# changelog

author: Brian Maly <brian.maly@oracle.com> [5.15.0-205.149.3.el9uek]
changelog:
  - net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248460]  
  - platform/mellanox: mlxbf-pmc: Fix offset calculation for crspace events (Shravan Kumar Ramani)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-tmfifo: Drop Tx network packet when Tx TmFIFO is full (Liming Sun)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-tmfifo: Remove unnecessary bool conversion (Jules Irenge)  [Orabug: 36299543]  
  - power: reset: pwr-mlxbf: support graceful reboot instead of emergency reset (Asmaa Mnebhi)  [Orabug: 36299543]  
  - platform/mellanox: tmfifo: fix kernel-doc warnings (Randy Dunlap)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-tmfifo: Convert to platform remove callback returning void (Uwe Kleine-König)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-pmc: Add support for BlueField-3 (Shravan Kumar Ramani)  [Orabug: 36299543]  
  - pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency (David Thompson)  [Orabug: 36299543]  
  - pinctrl: mlxbf3: Remove gpio_disable_free() (Asmaa Mnebhi)  [Orabug: 36299543]  
  - gpio: mlxbf3: use capital "OR" for multiple licenses in SPDX (Krzysztof Kozlowski)  [Orabug: 36299543]  
  - pinctrl: use capital "OR" for multiple licenses in SPDX (Krzysztof Kozlowski)  [Orabug: 36299543]  
  - gpio: mlxbf3: Support add_pin_ranges() (Asmaa Mnebhi)  [Orabug: 36299543]  
  - uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36303821]  
  - uek-rpm: Update the aarch64 kABI files for new symbol (Yifei Liu)  [Orabug: 36323808]  
  - arm64: Minimize tlb flush due to vttbr writes on AmpereOne (Ganapatrao Kulkarni)  [Orabug: 36349790]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-205.149.4.el9uek]
changelog:
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)   
  - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)   
  - ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails (Fedor Pchelkin)   
  - afs: Fix endless loop in directory parsing (David Howells)   
  - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() (Dan Carpenter)   
  - Revert "drm/bridge: lt8912b: Register and attach our DSI device at probe" (Max Krummenacher)   
  - net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)   
  - usb: dwc3: gadget: Don't disconnect if not started (Thinh Nguyen)   
  - platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler (Hans de Goede)   
  - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587408]  
  - cifs: fix mid leak during reconnection after timeout threshold (Shyam Prasad N)  [Orabug: 36123597]  
  - vfio/mlx5: Activate the chunk mode functionality (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Add support for READING in chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Add support for SAVING in chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Pre-allocate chunks for the STOP_COPY phase (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Rename some stuff to match chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Enable querying state size which is > 4GB (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Refactor the SAVE callback to activate a work only upon an error (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Wake up the reader post of disabling the SAVING migration file (Yishai Hadas)  [Orabug: 36298327]  
  - net/mlx5: Introduce ifc bits for migration in a chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - af_unix: Drop oob_skb ref before purging queue in GC. (Kuniyuki Iwashima)  [Orabug: 36375407]  
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta)  [Orabug: 36379479]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-205.149.5.el9uek]
changelog:
  - uek-rpm: Bluefield 3: enable lockdown mode for secure boot (Dave Kleikamp)  [Orabug: 36318788]  
  - Documentation/x86: Update split lock documentation (Tony Luck)  [Orabug: 36298291]  
  - x86/split_lock: Add sysctl to control the misery mode (Guilherme G. Piccoli)  [Orabug: 36298291]  
  - x86/split-lock: Remove unused TIF_SLD bit (Tony Luck)  [Orabug: 36298291]  
  - x86/split_lock: Make life miserable for split lockers (Tony Luck)  [Orabug: 36298291]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-205.149.5.1.el9uek]
changelog:
  - KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201} 
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36384802]  {CVE-2024-2201} 
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36384802]  {CVE-2024-2201} 
  - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/cpu: Support AMD Automatic IBRS (Kim Phillips)  [Orabug: 36384802]  {CVE-2024-2201} 
  - Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36384802]  {CVE-2024-2201}


author: Brian Maly <brian.maly@oracle.com> [5.15.0-301.163.2.el9uek]
changelog:
  - x86/efistub: Branch straight to kernel entry point from C code (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/efi: Make the deprecated EFI handover protocol optional (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi: fix panic in kdump kernel (Oleksandr Tymoshenko)  [Orabug: 36943196] {CVE-2024-35800}
  - efi: verify that variable services are supported (Johan Hovold)  [Orabug: 36943196]  
  - efi: libstub: Give efi_main() asmlinkage qualification (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Simplify IDT/GDT preserve/restore in the EFI thunk (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed, efi: Merge multiple definitions of image_offset into one (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move efi32_pe_entry() out of head_64.S (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move efi32_entry out of head_64.S (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move efi32_pe_entry into .text section (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move bootargs parsing out of 32-bit startup code (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move 32-bit entrypoint code into .text section (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Rename efi_thunk_64.S to efi-mixed.S (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi/x86: libstub: Make DXE calls mixed mode safe (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi: libstub: ensure allocated memory to be executable (Baskov Evgeniy)  [Orabug: 36943196]  
  - efi: libstub: declare DXE services table (Baskov Evgeniy)  [Orabug: 36943196]  
  - x86/compressed: Export and rename add_identity_map() (Michael Roth)  [Orabug: 36943196]  
  - x86/compressed/64: Detect/setup SEV/SME features earlier during boot (Michael Roth)  [Orabug: 36943196]  
  - x86/boot: Use MSR read/write helpers instead of inline assembly (Michael Roth)  [Orabug: 36943196]  
  - x86/boot: Introduce helpers for MSR reads/writes (Michael Roth)  [Orabug: 36943196]  
  - x86/compressed/acpi: Move EFI detection to helper (Michael Roth)  [Orabug: 36943196]  
  - efi/libstub: add prototype of efi_tcg2_protocol::hash_log_extend_event() (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi/libstub: x86/mixed: increase supported argument count (Ard Biesheuvel)  [Orabug: 36943196]  
  - uek: kabi: update x86_64 kABI files for new symbols (Yifei Liu)  [Orabug: 37033066]  
  - crypto/octeontx2: Use dynamic allocated memory region for lmtst (Bharat Bhushan)  [Orabug: 36725601]  
  - crypto/octeontx2: Initialize cptlfs device info once (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix rsfec stats reading (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-pf: Add NIXLF error/poison interrupt handlers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: dbg: Add debug prints for NIX AF interrupts (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: poll for tx link credits before link mode change (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: Do not support irq config for both edge (Suneel Garapati)  [Orabug: 36725601]  
  - octeontx2-af: Knobs for NPC default rule counters (Linu Cherian)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: Add Channel info to RPM map (Linu Cherian)  [Orabug: 36725601]  
  - Octeontx2-af: Skip overlap check for SPI field (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Modify SMQ flush sequence to drop packets (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: spi-cadence-xspi: Add error check for xfer logic register base (Petr Malat)  [Orabug: 36725601]  
  - octeontx2-af: Fix issue with GRE parsing (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-af: add shutdown function (Dave Kleikamp)  [Orabug: 36725601]  
  - uek-rpm: Build T93 embedded kernel (Dave Kleikamp)  [Orabug: 36725601]  
  - driver: soc: marvell: add cpss drivers (Dave Kleikamp)  [Orabug: 36725601]  
  - PCI: boot time optimization (Harman Kalra)  [Orabug: 36725601]  
  - octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai)  [Orabug: 36725601]  
  - soc: Only try to build Marvell SOC code on aarch64 (Dave Kleikamp)  [Orabug: 36725601]  
  - efi/Marvell: Work-around for bootefi memmap errors (Henry Willard)  [Orabug: 36725601]  
  - octeontx2-af: add max_vfs module param (Tom Saeger)  [Orabug: 36725601]  
  - arm64: Fix compiler warning when CONFIG_MRVL_OCTEONTX_EL0_INTR is undefined. (Tom Saeger)  [Orabug: 36725601]  
  - thermal: add CN98XX support for Marvell Octeon TX2 SoC temperature sensors (Dave Kleikamp)  [Orabug: 36725601]  
  - thermal: support for Marvell Octeon TX2 SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 36725601]  
  - crypto: octeontx2: let the core report the driver name instead of the drivers (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-pf: extend ringparam setting/getting API with rx_buf_len (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-pf: Fix arguments to bpf_warn_invalid_xdp_action() (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-af: fix bitmap_weight formatting (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Support for eCPRI MsgType5 timestamping (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use correct netdev priv structure for debugging (Baha Mesleh)  [Orabug: 36725601]  
  - gpio: thunder: Fix invalid object pointer in kfree. (Szymon Balcerak)  [Orabug: 36725601]  
  - soc: marvell: bert: BERT support for CN10k (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: soc: marvell: octeontx_info: Fix parsing of two fdt properties (Felix Manlunas)  [Orabug: 36725601]  
  - octeontx2-af: Add validation before accessing fwdata (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add support to parse more VLAN headers (Kiran Kumar K)  [Orabug: 36725601]  
  - drivers: octeontx-edac: Add gic error decoder (Jayanthi Annadurai)  [Orabug: 36725601]  
  - drivers: pci-octeon-pem: Remove unused variables (Suneel Garapati)  [Orabug: 36725601]  
  - octeontx2-af: Add debugfs support to dump NIX TM registers (Anshumali Gaur)  [Orabug: 36725601]  
  - driver: edac: octeontx: offline/poison page on fatal/UE (Wladislav Wiebe)  [Orabug: 36725601]  
  - gpio: thunderx: Fixed 'pin-cfg' values collection. (Szymon Balcerak)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: disable CPRI RX on cleanup (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: ignore mcs untagged error (Baha Mesleh)  [Orabug: 36725601]  
  - driver: i2c: mv64xxx: cn9130 bus lockup issue (Narendra Hadke)  [Orabug: 36725601]  
  - Calculate delay-element (Aaron Williams)  [Orabug: 36725601]  
  - Disable enhanced strobe if not selected (Aaron Williams)  [Orabug: 36725601]  
  - Fix clock timing for MMC DDR modes (Aaron Williams)  [Orabug: 36725601]  
  - soc: marvell: hw_access: fix modpost error (Satheesh Paul)  [Orabug: 36725601]  
  - octeontx2-af: Fix issue with IPV6 GRE and multi VLAN (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-af: Add KPU changes to parse fabric path header (Kiran Kumar K)  [Orabug: 36725601]  
  - xhci: Use more than one Event Ring segment (Jonathan Bell)  [Orabug: 36725601]  
  - xhci: Set DESI bits in ERDP register correctly (Lukas Wunner)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add ioctl to get link info (Satheesh Paul)  [Orabug: 36725601]  
  - mdio: mdio-thunder: Fix driver build when ACPI disabled. (Szymon Balcerak)  [Orabug: 36725601]  
  - mdio: mdio-thunder: Add ACPI support. (Szymon Balcerak)  [Orabug: 36725601]  
  - gpio: thunderx: Add ACPI support. (Szymon Balcerak)  [Orabug: 36725601]  
  - octeontx2-pf: Check for DMAC extraction support before setting DMAC based hardware filter for a VF (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Do not use HW TSO when gso_size < 16bytes (Geetha sowjanya)  [Orabug: 36725601]  
  - drivers: spi: xspi: Modify HW xfer workaround (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-af: Added debugfs support to dump NIX TM topology (Anshumali Gaur)  [Orabug: 36725601]  
  - octeontx2-af: reveal only TIM params that are available (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: disable rx on RFOEs on exit (Baha Mesleh)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add dependency in Kconfig for GHES BERT (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-cpt: Wake up waiting process as last step (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Send UP messages to VF only when VF is up. (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2: Honor irqaffinity passed via bootargs (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-af: fix mcam hit counter (Ankur Dwivedi)  [Orabug: 36725601]  
  - octeontx2-af: Fix default entries mcam entry action (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: map management port always to first PF (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: configure 802.3 pause frames in SGMII/QSGMII mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - FWLOG: Correct read length with ppos (Mikko Suni)  [Orabug: 36725601]  
  - octeontx2-pf: Reorder tearing down of PTP RX info work queue, mailbox (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: Fix Support of FDSA tag (George Cherian)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: release psm queues on exit (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: ignore MCS bypass errors (Baha Mesleh)  [Orabug: 36725601]  
  - MMC: Fix for SD card support in cadence driver (Paul Way)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add cpri busrt packet limiter (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - genirq: Export irqaffinity_default (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add SW workaround for Zero padding (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: Add new devlink param to configure maximum usable NIX LFs (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Honor irqaffinity passed via bootargs (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: add TIM error af interrupt handlers (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: clear state on TIM ring disable (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: disable preemption when enabling TIM (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-vf: Fix VF mbox up message error on PTP RX enable (Sai Krishna)  [Orabug: 36725601]  
  - drivers: spi-cadence-xspi: Change xfer logic base (Suneel Garapati)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add Kconfig option for otx2-ghes-init file. (Piyush Malgujar)  [Orabug: 36725601]  
  - driver: edac: octeontx: Improvements to GIC RAS handler (Chandrakala Chavva)  [Orabug: 36725601]  
  - edac: octeontx: Add support for GIC RAS reporting (Jayanthi Annadurai)  [Orabug: 36725601]  
  - octeontx2-af: Dump hw register state on error (Geetha sowjanya)  [Orabug: 36725601]  
  - Change struct octeontx2_pcie_console_nexus (Ray Asbury)  [Orabug: 36725601]  
  - octeontx2-af: account for cycle wraparound (Pavan Nikhilesh)  [Orabug: 36725601]  
  - drivers: spi: cadence-xspi: Export chip select gpio conditionally (Suneel Garapati)  [Orabug: 36725601]  
  - spi: cadence: Improve MRVL locking mechanism (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix PTP PHC sw timecounter reset ioctl (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: prevent TIM register read reorder (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-dpi: fix incorrect chunk size config (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-dpi: configure dma engine FIFO (Amit Prakash Shukla)  [Orabug: 36725601]  
  - octeontx2-pf: ethtool: support multi advertise mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx-pf: Update SGMII mode mapping (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: ethtool: Remove dependency of phyad (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: enable rxc with lookaside cpt lf (Vidya Sagar Velumuri)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to capture counters (Pavan Nikhilesh)  [Orabug: 36725601]  
  - crypto: octeontx2: increase timeout value of load_fvc CPT instruction poll (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: increase timeout value of load_fvc CPT instruction poll (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-dpi: extend sysfs to dump DPI PF registers (Satha Rao)  [Orabug: 36725601]  
  - octeontx2-af: reduce cpt flt interrupt vectors for cn10kb (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Fix updating PFC configuration during running traffic (Suman Ghosh)  [Orabug: 36725601]  
  - drivers: pci: probe: Read after write fixup for PBUS register (Suneel Garapati)  [Orabug: 36725601]  
  - genirq: Increase the number of interrupters (George Cherian)  [Orabug: 36725601]  
  - drivers: spi-cadence-xspi: Fix clock divisor change logic (Suneel Garapati)  [Orabug: 36725601]  
  - driver: mmc: sdhci-cadence: ACPI support added for eMMC driver for CN10K (Piyush Malgujar)  [Orabug: 36725601]  
  - driver: mmc: sdhci: Add ACPI check (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-af: Add debug logs. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Add more debug messages (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Fix dangling pointers in the netdev qset (Geetha sowjanya)  [Orabug: 36725601]  
  - drivers: cadence-xspi: Optimize workaround logic (Suneel Garapati)  [Orabug: 36725601]  
  - edac: octeontx: Add error syndrome (Jayanthi Annadurai)  [Orabug: 36725601]  
  - drivers: i2c-octeon-core: Add recovery for WDOG_TOUT error status (Suneel Garapati)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add CN10 check (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2: Improve mailbox tracepoints for debugging (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2: add timeout for load_fvc completion poll (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: avoid RXC register access in FLR on CN10KB (Nithin Dabilpuram)  [Orabug: 36725601]  
  - drivers: i2c-octeon-core: Add error state recovery (Bruno Matic)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add an ioctl to reset PTP PHC sw timecounter offset (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Remove MAC address validation check (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Use TL2 level for egress match all configuration (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Add a new mbox to read/write MCAM hit status (Suman Ghosh)  [Orabug: 36725601]  
  - crypto: octeontx2: fix devlink params get callback (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: fix opcode incase of SGv2 (Srujana Challa)  [Orabug: 36725601]  
  - ptp_clockmatrix: print driver version during probe (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - driver: mfd/misc/ptp: update renasas smu drivers to v1.0 tag (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - driver: edac: octeontx: Init MC grain (Vasyl Gomonovych)  [Orabug: 36725601]  
  - rqchip/gic-v3: Use raw_spin_lock in irq context (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: don't drop packets with macsec errors (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix register offset definitions (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: spi: cadence: Reconfigure xSPI config to STIG Mode (Witold Sadowski)  [Orabug: 36725601]  
  - spi: Add xfer() function for cadence xSPI (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: spi: Add arbitration support for Cadence SPI (Suneel Garapati)  [Orabug: 36725601]  
  - watchdog: sbsa_gwdt: Apply the Errata workaround seen on CN10K Processors (George Cherian)  [Orabug: 36725601]  
  - driver: spi: cadence: Remove unused variables (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Flush WQ before destroy (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Check address for Null before free (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Detach LF resources on probe cleanup (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: add validation checks for function arguments (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2: Fix klockwork issues in BPHY and SSO (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2: Fix klockwork issues. (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN interrupt too (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: utilize hardware FLR support in SSO (Shijith Thotton)  [Orabug: 36725601]  
  - drivers: marvell: Fix klockwork issues (Suman Ghosh)  [Orabug: 36725601]  
  - arm64: smccc: Add trace events to SMC calls. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for AES_GMAC (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for DH (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for ccm(aes) (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: support md5 and hmac(md5) (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: support sha1, sha256, sha384 and sha512 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for ECDSA P192, P256 and P384 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: ecdsa - export ecdsa privkey ASN.1 parser (Srujana Challa)  [Orabug: 36725601]  
  - crypto: ecdsa - export ecdsa signature ASN.1 parser (Srujana Challa)  [Orabug: 36725601]  
  - driver: serdes_debugfs: add support for debugfs (anthony chan-MA Eng_IC)  [Orabug: 36725601]  
  - octeontx2-af: fix to get different rq mask (Rakesh Kudurumalla)  [Orabug: 36725601]  
  - crypto: make RFC6979 test vectors generic to all drivers (Srujana Challa)  [Orabug: 36725601]  
  - crypto: add ECDSA test vectors from RFC 6979 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: add ECDSA signature generation support (Srujana Challa)  [Orabug: 36725601]  
  - crypto: ecc - Export additional functions from crypto/ecc.c (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: update TIM adjust GTI errata silicons (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: fix accessing of CPT register on 105xx. (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Using compound/head page ref count (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fixed sparse errors (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Remove source port check while adding ntuple rule for GTP-U/C (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ptp timestamp conversion when using external clock (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: don't modify pps threshold when sw timecounter is not used (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - crypto: octeontx2: add devlink option to set max_rxc_icb_cnt (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Define new ethtool modes for CN10KB (Hariprasad Kelam)  [Orabug: 36725601]  
  - driver: spi: cadence: Add ACPI support (Piyush Malgujar)  [Orabug: 36725601]  
  - Octeontx2-pf: Fix error condition for GTP-U/C rule insertion (Suman Ghosh)  [Orabug: 36725601]  
  - drivers:spi:cadence-xspi: Switch to polling mode when in panic (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - drivers:spi:cadence-xspi: Add low-level changes to support kmsg panic/oops write (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - spi: spi-nor: Fix the spi_nor_panic_write (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - drivers: mtd: spi-nor: Support kmsg dumper based on pstore/blk (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - octeontx2-sdp: add CN10kB for using correct mask (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - ptm-ep: Add PTM requestor driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Remove SA stats support (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: fix CPT ctx flush (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: fix issue with spitosa table teardown (Nithin Dabilpuram)  [Orabug: 36725601]  
  - scmi: mailbox: Increase message slots (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-af: Update minimum receive frame size (Sathesh Edara)  [Orabug: 36725601]  
  - watchdog: sbsa_gwdt: Enable the WDOG_STOP_ON_PANIC (George Cherian)  [Orabug: 36725601]  
  - drivers: watchdog: Add support for panic notifier callback (George Cherian)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Poll for timestamp to commit into PTP ring (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-pf: Use 1 TL4 queue per SDP output queue, enable SDP backpressure (Roy Franz)  [Orabug: 36725601]  
  - spi: cadence: Clear interrupt status before enabling interrupts (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-dpi: queue reset of DPI VF during initialization (Sibaranjan Pattnayak)  [Orabug: 36725601]  
  - spi: cadence: Add support for xfer operation. (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx-bphy-netdev: dev_ioctl: split out ndo_eth_ioctl (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix OTX2_RFOE_IOCTL_RX_IND_CFG in case of CNF10K (Janne Kukkonen)  [Orabug: 36725601]  
  - octeontx2-af: consider mode when using cpt base channel for bp (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: update SSO FLR routine (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Add additional checks to validate user-def field value for GTP-u and GTP-C (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-dpi: add sysfs for communication from userspace (Sibaranjan Pattnayak)  [Orabug: 36725601]  
  - octeontx2-sdp: Fix programming EPF_RINFO (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: remove debugfs entries. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix updating host ptp offset multiple times (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: mmc: sdhci-cadence: Change command delay value (Chandrakala Chavva)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix rfoe ptp clock cleanup (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix issue of using incorrect netdev priv (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix link carrier state update for cnf10k (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Avoid kernel crash when psw jd_ptr is NULL (Mikko Suni)  [Orabug: 36725601]  
  - drivers: pci-octeon-pem: Rectify resetting PEM (Ray Asbury)  [Orabug: 36725601]  
  - drivers: pci-octeon-pem: Rectify RC link recover work (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: octeon-pem: Fix hardware issue (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: octeon-pem: Check on MSI-X vector count (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: controller: Add Octeon PEM driver (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: probe: Add fixup for Marvell PCIeRC bridge (Suneel Garapati)  [Orabug: 36725601]  
  - PCI: marvell-cnxk-ep: rename driver macro name string (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - watchdog: sbsa_wdog: Make sure to program a larger timeout value (George Cherian)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add dependency OCTEONTX2_AF (Jia Ma)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: fix undefined SSO register access (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: fix inline inbound IPsec configuration (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-bphy: Generate PPS OUT on PHC PTP_CLK_REQ_PEROUT (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: update TIM adjust GTI errata silicons (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ioctl OTX2_CPRI_IOCTL_LINK_EVENT cpri context (Janne Kukkonen)  [Orabug: 36725601]  
  - driver: edac: octeontx: Add revision check for new pass of the chip (Chandrakala Chavva)  [Orabug: 36725601]  
  - drivers: spi: cadence: Fix clock operations (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Remove ptp list processing (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use two send queues for cnf10k (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use separate xmit function for PTP (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Simplify job submission to hardware (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Simplify error checks and updating stats (Subbaraya Sundeep)  [Orabug: 36725601]  
  - drivers: soc: Removed Below Warning message for generic header file on CN8XX platform. (sdonelli)  [Orabug: 36725601]  
  - octeontx2-dpi: configure writing DMA result to an offset of the event (Sibaranjan Pattnayak)  [Orabug: 36725601]  
  - PCI: add misc character device for BAR4 mem access (Satananda Burla)  [Orabug: 36725601]  
  - cacheinfo: Expose the code to generate a cache-id from a device_node (James Morse)  [Orabug: 36725601]  
  - cacheinfo: Set cache 'id' based on DT data (Rob Herring)  [Orabug: 36725601]  
  - cacheinfo: Allow for >32-bit cache 'id' (Rob Herring)  [Orabug: 36725601]  
  - drivers: base: cacheinfo: Add helper to find the cache size from cpu+level (James Morse)  [Orabug: 36725601]  
  - drivers: base: cacheinfo: Check per_cpu_cacheinfo() is allocated (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Find PPTT cache level by ID (James Morse)  [Orabug: 36725601]  
  - ACPI / irq: Add acpi_register_partitioned_percpu_gsi() (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: select and translate the partition domain (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: Build PPI partitions on ACPI systems (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: Print DT partitions in the same way as APCI (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Add a helper to build a cpumask from a cpu_node (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Provide a helper to walk processor containers (James Morse)  [Orabug: 36725601]  
  - irqchip/gic, gic-v3: Translate fwspec for DT and ACPI systems in the same way (James Morse)  [Orabug: 36725601]  
  - ACPI / irq: Allow a compile-time arg0 for acpi_register_gsi()'s fwspec (James Morse)  [Orabug: 36725601]  
  - irqchip/gic: Collect GIC_IRQ_TYPE definitions into one place (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: Move partition_create_desc() work to a helper (James Morse)  [Orabug: 36725601]  
  - Documentation/admin-guide/acpi: Move information out of shell script comments (James Morse)  [Orabug: 36725601]  
  - arm64: Add workaround for Cavium erratum 36890 (Andrew Pinski)  [Orabug: 36725601]  
  - octeontx2-pf: Fix coverity issues (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Add NPC support to filter GTP-U and GTP-C packets based on TEID (Suman Ghosh)  [Orabug: 36725601]  
  - PCI: controller: Add Marvell OcteonTx2 PCIe Endpoint driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-dpi: Add DPI DMA PF driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add CN10K SDP support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Fix SDP output backpressure (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: add multi-PF support in SDP (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: setup the SDP channel configuration (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add FLR handling support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add mailbox support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add SDP PF driver support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Enable FORCE_COND_CLK_EN only for applicable chips. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - drivers: soc: marvell: Add PCI console driver (Rick Farrington)  [Orabug: 36725601]  
  - firmware: octeontx2: Move AVS reset control to MUB bus (sdonelli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix coverity issues (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - KVM: arm64: Extend timer errata-38627 to kvm (Bharat Bhushan)  [Orabug: 36725601]  
  - clocksource: Add Marvell Errata-38627 workaround (Bharat Bhushan)  [Orabug: 36725601]  
  - EDAC: Octeon: Init SDEI (Vasyl Gomonovych)  [Orabug: 36725601]  
  - drives: soc: marvell: Using struct proc_ops instead of file_operations (Piyush Malgujar)  [Orabug: 36725601]  
  - drives: soc: marvell: Update octtx_info to display sdk-version (Chandrakala Chavva)  [Orabug: 36725601]  
  - drives: soc: marvell: Fix issues reported by static code analysis (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: update to support to print reset counters (Selvam Venkatachalam)  [Orabug: 36725601]  
  - drives: soc: marvell: Remove unnecessary warnings about reset counters (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: support to print reset counters (Selvam Venkatachalam)  [Orabug: 36725601]  
  - drives: soc: marvell: Fixes conversion for BOARD-MAC-ADDRESS-ID-NUM in octeontx_info (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Fixes unnecessary logging from octeontx info driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Fix OcteonTX info driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Adds MAC addressess overview to board info (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Display version information for flash components (Aaron Williams)  [Orabug: 36725601]  
  - drives: soc: marvell: publish no of macs in octeontx_info node (Sujeet Baranwal)  [Orabug: 36725601]  
  - drives: soc: marvell: Alter ways of mac address parsing (Sujeet Baranwal)  [Orabug: 36725601]  
  - drives: soc: marvell: Board info logic reorg (Sujeet Baranwal)  [Orabug: 36725601]  
  - drives: soc: marvell: Board information made available (Sujeet Baranwal)  [Orabug: 36725601]  
  - octeontx2-pf: disable preemption while using per_cpu pointer (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Dereference only a valid pointer (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Allow pkts of size morethan MTU to be transmitted (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Skip dma map and unmap when IOMMU is bypassed (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-pf: Add missing changes in otx2_ethtool.c (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-sdpvf: Fix PTP options for SDP interfaces (Roy Franz)  [Orabug: 36725601]  
  - octeontx2-vf: Add partial ethtool support for SDP VFs (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-pf: Support to enable EDSA/Higig2 pkts parsing (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Add ethtool -m option support. (Christina Jacob)  [Orabug: 36725601]  
  - octeontx2-pf: Avoid null pointer dereference (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-vf: Export symbol 'otx2_config_serdes_link_state' (Rakesh Babu)  [Orabug: 36725601]  
  - octeontx2-pf: devlink param support to modify physical interface links. (Rakesh Babu)  [Orabug: 36725601]  
  - octeontx2-pf: Add devlink param to vary rbuf size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Add devlink param to vary cqe size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Add devlink support to configure TL1 RR_PRIO (Hariprasad Kelam)  [Orabug: 36725601]  
  - soc: marvell: otx2: Fix initcall funciton should return an 'int' (Vasyl Gomonovych)  [Orabug: 36725601]  
  - soc: marvell: otx2: Fix old kzfree (Vasyl Gomonovych)  [Orabug: 36725601]  
  - octeontx2-af: support for custom L2 header (Satheesh Paul A)  [Orabug: 36725601]  
  - octeontx2-af: Add mbox to alloc/free BPIDs (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Dynamically allocate bpids for CPT and LBK (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: add programming SDP BPID in cn10k (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: Fix BPID calculation for SDP (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - crypto: octeontx2: add ctx_val workaround (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: fix rsa verify (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: fix dma unmap issue with ahash (Srujana Challa)  [Orabug: 36725601]  
  - arm64: Enable Spectre BHB mitigation for Marvell OcteonTx2 cpus (Linu Cherian)  [Orabug: 36725601]  
  - mtd: spi-nor: winbond: Update w25q256fw flash memory to use 4B opcodes (Witold Sadowski)  [Orabug: 36725601]  
  - mtd: spi-nor: macronix: Add support for mx25um51245g (Witold Sadowski)  [Orabug: 36725601]  
  - mailbox: mvl-mhu: update copyright note (Wojciech Zmuda)  [Orabug: 36725601]  
  - scmi: mailbox: increase timeout for rx response (Jayanthi Annadurai)  [Orabug: 36725601]  
  - clk: control device frequency using sysfs (Wojciech Bartczak)  [Orabug: 36725601]  
  - scmi: perf: octtx2: round off OPP frequencies to neaest 100 (Sujeet Baranwal)  [Orabug: 36725601]  
  - scmi: mailbox: modifies rx buffer size and timeout for rx response (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Cleanup dead code (Wojciech Bartczak)  [Orabug: 36725601]  
  - mailbox: marvell: Initialize interrupts only if there's client for data (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Reject non-configured CPC instances (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Add support for LPI/SPI interrupt configuration in MHU (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Remove superfluous mutex in MHU implementation (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: MHU: Driver adjustment for 10x based octeontx platforms (Wojciech Bartczak)  [Orabug: 36725601]  
  - Marvell MHU: Fixes locking mechanism in MHU driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - mailbox: add OcteonTX2 MHU mailbox driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - soc: marvell: otx2: Enable MSI-X interrupts (Vasyl Gomonovych)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add error injection interface (Vasyl Gomonovych)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add BERT support for OTX2 (Vasyl Gomonovych)  [Orabug: 36725601]  
  - EDAC: Octeon: Add Marvell's OcteonTx2 SoC and CN10KA SoC EDAC driver (Vasyl Gomonovych)  [Orabug: 36725601]  
  - mmc: octeontx2: ACPI support added for eMMC driver for T9x. (Piyush Malgujar)  [Orabug: 36725601]  
  - mmc: octeontx2: Resolve issues reported by static analysis (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Removes static variables in tuning code (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Add MMC polling method to support kmsg panic/oops write (Bhaskara Budiredla)  [Orabug: 36725601]  
  - mmc: octeontx2: cleanup mmc_oops driver (Bhaskara Budiredla)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds CMD tuning for eMMC HS200 mode (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Cleans up mmc code and prepare it for HS200 tuning update (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds device tree entries to control eMMC input timings (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds a way to dynamically control eMMC bus input timings (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds new overrides for eMMC bus output timings (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds mechanism to modify output timings for MMC bus (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: enables mmc polling for pstore path (Bhaskara Budiredla)  [Orabug: 36725601]  
  - mmc: octeontx2: fix handling calibration glitch (Aaron Williams)  [Orabug: 36725601]  
  - mmc: octeontx2: Configure flags for T96 pass B0 (Chandrakala Chavva)  [Orabug: 36725601]  
  - mmc: octeontx2: Use flags for hardware differences (Aaron Williams)  [Orabug: 36725601]  
  - mmc: octeontx2: Fix tuning for T96 C0 (Chandrakala Chavva)  [Orabug: 36725601]  
  - mmc: octeontx2: Add tuning support for HS400 mode (Aaron Williams)  [Orabug: 36725601]  
  - mmc: octeontx2: speed limit for tx2-c0 (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: use calibrated timing taps (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: do not drop bus lock in tuning (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: slot switch by vqmmc/gpio (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: reorganize before vqmmc switching (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: cmd and data out values fixture (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: amend hs400 tuning (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: correct clock divisor (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: fix swiotlb buffer is full (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: avoid single-slot startup issues (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: execute_tuning for octeontx2 (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: track & apply CMD6 bus changes ASAP (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: cn96xx HS200-8wide-100MHz (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: CMD19/21 type correction (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: finish_dma_single() should teardown/unmap (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: use device tree entries (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: emmc tuning for delay (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: skip unavailable slots (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: calibrate tap delay (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: incorporate hw interface io ctl params (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: interrupt addition for ncb fault (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: emmc operation limited to 100 MHz (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: fix shutdown deadlock with active sd-card (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: Configure sample command and data directly (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: Use proper register to clear interrupts (Chandrakala Chavva)  [Orabug: 36725601]  
  - mmc: octeontx2: add check for 8/9xxx chips (Sujeet Baranwal)  [Orabug: 36725601]  
  - firmware: octeontx2: sfp-info: Update sfp_info_data (Piyush Malgujar)  [Orabug: 36725601]  
  - firmware: octeontx2: sfp-info: check supported platforms first (Damian Eppel)  [Orabug: 36725601]  
  - firmware: octeontx2: sfp-info: added support for t9x (Damian Eppel)  [Orabug: 36725601]  
  - firmware: octeontx2: sysfs driver for dumping sfp info (Damian Eppel)  [Orabug: 36725601]  
  - misc: bphy: disable ctr module on non-BPHY boards (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: prevent out-of-bound array iteration (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Restore static resource allocation (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Fix resource release sequence (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Add ioctl to get BPHY irqs bitmask (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Get max irq number from firmware (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Add ioctl to get max irq number (Jakub Palider)  [Orabug: 36725601]  
  - drivers: cleanup el3 handler only if parent process exits (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - misc: otx_bphy_ctr: Add OcteonTx2 BPHY control driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - spi: cadence: Add Marvell IP modification changes (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Add read access size switch (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Change dt-bindings documentation for Cadence XSPI controller (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Add polling mode support (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Change dt-bindings documentation for Cadence XSPI controller (Witold Sadowski)  [Orabug: 36725601]  
  - Firmware: mub: Add Marvell Utility Bus. (sdonelli)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: minor updates (Srikanth Pidugu)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: more debug capabilities (Srikanth Pidugu)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: unified SoC check (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: page access support (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: driver update (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics debugfs driver (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: mvmdio_uio: paged access support (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: mvmdio_uio: lock on accessing mdio bus (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: MDIO uio driver (Damian Eppel)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: use ioremap() instead of ioremap_nocache (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: update ethtool drop stats when mbt erros are set (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: Added FEC stats in debugfs. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: update ethtool drop stats (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add new secondary BCN offset for slave (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: enable skb list processing for delay_request. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add new fields in ethtool stats (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Set external_clock_rate for all RFOE interfaces. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev:cnf10k: Share RFOE PTP offset with host (Roy Franz)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Avoid ptp skb list processing in 1-step mode (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: update drop stats when psw errors are set (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: check psm queue space for ptp queue (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Use atomic update feature to update PTP clock (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Enable force_cond_clk_en bit (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Recalculate UDP checksum. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix updating rx byte stats (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: new entry to dump RPM stats (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: new entry to dump timestamp ring (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: new entry to dump jdt ring (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: Add new debugfs root entry (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix for PTP BCN delta (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use PTP ring tail index to read timestamp (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: PTP 1-step improvements (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev:: Share RFOE PTP offset with host (Roy Franz)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: PTP BCN synchronization support for CNF10k platforms. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add cnf10k rfoe debugfs (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf105xxn: fix ptp timestamp in master mode (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: convert MIO_PTP_TIMESTAMP value to nsecs (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix updating JD pkt length and blocksize (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix improper names used for IRQs. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: IOCTL to read input clock parameters. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cnf10k link state set (Baha Mesleh)  [Orabug: 36725601]  
  - otx2-bphy-netdev: synchronize BCN to PTP slave clock. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: stop pkt transmission when psm queue is disabled (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: fix ptp timestamp in master mode (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix compilation warning (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: use platform_get_irq_optional for PSM GPINT2 (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix incorrect PTP clock frequency. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: ptp: use 950MHz clock for ptp slave (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: ptp: Fix ptp clock counter read (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ethtool stats string order (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: add PTP slave support. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix ptp hardware clock counter conversion (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - cnf10k-rfoe: skb shinfo falls on a different cacheline, avoid reading it (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Adjust structure elements to reduce cache misses (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Avoid costly iova_to_virt of packet dma address in xmit (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Cleanup packet stats maintenance (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Optimize packet length retrieval for non-ecpri packets (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Remove duplicate error checking (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: use sw timecounter for ptp phc (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Add PTP 2S legacy mode support. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - oceontx2-bphy-netdev: cnf10k: Fix 1S sync timestamp fields. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: re-enable cpri gpint when interface is stopped (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cpri interrupt handling (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10kb: 1-step PTP support for CNF10KB. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cpri: Add missing ethtool stats (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix CNF10K_CPRIX_ETH_UL_INT clearing (Janne Kukkonen)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Modify PTP timestamp format. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cnf10k ecpri rx packet issue (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10kb: Add PTP slave support for CNF10KB. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: add cpri netdev support (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: add prefix for cnf10k registers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: move duplicate code to common headers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - cnf10k-rfoe: Prepend 8-byte PTP header to packets in PTP queue. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95: add jumbo frame support (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: 1-step PTP and slave support. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: rfoe netdev cleanup (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: convert psw ptp timestamp to cpu byte order (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix missing ioctls on CNF10K (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: move common ptp structures to rfoe_common.h (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy: Fix issues reported by static analysis. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - cnf10k: rfoe: add jumbo frame support to cnf10k (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: rfoe: fix ptp4l bad message issue (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy: Add PTP slave and external PTP input clock support in RFOE PHC driver. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix tx ptp ring entry format change (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cpri rx packet handling (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: ptp: Fix ptp timestamp reading across lmacs (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix incorrect ptp tstamp entry size (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: cnf10kb: add support for psm gpint2 interrupt (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix possibility of processing the mbt multiple times (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix link carrier state update (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: limit cpri error logging rate (Baha Mesleh)  [Orabug: 36725601]  
  - otx2-bphy-netdev: cn10k: fix NULL pointer dereference (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: fix offset of cn10k registers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: remove unwanted debug message (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: added cnf10k bphy netdev functionality (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: separate bphy common code into separate files (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: disable cpri code when cpri hw is not present (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: add debugfs support (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: don't process a packet when psw indicates error (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cpri: fix compilation warnings (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add rfoe rx vlan forwarding configuration (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: avoid multiple kfree of common lmac objects (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix common lmac resource free (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix cleanup sequence in char device release (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: remove unnecessary check when setting INTF_DOWN flag (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add timeout to ptp transmit timestamp polling (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix napi schedule issue when intf is down (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ptp tx processing race condition (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added RFOE LMAC stats to ethtool (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add PTP hardware clock support to rfoe interfaces (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix list_entry usage in the code (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added ioctl to set low level link state (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ptp pending skb list processing (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix kernel crash with ioctl trying to add timer (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Set minimum length of Tx packets to 64 bytes (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Enable accessing RFOE_RX_IND regs before odp netdev init (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Enable MSIXEN bit in IOCTL handler (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: Add support for registering both rfoe and cpri netdev intf (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: Add support for configurable PTP clock rate (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeonx2-bphy-netdev: Add support for switching mode from RFOE to CPRI (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add support for CPRI Ethernet packet processing (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: segregate chardev specific code (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix NULL pointer dereference (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Enable MSIXEN bit in MSIX CAP HDR (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added PTP BCN offset algorithm (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added ioctl to access RFOE_RX_IND registers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added support for configurable packet types (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: netdev cleanup in char dev close (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix napi scheduling issue when interface is down (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: added full packet dump of mbt buffer (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - OcteonTX2 BPHY RFOE netdev driver initial version (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: extend context reading capability (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add mapping for mcs registers (Ankur Dwivedi)  [Orabug: 36725601]  
  - soc: marvell: hw-access: register access via debugfs (Sumit Gaur)  [Orabug: 36725601]  
  - soc: marvell: hw_access: fix pci resource leak (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: fix csr mapping range (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: Extend available ranges (Jakub Palider)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add support to read aura/pool context (Ashwin Sekhar T K)  [Orabug: 36725601]  
  - soc: marvell: hw_access: get cgx info (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add hw context reading support (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: cleaning up existing hw access driver (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: renaming to hw access driver (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: Driver to access and modify device CSRs. (Rakesh Babu)  [Orabug: 36725601]  
  - drivers: soc: fwlog: use max_t instead of max (Pragnesh Patel)  [Orabug: 36725601]  
  - fwlog: fix invalid pointers and copy size in wraparound case (Aaro Koskinen)  [Orabug: 36725601]  
  - drivers: soc: fwlog: fix mapped size (Pragnesh Patel)  [Orabug: 36725601]  
  - drivers: soc: fwlog: Add firmware bootlog support (Pragnesh Patel)  [Orabug: 36725601]  
  - drivers: mmc: sdhci-cadence: Interrupt handling workaround (Jayanthi Annadurai)  [Orabug: 36725601]  
  - drivers: soc: Adds common Marvell OcteonTX header for SMC calls (sdonelli)  [Orabug: 36725601]  
  - octeontx2-af: Update HW workarounds for 96xx C0, 98xx and F95xx B0 chips (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: add TIM adjust GTI errata workaround (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: devlink params to configure TIM (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: add support for changing vlan tpid (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: rvu: enable mcs fips mailboxes (Ankur Dwivedi)  [Orabug: 36725601]  
  - octeontx2-af: Check the msix offset return value (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: NDC sync op af mbox support (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: Move QMEM allocations from GFP_KERNEL to ATOMIC (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: sync kernel structures with firmware (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Add missing stats (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: mcs: add mailboxes for fips (Ankur Dwivedi)  [Orabug: 36725601]  
  - octeontx2-af: convert dev_dbg to tracepoint in mbox (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Introducing REE block for 98xx (Smadar Fuks)  [Orabug: 36725601]  
  - octeontx2-af: Add support for SPI to SA index translation (Kiran Kumar K)  [Orabug: 36725601]  
  - drivers: sdhci: Add option to configure sdhci timeout (Jayanthi Annadurai)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: Add debug option for SD6 controller (Jayanthi Annadurai)  [Orabug: 36725601]  
  - dt-bindings: mmc: sdhci-cadence: SD6 support (Jayanthi Annadurai)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: enable MMC_SDHCI_IO_ACCESSORS support (Jayanthi Annadurai)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: SD6 controller support (Dhananjay Kangude)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: Restructure the code (Dhananjay Kangude)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: Rename functions/structures to SD4 specific (Dhananjay Kangude)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: Change GPIO level interrupt handler to handle_level_irq (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: extend PIN_SEL to cover cn96xx (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: Configure pin function at probe (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: avoid potential deadlock (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: ACPI support for SPI driver (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: Resolve issues detected in static code analysis (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: Add fix for hw issue (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: use read after write for MPI_CFG (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: set tritx in config register (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: Support for octeontx2 spi controller (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for creating netdev interfaces for SDP VFs (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: add support for CPT second pass (Rakesh Kudurumalla)  [Orabug: 36725601]  
  - octeontx2-af: support overriding aura to zero for second pass (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for ECDH (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: notify VF about ptp event (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: Sending tsc value to the userspace (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: extend npa context reading capability (Ashwin Sekhar T K)  [Orabug: 36725601]  
  - octeontx2-af: allow second pass pkts via default ucast entry (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: suppress kpu profile loading warning (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: use cpt channel mask in flow install path (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: fix arguments passed to XAQ aura deinit (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: Support for FDSA tag (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Code placement for cgx.c (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Gracefully skip the cgx_probe for unmapped devices. (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: link mode mapping (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Limit number of CGX blocks (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: rvu_cgx code placement (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Support for PTP notification to PF (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add programmed macaddr to RVU pfvf (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Show count of dropped packets by DMAC filters (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Skip CGX probe if not connected to NIX (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: RPM extend csr address for T105N (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: new Interface modes support (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Do not allow VFs to overwrite PKIND config (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Put CGX LMAC also in Higig2 mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add new CGX_CMDs to set and get PHY modulation type (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Handle physical link state change requests (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: update address of global CGX RX_STATS (Hariprasad Kelam)  [Orabug: 36725601]  
  - crypto: octeontx: enable driver (Harman Kalra)  [Orabug: 36725601]  
  - crypto: octeontx-83: enable crypto device in domain (Harman Kalra)  [Orabug: 36725601]  
  - arm64: Add support for ASID locking (Alex Belits)  [Orabug: 36725601]  
  - kernel/exit.c: Add task cleanup callbacks (Alex Belits)  [Orabug: 36725601]  
  - PCI: octeontx-83: add new quirks (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: add new mbox to support sync cycle on rx path (Satha Rao)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to enable or disable BP on CPT link (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: fix LBK backpressure config (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: set default min and max rx len for CPT link (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for CPT1 in VF driver (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for rsa sign and verify (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for gcm(aes) (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for akcipher rsa (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for hash algorithms (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: TIM: Set conditional clock always on (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Apply relevant HW issue workarounds for 96xx B0 silicon (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: add NIX mbox message to get HW info (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: sync changes missed from tim (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: ignore sso lf count when checking pffunc validity (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix TIM disable lf sequence (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: use clock source to compute start cycle (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: reduce TIM TENNS clock source interval (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: fix incorrect TIM interval array size (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: update clock source offset (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: track timer ring intervals (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Setup edge used for GPIO timing (Michal Mazur)  [Orabug: 36725601]  
  - octeontx2-af: fix TIM slot to lf lookup (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add TIM LF teardown (Stanislaw Kardach)  [Orabug: 36725601]  
  - octeontx2-af: fix TIM block address usage (Stanislaw Kardach)  [Orabug: 36725601]  
  - octeontx2-af: update TIM 10ns clk source min interval (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Verify NPA/SSO/NIX PF_FUNC mapping (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: add workaround for TIM reverse lookup (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Add TIM unit support. (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: sync changes missed from sso (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: serialize bar2 alias access (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: add read back of AF_BAR2_SEL register (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: add support for SSO WQE stashing (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add SSO XAQ AURA access errata workaround (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: timeout while draining SSO queues (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: cycle through SSO queues to drain work (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: use SSO HWS AF invalidate instead of LF invalidate (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix atomic load on NPA LF registers (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: drain XAQ buffers before lf teardown (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix implitit variable array (Stanislaw Kardach)  [Orabug: 36725601]  
  - octeontx2-af: add intradevice FLR handling (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add additional description to irqs (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add ratelimit to limit the asynchronous err messages (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: add debugfs support for sso (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: remove support to limit xaq depth (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: allow lower threshold in sso group qos mbox (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: update SSO HWS invalidate mbox definition (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to configure SSO group mask (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: enable SSO work interrupt periodic counter (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: invalidate GWC before accessing workslot (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: enable getwork prefetching (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: ratelimit digest prints (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to configure SSO LSW (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fixes for SSO FLR (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: enhance SSO FLR for CN10K (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: add SSO mbox message to release XAQ aura (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: reset HWS group mask during FLR (Michal Mazur)  [Orabug: 36725601]  
  - octeontx2-af: Fix reading SSOW_LF_GWS_TAG after rvu_poll_reg() (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: Make SSO/SSOW LF teardown less CPU intensive (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: add sso error af interrupt handlers (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix rvu_sso_ggrp_taq_flush (Angela Czubak)  [Orabug: 36725601]  
  - octeontx2-af: drain xaq before reconfiguring aura (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: restore sso hwgrp default thresholds (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: manually dain partially consumed TAQ buffers (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: update SSO HWGRP teardown sequence (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: update SSO GWS teardown sequence (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to get SSO GWS/GGRP stats (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to configure thresholds per HWGRP (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Add SSO unit support to the AF driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - irqchip/gicv3-its: Workaround for Marvell errata 35443 for 9xx (Geetha sowjanya)  [Orabug: 36725601]  
  - irqchip/gic-v3: Extend workaround for interrupt loss on IPI (Linu Cherian)  [Orabug: 36725601]  
  - irqchip/gic-v3: Add workaround for interrupt loss on IPI (Linu Cherian)  [Orabug: 36725601]  
  - iommu/arm-smmu-v3: Force 32 byte command queue memory reads (Linu Cherian)  [Orabug: 36725601]  
  - octeontx2-pf: Add ucast filter count configurability via devlink. (Sai Krishna)  [Orabug: 36725601]  
  - devlink: add documentation for octeontx2 driver (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: ecc - Move ecc.h to include/crypto/internal (Daniele Alessandrelli)  [Orabug: 36725601]  
  - arm64: cpufeature: Add missing .field_width for GIC system registers (Mark Brown)  [Orabug: 36725601]  
  - octeontx2-af: Fix devlink params (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: fix the double free in rvu_npc_freemem() (Su Hui)  [Orabug: 36725601] {CVE-2024-36030}
  - octeontx2-af: Fix multicast/mirror group lock/unlock issue (Suman Ghosh)  [Orabug: 36725601]  
  - net: flower: fix stack-out-of-bounds in fl_set_key_cfm() (Eric Dumazet)  [Orabug: 36725601]  
  - Watchdog: marvell_gti_wdt: Remove redundant dev_err_probe() for platform_get_irq() (Jinjie Ruan)  [Orabug: 36725601]  
  - watchdog: marvell_gti_wdt: Fix error code in probe() (Dan Carpenter)  [Orabug: 36725601]  
  - crypto: octeontx2 - add missing check for dma_map_single (Chen Ni)  [Orabug: 36725601]  
  - i2c: xgene-slimpro: Fix wrong pointer passed to PTR_ERR() (Wei Yongjun)  [Orabug: 36725601]  
  - octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Fix transmit scheduler resource leak (Hariprasad Kelam)  [Orabug: 36725601] {CVE-2024-35975}
  - Octeontx2-pf: Free send queue buffers incase of leaf to inner (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation (Asbjørn Sloth Tønnesen)  [Orabug: 36725601]  
  - crypto: octeontx2 - select CONFIG_NET_DEVLINK (Shijith Thotton)  [Orabug: 36725601]  
  - perf/smmuv3: Fix unused variable warning when CONFIG_OF=n (Will Deacon)  [Orabug: 36725601]  
  - net: octeontx2-pf: mcs: consider MACSEC setting (Randy Dunlap)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Fix NULL pointer dereferences (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Clear stats before freeing resource (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Do not reset PN while updating secy (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: update PN only when update_pn is true (Radu Pirea (NXP OSS))  [Orabug: 36725601]  
  - octeontx2-pf: Fix pfc_alloc_status array overflow (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Fix linking objects into multiple modules (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Do xdp_do_flush() after redirects. (Sebastian Andrzej Siewior)  [Orabug: 36725601]  
  - crypto: ecc - Export additional helper functions (Daniele Alessandrelli)  [Orabug: 36725601]  
  - arm64: cpufeature: Always specify and use a field width for capabilities (Mark Brown)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for mirror (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Add TC flower offload support for TCP flags (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for ICMP type and code (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Tc flower offload support for MPLS (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Harden rule validation. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for SPI field (Ratheesh Kannoth)  [Orabug: 36725601]  
  - net: flow_dissector: Add IPSEC dissector (Ratheesh Kannoth)  [Orabug: 36725601]  
  - net: flow_dissector: add support for cfm packets (Zahari Doychev)  [Orabug: 36725601]  
  - flow_dissector: Add support for HSRv0 (Kurt Kanzenbach)  [Orabug: 36725601]  
  - flow_dissector: Add support for HSR (Kurt Kanzenbach)  [Orabug: 36725601]  
  - octeontx2-af: Initialize maps. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Fix a double free issue (Suman Ghosh)  [Orabug: 36725601]  
  - Octeontx2-af: Fix an issue in firmware shared data reserved space (Hariprasad Kelam)  [Orabug: 36725601]  
  - Octeontx2-af: Fetch MAC channel info from firmware (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Send UP messages to VF only when VF is up. (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: CN10KB: Fix FIFO length calculation for RPM2 (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2 - By default allocate one CPT LF per CPT VF (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-af: Fix pause frame configuration (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add new devlink param to configure maximum usable NIX block LFs (Suman Ghosh)  [Orabug: 36725601]  
  - drivers: watchdog: marvell_gti: fix zero pretimeout handling (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for offload tc with skbedit mark action (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Use default max_active works instead of one (Subbaraya Sundeep)  [Orabug: 36725601]  
  - net: octeontx2: Use alloc_ordered_workqueue() to create ordered workqueues (Tejun Heo)  [Orabug: 36725601]  
  - octeontx2-pf: Wait till detach_resources msg is complete (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Add new mbox to support multicast/mirror offload (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Fix page pool frag allocation warning (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: update type of prof fields in nix_aw_enq_req (Simon Horman)  [Orabug: 36725601]  
  - octeontx2-pf: Fix page pool cache index corruption. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: fix page_pool creation fail for rings > 32k (Ratheesh Kannoth)  [Orabug: 36725601]  
  - tc: flower: Enable offload support IPSEC SPI field. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - tc: flower: support for SPI (Ratheesh Kannoth)  [Orabug: 36725601]  
  - net: flower: add support for matching cfm fields (Zahari Doychev)  [Orabug: 36725601]  
  - net/sched: flower: Helper function for vlan ethtype checks (Boris Sukholitko)  [Orabug: 36725601]  
  - net/sched: flower: Allow matching on layer 2 miss (Ido Schimmel)  [Orabug: 36725601]  
  - net/sched: flower: Add L2TPv3 filter (Wojciech Drewek)  [Orabug: 36725601]  
  - net/sched: flower: Add PPPoE filter (Wojciech Drewek)  [Orabug: 36725601]  
  - net/sched: flower: Add number of vlan tags filter (Boris Sukholitko)  [Orabug: 36725601]  
  - octeontx2-af: Move validation of ptp pointer before its usage (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: CN10KB: fix PFC configuration (Hariprasad Kelam)  [Orabug: 36725601]  
  - drivers: watchdog: marvell_gti: Program the max_hw_heartbeat_ms (George Cherian)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Generate hash key using ecb(aes) (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Promisc enable/disable through mbox (Ratheesh Kannoth)  [Orabug: 36725601]  
  - crypto: octeontx2 - support setting ctx ilen for inline CPT LF (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-pf: Fix graceful exit during PFC configuration failure (Suman Ghosh)  [Orabug: 36725601]  
  - cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for rxqueue mapping (Ratheesh Kannoth)  [Orabug: 36725601]  
  - act_skbedit: skbedit queue mapping for receive queue (Amritha Nambiar)  [Orabug: 36725601]  
  - net/sched: act_skbedit: Add extack messages for offload failure (Ido Schimmel)  [Orabug: 36725601]  
  - octeontx2-af: TC flower offload support for inner VLAN (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Code restructure to handle TC outer VLAN offload (Suman Ghosh)  [Orabug: 36725601]  
  - dt-bindings: watchdog: marvell GTI system watchdog driver (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for page pool (Ratheesh Kannoth)  [Orabug: 36725601]  
  - Watchdog: Add marvell GTI watchdog driver (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-af: Fix promiscuous mode (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Remove the PF_FUNC validation for NPC transmit rules (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2 - add devlink option to set t106 mode (Srujana Challa)  [Orabug: 36725601]  
  - ptp: idt82p33: remove PEROUT_ENABLE_OUTPUT_MASK (Min Li)  [Orabug: 36725601]  
  - ptp: idt82p33: Add PTP_CLK_REQ_EXTTS support (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: return -EBUSY if phase pull-in is in progress (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: fix is_single_shot (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Add PTP_CLK_REQ_EXTTS support (Min Li)  [Orabug: 36725601]  
  - ptp: idt82p33: use rsmu driver to access i2c/spi bus (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: repair non-kernel-doc comment (Randy Dunlap)  [Orabug: 36725601]  
  - ptp: clockmatrix: use rsmu driver to access i2c/spi bus (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Add support for pll_mode=0 and manual ref switch of WF and WP (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Add support for FW 5.2 (8A34005) (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Remove idtcm_enable_tod_sync() (Min Li)  [Orabug: 36725601]  
  - octeontx2-af: Fix mcs sa cam entries size (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Remove xdp queues on program detach (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: ethtool expose qos stats (Hariprasad Kelam)  [Orabug: 36725601]  
  - macsec: Use helper macsec_netdev_priv for offload drivers (Subbaraya Sundeep)  [Orabug: 36725601]  
  - macsec: Don't rely solely on the dst MAC address to identify destination MACsec device (Emeel Hakim)  [Orabug: 36725601]  
  - vlan: Add MACsec offload operations for VLAN interface (Emeel Hakim)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Support VLAN in clear text (Subbaraya Sundeep)  [Orabug: 36725601]  
  - ethtool: add support to set/get completion queue event size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Adjust Tx credits when MCS external bypass is disabled (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2 - register error interrupts for inline cptlf (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Fix MCS block interrupt (Geetha sowjanya)  [Orabug: 36725601]  
  - irqchip/gic-v3: Detect LPI invalidation MMIO registers (Marc Zyngier)  [Orabug: 36725601]  
  - irqchip/gic-v3: Exposes bit values for GICR_CTLR.{IR, CES} (Marc Zyngier)  [Orabug: 36725601]  
  - octeontx2-af: Enable hardware timestamping for VFs (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Fix hash extraction enable configuration (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Restore TC ingress police rules when interface is up (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2 - add LF reset on queue disable (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Fix shared counters logic (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Match macsec ethertype along with DMAC (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeonxt2-af: mcs: Fix per port bypass config (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Write TCAM_DATA and TCAM_MASK registers at once (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Fix issues with NPC field hash extract (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Fix PFC TX scheduler free (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: print error message incase of invalid pf mapping (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Fix depth of cam and mem table. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Fix start and end bit for scan config (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Update correct mask to filter IPv4 fragments (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: update CQ context fields (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Offload extended packet number(XPN) feature (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Add devlink option to adjust mcam high prio zone entries (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Update/Fix NPC field hash extract feature (Ratheesh Kannoth)  [Orabug: 36725601]  
  - crypto: octeontx2 - remove errata workaround for CN10KB or CN10KA B0 chip. (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - add ctx_val workaround (Srujana Challa)  [Orabug: 36725601]  
  - perf/uapi: Define PERF_MEM_SNOOPX_PEER in kernel header file (Ravi Bangoria)  [Orabug: 36725601]  
  - octeontx2-af: cn10kb: fix interrupt csr addresses (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Config parser to skip 8B header (Geetha sowjanya)  [Orabug: 36725601]  
  - net: macsec: remove the prepare flag from the MACsec offloading context (Antoine Tenart)  [Orabug: 36725601]  
  - net: atlantic: macsec: remove checks on the prepare phase (Antoine Tenart)  [Orabug: 36725601]  
  - net: phy: mscc: macsec: remove checks on the prepare phase (Antoine Tenart)  [Orabug: 36725601]  
  - net: macsec: remove the prepare phase when offloading (Antoine Tenart)  [Orabug: 36725601]  
  - net: atlantic: macsec: make the prepare phase a noop (Antoine Tenart)  [Orabug: 36725601]  
  - net: phy: mscc: macsec: make the prepare phase a noop (Antoine Tenart)  [Orabug: 36725601]  
  - octeontx2-af: CN10KB: Add USGMII LMAC mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Enable PTP PPS output support (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Use PTP HW timestamp counter atomic update feature (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2: Remove unnecessary ternary operators (Ruan Jinjie)  [Orabug: 36725601]  
  - arm64: mm: Convert to GENERIC_IOREMAP (Kefeng Wang)  [Orabug: 36725601]  
  - mm: ioremap: Use more sensible name in ioremap_prot() (Kefeng Wang)  [Orabug: 36725601]  
  - mailbox: pcc: Use PCC mailbox channel pointer instead of standard (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Add pcc_mbox_chan structure to hold shared memory region info (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Consolidate subspace doorbell register parsing (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Consolidate subspace interrupt information parsing (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Refactor all PCC channel information into a structure (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Fix kernel doc warnings (Sudeep Holla)  [Orabug: 36725601]  
  - of: Add of_get_cpu_hwid() to read hardware ID from CPU nodes (Rob Herring)  [Orabug: 36725601]  
  - genirq: GENERIC_IRQ_EFFECTIVE_AFF_MASK depends on SMP (Samuel Holland)  [Orabug: 36725601]  
  - ACPI: irq: Allow acpi_gsi_to_irq() to have an arch-specific fallback (Marc Zyngier)  [Orabug: 36725601]  
  - ACPI: irq: Fix some kernel-doc issues (Xiongfeng Wang)  [Orabug: 36725601]  
  - APCI: irq: Add support for multiple GSI domains (Marc Zyngier)  [Orabug: 36725601]  
  - octeontx2-af: Add validation for lmac type (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Fix devlink unregister (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Free pending and dropped SQEs (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2: Detect the mbox up or down message via register (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Install TC filter rules in hardware based on priority (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Increase the size of dmac filter flows (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Allow both ntuple and TC features on the interface (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Prepare for QOS offload (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: htb offload support for Round Robin scheduling (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: implement transmit schedular allocation algorithm (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for HTB offload (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Fix resource leakage in VF driver unbind (Hariprasad Kelam)  [Orabug: 36725601] {CVE-2023-52905}
  - octeontx2-pf: Refactor schedular queue alloc/free calls (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: qos send queues management (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Fix SQE threshold checking (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Rename tot_tx_queues to non_qos_queues (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add filter profiles in hardware to extract packet headers (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions (Christophe JAILLET)  [Orabug: 36725601]  
  - spi: cadence: Ensure data lines set to low during dummy-cycle period (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Fix busy cycles calculation (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Remove redundant dev_err call (Shang XiaoJing)  [Orabug: 36725601]  
  - spi: cadence: fix platform_get_irq.cocci warning (Yihao Han)  [Orabug: 36725601]  
  - spi: cadence: Add of_node_put() before return (Wan Jiabing)  [Orabug: 36725601]  
  - spi: cadence: fix static checker warning (Parshuram Thombare)  [Orabug: 36725601]  
  - spi: cadence: Fix spelling mistake "nunber" -> "number" (Colin Ian King)  [Orabug: 36725601]  
  - spi: cadence: add support for Cadence XSPI controller (Parshuram Thombare)  [Orabug: 36725601]  
  - spi: cadence: add dt-bindings documentation for Cadence XSPI controller (Parshuram Thombare)  [Orabug: 36725601]  
  - Documentation: arm64: Document PMU counters access from userspace (Raphael Gault)  [Orabug: 36725601]  
  - octeontx2-af: Add missing mcs flr handler call (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Fix mcs stats register address (Geetha sowjanya)  [Orabug: 36725601]  
  - i2c: octeon: Handle watchdog timeout (Suneel Garapati)  [Orabug: 36725601]  
  - i2c: octeon: Add platform prefix to macros (Piyush Malgujar)  [Orabug: 36725601]  
  - i2c: thunderx: Support for High speed mode (Suneel Garapati)  [Orabug: 36725601]  
  - i2c: thunderx: Clock divisor logic changes (Suneel Garapati)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Set NIX DWRR MTU for CN10KB silicon (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Increase outstanding LMTST transactions (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Fix copy and paste bug in mcs_bbe_intr_handler() (Dan Carpenter)  [Orabug: 36725601]  
  - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Add support to filter packet based on IP fragment (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Add additional checks while configuring ucast/bcast/mcast rules (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Don't treat lack of CGX interfaces as error (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-pf: Reset MAC stats during probe (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: Reset MAC features in FLR (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add FEC stats for RPM/RPM_USX block (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: cn10kb: Add RPM_USX MAC support (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Support variable number of lmacs (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - net: thunderx: remove null check after call container_of() (Haowen Bai)  [Orabug: 36725601]  
  - octeontx2-af: Removed unnecessary debug messages. (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: Enable LBK links only when switch mode is on. (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Add NIX Errata workaround on CN10K silicon (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: add option to toggle DROP_RE enable in rx cfg (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2 - update CPT inbound inline IPsec mailbox (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - add support for AF to CPT PF uplink mbox (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - add SGv2 support for CN10KB or CN10KA B0 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - hardware configuration for inline IPsec (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - Fix objects shared between several modules (Alexander Lobakin)  [Orabug: 36725601]  
  - crypto: octeontx2 - remove CPT block reset (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - increase CPT HW instruction queue length (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - Remove the unneeded result variable (ye xingchen)  [Orabug: 36725601]  
  - crypto: octeontx2 - simplify the return expression of otx2_cpt_aead_cbc_aes_sha_setkey() (Minghao Chi)  [Orabug: 36725601]  
  - crypto: octeontx2 - use swap() to make code cleaner (chiminghao)  [Orabug: 36725601]  
  - crypto: drivers - move from strlcpy with unused retval to strscpy (Wolfram Sang)  [Orabug: 36725601]  
  - crypto: octeontx2 - fix potential null pointer access (Shijith Thotton)  [Orabug: 36725601]  
  - crypto: octeontx2 - add firmware version in devlink info (Shijith Thotton)  [Orabug: 36725601]  
  - crypto: octeontx2 - disable DMA black hole on an DMA fault (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - CN10K CPT to RNM workaround (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - Use swap() instead of swap_engines() (Jiapeng Chong)  [Orabug: 36725601]  
  - crypto: octeontx2 - Avoid stack variable overflow (Kees Cook)  [Orabug: 36725601]  
  - crypto: octeontx2 - out of bounds access in otx2_cpt_dl_custom_egrp_delete() (Dan Carpenter)  [Orabug: 36725601]  
  - crypto: octeontx2 - add apis for custom engine groups (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - fix missing unlock (Yang Yingliang)  [Orabug: 36725601]  
  - crypto: octeontx2 - add synchronization between mailbox accesses (Harman Kalra)  [Orabug: 36725601]  
  - crypto: octeontx2 - parameters for custom engine groups (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: update CPT inbound inline IPsec config mailbox (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: restore rxc conf after teardown sequence (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to return CPT_AF_FLT_INT info (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: optimize cpt pf identification (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: modify FLR sequence for CPT (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: add mbox for CPT LF reset (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: recover CPT engine when it gets fault (Srujana Challa)  [Orabug: 36725601]  
  - arm64: Declare non global symbols as static (Linu Cherian)  [Orabug: 36725601]  
  - arm64: Add cavium_erratum_23154_cpus missing sentinel (Marc Zyngier)  [Orabug: 36725601]  
  - irqchip/gic-v3: Workaround Marvell erratum 38545 when reading IAR (Linu Cherian)  [Orabug: 36725601]  
  - arm64: re-enable CAVIUM_ERRATUM_23154, disable CAVIUM_ERRATUM_27456 (Dave Kleikamp)  [Orabug: 36725601]  
  - dt-bindings: perf: marvell: cn10k ddr performance monitor (Bharat Bhushan)  [Orabug: 36725601]  
  - hwrng: cavium - fix NULL but dereferenced coccicheck error (Wan Jiabing)  [Orabug: 36725601]  
  - perf/smmuv3: Add devicetree support (Jean-Philippe Brucker)  [Orabug: 36725601]  
  - ethernet: marvell: octeontx2 Fix resource not freed after malloc (Manank Patel)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: fix possible memory leak in otx2_probe() (Yang Yingliang)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Fix error return code in mcs_register_interrupts() (Yang Yingliang)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: fix missing unlock in some error paths (Yang Yingliang)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: remove unneeded semicolon (Yang Li)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Introduce MACSEC hardware offloading (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Add debugfs support (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Handle MCS block interrupts (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Support for stats collection (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Install a default TCAM for normal traffic (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Manage the MCS block hardware resources (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Add mailboxes for port related operations (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Introduce driver for macsec block. (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Fix unused variable build error (Ren Zhijie)  [Orabug: 36725601]  
  - octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: return correct ptp timestamp for CN10K silicon (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Add egress PFC support (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Reduce minimum mtu size to 60 (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Fixes static warnings (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Limit link bringup time at firmware (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: returning uninitialized variable (Sebin Sebastian)  [Orabug: 36725601]  
  - octeontx2-af: Remove duplicate include (Jiapeng Chong)  [Orabug: 36725601]  
  - octeontx2-af: Skip CGX/RPM probe incase of zero lmac count (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Enable Exact match flag in kex profile (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for exact match table. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Invoke exact match functions if supported (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Wrapper functions for MAC addr add/del/update/reset (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2: Modify mbox request and response structures (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Debugsfs support for exact match. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Drop rules for NPC MCAM (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: FLR handler for exact match table. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: devlink configuration support (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Exact match scan from kex profile (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Exact match support (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Use hashed field in MCAM key (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Don't reset previous pfc config (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: fix operand size in bitwise operation (Shijith Thotton)  [Orabug: 36725601]  
  - marvell/octeontx2/af: fix repeated words in comments (Jilin Yuan)  [Orabug: 36725601]  
  - octeontx2-vf: Add support for adaptive interrupt coalescing (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for adaptive interrupt coalescing (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Vary completion queue event size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Change receive buffer size using ethtool (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Remove unnecessary synchronize_irq() before free_irq() (Minghao Chi)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: fix error return of allocations (Niels Dossche)  [Orabug: 36725601]  
  - octeontx2-pf: replace bitmap_weight with bitmap_empty where appropriate (Yury Norov)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: add workaround for ptp errata (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: cn10k: add support for new ptp timestamp format (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: fix array bound error (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Add TC feature for VFs (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: PFC config support with DCBx (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Flow control resource management (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Priority flow control configuration support (Sunil Kumar Kori)  [Orabug: 36725601]  
  - octeontx2-af: Fix interrupt name strings (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-nicvf: Free VF PTP resources. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: don't corrupt user memory (Dan Carpenter)  [Orabug: 36725601]  
  - octeontx2-nicvf: fix ioctl callback (Arnd Bergmann)  [Orabug: 36725601]  
  - octeontx2-af: use swap() to make code cleaner (Yang Guang)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: Add channel and channel mask. (Rakesh Babu)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: debugfs for dumping LMTST map table (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: Minor changes. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-af: Increase number of reserved entries in KPU (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-nic: fix mixed module build (Arnd Bergmann)  [Orabug: 36725601]  
  - octeontx2-af: Add support to flush full CPT CTX cache (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: Perform cpt lf teardown in non FLR path (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: Enable CPT HW interrupts (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Simplify the receive buffer size calculation (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Remove redundant initialization of variable pin (Colin Ian King)  [Orabug: 36725601]  
  - octeontx2-pf: Add XDP support to netdev PF (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-nicvf: Add PTP hardware clock support to NIX VF (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Add external ptp input clock (Yi Guo)  [Orabug: 36725601]  
  - octeontx2-af: Use ptp input clock info from firmware data (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2: Move devlink registration to be last devlink command (Leon Romanovsky)  [Orabug: 36725601]  
  - octeontx2-af: Limit KPU parsing for GTPU packets (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-af: Remove redundant initialization of variable blkaddr (Colin Ian King)  [Orabug: 36725601]  
  - octeontx2-af: Fix uninitialized variable val (Colin Ian King)  [Orabug: 36725601]  
  - octeontx2-af: Hardware configuration for inline IPsec (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: CN10K: Hide RPM stats over ethtool (Hariprasad Kelam)  [Orabug: 36725601]  
  - uek-rpm: Add skx_edac_common.ko to core-x86_64.list (Sherry Yang)  [Orabug: 37033806]  
  - EDAC, i10nm: make skx_common.o a separate module (Arnd Bergmann)  [Orabug: 37033806]  
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez)  [Orabug: 37037203] {CVE-2024-46738}
  - uek-rpm: Enable CONFIG_BLK_DEV_DRBD (Vijayendra Suman)  [Orabug: 36930383]  
  - crypto: qat - specify firmware files for 402xx (Giovanni Cabiddu)  [Orabug: 37041628]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-301.163.3.el9uek]
changelog:
  - uek-rpm: T93: enable xxhash crypto module for fips (Dave Kleikamp)  [Orabug: 37075386]  
  - mm: ioremap: Add ioremap/iounmap_allowed() (Kefeng Wang)  [Orabug: 37061929]  
  - netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso)  [Orabug: 36630431]  {CVE-2024-27397} 
  - uek-rpm: Enable CONFIG_DEVICE_PRIVATE for the 64K page kernel (Dave Kleikamp)  [Orabug: 36670372]  
  - uek-rpm: Config changes to support Grace Hopper (Dave Kleikamp)  [Orabug: 36670372]  
  - arm64: Allow 512K irqs (Dave Kleikamp)  [Orabug: 36670372]  
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Matthew R. Ochs)  [Orabug: 36670372] {CVE-2024-36477}
  - firmware: smccc: Fix use of uninitialised results structure (Punit Agrawal)  [Orabug: 36670372]  
  - i2c: smbus: Check for parent device before dereference (Andy Shevchenko)  [Orabug: 36670372]  
  - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (Tom Rix)  [Orabug: 36670372]  
  - dt-bindings: gpio: Remove FSI domain ports on Tegra234 (Prathamesh Shete)  [Orabug: 36670372]  
  - i2c: tegra: Do not mark ACPI devices as irq safe (Breno Leitao)  [Orabug: 36670372] {CVE-2024-45029}
  - tpm_tis_spi: Add hardware wait polling (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Enable TPM wait polling (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: Add TPM HW flow flag (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: set half duplex flag (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix iterator outside loop (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix validate combined sequence (Krishna Yarlagadda)  [Orabug: 36670372]  
  - ACPI/IORT: Update SMMUv3 DeviceID support (Robin Murphy)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix duplicate resource error (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Don't initialise DMA if not supported (Jon Hunter)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix combined sequence (Krishna Yarlagadda)  [Orabug: 36670372]  
  - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (Shanker Donthineni)  [Orabug: 36670372]  
  - irqchip/gicv3: Handle resource request failure consistently (Robin Murphy)  [Orabug: 36670372]  
  - irqchip/gic-v3: Claim iomem resources (Robin Murphy)  [Orabug: 36670372]  
  - i2c: tegra: Fix PEC support for SMBUS block read (Akhil R)  [Orabug: 36670372]  
  - i2c: tegra: Set ACPI node as primary fwnode (Akhil R)  [Orabug: 36670372]  
  - arm64: tegra: Enable Tegra SPI & QSPI in deconfig (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Multi-cs support (Krishna Yarlagadda)  [Orabug: 36670372]  
  - i2c: tegra: Add SMBus block read function (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: use device_reset method (Krishna Yarlagadda)  [Orabug: 36670372]  
  - i2c: smbus: Use device_*() functions instead of of_*() (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: add acpi support (Krishna Yarlagadda)  [Orabug: 36670372]  
  - docs: firmware-guide: ACPI: Add named interrupt doc (Akhil R)  [Orabug: 36670372]  
  - device property: Add fwnode_irq_get_byname (Akhil R)  [Orabug: 36670372]  
  - device property: Add fwnode_iomap() (Anand Ashok Dumbre)  [Orabug: 36670372]  
  - spi: tegra210-quad: combined sequence mode (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: add new chips to compatible (Krishna Yarlagadda)  [Orabug: 36670372]  
  - gpio: tegra186: Add IRQ per bank for Tegra241 (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: use devm call for cdata memory (Krishna Yarlagadda)  [Orabug: 36670372]  
  - gpio: tegra186: Add support for Tegra241 (Akhil R)  [Orabug: 36670372]  
  - gpio: tegra186: Add support for Tegra234 (Prathamesh Shete)  [Orabug: 36670372]  
  - gpio: tegra186: Support multiple interrupts per bank (Thierry Reding)  [Orabug: 36670372]  
  - gpio: tegra186: Force one interrupt per bank (Thierry Reding)  [Orabug: 36670372]  
  - dt-bindings: gpio: Add Tegra241 support (Akhil R)  [Orabug: 36670372]  
  - dt-bindings: gpio: Add Tegra234 support (Prathamesh Shete)  [Orabug: 36670372]  
  - dt-bindings: gpio: tegra186: Convert to json-schema (Thierry Reding)  [Orabug: 36670372]  
  - i2c: tegra: use i2c_timings for bus clock freq (Akhil R)  [Orabug: 36670372]  
  - i2c: tegra: Add the ACPI support (Akhil R)  [Orabug: 36670372]  
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh)  [Orabug: 36955683]  
  - Revert "crypto: ecc - Move ecc.h to include/crypto/internal" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecc - Export additional functions from crypto/ecc.c" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: add ECDSA signature generation support" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: add ECDSA test vectors from RFC 6979" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: make RFC6979 test vectors generic to all drivers" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecdsa - export ecdsa signature ASN.1 parser" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecdsa - export ecdsa privkey ASN.1 parser" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: add support for ECDSA P192, P256 and P384" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: add support for DH" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: fix opcode incase of SGv2" (Dave Kleikamp)  [Orabug: 37062541]  
  - i40e: Change user notification of non-SFP module in i40e_get_module_info() (Andrii Staikov)  [Orabug: 37069948]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-301.163.4.el9uek]
changelog:
  - pds_core: Prevent race issues involving the adminq (Brett Creeley)  [Orabug: 36529980]  {CVE-2024-26623} 
  - netdevsim: avoid potential loop in nsim_dev_trap_report_work() (Eric Dumazet)  [Orabug: 36530387]  {CVE-2024-26681} 
  - devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev)  [Orabug: 36530666]  {CVE-2024-26734} 
  - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Adamos Ttofari)  [Orabug: 36642225]  {CVE-2024-35801} 
  - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Carolina Jubran)  [Orabug: 36643379]  {CVE-2024-35959} 
  - uek-rpm: correctly set DEFAULTKERNEL after removal of uek kernels (Rhythm Mahajan)  [Orabug: 36709294]  
  - RDMA: Flip the meaning of "-1" and "0" in ibv_create_cq / ib_create_cq (Gerd Rausch)  [Orabug: 36822216]  
  - Revert "rds: ib: fix non-determinism when comp_vector is zero" (Gerd Rausch)  [Orabug: 36822216]  
  - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (Aleksandr Mishin)  [Orabug: 36835804]  {CVE-2024-40940} 
  - xfrm: Remove documentation WARN_ON to limit return values for offloaded SA (Patrisious Haddad)  [Orabug: 37080855]  
  - perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling (Ravi Bangoria)  [Orabug: 37088496]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-301.163.5.el9uek]
changelog:
  - netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). (Kuniyuki Iwashima)  [Orabug: 36964003]  {CVE-2024-42270} 
  - netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). (Kuniyuki Iwashima)  [Orabug: 36964001]  {CVE-2024-42269} 
  - Revert "arm64: Allow 512K irqs" (Harshit Mogalapalli)  [Orabug: 37117987]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-302.163.1.el9uek]
changelog:
  - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)  [Orabug: 37035557] {CVE-2024-49863}
  - kpcimgr: Add dynamic memory region allocation feature (Joe Dobosenski)  [Orabug: 36983477]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.163.2.el9uek]
changelog:
  - uek: kabi: Introduce APIs to hide/fake inclusion of headers (Saeed Mirzamohammadi)  [Orabug: 37144803]  
  - uek-rpm: Enable config for Mediatek mt7915E wireless driver (Saeed Mirzamohammadi)  [Orabug: 37123534]  
  - uek-rpm: Update the x86 kABI files for new symbol (Yifei Liu)  [Orabug: 37108651]  
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (Sean Christopherson)  [Orabug: 36809298]  {CVE-2024-39483} 
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov)  [Orabug: 36753371]  {CVE-2024-38538} 
  - net: add pskb_may_pull_reason() helper (Eric Dumazet)  [Orabug: 36753371]  {CVE-2024-38538}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.163.3.el9uek]
changelog:
  - uek-rpm: T93: Enable CONFIG_EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER (Thomas Tai)  [Orabug: 37174880]  
  - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds)  [Orabug: 37174198]  {CVE-2024-47674} 
  - rds/ib: Count memory consumed by rds_page_frag (Hans Westgaard Ry)  [Orabug: 37162157]  
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME properly in embedded kernels (Dave Kleikamp)  [Orabug: 37160327]  
  - fs/dcache: allow fractional values in fs.negative-dentry-limit (Gautham Ananthakrishna)  [Orabug: 37156522]  
  - Revert "Documentation/admin-guide/acpi: Move information out of shell script comments" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Move partition_create_desc() work to a helper" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic: Collect GIC_IRQ_TYPE definitions into one place" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / irq: Allow a compile-time arg0 for acpi_register_gsi()'s fwspec" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic, gic-v3: Translate fwspec for DT and ACPI systems in the same way" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Provide a helper to walk processor containers" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to build a cpumask from a cpu_node" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Print DT partitions in the same way as APCI" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Build PPI partitions on ACPI systems" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: select and translate the partition domain" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / irq: Add acpi_register_partitioned_percpu_gsi()" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Find PPTT cache level by ID" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to fill a cpumask from a processor container" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to fill a cpumask from a cache_id" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "drivers: base: cacheinfo: Check per_cpu_cacheinfo() is allocated" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "drivers: base: cacheinfo: Add helper to find the cache size from cpu+level" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Allow for >32-bit cache 'id'" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Set cache 'id' based on DT data" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Expose the code to generate a cache-id from a device_node" (Dave Kleikamp)  [Orabug: 37144820]  
  - KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Add the SMM_CTL MSR not present feature (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Add the Null Selector Clears Base feature (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (Kim Phillips)  [Orabug: 37126702]  
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (Kim Phillips)  [Orabug: 37126702]  
  - KVM: x86: Advertise that the SMM_CTL MSR is not supported (Jim Mattson)  [Orabug: 37126702]  
  - KVM: x86: synthesize CPUID leaf 0x80000021h if useful (Paolo Bonzini)  [Orabug: 37126702]  
  - KVM: x86: skip host CPUID call for hypervisor leaves (Paolo Bonzini)  [Orabug: 37126702]  
  - KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini)  [Orabug: 37126702]  
  - amd_hsmp: Update PwrEfficiencyModeSelection message (Suma Hegde)  [Orabug: 37123833]  
  - amd_hsmp: Add support for new error codes returned from firmware (Suma Hegde)  [Orabug: 37123833]  
  - amd_hsmp: Add new HSMP messages of protocol version 7 (Suma Hegde)  [Orabug: 37123833]  
  - IB/mlx5: Fix mlx5_ib_get_vector_irqn() after dynamic IRQ allocation change (Gerd Rausch)  [Orabug: 37069671]  
  - arm64: kdump: increase crashkernel reservation size for crashkernel=auto (Brian Maly)  [Orabug: 36949800]  
  - rds: Support rds-pings with payload (Håkon Bugge)  [Orabug: 36847470]  
  - mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (Miaohe Lin)  [Orabug: 36683092]  {CVE-2024-36028} 
  - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled (Miaohe Lin)  [Orabug: 36597930]  {CVE-2024-26987}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.4.el9uek]
changelog:
  - LTS version: v5.15.167 (Vijayendra Suman)   
  - udp: fix receiving fraglist GSO packets (Felix Fietkau)   
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [Orabug: 36993003] {CVE-2024-43892}
  - btrfs: fix race between direct IO write and fsync when using same fd (Filipe Manana) [Orabug: 37195092] {CVE-2024-46734}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann)   
  - x86/mm: Fix PTI for i386 some more (Thomas Gleixner)   
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Willem de Bruijn) [Orabug: 37195028] {CVE-2024-43897}
  - gso: fix dodgy bit handling for GSO_UDP_L4 (Yan Zhai)   
  - net: change maximum number of UDP segments to 128 (Yuri Benditovich)   
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Willem de Bruijn)   
  - gpio: rockchip: fix OF node leak in probe() (Krzysztof Kozlowski)   
  - drm/i915/fence: Mark debug_fence_free() with __maybe_unused (Andy Shevchenko)   
  - drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (Andy Shevchenko)   
  - ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode (Matteo Martelli)   
  - nvmet-tcp: fix kernel crash if commands allocation fails (Maurizio Lombardi) [Orabug: 37074464] {CVE-2024-46737}
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [Orabug: 37116411] {CVE-2024-46822}
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse)   
  - ACPI: processor: Fix memory leaks in error paths of processor_add() (Jonathan Cameron)   
  - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (Jonathan Cameron)   
  - workqueue: Improve scalability of workqueue watchdog touch (Nicholas Piggin) [Orabug: 37116487] {CVE-2024-46839}
  - workqueue: wq_watchdog_touch is always called with valid CPU (Nicholas Piggin)   
  - nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [Orabug: 37074676] {CVE-2024-46780}
  - nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang)   
  - ksmbd: Unlock on in ksmbd_tcp_set_interfaces() (Dan Carpenter)   
  - ksmbd: unset the binding mark of a reused connection (Namjae Jeon) [Orabug: 37074716] {CVE-2024-46795}
  - perf/aux: Fix AUX buffer serialization (Peter Zijlstra) [Orabug: 37070802] {CVE-2024-46713}
  - uprobes: Use kzalloc to allocate xol area (Sven Schnelle)   
  - clocksource/drivers/timer-of: Remove percpu irq related code (Daniel Lezcano)   
  - clocksource/drivers/imx-tpm: Fix next event not taking effect sometime (Jacky Bai)   
  - clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX (Jacky Bai)   
  - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (Naman Jain)   
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [Orabug: 37074472] {CVE-2024-46739}
  - nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc (Geert Uytterhoeven)   
  - binder: fix UAF caused by offsets overwrite (Carlos Llamas) [Orabug: 37074476] {CVE-2024-46740}
  - usb: dwc3: core: update LC timer as per USB Spec V3.2 (Faisal Hassan)   
  - iio: adc: ad7124: fix chip ID mismatch (Dumitru Ceclan)   
  - iio: adc: ad7124: fix config comparison (Dumitru Ceclan)   
  - iio: fix scale application in iio_convert_raw_to_processed_unlocked (Matteo Martelli)   
  - iio: buffer-dmaengine: fix releasing dma channel on error (David Lechner)   
  - staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [Orabug: 37159727] {CVE-2024-47663}
  - cifs: Check the lease context if we actually got a lease (Ronnie Sahlberg)   
  - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (Trond Myklebust)   
  - ata: pata_macio: Use WARN instead of BUG (Michael Ellerman)   
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [Orabug: 37116454] {CVE-2024-46832}
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [Orabug: 37159756] {CVE-2024-47668}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [Orabug: 37074487] {CVE-2024-46743}
  - Squashfs: sanity check symbolic link size (Phillip Lougher) [Orabug: 37074494] {CVE-2024-46744}
  - usbnet: ipheth: race between ipheth_close and error handling (Oliver Neukum)   
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [Orabug: 37074502] {CVE-2024-46745}
  - HID: amd_sfh: free driver_data after destroying hid device (Olivier Sobrie) [Orabug: 37074507] {CVE-2024-46746}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [Orabug: 37074512] {CVE-2024-46747}
  - s390/vmlinux.lds.S: Move ro_after_init section behind rodata section (Heiko Carstens)   
  - btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() (David Sterba)   
  - kselftests: dmabuf-heaps: Ensure the driver name is null-terminated (Zenghui Yu)   
  - i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup (Jarkko Nikula) [Orabug: 37159737] {CVE-2024-47665}
  - net: dpaa: avoid on-stack arrays of NR_CPUS elements (Vladimir Oltean)   
  - PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [Orabug: 37074530] {CVE-2024-46750}
  - riscv: set trap vector earlier (yang.zhang)   
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [Orabug: 37074542] {CVE-2024-46752}
  - btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [Orabug: 37116493] {CVE-2024-46840}
  - btrfs: replace BUG_ON with ASSERT in walk_down_proc() (Josef Bacik)   
  - fs/ntfs3: Check more cases when directory is corrupted (Konstantin Komarov)   
  - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() (Zqiang)   
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [Orabug: 37074560] {CVE-2024-46755}
  - dma-mapping: benchmark: Don't starve others when doing the test (Yicong Yang)   
  - ext4: fix possible tid_t sequence overflows (Luis Henriques (SUSE))   
  - drm/amdgpu: Set no_hw_access when VF request full GPU fails (Yifan Zha)   
  - libbpf: Add NULL checks to bpf_object__{prev_map,next_map} (Andreas Ziegler)   
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074565] {CVE-2024-46756}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074570] {CVE-2024-46757}
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074578] {CVE-2024-46758}
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074583] {CVE-2024-46759}
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [Orabug: 37074594] {CVE-2024-46761}
  - devres: Initialize an uninitialized struct member (Zijun Hu)   
  - um: line: always fill *error_out in setup_one_line() (Johannes Berg) [Orabug: 37116517] {CVE-2024-46844}
  - cgroup: Protect css->cgroup write under css_set_lock (Waiman Long)   
  - iommu/vt-d: Handle volatile descriptor status read (Jacob Pan)   
  - dm init: Handle minors larger than 255 (Benjamin Marzinski)   
  - ASoC: topology: Properly initialize soc_enum values (Amadeusz Sławiński)   
  - net: dsa: vsc73xx: fix possible subblocks range of CAPT block (Pawel Dembicki)   
  - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jonas Gorski)   
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [Orabug: 37074606] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet)   
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet)   
  - bareudp: Fix device stats updates. (Guillaume Nault)   
  - usbnet: modern method to get random MAC (Oliver Neukum)   
  - net: usb: don't write directly to netdev->dev_addr (Jakub Kicinski)   
  - ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset (Larysa Zaremba)   
  - igc: Unlock on error in igc_io_resume() (Dan Carpenter)   
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [Orabug: 37074692] {CVE-2024-46783}
  - platform/x86: dell-smbios: Fix error path in dell_smbios_init() (Aleksandr Mishin)   
  - igb: Fix not clearing TimeSync interrupts for 82580 (Daiwei Li)   
  - can: m_can: Release irq on error in m_can_open (Simon Horman)   
  - can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [Orabug: 37074624] {CVE-2024-46771}
  - drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 (Marek Olšák)   
  - pcmcia: Use resource_size function on resource object (Jules Irenge)   
  - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (Chen Ni)   
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [Orabug: 37159749] {CVE-2024-47667}
  - media: vivid: don't set HDMI TX controls if there are no HDMI outputs (Hans Verkuil)   
  - drm/amd/display: Check HDCP returned status (Alex Hung)   
  - usb: uas: set host status byte on data completion error (Shantanu Goel)   
  - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (Arend van Spriel)   
  - leds: spi-byte: Call of_node_put() on error path (Andy Shevchenko)   
  - media: vivid: fix wrong sizeimage value for mplane (Hans Verkuil)   
  - udf: Avoid excessive partition lengths (Jan Kara) [Orabug: 37074664] {CVE-2024-46777}
  - netfilter: nf_conncount: fix wrong variable type (Yunjian Wang)   
  - iommu: sun50i: clear bypass register (Jernej Skrabec)   
  - af_unix: Remove put_pid()/put_cred() in copy_peercred(). (Kuniyuki Iwashima)   
  - irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 (Pali Rohár)   
  - smack: unix sockets: fix accept()ed socket label (Konstantin Andreev)   
  - ALSA: hda: Add input value sanity checks to HDMI channel map controls (Takashi Iwai)   
  - mptcp: pm: send ACK on an active subflow (Matthieu Baerts (NGI0))   
  - mptcp: pr_debug: add missing 
   at the end (Matthieu Baerts (NGI0))   
  - mptcp: pm: skip connecting to already established sf (Matthieu Baerts (NGI0))   
  - mptcp: pm: do not remove already closed subflows (Matthieu Baerts (NGI0))   
  - mptcp: pm: ADD_ADDR 0 is not a new address (Matthieu Baerts (NGI0))   
  - mptcp: close subflow when receiving TCP+FIN (Matthieu Baerts (NGI0))   
  - mptcp: avoid duplicated SUB_CLOSED events (Matthieu Baerts (NGI0))   
  - mptcp: pm: avoid possible UaF when selecting endp (Matthieu Baerts (NGI0))   
  - mptcp: constify a bunch of of helpers (Paolo Abeni)   
  - mptcp: pm: fullmesh: select the right ID later (Matthieu Baerts (NGI0))   
  - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR (Matthieu Baerts (NGI0))   
  - mptcp: pm: only decrement add_addr_accepted for MPJ req (Matthieu Baerts (NGI0))   
  - mptcp: pm: re-using ID of unused flushed subflows (Matthieu Baerts (NGI0))   
  - nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [Orabug: 37159764] {CVE-2024-47669}
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [Orabug: 37074683] {CVE-2024-46781}
  - sched: sch_cake: fix bulk flow accounting logic for host fairness (Toke Høiland-Jørgensen) [Orabug: 37116442] {CVE-2024-46828}
  - ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [Orabug: 37074688] {CVE-2024-46782}
  - tracing: Avoid possible softlockup in tracing_iter_reset() (Zheng Yejian)   
  - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (Simon Arlott) [Orabug: 37074711] {CVE-2024-46791}
  - clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (Satya Priya Kakitapalli)   
  - clk: qcom: clk-alpha-pll: Fix the pll post div mask (Satya Priya Kakitapalli)   
  - fuse: use unsigned type for getxattr/listxattr size truncation (Jann Horn)   
  - fuse: update stats for pages in dropped aux writeback list (Joanne Koong)   
  - mmc: cqhci: Fix checking of CQHCI_HALT state (Seunghwan Baek)   
  - mmc: sdhci-of-aspeed: fix module autoloading (Liao Chen)   
  - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (Sam Protsenko)   
  - Bluetooth: MGMT: Ignore keys being loaded with invalid type (Luiz Augusto von Dentz)   
  - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" (Luiz Augusto von Dentz)   
  - nvme-pci: Add sleep quirk for Samsung 990 Evo (Georg Gottleuber)   
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [Orabug: 37116445] {CVE-2024-46829}
  - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Ma Ke)   
  - ata: libata: Fix memory leak for error path in ata_host_alloc() (Zheng Qixing)   
  - ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx (Maximilien Perreault)   
  - ALSA: hda/realtek: add patch for internal mic in Lenovo V145 (Terry Cheong)   
  - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (Christoffer Sandberg)   
  - KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing (Ravi Bangoria)   
  - KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE (Maxim Levitsky)   
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (robelin) [Orabug: 37074721] {CVE-2024-46798}
  - sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [Orabug: 37074725] {CVE-2024-46800}
  - i2c: Use IS_REACHABLE() for substituting empty ACPI functions (Richard Fitzgerald)   
  - ext4: handle redirtying in ext4_bio_write_page() (Jan Kara)   
  - udf: Limit file size to 4TB (Jan Kara)   
  - ext4: reject casefold inode flag without casefold feature (Eric Biggers)   
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (Nikita Kiryushin) [Orabug: 36753533] {CVE-2024-38577}
  - virtio_net: Fix napi_skb_cache_put warning (Breno Leitao) [Orabug: 36964473] {CVE-2024-43835}
  - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (Bob Zhou) [Orabug: 36993065] {CVE-2024-43905}
  - media: uvcvideo: Enforce alignment of frame and interval (Ricardo Ribalda)   
  - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (Alex Hung) [Orabug: 37073031] {CVE-2024-46714}
  - block: remove the blk_flush_integrity call in blk_integrity_unregister (Christoph Hellwig)   
  - wifi: cfg80211: make hash table duplicates more survivable (Johannes Berg)   
  - drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (Marek Vasut) [Orabug: 37116336] {CVE-2024-46810}
  - drm/meson: plane: Add error handling (Haoran Liu)   
  - smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler)   
  - usb: typec: ucsi: Fix null pointer dereference in trace (Abhishek Pandit-Subedi) [Orabug: 37073064] {CVE-2024-46719}
  - usbip: Don't submit special requests twice (Simon Holesch)   
  - rcu/nocb: Remove buggy bypass lock contention mitigation (Frederic Weisbecker)   
  - ionic: fix potential irq name truncation (Shannon Nelson)   
  - RDMA/efa: Properly handle unexpected AQ completions (Michael Margolin)   
  - hwspinlock: Introduce hwspin_lock_bust() (Richard Maina)   
  - PCI: al: Check IORESOURCE_BUS existence during probe (Aleksandr Mishin)   
  - cpufreq: scmi: Avoid overflow of target_freq in fast switch (Jagadeesh Kona)   
  - wifi: iwlwifi: remove fw_running op (Shahar S Matityahu)   
  - drm/amdgpu: update type of buf size to u32 for eeprom functions (Tao Zhou)   
  - drm/amd/pm: check negtive return for table entries (Jesse Zhang)   
  - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (Jesse Zhang) [Orabug: 37116393] {CVE-2024-46819}
  - drm/amd/pm: check specific index for aldebaran (Jesse Zhang)   
  - drm/amdgpu: fix the waring dereferencing hive (Jesse Zhang) [Orabug: 37116300] {CVE-2024-46805}
  - drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs (Ma Jun)   
  - apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [Orabug: 37073077] {CVE-2024-46721}
  - drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (Michael Chen)   
  - drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [Orabug: 37073082] {CVE-2024-46722}
  - drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [Orabug: 37073087] {CVE-2024-46723}
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Ma Jun) [Orabug: 37073093] {CVE-2024-46724}
  - drm/amdgpu: Fix out-of-bounds write warning (Ma Jun) [Orabug: 37073098] {CVE-2024-46725}
  - drm/amdgpu/pm: Fix uninitialized variable agc_btc_response (Ma Jun)   
  - drm/amdgpu/pm: Fix uninitialized variable warning for smu10 (Ma Jun)   
  - drm/amd/amdgpu: Check tbo resource pointer (Asad Kamal) [Orabug: 37116315] {CVE-2024-46807}
  - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (Hersen Wu)   
  - drm/amd/display: Check msg_id before processing transcation (Alex Hung) [Orabug: 37116360] {CVE-2024-46814}
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (Alex Hung) [Orabug: 37116365] {CVE-2024-46815}
  - drm/amd/display: Add array index check for hdcp ddc access (Hersen Wu) [Orabug: 37116295] {CVE-2024-46804}
  - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (Hersen Wu) [Orabug: 37116375] {CVE-2024-46817}
  - drm/amd/display: Check gpio_id before used as array index (Alex Hung) [Orabug: 37116384] {CVE-2024-46818}
  - drm/amdgpu: avoid reading vf2pf info size from FB (Zhigang Luo)   
  - drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr (Tim Huang)   
  - drm/amdgpu: fix uninitialized scalar variable warning (Tim Huang)   
  - drm/amd/pm: fix the Out-of-bounds read warning (Jesse Zhang) [Orabug: 37073129] {CVE-2024-46731}
  - drm/amd/pm: fix warning using uninitialized value of max_vid_step (Jesse Zhang)   
  - drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr (Tim Huang)   
  - drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc (Ma Jun)   
  - drm/amdgpu: fix overflowed array index read warning (Tim Huang)   
  - drm/amd/display: Assign linear_pitch_alignment even for VM (Alvin Lee) [Orabug: 37073135] {CVE-2024-46732}
  - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (Ma Jun)   
  - net: usb: qmi_wwan: add MeiG Smart SRM825L (ZHANG Yuntian)   
  - dma-debug: avoid deadlock between dma debug vs printk and netconsole (Rik van Riel)   
  - i2c: Fix conditional for substituting empty ACPI functions (Richard Fitzgerald)   
  - ALSA: hda/conexant: Mute speakers at suspend / shutdown (Takashi Iwai)   
  - ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown (Takashi Iwai)   
  - drm: panel-orientation-quirks: Add quirk for OrangePi Neo (Philip Mueller)   
  - LTS version: v5.15.166 (Vijayendra Suman)   
  - apparmor: fix policy_unpack_test on big endian systems (Guenter Roeck)   
  - scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [Orabug: 37070699] {CVE-2024-46673}
  - igc: Fix qbv tx latency by setting gtxoffset (Faizal Rahim)   
  - igc: Fix reset adapter logics when tx mode change (Faizal Rahim)   
  - phy: zynqmp: Enable reference clock correctly (Sean Anderson)   
  - usb: cdnsp: fix for Link TRB with TC (Pawel Laszczak)   
  - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function (Pawel Laszczak)   
  - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (Zijun Hu)   
  - usb: dwc3: st: add missing depopulate in probe error path (Krzysztof Kozlowski)   
  - usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [Orabug: 37070704] {CVE-2024-46674}
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [Orabug: 37070709] {CVE-2024-46675}
  - usb: dwc3: omap: add missing depopulate in probe error path (Krzysztof Kozlowski)   
  - USB: serial: option: add MeiG Smart SRM825L (ZHANG Yuntian)   
  - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (Ian Ray)   
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk)   
  - nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [Orabug: 37070716] {CVE-2024-46676}
  - net: busy-poll: use ktime_get_ns() instead of local_clock() (Eric Dumazet)   
  - gtp: fix a potential NULL pointer dereference (Cong Wang) [Orabug: 37070721] {CVE-2024-46677}
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [Orabug: 37070727] {CVE-2024-46679}
  - dmaengine: dw: Add memory bus width verification (Serge Semin)   
  - dmaengine: dw: Add peripheral bus width verification (Serge Semin)   
  - phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume (Piyush Mehta)   
  - phy: xilinx: phy-zynqmp: dynamic clock support for power-save (Piyush Mehta)   
  - phy: xilinx: add runtime PM support (Piyush Mehta)   
  - PM: runtime: Add DEFINE_RUNTIME_DEV_PM_OPS() macro (Paul Cercueil)   
  - PM: core: Add EXPORT[_GPL]_SIMPLE_DEV_PM_OPS macros (Paul Cercueil)   
  - PM: core: Remove DEFINE_UNIVERSAL_DEV_PM_OPS() macro (Paul Cercueil)   
  - soundwire: stream: fix programming slave ports for non-continous port maps (Krzysztof Kozlowski)   
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [Orabug: 36964509] {CVE-2024-43853}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [Orabug: 36897456] {CVE-2024-41098}
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages (Alex Deucher) [Orabug: 36867630] {CVE-2024-41011}
  - Revert "MIPS: Loongson64: reset: Prioritise firmware service" (Greg Kroah-Hartman)   
  - mptcp: sched: check both backup in retrans (Matthieu Baerts (NGI0))   
  - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (Haiyang Zhang)   
  - wifi: mwifiex: duplicate static structs used in driver instances (Sascha Hauer)   
  - pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [Orabug: 37070743] {CVE-2024-46685}
  - pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins (Huang-Huang Bao)   
  - btrfs: run delayed iputs when flushing delalloc (Josef Bacik)   
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [Orabug: 36898008] {CVE-2024-42228}
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin)   
  - Input: MT - limit max slots (Tetsuo Handa) [Orabug: 37029136] {CVE-2024-45008}
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) [Orabug: 35358656] {CVE-2023-31083}
  - mm/numa: no task_numa_fault() call if PTE is changed (Zi Yan)   
  - mm/numa: no task_numa_fault() call if PMD is changed (Zi Yan)   
  - ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)   
  - hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() (Javier Carrasco)   
  - Revert "drm/amd/display: Validate hw_points_num before using it" (Alex Hung)   
  - mmc: dw_mmc: allow biu and ciu clocks to defer (Ben Whitten)   
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier) [Orabug: 37070792] {CVE-2024-46707}
  - cxgb4: add forgotten u64 ivlan cast before shift (Nikolay Kuratov)   
  - HID: microsoft: Add rumble support to latest xbox controllers (Siarhei Vishniakou)   
  - HID: wacom: Defer calculation of resolution until resolution_code is known (Jason Gerecke)   
  - MIPS: Loongson64: Set timer mode in cpu-probe (Jiaxun Yang)   
  - scsi: core: Fix the return value of scsi_logical_block_count() (Chaotian Jing)   
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [Orabug: 36992975] {CVE-2024-43884}
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [Orabug: 37070690] {CVE-2024-45028}
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [Orabug: 37029059] {CVE-2024-44982}
  - drm/msm/dp: reset the link phy params before link training (Abhinav Kumar)   
  - drm/msm/dpu: don't play tricks with debug macros (Dmitry Baryshkov)   
  - net: xilinx: axienet: Fix dangling multicast addresses (Sean Anderson)   
  - net: xilinx: axienet: Always disable promiscuous mode (Sean Anderson)   
  - netfilter: flowtable: validate vlan header (Pablo Neira Ayuso) [Orabug: 37029063] {CVE-2024-44983}
  - ipv6: prevent possible UAF in ip6_xmit() (Eric Dumazet) [Orabug: 37029066] {CVE-2024-44985}
  - ipv6: fix possible UAF in ip6_finish_output2() (Eric Dumazet) [Orabug: 37029068] {CVE-2024-44986}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [Orabug: 37029075] {CVE-2024-44987}
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [Orabug: 37070659] {CVE-2024-45016}
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [Orabug: 37029081] {CVE-2024-44988}
  - net: dsa: mv88e6xxx: replace ATU violation prints with trace points (Vladimir Oltean)   
  - net: dsa: mv88e6xxx: read FID when handling ATU violations (Hans J. Schultz)   
  - dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() (Dan Carpenter)   
  - ice: fix ICE_LAST_OFFSET formula (Maciej Fijalkowski)   
  - bonding: fix xfrm state handling when clearing active slave (Nikolay Aleksandrov)   
  - bonding: fix xfrm real_dev null pointer dereference (Nikolay Aleksandrov) [Orabug: 37029084] {CVE-2024-44989}
  - bonding: fix null pointer deref in bond_ipsec_offload_ok (Nikolay Aleksandrov) [Orabug: 37029087] {CVE-2024-44990}
  - bonding: fix bond_ipsec_offload_ok return type (Nikolay Aleksandrov)   
  - ip6_tunnel: Fix broken GRO (Thomas Bogendoerfer)   
  - netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Sebastian Andrzej Siewior)   
  - netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). (Sebastian Andrzej Siewior)   
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [Orabug: 37013760] {CVE-2024-44946}
  - tc-testing: don't access non-existent variable on exception (Simon Horman)   
  - Bluetooth: SMP: Fix assumption of Central always being Initiator (Luiz Augusto von Dentz)   
  - Bluetooth: hci_core: Fix LE quote calculation (Luiz Augusto von Dentz)   
  - platform/surface: aggregator: Fix warning when controller is destroyed in probe (Maximilian Luz)   
  - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Long Li)   
  - dm suspend: return -ERESTARTSYS instead of -EINTR (Mikulas Patocka)   
  - media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) (Aurelien Jarno)   
  - nfsd: make svc_stat per-network namespace instead of global (Josef Bacik)   
  - nfsd: remove nfsd_stats, make th_cnt a global counter (Josef Bacik)   
  - nfsd: make all of the nfsd stats per-network namespace (Josef Bacik)   
  - nfsd: expose /proc/net/sunrpc/nfsd in net namespaces (Josef Bacik)   
  - nfsd: rename NFSD_NET_* to NFSD_STATS_* (Josef Bacik)   
  - sunrpc: use the struct net as the svc proc private (Josef Bacik)   
  - sunrpc: remove ->pg_stats from svc_program (Josef Bacik)   
  - sunrpc: pass in the sv_stats struct through svc_create_pooled (Josef Bacik)   
  - nfsd: stop setting ->pg_stats for unused stats (Josef Bacik)   
  - sunrpc: don't change ->sv_stats if it doesn't exist (Josef Bacik)   
  - NFSD: Fix frame size warning in svc_export_parse() (Chuck Lever)   
  - NFSD: Rewrite synopsis of nfsd_percpu_counters_init() (Chuck Lever)   
  - NFSD: Refactor the duplicate reply cache shrinker (Chuck Lever)   
  - NFSD: Replace nfsd_prune_bucket() (Chuck Lever)   
  - NFSD: Rename nfsd_reply_cache_alloc() (Chuck Lever)   
  - NFSD: Refactor nfsd_reply_cache_free_locked() (Chuck Lever)   
  - nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net (Jeff Layton)   
  - nfsd: move reply cache initialization into nfsd startup (Jeff Layton)   
  - block: use "unsigned long" for blk_validate_block_size(). (Tetsuo Handa)   
  - gtp: pull network headers in gtp_dev_xmit() (Eric Dumazet) [Orabug: 37029110] {CVE-2024-44999}
  - hrtimer: Prevent queuing of hrtimer without a function callback (Phil Chang)   
  - nvmet-rdma: fix possible bad dereference when freeing rsps (Sagi Grimberg)   
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Baokun Li)   
  - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Guanrui Huang)   
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati)   
  - platform/x86: lg-laptop: fix %s null argument warning (Gergo Koteles)   
  - clocksource: Make watchdog and suspend-timing multiplication overflow safe (Adrian Hunter)   
  - s390/iucv: fix receive buffer virtual vs physical address confusion (Alexander Gordeev)   
  - openrisc: Call setup_memory() earlier in the init sequence (Oreoluwa Babatunde)   
  - NFS: avoid infinite loop in pnfs_update_layout. (NeilBrown)   
  - nvmet-tcp: do not continue for invalid icreq (Hannes Reinecke)   
  - net: hns3: add checking for vf id of mailbox (Jian Shen)   
  - Bluetooth: bnep: Fix out-of-bound access (Luiz Augusto von Dentz)   
  - usb: gadget: fsl: Increase size of name buffer for endpoints (Uwe Kleine-König)   
  - f2fs: fix to do sanity check in update_sit_entry (Zhiguo Niu)   
  - btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() (David Sterba)   
  - btrfs: change BUG_ON to assertion in tree_move_down() (David Sterba)   
  - btrfs: send: handle unexpected data in header buffer in begin_cmd() (David Sterba)   
  - btrfs: handle invalid root reference found in may_destroy_subvol() (David Sterba)   
  - btrfs: change BUG_ON to assertion when checking for delayed_node root (David Sterba)   
  - powerpc/boot: Only free if realloc() succeeds (Michael Ellerman)   
  - powerpc/boot: Handle allocation failure in simple_realloc() (Li zeming)   
  - parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 (Helge Deller)   
  - memory: stm32-fmc2-ebi: check regmap_read return value (Christophe Kerello)   
  - x86: Increase brk randomness entropy for 64-bit systems (Kees Cook)   
  - md: clean up invalid BUG_ON in md_ioctl (Li Nan)   
  - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() (Eric Dumazet)   
  - clocksource/drivers/arm_global_timer: Guard against division by zero (Martin Blumenstingl)   
  - virtiofs: forbid newlines in tags (Stefan Hajnoczi)   
  - drm/lima: set gp bus_stop bit before hard reset (Erico Nunes)   
  - net/sun3_82586: Avoid reading past buffer in debug output (Kees Cook)   
  - media: drivers/media/dvb-core: copy user arrays safely (Philipp Stanner)   
  - fs: binfmt_elf_efpic: don't use missing interpreter's properties (Max Filippov)   
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil)   
  - quota: Remove BUG_ON from dqget() (Jan Kara)   
  - fuse: fix UAF in rcu pathwalks (Al Viro)   
  - afs: fix __afs_break_callback() / afs_drop_open_mmap() race (Al Viro)   
  - ext4: do not trim the group with corrupted block bitmap (Baokun Li)   
  - nvmet-trace: avoid dereferencing pointer too early (Daniel Wagner)   
  - powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (Kunwu Chan)   
  - memory: tegra: Skip SID programming if SID registers aren't set (Ashish Mhetre)   
  - arm64: Fix KASAN random tag seed initialization (Samuel Holland)   
  - hwmon: (ltc2992) Avoid division by zero (Antoniu Miclaus)   
  - IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock (Chengfeng Ye)   
  - wifi: iwlwifi: fw: Fix debugfs command sending (Mukesh Sisodiya)   
  - wifi: iwlwifi: abort scan when rfkill on but device enabled (Miri Korenblit)   
  - gfs2: setattr_chown: Add missing initialization (Andreas Gruenbacher)   
  - scsi: spi: Fix sshdr use (Mike Christie)   
  - media: qcom: venus: fix incorrect return value (Hans Verkuil)   
  - binfmt_misc: cleanup on filesystem umount (Christian Brauner)   
  - staging: ks7010: disable bh on tx_dev_lock (Chengfeng Ye)   
  - drm/amd/display: Validate hw_points_num before using it (Alex Hung)   
  - staging: iio: resolver: ad2s1210: fix use before initialization (David Lechner)   
  - media: radio-isa: use dev_name to fill in bus_info (Hans Verkuil)   
  - i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer (Jarkko Nikula)   
  - i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out (Jarkko Nikula)   
  - s390/smp,mcck: fix early IPI handling (Heiko Carstens)   
  - RDMA/rtrs: Fix the problem of variable not initialized fully (Zhu Yanjun)   
  - i2c: riic: avoid potential division by zero (Wolfram Sang)   
  - wifi: cw1200: Avoid processing an invalid TIM IE (Jeff Johnson)   
  - wifi: mac80211: fix BA session teardown race (Johannes Berg)   
  - wifi: cfg80211: check wiphy mutex is held for wdev mutex (Johannes Berg)   
  - ssb: Fix division by zero issue in ssb_calc_clock_rate (Rand Deeb)   
  - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (Parsa Poorshikhian)   
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [Orabug: 37029097] {CVE-2024-44995}
  - net: hns3: fix wrong use of semaphore up (Jie Wang)   
  - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks (Florian Westphal)   
  - netfilter: flowtable: initialise extack before use (Donald Hunter) [Orabug: 37070666] {CVE-2024-45018}
  - netfilter: allow ipv6 fragments to arrive on different devices (Tom Hughes)   
  - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size (Eugene Syromiatnikov)   
  - mlxbf_gige: disable RX filters until RX path initialized (David Thompson)   
  - net: dsa: vsc73xx: check busy flag in MDIO operations (Pawel Dembicki)   
  - net: dsa: vsc73xx: use read_poll_timeout instead delay loop (Pawel Dembicki)   
  - net: dsa: vsc73xx: pass value in phy_write operation (Pawel Dembicki)   
  - net: axienet: Fix register defines comment description (Radhey Shyam Pandey)   
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [Orabug: 37029103] {CVE-2024-44998}
  - net/mlx5e: Correctly report errors for ethtool rx flows (Cosmin Ratiu)   
  - igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (Faizal Rahim)   
  - igc: remove I226 Qbv BaseTime restriction (Muhammad Husaini Zulkifli)   
  - igc: Correct the launchtime offset (Muhammad Husaini Zulkifli)   
  - s390/uv: Panic for set and remove shared access UVC errors (Claudio Imbrenda)   
  - drm/amdgpu/jpeg2: properly set atomics vmid field (Alex Deucher)   
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [Orabug: 37070671] {CVE-2024-45021}
  - drm/amdgpu: Actually check flags for all context ops. (Bas Nieuwenhuizen)   
  - btrfs: tree-checker: add dev extent item checks (Qu Wenruo)   
  - selinux: fix potential counting error in avc_add_xperms_decision() (Zhen Lei)   
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [Orabug: 37070679] {CVE-2024-45025}
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin)   
  - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() (Alexander Lobakin)   
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin)   
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() (Alexander Lobakin)   
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [Orabug: 37029118] {CVE-2024-45003}
  - dm persistent data: fix memory allocation failure (Mikulas Patocka)   
  - dm resume: don't return EINVAL when signalled (Khazhismel Kumykov)   
  - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (Haibo Xu)   
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Stefan Haberland) [Orabug: 37070686] {CVE-2024-45026}
  - thunderbolt: Mark XDomain as unplugged when router is removed (Mika Westerberg) [Orabug: 37070774] {CVE-2024-46702}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [Orabug: 37029124] {CVE-2024-45006}
  - ALSA: usb-audio: Support Yamaha P-125 quirk entry (Juan José Arboleda)   
  - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (Lianqin Hu)   
  - char: xillybus: Check USB endpoints when probing device (Eli Billauer) [Orabug: 37070649] {CVE-2024-45011}
  - char: xillybus: Refine workqueue handling (Eli Billauer)   
  - char: xillybus: Don't destroy workqueue from work item running on it (Eli Billauer) [Orabug: 37029128] {CVE-2024-45007}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [Orabug: 37017950] {CVE-2024-44947}
  - LTS version: v5.15.165 (Vijayendra Suman)   
  - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" (Niklas Cassel)   
  - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (Sean Young)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode (Michael Walle)   
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Eric Dumazet) [Orabug: 36897690] {CVE-2024-42114}
  - binfmt_flat: Fix corruption when not offsetting data start (Kees Cook) [Orabug: 37029015] {CVE-2024-44966}
  - usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. (Chris Wulff)   
  - nvme/pci: Add APST quirk for Lenovo N60z laptop (WangYuli)   
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [Orabug: 36984016] {CVE-2024-43882}
  - arm64: cpufeature: Fix the visibility of compat hwcaps (Amit Daniel Kachhap)   
  - arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes (Dmitry Baryshkov)   
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. (Mahesh Salgaonkar) [Orabug: 36897773] {CVE-2024-42126}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [Orabug: 36953968] {CVE-2024-42259}
  - mptcp: fully established after ADD_ADDR echo on MPJ (Matthieu Baerts (NGI0))   
  - wifi: mac80211: check basic rates validity (Johannes Berg)   
  - PCI: dwc: Restore MSI Receiver mask during resume (Jisheng Zhang)   
  - net: stmmac: Enable mac_managed_pm phylink config (Shenwei Wang)   
  - netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal) [Orabug: 36896845] {CVE-2024-41042}
  - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal)   
  - netfilter: nf_tables: bail out if stateful expression provides no .clone (Pablo Neira Ayuso)   
  - netfilter: nf_tables: set element extended ACK reporting support (Pablo Neira Ayuso)   
  - tls: fix race between tx work scheduling and socket close (Jakub Kicinski) [Orabug: 36529710] {CVE-2024-26585}
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (Lukas Wunner) [Orabug: 36964228] {CVE-2024-42302}
  - btrfs: fix double inode unlock for direct IO sync writes (Filipe Manana) [Orabug: 37195039] {CVE-2024-43885}
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Christoph Hellwig) [Orabug: 36809257] {CVE-2024-39472}
  - btrfs: fix corruption after buffer fault in during direct IO append write (Filipe Manana)   
  - selftests: mptcp: join: check backup support in signal endp (Matthieu Baerts (NGI0))   
  - selftests: mptcp: join: validate backup in MPJ (Matthieu Baerts (NGI0))   
  - mptcp: pm: fix backup support in signal endpoints (Matthieu Baerts (NGI0))   
  - mptcp: export local_address (Geliang Tang)   
  - mptcp: pm: only set request_bkup flag when sending MP_PRIO (Matthieu Baerts (NGI0))   
  - mptcp: fix bad RCVPRUNED mib accounting (Paolo Abeni)   
  - mptcp: mib: count MPJ with backup flag (Matthieu Baerts (NGI0))   
  - mptcp: fix NL PM announced address accounting (Paolo Abeni)   
  - mptcp: distinguish rcv vs sent backup flag in requests (Matthieu Baerts (NGI0))   
  - mptcp: sched: check both directions for backup (Matthieu Baerts (NGI0))   
  - drm/mgag200: Set DDC timeout in milliseconds (Thomas Zimmermann)   
  - drm/bridge: analogix_dp: properly handle zero sized AUX transactions (Lucas Stach)   
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang) [Orabug: 37028981] {CVE-2024-44958}
  - sched/smt: Introduce sched_smt_present_inc/dec() helper (Yang Yingliang)   
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [Orabug: 37028935] {CVE-2024-44948}
  - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Waiman Long) [Orabug: 36992992] {CVE-2024-43889}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [Orabug: 36992997] {CVE-2024-43890}
  - power: supply: axp288_charger: Round constant_charge_voltage writes down (Hans de Goede)   
  - power: supply: axp288_charger: Fix constant_charge_voltage writes (Hans de Goede)   
  - genirq/irqdesc: Honor caller provided affinity in alloc_desc() (Shay Drory)   
  - irqchip/xilinx: Fix shift out of bounds (Radhey Shyam Pandey)   
  - kcov: properly check for softirq context (Andrey Konovalov)   
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [Orabug: 36993008] {CVE-2024-43893}
  - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() (Thomas Gleixner)   
  - ntp: Safeguard against time_constant overflow (Justin Stitt)   
  - irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' (Arseniy Krasnov)   
  - irqchip/meson-gpio: support more than 8 channels gpio irq (Qianggui Song)   
  - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() (Paul E. McKenney)   
  - clocksource: Scale the watchdog read retries automatically (Feng Tang)   
  - torture: Enable clocksource watchdog with "tsc=watchdog" (Paul E. McKenney)   
  - clocksource: Reduce the default clocksource_watchdog() retries to 2 (Waiman Long)   
  - ntp: Clamp maxerror and esterror to operating range (Justin Stitt)   
  - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler (Jason Wang)   
  - tick/broadcast: Move per CPU pointer access into the atomic section (Thomas Gleixner) [Orabug: 37195086] {CVE-2024-44968}
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Vamshi Gajjela)   
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)   
  - usb: gadget: u_serial: Set start_delayed during suspend (Prashanth K)   
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [Orabug: 37028987] {CVE-2024-44960}
  - USB: serial: debug: do not echo input by default (Marek Marczykowski-Górecki)   
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [Orabug: 36992970] {CVE-2024-43883}
  - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (Takashi Iwai)   
  - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (Steven 'Steve' Kendall)   
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [Orabug: 37028956] {CVE-2024-44954}
  - drm/client: fix null pointer dereference in drm_client_modeset_probe (Ma Ke) [Orabug: 36993013] {CVE-2024-43894}
  - ALSA: usb-audio: Re-add ScratchAmp quirk entries (Takashi Iwai)   
  - spi: spi-fsl-lpspi: Fix scldiv calculation (Stefan Wahren)   
  - kprobes: Fix to check symbol prefixes correctly (Masami Hiramatsu (Google))   
  - bpf: kprobe: remove unused declaring of bpf_kprobe_override (Menglong Dong)   
  - i2c: smbus: Send alert notifications to all devices if source not found (Guenter Roeck)   
  - spi: spidev: Add missing spi_device_id for bh2228fv (Geert Uytterhoeven)   
  - ASoC: codecs: wsa881x: Correct Soundwire ports mask (Krzysztof Kozlowski)   
  - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (Krzysztof Kozlowski)   
  - i2c: smbus: Improve handling of stuck alerts (Guenter Roeck)   
  - arm64: cputype: Add Cortex-A725 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X1C definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X925 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-A720 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X3 definitions (Mark Rutland)   
  - arm64: cputype: Add Neoverse-V3 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X4 definitions (Mark Rutland)   
  - arm64: barrier: Restore spec_bar() macro (Mark Rutland)   
  - arm64: Add Neoverse-V2 part (Besar Wicaksono)   
  - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space (James Morse)   
  - ext4: fix wrong unit use in ext4_mb_find_by_goal (Kemeng Shi)   
  - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime (Zheng Zucheng)   
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)   
  - profiling: remove profile=sleep support (Tetsuo Handa)   
  - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington)   
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [Orabug: 37029019] {CVE-2024-44969}
  - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (Kemeng Shi)   
  - ext4: fix uninitialized variable in ext4_inlinedir_to_tree (Xiaxi Shen)   
  - media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Michal Pecio)   
  - media: uvcvideo: Ignore empty TS packets (Ricardo Ribalda)   
  - drm/amd/display: Add null checker before passing variables (Alex Hung) [Orabug: 36993047] {CVE-2024-43902}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [Orabug: 36993077] {CVE-2024-43907}
  - drm/amdgpu: Fix the null pointer dereference to ras_manager (Ma Jun) [Orabug: 36993083] {CVE-2024-43908}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [Orabug: 36993089] {CVE-2024-43909}
  - btrfs: fix bitmap leak when loading free space cache on duplicate entry (Filipe Manana)   
  - wifi: nl80211: don't give key data to userspace (Johannes Berg)   
  - udf: prevent integer overflow in udf_bitmap_free_blocks() (Roman Smirnov)   
  - PCI: Add Edimax Vendor ID to pci_ids.h (FUJITA Tomonori)   
  - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Yonghong Song)   
  - ACPI: SBS: manage alarm sysfs attribute through psy core (Thomas Weißschuh)   
  - ACPI: battery: create alarm sysfs attribute atomically (Thomas Weißschuh)   
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Niklas Söderlund)   
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [Orabug: 36993126] {CVE-2024-43914}
  - md: do not delete safemode_timer in mddev_suspend (Li Nan)   
  - rcutorture: Fix rcu_torture_fwd_cb_cr() data race (Paul E. McKenney)   
  - net: fec: Stop PPS on driver remove (Csókás, Bence)   
  - l2tp: fix lockdep splat (James Chapman)   
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (Joe Hattori) [Orabug: 37029031] {CVE-2024-44971}
  - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Dmitry Antipov)   
  - net: linkwatch: use system_unbound_wq (Eric Dumazet)   
  - net: bridge: mcast: wait for previous gc cycles when removing port (Nikolay Aleksandrov) [Orabug: 36993143] {CVE-2024-44934}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [Orabug: 36983958] {CVE-2024-43861}
  - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Kuniyuki Iwashima) [Orabug: 36993146] {CVE-2024-44935}
  - sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long)   
  - x86/mm: Fix pti_clone_entry_text() for i386 (Peter Zijlstra)   
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [Orabug: 37029011] {CVE-2024-44965}
  - irqchip/mbigen: Fix mbigen node address layout (Yipeng Zou)   
  - netfilter: ipset: Add list flush to cancel_gc (Alexander Maltsev)   
  - mptcp: fix duplicate data handling (Paolo Abeni)   
  - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY (Heiner Kallweit)   
  - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (Ma Ke)   
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling (Zack Rusin) [Orabug: 36983964] {CVE-2024-43863}
  - Revert "ALSA: firewire-lib: operate for period elapse event in process context" (Edmund Raile)   
  - Revert "ALSA: firewire-lib: obsolete workqueue for period update" (Edmund Raile)   
  - ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G (Mavroudis Chatzilazaridis)   
  - ALSA: usb-audio: Correct surround channels in UAC1 channel map (Takashi Iwai)   
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Al Viro) [Orabug: 36963807] {CVE-2024-42265}
  - HID: wacom: Modify pen IDs (Tatsunosuke Tobita)   
  - platform/chrome: cros_ec_proto: Lock device when updating MKBP version (Patryk Duda)   
  - power: supply: bq24190_charger: replace deprecated strncpy with strscpy (Justin Stitt)   
  - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() (Zhe Qiao) [Orabug: 36963814] {CVE-2024-42267}
  - ipv6: fix ndisc_is_useropt() handling for PIO (Maciej Żenczykowski)   
  - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (Shahar Shitrit)   
  - net: mvpp2: Don't re-use loop iterator (Dan Carpenter)   
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [Orabug: 36964005] {CVE-2024-42271}
  - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). (Kuniyuki Iwashima)   
  - rtnetlink: enable alt_ifname for setlink/newlink (Florent Fourcot)   
  - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode (songxiebing)   
  - drm/vmwgfx: Fix overlay when using Screen Targets (Ian Forbes)   
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [Orabug: 36983978] {CVE-2024-43867}
  - MIPS: dts: loongson: Fix ls2k1000-rtc interrupt (Jiaxun Yang)   
  - MIPS: dts: loongson: Fix liointc IRQ polarity (Jiaxun Yang)   
  - MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a (Jiaxun Yang)   
  - MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000 (Binbin Zhou)   
  - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init (Aleksandr Mishin)   
  - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (Wayne Lin)   
  - irqchip/imx-irqsteer: Handle runtime power management correctly (Shenwei Wang) [Orabug: 36964084] {CVE-2024-42290}
  - irqchip/imx-irqsteer: Add runtime PM support (Lucas Stach)   
  - irqchip/imx-irqsteer: Constify irq_chip struct (Lucas Stach)   
  - irqdomain: Fixed unbalanced fwnode get and put (Herve Codina)   
  - leds: triggers: Flush pending brightness before activating trigger (Thomas Weißschuh)   
  - leds: trigger: Call synchronize_rcu() before calling trig->activate() (Hans de Goede)   
  - leds: trigger: Store brightness set by led_trigger_event() (Heiner Kallweit)   
  - leds: trigger: Remove unused function led_trigger_rename_static() (Heiner Kallweit)   
  - leds: trigger: use RCU to protect the led_cdevs list (Johannes Berg)   
  - drivers: soc: xilinx: check return status of get_api_version() (Jay Buddhabhatti)   
  - soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver (Michael Tretter)   
  - ext4: check the extent status again before inserting delalloc block (Zhang Yi)   
  - ext4: factor out a common helper to query extent map (Zhang Yi)   
  - ext4: convert to exclusive lock while inserting delalloc extents (Zhang Yi)   
  - ext4: refactor ext4_da_map_blocks() (Zhang Yi)   
  - ext4: make ext4_es_insert_extent() return void (Baokun Li)   
  - sysctl: always initialize i_uid/i_gid (Thomas Weißschuh) [Orabug: 36964269] {CVE-2024-42312}
  - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8998: drop USB PHY clock index (Johan Hovold)   
  - arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node (Shawn Guo)   
  - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC (Esben Haabendal)   
  - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT (Seth Forshee (DigitalOcean))   
  - nvme-pci: add missing condition check for existence of mapped data (Leon Romanovsky) [Orabug: 36964021] {CVE-2024-42276}
  - nvme: separate command prep and issue (Jens Axboe)   
  - nvme: split command copy into a helper (Jens Axboe)   
  - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (Artem Chernyshev) [Orabug: 36964025] {CVE-2024-42277}
  - ceph: fix incorrect kmalloc size of pagevec mempool (ethanwu)   
  - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (Pierre-Louis Bossart)   
  - spi: spidev: add correct compatible for Rohm BH2228FV (Conor Dooley)   
  - spi: spidev: order compatibles alphabetically (Krzysztof Kozlowski)   
  - spidev: Add Silicon Labs EM3581 device compatible (Vincent Tremblay)   
  - spi: spidev: Replace OF specific code by device property API (Andy Shevchenko)   
  - spi: spidev: Replace ACPI specific code by device_get_match_data() (Andy Shevchenko)   
  - spi: spidev: Make probe to fail early if a spidev compatible is used (Javier Martinez Canillas)   
  - lirc: rc_dev_get_from_fd(): fix file leak (Al Viro)   
  - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (Al Viro)   
  - apparmor: Fix null pointer deref when receiving skb during sock creation (Xiao Liang)   
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [Orabug: 36964031] {CVE-2024-42280}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [Orabug: 36964037] {CVE-2024-42281}
  - net: nexthop: Initialize all fields in dumped nexthops (Petr Machata) [Orabug: 36964043] {CVE-2024-42283}
  - net: stmmac: Correct byte order of perfect_match (Simon Horman)   
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [Orabug: 36964046] {CVE-2024-42284}
  - netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal)   
  - net: bonding: correctly annotate RCU in bond_should_notify_peers() (Johannes Berg)   
  - ipv4: Fix incorrect source address in Record Route option (Ido Schimmel)   
  - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later (Gregory CLEMENT)   
  - bpf, events: Use prog to emit ksymbol event for main program (Hou Tao)   
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [Orabug: 36964522] {CVE-2024-43856}
  - libbpf: Fix no-args func prototype BTF dumping syntax (Andrii Nakryiko)   
  - um: time-travel: fix signal blocking race/hang (Johannes Berg)   
  - um: time-travel: fix time-travel-start option (Johannes Berg)   
  - phy: cadence-torrent: Check return value on register read (Ma Ke)   
  - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels (Vignesh Raghavendra)   
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park) [Orabug: 36964529] {CVE-2024-43858}
  - kdb: address -Wformat-security warnings (Arnd Bergmann)   
  - kernel: rerun task_work while freezing in get_signal() (Pavel Begunkov)   
  - io_uring/io-wq: limit retrying worker initialisation (Pavel Begunkov)   
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [Orabug: 36964202] {CVE-2024-42295}
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (WangYuli)   
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Hilda Wu)   
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov)   
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov)   
  - drm/panfrost: Mark simple_ondemand governor as softdep (Dragan Simic)   
  - MIPS: Loongson64: Test register availability before use (Jiaxun Yang)   
  - MIPS: Loongson64: reset: Prioritise firmware service (Jiaxun Yang)   
  - MIPS: Loongson64: Remove memory node for builtin-dtb (Jiaxun Yang)   
  - MIPS: Loongson64: env: Hook up Loongsson-2K (Jiaxun Yang)   
  - MIPS: dts: loongson: Fix GMAC phy node (Jiaxun Yang)   
  - MIPS: ip30: ip30-console: Add missing include (Jiaxun Yang)   
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [Orabug: 36964536] {CVE-2024-43860}
  - remoteproc: stm32_rproc: Fix mailbox interrupts queuing (Gwenael Treuveur)   
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov)   
  - selftests/sigaltstack: Fix ppc64 GCC build (Michael Ellerman)   
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [Orabug: 36964053] {CVE-2024-42285}
  - platform: mips: cpu_hwmon: Disable driver on unsupported hardware (Jiaxun Yang)   
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (Thomas Gleixner)   
  - rtc: isl1208: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - drm/i915/dp: Reset intel_dp->link_trained before retraining the link (Imre Deak)   
  - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell (Alex Deucher)   
  - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (Nitin Gote)   
  - perf/x86/intel/pt: Fix a topa_entry base address calculation (Adrian Hunter)   
  - perf/x86/intel/pt: Fix topa_entry base length (Marco Cavenati)   
  - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR (Kan Liang)   
  - perf: Fix event leak upon exit (Frederic Weisbecker) [Orabug: 36983986] {CVE-2024-43870}
  - rtc: cmos: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - mm/numa_balancing: teach mpol_to_str about the balancing mode (Tvrtko Ursulin)   
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [Orabug: 36983990] {CVE-2024-43871}
  - devres: Fix devm_krealloc() wasting memory (Zijun Hu)   
  - gve: Fix an edge case for TSO skb validity check (Bailey Forrest)   
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [Orabug: 37203371] {CVE-2024-42292}
  - kbuild: Fix '-S -c' in x86 stack protector scripts (Nathan Chancellor)   
  - decompress_bunzip2: fix rare decompression failure (Ross Lagerwall)   
  - ubi: eba: properly rollback inside self_check_eba (Fedor Pchelkin)   
  - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (Bastien Curutchet)   
  - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed (Huacai Chen) [Orabug: 36964218] {CVE-2024-42299}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [Orabug: 36964222] {CVE-2024-42301}
  - binder: fix hang of unregistered readers (Carlos Llamas)   
  - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (Manivannan Sadhasivam)   
  - PCI: dw-rockchip: Fix initial PERST# GPIO value (Niklas Cassel)   
  - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (Wei Liu)   
  - hwrng: amd - Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - tools/memory-model: Fix bug in lock.cat (Alan Stern)   
  - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera (wangdicheng)   
  - ALSA: usb-audio: Move HD Webcam quirk to the right place (Takashi Iwai)   
  - ALSA: usb-audio: Fix microphone sound on HD webcam. (wangdicheng)   
  - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() (Sean Christopherson)   
  - media: uvcvideo: Fix integer overflow calculating timestamp (Ricardo Ribalda)   
  - jbd2: make jbd2_journal_get_max_txn_bufs() internal (Jan Kara)   
  - leds: ss4200: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - wifi: mwifiex: Fix interface type change (Rafael Beims)   
  - selftests/landlock: Add cred_transfer test (Mickaël Salaün)   
  - io_uring: tighten task exit cancellations (Pavel Begunkov)   
  - ext4: make sure the first directory block is not a hole (Baokun Li) [Orabug: 36964231] {CVE-2024-42304}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [Orabug: 36964236] {CVE-2024-42305}
  - m68k: amiga: Turn off Warp1260 interrupts during boot (Paolo Pisati)   
  - udf: Avoid using corrupted block bitmap buffer (Jan Kara) [Orabug: 36964241] {CVE-2024-42306}
  - task_work: Introduce task_work_cancel() again (Frederic Weisbecker)   
  - task_work: s/task_work_cancel()/task_work_cancel_func()/ (Frederic Weisbecker)   
  - apparmor: use kvfree_sensitive to free data->data (Fedor Pchelkin)   
  - sched/fair: Use all little CPUs for CPU-bound workloads (Pierre Gondois)   
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [Orabug: 36964246] {CVE-2024-42308}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [Orabug: 36964252] {CVE-2024-42309}
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [Orabug: 36964258] {CVE-2024-42310}
  - ext2: Verify bitmap and itable block numbers before using them (Jan Kara)   
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [Orabug: 36964264] {CVE-2024-42311}
  - ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error (Igor Pylypiv)   
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [Orabug: 36964274] {CVE-2024-42313}
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Joe Hattori)   
  - fuse: verify {g,u}id mount options correctly (Eric Sandeen)   
  - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks (Tejun Heo)   
  - ipv6: take care of scope when choosing the src addr (Nicolas Dichtel)   
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Chengen Du)   
  - net: netconsole: Disable target before netpoll cleanup (Breno Leitao)   
  - tick/broadcast: Make takeover of broadcast hrtimer reliable (Yu Liao)   
  - dt-bindings: thermal: correct thermal zone node name limit (Krzysztof Kozlowski)   
  - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer (Tetsuo Handa)   
  - mm/hugetlb: fix possible recursive locking detected warning (Miaohe Lin)   
  - landlock: Don't lose track of restrictions on cred_transfer (Jann Horn) [Orabug: 36964283] {CVE-2024-42318}
  - fs/ntfs3: Missed error return (Konstantin Komarov)   
  - rtc: interface: Add RTC offset to alarm after fix-up (Csókás, Bence)   
  - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (Ryusuke Konishi)   
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP (David Hildenbrand)   
  - fs/ntfs3: Fix field-spanning write in INDEX_HDR (Konstantin Komarov)   
  - fs/ntfs3: Replace inode_trylock with inode_lock (Konstantin Komarov)   
  - pinctrl: freescale: mxs: Fix refcount of child (Peng Fan)   
  - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: ti: ti-iodelay: Drop if block with always false condition (Uwe Kleine-König)   
  - pinctrl: single: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: rockchip: update rk3308 iomux routes (Dmitry Yashin)   
  - fs/ntfs3: Fix getting file type (Konstantin Komarov)   
  - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting (Konstantin Komarov)   
  - fs/ntfs3: Fix transform resident to nonresident for compressed files (Konstantin Komarov)   
  - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT (Konstantin Komarov)   
  - fs/ntfs3: Use ALIGN kernel macro (Konstantin Komarov)   
  - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports (Martin Willi)   
  - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports (Martin Willi)   
  - netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal)   
  - netfilter: nft_set_pipapo: constify lookup fn args where possible (Florian Westphal)   
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [Orabug: 37013754] {CVE-2024-44944}
  - bnxt_re: Fix imm_data endianness (Jack Wang)   
  - RDMA/hns: Fix insufficient extend DB for VFs. (Chengchang Tang)   
  - RDMA/hns: Fix undifined behavior caused by invalid max_sge (Chengchang Tang)   
  - RDMA/hns: Fix missing pagesize and alignment check in FRMR (Chengchang Tang)   
  - macintosh/therm_windtunnel: fix module unload. (Nick Bowler)   
  - powerpc/xmon: Fix disassembly CPU feature checks (Michael Ellerman)   
  - net: missing check virtio (Denis Arefev) [Orabug: 36964424] {CVE-2024-43817}
  - vhost/vsock: always initialize seqpacket_allow (Michael S. Tsirkin) [Orabug: 36983999] {CVE-2024-43873}
  - PCI: endpoint: Clean up error handling in vpci_scan_bus() (Dan Carpenter) [Orabug: 36984004] {CVE-2024-43875}
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure (Dmitry Torokhov)   
  - RDMA/device: Return error earlier if port in not valid (Leon Romanovsky)   
  - mtd: make mtd_test.c a separate module (Arnd Bergmann)   
  - ASoC: max98088: Check for clk_prepare_enable() error (Chen Ni)   
  - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs (Honggang LI)   
  - RDMA/mlx4: Fix truncated output warning in alias_GUID.c (Leon Romanovsky)   
  - RDMA/mlx4: Fix truncated output warning in mad.c (Leon Romanovsky)   
  - Input: qt1050 - handle CHIP_ID reading error (Andrei Lalaev)   
  - RDMA/cache: Release GID table even if leak is detected (Leon Romanovsky)   
  - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE (Chiara Meiohas)   
  - coresight: Fix ref leak when of_coresight_parse_endpoint() fails (James Clark)   
  - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock (Taniya Das)   
  - clk: qcom: branch: Add helper functions for setting retain bits (Konrad Dybcio)   
  - PCI: Fix resource double counting on remove & rescan (Ilpo Järvinen)   
  - SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington)   
  - sparc64: Fix incorrect function signature and add prototype for prom_cif_init (Andreas Larsson)   
  - ext4: avoid writing unitialized memory to disk in EA inodes (Jan Kara)   
  - ext4: don't track ranges in fast_commit if inode has inlined data (Luis Henriques (SUSE))   
  - ext4: return early for non-eligible fast_commit track events (Ritesh Harjani)   
  - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Olga Kornievskaia)   
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (NeilBrown)   
  - xprtrdma: Fix rpcrdma_reqs_reset() (Chuck Lever)   
  - mfd: omap-usb-tll: Use struct_size to allocate tll (Javier Carrasco)   
  - mfd: rsmu: Split core code into separate module (Arnd Bergmann)   
  - perf intel-pt: Fix exclude_guest setting (Adrian Hunter)   
  - perf intel-pt: Fix aux_watermark calculation for 64-bit size (Adrian Hunter)   
  - media: venus: flush all buffers in output plane streamoff (Dikshita Agarwal)   
  - ext4: fix infinite loop when replaying fast_commit (Luis Henriques (SUSE))   
  - Revert "leds: led-core: Fix refcount leak in of_led_get()" (Luca Ceresoli)   
  - drm/qxl: Add check for drm_cvt_mode (Chen Ni) [Orabug: 36964455] {CVE-2024-43829}
  - drm/etnaviv: fix DMA direction handling for cached RW buffers (Lucas Stach)   
  - perf report: Fix condition in sort__sym_cmp() (Namhyung Kim)   
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [Orabug: 36964458] {CVE-2024-43830}
  - drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property (Hsiao Chien Sung)   
  - drm/mediatek: Add missing plane settings when async update (Hsiao Chien Sung)   
  - media: renesas: vsp1: Store RPF partition configuration per RPF instance (Laurent Pinchart)   
  - media: renesas: vsp1: Fix _irqsave and _irq mix (Laurent Pinchart)   
  - media: uvcvideo: Override default flags (Daniel Schaefer)   
  - saa7134: Unchecked i2c_transfer function result fixed (Aleksandr Burakov)   
  - media: i2c: Fix imx412 exposure control (Bryan O'Donoghue)   
  - media: imon: Fix race getting ictx->lock (Ricardo Ribalda)   
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (Zheng Yejian)   
  - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (Douglas Anderson)   
  - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (Douglas Anderson)   
  - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (Friedrich Vock)   
  - drm/amd/pm: Fix aldebaran pcie speed reporting (Lijo Lazar)   
  - xdp: fix invalid wait context of page_pool_destroy() (Taehee Yoo) [Orabug: 36964469] {CVE-2024-43834}
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Amit Cohen)   
  - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o (Alan Maguire)   
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [Orabug: 36964479] {CVE-2024-43839}
  - bpf: annotate BTF show functions with __printf (Alan Maguire)   
  - selftests/bpf: Close fd in error path in drop_on_reuseport (Geliang Tang)   
  - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers (John Stultz)   
  - wifi: virt_wifi: don't use strlen() in const context (Johannes Berg)   
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Gaosheng Cui)   
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [Orabug: 36964486] {CVE-2024-43841}
  - perf: Fix default aux_watermark calculation (Adrian Hunter)   
  - perf: Prevent passing zero nr_pages to rb_alloc_aux() (Adrian Hunter)   
  - perf: Fix perf_aux_size() for greater-than 32-bit size (Adrian Hunter)   
  - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (Adrian Hunter)   
  - netfilter: nf_tables: rise cap on SELinux secmark context (Pablo Neira Ayuso)   
  - libbpf: Checking the btf_type kind when fixing variable offsets (Donglin Peng)   
  - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down (Csókás, Bence)   
  - net: fec: Refactor: #define magic constants (Csókás Bence)   
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [Orabug: 36984009] {CVE-2024-43879}
  - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (Baochen Qiang)   
  - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (Baochen Qiang)   
  - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors (Ido Schimmel)   
  - mlxsw: spectrum_acl_erp: Fix object nesting warning (Ido Schimmel) [Orabug: 36984012] {CVE-2024-43880}
  - lib: objagg: Fix general protection fault (Ido Schimmel) [Orabug: 36964494] {CVE-2024-43846}
  - selftests/bpf: Check length of recv in test_sockmap (Geliang Tang)   
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Guangguan Wang)   
  - tcp: fix races in tcp_v[46]_err() (Eric Dumazet)   
  - tcp: fix race in tcp_write_err() (Eric Dumazet)   
  - tcp: add tcp_done_with_error() helper (Eric Dumazet)   
  - tcp: annotate lockless access to sk->sk_err (Eric Dumazet)   
  - tcp: annotate lockless accesses to sk->sk_err_soft (Eric Dumazet)   
  - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP (Hagar Hemdan)   
  - selftests/bpf: Fix prog numbers in test_sockmap (Geliang Tang)   
  - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (Samasth Norway Ananda)   
  - firmware: turris-mox-rwtm: Initialize completion before mailbox (Marek Behún)   
  - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (Marek Behún)   
  - firmware: turris-mox-rwtm: Do not complete if there are no waiters (Marek Behún)   
  - vmlinux.lds.h: catch .bss..L* sections into BSS") (Christophe Leroy)   
  - ARM: spitz: fix GPIO assignment for backlight (Dmitry Torokhov)   
  - ARM: pxa: spitz: use gpio descriptors for audio (Arnd Bergmann)   
  - m68k: cmpxchg: Fix return value for default case in __arch_xchg() (Thorsten Blum)   
  - x86/xen: Convert comma to semicolon (Chen Ni)   
  - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages (Eero Tamminen)   
  - arm64: dts: amlogic: gx: correct hdmi clocks (Jerome Brunet)   
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 (Chen-Yu Tsai)   
  - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux (Rafał Miłecki)   
  - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property (Chen-Yu Tsai)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix board reset (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node (Marco Felsch)   
  - arm64: dts: rockchip: Increase VOP clk rate on RK3328 (Jonas Karlman)   
  - soc: qcom: pdr: fix parsing of domains lists (Dmitry Baryshkov)   
  - soc: qcom: pdr: protect locator_addr with the main mutex (Dmitry Baryshkov) [Orabug: 36964502] {CVE-2024-43849}
  - memory: fsl_ifc: Make FSL_IFC config visible and selectable (Esben Haabendal)   
  - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies (Dmitry Baryshkov)   
  - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers (Stephen Boyd)   
  - arm64: dts: qcom: sm8250: add power-domain to UFS PHY (Dmitry Baryshkov)   
  - arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm845: add power-domain to UFS PHY (Dmitry Baryshkov)   
  - hwmon: (max6697) Fix swapped temp{1,8} critical alarms (Guenter Roeck)   
  - hwmon: (max6697) Fix underflow when writing limit attributes (Guenter Roeck)   
  - drm/meson: fix canvas release in bind function (Yao Zi)   
  - pwm: stm32: Always do lazy disabling (Uwe Kleine-König)   
  - hwmon: (adt7475) Fix default duty on fan is disabled (Wayne Tung)   
  - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - x86/pci/xen: Fix PCIBIOS_* return code handling (Ilpo Järvinen)   
  - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling (Ilpo Järvinen)   
  - x86/of: Return consistent error type from x86_of_pci_irq_enable() (Ilpo Järvinen)   
  - hfsplus: fix to avoid false alarm of circular locking (Chao Yu)   
  - block: initialize integrity buffer to zero before writing it to media (Christoph Hellwig) [Orabug: 36964514] {CVE-2024-43854}
  - block: cleanup bio_integrity_prep (Jinyoung Choi)   
  - block: refactor to use helper (Nitesh Shetty)   
  - platform/chrome: cros_ec_debugfs: fix wrong EC message version (Tzung-Bi Shih)   
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [Orabug: 36964212] {CVE-2024-42297}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [Orabug: 36964207] {CVE-2024-42296}
  - LTS version: v5.15.164 (Vijayendra Suman)   
  - tap: add missing verification for short frame (Si-Wei Liu)   [Orabug: 36879156] {CVE-2024-41090} 
  - tun: add missing verification for short frame (Dongli Zhang)   [Orabug: 36879156] {CVE-2024-41091} 
  - wifi: rt2x00: use explicitly signed or unsigned types (Jason A. Donenfeld)   
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [Orabug: 36874755] {CVE-2024-41012} {CVE-2024-41020}
  - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused (Shengjiu Wang)   
  - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Seunghun Han)   
  - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (Edson Juliano Drosdeck)   
  - fs/ntfs3: Validate ff offset (lei lu) [Orabug: 36891672] {CVE-2024-41019}
  - jfs: don't walk off the end of ealist (lei lu) [Orabug: 36891666] {CVE-2024-41017}
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [Orabug: 36891654] {CVE-2024-41015}
  - Add gitignore file for samples/fanotify/ subdirectory (Linus Torvalds)   
  - docs: Fix formatting of literal sections in fanotify docs (Gabriel Krisman Bertazi)   
  - samples: Make fs-monitor depend on libc and headers (Gabriel Krisman Bertazi)   
  - samples: Add fs error monitoring example (Gabriel Krisman Bertazi)   
  - wifi: mac80211: disable softirqs for queued frame handling (Johannes Berg)   
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet (SeongJae Park)   
  - minmax: relax check to allow comparison between unsigned arguments and signed constants (David Laight)   
  - minmax: allow comparisons of 'int' against 'unsigned char/short' (David Laight)   
  - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (David Laight)   
  - minmax: fix header inclusions (Andy Shevchenko)   
  - minmax: clamp more efficiently by avoiding extra comparison (Jason A. Donenfeld)   
  - minmax: sanity check constant bounds when clamping (Jason A. Donenfeld)   
  - tracing: Define the is_signed_type() macro once (Bart Van Assche)   
  - spi: mux: set ctlr->bits_per_word_mask (David Lechner)   
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [Orabug: 36896968] {CVE-2024-41059}
  - selftests/vDSO: fix clang build errors and warnings (John Hubbard)   
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-König)   
  - riscv: stacktrace: fix usage of ftrace_graph_ret_addr() (Puranjay Mohan)   
  - fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)   
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [Orabug: 36896974] {CVE-2024-41060}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [Orabug: 36896993] {CVE-2024-41063}
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (Xingui Yang)   
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Ganesh Goudar) [Orabug: 36897001] {CVE-2024-41064}
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Anjali K) [Orabug: 36897008] {CVE-2024-41065}
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)   
  - net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)   
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)   
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (Aivaz Latypov)   
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [Orabug: 36897343] {CVE-2024-41078}
  - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB (Armin Wolf)   
  - platform/x86: lg-laptop: Change ACPI device id (Armin Wolf)   
  - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (Armin Wolf)   
  - platform/x86: wireless-hotkey: Add support for LG Airplane Button (Armin Wolf)   
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [Orabug: 36897031] {CVE-2024-41068}
  - can: kvaser_usb: fix return value for hif_usb_send_regout (Chen Ni)   
  - ASoC: ti: omap-hdmi: Fix too long driver name (Primoz Fiser)   
  - ASoC: ti: davinci-mcasp: Set min period size using FIFO config (Jai Luthra)   
  - ALSA: dmaengine: Synchronize dma channel after drop() (Jai Luthra)   
  - bytcr_rt5640 : inverse jack detect for Archos 101 cesium (Thomas GENTY)   
  - Input: i8042 - add Ayaneo Kun to i8042 quirk table (Tobias Jakobi)   
  - Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)   
  - mips: fix compat_sys_lseek syscall (Arnd Bergmann)   
  - ALSA: hda/realtek: Add more codec ID to no shutup pins list (Kailang Yang)   
  - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (Alexey Makhalov)   
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Michael Ellerman) [Orabug: 36897047] {CVE-2024-41070}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [Orabug: 36897311] {CVE-2024-41072}
  - nvme: avoid double free special payload (Chunguang Xu) [Orabug: 36897316] {CVE-2024-41073}
  - mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)   
  - fs/file: fix the check in find_next_fd() (Yuntao Wang)   
  - kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)   
  - kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)   
  - null_blk: fix validation of block size (Andreas Hindborg) [Orabug: 36897338] {CVE-2024-41077}
  - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (Wei Li)   
  - ila: block BH in ila_output() (Eric Dumazet) [Orabug: 36897359] {CVE-2024-41081}
  - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() (Eric Dumazet)   
  - Input: silead - Always support 10 fingers (Hans de Goede)   
  - selftests/openat2: Fix build warnings on ppc64 (Michael Ellerman)   
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)   
  - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (Ayala Beker)   
  - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (Yedidya Benshimol)   
  - wifi: mac80211: handle tasklet frames before stopping (Johannes Berg)   
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)   
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs (Dhananjay Ugwekar)   
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)   
  - ACPI: EC: Abort address space access upon error (Armin Wolf)   
  - scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)   
  - scsi: qedf: Wait for stag work during unload (Saurav Kashyap)   
  - scsi: qedf: Don't process stag work during unload and recovery (Saurav Kashyap)   
  - scsi: core: alua: I/O errors for ALUA state transitions (Martin Wilck)   
  - scsi: core: Fix a use-after-free (Bart Van Assche)   
  - bpf: Fix overrunning reservations in ringbuf (Daniel Borkmann) [Orabug: 36850238] {CVE-2024-41009}
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)   
  - ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)   
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [Orabug: 36874755] {CVE-2024-41012} {CVE-2024-41020}
  - gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.5.el9uek]
changelog:
  - mm/hugetlb: fix adjusting poison page flag in non-HVO scenario (Jane Chu)  [Orabug: 37182268]  
  - x86/bugs: Adjust SRSO mitigation to new features (Boris Ostrovsky)  [Orabug: 37145844]  
  - net/mlx5: disable the 'fast unload' feature on Exadata systems (Qing Huang)  [Orabug: 37093170]  
  - NFS: remove revoked delegation from server's delegation list (Dai Ngo)  [Orabug: 36990366]  
  - perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (Alexander Antonov)  [Orabug: 36882937]  {CVE-2023-52450}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.6.el9uek]
changelog:
  - ice: Add a per-VF limit on number of FDIR filters (Ahmed Zaki)  [Orabug: 36964088]  {CVE-2024-42291} 
  - scsi: lpfc: Fix a possible null pointer dereference (Huai-Yuan Liu)  [Orabug: 36964437]  {CVE-2024-43821} 
  - power: reset: pwr-mlxbf: support graceful shutdown (Asmaa Mnebhi)  [Orabug: 37208029]  
  - gpio: mlxbf3: Support shutdown() function (Asmaa Mnebhi)  [Orabug: 37208029]  
  - sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove() (Liming Sun)  [Orabug: 37208029]  
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna)  [Orabug: 37199019]  
  - Revert "ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block" (Gautham Ananthakrishna)  [Orabug: 37199019]


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Dodji Seketeli <dodji@redhat.com> - 1.8-1
changelog:
  - Update to upstream 1.8
  - Add 'make check-self-compare' to the regression tests run.
  - BuildRequires python3-koji


author: Dodji Seketeli <dodji@seketeli.org> - 1.8.1-1
changelog:
  - Update to upstream fixes up to libabigail-1.8.1
    This encompasses this fixes, compared to the last 1.8 release:
        ir: Add better comments to types_have_similar_structure
        mainpage: Update web page for 1.8 release
        Bug 26992 - Try harder to resolve declaration-only classes
        Bug 27204 -  potential loss of some aliased ELF function symbols
        Ignore duplicated functions and those not associated with ELF symbols
        Bug 27236 - Pointer comparison wrongly fails because of typedef change
        Bug 27233 - fedabipkgdiff fails on package gnupg2 from Fedora 33
        Bug 27232 - fedabipkgdiff fails on gawk from Fedora 33
        dwarf-reader: Support fast DW_FORM_line_strp string comparison
        gen-changelog.py: Update call to subprocess.Popen & cleanup
        Bug 27255 - fedabipkgdiff fails on nfs-utils on Fedora 33
        abidiff: support --dump-diff-tree with --leaf-changes-only
        ir: Arrays are indirect types for type structure similarity purposes
        Add qualifier / typedef / array / pointer test
        abg-ir: Optimize calls to std::string::find() for a single char.
        abipkgdiff: Address operator precedence warning


author: Dodji Seketeli <dodji@redhat.com> - 2.0-1
changelog:
  - Update to upstream 2.0 tarball
  - Change License to ASL 2.0 to comply with the upstream license change.


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-4
changelog:
  - Memory leaks fixes backport
    Resolves: rhbz#1938757
  - Fix default key size for non XTS ciphers
    Resolves: rhbz#1954005


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-6
changelog:
  - Add workarounds for some LVM test issues
    Resolves: rhbz#1976174
  - Adapt tests to xfsprogs 5.12 changes
    Resolves: rhbz#1976176


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-10
changelog:
  - Fix reading statistics for VDO pools with VDO 8
    Resolves: rhbz#1994220
  - vdo_stats: Default to 100 % savings for invalid savings values
    Resolves: rhbz#2025880
  - Add support for creating and unlocking standalone integrity devices
    Resolves: rhbz#2011365


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Stephen Brennan <stephen.s.brennan@oracle.com> - 0.5.4-1.0.2
changelog:
  - Fix missing ./configure script in build
  - Remove unnecessary libzstd dependency for OL7 [Orabug: 36206258]
  - Include unreleased fix for segmentation fault in cache layer [Orabug: 36174225]


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * https://gitlab.com/cwrap/pam_wrapper/-/blob/master/CHANGELOG
    * resolves: #1816943


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2
changelog:
  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#2072640 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2070189 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2070138 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2065098 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2062716 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2056482 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#1937895 - SSSD update prompts for smartcard pin twice - After update to 7.9
  - Resolves: rhbz#1925559 - [RFE] Implement time logging for the LDAP queries and warning of high queries time
  - Resolves: rhbz#1915564 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#1859751 - [RFE] Allow SSSD to use anonymous pkinit for FAST
  - Resolves: rhbz#1749279 - 2FA prompting setting ineffective
  - Resolves: rhbz#1661055 - sssd fails GPO-based access if AD have setup with Japanese language
  - Resolves: rhbz#1245367 - [RFE] Implement memory cache for SID requests to improve performance


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237301 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Darren Archibald <darren.archibald@oracle.com> - 2.9.1-4.0.1.5
changelog:
  - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [RHEL-19213]
  - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [RHEL-19993]
  - SSSD GPO lacks group resolution on hosts [RHEL-21089]
  - Make sure 8.9.z/9.3.z doesn't build 'passkey' code [RHEL-21165]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.78.0-1
changelog:
  - Bump glib2 version 2.78.0
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS
  - Resolves: RHEL-5019
  - Resolves: RHEL-5020
  - Resolves: RHEL-5092
  - Resolves: RHEL-5093
  - Resolves: RHEL-5094


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.10.0-1
changelog:
  - Rebase to 16.10.0, add corepack, fix PowerShell dependency
  - Resolves: RHBZ#2000539, #2000548, #2000549, #2002177


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-1
changelog:
  - Update to latest version
  - Use jinja and jq
  - Don't fix python3
  - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533
  - Resolves CVE-2020-15095
  - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960
  - Resolves: CVE-2021-3807, CVE-2021-27290


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Darren Archibald <darren.archibald@oracle.com> - 28-10.0.1
changelog:
  - Renamed the package to oracle-bookmarks [Orabug: 33802033]
  - Updated Summary and description to be production neutral in spec file
  - Replaced default-bookmarks.html with Oracle's default-bookmarks.html [Orabug: 30069264]


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-1
changelog:
  - Unable to show metadata for "service" agents with "@" and "." in the name
  - Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
  - Pacemaker does not convert & to &amp; when generating metadata for non-ocf agents
  - Rebase pacemaker on upstream 2.1.3 release
  - Resolves: rhbz2045110
  - Resolves: rhbz2049720
  - Resolves: rhbz2050259
  - Resolves: rhbz2072108


author: Chris Lumens <clumens@redhat.com> - 2.1.4-5.1
changelog:
  - Fix regression where reordered resources do not get moved
  - Execute resource metadata actions asynchronously
  - Resolves: rhbz2128035
  - Resolves: rhbz2128036


author: Alan Steinberg <alan.steinberg@oracle.com> - 2.1.4-5.0.1.2
changelog:
  - Replace bug url [Orabug: 34202300]
  - Upstream reference in pacemaker crm_report binary [Orabug: 32825154]


author: Chris Lumens <clumens@redhat.com> - 2.1.5-1
changelog:
  - Rebase on upstream 2.1.5-rc2 release
  - Resolves: rhbz2123727
  - Resolves: rhbz2125337
  - Resolves: rhbz2125344
  - Resolves: rhbz2133546
  - Resolves: rhbz2142683


author: Chris Lumens <clumens@redhat.com> - 2.1.5-4
changelog:
  - Rebase pacemaker on upstream 2.1.5 final release
  - Add support for sync points to attribute daemon
  - Resolves: rhbz2122353


author: Chris Lumens <clumens@redhat.com> - 2.1.5-6
changelog:
  - Backport fix for migration history cleanup causing resource recovery
  - Backport fix for SIGABRT during pacemaker-fenced shutdown
  - Resolves: rhbz2166393
  - Resolves: rhbz2166967


author: Chris Lumens <clumens@redhat.com> - 2.1.5-7
changelog:
  - Additional fixes for SIGABRT during pacemaker-fenced shutdown
  - Backport fix for attrd_updater -QA not displaying all nodes
  - Related: rhbz2166967
  - Resolves: rhbz2169829


author: Chris Lumens <clumens@redhat.com> - 2.1.6-4
changelog:
  - Fix moving groups when there's a constraint for a single group member
  - Resolves: rhbz2218218
  - Resolves: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.6-5
changelog:
  - Clone instances should not shuffle unnecessarily
  - Fix a bug in clone resource description display
  - Resolves: rhbz2222055
  - Related: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.6-6
changelog:
  - Apply dampening when creating attributes with attrd_updater -U
  - Resolves: rhbz2224051
  - Related: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 2.1.7-5.2.0.1
changelog:
  - Memory leak in pacemaker-attrd
  - crm_node mishandles node IDs
  - Resolves: RHEL-40118
  - Resolves: RHEL-49925


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Jens Petersen <petersen@redhat.com> - 2.9.2.1-5
changelog:
  - https://hackage.haskell.org/package/pandoc-2.9.2.1/changelog
  - subpackage base-noprelude
  - bitarray and unicode-transforms were packaged


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Paul Howarth <paul@city-fan.org> - 0.400002-13
changelog:
  - Avoid optional test dependency perl(Moo) for EPEL builds
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.16-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify builds by usage
    - Drop redundant buildroot cleaning in %install section
    - Don't need to delete empty directories from the buildroot
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.22-1
changelog:
  - Update to 1.22
    - Removed embedded copy of Config::AutoConf from distro.; instead, this is
      now a configure phase prereq. (GH#19)
    - Moved list of constants in libmagic that we care about to one module (GH#20)
    - Add support for setting libmagic processing limits (GH#15, GH#22)
    - Add two class methods that provide introspection on the available limit
      processing parameters, max_param_constant() and limit_key_is_supported()
      (GH#24)
    - Check all libmagic function return values properly and croak on failure
      (GH#21)
    - Switched to using GitHub issues
  - Package CONTRIBUTING.md


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Fixed a bug with the Makefile.PL that caused every call to "make" to
      recompile the object file for the package's XS code (GH#28)


author: Emmanuel Seyman <emmanuel@seyman.fr> - 2.003006-1
changelog:
  - Update to 2.003006
  - Replace calls to %{__perl} with /usr/bin/perl
  - Replace calls to "make pure_install" with %{make_install}
  - Replace calls to make with %{make_build}
  - Pass NO_PERLLOCAL=1 to Makefile.PL


author: Tom Stellard <tstellar@redhat.com> - 1.8-3
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 2.100-1
changelog:
  - Update to 2.100
    - Declare vars with our instead of use vars (GH#7)
    - Quote $VERSION to preserve formatting (GH#6)
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.25-24
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.16-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.05-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
    - Noted that the module is now deprecated
    - Added a list of alternatives to SEE ALSO


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Upgrade to version 2.1.0
  - Removed patch:
    * 0001-Port-to-current-qdox.patch
      + integrated upstream
  - Added patch:
    * plexus-containers-asm6.patch
      + allow building against asm6
  - Specify maven.compiler.release to fix build with jdk9+ and newer
    maven-javadoc-plugin


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Filip Januš <fjanus@redhat.com> - 13.7-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 13.7
  - Release notes: https://www.postgresql.org/docs/release/13.7/


author: Jan Rybar <jrybar@redhat.com> - 3.3.16-2
changelog:
  - ps: new exe format option to show real path to exe
  - pidof: new -w option to show kernel worker threads
  - pkill: manpage to document -e option
  - Resolves: bz#1629413
  - Resolves: bz#1399206


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Miro Hrončok <mhroncok@redhat.com> - 1.4-7
changelog:
  - Subpackage python2-blinker has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1.2-9
changelog:
  - Resolves: rhbz#1960905 : License corrected to ASL 2.0
  - See upstream commit 4bdf076 and release 1.0.7
  - Added CI tests


author: Miro Hrončok <mhroncok@redhat.com> - 20.3-1
changelog:
  - Update to 20.3
  - Add support for PEP 600: Future manylinux Platform Tags
  - New resolver
  - Fixes: rhbz#1893470


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 4.0-8
changelog:
  - Subpackage python2-pytest-runner has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Colin Walters <walters@verbum.org> - 2022.8-2
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2022.8
    Resolves: rhbz#2077062
    Resolves: rhbz#2023325


author: Luca BRUNO <lucab@redhat.com> - 2022.13-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2022.12
    Resolves: rhbz#2126108


author: Colin Walters <walters@verbum.org> - 2023.8-2
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2023.8
    https://issues.redhat.com/browse/RHEL-11294


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2024.3-1
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2024.3
    Backport https://github.com/coreos/rpm-ostree/commit/fe586621e5014d14f92b913338171a02ed29e6cc
    Resolves: #RHEL-26186


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2024.5-1
changelog:
  - Rebase to 2024.5
    Adds fix for https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6
    Resolves: #RHEL-30415


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.2.1-8
changelog:
  - Wrap rexml depedency with fedora release
  - Add upstream patch for rouge change
  - Add upstream patch to silence warnings from minitest


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Switch to https://github.com/apjanke/ronn-ng/ upstream fork (#1817168)
  - Regenerate spec file with gem2rpm.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Add BRs for tests, enable tests in %check.
  - Require /usr/bin/groff, not the package in case the file is moved.
  - Keep the license file in the original location.
  - Adjust various macros and invocations.


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.22-1
changelog:
  - Allow sshd read filesystem sysctl files
  Resolves: rhbz#2036585
  - Revert "Allow sshd read sysctl files"
  Resolves: rhbz#2036585


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.23-1
changelog:
  - Allow systemd nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Label /var/run/user/%{USERID}/dbus with session_dbusd_tmp_t
  Resolves: rhbz#2000039
  - Change /run/user/[0-9]+ to /run/user/%{USERID} for proper labeling
  Resolves: rhbz#2000039
  - Allow scripts to enter LUKS password
  Resolves: rhbz#2048521
  - Allow system_mail_t read inherited apache system content rw files
  Resolves: rhbz#2049372
  - Add apache_read_inherited_sys_content_rw_files() interface
  Related: rhbz#2049372
  - Allow sanlock get attributes of filesystems with extended attributes
  Resolves: rhbz#2047811
  - Associate stratisd_data_t with device filesystem
  Resolves: rhbz#2039974
  - Allow init read stratis data symlinks
  Resolves: rhbz#2039974
  - Label /run/stratisd with stratisd_var_run_t
  Resolves: rhbz#2039974
  - Allow domtrans to sssd_t and role access to sssd
  Resolves: rhbz#2039757
  - Creating interface sssd_run_sssd()
  Resolves: rhbz#2039757
  - Fix badly indented used interfaces
  Resolves: rhbz#2039757
  - Allow domain transition to sssd_t
  Resolves: rhbz#2039757
  - Label /dev/nvme-fabrics with fixed_disk_device_t
  Resolves: rhbz#2039759
  - Allow local_login_t nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Allow xdm_t nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Make cupsd_lpd_t a daemon
  Resolves: rhbz#2039449
  - Label utilities for exFAT filesystems with fsadm_exec_t
  Resolves: rhbz#1972225
  - Dontaudit sfcbd sys_ptrace cap_userns
  Resolves: rhbz#2040311


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.24-1
changelog:
  - Allow tumblerd write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow login_userdomain write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow login_userdomain create session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow gkeyringd_domain write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow systemd-logind delete session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow gdm-x-session write to session dbus tmp sock files
  Resolves: rhbz#2000039
  - Allow sysadm_t nnp_domtrans to systemd_tmpfiles_t
  Resolves: rhbz#2039453
  - Label exFAT utilities at /usr/sbin
  Resolves: rhbz#1972225


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.25-1
changelog:
  - Allow systemd watch unallocated ttys
  Resolves: rhbz#2054150
  - Allow alsa bind mixer controls to led triggers
  Resolves: rhbz#2049732
  - Allow alsactl set group Process ID of a process
  Resolves: rhbz#2049732
  - Allow unconfined to run virtd bpf
  Resolves: rhbz#2033504


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.26-1
changelog:
  - Remove permissive domain for insights_client_t
  Resolves: rhbz#2055823
  - New policy for insight-client
  Resolves: rhbz#2055823
  - Allow confined sysadmin to use tool vipw
  Resolves: rhbz#2053458
  - Allow chage domtrans to sssd
  Resolves: rhbz#2054657
  - Remove label for /usr/sbin/bgpd
  Resolves: rhbz#2055578
  - Dontaudit pkcsslotd sys_admin capability
  Resolves: rhbz#2055639
  - Do not change selinuxuser_execmod and selinuxuser_execstack
  Resolves: rhbz#2055822
  - Allow tuned to read rhsmcertd config files
  Resolves: rhbz#2055823


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.27-1
changelog:
  - Allow ModemManager connect to the unconfined user domain
  Resolves: rhbz#2000196
  - Label /dev/wwan.+ with modem_manager_t
  Resolves: rhbz#2000196
  - Allow systemd-coredump userns capabilities and root mounton
  Resolves: rhbz#2057435
  - Allow systemd-coredump read and write usermodehelper state
  Resolves: rhbz#2057435
  - Allow sysadm_passwd_t to relabel passwd and group files
  Resolves: rhbz#2053458
  - Allow systemd-sysctl read the security state information
  Resolves: rhbz#2056999
  - Remove unnecessary /etc file transitions for insights-client
  Resolves: rhbz#2055823
  - Label all content in /var/lib/insights with insights_client_var_lib_t
  Resolves: rhbz#2055823
  - Update insights-client policy
  Resolves: rhbz#2055823
  - Update insights-client: fc pattern, motd, writing to etc
  Resolves: rhbz#2055823
  - Update specfile to buildrequire policycoreutils-devel >= 3.3-5
  - Add modules_checksum to %files


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.28-1
changelog:
  - Allow logrotate a domain transition to cluster administrative domain
  Resolves: rhbz#2061277
  - Change the selinuxuser_execstack boolean value to true
  Resolves: rhbz#2064274


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.29-1
changelog:
  - Allow qemu-kvm create and use netlink rdma sockets
  Resolves: rhbz#2063612
  - Label corosync-cfgtool with cluster_exec_t
  Resolves: rhbz#2061277


author: EL Errata <el-errata_ww@oracle.com> - 34.1.29-1.0.1
changelog:
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow administrative users the bpf capability [Orabug: 33803450]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.29-1.1
changelog:
  - Update insights_client_filetrans_named_content()
  Resolves: rhbz#2106147
  - Allow transition to insights_client named content
  Resolves: rhbz#2106147
  - Add the insights_client_filetrans_named_content() interface
  Resolves: rhbz#2106147
  - Update policy for insights-client to run additional commands 3
  Resolves: rhbz#2106147
  - Allow insights-client execute its private memfd: objects
  Resolves: rhbz#2106147
  - Update policy for insights-client to run additional commands 2
  Resolves: rhbz#2106147
  - Use insights_client_tmp_t instead of insights_client_var_tmp_t
  Resolves: rhbz#2106147
  - Change space indentation to tab in insights-client
  Resolves: rhbz#2106147
  - Use socket permissions sets in insights-client
  Resolves: rhbz#2106147
  - Update policy for insights-client to run additional commands
  Resolves: rhbz#2106147
  - Allow init_t to rw insights_client unnamed pipe
  Resolves: rhbz#2106147
  - Change rpm_setattr_db_files() to use a pattern
  Resolves: rhbz#2106147
  - Add rpm setattr db files macro
  Resolves: rhbz#2106147
  - Fix insights client
  Resolves: rhbz#2106147
  - Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
  Resolves: rhbz#2106147
  - Label /var/cache/insights with insights_client_cache_t
  Resolves: rhbz#2106147
  - Allow insights-client manage gpg admin home content
  Resolves: rhbz#2106147
  - Add the gpg_manage_admin_home_content() interface
  Resolves: rhbz#2106147
  - Allow insights-client create and use unix_dgram_socket
  Resolves: rhbz#2106147
  - Allow insights-client search gconf homedir
  Resolves: rhbz#2106147
  - Allow insights-client create_socket_perms for tcp/udp sockets
  Resolves: rhbz#2106147
  - Allow insights-client read rhnsd config files
  Resolves: rhbz#2106147


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.29-1.2
changelog:
  - Allow insights-client rpm named file transitions
  Resolves: rhbz#2106147
  - Add /var/tmp/insights-archive to insights_client_filetrans_named_content
  Resolves: rhbz#2106147
  - Use insights_client_filetrans_named_content
  Resolves: rhbz#2106147
  - Make default file context match with named transitions
  Resolves: rhbz#2106147
  - Allow rhsmcertd to read insights config files
  Resolves: rhbz#2106147
  - Label /etc/insights-client/machine-id
  Resolves: rhbz#2106147
  - Use insights_client_etc_t in insights_search_config()
  Resolves: rhbz#2106147
  - Add the insights_search_config() interface
  Resolves: rhbz#2106147


author: EL Errata <el-errata_ww@oracle.com> - 34.1.29-1.0.4
changelog:
  - Add the corecmd_watch_bin_dirs() interface [Orabug: 34322059]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Revert "Dontaudit domain the fowner capability" [Orabug: 33952489]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow administrative users the bpf capability [Orabug: 33803450]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.35-1
changelog:
  -Add the corecmd_watch_bin_dirs() interface
  Resolves: rhbz#1965013
  - Update rhcd policy
  Resolves: rhbz#1965013
  - Allow rhcd search insights configuration directories
  Resolves: rhbz#1965013
  - Add the kernel_read_proc_files() interface
  Resolves: rhbz#1965013
  - Update insights_client_filetrans_named_content()
  Resolves: rhbz#2081425
  - Allow transition to insights_client named content
  Resolves: rhbz#2081425
  - Add the insights_client_filetrans_named_content() interface
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands 3
  Resolves: rhbz#2081425
  - Allow insights-client execute its private memfd: objects
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands 2
  Resolves: rhbz#2081425
  - Use insights_client_tmp_t instead of insights_client_var_tmp_t
  Resolves: rhbz#2081425
  - Change space indentation to tab in insights-client
  Resolves: rhbz#2081425
  - Use socket permissions sets in insights-client
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands
  Resolves: rhbz#2081425
  - Allow init_t to rw insights_client unnamed pipe
  Resolves: rhbz#2081425
  - Fix insights client
  Resolves: rhbz#2081425
  - Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
  Resolves: rhbz#2081425
  - Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
  Resolves: rhbz#2081425
  - Allow stalld get scheduling policy of kernel threads
  Resolves: rhbz#2096776
  - Update samba-dcerpcd policy for kerberos usage
  Resolves: rhbz#2096521
  - Allow winbind_rpcd_t connect to self over a unix_stream_socket
  Resolves: rhbz#2096255
  - Allow dlm_controld send a null signal to a cluster daemon
  Resolves: rhbz#2095884
  - Allow dhclient manage pid files used by chronyd
  The chronyd_manage_pid_files() interface was added.
  - Resolves: rhbz#2094155
  Allow install_t nnp_domtrans to setfiles_mac_t
  - Resolves: rhbz#2073010
  - Allow rabbitmq to use systemd notify
  Resolves: rhbz#2056565
  - Allow ksmctl create hardware state information files
  Resolves: rhbz#2021131
  - Label /var/target with targetd_var_t
  Resolves: rhbz#2020169
  - Allow targetclid read generic SSL certificates
  Resolves: rhbz#2020169


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.36-1
changelog:
  - Allow targetclid read generic SSL certificates (fixed)
  Resolves: rhbz#2020169
  - Fix file context pattern for /var/target
  Resolves: rhbz#2020169
  - Use insights_client_etc_t in insights_search_config()
  Resolves: rhbz#1965013


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.37-1
changelog:
  - Allow targetclid read /var/target files
  Resolves: rhbz#2020169
  - Update samba-dcerpcd policy for kerberos usage 2
  Resolves: rhbz#2096521
  - Allow samba-dcerpcd work with sssd
  Resolves: rhbz#2096521
  - Allow stalld set scheduling policy of kernel threads
  Resolves: rhbz#2102224


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.38-1
changelog:
  - Allow some domains use sd_notify()
  Resolves: rhbz#2056565
  - Revert "Allow rabbitmq to use systemd notify"
  Resolves: rhbz#2056565
  - Update winbind_rpcd_t
  Resolves: rhbz#2102084
  - Update chronyd_pid_filetrans() to allow create dirs
  Resolves: rhbz#2101910
  - Allow keepalived read the contents of the sysfs filesystem
  Resolves: rhbz#2098130
  - Define LIBSEPOL version 3.4-1
  Resolves: rhbz#2095688


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.39-1
changelog:
  - Add support for systemd-network-generator
  Resolves: RHBZ#2111069
  - Allow systemd work with install_t unix stream sockets
  Resolves: rhbz#2111206
  - Allow sa-update to get init status and start systemd files
  Resolves: RHBZ#2061844


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.40-1
changelog:
  - Allow systemd-modules-load write to /dev/kmsg and send a message to syslogd
  Resolves: RHBZ#2088257
  - Allow systemd_hostnamed label /run/systemd/* as hostnamed_etc_t
  Resolves: RHBZ#1976684
  - Allow samba-bgqd get a printer list
  Resolves: rhbz#2112395
  - Allow networkmanager to signal unconfined process
  Resolves: RHBZ#2074414
  - Update NetworkManager-dispatcher policy
  Resolves: RHBZ#2101910
  - Allow openvswitch search tracefs dirs
  Resolves: rhbz#1988164
  - Allow openvswitch use its private tmpfs files and dirs
  Resolves: rhbz#1988164
  - Allow openvswitch fsetid capability
  Resolves: rhbz#1988164


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.41-1
changelog:
  - Allow unconfined domains to bpf all other domains
  Resolves: RHBZ#2112014
  - Allow stalld get and set scheduling policy of all domains.
  Resolves: rhbz#2105038
  - Allow unconfined_t transition to targetclid_home_t
  Resolves: RHBZ#2106360
  - Allow samba-bgqd to read a printer list
  Resolves: rhbz#2118977
  - Allow system_dbusd ioctl kernel with a unix stream sockets
  Resolves: rhbz#2085392
  - Allow chronyd bind UDP sockets to ptp_event ports.
  Resolves: RHBZ#2118631
  - Update tor_bind_all_unreserved_ports interface
  Resolves: RHBZ#2089486
  - Remove permissive domain for rhcd_t
  Resolves: rhbz#2119351
  - Allow unconfined and sysadm users transition for /root/.gnupg
  Resolves: rhbz#2121125
  - Add gpg_filetrans_admin_home_content() interface
  Resolves: rhbz#2121125
  - Update rhcd policy for executing additional commands
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution
  Resolves: rhbz#2119507
  - Add rpm setattr db files macro
  Resolves: rhbz#2119507
  - Add userdom_view_all_users_keys() interface
  Resolves: rhbz#2119507
  - Allow gpg read and write generic pty type
  Resolves: rhbz#2119507
  - Allow chronyc read and write generic pty type
  Resolves: rhbz#2119507


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.42-1
changelog:
  - Label /var/log/rhc-worker-playbook with rhcd_var_log_t
  Resolves: rhbz#2119351
  - Update insights-client policy (auditctl, gpg, journal)
  Resolves: rhbz#2107363


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.43-1
changelog:
  - Update rhcd policy for executing additional commands 5
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 4
  Resolves: rhbz#2119351
  - Allow rhcd create rpm hawkey logs with correct label
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 3
  Resolves: rhbz#2119351
  - Allow sssd to set samba setting
  Resolves: rhbz#2121125
  - Allow journalctl read rhcd fifo files
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution 5
  Resolves: rhbz#2121125
  - Confine insights-client systemd unit
  Resolves: rhbz#2121125
  - Update insights-client policy for additional commands execution 4
  Resolves: rhbz#2121125
  - Update insights-client policy for additional commands execution 3
  Resolves: rhbz#2121125
  - Allow rhcd execute all executables
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 2
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution 2
  Resolves: rhbz#2121125


author: EL Errata <el-errata_ww@oracle.com> - 34.1.43-1.0.1
changelog:
  - Allow system dbus daemon to watch generic /var/lib directory [Orabug: 34375044]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Revert "Dontaudit domain the fowner capability" [Orabug: 33952489]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.43-1.1
changelog:
  - Add domain_unix_read_all_semaphores() interface
  Resolves: rhbz#2136760
  - Allow rhcd compute selinux access vector
  Resolves: rhbz#2136760
  - Add file context entries for insights-client and rhc
  Resolves: rhbz#2136760
  - Revert "Allow insights-client run lpr and allow the proper role"
  Resolves: rhbz#2136760
  - Allow insights-client dbus chat with various services
  Resolves: rhbz#2136760
  - Allow insights-client tcp connect to various ports
  Resolves: rhbz#2136760
  - Allow insights-client run lpr and allow the proper role
  Resolves: rhbz#2136760
  - Allow insights-client work with pcp and manage user config files
  Resolves: rhbz#2136760
  - Allow insights-client dbus chat with abrt
  Resolves: rhbz#2136760
  - Allow insights client communicate with cupsd, mysqld, openvswitch, redis
  Resolves: rhbz#2136760
  - Allow insights client read raw memory devices
  Resolves: rhbz#2136760
  - Allow insights-client domain transition on semanage execution
  Resolves: rhbz#2136760
  - Allow insights-client create gluster log dir with a transition
  Resolves: rhbz#2136760
  - Allow insights-client manage generic locks
  Resolves: rhbz#2136760
  - Allow insights-client unix_read all domain semaphores
  Resolves: rhbz#2136760
  - Allow insights-client manage samba var dirs
  Resolves: rhbz#2136760
  - Allow insights-client send null signal to rpm and system cronjob
  Resolves: rhbz#2136760
  - Allow insights-client connect to postgresql with a unix socket
  Resolves: rhbz#2136760
  - Allow insights-client domtrans on unix_chkpwd execution
  Resolves: rhbz#2136760


author: EL Errata <el-errata_ww@oracle.com> - 34.1.43-1.0.3
changelog:
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow svirt_t domain to mmap svirt_image_t character files [Orabug: 34908824]
  - Allow system dbus daemon to watch generic /var/lib directory [Orabug: 34375044]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Revert "Dontaudit domain the fowner capability" [Orabug: 33952489]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.5-1
changelog:
  - Reuse tmpfs_t also for the ramfs filesystem
  Resolves: rhbz#2160391
  - Allow systemd-resolved watch tmpfs directories
  Resolves: rhbz#2160391
  - Allow hostname_t to read network sysctls.
  Resolves: rhbz#2161958
  - Allow ModemManager all permissions for netlink route socket
  Resolves: rhbz#2149560
  - Allow unconfined user filetransition for sudo log files
  Resolves: rhbz#2160388
  - Allow sudodomain use sudo.log as a logfile
  Resolves: rhbz#2160388
  - Allow nm-cloud-setup dispatcher plugin restart nm services
  Resolves: rhbz#2154414
  - Allow wg to send msg to kernel, write to syslog and dbus connections
  Resolves: rhbz#2149452
  - Allow rshim bpf cap2 and read sssd public files
  Resolves: rhbz#2080439
  - Allow svirt request the kernel to load a module
  Resolves: rhbz#2144735
  - Rebase selinux-policy to the latest one in rawhide
  Resolves: rhbz#2014606


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.6-1
changelog:
  - Allow modemmanager create hardware state information files
  Resolves: rhbz#2149560
  - Dontaudit ftpd the execmem permission
  Resolves: rhbz#2164434
  - Allow nm-dispatcher plugins read generic files in /proc
  Resolves: rhbz#2164845
  - Label systemd-journald feature LogNamespace
  Resolves: rhbz#2124797
  - Boolean: allow qemu-ga read ssh home directory
  Resolves: rhbz#1917024


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.7-1
changelog:
  - Allow staff_t getattr init pid chr & blk files and read krb5
  Resolves: rhbz#2112729
  - Allow firewalld to rw z90crypt device
  Resolves: rhbz#2166877
  - Allow httpd work with tokens in /dev/shm
  Resolves: rhbz#2166283


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.8-1
changelog:
  - Allow svirt to map svirt_image_t char files
  Resolves: rhbz#2170482
  - Fix opencryptoki file names in /dev/shm
  Resolves: rhbz#2166283


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.9-1
changelog:
  - Boolean: allow qemu-ga manage ssh home directory
  Resolves: rhbz#2178612
  - Allow wg load kernel modules, search debugfs dir
  Resolves: rhbz#2176487


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.10-1
changelog:
  - Add support for the passt_t domain
  Resolves: rhbz#2172268
  - Allow virtd_t and svirt_t work with passt
  Resolves: rhbz#2172268
  - Add new interfaces in the virt module
  Resolves: rhbz#2172268
  - Add passt interfaces defined conditionally
  Resolves: rhbz#2172268


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1
changelog:
  - Allow passt manage qemu pid sock files
  Resolves: rhbz#2172268
  - Exclude passt.if from selinux-policy-devel
  Resolves: rhbz#2172268


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1.1
changelog:
  - Allow dmidecode write to cloud-init tmp files
  Resolves: rhbz#2188391
  - Allow chronyd send a message to cloud-init over a datagram socket
  Resolves: rhbz#2188391
  - Allow cloud-init domain transition to insights-client domain
  Resolves: rhbz#2188391


author: Darren Archibald <darren.archibald@oracle.com> - 38.1.11-2.0.1.2
changelog:
  - Allow kdumpctl_t to execmem [Orabug: 35381156]
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition [Orabug: 35091334]
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files [Orabug: 35122619]
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Darren Archibald <darren.archibald@oracle.com> - 38.1.11-2.0.1.3
changelog:
  - Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t
  Resolves: rhbz#2203797
  - Allow cloud-init manage gpg admin home content
  Resolves: rhbz#2203797


author: Darren Archibald <darren.archibald@oracle.com> - 38.1.11-2.0.1.3
changelog:
  - Oracle changes are now applied on top of new upstream patchset
  - Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t
  Resolves: rhbz#2203797
  - Allow cloud-init manage gpg admin home content
  Resolves: rhbz#2203797


author: David Sloboda <david.x.sloboda@oracle.com> - 38.1.11-2.0.1.4
changelog:
  - Oracle changes are now applied on top of new upstream patchset
  - Boolean: Allow virt_qemu_ga create ssh directory
  Resolves: rhbz#2226685
  - Allow virt_qemu_ga_t create .ssh dir with correct label
  Resolves: rhbz#2226685
  - Label only /usr/sbin/ripd and ripngd with zebra_exec_t
  Resolves: rhbz#2229992
  - Allow firewalld rw ica_tmpfs_t files
  Resolves: rhbz#2233535
  - Allow systemd-timedated watch init runtime dir
  Resolves: rhbz#2232637


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.4-1
changelog:
  - Add lpr_roles  to system_r roles
  Resolves: rhbz#2152150
  - Allow insights client work with gluster and pcp
  Resolves: rhbz#2152150
  - Add interfaces in domain, files, and unconfined modules
  Resolves: rhbz#2152150
  - Label fwupdoffline and fwupd-detect-cet with fwupd_exec_t
  Resolves: rhbz#2152150
  - Add insights additional capabilities
  Resolves: rhbz#2152150
  - Revert "Allow insights-client run lpr and allow the proper role"
  Resolves: rhbz#2152150
  - Allow prosody manage its runtime socket files
  Resolves: rhbz#2157891
  - Allow syslogd read network sysctls
  Resolves: rhbz#2156068
  - Allow NetworkManager and wpa_supplicant the bpf capability
  Resolves: rhbz#2137085
  - Allow sysadm_t read/write ipmi devices
  Resolves: rhbz#2158419
  - Allow wireguard to create udp sockets and read net_conf
  Resolves: rhbz#2149452
  - Allow systemd-rfkill the bpf capability
  Resolves: rhbz#2149390
  - Allow load_policy_t write to unallocated ttys
  Resolves: rhbz#2145181
  - Allow winbind-rpcd manage samba_share_t files and dirs
  Resolves: rhbz#2150680


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 38.1.11-2.0.1
changelog:
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition [Orabug: 35091334]
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files [Orabug: 35122619]
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.15-1
changelog:
  - Add fs_delete_pstore_files() interface
  Resolves: rhbz#2181565
  - Add fs_read_pstore_files() interface
  Resolves: rhbz#2181565
  - Allow insights-client getsession process permission
  Resolves: rhbz#2214581
  - Allow insights-client work with pipe and socket tmp files
  Resolves: rhbz#2214581
  - Allow insights-client map generic log files
  Resolves: rhbz#2214581
  - Allow insights-client read unconfined service semaphores
  Resolves: rhbz#2214581
  - Allow insights-client get quotas of all filesystems
  Resolves: rhbz#2214581
  - Allow haproxy read hardware state information
  Resolves: rhbz#2164691
  - Allow cupsd dbus chat with xdm
  Resolves: rhbz#2143641
  - Allow dovecot_deliver_t create/map dovecot_spool_t dir/file
  Resolves: rhbz#2165863
  - Add none file context for polyinstantiated tmp dirs
  Resolves: rhbz#2099194
  - Add support for the systemd-pstore service
  Resolves: rhbz#2181565
  - Label /dev/userfaultfd with userfaultfd_t
  Resolves: rhbz#2175290
  - Allow collectd_t read proc_net link files
  Resolves: rhbz#2209650
  - Label smtpd with sendmail_exec_t
  Resolves: rhbz#2213573
  - Label msmtp and msmtpd with sendmail_exec_t
  Resolves: rhbz#2213573
  - Allow dovecot-deliver write to the main process runtime fifo files
  Resolves: rhbz#2211787
  - Allow subscription-manager execute ip
  Resolves: rhbz#2211566
  - Allow ftpd read network sysctls
  Resolves: rhbz#2175856


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.16-1
changelog:
  - Remove permissive from fdo
  Resolves: rhbz#2026795
  - Add the qatlib  module
  Resolves: rhbz#2080443
  - Add the fdo module
  Resolves: rhbz#2026795
  - Add the booth module to modules.conf
  Resolves: rhbz#2128833
  - Add policy for FIDO Device Onboard
  Resolves: rhbz#2026795
  - Create policy for qatlib
  Resolves: rhbz#2080443
  - Add policy for boothd
  Resolves: rhbz#2128833
  - Add list_dir_perms to kerberos_read_keytab
  Resolves: rhbz#2112729
  - Allow nsd_crond_t write nsd_var_run_t & connectto nsd_t
  Resolves: rhbz#2209973
  - Allow collectd_t read network state symlinks
  Resolves: rhbz#2209650
  - Revert "Allow collectd_t read proc_net link files"
  Resolves: rhbz#2209650
  - Allow insights-client execmem
  Resolves: rhbz#2207894
  - Label udf tools with fsadm_exec_t
  Resolves: rhbz#2039774


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.17-1
changelog:
  - Add the qatlib  module
  Resolves: rhbz#2080443
  - Add the fdo module
  Resolves: rhbz#2026795
  - Add the booth module to modules.conf
  Resolves: rhbz#2128833


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.18-1
changelog:
  - Boolean: Allow virt_qemu_ga create ssh directory
  Resolves: rhbz#2181402
  - Allow virt_qemu_ga_t create .ssh dir with correct label
  Resolves: rhbz#2181402
  - Set default ports for keylime policy
  Resolves: RHEL-594
  - Allow unconfined service inherit signal state from init
  Resolves: rhbz#2186233
  - Allow sa-update connect to systemlog services
  Resolves: rhbz#2220643
  - Allow sa-update manage spamc home files
  Resolves: rhbz#2220643
  - Label only /usr/sbin/ripd and ripngd with zebra_exec_t
  Resolves: rhbz#2213605
  - Add the files_getattr_non_auth_dirs() interface
  Resolves: rhbz#2076933
  - Update policy for the sblim-sfcb service
  Resolves: rhbz#2076933
  - Define equivalency for /run/systemd/generator.early
  Resolves: rhbz#2213516


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.19-1
changelog:
  - Allow qatlib to read sssd public files
  Resolves: rhbz#2080443
  - Fix location for /run/nsd
  Resolves: rhbz#2181600
  - Allow samba-rpcd work with passwords
  Resolves: rhbz#2107092
  - Allow rpcd_lsad setcap and use generic ptys
  Resolves: rhbz#2107092
  - Allow gpsd,oddjob,oddjob_mkhomedir rw user domain pty
  Resolves: rhbz#2223305
  - Allow keepalived to manage its tmp files
  Resolves: rhbz#2179212
  - Allow nscd watch system db dirs
  Resolves: rhbz#2152124


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.20-1
changelog:
  - Allow user_u and staff_u get attributes of non-security dirs
  Resolves: rhbz#2215507
  - Allow cloud_init create dhclient var files and init_t manage net_conf_t
  Resolves: rhbz#2225418
  - Allow samba-dcerpc service manage samba tmp files
  Resolves: rhbz#2230365
  - Update samba-dcerpc policy for printing
  Resolves: rhbz#2230365
  - Allow sysadm_t run kernel bpf programs
  Resolves: rhbz#2229936
  - allow mon_procd_t self:cap_userns sys_ptrace
  Resolves: rhbz#2221986
  - Remove nsplugin_role from mozilla.if
  Resolves: rhbz#2221251
  - Allow unconfined user filetrans chrome_sandbox_home_t
  Resolves: rhbz#2187893
  - Allow pdns name_bind and name_connect all ports
  Resolves: rhbz#2047945
  - Allow insights-client read and write cluster tmpfs files
  Resolves: rhbz#2221631
  - Allow ipsec read nsfs files
  Resolves: rhbz#2230277
  - Allow upsmon execute upsmon via a helper script
  Resolves: rhbz#2228403
  - Fix labeling for no-stub-resolv.conf
  Resolves: rhbz#2148390
  - Add use_nfs_home_dirs boolean for mozilla_plugin
  Resolves: rhbz#2214298
  - Change wording in /etc/selinux/config
  Resolves: rhbz#2143153


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.21-1
changelog:
  - Allow logrotate_t to map generic files in /etc
  Resolves: rhbz#2231257
  - Allow insights-client manage user temporary files
  Resolves: rhbz#2224737
  - Make insights_client_t an unconfined domain
  Resolves: rhbz#2225526


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.22-1
changelog:
  - Allow qatlib  to modify hardware state information.
  Resolves: rhbz#2080443
  - Update policy for fdo
  Resolves: rhbz#2229722
  - Allow gpsd, oddjob and oddjob_mkhomedir_t write user_tty_device_t chr_file
  Resolves: rhbz#2223305
  - Allow svirt to rw /dev/udmabuf
  Resolves: rhbz#2223727
  - Allow keepalived watch var_run dirs
  Resolves: rhbz#2186759


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.23-1
changelog:
  - Allow cups-pdf connect to the system log service
  Resolves: rhbz#2234765
  - Update policy for qatlib
  Resolves: rhbz#2080443


author: Naoki Tanaka <naoki.tanaka@oracle.com> - 38.1.23-1.0.1
changelog:
  - Allow kdumpctl_t to execmem [Orabug: 35381156]
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition [Orabug: 35091334]
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files [Orabug: 35122619]
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]
  - Add boolean qemu-ga to run unconfined script
  Resolves: rhbz#2093355
  - Allow cloud-init manage gpg admin home content
  Resolves: rhbz#2203797


author: systemd maintenance team <systemd-maint@redhat.com> - 252-2
changelog:
  - test: check if we can use SHA1 MD for signing before using it (#2141979)
  - boot: cleanups for efivar_get() and friends (#2141979)
  - boot: fix false maybe-uninitialized warning (#2141979)
  - tree-wide: modernizations with RET_NERRNO() (#2137584)
  - sd-bus: handle -EINTR return from bus_poll() (#2137584)
  - stdio-bridge: don't be bothered with EINTR (#2137584)
  - varlink: also handle EINTR gracefully when waiting for EIO via ppoll() (#2137584)
  - sd-netlink: handle EINTR from poll() gracefully, as success (#2137584)
  - resolved: handle -EINTR returned from fd_wait_for_event() better (#2137584)
  - homed: handle EINTR gracefully when waiting for device node (#2137584)
  - utmp-wtmp: fix error in case isatty() fails (#2137584)
  - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2137584)
  - io-util: document EINTR situation a bit (#2137584)
  - terminal-util: Set OPOST when setting ONLCR (#2138081)
  - cgtop: Do not rewrite -P or -k options (#2138081)
  - test: Add tests for systemd-cgtop args parsing (#2138081)
  - resolved: remove inappropriate assert() (#2138081)
  - boot: Add xstrn8_to_16 (#2138081)
  - boot: Use xstr8_to_16 (#2138081)
  - boot: Use xstr8_to_16 for path conversion (#2138081)
  -  stub: Fix cmdline handling (#2138081)
  - stub: Detect empty LoadOptions when run from EFI shell (#2138081)
  - boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices (#2138081)
  - boot: Make sure all partitions drivers are connected (#2138081)
  - boot: improve support for qemu (#2138081)
  - systemd-boot man page: add section for virtual machines (#2138081)
  - boot: Only do full driver initialization in VMs (#2138081)
  - dissect: rework DISSECT_IMAGE_ADD_PARTITION_DEVICES + DISSECT_IMAGE_OPEN_PARTITION_DEVICES (#2138081)
  - ci(Mergify): v252 configuration update (#2138081)
  - ci: Run GitHub workflows on rhel branches (#2138081)
  - ci: Drop scorecards workflow, not relevant (#2138081)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-3
changelog:
  - swap: tell swapon to reinitialize swap if needed (#2151993)
  - coredump: adjust whitespace (#2155517)
  - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155517)
  - Revert "basic: add fallback in chase_symlinks_and_opendir() for cases when /proc is not mounted" (#2138081)
  - glyph-util: add warning sign special glyph (#2138081)
  - chase-symlink: when converting directory O_PATH fd to real fd, don't bother with /proc/ (#2138081)
  - systemctl: print a clear warning if people invoke systemctl without /proc/ (#2138081)
  - TEST-65: check cat-config operation in chroot (#2138081)
  - TEST-65: use [[ -v ]] more (#2138081)
  - systemctl: warn if trying to disable a unit with no install info (#2141979)
  - systemctl: allow suppress the warning of no install info using --no-warn (#2141979)
  - rpm/systemd-update-helper: use --no-warn when disabling units (#2141979)
  - systemctl: suppress warning about missing /proc/ when --no-warn (#2141979)
  - shell-completion: systemctl: add --no-warn (#2141979)
  - core/unit: drop doubled empty line (#2160477)
  - core/unit: drop dependency to the unit being merged (#2160477)
  - core/unit: fix logic of dropping self-referencing dependencies (#2160477)
  - core/unit: merge two loops into one (#2160477)
  - test: add test case for sysv-generator and invalid dependency (#2160477)
  - core/unit: merge unit names after merging deps (#2160477)
  - core/unit: fix log message (#2160477)
  - test: explicitly create the /etc/init.d directory (#2160477)
  - test: support a non-default SysV directory (#2160477)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-4
changelog:
  - udev: make get_virtfn_info() provide physical PCI device (#2159448)
  - test: make helper_check_device_units() log unit name (#2138081)
  - test: add a testcase for lvextend (#2138081)
  - pid1: fix segv triggered by status query (#26279) (#2138081)
  - test: create config under /run (#2138081)
  - test: add tests for mDNS and LLMNR settings (#2138081)
  - resolved: introduce the _localdnsstub and _localdnsproxy special hostnames for 127.0.0.54 + 127.0.0.53 (#2138081)
  - test: wait for the monitoring service to become active (#2138081)
  - test: suppress echo in monitor_check_rr() (#2138081)
  - Revert "test: wait for the monitoring service to become active" (#2138081)
  - test: show and check almost all journal entries since the relevant command being invoked (#2138081)
  - test: cover IPv6 in the resolved test suite (#2138081)
  - test: add a couple of SRV records to check service resolution (#2138081)
  - test: add a test for the OPENPGPKEY RR (#2138081)
  - test: don't hang indefinitely on no match (#2138081)
  - test-ndisc: fix memleak and fd leak (#2138081)
  - test-unit-name: fix fd leak (#2138081)
  - test: bump D-Bus service start timeout if we run without accel (#2138081)
  - test: bump the client-side timeout in sd-bus as well (#2138081)
  - test: bump the container spawn timeout to 60s (#2138081)
  - network: fix memleak (#2138081)
  - busctl: fix introspecting DBus properties (#2138081)
  - busctl: simplify peeking the type (#2138081)
  - resolve: drop redundant call of socket_ipv6_is_supported() (#2138081)
  - resolve: introduce link_get_llmnr_support() and link_get_mdns_support() (#2138081)
  - resolve: provide effective supporting levels of mDNS and LLMNR (#2138081)
  - resolvectl: warn if the global mDNS or LLMNR support level is lower than the requested one (#2138081)
  - resolve: enable per-link mDNS setting by default (#2138081)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-5
changelog:
  - nss-myhostname: fix inverted condition in (#2167468)
  - nss-myhostname: do not return empty result with NSS_STATUS_SUCCESS (#2167468)
  - sleep: rename hibernate_delay_sec -> _usec (#2151612)
  - sleep: fetch_batteries_capacity_by_name() does not return -ENOENT (#2151612)
  - sleep: drop unnecessary temporal vaiable and initialization (#2151612)
  - sleep: introduce SuspendEstimationSec= (#2151612)
  - sleep: coding style fixlets (#2151612)
  - sleep: simplify code a bit (#2151612)
  - sleep: fix indentation (#2151612)
  - sleep: enumerate only existing and non-device batteries (#2151612)
  - core: when isolating to a unit, also keep units running that are triggered by units we keep running (#1952378)
  - udev/net_id: introduce naming scheme for RHEL-9.2 (#2170500)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-6
changelog:
  - journalctl: actually run the static destructors (#2122500)
  - efi: drop executable-stack bit from .elf file (#2140646)
  - install: fail early if specifier expansion failed (#2138081)
  - test: add coverage for #26467 (#2138081)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-7
changelog:
  - test: add coverage for #24177 (#1985288)
  - logind-session: make stopping of idle session visible to admins (#2172401)


author: Tony Rodriguez <tony.rodriguez@oracle.com> - 252-8.0.1
changelog:
  - Backport upstream pstore dmesg fix [Orabug: 34868110]
  - Remove upstream references  [Orabug: 33995357]
  - Disable unprivileged BPF by default [Orabug: 32870980]
  - udev rules: fix memory hot add and remove [Orabug: 31310273]
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [Orabug: 22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792]
  - shutdown: get only active md arrays. [Orabug: 34467234]
  - Removed unneeded patches from the systemd.spec file [Orabug: 34272490]
  - A) 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch
  - B) 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-2
changelog:
  - Modernize spec file
  - License corrected to
    ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1))


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Tomas Popela <tpopela@redhat.com> - 1.8.1-3
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1929237


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Merlin Mathesius <mmathesi@redhat.com> - 0:2.7.0-6
changelog:
  - Fix FTBFS by patching ValueAssertTest to adjust for changed format of
    mismatched string exception


author: Neal Gompa <ngompa13@gmail.com> - 1:7.5-49
changelog:
  - Add OrderWithRequires for freetype to ensure freetype is installed first
  - Move license files to license tag on file list


author: Adam Jackson <ajax@redhat.com> - 1.20.11-5
changelog:
  - Disable non-platform video driver probe, it should never be needed and the
    PCI probe code interferes with the (default) platform path.
    Resolves: #2000921


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-7
changelog:
  - CVE fix for: CVE-2021-4008 (#2030160), CVE-2021-4009 (#2030170),
    CVE-2021-4010 (#2030174), CVE-2021-4011 (#2030179)


author: Adam Jackson <ajax@redhat.com> - 1.20.11-8
changelog:
  - Only disable the PCI-specific driver probe, since we do still want fallback
    to fbdev to work.
    Resolves: #2029769


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-11
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108157, rhbz#2108162


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038067), CVE-2021-4009 (#2038070),
    CVE-2021-4010 (#2038072), CVE-2021-4011 (#2038074)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-3
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110440, rhbz#2110433


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


