Clean redundant counter flag from tc action parsers (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: Use multi table support for CT and sample actions (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: Create new flow attr for multi table actions (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: Add post act offload/unoffload API (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: Pass actions param to actions_match_supported() (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: TC, Move flow hashtable to be per rep (Paul Blakey)  [Orabug: 34816080]  
  - net/mlx5e: E-Switch, Add support for tx_port_ts in switchdev mode (Aya Levin)  [Orabug: 34816080]  
  - net/mlx5e: E-Switch, Add PTP counters for uplink representor (Aya Levin)  [Orabug: 34816080]  
  - net/mlx5e: RX, Restrict bulk size for small Striding RQs (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5e: Default to Striding RQ when not conflicting with CQE compression (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5e: Generalize packet merge error message (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5e: Add support for using xdp->data_meta (Alex Liu)  [Orabug: 34816080]  
  - net/mlx5e: Fix spelling mistake "supoported" -> "supported" (Colin Ian King)  [Orabug: 34816080]  
  - net: rtnetlink: rtnl_stats_get(): Emit an extack for unset filter_mask (Petr Machata)  [Orabug: 34816080]  
  - net/mlx5e: Optimize the common case condition in mlx5e_select_queue (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Optimize modulo in mlx5e_select_queue (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Optimize mlx5e_select_queue (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Use READ_ONCE/WRITE_ONCE for DCBX trust state (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Move repeating code that gets TC prio into a function (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Use select queue parameters to sync with control flow (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Move mlx5e_select_queue to en/selq.c (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Introduce select queue parameters (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Sync txq2sq updates with mlx5e_xmit for HTB queues (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Use a barrier after updating txq2sq (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Cleanup of start/stop all queues (Maxim Mikityanskiy)  [Orabug: 34816080]  
  - net/mlx5e: Use FW limitation for max MPW WQEBBs (Aya Levin)  [Orabug: 34816080]  
  - net/mlx5e: Read max WQEBBs on the SQ from firmware (Aya Levin)  [Orabug: 34816080]  
  - net/mlx5e: Remove unused tstamp SQ field (Tariq Toukan)  [Orabug: 34816080]  
  - mlxsw: Support FLOW_ACTION_MANGLE for SIP and DIP IPv6 addresses (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: Support FLOW_ACTION_MANGLE for SIP and DIP IPv4 addresses (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: core_acl_flex_actions: Add SIP_DIP_ACTION (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: spectrum_acl: Allocate default actions for internal TCAM regions (Ido Schimmel)  [Orabug: 34816080]  
  - mlxsw: spectrum: Guard against invalid local ports (Amit Cohen)  [Orabug: 34816080]  
  - mlxsw: core: Consolidate trap groups to a single event group (Jiri Pirko)  [Orabug: 34816080]  
  - mlxsw: core: Move functions to register/unregister array of traps to core.c (Jiri Pirko)  [Orabug: 34816080]  
  - mlxsw: core: Move basic trap group initialization from spectrum.c (Jiri Pirko)  [Orabug: 34816080]  
  - mlxsw: core: Move basic_trap_groups_set() call out of EMAD init code (Jiri Pirko)  [Orabug: 34816080]  
  - mlxsw: spectrum: Set basic trap groups from an array (Jiri Pirko)  [Orabug: 34816080]  
  - net/mlx5: VLAN push on RX, pop on TX (Dima Chumak)  [Orabug: 34816080]  
  - net/mlx5: Introduce software defined steering capabilities (Dima Chumak)  [Orabug: 34816080]  
  - net/mlx5: Remove unused TIR modify bitmask enums (Tariq Toukan)  [Orabug: 34816080]  
  - net/mlx5e: CT, Remove redundant flow args from tc ct calls (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: TC, Store mapped tunnel id on flow attr (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: Test CT and SAMPLE on flow attr (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: Refactor eswitch attr flags to just attr flags (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: CT, Don't set flow flag CT for ct clear flow (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: TC, Hold sample_attr on stack instead of pointer (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: TC, Reject rules with multiple CT actions (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: TC, Pass attr to tc_act can_offload() (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: TC, Split pedit offloads verify from alloc_tc_pedit_action() (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: TC, Move pedit_headers_action to parse_attr (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: Move counter creation call to alloc_flow_attr_counter() (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: Pass attr arg for attaching/detaching encaps (Roi Dayan)  [Orabug: 34816080]  
  - net/mlx5e: Move code chunk setting encap dests into its own function (Roi Dayan)  [Orabug: 34816080]  
  - mlxsw: spectrum_kvdl: Use struct_size() helper in kzalloc() (Gustavo A. R. Silva)  [Orabug: 34816080]  
  - mlxsw: core_env: Forbid module reset on RJ45 ports (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: core_env: Forbid power mode set and get on RJ45 ports (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: core_env: Forbid getting module EEPROM on RJ45 ports (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: core_env: Query and store port module's type during initialization (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: reg: Add Port Module Type Mapping register (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: spectrum_ethtool: Add support for two new link modes (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: Add netdev argument to mlxsw_env_get_module_info() (Danielle Ratson)  [Orabug: 34816080]  
  - mlxsw: core_env: Do not pass number of modules as argument (Ido Schimmel)  [Orabug: 34816080]  
  - mlxsw: spectrum_ethtool: Remove redundant variable (Ido Schimmel)  [Orabug: 34816080]  
  - bpf: introduce BPF_F_XDP_HAS_FRAGS flag in prog_flags loading the ebpf program (Lorenzo Bianconi)  [Orabug: 34816080]  
  - net: xdp: add xdp_update_skb_shared_info utility routine (Lorenzo Bianconi)  [Orabug: 34816080]  
  - xdp: introduce flags field in xdp_buff/xdp_frame (Lorenzo Bianconi)  [Orabug: 34816080]  
  - net: skbuff: add size metadata to skb_shared_info for xdp (Lorenzo Bianconi)  [Orabug: 34816080]  
  - flow_offload: allow user to offload tc action to net device (Baowen Zheng)  [Orabug: 34816080]  
  - flow_offload: add ops to tc_action_ops for flow action setup (Baowen Zheng)  [Orabug: 34816080]  
  - flow_offload: rename offload functions with offload instead of flow (Baowen Zheng)  [Orabug: 34816080]  
  - devlink: hold the instance lock during eswitch_mode callbacks (Jakub Kicinski)  [Orabug: 34816080]  
  - netdevsim: replace vfs_lock with devlink instance lock (Jakub Kicinski)  [Orabug: 34816080]  
  - netdevsim: fix uninit value in nsim_drv_configure_vfs() (Jakub Kicinski)  [Orabug: 34816080]  
  - netdevsim: replace port_list_lock with devlink instance lock (Jakub Kicinski)  [Orabug: 34816080]  
  - devlink: add explicitly locked flavor of the rate node APIs (Jakub Kicinski)  [Orabug: 34816080]  
  - bnxt: use the devlink instance lock to protect sriov (Jakub Kicinski)  [Orabug: 34816080]  
  - devlink: pass devlink_port to port_split / port_unsplit callbacks (Jakub Kicinski)  [Orabug: 34816080]  
  - devlink: hold the instance lock in port_split / port_unsplit callbacks (Jakub Kicinski)  [Orabug: 34816080]  
  - eth: mlxsw: switch to explicit locking for port registration (Jakub Kicinski)  [Orabug: 34816080]  
  - eth: nfp: replace driver's "pf" lock with devlink instance lock (Jakub Kicinski)  [Orabug: 34816080]  
  - eth: nfp: wrap locking assertions in helpers (Jakub Kicinski)  [Orabug: 34816080]  
  - devlink: expose instance locking and add locked port registering (Jakub Kicinski)  [Orabug: 34816080]  
  - netdevsim: rename 'driver' entry points (Jakub Kicinski)  [Orabug: 34816080]  
  - netdevsim: move max vf config to dev (Jakub Kicinski)  [Orabug: 34816080]  
  - netdevsim: move details of vf config to dev (Jakub Kicinski)  [Orabug: 34816080]  
  - uek-rpm: Define CONFIG_MLX5_VFIO_PCI=m (Joao Martins)  [Orabug: 34778256]  
  - vfio/mlx5: Set VF as migratable (Yishai Hadas)  [Orabug: 34778256]  
  - net/mlx5: Introduce ifc bits for migratable (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/iova_bitmap: Fix PAGE_SIZE unaligned bitmaps (Joao Martins)  [Orabug: 34778256]  
  - vfio/mlx5: Set the driver DMA logging callbacks (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Manage error scenarios on tracker (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Report dirty pages from tracker (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Create and destroy page tracker object (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Init QP based resources for dirty tracking (Yishai Hadas)  [Orabug: 34778256]  
  - vfio: Introduce the DMA logging feature support (Yishai Hadas)  [Orabug: 34778256]  
  - vfio: Add an IOVA bitmap support (Joao Martins)  [Orabug: 34778256]  
  - vfio: Introduce DMA logging uAPIs (Yishai Hadas)  [Orabug: 34778256]  
  - net/mlx5: Query ADV_VIRTUALIZATION capabilities (Yishai Hadas)  [Orabug: 34778256]  
  - net/mlx5: Introduce ifc bits for page tracker (Yishai Hadas)  [Orabug: 34778256]  
  - vfio: Move vfio.c to vfio_main.c (Jason Gunthorpe)  [Orabug: 34778256]  
  - net/mlx5: Use software VHCA id when it's supported (Yishai Hadas)  [Orabug: 34778256]  
  - net/mlx5: Introduce ifc bits for using software vhca id (Yishai Hadas)  [Orabug: 34778256]  
  - vfio: Split migration ops from main device ops (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Protect mlx5vf_disable_fds() upon close device (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/pci: Have all VFIO PCI drivers store the vfio_pci_core_device in drvdata (Jason Gunthorpe)  [Orabug: 34778256]  
  - vfio/mlx5: Run the SAVE state command in an async mode (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Refactor to enable VFs migration in parallel (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Manage the VF attach/detach callback from the PF (Yishai Hadas)  [Orabug: 34778256]  
  - net/mlx5: Expose mlx5_sriov_blocking_notifier_register / unregister APIs (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Fix to not use 0 as NULL pointer (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Use its own PCI reset_done error handler (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/pci: Expose vfio_pci_core_aer_err_detected() (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Implement vfio_pci driver for mlx5 devices (Yishai Hadas)  [Orabug: 34778256]  
  - vfio/mlx5: Expose migration commands over mlx5 device (Yishai Hadas)  [Orabug: 34778256]  
  - vfio: Remove migration protocol v1 documentation (Jason Gunthorpe)  [Orabug: 34778256]  
  - vfio: Extend the device migration protocol with RUNNING_P2P (Jason Gunthorpe)  [Orabug: 34778256]  
  - vfio: Define device migration protocol v2 (Jason Gunthorpe)  [Orabug: 34778256]  
  - vfio: Have the core code decode the VFIO_DEVICE_FEATURE ioctl (Jason Gunthorpe)  [Orabug: 34778256]  
  - net/mlx5: Add migration commands definitions (Yishai Hadas)  [Orabug: 34778256]  
  - net/mlx5: Introduce migration bits and structures (Yishai Hadas)  [Orabug: 34778256]  
  - net/mlx5: Expose APIs to get/put the mlx5 core device (Yishai Hadas)  [Orabug: 34778256]  
  - PCI/IOV: Add pci_iov_get_pf_drvdata() to allow VF reaching the drvdata of a PF (Jason Gunthorpe)  [Orabug: 34778256]  
  - net/mlx5: Disable SRIOV before PF removal (Yishai Hadas)  [Orabug: 34778256]  
  - net/mlx5: Reuse exported virtfn index function call (Leon Romanovsky)  [Orabug: 34778256]  
  - PCI/IOV: Add pci_iov_vf_id() to get VF index (Jason Gunthorpe)  [Orabug: 34778256]  
  - NFSv4.2: Fix up an invalid combination of memory allocation flags (Trond Myklebust)  [Orabug: 34844640]  
  - Add SecureBoot signing for aarch64 arch (Sherry Yang)  [Orabug: 34845745]  
  - uek-rpm: Fix 'make olddefconfig' BLAKE2S crypto warnings (Harshit Mogalapalli)  [Orabug: 34644522]  
  - RHCK 9.1 builtin option change to module for UEK7u1 (Vijayendra Suman)  [Orabug: 34687867]  
  - uek-rpm: Disable few config options that we enabled previously. (Harshit Mogalapalli)  [Orabug: 34803318]  
  - qlogic: qed: fix clang -Wformat warnings (Justin Stitt)  [Orabug: 34789504]  
  - qed: Use bitmap_empty() (Christophe JAILLET)  [Orabug: 34789504]  
  - qed: Use the bitmap API to allocate bitmaps (Christophe JAILLET)  [Orabug: 34789504]  
  - qlogic/qed: fix repeated words in comments (Jilin Yuan)  [Orabug: 34789504]  
  - qed: fix typos in comments (Julia Lawall)  [Orabug: 34789504]  
  - net: qed: fix typos in comments (Julia Lawall)  [Orabug: 34789504]  
  - RDMA/qedr: Remove unnecessary synchronize_irq() before free_irq() (Minghao Chi)  [Orabug: 34789504]  
  - qed: Remove unnecessary synchronize_irq() before free_irq() (Minghao Chi)  [Orabug: 34789504]  
  - qed: replace bitmap_weight with bitmap_empty in qed_roce_stop() (Yury Norov)  [Orabug: 34789504]  
  - qed: rework qed_rdma_bmap_free() (Yury Norov)  [Orabug: 34789504]  
  - qede: Reduce verbosity of ptp tx timestamp (Prabhakar Kushwaha)  [Orabug: 34789504]  
  - qed: Remove IP services API. (Guillaume Nault)  [Orabug: 34789504]  
  - qed: remove an unneed NULL check on list iterator (Xiaomeng Tong)  [Orabug: 34789504]  
  - qed: fix ethtool register dump (Manish Chopra)  [Orabug: 34789504]  
  - qed: remove unnecessary memset in qed_init_fw_funcs (Wan Jiabing)  [Orabug: 34789504]  
  - qed: prevent a fw assert during device shutdown (Venkata Sudheer Kumar Bhavaraju)  [Orabug: 34789504]  
  - qed: use msleep() in qed_mcp_cmd() and add qed_mcp_cmd_nosleep() for udelay. (Venkata Sudheer Kumar Bhavaraju)  [Orabug: 34789504]  
  - qed: Use dma_set_mask_and_coherent() and simplify code (Christophe JAILLET)  [Orabug: 34789504]  
  - qed*: esl priv flag support through ethtool (Manish Chopra)  [Orabug: 34789504]  
  - qed*: enhance tx timeout debug info (Manish Chopra)  [Orabug: 34789504]  
  - qed: Enhance rammod debug prints to provide pretty details (Prabhakar Kushwaha)  [Orabug: 34789504]  
  - net: qed: fix the array may be out of bound (zhangyue)  [Orabug: 34789504]  
  - qed: Use the bitmap API to simplify some functions (Christophe JAILLET)  [Orabug: 34789504]  
  - RDMA/qed: Use helper function to set GUIDs (Kamal Heib)  [Orabug: 34789504]  
  - net: qed_dev: fix check of true !rc expression (Jean Sacren)  [Orabug: 34789504]  
  - net: qed_ptp: fix check of true !rc expression (Jean Sacren)  [Orabug: 34789504]  
  - RDMA/qedr: Remove unsupported qedr_resize_cq callback (Kamal Heib)  [Orabug: 34789504]  
  - qed: Change the TCP common variable - "iscsi_ooo" (Shai Malin)  [Orabug: 34789504]  
  - qed: Optimize the ll2 ooo flow (Shai Malin)  [Orabug: 34789504]  
  - net: qed_debug: fix check of false (grc_param < 0) expression (Jean Sacren)  [Orabug: 34789504]  
  - qed: Fix compilation for CONFIG_QED_SRIOV undefined scenario (Prabhakar Kushwaha)  [Orabug: 34789504]  
  - qed: Initialize debug string array (Tim Gardner)  [Orabug: 34789504]  
  - qed: Fix spelling mistake "ctx_bsaed" -> "ctx_based" (Colin Ian King)  [Orabug: 34789504]  
  - qed: fix ll2 establishment during load of RDMA driver (Manish Chopra)  [Orabug: 34789504]  
  - qed: Update the TCP active termination 2 MSL timer ("TIME_WAIT") (Prabhakar Kushwaha)  [Orabug: 34789504]  
  - qed: Update TCP silly-window-syndrome timeout for iwarp, scsi (Nikolay Assa)  [Orabug: 34789504]  
  - qed: Update debug related changes (Prabhakar Kushwaha)  [Orabug: 34789504]  
  - qed: Add '_GTT' suffix to the IRO RAM macros (Prabhakar Kushwaha)  [Orabug: 34789504]  
  - qed: Update FW init functions to support FW 8.59.1.0 (Omkar Kulkarni)  [Orabug: 34789504]  
  - qed: Use enum as per FW 8.59.1.0 in qed_iro_hsi.h (Prabhakar Kushwaha)  [Orabug: 34789504]  
  - qed: Update qed_hsi.h for fw 8.59.1.0 (Prabhakar Kushwaha)  [Orabug: 34789504]  
  - qed: Update qed_mfw_hsi.h for FW ver 8.59.1.0 (Prabhakar Kushwaha)  [Orabug: 34789504]  
  - qed: Update common_hsi for FW ver 8.59.1.0 (Prabhakar Kushwaha)  [Orabug: 34789504]  
  - qed: Split huge qed_hsi.h header file (Omkar Kulkarni)  [Orabug: 34789504]  
  - qed: Remove e4_ and _e4 from FW HSI (Shai Malin)  [Orabug: 34789504]  
  - pmem: fix a name collision (Jane Chu)  [Orabug: 34670103]  
  - pmem: implement pmem_recovery_write() (Jane Chu)  [Orabug: 34670103]  
  - pmem: refactor pmem_clear_poison() (Jane Chu)  [Orabug: 34670103]  
  - dax: add .recovery_write dax_operation (Jane Chu)  [Orabug: 34670103]  
  - dax: introduce DAX_RECOVERY_WRITE dax access mode (Jane Chu)  [Orabug: 34670103]  
  - dm-linear: add a linear_dax_pgoff helpe (Jane Chu)  [Orabug: 34670103]  
  - dm-log-writes: add a log_writes_dax_pgoff helper (Jane Chu)  [Orabug: 34670103]  
  - dm-stripe: add a stripe_dax_pgoff helper (Jane Chu)  [Orabug: 34670103]  
  - mce: fix set_mce_nospec to always unmap the whole page (Jane Chu)  [Orabug: 34670103]  
  - x86/mce: relocate set{clear}_mce_nospec() functions (Jane Chu)  [Orabug: 34670103]  
  - acpi/nfit: rely on mce->misc to determine poison granularity (Jane Chu)  [Orabug: 34670103]  
  - crypto: seqiv - flag instantiations as FIPS compliant (Vladis Dronov)  [Orabug: 34711430]  
  - crypto: rsa - flag instantiations as FIPS compliant (Saeed Mirzamohammadi)  [Orabug: 34711430]  
  - crypto: ecdh - implement FIPS PCT (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: dh - implement FIPS PCT (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: dh - calculate Q from P for the full public key verification (Nicolai Stange)  [Orabug: 34711430]  
  - lib/mpi: export mpi_rshift (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: dh - allow for passing NULL to the ffdheXYZ(dh)s' ->set_secret() (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: testmgr - add keygen tests for ffdheXYZ(dh) templates (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: dh - implement private key generation primitive for ffdheXYZ(dh) (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: testmgr - add known answer tests for ffdheXYZ(dh) templates (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: dh - implement ffdheXYZ(dh) templates (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: dh - introduce common code for built-in safe-prime group support (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: dh - split out deserialization code from crypto_dh_decode() (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: dh - constify struct dh's pointer members (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: dh - remove struct dh's ->q member (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: kpp - provide support for KPP spawns (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: kpp - provide support for KPP template instances (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: xts - restrict key lengths to approved values in FIPS mode (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: hmac - disallow keys < 112 bits in FIPS mode (Stephan Müller)  [Orabug: 34711430]  
  - crypto: dh - limit key size to 2048 in FIPS mode (Stephan Müller)  [Orabug: 34711430]  
  - crypto: rsa - limit key size to 2048 in FIPS mode (Stephan Müller)  [Orabug: 34711430]  
  - crypto: HMAC - add fips_skip support (Stephan Müller)  [Orabug: 34711430]  
  - crypto: disallow drbg with sha384 hash in FIPS mode (Saeed Mirzamohammadi)  [Orabug: 34711430]  
  - crypto: des - disallow des3 in FIPS mode (Stephan Müller)  [Orabug: 34711430]  
  - crypto: dh - disallow plain "dh" usage in FIPS mode (Nicolai Stange)  [Orabug: 34711430]  
  - crypto: ecdh - disallow plain "ecdh" usage in FIPS mode (Saeed Mirzamohammadi)  [Orabug: 34711430]  
  - crypto: testmgr - disallow plain cbcmac(aes) and ghash in FIPS mode (Saeed Mirzamohammadi)  [Orabug: 34711430]  
  - crypto: api - allow algs only in specific constructions in FIPS mode (Nicolai Stange)  [Orabug: 34711430]  
  - NFSv4.2: Fix missing removal of SLAB_ACCOUNT on kmem_cache allocation (Muchun Song)  [Orabug: 34717841]  
  - slab: remove __alloc_size attribute from __kmalloc_track_caller (Greg Kroah-Hartman)  [Orabug: 34717841]  
  - mm: memcontrol: rename memcg_cache_id to memcg_kmem_id (Muchun Song)  [Orabug: 34717841]  
  - mm: list_lru: rename list_lru_per_memcg to list_lru_memcg (Muchun Song)  [Orabug: 34717841]  
  - mm: memcontrol: fix cannot alloc the maximum memcg ID (Muchun Song)  [Orabug: 34717841]  
  - mm: memcontrol: reuse memory cgroup ID for kmem ID (Muchun Song)  [Orabug: 34717841]  
  - mm: list_lru: replace linear array with xarray (Muchun Song)  [Orabug: 34717841]  
  - mm: list_lru: rename memcg_drain_all_list_lrus to memcg_reparent_list_lrus (Muchun Song)  [Orabug: 34717841]  
  - mm: list_lru: allocate list_lru_one only when needed (Muchun Song)  [Orabug: 34717841]  
  - mm: memcontrol: move memcg_online_kmem() to mem_cgroup_css_online() (Muchun Song)  [Orabug: 34717841]  
  - xarray: use kmem_cache_alloc_lru to allocate xa_node (Muchun Song)  [Orabug: 34717841]  
  - mm: dcache: use kmem_cache_alloc_lru() to allocate dentry (Muchun Song)  [Orabug: 34717841]  
  - f2fs: allocate inode by using alloc_inode_sb() (Muchun Song)  [Orabug: 34717841]  
  - fs: allocate inode by using alloc_inode_sb() (Muchun Song)  [Orabug: 34717841]  
  - fs: introduce alloc_inode_sb() to allocate filesystems specific inode (Muchun Song)  [Orabug: 34717841]  
  - mm: introduce kmem_cache_alloc_lru (Muchun Song)  [Orabug: 34717841]  
  - mm: list_lru: transpose the array of per-node per-memcg lru lists (Muchun Song)  [Orabug: 34717841]  
  - mm: list_lru: only add memcg-aware lrus to the global lru list (Muchun Song)  [Orabug: 34717841]  
  - mm: list_lru: fix the return value of list_lru_count_one() (Muchun Song)  [Orabug: 34717841]  
  - mm: list_lru: remove holding lru lock (Muchun Song)  [Orabug: 34717841]  
  - mm: memcontrol: remove the kmem states (Muchun Song)  [Orabug: 34717841]  
  - mm: memcontrol: remove kmemcg_id reparenting (Muchun Song)  [Orabug: 34717841]  
  - mm/memcg: remove obsolete memcg_free_kmem() (Waiman Long)  [Orabug: 34717841]  
  - memcg, kmem: further deprecate kmem.limit_in_bytes (Shakeel Butt)  [Orabug: 34717841]  
  - mm/list_lru.c: prefer struct_size over open coded arithmetic (Len Baker)  [Orabug: 34717841]  
  - slab: add __alloc_size attributes for better bounds checking (Kees Cook)  [Orabug: 34717841]  
  - slab: clean up function prototypes (Kees Cook)  [Orabug: 34717841]  
  - net/mlx5e: SHAMPO, reduce TIR indication (Ben Ben-Ishay)  [Orabug: 34481188]  
  - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE (Dima Chumak)  [Orabug: 34481188]  
  - net/mlx5e: Fix VF min/max rate parameters interchange mistake (Gal Pressman)  [Orabug: 34481188]  
  - net/mlx5e: Add missing increment of count (Lama Kayal)  [Orabug: 34481188]  
  - net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (Maor Dickman)  [Orabug: 34481188]  
  - net/mlx5e: Add feature check for set fec counters (Lama Kayal)  [Orabug: 34481188]  
  - net/mlx5e: TC, Skip redundant ct clear actions (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5e: Avoid field-overflowing memcpy() (Kees Cook)  [Orabug: 34481188]  
  - net/mlx5e: Use struct_group() for memcpy() region (Kees Cook)  [Orabug: 34481188]  
  - net/mlx5e: Avoid implicit modify hdr for decap drop rule (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Fix broken SKB allocation in HW-GRO (Khalid Manaa)  [Orabug: 34481188]  
  - net/mlx5e: Fix wrong calculation of header index in HW_GRO (Khalid Manaa)  [Orabug: 34481188]  
  - net/mlx5e: TC, Reject rules with forward and drop actions (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: TC, Reject rules with drop and modify hdr action (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Fix build error in fec_set_block_stats() (Jakub Kicinski)  [Orabug: 34481188]  
  - mlxsw: spectrum: Extend to support Spectrum-4 ASIC (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_acl_bloom_filter: Add support for Spectrum-4 calculation (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: Add operations structure for bloom filter calculation (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_acl_bloom_filter: Rename Spectrum-2 specific objects for future use (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_acl_bloom_filter: Reorder functions to make the code more aesthetic (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: Introduce flex key elements for Spectrum-4 (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: Rename virtual router flex key element (Amit Cohen)  [Orabug: 34481188]  
  - net/mlx5e: Fix nullptr on deleting mirroring rule (Dima Chumak)  [Orabug: 34481188]  
  - net/mlx5e: Add recovery flow in case of error CQE (Gal Pressman)  [Orabug: 34481188]  
  - net/mlx5e: TC, Remove redundant error logging (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Refactor set_pflag_cqe_based_moder (Saeed Mahameed)  [Orabug: 34481188]  
  - net/mlx5e: Move HW-GRO and CQE compression check to fix features flow (Gal Pressman)  [Orabug: 34481188]  
  - net/mlx5e: Fix feature check per profile (Aya Levin)  [Orabug: 34481188]  
  - net/mlx5e: Expose FEC counters via ethtool (Lama Kayal)  [Orabug: 34481188]  
  - net/mlx5: SF, Use all available cpu for setting cpu affinity (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Introduce API for bulk request and release of IRQs (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Split irq_pool_affinity logic to new file (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Move affinity assignment into irq_request (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Introduce control IRQ request API (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: mlx5e_hv_vhca_stats_create return type to void (Saeed Mahameed)  [Orabug: 34481188]  
  - net: fixup build after bpf header changes (Jakub Kicinski)  [Orabug: 34481188]  
  - net/mlx5: CT: Set flow source hint from provided tuple device (Paul Blakey)  [Orabug: 34481188]  
  - net/mlx5: Set SMFS as a default steering mode if device supports it (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Ignore modify TTL if device doesn't support it (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Improve steering for empty or RX/TX-only matchers (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Add support for matching on geneve_tlv_option_0_exist field (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Support matching on tunnel headers 0 and 1 (Muhammad Sammar)  [Orabug: 34481188]  
  - net/mlx5: DR, Add misc5 to match_param structs (Muhammad Sammar)  [Orabug: 34481188]  
  - net/mlx5: Add misc5 flow table match parameters (Muhammad Sammar)  [Orabug: 34481188]  
  - net/mlx5: DR, Warn on failure to destroy objects due to refcount (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Add support for UPLINK destination type (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Add support for dumping steering info (Muhammad Sammar)  [Orabug: 34481188]  
  - net/mlx5: DR, Add missing reserved fields to dr_match_param (Muhammad Sammar)  [Orabug: 34481188]  
  - net/mlx5: DR, Add check for flex parser ID value (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Remove unused struct member in matcher (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Fix lower case macro prefix "mlx5_" to "MLX5_" (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Fix error flow in creating matcher (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - mlxsw: spectrum_flower: Make vlan_id limitation more specific (Amit Cohen)  [Orabug: 34481188]  
  - net/mlx5e: Use auxiliary_device driver data helpers (David E. Box)  [Orabug: 34481188]  
  - driver core: auxiliary bus: Add driver data helpers (David E. Box)  [Orabug: 34481188]  
  - net/mlx5e: Take packet_merge params directly from the RX res struct (Tariq Toukan)  [Orabug: 34481188]  
  - net/mlx5e: Allocate per-channel stats dynamically at first usage (Lama Kayal)  [Orabug: 34481188]  
  - net/mlx5e: Use dynamic per-channel allocations in stats (Tariq Toukan)  [Orabug: 34481188]  
  - net/mlx5e: Allow profile-specific limitation on max num of channels (Tariq Toukan)  [Orabug: 34481188]  
  - net/mlx5e: Save memory by using dynamic allocation in netdev priv (Tariq Toukan)  [Orabug: 34481188]  
  - net/mlx5e: Add profile indications for PTP and QOS HTB features (Tariq Toukan)  [Orabug: 34481188]  
  - net/mlx5e: Use bitmap field for profile features (Tariq Toukan)  [Orabug: 34481188]  
  - net/mlx5: Remove the repeated declaration (Shaokun Zhang)  [Orabug: 34481188]  
  - net/mlx5: Let user configure max_macs generic param (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Let user configure event_eq_size param (Shay Drory)  [Orabug: 34481188]  
  - devlink: Add new "event_eq_size" generic device param (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Let user configure io_eq_size param (Shay Drory)  [Orabug: 34481188]  
  - devlink: Add new "io_eq_size" generic device param (Shay Drory)  [Orabug: 34481188]  
  - mlxsw: core: Extend devlink health reporter with new events and parameters (Danielle Ratson)  [Orabug: 34481188]  
  - mlxsw: reg: Extend MFDE register with new events and parameters (Danielle Ratson)  [Orabug: 34481188]  
  - mlxsw: core: Convert a series of if statements to switch case (Danielle Ratson)  [Orabug: 34481188]  
  - mlxsw: Fix naming convention of MFDE fields (Danielle Ratson)  [Orabug: 34481188]  
  - flow_offload: add index to flow_action_entry structure (Baowen Zheng)  [Orabug: 34481188]  
  - flow_offload: reject to offload tc actions in offload drivers (Baowen Zheng)  [Orabug: 34481188]  
  - net/mlx5: Introduce log_max_current_uc_list_wr_supported bit (Shay Drory)  [Orabug: 34481188]  
  - mlxsw: Add support for VxLAN with IPv6 underlay (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_nve: Keep track of IPv6 addresses used by FDB entries (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: reg: Add a function to fill IPv6 unicast FDB entries (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: Split handling of FDB tunnel entries between address families (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_nve_vxlan: Make VxLAN flags check per address family (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_ipip: Use common hash table for IPv6 address mapping (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum: Add hash table for IPv6 address mapping (Amit Cohen)  [Orabug: 34481188]  
  - net/mlx5e: Move goto action checks into tc_action goto post parse op (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Move vlan action chunk into tc action vlan post parse op (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add post_parse() op to tc action infrastructure (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Move sample attr allocation to tc_action sample parse op (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: TC action parsing loop (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add redirect ingress to tc action infra (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add sample and ptype to tc_action infra (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add ct to tc action infra (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add mirred/redirect to tc action infra (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add mpls push/pop to tc action infra (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add vlan push/pop/mangle to tc action infra (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add pedit to tc action infra (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add csum to tc action infra (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add tunnel encap/decap to tc action infra (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add goto to tc action infra (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add tc action infrastructure (Roi Dayan)  [Orabug: 34481188]  
  - net_tstamp: add new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu)  [Orabug: 34481188]  
  - net/mlx5: Create more priorities for FDB bypass namespace (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Refactor mlx5_get_flow_namespace (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Separate FDB namespace (Maor Gottlieb)  [Orabug: 34481188]  
  - bpf: Let bpf_warn_invalid_xdp_action() report more info (Paolo Abeni)  [Orabug: 34481188]  
  - net/mlx4: Use irq_update_affinity_hint() (Nitesh Narayan Lal)  [Orabug: 34481188]  
  - net/mlx5: Use irq_set_affinity_and_hint() (Nitesh Narayan Lal)  [Orabug: 34481188]  
  - genirq: Provide new interfaces for affinity hints (Thomas Gleixner)  [Orabug: 34481188]  
  - net/mlx5: Dynamically resize flow counters query buffer (Avihai Horon)  [Orabug: 34481188]  
  - net/mlx5e: TC, Set flow attr ip_version earlier (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: TC, Move common flow_action checks into function (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Remove redundant actions arg from vlan push/pop funcs (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Remove redundant actions arg from validate_goto_chain() (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: TC, Remove redundant action stack var (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Hide function mlx5e_num_channels_changed (Tariq Toukan)  [Orabug: 34481188]  
  - net/mlx5e: SHAMPO, clean MLX5E_MAX_KLM_PER_WQE macro (Ben Ben-Ishay)  [Orabug: 34481188]  
  - net/mlx5: SF, silence an uninitialized variable warning (Dan Carpenter)  [Orabug: 34481188]  
  - net/mlx5: Fix error return code in esw_qos_create() (Wei Yongjun)  [Orabug: 34481188]  
  - mlx5: fix mlx5i_grp_sw_update_stats() stack usage (Arnd Bergmann)  [Orabug: 34481188]  
  - mlx5: fix psample_sample_packet link error (Arnd Bergmann)  [Orabug: 34481188]  
  - mlxsw: Use Switch Multicast ID Register Version 2 (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: Use Switch Flooding Table Register Version 2 (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: Add support for more than 256 ports in SBSR register (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: Use u16 for local_port field instead of u8 (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: reg: Adjust PPCNT register to support local port 255 (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: reg: Increase 'port_num' field in PMTDB register (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: reg: Align existing registers to use extended local_port field (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: item: Add support for local_port field in a split form (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: reg: Remove unused functions (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum: Bump minimum FW version to xx.2010.1006 (Amit Cohen)  [Orabug: 34481188]  
  - devlink: Simplify devlink resources unregister call (Leon Romanovsky)  [Orabug: 34481188]  
  - mlxsw: spectrum_router: Remove deadcode in mlxsw_sp_rif_mac_profile_find (Danielle Ratson)  [Orabug: 34481188]  
  - devlink: Add 'enable_iwarp' generic device param (Shiraz Saleem)  [Orabug: 34481188]  
  - mlxsw: constify address in mlxsw_sp_port_dev_addr_set (Jakub Kicinski)  [Orabug: 34481188]  
  - stmmac: fix build due to brainos in trans_start changes (Alexander Lobakin)  [Orabug: 34481188]  
  - net: annotate accesses to queue->trans_start (Eric Dumazet)  [Orabug: 34481188]  
  - net/mlx5: E-switch, Create QoS on demand (Dmytro Linkin)  [Orabug: 34481188]  
  - net/mlx5: E-switch, Enable vport QoS on demand (Dmytro Linkin)  [Orabug: 34481188]  
  - net/mlx5: E-switch, move offloads mode callbacks to offloads file (Parav Pandit)  [Orabug: 34481188]  
  - net/mlx5: E-switch, Reuse mlx5_eswitch_set_vport_mac (Parav Pandit)  [Orabug: 34481188]  
  - net/mlx5: E-switch, Remove vport enabled check (Parav Pandit)  [Orabug: 34481188]  
  - net/mlx5e: Specify out ifindex when looking up decap route (Chris Mi)  [Orabug: 34481188]  
  - net/mlx5e: TC, Move comment about mod header flag to correct place (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: TC, Move kfree() calls after destroying all resources (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: TC, Destroy nic flow counter if exists (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5: TC, using swap() instead of tmp variable (Yihao Han)  [Orabug: 34481188]  
  - net/mlx5: CT: Allow static allocation of mod headers (Paul Blakey)  [Orabug: 34481188]  
  - net/mlx5e: Refactor mod header management API (Paul Blakey)  [Orabug: 34481188]  
  - net/mlx5: Avoid printing health buffer when firmware is unavailable (Aya Levin)  [Orabug: 34481188]  
  - net/mlx5: Fix format-security build warnings (Saeed Mahameed)  [Orabug: 34481188]  
  - net/mlx5e: Support ethtool cq mode (Saeed Mahameed)  [Orabug: 34481188]  
  - netdevsim: move vfconfig to nsim_dev (Jakub Kicinski)  [Orabug: 34481188]  
  - netdevsim: take rtnl_lock when assigning num_vfs (Jakub Kicinski)  [Orabug: 34481188]  
  - netdevsim: remove max_vfs dentry (Jakub Kicinski)  [Orabug: 34481188]  
  - virtio_net: introduce TX timeout watchdog (Tony Lu)  [Orabug: 34481188]  
  - net/mlx5e: TC, Fix memory leak with rules with internal port (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5: Fix some error handling paths in 'mlx5e_tc_add_fdb_flow()' (Christophe JAILLET)  [Orabug: 34481188]  
  - net/mlx5e: Fix skb memory leak when TC classifier action offloads are disabled (Gal Pressman)  [Orabug: 34481188]  
  - net/mlx5: Fix tc max supported prio for nic mode (Chris Mi)  [Orabug: 34481188]  
  - net/mlx5: Use first online CPU instead of hard coded CPU (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: DR, Fix querying eswitch manager vport for ECPF (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - mlxsw: spectrum_router: Consolidate MAC profiles when possible (Danielle Ratson)  [Orabug: 34481188]  
  - net/mlx5e: SHAMPO, Fix constant expression result (Ben Ben-Ishay)  [Orabug: 34481188]  
  - net/mlx5: Fix access to a non-supported register (Aya Levin)  [Orabug: 34481188]  
  - net/mlx5: Fix too early queueing of log timestamp work (Gal Pressman)  [Orabug: 34481188]  
  - net/mlx5: Fix use after free in mlx5_health_wait_pci_up (Amir Tzin)  [Orabug: 34481188]  
  - net/mlx5: E-Switch, Use indirect table only if all destinations support it (Maor Dickman)  [Orabug: 34481188]  
  - net/mlx5: Lag, Fix recreation of VF LAG (Maor Gottlieb)  [Orabug: 34481188]  
  - mlxsw: spectrum: Allow driver to load with old firmware versions (Danielle Ratson)  [Orabug: 34481188]  
  - RDMA/nldev: Check stat attribute before accessing it (Leon Romanovsky)  [Orabug: 34481188]  
  - net/mlx5: Fix flow counters SF bulk query len (Avihai Horon)  [Orabug: 34481188]  
  - net/mlx5: DR, Fix check for unsupported fields in match param (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Handle eswitch manager and uplink vports separately (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: Lag, fix a potential Oops with mlx5_lag_create_definer() (Dan Carpenter)  [Orabug: 34481188]  
  - net/mlx5: Support internal port as decap route device (Ariel Levkovich)  [Orabug: 34481188]  
  - net/mlx5e: Term table handling of internal port rules (Ariel Levkovich)  [Orabug: 34481188]  
  - net/mlx5e: Add indirect tc offload of ovs internal port (Ariel Levkovich)  [Orabug: 34481188]  
  - net/mlx5e: Offload internal port as encap route device (Ariel Levkovich)  [Orabug: 34481188]  
  - net/mlx5e: Offload tc rules that redirect to ovs internal port (Ariel Levkovich)  [Orabug: 34481188]  
  - net/mlx5e: Accept action skbedit in the tc actions list (Ariel Levkovich)  [Orabug: 34481188]  
  - net/mlx5: E-Switch, Add ovs internal port mapping to metadata support (Ariel Levkovich)  [Orabug: 34481188]  
  - net/mlx5e: Use generic name for the forwarding dev pointer (Ariel Levkovich)  [Orabug: 34481188]  
  - net/mlx5e: Refactor rx handler of represetor device (Ariel Levkovich)  [Orabug: 34481188]  
  - net/mlx5: DR, Add check for unsupported fields in match param (Muhammad Sammar)  [Orabug: 34481188]  
  - net/mlx5: Allow skipping counter refresh on creation (Paul Blakey)  [Orabug: 34481188]  
  - net/mlx5: CT: Remove warning of ignore_flow_level support for VFs (Paul Blakey)  [Orabug: 34481188]  
  - net/mlx5: Add esw assignment back in mlx5e_tc_sample_unoffload() (Nathan Chancellor)  [Orabug: 34481188]  
  - net: mellanox: mlxbf_gige: Replace non-standard interrupt handling (Asmaa Mnebhi)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Offload root TBF as port shaper (Petr Machata)  [Orabug: 34481188]  
  - RDMA/core: Fix missed initialization of rdma_hw_stats::lock (Mark Zhang)  [Orabug: 34481188]  
  - RDMA/umem: Allow pinned dmabuf umem usage (Gal Pressman)  [Orabug: 34481188]  
  - net/mlx5: Lag, Make mlx5_lag_is_multipath() be static inline (Maor Dickman)  [Orabug: 34481188]  
  - net/mlx5e: Prevent HW-GRO and CQE-COMPRESS features operate together (Khalid Manaa)  [Orabug: 34481188]  
  - net/mlx5e: Add HW-GRO offload (Khalid Manaa)  [Orabug: 34481188]  
  - net/mlx5e: Add HW_GRO statistics (Khalid Manaa)  [Orabug: 34481188]  
  - net/mlx5e: HW_GRO cqe handler implementation (Khalid Manaa)  [Orabug: 34481188]  
  - net/mlx5e: Add data path for SHAMPO feature (Ben Ben-Ishay)  [Orabug: 34481188]  
  - net/mlx5e: Add handle SHAMPO cqe support (Khalid Manaa)  [Orabug: 34481188]  
  - net/mlx5e: Add control path for SHAMPO feature (Ben Ben-Ishay)  [Orabug: 34481188]  
  - net/mlx5e: Add support to klm_umr_wqe (Ben Ben-Ishay)  [Orabug: 34481188]  
  - net/mlx5: Add SHAMPO caps, HW bits and enumerations (Ben Ben-Ishay)  [Orabug: 34481188]  
  - lib: bitmap: Introduce node-aware alloc API (Tariq Toukan)  [Orabug: 34481188]  
  - net/mlx5: remove the recent devlink params (Jakub Kicinski)  [Orabug: 34481188]  
  - mlxsw: spectrum_router: Expose RIF MAC profiles to devlink resource (Danielle Ratson)  [Orabug: 34481188]  
  - mlxsw: spectrum_router: Add RIF MAC profiles support (Danielle Ratson)  [Orabug: 34481188]  
  - mlxsw: spectrum_router: Propagate extack further (Danielle Ratson)  [Orabug: 34481188]  
  - mlxsw: resources: Add resource identifier for RIF MAC profiles (Danielle Ratson)  [Orabug: 34481188]  
  - mlxsw: reg: Add MAC profile ID field to RITR register (Danielle Ratson)  [Orabug: 34481188]  
  - net/mlx5: SF_DEV Add SF device trace points (Parav Pandit)  [Orabug: 34481188]  
  - net/mlx5: SF, Add SF trace points (Parav Pandit)  [Orabug: 34481188]  
  - net/mlx5: Let user configure max_macs param (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Let user configure event_eq_size param (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Let user configure io_eq_size param (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Bridge, support replacing existing FDB entry (Vlad Buslov)  [Orabug: 34481188]  
  - net/mlx5: Bridge, extract code to lookup and del/notify entry (Vlad Buslov)  [Orabug: 34481188]  
  - net/mlx5: Add periodic update of host time to firmware (Aya Levin)  [Orabug: 34481188]  
  - net/mlx5: Print health buffer by log level (Aya Levin)  [Orabug: 34481188]  
  - net/mlx5: Extend health buffer dump (Aya Levin)  [Orabug: 34481188]  
  - net/mlx5: Reduce flow counters bulk query buffer size for SFs (Avihai Horon)  [Orabug: 34481188]  
  - net/mlx5: Fix unused function warning of mlx5i_flow_type_mask (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Remove unnecessary checks for slow path flag (Paul Blakey)  [Orabug: 34481188]  
  - net/mlx5e: don't write directly to netdev->dev_addr (Jakub Kicinski)  [Orabug: 34481188]  
  - RDMA/mlx5: Use dev_addr_mod() (Jakub Kicinski)  [Orabug: 34481188]  
  - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable (Christophe JAILLET)  [Orabug: 34481188]  
  - dma-buf: move dma-buf symbols into the DMA_BUF module namespace (Greg Kroah-Hartman)  [Orabug: 34481188]  
  - net: convert users of bitmap_foo() to linkmode_foo() (Sean Anderson)  [Orabug: 34481188]  
  - mlx5: fix build after merge (Jakub Kicinski)  [Orabug: 34481188]  
  - ethernet: mlxsw: use eth_hw_addr_gen() (Jakub Kicinski)  [Orabug: 34481188]  
  - RDMA/mlx5: Move struct mlx5_core_mkey to mlx5_ib (Aharon Landau)  [Orabug: 34481188]  
  - RDMA/mlx5: Replace struct mlx5_core_mkey by u32 key (Aharon Landau)  [Orabug: 34481188]  
  - RDMA/mlx5: Remove pd from struct mlx5_core_mkey (Aharon Landau)  [Orabug: 34481188]  
  - RDMA/mlx5: Remove size from struct mlx5_core_mkey (Aharon Landau)  [Orabug: 34481188]  
  - RDMA/mlx5: Remove iova from struct mlx5_core_mkey (Aharon Landau)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Make RED, TBF offloads classful (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Validate qdisc topology (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Clean stats recursively when priomap changes (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Unify graft validation (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Destroy children in mlxsw_sp_qdisc_destroy() (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Extract two helpers for handling future FIFOs (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Query tclass / priomap instead of caching it (Petr Machata)  [Orabug: 34481188]  
  - net/mlx5: E-Switch, Increase supported number of forward destinations to 32 (Maor Dickman)  [Orabug: 34481188]  
  - net/mlx5: E-Switch, Use dynamic alloc for dest array (Maor Dickman)  [Orabug: 34481188]  
  - net/mlx5: Lag, use steering to select the affinity port in LAG (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Lag, add support to create/destroy/modify port selection (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Lag, add support to create TTC tables for LAG port selection (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Lag, add support to create definers for LAG (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Lag, set match mask according to the traffic type bitmap (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Lag, set LAG traffic type mapping (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Lag, move lag files into directory (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Introduce new uplink destination type (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Add support to create match definer (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Introduce port selection namespace (Maor Gottlieb)  [Orabug: 34481188]  
  - net/mlx5: Support partial TTC rules (Maor Gottlieb)  [Orabug: 34481188]  
  - mlx5: prevent 64bit divide (Jakub Kicinski)  [Orabug: 34481188]  
  - habanalabs: add support for dma-buf exporter (Tomer Tayar)  [Orabug: 34481188]  
  - net/mlx5: Use system_image_guid to determine bonding (Rongwei Liu)  [Orabug: 34481188]  
  - net/mlx5: Use native_port_num as 1st option of device index (Rongwei Liu)  [Orabug: 34481188]  
  - net/mlx5: Introduce new device index wrapper (Rongwei Liu)  [Orabug: 34481188]  
  - net/mlx5: Check return status first when querying system_image_guid (Rongwei Liu)  [Orabug: 34481188]  
  - net/mlx5: DR, Prefer kcalloc over open coded arithmetic (Len Baker)  [Orabug: 34481188]  
  - net/mlx5e: Add extack msgs related to TC for better debug (Abhiram R N)  [Orabug: 34481188]  
  - net/mlx5: CT: Fix missing cleanup of ct nat table on init failure (Paul Blakey)  [Orabug: 34481188]  
  - net/mlx5: Disable roce at HCA level (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5i: Enable Rx steering for IPoIB via ethtool (Moosa Baransi)  [Orabug: 34481188]  
  - net/mlx5: Bridge, provide flow source hints (Vlad Buslov)  [Orabug: 34481188]  
  - net/mlx5: Read timeout values from DTOR (Amir Tzin)  [Orabug: 34481188]  
  - net/mlx5: Read timeout values from init segment (Amir Tzin)  [Orabug: 34481188]  
  - net/mlx5: Add layout to support default timeouts register (Amir Tzin)  [Orabug: 34481188]  
  - ethernet: constify references to netdev->dev_addr in drivers (Jakub Kicinski)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Introduce per-TC ECN counters (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: reg: Add ecn_marked_tc to Per-TC Congestion Counters (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: reg: Rename MLXSW_REG_PPCNT_TC_CONG_TC to _CNT (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: reg: Fix a typo in a group heading (Petr Machata)  [Orabug: 34481188]  
  - devlink: Don't throw an error if flash notification sent before devlink visible (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: fix flexible_array.cocci warning (Guo Zhengkui)  [Orabug: 34481188]  
  - ethtool: don't drop the rtnl_lock half way thru the ioctl (Jakub Kicinski)  [Orabug: 34481188]  
  - devlink: expose get/put functions (Jakub Kicinski)  [Orabug: 34481188]  
  - ethtool: handle info/flash data copying outside rtnl_lock (Jakub Kicinski)  [Orabug: 34481188]  
  - ethtool: push the rtnl_lock into dev_ethtool() (Jakub Kicinski)  [Orabug: 34481188]  
  - devlink: make all symbols GPL-only (Jakub Kicinski)  [Orabug: 34481188]  
  - devlink: Simplify internal devlink params implementation (Leon Romanovsky)  [Orabug: 34481188]  
  - Revert "devlink: Remove not-executed trap policer notifications" (Leon Romanovsky)  [Orabug: 34481188]  
  - Revert "devlink: Remove not-executed trap group notifications" (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Clean not-executed param notifications (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Remove not-executed trap group notifications (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Remove not-executed trap policer notifications (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Delete obsolete parameters publish API (Leon Romanovsky)  [Orabug: 34481188]  
  - nfp: Move delink_register to be last command (Leon Romanovsky)  [Orabug: 34481188]  
  - bnxt_en: Register devlink instance at the end devlink configuration (Leon Romanovsky)  [Orabug: 34481188]  
  - net: dsa: Move devlink registration to be last devlink command (Leon Romanovsky)  [Orabug: 34481188]  
  - net: wwan: iosm: Move devlink_register to be last devlink command (Leon Romanovsky)  [Orabug: 34481188]  
  - net: ethernet: ti: Move devlink registration to be last devlink command (Leon Romanovsky)  [Orabug: 34481188]  
  - qed: Move devlink registration to be last devlink command (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Remove extra device_lock assert checks (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Delete reload enable/disable interface (Leon Romanovsky)  [Orabug: 34481188]  
  - net/mlx5: Set devlink reload feature bit for supported devices only (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Allow control devlink ops behavior through feature mask (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Annotate devlink API calls (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Move netdev_to_devlink helpers to devlink.c (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Reduce struct devlink exposure (Leon Romanovsky)  [Orabug: 34481188]  
  - mlxsw: pci: Use dev_driver_string() instead of pci_dev->driver->name (Uwe Kleine-König)  [Orabug: 34481188]  
  - RDMA: Remove redundant 'flush_workqueue()' calls (Christophe JAILLET)  [Orabug: 34481188]  
  - RDMA/iwpm: Remove redundant initialization of pointer err_str (Colin Ian King)  [Orabug: 34481188]  
  - RDMA/nldev: Allow optional-counter status configuration through RDMA netlink (Aharon Landau)  [Orabug: 34481188]  
  - RDMA/nldev: Split nldev_stat_set_mode_doit out of nldev_stat_set_doit (Aharon Landau)  [Orabug: 34481188]  
  - RDMA/nldev: Add support to get status of all counters (Aharon Landau)  [Orabug: 34481188]  
  - RDMA/counter: Add optional counter support (Aharon Landau)  [Orabug: 34481188]  
  - RDMA/counter: Add an is_disabled field in struct rdma_hw_stats (Aharon Landau)  [Orabug: 34481188]  
  - RDMA/core: Add a helper API rdma_free_hw_stats_struct (Mark Zhang)  [Orabug: 34481188]  
  - RDMA/bnxt_re: Fix kernel panic when trying to access bnxt_re_stat_descs (Kamal Heib)  [Orabug: 34481188]  
  - RDMA/counter: Add a descriptor in struct rdma_hw_stats (Aharon Landau)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Offload RED qevent mark (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Track permissible actions per binding (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Distinguish between ingress and egress triggers (Petr Machata)  [Orabug: 34481188]  
  - mlxsw: spectrum_qdisc: Pass extack to mlxsw_sp_qevent_entry_configure() (Petr Machata)  [Orabug: 34481188]  
  - ethernet: Remove redundant 'flush_workqueue()' calls (Christophe JAILLET)  [Orabug: 34481188]  
  - net/mlx5: Add priorities for counters in RDMA namespaces (Aharon Landau)  [Orabug: 34481188]  
  - net/mlx5: Add ifc bits to support optional counters (Aharon Landau)  [Orabug: 34481188]  
  - mlxsw: item: Annotate item helpers with '__maybe_unused' (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: Add support for transceiver module extended state (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: Add ability to control transceiver modules' power mode (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: reg: Add Management Cable IO and Notifications register (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: reg: Add Port Module Memory Map Properties register (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: spectrum_buffers: silence uninitialized warning (Dan Carpenter)  [Orabug: 34481188]  
  - ethernet: add a helper for assigning port addresses (Jakub Kicinski)  [Orabug: 34481188]  
  - net: sch_tbf: Add a graft command (Petr Machata)  [Orabug: 34481188]  
  - ethtool: Add transceiver module extended state (Ido Schimmel)  [Orabug: 34481188]  
  - ethtool: Add ability to control transceiver modules' power mode (Ido Schimmel)  [Orabug: 34481188]  
  - RDMA/rw: switch to dma_map_sgtable() (Logan Gunthorpe)  [Orabug: 34481188]  
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (Jakub Kicinski)  [Orabug: 34481188]  
  - mlx4: constify args for const dev_addr (Jakub Kicinski)  [Orabug: 34481188]  
  - mlx4: remove custom dev_addr clearing (Jakub Kicinski)  [Orabug: 34481188]  
  - mlx4: replace mlx4_u64_to_mac() with u64_to_ether_addr() (Jakub Kicinski)  [Orabug: 34481188]  
  - mlx4: replace mlx4_mac_to_u64() with ether_addr_to_u64() (Jakub Kicinski)  [Orabug: 34481188]  
  - net/mlx5: Enable single IRQ for PCI Function (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Shift control IRQ to the last index (Shay Drory)  [Orabug: 34481188]  
  - net/mlx5: Bridge, pop VLAN on egress table miss (Vlad Buslov)  [Orabug: 34481188]  
  - net/mlx5: Bridge, mark reg_c1 when pushing VLAN (Vlad Buslov)  [Orabug: 34481188]  
  - net/mlx5: Bridge, extract VLAN pop code to dedicated functions (Vlad Buslov)  [Orabug: 34481188]  
  - net/mlx5: Bridge, refactor eswitch instance usage (Vlad Buslov)  [Orabug: 34481188]  
  - net/mlx5e: Support accept action (Vlad Buslov)  [Orabug: 34481188]  
  - net/mlx5e: Specify out ifindex when looking up encap route (Chris Mi)  [Orabug: 34481188]  
  - net/mlx5e: Reserve a value from TC tunnel options mapping (Vlad Buslov)  [Orabug: 34481188]  
  - net/mlx5e: Move parse fdb check into actions_match_supported_fdb() (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Move mod hdr allocation to a single place (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: TC, Refactor sample offload error flow (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add TX max rate support for MQPRIO channel mode (Tariq Toukan)  [Orabug: 34481188]  
  - net/mlx5e: Specify SQ stats struct for mlx5e_open_txqsq() (Tariq Toukan)  [Orabug: 34481188]  
  - RDMA/cma: Split apart the multiple uses of the same list heads (Jason Gunthorpe)  [Orabug: 34481188]  
  - qed: Fix kernel-doc warnings (Prabhakar Kushwaha)  [Orabug: 34481188]  
  - net/mlx4_en: avoid one cache line miss to ring doorbell (Eric Dumazet)  [Orabug: 34481188]  
  - ethernet: use eth_hw_addr_set() instead of ether_addr_copy() (Jakub Kicinski)  [Orabug: 34481188]  
  - ethernet: use eth_hw_addr_set() (Jakub Kicinski)  [Orabug: 34481188]  
  - net/mlx5e: Use array_size() helper (Gustavo A. R. Silva)  [Orabug: 34481188]  
  - net/mlx5: Use struct_size() helper in kvzalloc() (Gustavo A. R. Silva)  [Orabug: 34481188]  
  - net/mlx5: Use kvcalloc() instead of kvzalloc() (Gustavo A. R. Silva)  [Orabug: 34481188]  
  - net/mlx5: Tolerate failures in debug features while driver load (Aya Levin)  [Orabug: 34481188]  
  - net/mlx5: Warn for devlink reload when there are VFs alive (Lama Kayal)  [Orabug: 34481188]  
  - net/mlx5: DR, Add missing string for action type SAMPLER (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, init_next_match only if needed (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Fix typo 'offeset' to 'offset' (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Increase supported num of actions to 32 (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Add support for SF vports (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Support csum recalculation flow table on SFs (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Align error messages for failure to obtain vport caps (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Add missing query for vport 0 (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Replace local WIRE_PORT macro with the existing MLX5_VPORT_UPLINK (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx5: DR, Fix vport number data type to u16 (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net/mlx4_en: Add XDP_REDIRECT statistics (Joshua Roys)  [Orabug: 34481188]  
  - net/mlx4: Use array_size() helper in copy_to_user() (Gustavo A. R. Silva)  [Orabug: 34481188]  
  - IB/mlx5: Enable UAR to have DevX UID (Meir Lichtinger)  [Orabug: 34481188]  
  - net/mlx5: Add uid field to UAR allocation structures (Meir Lichtinger)  [Orabug: 34481188]  
  - net/mlx5e: check return value of rhashtable_init (MichelleJin)  [Orabug: 34481188]  
  - netdevsim: Move devlink registration to be last devlink command (Leon Romanovsky)  [Orabug: 34481188]  
  - mlxsw: core: Register devlink instance last (Leon Romanovsky)  [Orabug: 34481188]  
  - net/mlx5: Accept devlink user input after driver initialization complete (Leon Romanovsky)  [Orabug: 34481188]  
  - net/mlx4: Move devlink_register to be the last initialization command (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: report maximum number of snapshots with regions (Jacob Keller)  [Orabug: 34481188]  
  - devlink: Add missed notifications iterators (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Notify users when objects are accessible (Leon Romanovsky)  [Orabug: 34481188]  
  - net/mlx5e: Enable TC offload for ingress MACVLAN (Dima Chumak)  [Orabug: 34481188]  
  - net/mlx5e: Enable TC offload for egress MACVLAN (Dima Chumak)  [Orabug: 34481188]  
  - net/mlx5e: loopback test is not supported in switchdev mode (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Use NL_SET_ERR_MSG_MOD() for errors parsing tunnel attributes (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Remove redundant priv arg from parse_pedit_to_reformat() (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Remove incorrect addition of action fwd flag (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Use correct return type (Roi Dayan)  [Orabug: 34481188]  
  - net/mlx5e: Add error flow for ethtool -X command (Aya Levin)  [Orabug: 34481188]  
  - net/mlx5: DR, Fix code indentation in dr_ste_v1 (Yevgeny Kliteynik)  [Orabug: 34481188]  
  - net: mlx4: Add support for XDP_REDIRECT (Joshua Roys)  [Orabug: 34481188]  
  - mlxsw: Add support for IP-in-IP with IPv6 underlay for Spectrum-2 and above (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_router: Increase parsing depth for IPv6 decapsulation (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: Add IPV6_ADDRESS kvdl entry type (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_ipip: Add mlxsw_sp_ipip_gre6_ops (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: Create separate ipip_ops_arr for different ASICs (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: reg: Add support for ritr_loopback_ipip6_pack() (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: reg: Add support for ratr_ipip6_entry_pack() (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: reg: Add support for rtdp_ipip6_pack() (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: reg: Add Router IP version Six Register (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: Take tunnel's type into account when searching underlay device (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_ipip: Create common function for mlxsw_sp_ipip_ol_netdev_change_gre() (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_router: Fix arguments alignment (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_ipip: Pass IP tunnel parameters by reference and as 'const' (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_router: Create common function for fib_entry_type_unset() code (Amit Cohen)  [Orabug: 34481188]  
  - mlxsw: spectrum_router: Start using new trap adjacency entry (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: spectrum_router: Add trap adjacency entry upon first nexthop group (Ido Schimmel)  [Orabug: 34481188]  
  - devlink: Remove single line function obfuscations (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Delete not used port parameters APIs (Leon Romanovsky)  [Orabug: 34481188]  
  - bnxt_en: Properly remove port parameter support (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Make devlink_register to be void (Leon Romanovsky)  [Orabug: 34481188]  
  - RDMA/bnxt_re: Update statistics counter name (Selvin Xavier)  [Orabug: 34481188]  
  - RDMA/bnxt_re: Add extended statistics counters (Selvin Xavier)  [Orabug: 34481188]  
  - net: wwan: iosm: devlink registration (M Chetan Kumar)  [Orabug: 34481188]  
  - mlxsw: Add support for transceiver modules reset (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: Make PMAOS pack function more generic (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: reg: Add fields to PMAOS register (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: Track per-module port status (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: spectrum: Do not return an error in mlxsw_sp_port_module_unmap() (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: spectrum: Do not return an error in ndo_stop() (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: core_env: Convert 'module_info_lock' to a mutex (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: core_env: Defer handling of module temperature warning events (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: core: Remove mlxsw_core_is_initialized() (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: core: Initialize switch driver last (Ido Schimmel)  [Orabug: 34481188]  
  - mlxsw: reg: Remove PMTM register (Jiri Pirko)  [Orabug: 34481188]  
  - mlxsw: spectrum: Use PMTDB register to obtain split info (Jiri Pirko)  [Orabug: 34481188]  
  - mlxsw: reg: Add Port Module To local DataBase Register (Jiri Pirko)  [Orabug: 34481188]  
  - mlxsw: spectrum: Use PLLP to get front panel number and split number (Jiri Pirko)  [Orabug: 34481188]  
  - mlxsw: reg: Add Port Local port to Label Port mapping Register (Jiri Pirko)  [Orabug: 34481188]  
  - mlxsw: spectrum: Move port SWID set before core port init (Jiri Pirko)  [Orabug: 34481188]  
  - mlxsw: spectrum: Move port module mapping before core port init (Jiri Pirko)  [Orabug: 34481188]  
  - mlxsw: spectrum: Bump minimum FW version to xx.2008.3326 (Jiri Pirko)  [Orabug: 34481188]  
  - devlink: Delete not-used devlink APIs (Leon Romanovsky)  [Orabug: 34481188]  
  - devlink: Delete not-used single parameter notification APIs (Leon Romanovsky)  [Orabug: 34481188]  
  - uek-rpm: Enable modules in UEK7U1 to match RHCK9.1 - 34237783 (Harshit Mogalapalli)  [Orabug: 34237783]  
  - uek-rpm: Enable CONFIG options in UEK7U1 to match RHCK9.1 (Harshit Mogalapalli)  [Orabug: 34712370]  
  - crypto: fips - make proc files report fips module name and version (Saeed Mirzamohammadi)  [Orabug: 34672372]  
  - crypto: jitter - add oversampling of noise source (Stephan Müller)  [Orabug: 34672373]  
  - random: Add FIPS 140-3 entropy requirements (Saeed Mirzamohammadi)  [Orabug: 34672373]  
  - uek-rpm: Enable sound subsystem CONFIG options in UEK7U1 to match RHCK9.1 (Harshit Mogalapalli)  [Orabug: 34694103]  
  - x86/sev: Unroll string mmio with CC_ATTR_GUEST_UNROLL_STRING_IO (Joerg Roedel)  [Orabug: 34711419]  
  - x86/sev: Use CC_ATTR attribute to generalize string I/O unroll (Kuppuswamy Sathyanarayanan)  [Orabug: 34711419]  
  - treewide: Replace the use of mem_encrypt_active() with cc_platform_has() (Tom Lendacky)  [Orabug: 34711419]  
  - x86/sev: Replace occurrences of sev_es_active() with cc_platform_has() (Tom Lendacky)  [Orabug: 34711419]  
  - x86/sev: Replace occurrences of sev_active() with cc_platform_has() (Tom Lendacky)  [Orabug: 34711419]  
  - x86/sme: Replace occurrences of sme_active() with cc_platform_has() (Tom Lendacky)  [Orabug: 34711419]  
  - NFSD: limit the number of v4 clients to 1024 per 1GB of system memory (Dai Ngo)  [Orabug: 34728465]  
  - NFSD: keep track of the number of v4 clients in the system (Dai Ngo)  [Orabug: 34728465]  
  - NFSD: refactoring v4 specific code to a helper in nfs4state.c (Dai Ngo)  [Orabug: 34728465]  
  - NFSD: Show state of courtesy client in client info (Dai Ngo)  [Orabug: 34728465]  
  - NFSD: add support for lock conflict to courteous server (Dai Ngo)  [Orabug: 34728465]  
  - NFSD: Clean up _lm_ operation names (Chuck Lever)  [Orabug: 34728465]  
  - fs/lock: add 2 callbacks to lock_manager_operations to resolve conflict (Dai Ngo)  [Orabug: 34728465]  
  - fs/lock: add helper locks_owner_has_blockers to check for blockers (Dai Ngo)  [Orabug: 34728465]  
  - NFSD: move create/destroy of laundry_wq to init_nfsd and exit_nfsd (Dai Ngo)  [Orabug: 34728465]  
  - NFSD: add support for share reservation conflict to courteous server (Dai Ngo)  [Orabug: 34728465]  
  - NFSD: add courteous server support for thread with only delegation (Dai Ngo)  [Orabug: 34728465]  
  - mm: sparsemem: move vmemmap related to HugeTLB to CONFIG_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song)  [Orabug: 34549952]  
  - selftests: vm: add a hugetlb test case (Muchun Song)  [Orabug: 34549952]  
  - mm: sparsemem: fix missing higher order allocation splitting (Muchun Song)  [Orabug: 34549952]  
  - mm: sparsemem: use page table lock to protect kernel pmd operations (Muchun Song)  [Orabug: 34549952]  
  - mm: hugetlb: replace hugetlb_free_vmemmap_enabled with a static_key (Muchun Song)  [Orabug: 34549952]  
  - mm: hugetlb: free the 2nd vmemmap page associated with each HugeTLB page (Muchun Song)  [Orabug: 34549952]  
  - scsi: qedi: Use QEDI_MODE_NORMAL for error handling (Mike Christie)  [Orabug: 34600328]  
  - scsi: qedi: Remove redundant flush_workqueue() calls (Minghao Chi (CGEL ZTE))  [Orabug: 34600328]  
  - scsi: qedi: Fix SYSFS_FLAG_FW_SEL_BOOT formatting (Florian Fainelli)  [Orabug: 34600328]  
  - scsi: qedi: Fix cmd_cleanup_cmpl counter mismatch issue (Manish Rangankar)  [Orabug: 34600328]  
  - scsi: qedi: Remove set but unused 'page' variable (Florian Fainelli)  [Orabug: 34600328]  
  - scsi: qla2xxx: Update version to 10.02.07.900-k (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: Define static symbols (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: Enhance driver tracing with separate tunable and more (Arun Easi)  [Orabug: 34600735]  
  - scsi: qla2xxx: Add NVMe parameters support in Auxiliary Image Status (Anil Gurumurthy)  [Orabug: 34600735]  
  - scsi: qla2xxx: Add debugfs create/delete helpers (Arun Easi)  [Orabug: 34600735]  
  - scsi: qla2xxx: Fix response queue handler reading stale packets (Arun Easi)  [Orabug: 34600735]  
  - scsi: qla2xxx: Revert "scsi: qla2xxx: Fix response queue handler reading stale packets" (Arun Easi)  [Orabug: 34600735]  
  - scsi: qla2xxx: Log message "skipping scsi_scan_host()" as informational (Mauricio Faria de Oliveira)  [Orabug: 34600735]  
  - scsi: qla2xxx: Avoid flush_scheduled_work() usage (Tetsuo Handa)  [Orabug: 34600735]  
  - scsi: qla2xxx: Always wait for qlt_sess_work_fn() from qlt_stop_phase1() (Tetsuo Handa)  [Orabug: 34600735]  
  - scsi: qla2xxx: Remove unused qlt_tmr_work() (Tetsuo Handa)  [Orabug: 34600735]  
  - scsi: qla2xxx: Remove unused del_sess_list field (Tetsuo Handa)  [Orabug: 34600735]  
  - scsi: qla2xxx: Update version to 10.02.07.800-k (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: Update manufacturer details (Bikash Hazarika)  [Orabug: 34600735]  
  - scsi: qla2xxx: Fix sparse warning for dport_data (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: Update version to 10.02.07.700-k (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: Add debug prints in the device remove path (Arun Easi)  [Orabug: 34600735]  
  - scsi: qla2xxx: Add a new v2 dport diagnostic feature (Bikash Hazarika)  [Orabug: 34600735]  
  - scsi: qla2xxx: Update version to 10.02.07.600-k (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: edif: Fix slow session teardown (Quinn Tran)  [Orabug: 34600735]  
  - scsi: qla2xxx: edif: Reduce N2N thrashing at app_start time (Quinn Tran)  [Orabug: 34600735]  
  - scsi: qla2xxx: edif: Fix I/O timeout due to over-subscription (Quinn Tran)  [Orabug: 34600735]  
  - scsi: qla2xxx: Update version to 10.02.07.500-k (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: edif: Remove old doorbell interface (Quinn Tran)  [Orabug: 34600735]  
  - scsi: qla2xxx: edif: Add bsg interface to read doorbell events (Quinn Tran)  [Orabug: 34600735]  
  - scsi: qla2xxx: edif: Wait for app to ack on sess down (Quinn Tran)  [Orabug: 34600735]  
  - scsi: qla2xxx: edif: bsg refactor (Quinn Tran)  [Orabug: 34600735]  
  - scsi: qla2xxx: Remove unused 'ql_dm_tgt_ex_pct' parameter (Gleb Chesnokov)  [Orabug: 34600735]  
  - scsi: qla2xxx: Remove setting of 'req' and 'rsp' parameters (Tom Rix)  [Orabug: 34600735]  
  - scsi: qla2xxx: edif: Remove unneeded variable (Guo Zhengkui)  [Orabug: 34600735]  
  - scsi: qla2xxx: Remove unneeded flush_workqueue() (ran jianping)  [Orabug: 34600735]  
  - scsi: qla2xxx: Remove free_sg command flag (Gleb Chesnokov)  [Orabug: 34600735]  
  - scsi: qla2xxx: Fix typos in comments (Julia Lawall)  [Orabug: 34600735]  
  - scsi: qla2xxx: Update version to 10.02.07.400-k (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: Update version to 10.02.07.300-k (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: Add retry for exec firmware (Quinn Tran)  [Orabug: 34600735]  
  - scsi: qla2xxx: Synchronize rport dev_loss_tmo setting (Hannes Reinecke)  [Orabug: 34600735]  
  - scsi: qla2xxx: Update version to 10.02.07.200-k (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: edif: Tweak trace message (Quinn Tran)  [Orabug: 34600735]  
  - scsi: qla2xxx: Remove a declaration (Bart Van Assche)  [Orabug: 34600735]  
  - scsi: qla2xxx: Remove redundant initialization of pointer req (Colin Ian King)  [Orabug: 34600735]  
  - scsi: qla2xxx: Update version to 10.02.07.100-k (Nilesh Javali)  [Orabug: 34600735]  
  - scsi: qla2xxx: Call process_response_queue() in Tx path (Shreyas Deodhar)  [Orabug: 34600735]  
  - scsi: qla2xxx: Check for firmware capability before creating QPair (Saurav Kashyap)  [Orabug: 34600735]  
  - scsi: qla2xxx: Display 16G only as supported speeds for 3830c card (Saurav Kashyap)  [Orabug: 34600735]  
  - scsi: qla2xxx: Add support for mailbox passthru (Bikash Hazarika)  [Orabug: 34600735]  
  - scsi: qla2xxx: Increase max limit of ql2xnvme_queues (Shreyas Deodhar)  [Orabug: 34600735]  
  - scsi: qla2xxx: Add ql2xnvme_queues module param to configure number of NVMe queues (Shreyas Deodhar)  [Orabug: 34600735]  
  - x86/sgx/virt: extract sgx_vepc_remove_page (Paolo Bonzini)  [Orabug: 34534645]  
  - x86/sgx/virt: implement SGX_IOC_VEPC_REMOVE ioctl (Paolo Bonzini)  [Orabug: 34534645]  
  - selftests: kvm: add amx_test to .gitignore (Muhammad Usama Anjum)  [Orabug: 34386748]  
  - selftests/x86/amx: Update the ARCH_REQ_XCOMP_PERM test (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Yang Zhong)  [Orabug: 34386748]  
  - KVM: x86: Use ERR_PTR_USR() to return -EFAULT as a __user pointer (Sean Christopherson)  [Orabug: 34386748]  
  - selftests: kvm: check dynamic bits against KVM_X86_XCOMP_GUEST_SUPP (Paolo Bonzini)  [Orabug: 34386748]  
  - KVM: x86: add system attribute to retrieve full set of supported xsave states (Paolo Bonzini)  [Orabug: 34386748]  
  - KVM: x86: Add a helper to retrieve userspace address from kvm_device_attr (Sean Christopherson)  [Orabug: 34386748]  
  - selftests: kvm: move vm_xsave_req_perm call to amx_test (Paolo Bonzini)  [Orabug: 34386748]  
  - KVM: x86: Check .flags in kvm_cpuid_check_equal() too (Vitaly Kuznetsov)  [Orabug: 34386748]  
  - KVM: x86/cpuid: Exclude unpermitted xfeatures sizes at KVM_GET_SUPPORTED_CPUID (Like Xu)  [Orabug: 34386748]  
  - kvm: selftests: conditionally build vm_xsave_req_perm() (Wei Wang)  [Orabug: 34386748]  
  - KVM: x86/cpuid: Clear XFD for component i if the base feature is missing (Like Xu)  [Orabug: 34386748]  
  - x86/fpu: Correct AVX512 state tracking (Noah Goldstein)  [Orabug: 34386748]  
  - KVM: selftests: Test KVM_SET_CPUID2 after KVM_RUN (Vitaly Kuznetsov)  [Orabug: 34386748]  
  - x86/fpu: Remove duplicate copy_fpstate_to_sigframe() prototype (Shaokun Zhang)  [Orabug: 34386748]  
  - KVM: selftests: Rename 'get_cpuid_test' to 'cpuid_test' (Vitaly Kuznetsov)  [Orabug: 34386748]  
  - KVM: x86: Partially allow KVM_SET_CPUID{,2} after KVM_RUN (Vitaly Kuznetsov)  [Orabug: 34386748]  
  - KVM: x86: Do runtime CPUID update before updating vcpu->arch.cpuid_entries (Vitaly Kuznetsov)  [Orabug: 34386748]  
  - x86/fpu: Fix inline prefix warnings (Yang Zhong)  [Orabug: 34386748]  
  - selftest: kvm: Add amx selftest (Yang Zhong)  [Orabug: 34386748]  
  - selftest: kvm: Move struct kvm_x86_state to header (Yang Zhong)  [Orabug: 34386748]  
  - selftest: kvm: Reorder vcpu_load_state steps for AMX (Paolo Bonzini)  [Orabug: 34386748]  
  - kvm: x86: Disable interception for IA32_XFD on demand (Kevin Tian)  [Orabug: 34386748]  
  - x86/fpu: Provide fpu_sync_guest_vmexit_xfd_state() (Thomas Gleixner)  [Orabug: 34386748]  
  - kvm: selftests: Add support for KVM_CAP_XSAVE2 (Wei Wang)  [Orabug: 34386748]  
  - kvm: Move KVM_GET_XSAVE2 IOCTL definition at the end of kvm.h (Janosch Frank)  [Orabug: 34386748]  
  - kvm: x86: Add support for getting/setting expanded xstate buffer (Guang Zeng)  [Orabug: 34386748]  
  - x86/fpu: Add uabi_size to guest_fpu (Thomas Gleixner)  [Orabug: 34386748]  
  - kvm: x86: Add CPUID support for Intel AMX (Jing Liu)  [Orabug: 34386748]  
  - kvm: x86: Add XCR0 support for Intel AMX (Jing Liu)  [Orabug: 34386748]  
  - kvm: x86: Disable RDMSR interception of IA32_XFD_ERR (Jing Liu)  [Orabug: 34386748]  
  - kvm: x86: Emulate IA32_XFD_ERR for guest (Jing Liu)  [Orabug: 34386748]  
  - kvm: x86: Intercept #NM for saving IA32_XFD_ERR (Jing Liu)  [Orabug: 34386748]  
  - x86/fpu: Prepare xfd_err in struct fpu_guest (Jing Liu)  [Orabug: 34386748]  
  - kvm: x86: Add emulation for IA32_XFD (Jing Liu)  [Orabug: 34386748]  
  - x86/fpu: Provide fpu_update_guest_xfd() for IA32_XFD emulation (Kevin Tian)  [Orabug: 34386748]  
  - kvm: x86: Enable dynamic xfeatures at KVM_SET_CPUID2 (Jing Liu)  [Orabug: 34386748]  
  - x86/fpu: Provide fpu_enable_guest_xfd_features() for KVM (Sean Christopherson)  [Orabug: 34386748]  
  - x86/fpu: Add guest support to xfd_enable_feature() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Make XFD initialization in __fpstate_reset() a function argument (Jing Liu)  [Orabug: 34386748]  
  - kvm: x86: Exclude unpermitted xfeatures at KVM_GET_SUPPORTED_CPUID (Jing Liu)  [Orabug: 34386748]  
  - kvm: x86: Fix xstate_required_size() to follow XSTATE alignment rule (Jing Liu)  [Orabug: 34386748]  
  - x86/fpu: Prepare guest FPU for dynamically enabled FPU features (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Extend fpu_xstate_prctl() with guest permissions (Thomas Gleixner)  [Orabug: 34386748]  
  - kvm: selftests: move ucall declarations into ucall_common.h (Michael Roth)  [Orabug: 34386748]  
  - kvm: selftests: move base kvm_util.h declarations to kvm_util_base.h (Michael Roth)  [Orabug: 34386748]  
  - x86/fpu/signal: Initialize sw_bytes in save_xstate_epilog() (Marco Elver)  [Orabug: 34386748]  
  - x86/fpu: Optimize out sigframe xfeatures when in init state (Dave Hansen)  [Orabug: 34386748]  
  - Documentation/x86: Add documentation for using dynamic XSTATE features (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu: Include vmalloc.h for vzalloc() (Stephen Rothwell)  [Orabug: 34386748]  
  - selftests/x86/amx: Add context switch test (Chang S. Bae)  [Orabug: 34386748]  
  - selftests/x86/amx: Add test cases for AMX state management (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu/amx: Enable the AMX feature in 64-bit mode (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu: Add XFD handling for dynamic states (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu: Calculate the default sizes independently (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu/amx: Define AMX state components and have it used for boot-time checks (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu/xstate: Prepare XSAVE feature table for gaps in state component numbers (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu/xstate: Add fpstate_realloc()/free() (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu/xstate: Add XFD #NM handler (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu: Update XFD state where required (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu: Add sanity checks for XFD (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Add XFD state to fpstate (Chang S. Bae)  [Orabug: 34386748]  
  - x86/msr-index: Add MSRs for XFD (Chang S. Bae)  [Orabug: 34386748]  
  - x86/cpufeatures: Add eXtended Feature Disabling (XFD) feature bit (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu: Reset permission and fpstate on exec() (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu: Prepare fpu_clone() for dynamically enabled features (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Prepare for variable sigframe length (Chang S. Bae)  [Orabug: 34386748]  
  - x86/signal: Use fpu::__state_user_size for sigalt stack validation (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Add basic helpers for dynamically enabled features (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/arch_prctl: Add controls for dynamic XSTATE components (Chang S. Bae)  [Orabug: 34386748]  
  - x86/fpu: Add fpu_state_config::legacy_features (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Add members to struct fpu to cache permission information (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/xstate: Provide xstate_calculate_size() (Chang S. Bae)  [Orabug: 34386748]  
  - signal: Skip the altstack update when not needed (Chang S. Bae)  [Orabug: 34386748]  
  - x86/signal: Implement sigaltstack size validation (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Remove old KVM FPU interface (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/kvm: Convert FPU handling to a single swap buffer (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Provide infrastructure for KVM FPU cleanup (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Prepare for sanitizing KVM FPU code (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/xstate: Move remaining xfeature helpers to core (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Rework restore_regs_from_fpstate() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Mop up xfeatures_mask_uabi() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Move xstate feature masks to fpu_*_cfg (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Move xstate size to fpu_*_cfg (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/xstate: Cleanup size calculations (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Cleanup fpu__init_system_xstate_size_legacy() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Provide struct fpu_config (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Use fpstate for size and features (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/xstate: Use fpstate for copy_uabi_to_xstate() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Use fpstate in __copy_xstate_to_uabi_buf() (Thomas Gleixner)  [Orabug: 34386748]  
  - cpuid: kvm_find_kvm_cpuid_features() should be declared 'static' (Paul Durrant)  [Orabug: 34386748]  
  - KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES (Paul Durrant)  [Orabug: 34386748]  
  - x86/fpu: Use fpstate in fpu_copy_kvm_uabi_to_fpstate() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/xstate: Use fpstate for xsave_to_user_sigframe() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/xstate: Use fpstate for os_xsave() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Use fpstate::size (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Add size and mask information to fpstate (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/process: Move arch_thread_struct_whitelist() out of line (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Do not leak fpstate pointer on fork (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Remove fpu::state (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/math-emu: Convert to fpstate (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/core: Convert to fpstate (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Convert to fpstate (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/regset: Convert to fpstate (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Convert tracing to fpstate (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/KVM: Convert to fpstate (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Replace KVMs xstate component clearing (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Convert restore_fpregs_from_fpstate() to struct fpstate (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Convert fpstate_init() to struct fpstate (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Provide struct fpstate (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Replace KVMs home brewed FPU copy to user (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Provide a proper function for ex_handler_fprestore() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Replace the includes of fpu/internal.h (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Mop up the internal.h leftovers (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/sev: Include fpu/xcr.h (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Remove internal.h dependency from fpu/signal.h (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Move fpstate functions to api.h (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Move mxcsr related code to core (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Move fpregs_restore_userregs() to core (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Make WARN_ON_FPU() private (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Move legacy ASM wrappers to core (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Move os_xsave() and os_xrstor() to core (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Make os_xrstor_booting() private (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Clean up CPU feature tests (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Move context switch and exit to user inlines into sched.h (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Mark fpu__init_prepare_fx_sw_frame() as __init (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Rework copy_xstate_to_uabi_buf() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Replace KVMs home brewed FPU copy from user (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Move KVMs FPU swapping to FPU core (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/xstate: Mark all init only functions __init (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/xstate: Provide and use for_each_xfeature() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Cleanup xstate xcomp_bv initialization (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Do not inherit FPU context for kernel and IO worker threads (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/process: Clone FPU in copy_thread() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Remove pointless memset in fpu_clone() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Cleanup the on_boot_cpu clutter (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Restrict xsaves()/xrstors() to independent states (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/pkru: Remove useless include (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Update stale comments (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu: Remove pointless argument from switch_fpu_finish() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Fix missed conversion to correct boolean retval in save_xstate_epilog() (Anders Roxell)  [Orabug: 34386748]  
  - x86/fpu/signal: Change return code of restore_fpregs_from_user() to boolean (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Change return code of check_xstate_in_sigframe() to boolean (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Change return type of __fpu_restore_sig() to boolean (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Change return type of fpu__restore_sig() to boolean (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/signal: Change return type of restore_sigcontext() to boolean (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Change return type of copy_fpregs_to_sigframe() helpers to boolean (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Change return type of copy_fpstate_to_sigframe() to boolean (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Move xstate clearing out of copy_fpregs_to_sigframe() (Thomas Gleixner)  [Orabug: 34386748]  
  - x86/fpu/signal: Move header zeroing out of xsave_to_user_sigframe() (Thomas Gleixner)  [Orabug: 34386748]  
  - net: mana: Add support of XDP_REDIRECT action (Haiyang Zhang)  [Orabug: 34366923]  
  - net: mana: Use struct_size() helper in mana_gd_create_dma_region() (Gustavo A. R. Silva)  [Orabug: 34366923]  
  - net: mana: Reuse XDP dropped page (Haiyang Zhang)  [Orabug: 34366923]  
  - net: mana: Add counter for XDP_TX (Haiyang Zhang)  [Orabug: 34366923]  
  - net: mana: Add counter for packet dropped by XDP (Haiyang Zhang)  [Orabug: 34366923]  
  - uek-rpm: Enable CONFIG_NVME_VERBOSE_ERRORS (Alan Adamson)  [Orabug: 34329750]  
  - nvme: don't print verbose errors for internal passthrough requests (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvme: fix RCU hole that allowed for endless looping in multipath round robin (Chris Leech)  [Orabug: 34329726]  
  - nvme-pci: expose use_threaded_interrupts read-only in sysfs (Xin Hao)  [Orabug: 34329726]  
  - nvme: warn about shared namespaces without CONFIG_NVME_MULTIPATH (Christoph Hellwig)  [Orabug: 34329726]  
  - nvme: remove nvme_alloc_request and nvme_alloc_request_qid (Christoph Hellwig)  [Orabug: 34329726]  
  - nvme: cleanup how disk->disk_name is assigned (Christoph Hellwig)  [Orabug: 34329726]  
  - nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (Christoph Hellwig)  [Orabug: 34329726]  
  - nvmet-rdma: fix kernel-doc warning for nvmet_rdma_device_removal (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvmet-fc: fix kernel-doc warning for nvmet_fc_unregister_targetport (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvmet-fc: fix kernel-doc warning for nvmet_fc_register_targetport (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvme-tcp: don't fold the line (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvme-tcp: don't initialize ret variable (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvme-multipath: call bio_io_error in nvme_ns_head_submit_bio (Guoqing Jiang)  [Orabug: 34329726]  
  - nvme-multipath: use vmalloc for ANA log buffer (Hannes Reinecke)  [Orabug: 34329726]  
  - nvme: remove support or stream based temperature hint (Christoph Hellwig)  [Orabug: 34329726]  
  - nvme: remove nssa from struct nvme_ctrl (Keith Busch)  [Orabug: 34329726]  
  - nvme: explicitly set non-error for directives (Keith Busch)  [Orabug: 34329726]  
  - nvme: send uevent on connection up (Martin Belanger)  [Orabug: 34329726]  
  - nvme: add vectored-io support for user-passthrough (Kanchan Joshi)  [Orabug: 34329726]  
  - nvme: add verbose error logging (Alan Adamson)  [Orabug: 34329726]  
  - nvme: add a helper to initialize connect_q (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvme-rdma: add helpers for mapping/unmapping request (Max Gurtovoy)  [Orabug: 34329726]  
  - nvmet-tcp: replace ida_simple[get|remove] with the simler ida_[alloc|free] (Sagi Grimberg)  [Orabug: 34329726]  
  - nvmet-rdma: replace ida_simple[get|remove] with the simler ida_[alloc|free] (Sagi Grimberg)  [Orabug: 34329726]  
  - nvmet-fc: replace ida_simple[get|remove] with the simler ida_[alloc|free] (Sagi Grimberg)  [Orabug: 34329726]  
  - nvmet: replace ida_simple[get|remove] with the simler ida_[alloc|free] (Sagi Grimberg)  [Orabug: 34329726]  
  - nvme-fc: replace ida_simple[get|remove] with the simler ida_[alloc|free] (Sagi Grimberg)  [Orabug: 34329726]  
  - nvme: replace ida_simple[get|remove] with the simler ida_[alloc|free] (Sagi Grimberg)  [Orabug: 34329726]  
  - nvmet: allow bdev in buffered_io mode (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvmet: use i_size_read() to set size for file-ns (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvme-fabrics: remove unnecessary braces for case (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvme-fabrics: use consistent zeroout pattern (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvme-fabrics: use unsigned int type (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvme-fabrics: use unsigned int type (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - nvme-core: remove unnecessary semicolon (Chaitanya Kulkarni)  [Orabug: 34329726]  
  - x86/sgx: Fix missing poison handling in reclaimer (Reinette Chatre)  [Orabug: 34525523]  
  - x86/sgx: Fix NULL pointer dereference on non-SGX systems (Dave Hansen)  [Orabug: 34525523]  
  - selftests/sgx: Fix corrupted cpuid macro invocation (Jarkko Sakkinen)  [Orabug: 34525523]  
  - x86/sgx: Add an attribute for the amount of SGX memory in a NUMA node (Jarkko Sakkinen)  [Orabug: 34525523]  
  - x86/sgx: Fix free page accounting (Reinette Chatre)  [Orabug: 34525523]  
  - x86/sgx: Fix minor documentation issues (Reinette Chatre)  [Orabug: 34525523]  
  - selftests/sgx: Add test for multiple TCS entry (Reinette Chatre)  [Orabug: 34525523]  
  - selftests/sgx: Enable multiple thread support (Reinette Chatre)  [Orabug: 34525523]  
  - selftests/sgx: Add page permission and exception test (Reinette Chatre)  [Orabug: 34525523]  
  - selftests/sgx: Rename test properties in preparation for more enclave tests (Reinette Chatre)  [Orabug: 34525523]  
  - selftests/sgx: Provide per-op parameter structs for the test enclave (Jarkko Sakkinen)  [Orabug: 34525523]  
  - selftests/sgx: Add a new kselftest: Unclobbered_vdso_oversubscribed (Jarkko Sakkinen)  [Orabug: 34525523]  
  - selftests/sgx: Move setup_test_encl() to each TEST_F() (Jarkko Sakkinen)  [Orabug: 34525523]  
  - selftests/sgx: Encpsulate the test enclave creation (Jarkko Sakkinen)  [Orabug: 34525523]  
  - selftests/sgx: Dump segments and /proc/self/maps only on failure (Jarkko Sakkinen)  [Orabug: 34525523]  
  - selftests/sgx: Create a heap for the test enclave (Jarkko Sakkinen)  [Orabug: 34525523]  
  - selftests/sgx: Make data measurement for an enclave segment optional (Jarkko Sakkinen)  [Orabug: 34525523]  
  - selftests/sgx: Assign source for each segment (Jarkko Sakkinen)  [Orabug: 34525523]  
  - selftests/sgx: Fix a benign linker warning (Sean Christopherson)  [Orabug: 34525523]  
  - x86/sgx: Add check for SGX pages to ghes_do_memory_failure() (Tony Luck)  [Orabug: 34525523]  
  - x86/sgx: Add hook to error injection address validation (Tony Luck)  [Orabug: 34525523]  
  - x86/sgx: Hook arch_memory_failure() into mainline code (Tony Luck)  [Orabug: 34525523]  
  - x86/sgx: Add SGX infrastructure to recover from poison (Tony Luck)  [Orabug: 34525523]  
  - x86/sgx: Initial poison handling for dirty and free pages (Tony Luck)  [Orabug: 34525523]  
  - x86/sgx: Add infrastructure to identify SGX EPC pages (Tony Luck)  [Orabug: 34525523]  
  - x86/sgx: Add new sgx_epc_page flag bit to mark free pages (Tony Luck)  [Orabug: 34525523]  
  - signal: Add an optional check for altstack size (Thomas Gleixner)  [Orabug: 34525523]  
  - Revert "x86/sgx: Fix free page accounting" (Thomas Tai)  [Orabug: 34525523]  
  - perf/x86/ibs: Add new IBS register bits into header (Ravi Bangoria)  [Orabug: 34530245]  
  - perf/x86/amd/uncore: Add PerfMonV2 RDPMC assignments (Sandipan Das)  [Orabug: 34530245]  
  - perf/x86/amd/uncore: Add PerfMonV2 DF event format (Sandipan Das)  [Orabug: 34530245]  
  - perf/x86/amd/uncore: Detect available DF counters (Sandipan Das)  [Orabug: 34530245]  
  - perf/x86/amd/uncore: Use attr_update for format attributes (Sandipan Das)  [Orabug: 34530245]  
  - perf/x86/amd/uncore: Use dynamic events array (Sandipan Das)  [Orabug: 34530245]  
  - perf/x86/amd/core: Fix reloading events for SVM (Sandipan Das)  [Orabug: 34530245]  
  - perf/x86/amd: Run AMD BRS code only on supported hw (Borislav Petkov)  [Orabug: 34530245]  
  - perf/x86/amd: Fix AMD BRS period adjustment (Peter Zijlstra)  [Orabug: 34530245]  
  - perf/x86/amd: Remove unused variable 'hwc' (Zucheng Zheng)  [Orabug: 34530245]  
  - perf/ibs: Fix comment (Ravi Bangoria)  [Orabug: 34530245]  
  - perf/amd/ibs: Advertise zen4_ibs_extensions as pmu capability attribute (Ravi Bangoria)  [Orabug: 34530245]  
  - perf/amd/ibs: Add support for L3 miss filtering (Ravi Bangoria)  [Orabug: 34530245]  
  - perf/amd/ibs: Use ->is_visible callback for dynamic attributes (Ravi Bangoria)  [Orabug: 34530245]  
  - perf/x86/amd/core: Add PerfMonV2 overflow handling (Sandipan Das)  [Orabug: 34530245]  
  - perf/x86/amd/core: Add PerfMonV2 counter control (Sandipan Das)  [Orabug: 34530245]  
  - perf/x86/amd/core: Detect available counters (Sandipan Das)  [Orabug: 34530245]  
  - perf/x86/amd/core: Detect PerfMonV2 support (Sandipan Das)  [Orabug: 34530245]  
  - x86/msr: Add PerfCntrGlobal* registers (Sandipan Das)  [Orabug: 34530245]  
  - x86/cpufeatures: Add PerfMonV2 feature bit (Sandipan Das)  [Orabug: 34530245]  
  - perf/x86: Unify format of events sysfs show (Yang Jihong)  [Orabug: 34530245]  
  - perf/x86/amd: Add idle hooks for branch sampling (Stephane Eranian)  [Orabug: 34530245]  
  - ACPI: Add perf low power callback (Stephane Eranian)  [Orabug: 34530245]  
  - perf/x86/amd: Make Zen3 branch sampling opt-in (Stephane Eranian)  [Orabug: 34530245]  
  - perf/x86/amd: Add AMD branch sampling period adjustment (Stephane Eranian)  [Orabug: 34530245]  
  - perf/x86/amd: Enable branch sampling priv level filtering (Stephane Eranian)  [Orabug: 34530245]  
  - perf/x86/amd: Add branch-brs helper event for Fam19h BRS (Stephane Eranian)  [Orabug: 34530245]  
  - perf/x86/amd: Add AMD Fam19h Branch Sampling support (Stephane Eranian)  [Orabug: 34530245]  
  - x86/cpufeatures: Add AMD Fam19h Branch Sampling feature (Stephane Eranian)  [Orabug: 34530245]  
  - perf/core: Add perf_clear_branch_entry_bitfields() helper (Stephane Eranian)  [Orabug: 34530245]  
  - nvmet: revert "nvmet: make discovery NQN configurable" (Hannes Reinecke)  [Orabug: 34500944]  
  - nvme-tcp: send H2CData PDUs based on MAXH2CDATA (Varun Prakash)  [Orabug: 34500944]  
  - nvme-fabrics: remove the unneeded ret variable in nvmf_dev_show (Changcheng Deng)  [Orabug: 34500944]  
  - nvme: add 'iopolicy' module parameter (Hannes Reinecke)  [Orabug: 34500944]  
  - nvme: drop unused variable ctrl in nvme_setup_cmd (Geliang Tang)  [Orabug: 34500944]  
  - nvme: increment request genctr on completion (Keith Busch)  [Orabug: 34500944]  
  - nvme-fabrics: print out valid arguments when reading from /dev/nvme-fabrics (Hannes Reinecke)  [Orabug: 34500944]  
  - arm64: kexec_file: use more system keyrings to verify kernel image signature (Coiby Xu)  [Orabug: 34424679]  
  - kexec, KEYS: make the code in bzImage64_verify_sig generic (Coiby Xu)  [Orabug: 34424679]  
  - kexec: clean up arch_kexec_kernel_verify_sig (Coiby Xu)  [Orabug: 34424679]  
  - scsi: lpfc: Copyright updates for 14.2.0.5 patches (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Update lpfc version to 14.2.0.5 (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Remove Menlo/Hornet related code (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Refactor lpfc_nvmet_prep_abort_wqe() into lpfc_sli_prep_abort_xri() (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Revert RSCN_MEMENTO workaround for misbehaved configuration (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix lost NVMe paths during LIF bounce stress test (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix attempted FA-PWWN usage after feature disable (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Set PU field when providing D_ID in XMIT_ELS_RSP64_CX iocb (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix uninitialized cqe field in lpfc_nvme_cancel_iocb() (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Update lpfc version to 14.2.0.4 (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Add more logging of cmd and cqe information for aborted NVMe cmds (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Address NULL pointer dereference after starget_to_rport() (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Resolve some cleanup issues following abort path refactoring (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Correct BDE type for XMIT_SEQ64_WQE in lpfc_ct_reject_event() (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Add support for ATTO Fibre Channel devices (Bradley Grove)  [Orabug: 34377373]  
  - scsi: lpfc: Add support for VMID tagging of NVMe I/Os (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Rework lpfc_vmid_get_appid() to be protocol independent (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Commonize VMID code location (James Smart)  [Orabug: 34377373]  
  - scsi: nvme-fc: Add new routine nvme_fc_io_getuuid() (Muneendra Kumar)  [Orabug: 34377373]  
  - scsi: lpfc: Update lpfc version to 14.2.0.3 (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Use sg_dma_address() and sg_dma_len() macros for NVMe I/O (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Rework FDMI initialization after link up (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Change VMID registration to be based on fabric parameters (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Decrement outstanding gidft_inp counter if lpfc_err_lost_link() (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Use list_for_each_entry_safe() in rscn_recovery_check() (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix dmabuf ptr assignment in lpfc_ct_reject_event() (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Inhibit aborts if external loopback plug is inserted (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix ndlp put following a LOGO completion (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fill in missing ndlp kref puts in error paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Correct BDE DMA address assignment for GEN_REQ_WQE (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix split code for FLOGI on FCoE (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Remove redundant lpfc_sli_prep_wqe() call (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix additional reference counting in lpfc_bsg_rport_els() (James Smart)  [Orabug: 34377373]  
  - blk-cgroup: move blkcg_{get,set}_fc_appid out of line (Christoph Hellwig)  [Orabug: 34377373]  
  - scsi: lpfc: Remove unnecessary null ndlp check in lpfc_sli_prep_wqe() (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Remove unneeded variable (Changcheng Deng)  [Orabug: 34377373]  
  - scsi: lpfc: Copyright updates for 14.2.0.2 patches (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Update lpfc version to 14.2.0.2 (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Expand setting ELS_ID field in ELS_REQUEST64_WQE (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Update stat accounting for READ_STATUS mbox command (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Change FA-PWWN detection methodology (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Refactor cleanup of mailbox commands (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix field overload in lpfc_iocbq data structure (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Introduce FC_RSCN_MEMENTO flag for tracking post RSCN completion (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Register for Application Services FC-4 type in Fabric topology (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Remove false FDMI NVMe FC-4 support for NPIV ports (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Revise FDMI reporting of supported port speed for trunk groups (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Correct CRC32 calculation for congestion stats (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Move MI module parameter check to handle dynamic disable (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Remove unnecessary NULL pointer assignment for ELS_RDF path (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Transition to NPR state upon LOGO cmpl if link down or aborted (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Update fc_prli_sent outstanding only after guaranteed IOCB submit (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Clear fabric topology flag before initiating a new FLOGI (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Requeue SCSI I/O to upper layer when fw reports link down (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Zero SLI4 fcp_cmnd buffer's fcpCntl0 field (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix diagnostic fw logging after a function reset (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Tweak message log categories for ELS/FDMI/NVMe rescan (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix broken SLI4 abort path (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Update lpfc version to 14.2.0.1 (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix unload hang after back to back PCI EEH faults (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Improve PCI EEH Error and Recovery Handling (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Copyright updates for 14.2.0.0 patches (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Update lpfc version to 14.2.0.0 (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor BSG paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor Abort paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor CT paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor misc ELS paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor VMID paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor FDISC paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor LS_RJT paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor LS_ACC paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor the RSCN/SCR/RDF/EDC/FARPR paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor PLOGI/PRLI/ADISC/LOGO paths (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Refactor base ELS paths and the FLOGI path (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Remove failing soft_wwn support (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: SLI path split: Introduce lpfc_prep_wqe (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Use kcalloc() (Julia Lawall)  [Orabug: 34377373]  
  - scsi: lpfc: Fix typos in comments (Julia Lawall)  [Orabug: 34377373]  
  - scsi: lpfc: Use rport as argument for lpfc_chk_tgt_mapped() (Hannes Reinecke)  [Orabug: 34377373]  
  - scsi: lpfc: Use rport as argument for lpfc_send_taskmgmt() (Hannes Reinecke)  [Orabug: 34377373]  
  - scsi: lpfc: Use fc_block_rport() (Hannes Reinecke)  [Orabug: 34377373]  
  - scsi: lpfc: Drop lpfc_no_handler() (Hannes Reinecke)  [Orabug: 34377373]  
  - scsi: lpfc: Kill lpfc_bus_reset_handler() (Hannes Reinecke)  [Orabug: 34377373]  
  - scsi: lpfc: Remove redundant flush_workqueue() call (Minghao Chi (CGEL ZTE))  [Orabug: 34377373]  
  - all: replace find_next{,_zero}_bit with find_first{,_zero}_bit where appropriate (Yury Norov)  [Orabug: 34377373]  
  - scsi: lpfc: Use irq_set_affinity() (Nitesh Narayan Lal)  [Orabug: 34377373]  
  - scsi: lpfc: Update lpfc version to 14.0.0.4 (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Add additional debugfs support for CMF (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Cap CMF read bytes to MBPI (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix NPIV port deletion crash (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Change return code on I/Os received during link bounce (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Update lpfc version to 14.0.0.3 (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Allow PLOGI retry if previous PLOGI was aborted (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Correct sysfs reporting of loop support after SFP status change (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Revert LOG_TRACE_EVENT back to LOG_INIT prior to driver_resource_setup() (James Smart)  [Orabug: 34377373]  
  - block: move elevator.h to block/ (Christoph Hellwig)  [Orabug: 34377373]  
  - scsi: lpfc: Add support for optional PLDV handling (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Return NULL rather than a plain 0 integer (Colin Ian King)  [Orabug: 34377373]  
  - scsi: lpfc: Fix a function name in comments (Cai Huoqing)  [Orabug: 34377373]  
  - scsi: lpfc: Update lpfc version to 14.0.0.2 (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Improve PBDE checks during SGL processing (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Zero CGN stats only during initial driver load and stat reset (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix I/O block after enabling managed congestion mode (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Don't remove ndlp on PRLI errors in P2P mode (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix rediscovery of tape device after LIP (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix hang on unload due to stuck fport node (James Smart)  [Orabug: 34377373]  
  - scsi: lpfc: Fix premature rpi release for unsolicited TPLS and LS_RJT (James Smart)  [Orabug: 34377373]  
  - Revert "Revert "scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE"" (Jack Vogel)   
  - Revert "Revert "scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input"" (Jack Vogel)   
  - Revert "Revert "scsi: lpfc: Resolve some cleanup issues following SLI path refactoring"" (Jack Vogel)   
  - Revert "Revert "scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()"" (Jack Vogel)   
  - Revert "Revert "scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup()"" (Jack Vogel)   
  - Revert "Revert "scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID"" (Jack Vogel)   
  - Revert "Revert "scsi: lpfc: SLI path split: Refactor SCSI paths"" (Jack Vogel)   
  - Revert "Revert "scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4"" (Jack Vogel)   
  - Revert "Revert "scsi: lpfc: SLI path split: Refactor lpfc_iocbq"" (Jack Vogel)   
  - uek-rpm: Enable CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT (Eric Snowberg)  [Orabug: 34304827]  
  - efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode (David Howells)  [Orabug: 34304827]  
  - arm64: Allow locking down the kernel under EFI secure boot (Seth Forshee)  [Orabug: 34304827]  
  - efi: Lock down the kernel if booted in secure boot mode (David Howells)  [Orabug: 34304827]  
  - security: lockdown: expose a hook to lock the kernel down (Jeremy Cline)  [Orabug: 34304827]  
  - Revert "lockdown: Run in lockdown integrity mode when SB is enabled." (Eric Snowberg)  [Orabug: 34304827]  
  - nvmet-tcp: fix possible list corruption for unexpected command failure (Sagi Grimberg)  [Orabug: 34461972]  
  - nvme: fix use after free when disconnecting a reconnecting ctrl (Ruozhu Li)  [Orabug: 34461972]  
  - nvme-multipath: set ana_log_size to 0 after free ana_log_buf (Hou Tao)  [Orabug: 34461972]  
  - nvme: report write pointer for a full zone as zone start + zone len (Niklas Cassel)  [Orabug: 34461972]  
  - nvme: show subsys nqn for duplicate cntlids (Keith Busch)  [Orabug: 34461972]  
  - nvme: fix write zeroes pi (Klaus Jensen)  [Orabug: 34461972]  
  - nvme-fabrics: ignore invalid fast_io_fail_tmo values (Maurizio Lombardi)  [Orabug: 34461972]  
  - nvme-tcp: fix memory leak when freeing a queue (Maurizio Lombardi)  [Orabug: 34461972]  
  - nvme-tcp: validate R2T PDU in nvme_tcp_handle_r2t() (Varun Prakash)  [Orabug: 34461972]  
  - nvmet-tcp: fix memory leak when performing a controller reset (Maurizio Lombardi)  [Orabug: 34461972]  
  - nvme: add new discovery log page entry definitions (Hannes Reinecke)  [Orabug: 34461972]  
  - nvmet: use flex_array_size and struct_size (Len Baker)  [Orabug: 34461972]  
  - nvmet: register discovery subsystem as 'current' (Hannes Reinecke)  [Orabug: 34461972]  
  - nvmet: switch check for subsystem type (Hannes Reinecke)  [Orabug: 34461972]  
  - nvmet: use struct_size over open coded arithmetic (Len Baker)  [Orabug: 34461972]  
  - nvme-pci: clear shadow doorbell memory on resets (Keith Busch)  [Orabug: 34461972]  
  - nvme-multipath: add error handling support for add_disk() (Luis Chamberlain)  [Orabug: 34461972]  
  - nvmet: use macro definitions for setting cmic value (Max Gurtovoy)  [Orabug: 34461972]  
  - nvmet: use macro definition for setting nmic value (Max Gurtovoy)  [Orabug: 34461972]  
  - nvme: add CNTRLTYPE definitions for 'identify controller' (Hannes Reinecke)  [Orabug: 34461972]  
  - nvme: display correct subsystem NQN (Hannes Reinecke)  [Orabug: 34461972]  
  - nvme: Add connect option 'discovery' (Hannes Reinecke)  [Orabug: 34461972]  
  - nvme: expose subsystem type in sysfs attribute 'subsystype' (Hannes Reinecke)  [Orabug: 34461972]  
  - nvmet: set 'CNTRLTYPE' in the identify controller data (Hannes Reinecke)  [Orabug: 34461972]  
  - nvmet: add nvmet_is_disc_subsys() helper (Hannes Reinecke)  [Orabug: 34461972]  
  - nvmet: make discovery NQN configurable (Hannes Reinecke)  [Orabug: 34461972]  
  - nvmet-rdma: implement get_max_queue_size controller op (Max Gurtovoy)  [Orabug: 34461972]  
  - nvmet: add get_max_queue_size op for controllers (Max Gurtovoy)  [Orabug: 34461972]  
  - nvme-rdma: limit the maximal queue size for RDMA controllers (Max Gurtovoy)  [Orabug: 34461972]  
  - nvme: generate uevent once a multipath namespace is operational again (Hannes Reinecke)  [Orabug: 34461972]  
  - nvme: don't memset() the normal read/write command (Jens Axboe)  [Orabug: 34461972]  
  - nvme: move command clear into the various setup helpers (Jens Axboe)  [Orabug: 34461972]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-100.96.30.el9uek]
changelog:
  - perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang)  [Orabug: 35151818]  
  - perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang)  [Orabug: 35151818]  
  - perf/x86/uncore: Ignore broken units in discovery table (Kan Liang)  [Orabug: 35151818]  
  - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang)  [Orabug: 35151818]  
  - perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang)  [Orabug: 35151818]  
  - Revert "perf/x86/uncore: Factor out uncore_device_to_die()" (Thomas Tai)  [Orabug: 35151818]  
  - Revert "perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name" (Thomas Tai)  [Orabug: 35151818]  
  - Revert "perf/x86/uncore: Ignore broken units in discovery table" (Thomas Tai)  [Orabug: 35151818]  
  - Revert "perf/x86/uncore: Add a quirk for UPI on SPR" (Thomas Tai)  [Orabug: 35151818]  
  - Revert "perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table" (Thomas Tai)  [Orabug: 35151818]  
  - ionic: remove unnecessary void casts (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: remove unnecessary indirection (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: missed doorbell workaround (Allen Hubbe)  [Orabug: 35166570]  
  - ionic: refactor use of ionic_rx_fill() (Neel Patel)  [Orabug: 35166570]  
  - ionic: enable tunnel offloads (Neel Patel)  [Orabug: 35166570]  
  - ionic: new ionic device identity level and VF start control (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: only save the user set VF attributes (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: replay VF attributes after fw crash recovery (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: change order of devlink port register and netdev register (Jiri Pirko)  [Orabug: 35166570]  
  - ionic: no transition while stopping (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: use vmalloc include (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: clean up comments and whitespace (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: prefer strscpy over strlcpy (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: Use vzalloc for large per-queue related buffers (Brett Creeley)  [Orabug: 35166570]  
  - ionic: catch transition back to RUNNING with fw_generation 0 (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: replace set_vf data with union (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: stretch heartbeat detection (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: remove the dbid_inuse bitmap (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: disable napi when ionic_lif_init() fails (Brett Creeley)  [Orabug: 35166570]  
  - ionic: Cleanups in the Tx hotpath code (Brett Creeley)  [Orabug: 35166570]  
  - ionic: Prevent filter add/del err msgs when the device is not available (Brett Creeley)  [Orabug: 35166570]  
  - ionic: Query FW when getting VF info via ndo_get_vf_config (Brett Creeley)  [Orabug: 35166570]  
  - ionic: Allow flexibility for error reporting on dev commands (Brett Creeley)  [Orabug: 35166570]  
  - ionic: Correctly print AQ errors if completions aren't received (Brett Creeley)  [Orabug: 35166570]  
  - ionic: fix up printing of timeout error (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: better handling of RESET event (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: add FW_STOPPING state (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: separate function for watchdog init (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: no devlink_unregister if not registered (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: tame the filter no space message (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: allow adminq requests to override default error message (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: handle vlan id overflow (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: generic filter delete (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: generic filter add (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: add generic filter search (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: remove mac overflow flags (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: move lif mac address functions (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: add filterlist to debugfs (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: add lif param to ionic_qcq_disable (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: have ionic_qcq_disable decide on sending to hardware (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: add polling to adminq wait (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: move lif mutex setup and delete (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: check for binary values in FW ver string (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: remove debug stats (Shannon Nelson)  [Orabug: 35166570]  
  - ionic: Move devlink registration to be last devlink command (Leon Romanovsky)  [Orabug: 35166570]  
  - crypto: jitter - update max health test failure in FIPS mode (Saeed Mirzamohammadi)  [Orabug: 35160891]  
  - mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga)  [Orabug: 35054621]  
  - mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga)  [Orabug: 35054621]  
  - mm: fix VMA_BUG_ON_MM due to mmap_lock not held (Anthony Yznaga)  [Orabug: 35054621]  
  - mm: avoid early cow when copying ptes for MADV_DOEXEC (Anthony Yznaga)  [Orabug: 35054621]  
  - net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch)  [Orabug: 35094721]  
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM1733a (Saeed Mirzamohammadi)  [Orabug: 35145945]  
  - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM173X (Saeed Mirzamohammadi)  [Orabug: 35146608]  
  - rds: ib: Fix non-parenthetical mutex/semaphore use (Håkon Bugge)  [Orabug: 35155112]  
  - Revert "btrfs: free device in btrfs_close_devices for a single device filesystem" (Vijayendra Suman)  [Orabug: 35161535]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-100.96.31.el9uek]
changelog:
  - uek-rpm: Update linux-firmware dependency (Somasundaram Krishnasamy)  [Orabug: 35213423]  
  - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (Martin K. Petersen)  [Orabug: 35209013]  
  - scsi: qla2xxx: Synchronize the IOCB count to be in order (Quinn Tran)  [Orabug: 35209013]  
  - scsi: qla2xxx: Perform lockless command completion in abort path (Nilesh Javali)  [Orabug: 35209013]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-100.96.32.el9uek]
changelog:
  - crypto: Report fips module name and version for aarch64 (Saeed Mirzamohammadi)  [Orabug: 35225251]  
  - uek-rpm: Enable RFC7919 config for aarch64 (Saeed Mirzamohammadi)  [Orabug: 35225251]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Packit <hello@packit.dev> - 286.1-1
changelog:
  - Users: Fix broken alignment of the first column in groups table
  - Translation updates (rhbz#2139644)


author: EL Errata <el-errata_ww@oracle.com> - 286.1-1.0.1
changelog:
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]


author: Alexander Sosedkin <asosedkin@redhat.com> - 20211115-1.git70de135
changelog:
  - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
changelog:
  - gnutls: enable SHAKE, needed for Ed448
  - fips-mode-setup: improve handling FIPS plus subpolicies
  - FIPS: disable SHA-1 HMAC
  - FIPS: disable CBC ciphers except in Kerberos


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
changelog:
  - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
  - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
  - fips-mode-setup: catch more inconsistencies, clarify --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
changelog:
  - DEFAULT: drop DNSSEC SHA-1 exception
  - openssh: add support for sntrup761x25519-sha512@openssh.com


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-2
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Restore --reportformat option in pvdisplay.
  - Improve multipath backlist option handling.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-3
changelog:
  - Fix effect of setting multipath_component_detection to 0.
  - Fix lvmdbusd using lvm shell with editline.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-11
changelog:
  - Add 0059-multipathd-Add-missing-ctype-include.patch
  - Add 0060-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119896


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-13
changelog:
  - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2125357


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-14
changelog:
  - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133999
  - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133989
  - Resolves: bz #2133989, #2133999


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-15
changelog:
  - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2141860
  - Add 0068-libmultipath-cleanup-remove_feature.patch
  - Add 0069-libmultipath-cleanup-add_feature.patch
  - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2033080
  - Resolves: bz #2033080, #2141860


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-17
changelog:
  - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2145225


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.12.0-1
changelog:
  - Allow destdir option with modulesync command
  - Add documentation for query api flags (RhBug:2035577)
  - Fix swap command to work with local rpm files correctly (RhBug:2036434)
  - Fix regression in verifying signatures using rpmkeys
  - Fix decompression of groups.xml (RhBug:2030255)
  - Fix history undo on a Reason Change (RhBug:2010259,2053014)
  - Remove /usr/bin from sys.path to avoid accidentally importing garbage
  - Fix python3.11 build: remove deprecated, update traceback regex
  - fix dnf mark error when history sqlite missing
  - [doc] clarify effect of --enablerepo and --disablerepo options (RhBug:2031414)
  - [doc] default values for module_obsoletes and module_stream_switch (RhBug: 2051846)
  - dnf.conf: hint users where to find more info about defaults and other options
  - Fix unittests that relied on checksum being at the end of solvfiles
  - completion: remove unnecessary echo
  - Fix remove when no repos are enabled (RhBug:2064341)
  - Add loongarch support for dnf
  - Add spaces between words to fix typos (RhBug:2077296)
  - [doc] Improve "proxy" configuration option documentation (RhBug:2072332)
  - Fix download errors handling in non-english locales (RhBug:2024527)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.14.0-1
changelog:
  - Update to 4.14.0
  - Add doc related to --destdir and --downloadonly options (RhBug:2100811)
  - Fix broken dependencies error reporting (RhBug:2088422)
  - Add support for group upgrade rollback (RhBug:2016070)
  - Expose plugin unload method to API (RhBug:2047251)
  - Fix upgrade from file to noarch pkg (RhBug:2006018)
  - Allow passing plugin parameters with dashes in names (RhBug:1980712)
  - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421)
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)
  - doc: Describe how gpg keys are stored for `repo_ggpcheck` (RhBug:2020678)
  - bash-completion: use sqlite cache when available


author: Nicola Sella <nsella@redhat.com> - 4.14.0-3
changelog:
  - Move system-upgrade plugin to core (RhBug:2131288)
  - offline-upgrade: add support for security filters (RhBug:1939975,2139326)
  - Fix plugins unit tests + unload plugins upon their deletion


author: EL Errata <el-errata_ww@oracle.com> - 4.14.0-4.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Fixed python stack trace with updateinfo list cves command [Orabug: 32749660]
  - Replaced upstream bugzilla reporting reference. [Orabug: 32829849]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-2
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2029864)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2029871)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.1.0-1
changelog:
  - Add a new subpackage with modulesync command. The command downloads packages from modules and/or creates a repository with modular data. (RhBug:1868047)
  - [repoclosure] Print counts of missing dependencies
  - [reposync] Do not stop downloading packages on the first error (RhBug:2009894)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - [config-manager] Update documentation (RhBug:2075366)
  - [builddep] Warning when using macros with source rpms (RhBug:2077820)
  - [repomanage] Use modules only from repo they are handling (RhBug:2072441)
  - Skip all non rpm transaction items for transaction_action plugins (rhbug:2023652)
  - feat(repomanage): Add new option --oldonly


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: EL Errata <el-errata_ww@oracle.com> - 057-21.git20230214.0.1
changelog:
  - network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.6
changelog:
  - Consolidated development of newly ported features. [Orabug: 33037106]
  - Implement built-in variables: probeprov, probemod, probefunc, probename.
  - Implement built-in variables: caller, stackdepth, ucaller, ustackdepth,
    errno, walltimestamp.  (Eugene Loh)
  - Implement actions: stack(), ustack(). (Eugene Loh)
  - Implement subroutine: strlen().
  - Implement option: -Z (partial). (Eugene Loh)
  - Added support for string constants and string values.
  - Added support for strings to trace().
  - Fixed storage size determination for global and local variables.
  - Improved storage layout for global and local variables.
  - Mark aggregation actions as non-data recording actions.  (Eugene Loh)
  - Load string constant table into the 'strtab' BPF map.
  - Load probe description data into the 'probes' BPF map.
  - Consolidate all string hash functions into a single hash function.
  - Implement variable length integer support.
  - Store the length of each string as a variable length integer inline with its
    character stream.
  - Improve memcpy() internal BPF function.
  - Testsuite improvements.  (Eugene Loh)


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.7
changelog:
  - Implement argument retrieval for SDT probes.
  - Introduce 'bpflog' runtime option to request BPF verifier log.
  - Implementation improvements for memry copy operations.
  - Fix type alignment handling for enums.
  - Fix ERROR-in-BEGIN probe handling.
  - Transition from variable-length string size to 2-byte string size.
  - Fix size of string data in the trace output buffer.
  - Fix data size for value copy.
  - Add support for strjoin() subroutine.
  - Add support for substr() subroutine.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.8
changelog:
  - Support running dtrace under valgrind. (Nick Alcock) [Orabug: 32760574]
  - Implementation of speculative tracing. (Nick Alcock)
  - Add support for string comparison. (Eugene Loh)
  - Add support for strchr(), strrchr(), index(), rindex(), strstr(), lltostr().
    (Eugene Loh)
  - Add support for symbols in compressed kernel modules. (Nick Alcock)
  - Add support for htonl, htonll, htons, ntohl, ntohll, ntohs. (Eugene Loh)
  - Various testsuite fixes and improvements. [Orabug: 33474154]
  - Various code improvements. [Orabug: 33474154]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.9
changelog:
  - Add support for strtok(). (Eugene Loh)
  - Implement TLS (thread-local storage) variables.
  - Add support for basename(), dirname(). (Eugene Loh)
  - Generic hash table improvements and consistent use of htabs. (Nick Alcock)
  - CTF improvements in view of better kernel support. (Nick Alcock)
  - Add support for ftruncate(). (Eugene Loh)
  - Add support for rand(). (Eugene Loh)
  - Fix string constant handling for strings longer than strsize.
  - Optimization of substr(), strjoin(), and storing strings in the trace buffer.
  - Various string handling fixes and improvements. (Eugene Loh, Kris Van Hees)
    [Orabug: 33651682]
  - Various testsuite fixes and improvements. [Orabug: 33651682]
  - Various code improvements. [Orabug: 33651682]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.10
changelog:
  - Add support for associative arrays.
  - Add support for allcoa() and bcopy(). (Nick Alcock)
  - Add support for inet_ntoa(), progenyof(), getmajor(), getminor(),
    mutex_owned(), mutex_owner(), mutex_type_adaptive(), mutex_type_spin(),
    rw_read_held(), rw_write_held(), and rw_iswriter(). (Eugene Loh)
  - Improved fault handling. (Nick Alcock, Kris Van Hees)
  - Various disassembler improvements, esp. annotations.
  - Strings are no longer stored using a length prefix.
  - The trace() action now supports arrays, structs, and unions.
  - Various testsuite fixes and improvements. [Orabug: 34112342]
  - Various code improvements. [Orabug: 34112342]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.11
changelog:
  - Add initial support for USDT. (Nick Alcock, Kris Van Hees)
  - Add support for aggregation keys. (Eugene Loh, Kris Van Hees)
  - Add support for copyin(), copyinto(), and copyinstr().
  - Add support for built-in variable args[] and sdt probe arg types.
  - Fix arg handling for various probes. (Eugene Loh)
  - Add basic support for setopt().
  - Add -xlockmem, with useful error message. (Eugene Loh)
  - Fix -xverbose, -xcpp, and -xctfpath
  - Fix handling of multiple args after --. (Nick Alcock)
  - Have the pid provider ignore compiler-generated internal function names.
  - Fix various bugs with typecasting and internal integer storage. (Eugene Loh)
  - Fix access to scalars in kernel space.
  - Fix libproc search of rtld_global due to glibc changes. (Nick Alcock)
    [Orabug: 32856318]
  - Truly decouple per-CPU BPF agg maps with a "map of maps."
  - Unused dual aggregation copies (DT_AGG_NUM_COPIES) have been removed.
    (Eugene Loh)
  - Various testsuite fixes and improvements. [Orabug: 34251899]
  - Various code improvements. [Orabug: 34251899]


author: Kris Van Hees <kris.vna.hees@oracle.com> - 2.0.0-1.12
changelog:
  - Fix evaluation order of bcopy() arguments and lift non-alloca restriction
    on the source address. (Eugene Loh, Kris Van Hees)
  - Implement actions: clear(), tracemem(). (Kris Van Hees, Eugene Loh)
  - Implement subroutines: copyout(), copyinstr(). (Kris Van Hees, Eugene Loh)
  - Implement options: switchrate, aggrate.
  - Implement provider: cpc. (Eugene Loh)
  - Implement provider: proc.
  - Implement built-in variable: uregs. (Eugene Loh)
  - Increase strtab maximum size.
  - Support using indirect load instructions for pointers to alloca()'d and
    DTrace managed memory. (Kris Van Hees, Eugene Loh)
  - Fix arg0 and arg1 for profile-* and tick-* probes. (Eugene Loh)
  - Implement runtime bounds checking for scalar array access. (Eugene Loh)
  - Updated manpage and moved to dtrace.8.
  - Support arbitrary address pointers for basename(), dirname(), strchr(),
    strrchr(), and inet_ntoa(). (Eugene Loh), [Orabug: 34857846]
  - Add runtime bounds checking for scalar array access. (Eugene Loh)
    [Orabug: 35045463]
  - Various testsuite fixes and improvements. [Orabug: 34829509]
  - Various code improvements. [Orabug: 34829509]


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: EL Errata <el-errata_ww@oracle.com> - 1.2.1-1.0.1
changelog:
  - Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI
    [Orabug: 30257573]
  - discard empty RH-Satellite-6.xml [Orabug: 30328734]
  - Remove capsule file as well, since it references removed config [Orabug: 33513329]


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 1.8.10-2.0.1
changelog:
  - Drop pesign.service restart in postun [Orabug: 34760075]
  - Update signing certificate [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)
  - Update SBAT data to include Oracle [Oracle: 33072886]


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.1
changelog:
  - Merge all Oracle patches:
  - Add complex divide improvement (11.2.1-2.2.0.1)
    backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
  - Add CTF/BTF support (11.2.1-2.2.0.1)
  - Add -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.1)
  - Add more fixes for -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.2)
  - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
    PR104550 and PR102276. (11.2.1-2.2.0.3)
  - NOTE: adjust gcc12-ctf-pre-1-write_symbols-to-support-bitmasks.patch
    for c-family/c-pch.c for 11.2.1-9.4
  - Fix Orabug - 35137216 Backport fix for upstream PR debug/105089 to OL9 GCC
    (11.3.1-2.1.0.2)
    - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
      using the following upstream commits:
      613a6fca75156aadc2e79d78a23e547d39762c1e,
      d0b00e74bf59c73b79471bbe9de19373b8661e20, and
      d634c5d7c78c6ec0fa39d96984460475564519c8
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Arjun Shankar <arjun@redhat.com> - 2.34-53
changelog:
  - Sync with upstream branch release/2.34/master,
    commit a4217408a3d6050a7f42ac23adb6ac7218dca85f:
  - Apply asm redirections in syslog.h before first use [BZ #27087]
  - _Static_assert needs two arguments for compatibility with GCC before 9


author: Florian Weimer <fweimer@redhat.com> - 2.34-57
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6484ae5b8c4d4314f748e4d3c9a9baa5385e57c5
  - malloc: Fix -Wuse-after-free warning in tst-mallocalign1 [BZ #26779]
  - s_sincosf.h: Change pio4 type to float [BZ #28713]
  - math: Properly cast X_TLOSS to float [BZ #28713]
  - Regenerate ulps on x86_64 with GCC 12
  - Avoid -Wuse-after-free in tests [BZ #26779].
  - Fix build of nptl/tst-thread_local1.cc with GCC 12
  - Fix stdio-common tests for GCC 12 -Waddress
  - Fix stdlib/tst-setcontext.c for GCC 12 -Warray-compare
  - resolv: Avoid GCC 12 false positive warning [BZ #28439].
  - intl: Avoid -Wuse-after-free [BZ #26779]
  - elf: Drop elf/tls-macros.h in favor of __thread and tls_model attributes [BZ #28152] [BZ #28205]
  - time: Set daylight to 1 for matching DST/offset change (RHBZ#2155352)
  - elf/tst-tlsopt-powerpc fails when compiled with -mcpu=power10 (BZ# 29776)
  - time: Use 64 bit time on tzfile
  - nscd: Use 64 bit time_t on libc nscd routines (BZ# 29402)
  - nis: Build libnsl with 64 bit time_t
  - Use LFS and 64 bit time for installed programs (BZ #15333)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-12
changelog:
  - fips: mark PBKDF2 with short key and output sizes non-approved
  - fips: only mark HMAC as approved in PBKDF2
  - fips: mark gnutls_key_generate with short key sizes non-approved
  - fips: fix checking on hash algorithm used in ECDSA
  - fips: preserve operation context around FIPS selftests API


author: Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-13
changelog:
  - fips: make XTS key check failure not fatal (#2130971)
  - enable source archive verification again (#2127094)
  - clear server's session ticket indication at rehandshake (#2136072)
  - crypto-api: add block cipher API with automatic padding (#2084161)
  - fips: remove library path checking from FIPS integrity check (#2140908)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.06-61.0.1
changelog:
  - Bump SBAT metadata for grub to 3 [Orabug: 34872719]
  - Fix CVE-2022-3775 [Orabug: 34871953]
  - Enable signing for aarch64 EFI
  - Fix signing certificate names
  - Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation
  - Update bug url [Orabug: 34202300]
  - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
  - Update signing certificate [JIRA: OLDIS-16371]
  - fix SBAT data [JIRA: OLDIS-16371]
  - Update requires [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Mark Will <mark.will@oracle.com> - 8.40-63.0.1
changelog:
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)
  - Do not add /boot twice for btrfs subvolumes [Orabug: 34380742]


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Tao Liu <ltao@redhat.com> - 2:1.8.0-5
changelog:
  - Document migrateval. Resolves: rhbz2071959
  - Confine irqbalance to systems where it is useful. Resolves: rhbz2063930
  - Wrong EnvironmentFile in irqbalance.service. Resolves: rhbz2058509


author: EL Errata <el-errata_ww@oracle.com> - 6.2.1.4-3.git2a8f9d8.0.1
changelog:
  - Allow systemd-remount-fs complete before iscsi-init.service [Orabug: 34325406]
  - Allow iscsi-init.service to start after local-fs.target [Orabug: 33930979]
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-275.el9]
changelog:
  - cifs: serialize all mount attempts (Ronnie Sahlberg) [2165757]
  - cifs: fix potential double free during failed mount (Ronnie Sahlberg) [2165755]
  - EDAC/amd64: Handle three rank interleaving mode (Aristeu Rozanski) [2165633]
  - memory: tegra: Add DLA clients for Tegra234 (Joel Slebodnick) [2144645]
  - dt-bindings: tegra: Update headers for Tegra234 (Joel Slebodnick) [2144645]
  - KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2035694]
  - KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2035694]
  - KVM: x86: SVM: use smram structs (Maxim Levitsky) [2035694]
  - KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2035694]
  - KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2035694]
  - KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2035694]
  - KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2035694]
  - KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2035694]
  - KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2035694]
  - KVM: x86: do not go through ctxt->ops when emulating rsm (Maxim Levitsky) [2035694]
  - KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2035694]
  - KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2035694]
  - KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2035694]
  - bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2035694]
  - KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2035694]
  - KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2035694]
  - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2035694]
  - KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2035694]
  - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2035694]
  - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky) [2035694]
  - tty: serial: qcom_geni: avoid duplicate struct member init (Alessandro Carminati) [2162957]
  - tty: serial: qcom-geni-serial: Add support for Hibernation feature (Alessandro Carminati) [2162957]
  - tty: serial: qcom-geni-serial: Replace hardcoded icc flags with macros. (Alessandro Carminati) [2162957]
  - serial: Make ->set_termios() old ktermios const (Alessandro Carminati) [2162957]
  - tty: serial: qcom-geni-serial: Fix %lu -> %u in print statements (Alessandro Carminati) [2162957]
  - tty: serial: qcom-geni-serial: Fix get_clk_div_rate() which otherwise could return a sub-optimal clock rate. (Alessandro Carminati) [2162957]
  - tty: serial: qcom-geni-serial: Implement start_rx callback (Alessandro Carminati) [2162957]
  - serial: core: Introduce callback for start_rx and do stop_rx in suspend only if this callback implementation is present. (Alessandro Carminati) [2162957]
  - serial: qcom_geni_serial: Disable MMIO tracing for geni serial (Alessandro Carminati) [2162957]
  - tty: serial: qcom-geni-serial: Remove uart frequency table. Instead, find suitable frequency with call to clk_round_rate. (Alessandro Carminati) [2162957]
  - serial: core: Do stop_rx in suspend path for console if console_suspend is disabled (Alessandro Carminati) [2162957]
  - serial: qcom: use check for empty instead of pending (Alessandro Carminati) [2162957]
  - serial: make uart_console_write->putchar()'s character an unsigned char (Alessandro Carminati) [2162957]
  - PCI: qcom-ep: Setup PHY to work in EP mode (Shawn Doherty) [2164511]
  - PCI: qcom: Setup PHY to work in RC mode (Shawn Doherty) [2164511]
  - PCI: qcom: Fix error message for reset_control_assert() (Shawn Doherty) [2164511]
  - PCI: qcom: Add basic interconnect support (Shawn Doherty) [2164511]
  - dt-bindings: PCI: qcom: Allow 'dma-coherent' property (Shawn Doherty) [2164511]
  - dt-bindings: PCI: qcom: Add SC8280XP/SA8540P interconnects (Shawn Doherty) [2164511]
  - ASoC: tegra: Add binding doc for OPE module (Joel Slebodnick) [2122417]
  - ASoC: tegra: Add binding doc for ASRC module (Joel Slebodnick) [2122417]
  - ASoC: Document Tegra234 APE support (Joel Slebodnick) [2122417]
  - ASoC: dt-bindings: tegra: Few more Tegra210 AHUB modules (Joel Slebodnick) [2122417]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-276.el9]
changelog:
  - blk-cgroup: don't update io stat for root cgroup (Ming Lei) [2167245]
  - sctp: do not check hb_timer.expires when resetting hb_timer (Xin Long) [2167094]
  - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2159642]
  - redhat: Include Azure CVM specific udev rules into UKI's initramfs (Vitaly Kuznetsov) [2165913]
  - r8169: fix dmar pte write access is not set error (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: enable GRO software interrupt coalescing per default (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: use tp_to_dev instead of open code (Jose Ignacio Tornos Martinez) [2159618]
  - drivers: net: convert to boolean for the mac_managed_pm flag (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: add rtl_disable_rxdvgate() (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: remove rtl_wol_shutdown_quirk() (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: merge support for chip versions 10, 13, 16 (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: remove not needed net_ratelimit() check (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: remove useless PCI region size check (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: remove comment about apparently non-existing chip versions (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: merge handling of chip versions 12 and 17 (RTL8168B) (Jose Ignacio Tornos Martinez) [2159618]
  - net: ethernet: move from strlcpy with unused retval to strscpy (Jose Ignacio Tornos Martinez) [2159618]
  - r8169: fix accessing unset transport header (Jose Ignacio Tornos Martinez) [2159618]
  - net: phy: realtek: add support for RTL8365MB-VC internal PHYs (Jose Ignacio Tornos Martinez) [2159618]
  - cifs: refcount only the selected iface during interface update (Ronnie Sahlberg) [2151418]
  - cifs: drop the lease for cached directories on rmdir or rename (Ronnie Sahlberg) [2151418]
  - cifs: find and use the dentry for cached non-root directories also (Ronnie Sahlberg) [2151418]
  - cifs: enable caching of directories for which a lease is held (Ronnie Sahlberg) [2151418]
  - cifs: fix skipping to incorrect offset in emit_cached_dirents (Ronnie Sahlberg) [2151418]
  - cifs: store a pointer to a fid in the cfid structure instead of the struct (Ronnie Sahlberg) [2151418]
  - cifs: improve handlecaching (Ronnie Sahlberg) [2151418]
  - cifs: Make tcon contain a wrapper structure cached_fids instead of cached_fid (Ronnie Sahlberg) [2151418]
  - cifs: Add helper function to check smb1+ server (Ronnie Sahlberg) [2151418]
  - cifs: Use help macro to get the mid header size (Ronnie Sahlberg) [2151418]
  - cifs: Use help macro to get the header preamble size (Ronnie Sahlberg) [2151418]
  - cifs: Do not access tcon->cfids->cfid directly from is_path_accessible (Ronnie Sahlberg) [2151418]
  - cifs: Add constructor/destructors for tcon->cfid (Ronnie Sahlberg) [2151418]
  - cifs: Do not use tcon->cfid directly, use the cfid we get from open_cached_dir (Ronnie Sahlberg) [2151418]
  - cifs: Move cached-dir functions into a separate file (Ronnie Sahlberg) [2151418]
  - cifs: when insecure legacy is disabled shrink amount of SMB1 code (Ronnie Sahlberg) [2151418]
  - cifs: remove unnecessary locking of chan_lock while freeing session (Ronnie Sahlberg) [2151418]
  - cifs: avoid use of global locks for high contention data (Ronnie Sahlberg) [2151418]
  - cifs: add missing spinlock around tcon refcount (Ronnie Sahlberg) [2151418]
  - cifs: avoid deadlocks while updating iface (Ronnie Sahlberg) [2151418]
  - cifs: Use after free in debug code (Ronnie Sahlberg) [2151418]
  - cifs: during reconnect, update interface if necessary (Ronnie Sahlberg) [2151418]
  - cifs: fix race condition with delayed threads (Ronnie Sahlberg) [2151418]
  - cifs: change iface_list from array to sorted linked list (Ronnie Sahlberg) [2151418]
  - cifs: update cifs_ses::ip_addr after failover (Ronnie Sahlberg) [2151418]
  - cifs: avoid parallel session setups on same channel (Ronnie Sahlberg) [2151418]
  - cifs: fix potential deadlock in direct reclaim (Ronnie Sahlberg) [2151418]
  - smb3: remove unneeded null check in cifs_readdir (Ronnie Sahlberg) [2151418]
  - cifs: cache the dirents for entries in a cached directory (Ronnie Sahlberg) [2151418]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-277.el9]
changelog:
  - virtio_net: notify MAC address change on device initialization (Laurent Vivier) [2153210]
  - virtio_net: disable VIRTIO_NET_F_STANDBY if VIRTIO_NET_F_MAC is not set (Laurent Vivier) [2153210]
  - virtio-net: fix race between ndo_open() and virtio_device_ready() (Laurent Vivier) [2153210]
  - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (Mohammed Gamal) [2168542]
  - drm/ast: Fix start address computation (Jocelyn Falempe) [2166219]
  - arm64-64k: Increase max NR_IRQS from 64+8192 to 2^^19 (Donald Dutile) [2166450]
  - thunderbolt: Add DP OUT resource when DP tunnel is discovered (Desnes Nunes) [2107603]
  - net: sched: fix race condition in qdisc_graft() (Davide Caratti) [2165745] {CVE-2023-0590}
  - xfs: drop write error injection is unfixable, remove it (Carlos Maiolino) [2155605]
  - xfs: use iomap_valid method to detect stale cached iomaps (Carlos Maiolino) [2155605]
  - iomap: write iomap validity checks (Carlos Maiolino) [2155605]
  - xfs: xfs_bmap_punch_delalloc_range() should take a byte range (Carlos Maiolino) [2155605]
  - iomap: buffered write failure should not truncate the page cache (Carlos Maiolino) [2155605]
  - xfs,iomap: move delalloc punching to iomap (Carlos Maiolino) [2155605]
  - xfs: use byte ranges for write cleanup ranges (Carlos Maiolino) [2155605]
  - xfs: punching delalloc extents on write failure is racy (Carlos Maiolino) [2155605]
  - xfs: write page faults in iomap are not buffered writes (Carlos Maiolino) [2155605]
  - pinctrl: qcom: remove duplicate included header files (Alessandro Carminati) [2164821]
  - pinctrl: qcom: sc8280xp: Rectify UFS reset pins (Alessandro Carminati) [2164821]
  - pinctrl: qcom: lpass-lpi: Add missed bitfield.h (Alessandro Carminati) [2164821]
  - arm64: dts: qcom: sc7180: revert "arm64: dts: qcom: sc7180: Avoid glitching SPI CS at bootup on trogdor" (Alessandro Carminati) [2164821]
  - pinctrl: qcom: sdm670: change sdm670_reserved_gpios to static (Alessandro Carminati) [2164821]
  - pinctrl: qcom: Avoid glitching lines when we first mux to output (Alessandro Carminati) [2164821]
  - pinctrl: qcom: add sdm670 pinctrl (Alessandro Carminati) [2164821]
  - pinctrl: qcom: do not reinitialize gpio valid mask (Alessandro Carminati) [2164821]
  - pinctrl: qcom: Add missing header(s) (Alessandro Carminati) [2164821]
  - pinctrl: qcom: restrict drivers per ARM/ARM64 (Alessandro Carminati) [2164821]
  - pinctrl: qcom: spmi-gpio: Add compatible for PM7250B (Alessandro Carminati) [2164821]
  - pinctrl: qcom: spmi-gpio: Fix the GPIO strength mapping (Alessandro Carminati) [2164821]
  - pinctrl: qcom: spmi-gpio: add support for LV_VIN2 and MV_VIN3 subtypes (Alessandro Carminati) [2164821]
  - pinctrl: qcom: spmi-gpio: Make irqchip immutable (Alessandro Carminati) [2164821]
  - pinctrl: qcom: Add sc8280xp lpass lpi pinctrl driver (Alessandro Carminati) [2164821]
  - pinctrl: qcom: Add sm8450 lpass lpi pinctrl driver (Alessandro Carminati) [2164821]
  - pinctrl: qcom: sc8180x: Fix wrong pin numbers (Alessandro Carminati) [2164821]
  - pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map (Alessandro Carminati) [2164821]
  - pinctrl: qcom: sm8250: Fix PDC map (Alessandro Carminati) [2164821]
  - pinctrl: qcom: Make PINCTRL_SM8450 depend on PINCTRL_MSM (Alessandro Carminati) [2164821]
  - pinctrl: qcom: Add SM6375 TLMM driver (Alessandro Carminati) [2164821]
  - pinctrl: qcom-pmic-gpio: add support for PMP8074 (Alessandro Carminati) [2164821]
  - gpio: thunderx: Don't directly include asm-generic/msi.h (Alessandro Carminati) [2164821]
  - gpio: Remove dynamic allocation from populate_parent_alloc_arg() (Alessandro Carminati) [2164821]
  - pinctrl: qcom: sc7280: Fix compile bug (Alessandro Carminati) [2164821]
  - pinctrl: qcom: Add pinctrl driver for MSM8909 (Alessandro Carminati) [2164821]
  - pinctrl: qcom: sc7280: Fix compile bug (Alessandro Carminati) [2164821]
  - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed (Alessandro Carminati) [2164821]
  - pinctrl: qcom: sc7280: Add clock optional check for ADSP bypass targets (Alessandro Carminati) [2164821]
  - pinctrl: qcom: spmi-gpio: Add pm8226 compatibility (Alessandro Carminati) [2164821]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-278.el9]
changelog:
  - RDMA/irdma: Cap MSIX used to online CPUs + 1 (Kamal Heib) [2125810]
  - KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation (Eric Auger) [2166453]
  - ASoC: amd: ps: Add a module parameter to influence pdm_gain (Jaroslav Kysela) [2169760]
  - ASoC: amd: ps: Adjust the gain for PDM DMIC (Jaroslav Kysela) [2169760]
  - ASoC: amd: renoir: Add a module parameter to influence pdm_gain (Jaroslav Kysela) [2169760]
  - ASoC: amd: renoir: Adjust the gain for PDM DMIC (Jaroslav Kysela) [2169760]
  - ASoC: amd: yc: Add a module parameter to influence pdm_gain (Jaroslav Kysela) [2169760]
  - ASoC: amd: yc: Adjust the gain for PDM DMIC (Jaroslav Kysela) [2169760]
  - Revert "vdpa/mlx5: Add RX MAC VLAN filter support" (Cindy Lu) [2169174]
  - Revert "vdpa/mlx5: Fix wrong mac address deletion" (Cindy Lu) [2169174]
  - Revert "vdpa/mlx5: Use eth_broadcast_addr() to assign broadcast address" (Cindy Lu) [2169174]
  - Revert "vdpa/mlx5: fix error code for deleting vlan" (Cindy Lu) [2169174]
  - Revert "vdpa/mlx5: clean up indenting in handle_ctrl_vlan()" (Cindy Lu) [2169174]
  - Revert "vdpa/mlx5: Fix rule forwarding VLAN to TIR" (Cindy Lu) [2169174]
  - Revert "vdpa/mlx5: Return error on vlan ctrl commands if not supported" (Cindy Lu) [2169174]
  - kernel.spec: package unstripped kselftests/bpf/test_progs (Jan Stancek) [2161464]
  - kernel.spec: allow to package some binaries as unstripped (Jan Stancek) [2161464]
  - cpufreq: tegra194: Enable CPUFREQ thermal cooling (Joel Slebodnick) [2165104]
  - mm/kmemleak: fix UAF bug in kmemleak_scan() (Waiman Long) [2151065]
  - mm/kmemleak: simplify kmemleak_cond_resched() usage (Waiman Long) [2151065]
  - mm: percpu: use kmemleak_ignore_phys() instead of kmemleak_free() (Waiman Long) [2151065]
  - mm: kfence: apply kmemleak_ignore_phys on early allocated pool (Waiman Long) [2151065]
  - mm/kmemleak.c: fix a comment (Waiman Long) [2151065]
  - mm: kmemleak: check physical address when scan (Waiman Long) [2151065]
  - mm: kmemleak: add rbtree and store physical address for objects allocated with PA (Waiman Long) [2151065]
  - mm: kmemleak: add OBJECT_PHYS flag for objects allocated with physical address (Waiman Long) [2151065]
  - mm: kmemleak: remove kmemleak_not_leak_phys() and the min_count argument to kmemleak_alloc_phys() (Waiman Long) [2151065]
  - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Waiman Long) [2151065]
  - memblock tests: Add skeleton of the memblock simulator (Waiman Long) [2151065]
  - usb: mon: make mmapped memory read only (Desnes Nunes) [2157698] {CVE-2022-43750}
  - selftests/net: give more time to udpgro bg processes to complete startup (Adrien Thierry) [2143407]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-279.el9]
changelog:
  - redhat/configs: enable Octeon TX2 network drivers for RHEL (Michal Schmidt) [2040643]
  - octeontx2: mark the AF/PF/VF drivers as tech-preview (Michal Schmidt) [2040643]
  - octeontx2-af: Fix devlink unregister (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (Michal Schmidt) [2040643]
  - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix resource leakage in VF driver unbind (Michal Schmidt) [2040643]
  - octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix lmtst ID used in aura free (Michal Schmidt) [2040643]
  - net: ethernet: marvell: octeontx2: Fix uninitialized variable warning (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions (Michal Schmidt) [2040643]
  - octeontx2-af: Add FEC stats for RPM/RPM_USX block (Michal Schmidt) [2040643]
  - octeontx2-pf: ethtool: Implement get_fec_stats (Michal Schmidt) [2040643]
  - octeontx2-af: cn10kb: Add RPM_USX MAC support (Michal Schmidt) [2040643]
  - octeontx2-af: Support variable number of lmacs (Michal Schmidt) [2040643]
  - octeontx2-af: Simplify a size computation in rvu_npc_exact_init() (Michal Schmidt) [2040643]
  - octeontx2-af: Fix the size of memory allocated for the 'id_bmap' bitmap (Michal Schmidt) [2040643]
  - octeontx2-af: Use the bitmap API to allocate bitmaps (Michal Schmidt) [2040643]
  - octeontx2-af: Slightly simplify rvu_npc_exact_init() (Michal Schmidt) [2040643]
  - octeontx2-af: Fix a potentially spurious error message (Michal Schmidt) [2040643]
  - octeontx2-pf: Add support to filter packet based on IP fragment (Michal Schmidt) [2040643]
  - octeontx2-pf: Add additional checks while configuring ucast/bcast/mcast rules (Michal Schmidt) [2040643]
  - marvell: octeontx2: build error: unknown type name 'u64' (Michal Schmidt) [2040643]
  - octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix pfc_alloc_status array overflow (Michal Schmidt) [2040643]
  - octeontx2-af: Fix reference count issue in rvu_sdp_init() (Michal Schmidt) [2040643]
  - octeontx2-pf: Add check for devm_kcalloc (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: mcs: Fix copy and paste bug in mcs_bbe_intr_handler() (Michal Schmidt) [2040643]
  - octeontx2-af: debugsfs: fix pci device refcount leak (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix SQE threshold checking (Michal Schmidt) [2040643]
  - octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: mcs: Fix error return code in mcs_register_interrupts() (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: mcs: Add debugfs support (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: mcs: Handle MCS block interrupts (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: mcs: Support for stats collection (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: mcs: Install a default TCAM for normal traffic (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: mcs: Manage the MCS block hardware resources (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: mcs: Add mailboxes for port related operations (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: Introduce driver for macsec block. (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix unused variable build error (Michal Schmidt) [2040643]
  - octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly (Michal Schmidt) [2040643]
  - octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon (Michal Schmidt) [2040643]
  - octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon (Michal Schmidt) [2040643]
  - octeontx2-af: return correct ptp timestamp for CN10K silicon (Michal Schmidt) [2040643]
  - octeontx2-pf: Add egress PFC support (Michal Schmidt) [2040643]
  - octeontx2: ethernet: move from strlcpy with unused retval to strscpy (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration (Michal Schmidt) [2040643]
  - octeontx2-af: Fix key checking for source mac (Michal Schmidt) [2040643]
  - octeontx2-af: Fix mcam entry resource leak (Michal Schmidt) [2040643]
  - octeontx2-af: suppress external profile loading warning (Michal Schmidt) [2040643]
  - octeontx2-af: Apply tx nibble fixup always (Michal Schmidt) [2040643]
  - octeontx2-pf: Reduce minimum mtu size to 60 (Michal Schmidt) [2040643]
  - octeontx2-af: Set NIX link credits based on max LMAC (Michal Schmidt) [2040643]
  - octeontx2-af: Fixes static warnings (Michal Schmidt) [2040643]
  - octeontx2-af: Limit link bringup time at firmware (Michal Schmidt) [2040643]
  - octeontx2-af: returning uninitialized variable (Michal Schmidt) [2040643]
  - octeontx2-af: Remove duplicate include (Michal Schmidt) [2040643]
  - octeontx2-af: Skip CGX/RPM probe incase of zero lmac count (Michal Schmidt) [2040643]
  - octeontx2-af: Enable Exact match flag in kex profile (Michal Schmidt) [2040643]
  - octeontx2-pf: Add support for exact match table. (Michal Schmidt) [2040643]
  - octeontx2-af: Invoke exact match functions if supported (Michal Schmidt) [2040643]
  - octeontx2-af: Wrapper functions for MAC addr add/del/update/reset (Michal Schmidt) [2040643]
  - octeontx2: Modify mbox request and response structures (Michal Schmidt) [2040643]
  - octeontx2-af: Debugsfs support for exact match. (Michal Schmidt) [2040643]
  - octeontx2-af: Drop rules for NPC MCAM (Michal Schmidt) [2040643]
  - octeontx2-af: FLR handler for exact match table. (Michal Schmidt) [2040643]
  - octeontx2-af: devlink configuration support (Michal Schmidt) [2040643]
  - octeontx2-af: Exact match scan from kex profile (Michal Schmidt) [2040643]
  - octeontx2-af: Exact match support (Michal Schmidt) [2040643]
  - octeontx2-af: Use hashed field in MCAM key (Michal Schmidt) [2040643]
  - octeontx2-af: Don't reset previous pfc config (Michal Schmidt) [2040643]
  - octeontx2-af: fix operand size in bitwise operation (Michal Schmidt) [2040643]
  - marvell/octeontx2/af: fix repeated words in comments (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix UDP/TCP src and dst port tc filters (Michal Schmidt) [2040643]
  - octeontx2-pf: cn10k: Fix egress ratelimit configuration (Michal Schmidt) [2040643]
  - octeontx2-vf: Add support for adaptive interrupt coalescing (Michal Schmidt) [2040643]
  - octeontx2-pf: replace bitmap_weight with bitmap_empty where appropriate (Michal Schmidt) [2040643]
  - octeontx2-af: fix error code in is_valid_offset() (Michal Schmidt) [2040643]
  - octeontx2-pf: Add support for adaptive interrupt coalescing (Michal Schmidt) [2040643]
  - octeontx2-pf: Use memset_startat() helper in otx2_stop() (Michal Schmidt) [2040643]
  - octeontx2-pf: Remove unnecessary synchronize_irq() before free_irq() (Michal Schmidt) [2040643]
  - octeontx2-af: debugfs: fix error return of allocations (Michal Schmidt) [2040643]
  - octeontx2-af: initialize action variable (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: add workaround for ptp errata (Michal Schmidt) [2040643]
  - octeontx2-pf: cn10k: add support for new ptp timestamp format (Michal Schmidt) [2040643]
  - octeontx2-af: fix array bound error (Michal Schmidt) [2040643]
  - octeontx2-pf: Add TC feature for VFs (Michal Schmidt) [2040643]
  - octeontx2-pf: PFC config support with DCBx (Michal Schmidt) [2040643]
  - octeontx2-af: Flow control resource management (Michal Schmidt) [2040643]
  - octeontx2-af: Priority flow control configuration support (Michal Schmidt) [2040643]
  - octeontx2-af: Don't enable Pause frames by default (Michal Schmidt) [2040643]
  - octeontx2-pf: Change receive buffer size using ethtool (Michal Schmidt) [2040643]
  - octeontx2: Replace zero-length arrays with flexible-array members (Michal Schmidt) [2040643]
  - octeontx2-af: Add KPU changes to parse NGIO as separate layer (Michal Schmidt) [2040643]
  - octeontx2-pf: Forward error codes to VF (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: Do not enable RPM loopback for LPC interfaces (Michal Schmidt) [2040643]
  - octeontx2-af: Increase link credit restore polling timeout (Michal Schmidt) [2040643]
  - octeontx2-pf: cn10k: Ensure valid pointers are freed to aura (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: Use appropriate register for LMAC enable (Michal Schmidt) [2040643]
  - octeontx2-af: Retry until RVU block reset complete (Michal Schmidt) [2040643]
  - octeontx2-af: Fix LBK backpressure id count (Michal Schmidt) [2040643]
  - octeontx2-af: Do not fixup all VF action entries (Michal Schmidt) [2040643]
  - octeontx2-af: Fix interrupt name strings (Michal Schmidt) [2040643]
  - octeontx2-nicvf: Free VF PTP resources. (Michal Schmidt) [2040643]
  - octeontx2-af: Increment ptp refcount before use (Michal Schmidt) [2040643]
  - octeontx2-af: Fix a memleak bug in rvu_mbox_init() (Michal Schmidt) [2040643]
  - octeontx2-af: debugfs: don't corrupt user memory (Michal Schmidt) [2040643]
  - octeontx2-nicvf: fix ioctl callback (Michal Schmidt) [2040643]
  - octeontx2-pf: select CONFIG_NET_DEVLINK (Michal Schmidt) [2040643]
  - octeontx2-af: use swap() to make code cleaner (Michal Schmidt) [2040643]
  - octeontx2-af: Fix possible null pointer dereference. (Michal Schmidt) [2040643]
  - octeontx2-af: Display all enabled PF VF rsrc_alloc entries. (Michal Schmidt) [2040643]
  - octeontx2-af: Check whether ipolicers exists (Michal Schmidt) [2040643]
  - octeontx2-af: debugfs: Add channel and channel mask. (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: debugfs for dumping LMTST map table (Michal Schmidt) [2040643]
  - octeontx2-af: debugfs: Minor changes. (Michal Schmidt) [2040643]
  - octeontx2: net: convert users of bitmap_foo() to linkmode_foo() (Michal Schmidt) [2040643]
  - octeontx2-af: Increase number of reserved entries in KPU (Michal Schmidt) [2040643]
  - octeontx2-nic: fix mixed module build (Michal Schmidt) [2040643]
  - octeontx2-af: Add support to flush full CPT CTX cache (Michal Schmidt) [2040643]
  - octeontx2-af: Perform cpt lf teardown in non FLR path (Michal Schmidt) [2040643]
  - octeontx2-af: Enable CPT HW interrupts (Michal Schmidt) [2040643]
  - octeontx2-pf: Simplify the receive buffer size calculation (Michal Schmidt) [2040643]
  - ethernet: Remove redundant 'flush_workqueue()' calls (Michal Schmidt) [2040643]
  - octeontx2: use eth_hw_addr_set() for dev->addr_len cases (Michal Schmidt) [2040643]
  - octeontx2-af: Remove redundant initialization of variable pin (Michal Schmidt) [2040643]
  - octeontx2: bpf: Let bpf_warn_invalid_xdp_action() report more info (Michal Schmidt) [2040643]
  - octeontx2-pf: Add XDP support to netdev PF (Michal Schmidt) [2040643]
  - octeontx2-af: Adjust LA pointer for cpt parse header (Michal Schmidt) [2040643]
  - octeontx2-nicvf: Add PTP hardware clock support to NIX VF (Michal Schmidt) [2040643]
  - octeontx2-pf: Enable promisc/allmulti match MCAM entries. (Michal Schmidt) [2040643]
  - octeontx2-pf: Use hardware register for CQE count (Michal Schmidt) [2040643]
  - octeontx2-af: Add external ptp input clock (Michal Schmidt) [2040643]
  - octeontx2-af: Use ptp input clock info from firmware data (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: RPM hardware timestamp configuration (Michal Schmidt) [2040643]
  - octeontx2-af: Reset PTP config in FLR handler (Michal Schmidt) [2040643]
  - octeontx2-af: Optimize KPU1 processing for variable-length headers (Michal Schmidt) [2040643]
  - octeontx2-af: Limit KPU parsing for GTPU packets (Michal Schmidt) [2040643]
  - octeontx2-af: verify CQ context updates (Michal Schmidt) [2040643]
  - octeontx2-af: Remove redundant initialization of variable blkaddr (Michal Schmidt) [2040643]
  - octeontx2-af: Fix uninitialized variable val (Michal Schmidt) [2040643]
  - octeontx2-af: Hardware configuration for inline IPsec (Michal Schmidt) [2040643]
  - octeontx2-pf: CN10K: Hide RPM stats over ethtool (Michal Schmidt) [2040643]
  - octeontx2-af: Fix some memory leaks in the error handling path of 'cgx_lmac_init()' (Michal Schmidt) [2040643]
  - octeontx2-af: Add a 'rvu_free_bitmap()' function (Michal Schmidt) [2040643]
  - octeontx2-pf: cn10K: Reserve LMTST lines per core (Michal Schmidt) [2040643]
  - octeontx2-af: Add additional register check to rvu_poll_reg() (Michal Schmidt) [2040643]
  - octeontx2-af: Set proper errorcode for IPv4 checksum errors (Michal Schmidt) [2040643]
  - octeontx2-af: Fix static code analyzer reported issues (Michal Schmidt) [2040643]
  - octeontx2-af: Fix mailbox errors in nix_rss_flowkey_cfg (Michal Schmidt) [2040643]
  - octeontx2-af: Fix loop in free and unmap counter (Michal Schmidt) [2040643]
  - octeontx2-af: Use NDC TX for transmit packet data (Michal Schmidt) [2040643]
  - octeontx2-pf: Add vlan-etype to ntuple filters (Michal Schmidt) [2040643]
  - octeontx2-af: Fix inconsistent license text (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix inconsistent license text (Michal Schmidt) [2040643]
  - octeontx2-af: cn10K: support for sched lmtst and other features (Michal Schmidt) [2040643]
  - octeontx2-pf: cn10k: Fix error return code in otx2_set_flowkey_cfg() (Michal Schmidt) [2040643]
  - octeontx2-af: Add mbox to retrieve bandwidth profile free count (Michal Schmidt) [2040643]
  - octeontx2-af: Remove channel verification while installing MCAM rules (Michal Schmidt) [2040643]
  - octeontx2-af: Add PTP device id for CN10K and 95O silcons (Michal Schmidt) [2040643]
  - octeontx2-af: Add free rsrc count mbox msg (Michal Schmidt) [2040643]
  - octeontx2-af: Add SDP interface support (Michal Schmidt) [2040643]
  - octeontx2-af: nix and lbk in loop mode in 98xx (Michal Schmidt) [2040643]
  - octeontx2-pf: cleanup transmit link deriving logic (Michal Schmidt) [2040643]
  - octeontx2-af: Allow to configure flow tag LSB byte as RSS adder (Michal Schmidt) [2040643]
  - octeontx2-af: enable tx shaping feature for 96xx C0 (Michal Schmidt) [2040643]
  - octeontx2-af: Wait for TX link idle for credits change (Michal Schmidt) [2040643]
  - octeontx2-af: Change the order of queue work and interrupt disable (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: Set cache lines for NPA batch alloc (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: Use FLIT0 register instead of FLIT1 (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix algorithm index in MCAM rules with RSS action (Michal Schmidt) [2040643]
  - octeontx2-pf: Don't install VLAN offload rule if netdev is down (Michal Schmidt) [2040643]
  - octeontx2-af: Check capability flag while freeing ipolicer memory (Michal Schmidt) [2040643]
  - octeontx2-af: Use DMA_ATTR_FORCE_CONTIGUOUS attribute in DMA alloc (Michal Schmidt) [2040643]
  - octeontx2-pf: send correct vlan priority mask to npc_install_flow_req (Michal Schmidt) [2040643]
  - octeontx2-pf: Don't mask out supported link modes (Michal Schmidt) [2040643]
  - octeontx2-af: Handle return value in block reset. (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: Fix SDP base channel number (Michal Schmidt) [2040643]
  - octeontx2-pf: Fix NIX1_RX interface backpressure (Michal Schmidt) [2040643]
  - octeontx2-pf: Add check for non zero mcam flows (Michal Schmidt) [2040643]
  - octeontx2-af: remove redudant second error check on variable err (Michal Schmidt) [2040643]
  - octeontx2-pf: Allow VLAN priority also in ntuple filters (Michal Schmidt) [2040643]
  - octeontx2-af: configure npc for cn10k to allow packets from cpt (Michal Schmidt) [2040643]
  - octeontx2-af: cn10K: Get NPC counters value (Michal Schmidt) [2040643]
  - octeontx2-af: Allocate low priority entries for PF (Michal Schmidt) [2040643]
  - octeontx2: Move devlink registration to be last devlink command (part 2) (Michal Schmidt) [2040643]
  - octeontx2: otx2_devlink: Make devlink_register to be void (Michal Schmidt) [2040643]
  - octeontx2-pf: devlink params support to set mcam entry count (Michal Schmidt) [2040643]
  - octeontx2-pf: Unify flow management variables (Michal Schmidt) [2040643]
  - octeontx2-pf: Sort the allocated MCAM entry indices (Michal Schmidt) [2040643]
  - octeontx2-pf: Ntuple filters support for VF netdev (Michal Schmidt) [2040643]
  - octeontx2-pf: Enable NETIF_F_RXALL support for VF driver (Michal Schmidt) [2040643]
  - octeontx2-af: Add debug messages for failures (Michal Schmidt) [2040643]
  - octeontx2-af: add proper return codes for AF mailbox handlers (Michal Schmidt) [2040643]
  - octeontx2-af: Modify install flow error codes (Michal Schmidt) [2040643]
  - octeontx2-af: Fix spelling mistake "Makesure" -> "Make sure" (Michal Schmidt) [2040643]
  - octeontx2-pf: cn10k: Config DWRR weight based on MTU (Michal Schmidt) [2040643]
  - octeontx2: Move devlink registration to be last devlink command (part 1) (Michal Schmidt) [2040643]
  - octeontx2-af: cn10k: DWRR MTU configuration (Michal Schmidt) [2040643]
  - octeontx2-af: Enhance mailbox trace entry (Michal Schmidt) [2040643]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-280.el9]
changelog:
  - redhat/configs: enable neoverse and cortex errata (Jeremy Linton) [2055405]
  - coresight: syscfg: Update load and unload operations (Jeremy Linton) [2055405]
  - coresight: configfs: Fix unload of configurations on module exit (Jeremy Linton) [2055405]
  - coresight: syscfg: Fix memleak on registration failure in cscfg_create_device (Jeremy Linton) [2055405]
  - coresight: core: Fix typo in a comment (Jeremy Linton) [2055405]
  - Documentation: coresight: Update coresight configuration docs (Jeremy Linton) [2055405]
  - coresight: configfs: Allow configfs to activate configuration (Jeremy Linton) [2055405]
  - coresight: syscfg: Example CoreSight configuration loadable module (Jeremy Linton) [2055405]
  - coresight: syscfg: Update load API for config loadable modules (Jeremy Linton) [2055405]
  - coresight: configuration: Update API to permit dynamic load/unload (Jeremy Linton) [2055405]
  - coresight: configuration: Update API to introduce load owner concept (Jeremy Linton) [2055405]
  - Documentation: coresight: Fix documentation issue (Jeremy Linton) [2055405]
  - coresight: Use devm_bitmap_zalloc when applicable (Jeremy Linton) [2055405]
  - coresight: trbe: Work around write to out of range (Jeremy Linton) [2055405]
  - coresight: trbe: Make sure we have enough space (Jeremy Linton) [2055405]
  - coresight: trbe: Add a helper to determine the minimum buffer size (Jeremy Linton) [2055405]
  - coresight: trbe: Workaround TRBE errata overwrite in FILL mode (Jeremy Linton) [2055405]
  - coresight: trbe: Add infrastructure for Errata handling (Jeremy Linton) [2055405]
  - coresight: trbe: Allow driver to choose a different alignment (Jeremy Linton) [2055405]
  - coresight: trbe: Decouple buffer base from the hardware base (Jeremy Linton) [2055405]
  - coresight: trbe: Add a helper to pad a given buffer area (Jeremy Linton) [2055405]
  - coresight: trbe: Add a helper to calculate the trace generated (Jeremy Linton) [2055405]
  - coresight: trbe: Defer the probe on offline CPUs (Jeremy Linton) [2055405]
  - coresight: trbe: Fix incorrect access of the sink specific data (Jeremy Linton) [2055405]
  - coresight: etm4x: Add ETM PID for Kryo-5XX (Jeremy Linton) [2055405]
  - coresight: trbe: Prohibit trace before disabling TRBE (Jeremy Linton) [2055405]
  - coresight: trbe: End the AUX handle on truncation (Jeremy Linton) [2055405]
  - coresight: trbe: Do not truncate buffer on IRQ (Jeremy Linton) [2055405]
  - coresight: trbe: Fix handling of spurious interrupts (Jeremy Linton) [2055405]
  - coresight: trbe: irq handler: Do not disable TRBE if no action is needed (Jeremy Linton) [2055405]
  - coresight: trbe: Unify the enabling sequence (Jeremy Linton) [2055405]
  - coresight: trbe: Drop duplicate TRUNCATE flags (Jeremy Linton) [2055405]
  - coresight: trbe: Ensure the format flag is always set (Jeremy Linton) [2055405]
  - coresight: etm-pmu: Ensure the AUX handle is valid (Jeremy Linton) [2055405]
  - coresight: etm4x: Use Trace Filtering controls dynamically (Jeremy Linton) [2055405]
  - coresight: etm4x: Save restore TRFCR_EL1 (Jeremy Linton) [2055405]
  - coresight: Don't immediately close events that are run on invalid CPU/sink combos (Jeremy Linton) [2055405]
  - coresight: tmc-etr: Speed up for bounce buffer in flat mode (Jeremy Linton) [2055405]
  - coresight: Update comments for removing cs_etm_find_snapshot() (Jeremy Linton) [2055405]
  - coresight: tmc-etr: Use perf_output_handle::head for AUX ring buffer (Jeremy Linton) [2055405]
  - coresight: tmc-etf: Add comment for store ordering (Jeremy Linton) [2055405]
  - coresight: tmc-etr: Add barrier after updating AUX ring buffer (Jeremy Linton) [2055405]
  - coresight: tmc: Configure AXI write burst size (Jeremy Linton) [2055405]
  - dt-bindings: coresight: Add burst size for TMC (Jeremy Linton) [2055405]
  - coresight: cpu-debug: Control default behavior via Kconfig (Jeremy Linton) [2055405]
  - coresight: cti: Correct the parameter for pm_runtime_put (Jeremy Linton) [2055405]
  - coresight: syscfg: Fix compiler warning (Jeremy Linton) [2055405]
  - Documentation: coresight: Add documentation for CoreSight config (Jeremy Linton) [2055405]
  - coresight: syscfg: Add initial configfs support (Jeremy Linton) [2055405]
  - coresight: config: Add preloaded configurations (Jeremy Linton) [2055405]
  - coresight: etm4x: Add complex configuration handlers to etmv4 (Jeremy Linton) [2055405]
  - coresight: etm-perf: Update to activate selected configuration (Jeremy Linton) [2055405]
  - coresight: syscfg: Add API to activate and enable configurations (Jeremy Linton) [2055405]
  - coresight: etm-perf: Update to handle configuration selection (Jeremy Linton) [2055405]
  - coresight: config: Add configuration and feature generic functions (Jeremy Linton) [2055405]
  - coresight: syscfg: Add registration and feature loading for cs devices (Jeremy Linton) [2055405]
  - coresight: syscfg: Initial coresight system configuration (Jeremy Linton) [2055405]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-281.el9]
changelog:
  - virtio_console: break out of buf poll on remove (Michael S. Tsirkin) [1786239]
  - cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP mode (David Arcari) [2170574]
  - net: mana: Fix accessing freed irq affinity_hint (Emanuele Giuseppe Esposito) [2168970]
  - net: mana: Assign interrupts to CPUs based on NUMA nodes (Emanuele Giuseppe Esposito) [2168970]
  - be2net: Fix buffer overflow in be_get_module_eeprom (Izabela Bakollari) [2167725]
  - nfsd: don't destroy global nfs4_file table in per-net shutdown (Jeffrey Layton) [2169017]
  - x86/module: Fix the paravirt vs alternative order (Waiman Long) [2170197]
  - dt-bindings: dmaengine: Add compatible for Tegra234 (d.marlin) [2129115]
  - dt-bindings: dmaengine: Add doc for tegra gpcdma (d.marlin) [2129115]
  - icmp: Add counters for rate limits (Jamie Bainbridge) [2155801]
  - Revert "ethernet: Remove vf rate limit check for drivers" (Ken Cox) [2168599]
  - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (Hangbin Liu) [RHEL-221]
  - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (Hangbin Liu) [RHEL-221]
  - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (Hangbin Liu) [RHEL-221]
  - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (Hangbin Liu) [RHEL-221]
  - igb: Initialize mailbox message for VF reset (Corinna Vinschen) [2104469]
  - igb: Allocate MSI-X vector when testing (Corinna Vinschen) [2104469]
  - igb: Proactively round up to kmalloc bucket size (Corinna Vinschen) [2104469]
  - igb: Do not free q_vector unless new one was allocated (Corinna Vinschen) [2104469]
  - ptp: introduce helpers to adjust by scaled parts per million (Corinna Vinschen) [2104469]
  - net: Remove the obsolte u64_stats_fetch_*_irq() users (drivers). (Corinna Vinschen) [2104469]
  - net: ethernet: move from strlcpy with unused retval to strscpy (Corinna Vinschen) [2104469]
  - igb: convert .adjfreq to .adjfine (Corinna Vinschen) [2104469]
  - igb: add xdp frags support to ndo_xdp_xmit (Corinna Vinschen) [2104469]
  - dt-bindings: serial: Document Tegra234 TCU (d.marlin) [2122413]
  - dt-bindings: serial: 8250: Document Tegra234 UART (d.marlin) [2122413]
  - dt-bindings: serial: tegra-tcu: Convert to json-schema (d.marlin) [2122413]
  - ipv6: Remove extra counter pull before gc (Hangbin Liu) [2161118]
  - ipv6: remove max_size check inline with ipv4 (Hangbin Liu) [2161118]
  - redhat/configs: enable coresight driver for nvidia/grace (Mark Salter) [2128086]
  - perf: arm_cspmu: Fix module cyclic dependency (Mark Salter) [2128086]
  - perf: arm_cspmu: Fix build failure on x86_64 (Mark Salter) [2128086]
  - perf: arm_cspmu: Fix modular builds due to missing MODULE_LICENSE()s (Mark Salter) [2128086]
  - perf: arm_cspmu: Add support for NVIDIA SCF and MCF attribute (Mark Salter) [2128086]
  - perf: arm_cspmu: Add support for ARM CoreSight PMU driver (Mark Salter) [2128086]
  - redhat: add support for Jira issues in changelog (Herton R. Krzesinski) [RHEL-186]
  - ice: fix handling of burst Tx timestamps (Petr Oros) [2161201]
  - ice: synchronize the misc IRQ when tearing down Tx tracker (Petr Oros) [2161204]
  - ice: Add low latency Tx timestamp read (Petr Oros) [2161204]
  - ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2161204]
  - ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2161204]
  - ice: track and warn when PHC update is late (Petr Oros) [2161204]
  - ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2161204]
  - net-sysfs: add check for netdevice being present to speed_show (Beniamino Galvani) [2148349]
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Ricardo Robaina) [2152931] {CVE-2022-3564}
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152581] {CVE-2022-4378}
  - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152581] {CVE-2022-4378}
  - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() (Izabela Bakollari) [2118313] {CVE-2022-33743}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-282.el9]
changelog:
  - net/mlx5e: TC, Restore pkt rate policing support (Amir Tzin) [2028809]
  - net/mlx5e: TC, ignore match level for post meter rules (Amir Tzin) [2028809]
  - net/mlx5e: TC, add support for meter mtu offload (Amir Tzin) [2028809]
  - net/mlx5e: meter, add mtu post meter tables (Amir Tzin) [2028809]
  - net/mlx5e: meter, refactor to allow multiple post meter tables (Amir Tzin) [2028809]
  - net/mlx5: DR, Add support for range match action (Amir Tzin) [2028809]
  - net/mlx5: DR, Add function that tells if STE miss addr has been initialized (Amir Tzin) [2028809]
  - net/mlx5: DR, Some refactoring of miss address handling (Amir Tzin) [2028809]
  - net/mlx5: DR, Manage definers with refcounts (Amir Tzin) [2028809]
  - net/mlx5: DR, Handle FT action in a separate function (Amir Tzin) [2028809]
  - net/mlx5: DR, Rework is_fw_table function (Amir Tzin) [2028809]
  - net/mlx5: DR, Add functions to create/destroy MATCH_DEFINER general object (Amir Tzin) [2028809]
  - net/mlx5: fs, add match on ranges API (Amir Tzin) [2028809]
  - net/mlx5: mlx5_ifc updates for MATCH_DEFINER general object (Amir Tzin) [2028809]
  - net/mlx5e: TC, allow meter jump control action (Amir Tzin) [2028809]
  - net/mlx5e: TC, init post meter rules with branching attributes (Amir Tzin) [2028809]
  - net/mlx5e: TC, rename post_meter actions (Amir Tzin) [2028809]
  - net/mlx5e: TC, initialize branching action with target attr (Amir Tzin) [2028809]
  - net/mlx5e: TC, initialize branch flow attributes (Amir Tzin) [2028809]
  - net/mlx5e: TC, set control params for branching actions (Amir Tzin) [2028809]
  - net/mlx5e: TC, validate action list per attribute (Amir Tzin) [2028809]
  - net/mlx5e: TC, add terminating actions (Amir Tzin) [2028809]
  - net/mlx5e: TC, reuse flow attribute post parser processing (Amir Tzin) [2028809]
  - net/mlx5: fs, assert null dest pointer when dest_num is 0 (Amir Tzin) [2028809]
  - net/mlx5e: E-Switch, handle flow attribute with no destinations (Amir Tzin) [2028809]
  - net/mlx5: E-Switch, Allow offloading fwd dest flow table with vport (Amir Tzin) [2028809]
  - net/mlx5e: Replace zero-length arrays with DECLARE_FLEX_ARRAY() helper (Amir Tzin) [2028809]
  - rtc: efi: Enable SET/GET WAKEUP services as optional (Donald Dutile) [2166449]
  - tee: optee: do not check memref size on return from Secure World (Chris von Recklinghausen) [2166659]
  - tee: optee: Fix incorrect page free bug (Chris von Recklinghausen) [2166659]
  - optee: smc_abi.c: add missing #include <linux/mm.h> (Chris von Recklinghausen) [2166659]
  - optee: isolate smc abi (Chris von Recklinghausen) [2166659]
  - optee: refactor driver with internal callbacks (Chris von Recklinghausen) [2166659]
  - optee: simplify optee_release() (Chris von Recklinghausen) [2166659]
  - tee: optee: Fix missing devices unregister during optee_remove (Chris von Recklinghausen) [2166659]
  - tee/optee/shm_pool: fix application of sizeof to pointer (Chris von Recklinghausen) [2166659]
  - lib/test_scanf: Handle n_bits == 0 in random tests (Chris von Recklinghausen) [2166659]
  - sctp: sysctl: make extra pointers netns aware (Xin Long) [2160516]
  - sctp: clear out_curr if all frag chunks of current msg are pruned (Xin Long) [2160516]
  - sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent (Xin Long) [2160516]
  - inet6: Clean up failure path in do_ipv6_setsockopt(). (Xin Long) [2160516]
  - inet6: Remove inet6_destroy_sock(). (Xin Long) [2160516]
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Xin Long) [2160516]
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Xin Long) [2160516]
  - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). (Xin Long) [2160516]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-283.el9]
changelog:
  - redhat: fix duplicate jira issues in the resolves line (Herton R. Krzesinski)
  - redhat/kernel.spec.template: Parallelize compression (Herton R. Krzesinski)
  - Revert "block: freeze the queue earlier in del_gendisk" (Ming Lei) [2155901]
  - redhat: configs: Enable UCSI_CCG support (David Marlin) [2122414]
  - i2c: nvidia-gpu: Remove ccgx,firmware-build property (David Marlin) [2122414]
  - i2c: nvidia-gpu: Add ACPI property to align with device-tree (David Marlin) [2122414]
  - usb: typec: ucsi_ccg: Add OF support (David Marlin) [2122414]
  - gpio: tegra186: add Tegra234 PMC compatible in GPIO driver (David Marlin) [2122414]
  - usb: gadget: tegra-xudc: Add Tegra234 support (David Marlin) [2122414]
  - xhci: tegra: USB2 pad power controls (David Marlin) [2122414]
  - xhci: Add hub_control to xhci_driver_overrides (David Marlin) [2122414]
  - xhci: hub: export symbol on xhci_hub_control (David Marlin) [2122414]
  - usb: host: xhci-tegra: Add Tegra234 XHCI support (David Marlin) [2122414]
  - phy: tegra: xusb: Support USB role default mode (David Marlin) [2122414]
  - phy: tegra: xusb: Add Tegra234 support (David Marlin) [2122414]
  - phy: tegra: xusb: Disable trk clk when not in use (David Marlin) [2122414]
  - phy: tegra: xusb: Remove usb3 supply (David Marlin) [2122414]
  - phy: tegra: xusb: Fix crash during pad power on/down (David Marlin) [2122414]
  - usb: typec: ucsi_ccg: Disable UCSI ALT support on Tegra (David Marlin) [2122414]
  - usb: typec: ucsi: Don't warn on probe deferral (David Marlin) [2122414]
  - phy: tegra: xusb: Enable usb role switch attribute (David Marlin) [2122414]
  - usb: gadget: tegra: Reduce pad power (David Marlin) [2122414]
  - phy: tegra: xusb: add utmi pad power on/down ops (David Marlin) [2122414]
  - redhat/configs: Enable CONFIG_PCIE_PTM (Corinna Vinschen) [2100606]
  - net: stmmac: Fix queue statistics reading (Corinna Vinschen) [2100606]
  - stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz (Corinna Vinschen) [2100606]
  - net: stmmac: Disable automatic FCS/Pad stripping (Corinna Vinschen) [2100606]
  - net: ethernet: move from strlcpy with unused retval to strscpy (Corinna Vinschen) [2100606]
  - stmmac: intel: remove unused 'has_crossts' flag (Corinna Vinschen) [2100606]
  - net: phylink: Convert to mdiobus_c45_{read|write} (Corinna Vinschen) [2100606]
  - net: phy: marvell: add sleep time after enabling the loopback bit (Corinna Vinschen) [2100606]
  - net: phy: marvell: add Marvell specific PHY loopback (Corinna Vinschen) [2100606]
  - net: phy: dp83867: retrigger SGMII AN when link change (Corinna Vinschen) [2100606]
  - net: phy: marvell: Add WAKE_PHY support to WOL event (Corinna Vinschen) [2100606]
  - net: phy: marvell10g: enable WoL for 88X3310 and 88E2110 (Corinna Vinschen) [2100606]
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Florian Westphal) [2161725] {CVE-2023-0179}


author: Natalya Naumova <natalya.naumova@oracle.com> - [5.14.0-283.el9.OL9]
changelog:
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
  - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]


author: Tao Liu <ltao@redhat.com> - 2.0.25-4
changelog:
  - Rebase makedumpfile to 1.7.2
  - Include the memory overhead cost of cryptsetup when estimating the memory requirement for LUKS-encrypted target
  - Choosing the most memory-consuming key slot when estimating the memory requirement for LUKS-encrypted target
  - Skip reading /etc/defaut/grub for s390x
  - Only try to reset crashkernel for osbuild during package install
  - Prefix reset-crashkernel-{for-installed_kernel,after-update} with underscore
  - use /run/ostree-booted to tell if scriptlet is running on OSTree system


author: Tao Liu <ltao@redhat.com> - 2.0.25-5
changelog:
  - Don't check fs modified when dump target is lvm2 thinp
  - Add dependency of dracut lvmthinpool-monitor module
  - lvm.conf should be check modified if lvm2 thinp enabled
  - Add lvm2 thin provision dump target checker
  - Fix the sync issue for dump_fs


author: Tao Liu <ltao@redhat.com> - 2.0.25-6
changelog:
  - Simplify setup_znet by copying connection profile to initrd
  - Wait for the network to be truly ready before dumping vmcore
  - Address the cases where a NIC has a different name in kdump kernel
  - Reduce kdump memory consumption by only installing needed NIC drivers
  - Reduce kdump memory consumption by not letting NetworkManager manage unneeded network interfaces
  - Set up kdump network by directly copying NM connection profile to initrd
  - Stop dracut 35network-manager from running nm-initrd-generator
  - Apply the timeout configuration of nm-initrd-generator
  - Determine whether IPv4 or IPv6 is needed
  - Add functions to copy NetworkManage connection profiles to the initramfs
  - Fix error for vlan over team network interface


author: Tao Liu <ltao@redhat.com> - 2.0.25-8
changelog:
  - kexec-tools: ppc64: remove rma_top limit
  - kdumpctl: Optimize _find_kernel_path_by_release regex string
  - kdump.conf: use a simple generator script to maintain


author: Tao Liu <ltao@redhat.com> - 2.0.25-9
changelog:
  - Add virtiofs to kdump supported-kdump-targets.txt
  - dracut-module-setup.sh: stop overwriting dracut's trap handler


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-10
changelog:
  - Update supported-kdump-targets.txt
  - dracut-module-setup.sh: skip installing driver for the loopback interface
  - Don't try to update crashkernel when bootloader is not installed
  - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking
  - fadump: use 'zstd' as the default compression method
  - fadump: fix default initrd backup and restore logic
  - fadump: add a kernel install hook to clean up fadump initramfs
  - fadump: avoid status check while starting in fadump mode
  - spec: only install mkfadumprd for ppc
  - fadump: preserve file modification time to help with hardlinking
  - fadump: do not use squash to reduce image size


author: Tao Liu <ltao@redhat.com> - 2.0.25-12
changelog:
  - Reset crashkernel to default value if newly installed kernel has crashkernel=auto
  - Use the correct command to get architecture


author: EL Errata <el-errata_ww@oracle.com> - 2.0.25-12.0.1
changelog:
  - Update UEK aarch64 reserved sizes for UEK7 kernels [Orabug: 34663083]
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.67.0-1
changelog:
  - Fix handling transaction id in resolveTransactionItemReason (RhBug:2010259,2053014)
  - Remove deprecated assertions (RhBug:2027383)
  - Skip rich deps for autodetection of unmet dependencies (RhBug:2033130, 2048394)
  - Increase required rpm version since we use `rpmdbCookie()`
  - Add 'loongarch' support
  - Use dnf solv userdata to check versions and checksum (RhBug:2027445)
  - context: Substitute all repository config options (RhBug:2076853)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: EL Errata <el-errata_ww@oracle.com> - 0.69.0-2.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Andreas Schneider <asn@redhat.com> - 4.17.2-102
changelog:
  - Fix CVE-2022-1615 GnuTLS gnutls_rnd() can fail and give predictable random values
  - resolves: rhbz#2126175


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-103
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2131993


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.4-100
changelog:
  - related: rhbz#2131993 - Update to version 4.17.4
  - resolves: rhbz#2154373 - Fix CVE-2022-38023
  - resolves: rhbz#2143196 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2114884 - Fix id command to return new groups after successful user login
  - resolves: rhbz#2154885 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-102
changelog:
  - resolves: rhbz#2169980 - Fix winbind memory leak
  - resolves: rhbz#2156056 - Fix Samba shares not accessible issue


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: EL Errata <el-errata_ww@oracle.com> - 2.15.2-6.0.1
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla
  - Remove options interacting with Bugzilla [Orabug: 32895080]


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Ashish Samant <ashish.samant@oracle.com> - 1.8.6-11
changelog:
  - tunefs.ocfs2: read journal superblock even for online operations (Ashish
    Samant)  [Orabug: 28804934]


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-26
changelog:
  - Fix one-byte overflow in SSH banner processing
    Resolves: rhbz#2138345
  - Fix double free() in error path
    Resolves: rhbz#2138347


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-28
changelog:
  - Do not try to use SHA1 for host key ownership proof when we don't support it server-side
    Resolves: rhbz#2088750


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Related: rhbz#2102542
  - Add FIPS indicator for HKDF
    Related: rhbz#2114772


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-43
changelog:
  - CVE-2022-3602: X.509 Email Address Buffer Overflow
  - CVE-2022-3786: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-44
changelog:
  - SHAKE-128/256 are not allowed with RSA in FIPS mode
    Resolves: rhbz#2144010
  - Avoid memory leaks in TLS
    Resolves: rhbz#2144008
  - FIPS RSA CRT tests must use correct parameters
    Resolves: rhbz#2144006
  - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC
    Resolves: rhbz#2144017
  - Remove support for X9.31 signature padding in FIPS mode
    Resolves: rhbz#2144015
  - Add explicit indicator for SP 800-108 KDFs with short key lengths
    Resolves: rhbz#2144019
  - Add explicit indicator for HMAC with short key lengths
    Resolves: rhbz#2144000
  - Set minimum password length for PBKDF2 in FIPS mode
    Resolves: rhbz#2144003
  - Add explicit indicator for PSS salt length in FIPS mode
    Resolves: rhbz#2144012
  - Clamp default PSS salt length to digest size for FIPS 186-4 compliance
    Related: rhbz#2144012
  - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode
    Resolves: rhbz#2145170


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-2
changelog:
  - Various provider-related imrovements necessary for PKCS#11 provider correct operations
    Resolves: rhbz#2142517
  - We should export 2 versions of OPENSSL_str[n]casecmp to be compatible with upstream
    Resolves: rhbz#2133809
  - Removed recommended package for openssl-libs
    Resolves: rhbz#2093804
  - Adjusting include for the FIPS_mode macro
    Resolves: rhbz#2083879
  - Backport of ppc64le Montgomery multiply enhancement
    Resolves: rhbz#2130708
  - Fix explicit indicator for PSS salt length in FIPS mode when used with
    negative magic values
    Resolves: rhbz#2142087
  - Update change to default PSS salt length with patch state from upstream 
    Related: rhbz#2142087


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-5
changelog:
  - Fixed X.509 Name Constraints Read Buffer Overflow
    Resolves: CVE-2022-4203
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed Invalid pointer dereference in d2i_PKCS7 functions
    Resolves: CVE-2023-0216
  - Fixed NULL dereference validating DSA public key
    Resolves: CVE-2023-0217
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286
  - Fixed NULL dereference during PKCS7 data verification
    Resolves: CVE-2023-0401


author: Ray Strode <rstrode@redhat.com> - 90.2-1
changelog:
  - Strip RHEL 8 branding and use graytones until until RHEL 9 branding is available
    Resolves: #1975387


author: Darren Archibald <darren.archibald@oracle.com> - 9-3.0.1
changelog:
  - Add redhat-indexhtml to Obsoletes and Provides [Orabug: 34124784]
  - Replaced upstream references [Orabug: 34032132]


author: Keshav Sharma <keshav.sharma@oracle.com> 1.0-8
changelog:
  - Added Oracle Linux 9.1 Repositories [ OraBug: 34662258 ]
  - Removed Oracle Linux 9 developer preview repositories [ OraBug: 34662258 ]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 1.0-9
changelog:
  - Update post scripts to support new self-service DNS hostnames [JIRA: OLDIS-22726]
  - Modified repositories for developer preview [Orabug: 35260780]


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 10.40-2.0.1
changelog:
  - Add install-time dependency on fixed selinux-policy to prevent
    "Regex version mismatch" log entry [Orabug: 34742224]


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-2
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-7
changelog:
  - Make the python-setuptools-wheel subpackage versioned (python3-setuptools-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.10-3
changelog:
  - Drop redundant BuildRequires for nose
  - Instead of the mock backport, use unittest.mock from the standard library


author: Karolina Surma <ksurma@redhat.com> - 1.26.5-1
changelog:
  - Update to 1.26.5
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1972639


author: Tomas Orsava <torsava@redhat.com> - 3.9.9-2
changelog:
  - Read pre-packaged Python wheels from a newly versioned directory
    /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.16-1
changelog:
  - Update to 3.9.16
  - Security fixes for CVE-2022-42919 and CVE-2022-45061
  Resolves: rhbz#2138705, rhbz#2144072


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-20
changelog:
  - Add bcond macros (#2129060)
  - Fix db queries with carets (#2129468)
  - Remove spurious Python rpm module (#2135731)
  - Handle SELinux log messages (#2123719)
  - Add --nocompression to rpm2archive (#2150804)


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Darren Archibald <darren.archibald@oracle.com> - 9.2-0.11.0.1
changelog:
  - Removed Secure Boot Signing certs
  - Set the epoch to prevent upgrade conflict with OL7 version [Orabug: 20681742]
  - Remove Provides: system-release and base-module platform as this is provided by oraclelinux-release
  - Remove content provided by oraclelinux-release package


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.33-1
changelog:
  - fix rhnsd triggered upgrade of rhnsd on systemd systems
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "1260527 RHEL7 rhnsd reload doesn't work"


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ 6dcc9ec2 (bz 2124605)
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.47-1
changelog:
  - Add domain_unix_read_all_semaphores() interface
  Resolves: rhbz#2123358
  - Allow chronyd talk with unconfined user over unix domain dgram socket
  Resolves: rhbz#2141255
  - Allow unbound connectto unix_stream_socket
  Resolves: rhbz#2141236
  - added policy for systemd-socket-proxyd
  Resolves: rhbz#2141606
  - Allow samba-dcerpcd use NSCD services over a unix stream socket
  Resolves: rhbz#2121729
  - Allow insights-client unix_read all domain semaphores
  Resolves: rhbz#2123358
  - Allow insights-client manage generic locks
  Resolves: rhbz#2123358
  - Allow insights-client create gluster log dir with a transition
  Resolves: rhbz#2123358
  - Allow insights-client domain transition on semanage execution
  Resolves: rhbz#2123358
  - Disable rpm verification on interface_info
  Resolves: rhbz#2134515


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.2-1
changelog:
  - Allow insights client communicate with cupsd, mysqld, openvswitch, redis
  Resolves: rhbz#2124549
  - Allow insights client read raw memory devices
  Resolves: rhbz#2124549
  - Allow networkmanager_dispatcher_plugin work with nscd
  Resolves: rhbz#2149317
  - Allow ipsec_t only read tpm devices
  Resolves: rhbz#2147380
  - Watch_sb all file type directories.
  Resolves: rhbz#2139363
  - Add watch and watch_sb dosfs interface
  Resolves: rhbz#2139363
  - Revert "define lockdown class and access"
  Resolves: rhbz#2145266
  - Allow postfix/smtpd read kerberos key table
  Resolves: rhbz#2145266
  - Remove the lockdown class from the policy
  Resolves: rhbz#2145266
  - Remove label for /usr/sbin/bgpd
  Resolves: rhbz#2145266
  - Revert "refpolicy: drop unused socket security classes"
  Resolves: rhbz#2145266


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.3-1
changelog:
  - Allow stalld to read /sys/kernel/security/lockdown file
  Resolves: rhbz#2140673
  - Allow syslog the setpcap capability
  Resolves: rhbz#2151841
  - Allow pulseaudio to write to session_dbusd tmp socket files
  Resolves: rhbz#2132942
  - Allow keepalived to set resource limits
  Resolves: rhbz#2151212
  - Add policy for mptcpd
  Resolves: bz#1972222
  - Add policy for rshim
  Resolves: rhbz#2080439
  - Allow insights-client dbus chat with abrt
  Resolves: rhbz#2152166
  - Allow insights-client work with pcp and manage user config files
  Resolves: rhbz#2152150
  - Allow insights-client run lpr and allow the proper role
  Resolves: rhbz#2152150
  - Allow insights-client tcp connect to various ports
  Resolves: rhbz#2152150
  - Allow insights-client dbus chat with various services
  Resolves: rhbz#2152150
  - Allow journalctl relabel with var_log_t and syslogd_var_run_t files
  Resolves: rhbz#2152823


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.4-1
changelog:
  - Add lpr_roles  to system_r roles
  Resolves: rhbz#2152150
  - Allow insights client work with gluster and pcp
  Resolves: rhbz#2152150
  - Add interfaces in domain, files, and unconfined modules
  Resolves: rhbz#2152150
  - Label fwupdoffline and fwupd-detect-cet with fwupd_exec_t
  Resolves: rhbz#2152150
  - Add insights additional capabilities
  Resolves: rhbz#2152150
  - Revert "Allow insights-client run lpr and allow the proper role"
  Resolves: rhbz#2152150
  - Allow prosody manage its runtime socket files
  Resolves: rhbz#2157891
  - Allow syslogd read network sysctls
  Resolves: rhbz#2156068
  - Allow NetworkManager and wpa_supplicant the bpf capability
  Resolves: rhbz#2137085
  - Allow sysadm_t read/write ipmi devices
  Resolves: rhbz#2158419
  - Allow wireguard to create udp sockets and read net_conf
  Resolves: rhbz#2149452
  - Allow systemd-rfkill the bpf capability
  Resolves: rhbz#2149390
  - Allow load_policy_t write to unallocated ttys
  Resolves: rhbz#2145181
  - Allow winbind-rpcd manage samba_share_t files and dirs
  Resolves: rhbz#2150680


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.5-1
changelog:
  - Reuse tmpfs_t also for the ramfs filesystem
  Resolves: rhbz#2160391
  - Allow systemd-resolved watch tmpfs directories
  Resolves: rhbz#2160391
  - Allow hostname_t to read network sysctls.
  Resolves: rhbz#2161958
  - Allow ModemManager all permissions for netlink route socket
  Resolves: rhbz#2149560
  - Allow unconfined user filetransition for sudo log files
  Resolves: rhbz#2160388
  - Allow sudodomain use sudo.log as a logfile
  Resolves: rhbz#2160388
  - Allow nm-cloud-setup dispatcher plugin restart nm services
  Resolves: rhbz#2154414
  - Allow wg to send msg to kernel, write to syslog and dbus connections
  Resolves: rhbz#2149452
  - Allow rshim bpf cap2 and read sssd public files
  Resolves: rhbz#2080439
  - Allow svirt request the kernel to load a module
  Resolves: rhbz#2144735
  - Rebase selinux-policy to the latest one in rawhide
  Resolves: rhbz#2014606


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.6-1
changelog:
  - Allow modemmanager create hardware state information files
  Resolves: rhbz#2149560
  - Dontaudit ftpd the execmem permission
  Resolves: rhbz#2164434
  - Allow nm-dispatcher plugins read generic files in /proc
  Resolves: rhbz#2164845
  - Label systemd-journald feature LogNamespace
  Resolves: rhbz#2124797
  - Boolean: allow qemu-ga read ssh home directory
  Resolves: rhbz#1917024


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.7-1
changelog:
  - Allow staff_t getattr init pid chr & blk files and read krb5
  Resolves: rhbz#2112729
  - Allow firewalld to rw z90crypt device
  Resolves: rhbz#2166877
  - Allow httpd work with tokens in /dev/shm
  Resolves: rhbz#2166283


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.8-1
changelog:
  - Allow svirt to map svirt_image_t char files
  Resolves: rhbz#2170482
  - Fix opencryptoki file names in /dev/shm
  Resolves: rhbz#2166283


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 38.1.8-1.0.1
changelog:
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition [Orabug: 35091334]
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files [Orabug: 35122619]
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-9
changelog:
  - libsubid: creation and nsswitch support. Resolves: #1859252
  - Creation of subid and subid-devel subpackages
  - man: mention NSS in new[ug]idmap manpages
  - libsubid: move development header to shadow folder
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - useradd: fix SUB_UID_COUNT=0
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - man: clarify subid delegation
  - libsubid: make shadow_logfd not extern
  - login.defs: include HMAC_CRYPTO_ALGO key


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - useradd: modify check ID range for system users. Resolves: #2004911
  - Fix release sources
  - Add subid requirement for subid-devel


author: Ilya Okomin <ilya.okomin@oracle.com> - 15.6-1.0.4
changelog:
  - Rebase to shim v15.6-1 [Orabug: 34821869]
  - Update vendor certs [Orabug: 34821869]
  - Update oracle(grub2-sig-key) [Orabug: 34821869]
  - Update shim-unsigned to v15.6-1.0.3 [Orabug: 34821869]


author: Ilya Okomin <ilya.okomin@oracle.com> - 15.7-1.0.3
changelog:
  - Update to shim-unsigned v15.7-1.0.2 [Orabug: 34821869]
  - Update shimx64.efi and shimaa64.efi signed by Microsoft [Orabug: 34821869]


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-15
changelog:
  - [sosnode] Handle downstream versioning for runtime option
    Resolves: bz2037350
  - [options] Fix logging on plugopts in effective sos command
    Resolves: bz2054883
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2055548
  - [policies] Set fallback to None sysroot, don't chroot to '/'
    Resolves: bz2011537
  - [ovn_central] Rename container responsable of Red Hat
    Resolves: bz2043488


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-1
changelog:
  - Rebase on upstream 4.3
    Resolves: 2055003
  - [sapnw] Fix IndexError exception
    Resolves: 2065551
  - [subscription_manager] collect syspurpose data via sub-man
    Resolves: 2002333
  - [Plugin, utilities] Allow writing command output directly to disk
    Resolves: 2065564
  - [Ceph] Add support for containerized Ceph setup
    Resolves: 2065562
  - [unbound] Add new plugin for Unbound DNS resolver
    Resolves: 2065560
  - [discovery] Add new discovery plugin
    Resolves: 2065558
  - [system] Collect glibc tuning decisions
    Resolves: 2032913


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-2
changelog:
  - [ocp, openshift] Re-align API collection options and rename
    Resolves: bz2065563
  - [utilities] Close file only when storing to file
    Resolves: bz2079492
  - [report] --list-plugins should report used, not default,
    Resolves: bz2079490
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2079188
  - crio: switch from parsing output in table format to json
    Resolves: bz2097674
  - [pacemaker] Redesign node enumeration logic
    Resolves: bz2082914
  - [tigervnc] Update collections for newer versions of TigerVNC
    Resolves: bz2066181
  - [plugins] Allow 'str' PlugOpt type to accept any value
    Resolves: bz2079491
  - [ovirt] answer files: Filter out all password keys
    Resolves: bz2095267


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-3
changelog:
  - [vdsm] Set LVM option use_devicesfile=0
    Resolves: bz2122355
  - [Plugin] Make forbidden path checks more efficient
    Resolves: bz2122354


author: Pavel Moravec <pmoravec@redhat.com> = 4.4-1
changelog:
  - Rebase on upstream 4.4
    Resolves: bz2082615
  - [redhat] Honour credential-less --upload-url on RedHat distro properly
    Resolves: bz2059573
  - [md] Restrict data capture to raid members
    Resolves: bz2062283
  - [sos] Fix unhandled exception when concurrently removing temp dir
    Resolves: bz2088440


author: Pavel Moravec <pmoravec@redhat.com> = 4.4-2
changelog:
  - [utilities] Relax from hard dependency of python3-magic
    Resolves: bz2126089
  - [dnf] Collect legacy yum config symlinks, properly obfuscate pwds
    Resolves: bz2125499


author: EL Errata <el-errata_ww@oracle.com> - 4.5.0-1.0.1
changelog:
  - Adding virsh guest cgroup configuration [Orabug: 35145501]
  - Adding virsh qemu-monitor info tree command [Orabug: 35148435]
  - Adding Plugin option support for ksplice and btrfs [Orabug: 35115193]
  - append .txt to .com domain named files [Orabug: 34527958]
  - Adding dmesg -T to show timestamp for syslog comparison [Orabug: 34250313]
  - Adding uptrack-uname to show effective ksplice kernel version [Orabug: 33553351]
  - Added sos-oraclelinux-vendor-vendorurl.patch
  - Fix patch for Orabug 31969352 [Orabug: 32822570]
  - [ovn_central] call podman exec without a timeout
    Resolves: bz1767359
  - Adjusted ksplice plugin patches for path change [Orabug: 32881277]
  - Fix os detect string for Oracle Linux [Orabug: 28674897]
  - Add ksplice plugin [Orabug: 30273666] (Philippe Vanhaesendonck)
  - Disable upload options for OracleLinux [Orabug: 31969352]
  - Replace RH_FTP_HOST and RH_API_HOST with "_none_" [Orabug: 31975601]
  - Allow a journal log size to be smaller than 100M [Orabug: 32454362]
  - Do not exit on unknown plugin [Orabug: 32556170]
  - Add in some btrfs commands [Orabug: 32727607]
  - Add /var/run/ksplice/debug to sos ksplice plugin [Orabug: 32618933]
  - Fix ksplice plugin does not show description [Orabug: 32886513]


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).
  - Cater for RHEL 9 license requirement idiosyncrasies (#2103032).


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: Clemens Lang <cllang@redhat.com> - 5.62-2
changelog:
  - Fix stunnel in FIPS mode
    Resolves: rhbz#2050617
  - Fail build if tests fail
    Resolves: rhbz#2051083


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Zoltan Fridrich <zfridric@redhat.com> - 1.9.5p2-2
changelog:
  - change ldap.conf to sudo-ldap.conf
  Resolves: rhbz#1908882
  - remove /usr/local/* from secure_path
  Resolves: rhbz#1908923
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1916655
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917039
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1917735


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-5
changelog:
  RHEL 9 BETA
  - sync with rhel8 spec
  Resolves: rhbz#1908882
  Resolves: rhbz#1942383
  Resolves: rhbz#1946707
  Resolves: rhbz#1946709
  Resolves: rhbz#1981278


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-7
changelog:
  - utmp resource leak in sudo
  Resolves: rhbz#1986579
  - sudo does not list /etc/dnf/protected.d/sudo.conf in the rpm config files listing
  Resolves: rhbz#1997030
  - sudo uses Recommends for sudo-python-plugin(x86-64) = 1.9.5p2-2.el9 and vim-minimal
  Resolves: rhbz#1947908
  - review of important potential issues detected by static analyzers in sudo-1.9.5p2-2.el9
  Resolves: rhbz#1938879


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: systemd maintenance team <systemd-maint@redhat.com> - 252-2
changelog:
  - test: check if we can use SHA1 MD for signing before using it (#2141979)
  - boot: cleanups for efivar_get() and friends (#2141979)
  - boot: fix false maybe-uninitialized warning (#2141979)
  - tree-wide: modernizations with RET_NERRNO() (#2137584)
  - sd-bus: handle -EINTR return from bus_poll() (#2137584)
  - stdio-bridge: don't be bothered with EINTR (#2137584)
  - varlink: also handle EINTR gracefully when waiting for EIO via ppoll() (#2137584)
  - sd-netlink: handle EINTR from poll() gracefully, as success (#2137584)
  - resolved: handle -EINTR returned from fd_wait_for_event() better (#2137584)
  - homed: handle EINTR gracefully when waiting for device node (#2137584)
  - utmp-wtmp: fix error in case isatty() fails (#2137584)
  - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2137584)
  - io-util: document EINTR situation a bit (#2137584)
  - terminal-util: Set OPOST when setting ONLCR (#2138081)
  - cgtop: Do not rewrite -P or -k options (#2138081)
  - test: Add tests for systemd-cgtop args parsing (#2138081)
  - resolved: remove inappropriate assert() (#2138081)
  - boot: Add xstrn8_to_16 (#2138081)
  - boot: Use xstr8_to_16 (#2138081)
  - boot: Use xstr8_to_16 for path conversion (#2138081)
  -  stub: Fix cmdline handling (#2138081)
  - stub: Detect empty LoadOptions when run from EFI shell (#2138081)
  - boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices (#2138081)
  - boot: Make sure all partitions drivers are connected (#2138081)
  - boot: improve support for qemu (#2138081)
  - systemd-boot man page: add section for virtual machines (#2138081)
  - boot: Only do full driver initialization in VMs (#2138081)
  - dissect: rework DISSECT_IMAGE_ADD_PARTITION_DEVICES + DISSECT_IMAGE_OPEN_PARTITION_DEVICES (#2138081)
  - ci(Mergify): v252 configuration update (#2138081)
  - ci: Run GitHub workflows on rhel branches (#2138081)
  - ci: Drop scorecards workflow, not relevant (#2138081)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-3
changelog:
  - swap: tell swapon to reinitialize swap if needed (#2151993)
  - coredump: adjust whitespace (#2155517)
  - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155517)
  - Revert "basic: add fallback in chase_symlinks_and_opendir() for cases when /proc is not mounted" (#2138081)
  - glyph-util: add warning sign special glyph (#2138081)
  - chase-symlink: when converting directory O_PATH fd to real fd, don't bother with /proc/ (#2138081)
  - systemctl: print a clear warning if people invoke systemctl without /proc/ (#2138081)
  - TEST-65: check cat-config operation in chroot (#2138081)
  - TEST-65: use [[ -v ]] more (#2138081)
  - systemctl: warn if trying to disable a unit with no install info (#2141979)
  - systemctl: allow suppress the warning of no install info using --no-warn (#2141979)
  - rpm/systemd-update-helper: use --no-warn when disabling units (#2141979)
  - systemctl: suppress warning about missing /proc/ when --no-warn (#2141979)
  - shell-completion: systemctl: add --no-warn (#2141979)
  - core/unit: drop doubled empty line (#2160477)
  - core/unit: drop dependency to the unit being merged (#2160477)
  - core/unit: fix logic of dropping self-referencing dependencies (#2160477)
  - core/unit: merge two loops into one (#2160477)
  - test: add test case for sysv-generator and invalid dependency (#2160477)
  - core/unit: merge unit names after merging deps (#2160477)
  - core/unit: fix log message (#2160477)
  - test: explicitly create the /etc/init.d directory (#2160477)
  - test: support a non-default SysV directory (#2160477)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-4
changelog:
  - udev: make get_virtfn_info() provide physical PCI device (#2159448)
  - test: make helper_check_device_units() log unit name (#2138081)
  - test: add a testcase for lvextend (#2138081)
  - pid1: fix segv triggered by status query (#26279) (#2138081)
  - test: create config under /run (#2138081)
  - test: add tests for mDNS and LLMNR settings (#2138081)
  - resolved: introduce the _localdnsstub and _localdnsproxy special hostnames for 127.0.0.54 + 127.0.0.53 (#2138081)
  - test: wait for the monitoring service to become active (#2138081)
  - test: suppress echo in monitor_check_rr() (#2138081)
  - Revert "test: wait for the monitoring service to become active" (#2138081)
  - test: show and check almost all journal entries since the relevant command being invoked (#2138081)
  - test: cover IPv6 in the resolved test suite (#2138081)
  - test: add a couple of SRV records to check service resolution (#2138081)
  - test: add a test for the OPENPGPKEY RR (#2138081)
  - test: don't hang indefinitely on no match (#2138081)
  - test-ndisc: fix memleak and fd leak (#2138081)
  - test-unit-name: fix fd leak (#2138081)
  - test: bump D-Bus service start timeout if we run without accel (#2138081)
  - test: bump the client-side timeout in sd-bus as well (#2138081)
  - test: bump the container spawn timeout to 60s (#2138081)
  - network: fix memleak (#2138081)
  - busctl: fix introspecting DBus properties (#2138081)
  - busctl: simplify peeking the type (#2138081)
  - resolve: drop redundant call of socket_ipv6_is_supported() (#2138081)
  - resolve: introduce link_get_llmnr_support() and link_get_mdns_support() (#2138081)
  - resolve: provide effective supporting levels of mDNS and LLMNR (#2138081)
  - resolvectl: warn if the global mDNS or LLMNR support level is lower than the requested one (#2138081)
  - resolve: enable per-link mDNS setting by default (#2138081)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-5
changelog:
  - nss-myhostname: fix inverted condition in (#2167468)
  - nss-myhostname: do not return empty result with NSS_STATUS_SUCCESS (#2167468)
  - sleep: rename hibernate_delay_sec -> _usec (#2151612)
  - sleep: fetch_batteries_capacity_by_name() does not return -ENOENT (#2151612)
  - sleep: drop unnecessary temporal vaiable and initialization (#2151612)
  - sleep: introduce SuspendEstimationSec= (#2151612)
  - sleep: coding style fixlets (#2151612)
  - sleep: simplify code a bit (#2151612)
  - sleep: fix indentation (#2151612)
  - sleep: enumerate only existing and non-device batteries (#2151612)
  - core: when isolating to a unit, also keep units running that are triggered by units we keep running (#1952378)
  - udev/net_id: introduce naming scheme for RHEL-9.2 (#2170500)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-6
changelog:
  - journalctl: actually run the static destructors (#2122500)
  - efi: drop executable-stack bit from .elf file (#2140646)
  - install: fail early if specifier expansion failed (#2138081)
  - test: add coverage for #26467 (#2138081)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-7
changelog:
  - test: add coverage for #24177 (#1985288)
  - logind-session: make stopping of idle session visible to admins (#2172401)


author: Tony Rodriguez <tony.rodriguez@oracle.com> - 252-8.0.1
changelog:
  - Backport upstream pstore dmesg fix [Orabug: 34868110]
  - Remove upstream references  [Orabug: 33995357]
  - Disable unprivileged BPF by default [Orabug: 32870980]
  - udev rules: fix memory hot add and remove [Orabug: 31310273]
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [Orabug: 22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792]
  - shutdown: get only active md arrays. [Orabug: 34467234]
  - Removed unneeded patches from the systemd.spec file [Orabug: 34272490]
  - A) 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch
  - B) 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch


author: Lukas Javorsky <ljavorsk@redhat.com> - 2:1.34-4
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.18-6
changelog:
  - Update tuna command line interface
  - Move get_policy_and_rtprio call to parser level
  - Remove threads print statement
  Resolves: rhbz#2062865


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.18-9
changelog:
  - Remove import and fix help message
  - Update manpages for argparse CLI changes
  Resolves: rhbz#2138692


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.17.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2003838
    - cpu-partitioning: fixed no_balance_cores on newer kernels
      resolves: rhbz#1874596


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.18.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#2003838
    - tuned-gui: fixed creation of new profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.19.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2057609
    - fixed parsing of inline comments
    - added support for quotes in isolated_cores specification
    - spec: reduced weak dependencies
      resolves: rhbz#2093841
    - recommend: do not ignore syspurpose_role if there is no syspurpose
      resolves: rhbz#2030580
    - added support for initial autosetup of isolated_cores
      resolves: rhbz#2093847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2133815
    - systemd: relax polkit requirement
    - sysvinit: fixed path
      resolves: rhbz#2118301
    - plugin_cpu: added support for pm_qos_resume_latency_us
      resolves: rhbz#2118786
    - do not exit on duplicate config lines
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
    - API: add support for moving devices between instances
      resolves: rhbz#2113925
    - D-Bus: send tracebacks through D-Bus only in debug mode
      resolves: rhbz#2159680
    - Makefile: added fix for python-3.12
    - throughput-performance: set net.core.somaxconn to at least 2048
    - plugin_scheduler: do not leak FDs from the perf
    - plugin_cpu: added support for intel_pstate scaling driver
      resolves: rhbz#2095829
    - added support for the API access through the Unix Domain Socket
      resolves: rhbz#2113900


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.2.rc1
changelog:
  - post RC.1 fixes
    related: rhbz#2133815
  - fixed possible traceback on SIGHUP
    resolves: rhbz#2169712


author: EL Errata <el-errata_ww@oracle.com> - 2.20.0-1.0.1
changelog:
  - Fix RPS/XPS and busy polling optimization not getting applied [Orabug: 32153315]
  - Fix error in uninstalling tuned [Orabug: 351528377]
  - Updated patch with the more recent version [Orabug: 30730976]
  - Set AMD CPU freq governor to ondemand when unapplying cpu tunings [Orabug: 30033199]
  - Restored the system rules in recommend.conf [Orabug: 29962987]
  - Added oci-nic profile and updated profiles-oci-recommend [Orabug: 29869969]
    for increasing combined channels to 16 on NICs with bnxt_en driver on BM
  - Do not access xps_cpus on single queue devices [Orabug: 29894296]
  - OL8 does not support System Purpose [Orabug: 29443881]
    Remove syspurpose_role option in recommend.conf.
  - Added profiles-oci-recommend package [Orabug: 29632202]
  - Modified the patch for ol8 [Orabug: 29560068] (james.cheng@oracle.com)
  - Added iscsi plugin, and
    - added oci-rps-xps profile [Orabug: 28397039]
    - added oci-busy-polling profile [Orabug: 28748149]
    - added oci-cpu-power profile


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c - supersedes tzdata-2021b
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.
    - Includes changes in tzdata-2021b:
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not -03-26.
    - zdump -v now outputs better failure information
    - fixes for code that reads corrupted TZif data


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


