# changelog

author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-468.el9]
changelog:
  - qede: fix firmware halt over suspend and resume (John Meneghini) [RHEL-14143]
  - mm/vmalloc: eliminated the lock contention from twice to once (Aristeu Rozanski) [RHEL-28501]
  - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33111] {CVE-2024-26840}
  - redhat: include resolve_btfids in kernel-devel (Viktor Malik) [RHEL-40707]
  - nvme: fix namespace removal list (Maurizio Lombardi) [RHEL-40472]
  - nvme: use srcu for iterating namespace list (Maurizio Lombardi) [RHEL-40472]
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39837] {CVE-2024-36904}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Guillaume Nault) [RHEL-39845] {CVE-2024-36902}
  - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (Davide Caratti) [RHEL-36874] {CVE-2024-27414}
  - net: dev_addr_lists: move locking out of init/exit in kunit (Hangbin Liu) [RHEL-21442]
  - net: annotate writes on dev->mtu from ndo_change_mtu() (Ivan Vecera) [RHEL-39583]
  - geneve: fix header validation in geneve[6]_xmit_skb (Antoine Tenart) [RHEL-37386] {CVE-2024-35973}
  - icmp: prevent possible NULL dereferences from icmp_build_probe() (Antoine Tenart) [RHEL-37002] {CVE-2024-35857}
  - netdevsim: add selftest for forwarding skb between connected ports (Petr Oros) [RHEL-38987]
  - netdevsim: add ndo_get_iflink() implementation (Petr Oros) [RHEL-38987]
  - netdevsim: forward skbs from one connected port to another (Petr Oros) [RHEL-38987]
  - netdevsim: allow two netdevsim ports to be connected (Petr Oros) [RHEL-38987]
  - selftests: net: Correct couple of spelling mistakes (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: be less selective for FW for the devlink test (Petr Oros) [RHEL-38987]
  - net: netdevsim: constify the struct device_type usage (Petr Oros) [RHEL-38987]
  - netdevsim: make nsim_bus const (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: stop using ifconfig (Petr Oros) [RHEL-38987]
  - netdevsim: avoid potential loop in nsim_dev_trap_report_work() (Petr Oros) [RHEL-38987]
  - netdevsim: add Makefile for selftests (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: fix the udp_tunnel_nic test (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: correct expected FEC strings (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: sprinkle more udevadm settle (Petr Oros) [RHEL-38987]
  - netdevsim: Don't accept device bound programs (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: use suitable existing dummy file for flash test (Petr Oros) [RHEL-38987]
  - netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() (Petr Oros) [RHEL-38987]
  - xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL (Petr Oros) [RHEL-38863]
  - ice: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Petr Oros) [RHEL-38863]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Petr Oros) [RHEL-38863]
  - ice: remove redundant xdp_rxq_info registration (Petr Oros) [RHEL-38863]
  - ice: work on pre-XDP prog frag count (Petr Oros) [RHEL-38863]
  - xsk: fix usage of multi-buffer BPF helpers for ZC XDP (Petr Oros) [RHEL-38863]
  - xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags (Petr Oros) [RHEL-38863]
  - xsk: recycle buffer in case Rx queue was full (Petr Oros) [RHEL-38863]
  - net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (Kamal Heib) [RHEL-34192] {CVE-2024-26858}
  - netlabel: fix RCU annotation for IPv4 options on socket creation (Davide Caratti) [RHEL-31390]
  - net: fix sk_memory_allocated_{add|sub} vs softirqs (Paolo Abeni) [RHEL-34070]
  - tcp: sk_forced_mem_schedule() optimization (Paolo Abeni) [RHEL-34070]
  - net: make SK_MEMORY_PCPU_RESERV tunable (Paolo Abeni) [RHEL-34070]
  - rcu: Restrict access to RCU CPU stall notifiers (Waiman Long) [RHEL-34076]
  - rcu: Add RCU CPU stall notifier (Waiman Long) [RHEL-34076]
  - rcu/exp: Handle RCU expedited grace period kworker allocation failure (Waiman Long) [RHEL-34076]
  - rcu/exp: Fix RCU expedited parallel grace period kworker allocation failure recovery (Waiman Long) [RHEL-34076]
  - rcu: Break rcu_node_0 --> &rq->__lock order (Waiman Long) [RHEL-34076]
  - rcu/tree: Defer setting of jiffies during stall reset (Waiman Long) [RHEL-34076]
  - rcutorture: Add test of RCU CPU stall notifiers (Waiman Long) [RHEL-34076]
  - rcu: Eliminate check_cpu_stall() duplicate code (Waiman Long) [RHEL-34076]
  - rcu: Don't redump the stalled CPU where RCU GP kthread last ran (Waiman Long) [RHEL-34076]
  - rcu: Delete a redundant check in rcu_check_gp_kthread_starvation() (Waiman Long) [RHEL-34076]
  - rcu-tasks: Make rcu_tasks_lazy_ms static (Waiman Long) [RHEL-34076]
  - rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop (Waiman Long) [RHEL-34076]
  - rcu-tasks: Add printk()s to localize boot-time self-test hang (Waiman Long) [RHEL-34076]
  - refscale: Print out additional module parameters (Waiman Long) [RHEL-34076]
  - refscale: Fix misplaced data re-read (Waiman Long) [RHEL-34076]
  - srcu: Only accelerate on enqueue time (Waiman Long) [RHEL-34076]
  - srcu: Fix callbacks acceleration mishandling (Waiman Long) [RHEL-34076]
  - rcu: Conditionally build CPU-hotplug teardown callbacks (Waiman Long) [RHEL-34076]
  - rcu: Assume rcu_report_dead() is always called locally (Waiman Long) [RHEL-34076]
  - rcu: Assume IRQS disabled from rcu_report_dead() (Waiman Long) [RHEL-34076]
  - rcu: Use rcu_segcblist_segempty() instead of open coding it (Waiman Long) [RHEL-34076]
  - rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects (Waiman Long) [RHEL-34076]
  - srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (Waiman Long) [RHEL-34076]
  - rcu: Eliminate rcu_gp_slow_unregister() false positive (Waiman Long) [RHEL-34076]
  - rcu: Dump memory object info if callback function is invalid (Waiman Long) [RHEL-34076]
  - rcu: Add sysfs to provide throttled access to rcu_barrier() (Waiman Long) [RHEL-34076]
  - rcu/tree: Remove superfluous return from void call_rcu* functions (Waiman Long) [RHEL-34076]
  - srcu: Fix error handling in init_srcu_struct_fields() (Waiman Long) [RHEL-34076]
  - rcutorture: Traverse possible cpu to set maxcpu in rcu_nocb_toggle() (Waiman Long) [RHEL-34076]
  - rcutorture: Replace schedule_timeout*() 1-jiffy waits with HZ/20 (Waiman Long) [RHEL-34076]
  - torture: Move rcutorture_sched_setaffinity() out of rcutorture (Waiman Long) [RHEL-34076]
  - rcu: Include torture_sched_setaffinity() declaration (Waiman Long) [RHEL-34076]
  - rcutorture: Stop right-shifting torture_random() return values (Waiman Long) [RHEL-34076]
  - rcutorture: Dump grace-period state upon rtort_pipe_count incidents (Waiman Long) [RHEL-34076]
  - refscale: Add a "jiffies" test (Waiman Long) [RHEL-34076]
  - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() (Waiman Long) [RHEL-34076]
  - rcuscale: fix building with RCU_TINY (Waiman Long) [RHEL-34076]
  - rcuscale: Add RCU Tasks Rude testing (Waiman Long) [RHEL-34076]
  - rcuscale: Measure RCU Tasks Trace grace-period kthread CPU time (Waiman Long) [RHEL-34076]
  - rcuscale: Measure grace-period kthread CPU time (Waiman Long) [RHEL-34076]
  - rcuscale: Print out full set of kfree_rcu parameters (Waiman Long) [RHEL-34076]
  - rcuscale: Print out full set of module parameters (Waiman Long) [RHEL-34076]
  - rcuscale: Add minruntime module parameter (Waiman Long) [RHEL-34076]
  - rcuscale: Fix gp_async_max typo: s/reader/writer/ (Waiman Long) [RHEL-34076]
  - rcuscale: Permit blocking delays between writers (Waiman Long) [RHEL-34076]
  - rcu-tasks: Fix boot-time RCU tasks debug-only deadlock (Waiman Long) [RHEL-34076]
  - rcu-tasks: Permit use of debug-objects with RCU Tasks flavors (Waiman Long) [RHEL-34076]
  - rcu-tasks: Cancel callback laziness if too many callbacks (Waiman Long) [RHEL-34076]
  - rcu-tasks: Add kernel boot parameters for callback laziness (Waiman Long) [RHEL-34076]
  - rcu-tasks: Remove redundant #ifdef CONFIG_TASKS_RCU (Waiman Long) [RHEL-34076]
  - rcu-tasks: Treat only synchronous grace periods urgently (Waiman Long) [RHEL-34076]
  - rcu: Make the rcu_nocb_poll boot parameter usable via boot config (Waiman Long) [RHEL-34076]
  - rcu: Mark __rcu_irq_enter_check_tick() ->rcu_urgent_qs load (Waiman Long) [RHEL-34076]
  - rcu: Clarify rcu_is_watching() kernel-doc comment (Waiman Long) [RHEL-34076]
  - rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale (Waiman Long) [RHEL-34076]
  - rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() (Waiman Long) [RHEL-34076]
  - rcu-tasks: Clarify the cblist_init_generic() function's pr_info() output (Waiman Long) [RHEL-34076]
  - rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() (Waiman Long) [RHEL-34076]
  - rcu/nocb: Make shrinker iterate only over NOCB CPUs (Waiman Long) [RHEL-34076]
  - rcu/nocb: Recheck lazy callbacks under the ->nocb_lock from shrinker (Waiman Long) [RHEL-34076]
  - rcu/nocb: Fix shrinker race against callback enqueuer (Waiman Long) [RHEL-34076]
  - rcu/nocb: Protect lazy shrinker against concurrent (de-)offloading (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Make drain_page_cache() take early return if cache is disabled (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Make fill page cache start from krcp->nr_bkv_objs (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Do not run a page work if a cache is disabled (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Use consistent krcp when growing kfree_rcu() page cache (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Invoke debug_rcu_bhead_unqueue() after checking bnode->gp_snap (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Add debug check for GP complete for kfree_rcu_cpu list (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Add debug to check grace periods (Waiman Long) [RHEL-34076]
  - rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs (Waiman Long) [RHEL-34076]
  - rcu: Make rcu_cpu_starting() rely on interrupts being disabled (Waiman Long) [RHEL-34076]
  - rcu: Mark rcu_cpu_kthread() accesses to ->rcu_cpu_has_work (Waiman Long) [RHEL-34076]
  - rcu: Mark additional concurrent load from ->cpu_no_qs.b.exp (Waiman Long) [RHEL-34076]
  - rcu: Employ jiffies-based backstop to callback time limit (Waiman Long) [RHEL-34076]
  - rcu: Check callback-invocation time limit for rcuc kthreads (Waiman Long) [RHEL-34076]
  - rcutorture: Verify NUM_ACTIVE_RCU_POLL_OLDSTATE (Waiman Long) [RHEL-34076]
  - rcutorture: Verify NUM_ACTIVE_RCU_POLL_FULL_OLDSTATE (Waiman Long) [RHEL-34076]
  - rcu-tasks: Make grace-period-age message human-readable (Waiman Long) [RHEL-34076]
  - rcu: Synchronize ->qsmaskinitnext in rcu_boost_kthread_setaffinity() (Waiman Long) [RHEL-34076]
  - rcu/nocb: Add CPU number to CPU-{,de}offload failure messages (Waiman Long) [RHEL-34076]
  - rcutorture: Fix ksoftirqd boosting timing and iteration (Waiman Long) [RHEL-34076]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-469.el9]
changelog:
  - arm64: mm: Make hibernation aware of KFENCE (Maxim Levitsky) [RHEL-7225]
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38200] {CVE-2023-52809}
  - pinctrl: core: delete incorrect free in pinctrl_enable() (David Arcari) [RHEL-39758] {CVE-2024-36940}
  - x86/coco: Require seeding RNG with RDRAND on CoCo systems (Lenny Szubowicz) [RHEL-37269] {CVE-2024-35875}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34969] {CVE-2024-26961}
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37721] {CVE-2021-47385}
  - redhat/configs: add CONFIG_CSD_LOCK_WAIT_DEBUG_DEFAULT (Leonardo Bras) [RHEL-13876]
  - trace,smp: Add tracepoints for scheduling remotelly called functions (Leonardo Bras) [RHEL-13876]
  - trace,smp: Add tracepoints around remotelly called functions (Leonardo Bras) [RHEL-13876]
  - trace,smp: Trace all smp_function_call*() invocations (Leonardo Bras) [RHEL-13876]
  - locking/csd_lock: Remove added data from CSD lock debugging (Leonardo Bras) [RHEL-13876]
  - trace,smp: Add tracepoints for scheduling remotelly called functions (Leonardo Bras) [RHEL-13876]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-470.el9]
changelog:
  - modules: wait do_free_init correctly (Donald Dutile) [RHEL-28063]
  - Subject: revert of revert KEYS: Make use of platform keyring for module signature verify (Donald Dutile) [RHEL-28063]
  - linux/export: Ensure natural alignment of kcrctab array (Donald Dutile) [RHEL-28063]
  - linux/export: Fix alignment for 64-bit ksymtab entries (Donald Dutile) [RHEL-28063]
  - kernel/module: improve documentation for try_module_get() (Donald Dutile) [RHEL-28063]
  - module: Remove redundant TASK_UNINTERRUPTIBLE (Donald Dutile) [RHEL-28063]
  - params: Introduce the param_unknown_fn type (Donald Dutile) [RHEL-28063]
  - module/decompress: use kvmalloc() consistently (Donald Dutile) [RHEL-28063]
  - module: Annotate struct module_notes_attrs with __counted_by (Donald Dutile) [RHEL-28063]
  - module: Fix comment typo (Donald Dutile) [RHEL-28063]
  - module: Make is_mapping_symbol() return bool (Donald Dutile) [RHEL-28063]
  - module/decompress: use vmalloc() for gzip decompression workspace (Donald Dutile) [RHEL-28063]
  - module: Clarify documentation of module_param_call() (Donald Dutile) [RHEL-28063]
  - modpost: do not make find_tosym() return NULL (Donald Dutile) [RHEL-28063]
  - modpost: Optimize symbol search from linear to binary search (Donald Dutile) [RHEL-28063]
  - module/decompress: use vmalloc() for zstd decompression workspace (Donald Dutile) [RHEL-28063]
  - dyndbg: add source filename to prefix (Donald Dutile) [RHEL-28063]
  - dyndbg: increase PREFIX_SIZE to 128 (Donald Dutile) [RHEL-28063]
  - dyndbg: constify opt_array (Donald Dutile) [RHEL-28063]
  - module: Expose module_init_layout_section() (Donald Dutile) [RHEL-28063]
  - modpost, kallsyms: Treat add '$'-prefixed symbols as mapping symbols (Donald Dutile) [RHEL-28063]
  - module: Ignore RISC-V mapping symbols too (Donald Dutile) [RHEL-28063]
  - module: fix init_module_from_file() error handling (Donald Dutile) [RHEL-28063]
  - modules: catch concurrent module loads, treat them as idempotent (Donald Dutile) [RHEL-28063]
  - module: split up 'finit_module()' into init_module_from_file() helper (Donald Dutile) [RHEL-28063]
  - kallsyms: Fix kallsyms_selftest failure (Donald Dutile) [RHEL-28063]
  - kallsyms: Add more debug output for selftest (Donald Dutile) [RHEL-28063]
  - modpost: check static EXPORT_SYMBOL* by modpost again (Donald Dutile) [RHEL-28063]
  - kbuild: generate KSYMTAB entries by modpost (Donald Dutile) [RHEL-28063]
  - modpost: pass struct module pointer to check_section_mismatch() (Donald Dutile) [RHEL-28063]
  - modpost: fix off by one in is_executable_section() (Donald Dutile) [RHEL-28063]
  - modpost: Include '.text.*' in TEXT_SECTIONS (Donald Dutile) [RHEL-28063]
  - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() (Donald Dutile) [RHEL-28063]
  - tick/nohz: unexport __init-annotated tick_nohz_full_setup() (Donald Dutile) [RHEL-28063]
  - kallsyms: make kallsyms_show_value() as generic function (Donald Dutile) [RHEL-28063]
  - kallsyms: move kallsyms_show_value() out of kallsyms.c (Donald Dutile) [RHEL-28063]
  - modpost: detect section mismatch for R_ARM_REL32 (Donald Dutile) [RHEL-28063]
  - modpost: fix section_mismatch message for R_ARM_THM_{CALL,JUMP24,JUMP19} (Donald Dutile) [RHEL-28063]
  - modpost: detect section mismatch for R_ARM_THM_{MOVW_ABS_NC,MOVT_ABS} (Donald Dutile) [RHEL-28063]
  - modpost: refactor find_fromsym() and find_tosym() (Donald Dutile) [RHEL-28063]
  - modpost: detect section mismatch for R_ARM_{MOVW_ABS_NC,MOVT_ABS} (Donald Dutile) [RHEL-28063]
  - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Donald Dutile) [RHEL-28063]
  - modpost: fix section mismatch message for R_ARM_ABS32 (Donald Dutile) [RHEL-28063]
  - module/decompress: Fix error checking on zstd decompression (Donald Dutile) [RHEL-28063]
  - module: fix module load for ia64 (Donald Dutile) [RHEL-28063]
  - modpost: remove *_sections[] arrays (Donald Dutile) [RHEL-28063]
  - modpost: merge bad_tosec=ALL_EXIT_SECTIONS entries in sectioncheck table (Donald Dutile) [RHEL-28063]
  - modpost: merge fromsec=DATA_SECTIONS entries in sectioncheck table (Donald Dutile) [RHEL-28063]
  - modpost: remove is_shndx_special() check from section_rel(a) (Donald Dutile) [RHEL-28063]
  - modpost: replace r->r_offset, r->r_addend with faddr, taddr (Donald Dutile) [RHEL-28063]
  - modpost: unify 'sym' and 'to' in default_mismatch_handler() (Donald Dutile) [RHEL-28063]
  - modpost: remove unused argument from secref_whitelist() (Donald Dutile) [RHEL-28063]
  - Revert "modpost: skip ELF local symbols during section mismatch check" (Donald Dutile) [RHEL-28063]
  - kallsyms: remove unsed API lookup_symbol_attrs (Donald Dutile) [RHEL-28063]
  - module: Remove preempt_disable() from module reference counting. (Donald Dutile) [RHEL-28063]
  - module: Fix use-after-free bug in read_file_mod_stats() (Donald Dutile) [RHEL-28063]
  - modpost: rename find_elf_symbol() and find_elf_symbol2() (Donald Dutile) [RHEL-28063]
  - modpost: pass section index to find_elf_symbol2() (Donald Dutile) [RHEL-28063]
  - modpost: pass 'tosec' down to default_mismatch_handler() (Donald Dutile) [RHEL-28063]
  - modpost: squash extable_mismatch_handler() into default_mismatch_handler() (Donald Dutile) [RHEL-28063]
  - modpost: clean up is_executable_section() (Donald Dutile) [RHEL-28063]
  - modpost: squash report_sec_mismatch() into default_mismatch_handler() (Donald Dutile) [RHEL-28063]
  - modpost: squash report_extable_warnings() into extable_mismatch_handler() (Donald Dutile) [RHEL-28063]
  - modpost: remove get_prettyname() (Donald Dutile) [RHEL-28063]
  - modpost: remove fromsym info in __ex_table section mismatch warning (Donald Dutile) [RHEL-28063]
  - modpost: remove broken calculation of exception_table_entry size (Donald Dutile) [RHEL-28063]
  - module: include internal.h in module/dups.c (Donald Dutile) [RHEL-28063]
  - module: add debugging auto-load duplicate module support (Donald Dutile) [RHEL-28063]
  - module: stats: fix invalid_mod_bytes typo (Donald Dutile) [RHEL-28063]
  - module: remove use of uninitialized variable len (Donald Dutile) [RHEL-28063]
  - module: fix building stats for 32-bit targets (Donald Dutile) [RHEL-28063]
  - module: stats: include uapi/linux/module.h (Donald Dutile) [RHEL-28063]
  - module: avoid allocation if module is already present and ready (Donald Dutile) [RHEL-28063]
  - module: add debug stats to help identify memory pressure (Donald Dutile) [RHEL-28063]
  - module: extract patient module check into helper (Donald Dutile) [RHEL-28063]
  - modules/kmod: replace implementation with a semaphore (Donald Dutile) [RHEL-28063]
  - module: fix kmemleak annotations for non init ELF sections (Donald Dutile) [RHEL-28063]
  - module: Ignore L0 and rename is_arm_mapping_symbol() (Donald Dutile) [RHEL-28063]
  - module: Move is_arm_mapping_symbol() to module_symbol.h (Donald Dutile) [RHEL-28063]
  - module: Sync code of is_arm_mapping_symbol() (Donald Dutile) [RHEL-28063]
  - module: already_uses() - reduce pr_debug output volume (Donald Dutile) [RHEL-28063]
  - module: add section-size to move_module pr_debug (Donald Dutile) [RHEL-28063]
  - module: add symbol-name to pr_debug Absolute symbol (Donald Dutile) [RHEL-28063]
  - module: in layout_sections, move_module: add the modname (Donald Dutile) [RHEL-28063]
  - module: fold usermode helper kmod into modules directory (Donald Dutile) [RHEL-28063]
  - module: merge remnants of setup_load_info() to elf validation (Donald Dutile) [RHEL-28063]
  - module: move more elf validity checks to elf_validity_check() (Donald Dutile) [RHEL-28063]
  - module: add stop-grap sanity check on module memcpy() (Donald Dutile) [RHEL-28063]
  - module: add sanity check for ELF module section (Donald Dutile) [RHEL-28063]
  - module: rename check_module_license_and_versions() to check_export_symbol_versions() (Donald Dutile) [RHEL-28063]
  - module: converge taint work together (Donald Dutile) [RHEL-28063]
  - module: move signature taint to module_augment_kernel_taints() (Donald Dutile) [RHEL-28063]
  - module: move tainting until after a module hits our linked list (Donald Dutile) [RHEL-28063]
  - module: split taint adding with info checking (Donald Dutile) [RHEL-28063]
  - module: split taint work out of check_modinfo_livepatch() (Donald Dutile) [RHEL-28063]
  - module: rename set_license() to module_license_taint_check() (Donald Dutile) [RHEL-28063]
  - module: move check_modinfo() early to early_mod_check() (Donald Dutile) [RHEL-28063]
  - module: move early sanity checks into a helper (Donald Dutile) [RHEL-28063]
  - module: add a for_each_modinfo_entry() (Donald Dutile) [RHEL-28063]
  - module: rename next_string() to module_next_tag_pair() (Donald Dutile) [RHEL-28063]
  - module: move get_modinfo() helpers all above (Donald Dutile) [RHEL-28063]
  - modpost: Fix processing of CRCs on 32-bit build machines (Donald Dutile) [RHEL-28063]
  - module/decompress: Never use kunmap() for local un-mappings (Donald Dutile) [RHEL-28063]
  - kallsyms: Delete an unused parameter related to {module_}kallsyms_on_each_symbol() (Donald Dutile) [RHEL-28063]
  - dyndbg: cleanup dynamic usage in ib_srp.c (Donald Dutile) [RHEL-28063]
  - kernel/module: add documentation for try_module_get() (Donald Dutile) [RHEL-28063]
  - ARM: dyndbg: allow including dyndbg.h in decompressor (Donald Dutile) [RHEL-28063]
  - dyndbg: use the module notifier callbacks (Donald Dutile) [RHEL-28063]
  - dyndbg: remove unused 'base' arg from __ddebug_add_module() (Donald Dutile) [RHEL-28063]
  - module: make module_ktype structure constant (Donald Dutile) [RHEL-28063]
  - module: Remove the unused function within (Donald Dutile) [RHEL-28063]
  - scripts/gdb: fix usage of MOD_TEXT not defined when CONFIG_MODULES=n (Donald Dutile) [RHEL-28063]
  - scripts/gdb: fix 'lx-lsmod' show the wrong size (Donald Dutile) [RHEL-28063]
  - scripts/gdb: use mem instead of core_layout to get the module address (Donald Dutile) [RHEL-28063]
  - module: replace module_layout with module_memory (Donald Dutile) [RHEL-28063]
  - s390/module: fix loading modules with a lot of relocations (Donald Dutile) [RHEL-28063]
  - module: Use kstrtobool() instead of strtobool() (Donald Dutile) [RHEL-28063]
  - livepatch: Improve the search performance of module_kallsyms_on_each_symbol() (Donald Dutile) [RHEL-28063]
  - kallsyms: Fix scheduling with interrupts disabled in self-test (Donald Dutile) [RHEL-28063]
  - modpost: error out if addend_*_rel() is not implemented for REL arch (Donald Dutile) [RHEL-28063]
  - module/decompress: Support zstd in-kernel decompression (Donald Dutile) [RHEL-28063]
  - module: add module_elf_check_arch for module-specific checks (Donald Dutile) [RHEL-28063]
  - modpost: Mark uuid_le type to be suitable only for MEI (Donald Dutile) [RHEL-28063]
  - modpost: fix array_size.cocci warning (Donald Dutile) [RHEL-28063]
  - modpost: Join broken long printed messages (Donald Dutile) [RHEL-28063]
  - kallsyms: Remove unneeded semicolon (Donald Dutile) [RHEL-28063]
  - kallsyms: Add self-test facility (Donald Dutile) [RHEL-28063]
  - kallsyms: Add helper kallsyms_on_each_match_symbol() (Donald Dutile) [RHEL-28063]
  - kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] (Donald Dutile) [RHEL-28063]
  - kallsyms: Improve the performance of kallsyms_lookup_name() (Donald Dutile) [RHEL-28063]
  - module: Fix NULL vs IS_ERR checking for module_get_next_page (Donald Dutile) [RHEL-28063]
  - module: Remove unused macros module_addr_min/max (Donald Dutile) [RHEL-28063]
  - module: remove redundant module_sysfs_initialized variable (Donald Dutile) [RHEL-28063]
  - module: tracking: Keep a record of tainted unloaded modules only (Donald Dutile) [RHEL-28063]
  - linux/export: use inline assembler to populate symbol CRCs (Donald Dutile) [RHEL-28063]
  - powerpc/xmon: Use KSYM_NAME_LEN in array size (Donald Dutile) [RHEL-28063]
  - kallsyms: increase maximum kernel symbol length to 512 (Donald Dutile) [RHEL-28063]
  - kallsyms: support "big" kernel symbols (Donald Dutile) [RHEL-28063]
  - kallsyms: add static relationship between `KSYM_NAME_LEN{,_BUFFER}` (Donald Dutile) [RHEL-28063]
  - kallsyms: avoid hardcoding buffer size (Donald Dutile) [RHEL-28063]
  - cfi: Drop __CFI_ADDRESSABLE (Donald Dutile) [RHEL-28063]
  - cfi: Remove CONFIG_CFI_CLANG_SHADOW (Donald Dutile) [RHEL-28063]
  - module/decompress: generate sysfs string at compile time (Donald Dutile) [RHEL-28063]
  - module: Add debugfs interface to view unloaded tainted modules (Donald Dutile) [RHEL-28063]
  - dyndbg: add drm.debug style (drm/parameters/debug) bitmap support (Donald Dutile) [RHEL-28063]
  - dyndbg: validate class FOO by checking with module (Donald Dutile) [RHEL-28063]
  - dyndbg: add ddebug_attach_module_classes (Donald Dutile) [RHEL-28063]
  - kernel/module: add __dyndbg_classes section (Donald Dutile) [RHEL-28063]
  - dyndbg: add DECLARE_DYNDBG_CLASSMAP macro (Donald Dutile) [RHEL-28063]
  - dyndbg: add __pr_debug_cls for testing (Donald Dutile) [RHEL-28063]
  - dyndbg: add class_id to pr_debug callsites (Donald Dutile) [RHEL-28063]
  - dyndbg: gather __dyndbg[] state into struct _ddebug_info (Donald Dutile) [RHEL-28063]
  - dyndbg: cleanup auto vars in dynamic_debug_init (Donald Dutile) [RHEL-28063]
  - dyndbg: drop EXPORTed dynamic_debug_exec_queries (Donald Dutile) [RHEL-28063]
  - dyndbg: let query-modname override actual module name (Donald Dutile) [RHEL-28063]
  - dyndbg: use ESCAPE_SPACE for cat control (Donald Dutile) [RHEL-28063]
  - dyndbg: reverse module.callsite walk in cat control (Donald Dutile) [RHEL-28063]
  - dyndbg: reverse module walk in cat control (Donald Dutile) [RHEL-28063]
  - dyndbg: show both old and new in change-info (Donald Dutile) [RHEL-28063]
  - dyndbg: fix module.dyndbg handling (Donald Dutile) [RHEL-28063]
  - dyndbg: fix static_branch manipulation (Donald Dutile) [RHEL-28063]
  - modpost: fix module versioning when a symbol lacks valid CRC (Donald Dutile) [RHEL-28063]
  - modpost: remove .symbol_white_list field entirely (Donald Dutile) [RHEL-28063]
  - modpost: remove unneeded .symbol_white_list initializers (Donald Dutile) [RHEL-28063]
  - modpost: add PATTERNS() helper macro (Donald Dutile) [RHEL-28063]
  - modpost: shorten warning messages in report_sec_mismatch() (Donald Dutile) [RHEL-28063]
  - Revert "Kbuild, lto, workaround: Don't warn for initcall_reference in modpost" (Donald Dutile) [RHEL-28063]
  - modpost: use more reliable way to get fromsec in section_rel(a)() (Donald Dutile) [RHEL-28063]
  - modpost: add array range check to sec_name() (Donald Dutile) [RHEL-28063]
  - modpost: refactor get_secindex() (Donald Dutile) [RHEL-28063]
  - modpost: remove unused Elf_Sword macro (Donald Dutile) [RHEL-28063]
  - modpost: use sym_get_data() to get module device_table data (Donald Dutile) [RHEL-28063]
  - modpost: drop executable ELF support (Donald Dutile) [RHEL-28063]
  - module: Replace kmap() with kmap_local_page() (Donald Dutile) [RHEL-28063]
  - module: Show the last unloaded module's taint flag(s) (Donald Dutile) [RHEL-28063]
  - module: Use strscpy() for last_unloaded_module (Donald Dutile) [RHEL-28063]
  - module: Modify module_flags() to accept show_state argument (Donald Dutile) [RHEL-28063]
  - module: Move module's Kconfig items in kernel/module/ (Donald Dutile) [RHEL-28063]
  - module: panic: Taint the kernel when selftest modules load (Donald Dutile) [RHEL-28063]
  - module: Use vzalloc() instead of vmalloc()/memset(0) (Donald Dutile) [RHEL-28063]
  - module: Increase readability of module_kallsyms_lookup_name() (Donald Dutile) [RHEL-28063]
  - module: Fix ERRORs reported by checkpatch.pl (Donald Dutile) [RHEL-28063]
  - module: Add support for default value for module async_probe (Donald Dutile) [RHEL-28063]
  - module: kallsyms: Ensure preemption in add_kallsyms() with PREEMPT_RT (Donald Dutile) [RHEL-28063]
  - module: Fix "warning: variable 'exit' set but not used" (Donald Dutile) [RHEL-28063]
  - module: Fix selfAssignment cppcheck warning (Donald Dutile) [RHEL-28063]
  - modules: Fix corruption of /proc/kallsyms (Donald Dutile) [RHEL-28063]
  - modpost: fix section mismatch check for exported init/exit sections (Donald Dutile) [RHEL-28063]
  - modpost: use fnmatch() to simplify match() (Donald Dutile) [RHEL-28063]
  - modpost: simplify mod->name allocation (Donald Dutile) [RHEL-28063]
  - module: Fix prefix for module.sig_enforce module param (Donald Dutile) [RHEL-28063]
  - kbuild: check static EXPORT_SYMBOL* by script instead of modpost (Donald Dutile) [RHEL-28063]
  - modpost: squash if...else-if in find_elf_symbol2() (Donald Dutile) [RHEL-28063]
  - modpost: reuse ARRAY_SIZE() macro for section_mismatch() (Donald Dutile) [RHEL-28063]
  - modpost: remove the unused argument of check_sec_ref() (Donald Dutile) [RHEL-28063]
  - modpost: fix undefined behavior of is_arm_mapping_symbol() (Donald Dutile) [RHEL-28063]
  - modpost: fix removing numeric suffixes (Donald Dutile) [RHEL-28063]
  - genksyms: adjust the output format to modpost (Donald Dutile) [RHEL-28063]
  - kbuild: stop merging *.symversions (Donald Dutile) [RHEL-28063]
  - kbuild: link symbol CRCs at final link, removing CONFIG_MODULE_REL_CRCS (Donald Dutile) [RHEL-28063]
  - modpost: extract symbol versions from *.cmd files (Donald Dutile) [RHEL-28063]
  - modpost: add sym_find_with_module() helper (Donald Dutile) [RHEL-28063]
  - module: merge check_exported_symbol() into find_exported_symbol_in_section() (Donald Dutile) [RHEL-28063]
  - module: do not binary-search in __ksymtab_gpl if fsa->gplok is false (Donald Dutile) [RHEL-28063]
  - module: do not pass opaque pointer for symbol search (Donald Dutile) [RHEL-28063]
  - module: show disallowed symbol name for inherit_taint() (Donald Dutile) [RHEL-28063]
  - module: fix [e_shstrndx].sh_size=0 OOB access (Donald Dutile) [RHEL-28063]
  - module: Introduce module unload taint tracking (Donald Dutile) [RHEL-28063]
  - module: Move module_assert_mutex_or_preempt() to internal.h (Donald Dutile) [RHEL-28063]
  - module: Make module_flags_taint() accept a module's taints bitmap and usable outside core code (Donald Dutile) [RHEL-28063]
  - module.h: simplify MODULE_IMPORT_NS (Donald Dutile) [RHEL-28063]
  - modpost: change the license of EXPORT_SYMBOL to bool type (Donald Dutile) [RHEL-28063]
  - kbuild: record symbol versions in *.cmd files (Donald Dutile) [RHEL-28063]
  - kbuild: generate a list of objects in vmlinux (Donald Dutile) [RHEL-28063]
  - modpost: move *.mod.c generation to write_mod_c_files() (Donald Dutile) [RHEL-28063]
  - modpost: merge add_{intree_flag,retpoline,staging_flag} to add_header (Donald Dutile) [RHEL-28063]
  - modpost: split new_symbol() to symbol allocation and hash table addition (Donald Dutile) [RHEL-28063]
  - modpost: make sym_add_exported() always allocate a new symbol (Donald Dutile) [RHEL-28063]
  - modpost: make multiple export error (Donald Dutile) [RHEL-28063]
  - modpost: dump Module.symvers in the same order of modules.order (Donald Dutile) [RHEL-28063]
  - modpost: traverse the namespace_list in order (Donald Dutile) [RHEL-28063]
  - modpost: use doubly linked list for dump_lists (Donald Dutile) [RHEL-28063]
  - modpost: traverse unresolved symbols in order (Donald Dutile) [RHEL-28063]
  - modpost: add sym_add_unresolved() helper (Donald Dutile) [RHEL-28063]
  - modpost: traverse modules in order (Donald Dutile) [RHEL-28063]
  - modpost: import include/linux/list.h (Donald Dutile) [RHEL-28063]
  - modpost: change mod->gpl_compatible to bool type (Donald Dutile) [RHEL-28063]
  - modpost: use bool type where appropriate (Donald Dutile) [RHEL-28063]
  - modpost: move struct namespace_list to modpost.c (Donald Dutile) [RHEL-28063]
  - modpost: retrieve the module dependency and CRCs in check_exports() (Donald Dutile) [RHEL-28063]
  - modpost: add a separate error for exported symbols without definition (Donald Dutile) [RHEL-28063]
  - modpost: remove stale comment about sym_add_exported() (Donald Dutile) [RHEL-28063]
  - modpost: do not write out any file when error occurred (Donald Dutile) [RHEL-28063]
  - modpost: use snprintf() instead of sprintf() for safety (Donald Dutile) [RHEL-28063]
  - kbuild: refactor cmd_modversions_S (Donald Dutile) [RHEL-28063]
  - kbuild: refactor cmd_modversions_c (Donald Dutile) [RHEL-28063]
  - modpost: remove annoying namespace_from_kstrtabns() (Donald Dutile) [RHEL-28063]
  - modpost: remove redundant initializes for static variables (Donald Dutile) [RHEL-28063]
  - modpost: move export_from_secname() call to more relevant place (Donald Dutile) [RHEL-28063]
  - modpost: remove useless export_from_sec() (Donald Dutile) [RHEL-28063]
  - kbuild: do not remove empty *.symtypes explicitly (Donald Dutile) [RHEL-28063]
  - kbuild: factor out genksyms command from cmd_gensymtypes_{c,S} (Donald Dutile) [RHEL-28063]
  - module: Remove module_addr_min and module_addr_max (Donald Dutile) [RHEL-28063]
  - module: Add CONFIG_ARCH_WANTS_MODULES_DATA_IN_VMALLOC (Donald Dutile) [RHEL-28063]
  - module: Introduce data_layout (Donald Dutile) [RHEL-28063]
  - module: Prepare for handling several RB trees (Donald Dutile) [RHEL-28063]
  - module: Always have struct mod_tree_root (Donald Dutile) [RHEL-28063]
  - module: Rename debug_align() as strict_align() (Donald Dutile) [RHEL-28063]
  - module: Rework layout alignment to avoid BUG_ON()s (Donald Dutile) [RHEL-28063]
  - module: Move module_enable_x() and frob_text() in strict_rwx.c (Donald Dutile) [RHEL-28063]
  - module: Make module_enable_x() independent of CONFIG_ARCH_HAS_STRICT_MODULE_RWX (Donald Dutile) [RHEL-28063]
  - module: Move version support into a separate file (Donald Dutile) [RHEL-28063]
  - module: Move kdb module related code out of main kdb code (Donald Dutile) [RHEL-28063]
  - module: Move sysfs support into a separate file (Donald Dutile) [RHEL-28063]
  - module: Move procfs support into a separate file (Donald Dutile) [RHEL-28063]
  - module: kallsyms: Fix suspicious rcu usage (Donald Dutile) [RHEL-28063]
  - module: Move kallsyms support into a separate file (Donald Dutile) [RHEL-28063]
  - module: Move kmemleak support to a separate file (Donald Dutile) [RHEL-28063]
  - module: Move extra signature support out of core code (Donald Dutile) [RHEL-28063]
  - module: Move strict rwx support to a separate file (Donald Dutile) [RHEL-28063]
  - module: Move latched RB-tree support to a separate file (Donald Dutile) [RHEL-28063]
  - module: Move livepatch support to a separate file (Donald Dutile) [RHEL-28063]
  - module: Make internal.h and decompress.c more compliant (Donald Dutile) [RHEL-28063]
  - module: Simple refactor in preparation for split (Donald Dutile) [RHEL-28063]
  - scripts/gdb: Fix gdb 'lx-symbols' command (Donald Dutile) [RHEL-28063]
  - module: Move all into module/ (Donald Dutile) [RHEL-28063]
  - modpost: restore the warning message for missing symbol versions (Donald Dutile) [RHEL-28063]
  - ftrace: Have architectures opt-in for mcount build time sorting (Donald Dutile) [RHEL-28063]
  - ftrace: Fix assuming build time sort works for s390 (Donald Dutile) [RHEL-28063]
  - script/sorttable: Fix some initialization problems (Donald Dutile) [RHEL-28063]
  - ftrace: Add test to make sure compiled time sorts work (Donald Dutile) [RHEL-28063]
  - scripts: ftrace - move the sort-processing in ftrace_init (Donald Dutile) [RHEL-28063]
  - module.h: allow #define strings to work with MODULE_IMPORT_NS (Donald Dutile) [RHEL-28063]
  - livepatch: Avoid CPU hogging with cond_resched (Donald Dutile) [RHEL-28063]
  - sections: provide internal __is_kernel() and __is_kernel_text() helper (Donald Dutile) [RHEL-28063]
  - kallsyms: fix address-checks for kernel related range (Donald Dutile) [RHEL-28063]
  - dyndbg: refine verbosity 1-4 summary-detail (Donald Dutile) [RHEL-28063]
  - dyndbg: fix spurious vNpr_info change (Donald Dutile) [RHEL-28063]
  - dyndbg: no vpr-info on empty queries (Donald Dutile) [RHEL-28063]
  - dyndbg: vpr-info on remove-module complete, not starting (Donald Dutile) [RHEL-28063]
  - dyndbg: Remove support for ddebug_query param (Donald Dutile) [RHEL-28063]
  - dyndbg: make dyndbg a known cli param (Donald Dutile) [RHEL-28063]
  - dyndbg: show module in vpr-info in dd-exec-queries (Donald Dutile) [RHEL-28063]
  - scripts: update the comments of kallsyms support (Donald Dutile) [RHEL-28063]
  - modpost: get the *.mod file path more simply (Donald Dutile) [RHEL-28063]
  - kbuild: merge vmlinux_link() between ARCH=um and other architectures (Donald Dutile) [RHEL-28063]
  - kbuild: do not remove 'linux' link in scripts/link-vmlinux.sh (Donald Dutile) [RHEL-28063]
  - kbuild: merge vmlinux_link() between the ordinary link and Clang LTO (Donald Dutile) [RHEL-28063]
  - module: fix signature check failures when using in-kernel decompression (Donald Dutile) [RHEL-28063]
  - module: Remove outdated comment (Donald Dutile) [RHEL-28063]
  - module: fix building with sysfs disabled (Donald Dutile) [RHEL-28063]
  - kernel: Fix spelling mistake "compresser" -> "compressor" (Donald Dutile) [RHEL-28063]
  - module: add in-kernel support for decompressing (Donald Dutile) [RHEL-28063]
  - module: change to print useful messages from elf_validity_check() (Donald Dutile) [RHEL-28063]
  - module: fix validate_section_offset() overflow bug on 64-bit (Donald Dutile) [RHEL-28063]
  - module: fix clang CFI with MODULE_UNLOAD=n (Donald Dutile) [RHEL-28063]
  - Subject: revert KEYS: Make use of platform keyring for module signature verify (Donald Dutile) [RHEL-28063]
  - lib/bitmap.c make bitmap_print_bitmask_to_buf parseable (Donald Dutile) [RHEL-28063]
  - bitmap: extend comment to bitmap_print_bitmask/list_to_buf (Donald Dutile) [RHEL-28063]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-471.el9]
changelog:
  - Revert "kernel/panic.c: Move the location of bust_spinlocks to prevent hanging." (Derek Barbosa) [RHEL-39473]
  - arch/x86: Fix typos [partial] (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: switch to use device_add_groups() (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Remove extra parenthesis and add a space (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Add support for ACPI based probing (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Restructure sysfs group creation (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Define a struct to hold mailbox regs (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Create static func to handle platdev (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Move hsmp_test to probe (David Arcari) [RHEL-43368]
  - octeontx2-af: fix the double free in rvu_npc_freemem() (Kamal Heib) [RHEL-39651] {CVE-2024-36030}
  - e1000e: Add support for the next LOM generation (Ken Cox) [RHEL-17484]
  - e1000e: Use PME poll to circumvent unreliable ACPI wake (Ken Cox) [RHEL-17484]
  - net: e1000e: Remove unused declarations (Ken Cox) [RHEL-17484]
  - e1000e: Add @adapter description to kdoc (Ken Cox) [RHEL-17484]
  - mm: huge_memory: don't force huge page alignment on 32 bit (Rafael Aquini) [RHEL-22187]
  - x86/topology: Fix max_siblings calculation for some hybrid cpus (David Arcari) [RHEL-40607]
  - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39786]
  - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39786] {CVE-2024-36927}
  - Enable ALSA (CONFIG_SND) on aarch64 (Charles Mirabile) [RHEL-40411]
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Steve Best) [RHEL-39849] {CVE-2024-36899}
  - Add CONFIG_PCP_BATCH_SCALE_MAX to RHEL configs collection (Chris von Recklinghausen) [RHEL-20141]
  - mm and cache_info: remove unnecessary CPU cache info update (Chris von Recklinghausen) [RHEL-20141]
  - mm, pcp: reduce detecting time of consecutive high order page freeing (Chris von Recklinghausen) [RHEL-20141]
  - mm, pcp: decrease PCP high if free pages < high watermark (Chris von Recklinghausen) [RHEL-20141]
  - mm: tune PCP high automatically (Chris von Recklinghausen) [RHEL-20141]
  - mm: add framework for PCP high auto-tuning (Chris von Recklinghausen) [RHEL-20141]
  - mm, page_alloc: scale the number of pages that are batch allocated (Chris von Recklinghausen) [RHEL-20141]
  - mm: restrict the pcp batch scale factor to avoid too long latency (Chris von Recklinghausen) [RHEL-20141]
  - mm, pcp: reduce lock contention for draining high-order pages (Chris von Recklinghausen) [RHEL-20141]
  - cacheinfo: calculate size of per-CPU data cache slice (Chris von Recklinghausen) [RHEL-20141]
  - mm, pcp: avoid to drain PCP when process exit (Chris von Recklinghausen) [RHEL-20141]
  - mm/page_alloc: remove unnecessary parameter batch of nr_pcp_free (Chris von Recklinghausen) [RHEL-20141]
  - mm/page_alloc: remove track of active PCP lists range in bulk free (Chris von Recklinghausen) [RHEL-20141]
  - mm: remove obsolete comment above struct per_cpu_pages (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move is_check_pages_enabled() into page_alloc.c (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move sysctls into it own fils (Chris von Recklinghausen) [RHEL-20141]
  - mm: vmscan: use gfp_has_io_fs() (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move pm_* function into power (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move mark_free_page() into snapshot.c (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: split out DEBUG_PAGEALLOC (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: split out FAIL_PAGE_ALLOC (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: remove alloc_contig_dump_pages() stub (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: squash page_is_consistent() (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: collect mem statistic into show_mem.c (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move set_zone_contiguous() into mm_init.c (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move init_on_alloc/free() into mm_init.c (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move mirrored_kernelcore into mm_init.c (Chris von Recklinghausen) [RHEL-20141]
  - rxrpc: replace zero-lenth array with DECLARE_FLEX_ARRAY() helper (Ivan Vecera) [RHEL-40250]
  - ext4: fix fortify warning in fs/ext4/fast_commit.c:1551 (Ivan Vecera) [RHEL-40250]
  - string: Allow 2-argument strscpy_pad() (Ivan Vecera) [RHEL-40250]
  - string: Redefine strscpy_pad() as a macro (Ivan Vecera) [RHEL-40250]
  - string: Allow 2-argument strscpy() (Ivan Vecera) [RHEL-40250]
  - kernel.h: split out COUNT_ARGS() and CONCATENATE() to args.h (Ivan Vecera) [RHEL-40250]
  - uml: Replace strlcpy with strscpy (Ivan Vecera) [RHEL-40250]
  - fortify: strscpy: Fix flipped q and p docstring typo (Ivan Vecera) [RHEL-40250]
  - fortify: Use const variables for __member_size tracking (Ivan Vecera) [RHEL-40250]
  - overflow: add DEFINE_FLEX() for on-stack allocs (Ivan Vecera) [RHEL-40250]
  - fortify: Use __builtin_dynamic_object_size() when available (Ivan Vecera) [RHEL-40250]
  - fortify: Short-circuit known-safe calls to strscpy() (Ivan Vecera) [RHEL-40250]
  - string: Rewrite and add more kern-doc for the str*() functions (Ivan Vecera) [RHEL-40250]
  - fortify: Convert to struct vs member helpers (Ivan Vecera) [RHEL-40250]
  - fortify: Explicitly check bounds are compile-time constants (Ivan Vecera) [RHEL-40250]
  - fortify: Use SIZE_MAX instead of (size_t)-1 (Ivan Vecera) [RHEL-40250]
  - fortify: Add run-time WARN for cross-field memcpy() (Ivan Vecera) [RHEL-40250]
  - sched/x86: Export 'percpu arch_freq_scale' (Phil Auld) [RHEL-39512]
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Mark Salter) [RHEL-39308]
  - randomize_kstack: Improve entropy diffusion (Chris von Recklinghausen) [RHEL-37308] {CVE-2024-35918}
  - net: usb: lan78xx: add phy dependency for user tools (Jose Ignacio Tornos Martinez) [RHEL-17582]
  - aio: Fix incorrect usage of eventfd_signal_allowed() (Waiman Long) [RHEL-38738]
  - aio: fix use-after-free due to missing POLLFREE handling (Waiman Long) [RHEL-38738 RHEL-38739] {CVE-2021-47505}
  - aio: keep poll requests on waitqueue until completed (Waiman Long) [RHEL-38738 RHEL-38739] {CVE-2021-47505}
  - redhat/configs: Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-28760]
  - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-28760]
  - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-28760]
  - md: Revert "md: Fix overflow in is_mddev_idle" (Nigel Croxon) [RHEL-39038]
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37018] {CVE-2024-35852}
  - pwm: Fix double shift bug (Steve Best) [RHEL-38280] {CVE-2023-52756}
  - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35178] {CVE-2024-27025}
  - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33260] {CVE-2024-26908}
  - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36934] {CVE-2024-35824}
  - ice: final upstream version of the fix for RHEL-19000 (Michal Schmidt) [RHEL-35969]
  - kernel.spec: add iommu selftests to kernel-selftests-internal (Eder Zulian) [RHEL-32894]
  - virtiofs: include a newline in sysfs tag (Brian Foster) [RHEL-34071]
  - virtio_fs: remove duplicate check if queue is broken (Brian Foster) [RHEL-34071]
  - virtiofs: drop __exit from virtio_fs_sysfs_exit() (Brian Foster) [RHEL-34071]
  - virtiofs: emit uevents on filesystem events (Brian Foster) [RHEL-34071]
  - virtiofs: export filesystem tags through sysfs (Brian Foster) [RHEL-34071]
  - virtiofs: forbid newlines in tags (Brian Foster) [RHEL-34071]
  - xsk: Add missing SPDX to AF_XDP TX metadata documentation (Petr Oros) [RHEL-31944]
  - xsk: Don't assume metadata is always requested in TX completion (Petr Oros) [RHEL-31944]
  - selftests/bpf: Add TX side to xdp_hw_metadata (Petr Oros) [RHEL-31944]
  - selftests/bpf: Convert xdp_hw_metadata to XDP_USE_NEED_WAKEUP (Petr Oros) [RHEL-31944]
  - selftests/bpf: Fix broken build where char is unsigned (Petr Oros) [RHEL-31944]
  - selftests/bpf: Add options and frags to xdp_hw_metadata (Petr Oros) [RHEL-31944]
  - selftests/bpf: xdp_hw_metadata track more timestamps (Petr Oros) [RHEL-31944]
  - selftests/bpf: Add TX side to xdp_metadata (Petr Oros) [RHEL-31944]
  - selftests/bpf: Add csum helpers (Petr Oros) [RHEL-31944]
  - selftests/xsk: Support tx_metadata_len (Petr Oros) [RHEL-31944]
  - xsk: Add option to calculate TX checksum in SW (Petr Oros) [RHEL-31944]
  - xsk: Validate xsk_tx_metadata flags (Petr Oros) [RHEL-31944]
  - xsk: Document tx_metadata_len layout (Petr Oros) [RHEL-31944]
  - tools: ynl: Print xsk-features from the sample (Petr Oros) [RHEL-31944]
  - xsk: Add TX timestamp and TX checksum offload support (Petr Oros) [RHEL-31944]
  - xsk: Support tx_metadata_len (Petr Oros) [RHEL-31944]
  - xsk: Elide base_addr comparison in xp_unaligned_validate_desc (Petr Oros) [RHEL-31944]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-472.el9]
changelog:
  - ext4: enable meta_bg only when new desc blocks are needed (Carlos Maiolino) [RHEL-36282]
  - ext4: verify s_clusters_per_group even without bigalloc (Carlos Maiolino) [RHEL-36282]
  - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36976] {CVE-2024-35807}
  - ext4_get_link(): fix breakage in RCU mode (Carlos Maiolino) [RHEL-36282]
  - ext4: correct best extent lstart adjustment logic (Carlos Maiolino) [RHEL-36282]
  - ext4: forbid commit inconsistent quota data when errors=remount-ro (Carlos Maiolino) [RHEL-36282]
  - ext4: add a hint for block bitmap corrupt state in mb_groups (Carlos Maiolino) [RHEL-36282]
  - ext4: fix the comment of ext4_map_blocks()/ext4_ext_map_blocks() (Carlos Maiolino) [RHEL-36282]
  - ext4: mark the group block bitmap as corrupted before reporting an error (Carlos Maiolino) [RHEL-36282]
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Carlos Maiolino) [RHEL-31702] {CVE-2024-26772}
  - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() (Carlos Maiolino) [RHEL-36282]
  - ext4: do not trim the group with corrupted block bitmap (Carlos Maiolino) [RHEL-36282]
  - ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() (Carlos Maiolino) [RHEL-36282]
  - ext4_add_entry(): ->d_name.len is never 0 (Carlos Maiolino) [RHEL-36282]
  - ext4: don't access the source subdirectory content on same-directory rename (Carlos Maiolino) [RHEL-36282]
  - Revert "ext4: apply umask if ACL support is disabled" (Carlos Maiolino) [RHEL-36282]
  - ext4: apply umask if ACL support is disabled (Carlos Maiolino) [RHEL-36282]
  - ext4: mark buffer new if it is unwritten to avoid stale data exposure (Carlos Maiolino) [RHEL-36282]
  - ext4: move 'ix' sanity check to corrent position (Carlos Maiolino) [RHEL-36282]
  - ext4: remove unnecessary initialization of count2 in set_flexbg_block_bitmap (Carlos Maiolino) [RHEL-36282]
  - ext4: remove unnecessary check to avoid repeat update_backups for the same gdb (Carlos Maiolino) [RHEL-36282]
  - ext4: simplify the gdbblock calculation in add_new_gdb_meta_bg (Carlos Maiolino) [RHEL-36282]
  - ext4: use saved local variable sbi instead of EXT4_SB(sb) (Carlos Maiolino) [RHEL-36282]
  - ext4: remove EXT4FS_DEBUG defination in resize.c (Carlos Maiolino) [RHEL-36282]
  - ext4: calculate free_clusters_count in cluster unit in verify_group_input (Carlos Maiolino) [RHEL-36282]
  - ext4: remove commented code in reserve_backup_gdb (Carlos Maiolino) [RHEL-36282]
  - ext4: remove redundant check of count (Carlos Maiolino) [RHEL-36282]
  - ext4: fix typo in setup_new_flex_group_blocks (Carlos Maiolino) [RHEL-36282]
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Carlos Maiolino) [RHEL-36282]
  - ext4: correct return value of ext4_convert_meta_bg (Carlos Maiolino) [RHEL-36282]
  - ext4: add missed brelse in update_backups (Carlos Maiolino) [RHEL-36282]
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36282]
  - ext4: fix incorrect offset (Carlos Maiolino) [RHEL-36282]
  - ext4: correct the start block of counting reserved clusters (Carlos Maiolino) [RHEL-36282]
  - ext4: make running and commit transaction have their own freed_data_list (Carlos Maiolino) [RHEL-36282]
  - ext4: fix traditional comparison using max/min method (Carlos Maiolino) [RHEL-36282]
  - ext4: add missing initialization of call_notify_error in update_super_work() (Carlos Maiolino) [RHEL-36282]
  - ext4: remove redundant checks of s_encoding (Carlos Maiolino) [RHEL-36282]
  - ext4: reject casefold inode flag without casefold feature (Carlos Maiolino) [RHEL-36282]
  - ext4: rename s_error_work to s_sb_upd_work (Carlos Maiolino) [RHEL-36282]
  - ext4: add periodic superblock update check (Carlos Maiolino) [RHEL-36282]
  - ext4: fix unttached inode after power cut with orphan file feature enabled (Carlos Maiolino) [RHEL-36282]
  - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (Carlos Maiolino) [RHEL-36282]
  - ext4: mballoc: avoid garbage value from err (Carlos Maiolino) [RHEL-36282]
  - ext4: fix race between writepages and remount (Carlos Maiolino) [RHEL-36282]
  - ext4: avoid potential data overflow in next_linear_group (Carlos Maiolino) [RHEL-36282]
  - jbd2: abort journal when detecting metadata writeback error of fs dev (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove unused 'JBD2_CHECKPOINT_IO_ERROR' and 'j_atomic_flags' (Carlos Maiolino) [RHEL-36282]
  - jbd2: replace journal state flag by checking errseq (Carlos Maiolino) [RHEL-36282]
  - jbd2: add errseq to detect client fs's bdev writeback error (Carlos Maiolino) [RHEL-36282]
  - jbd2: fix soft lockup in journal_finish_inode_data_buffers() (Carlos Maiolino) [RHEL-36282]
  - jbd2: increase the journal IO's priority (Carlos Maiolino) [RHEL-36282]
  - jbd2: correct the printing of write_flags in jbd2_write_superblock() (Carlos Maiolino) [RHEL-36282]
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Carlos Maiolino) [RHEL-36282]
  - jbd2: fix printk format type for 'io_block' in do_one_pass() (Carlos Maiolino) [RHEL-36282]
  - jbd2: print io_block if check data block checksum failed when do recovery (Carlos Maiolino) [RHEL-36282]
  - jbd2: Fix memory leak in journal_init_common() (Carlos Maiolino) [RHEL-36282]
  - jbd2: correct the end of the journal recovery scan range (Carlos Maiolino) [RHEL-36282]
  - jbd2: jbd2_journal_init_{dev,inode} return proper error return value (Carlos Maiolino) [RHEL-36282]
  - jbd2: drop useless error tag in jbd2_journal_wipe() (Carlos Maiolino) [RHEL-36282]
  - jbd2: cleanup journal_init_common() (Carlos Maiolino) [RHEL-36282]
  - jbd2: add fast_commit space check (Carlos Maiolino) [RHEL-36282]
  - jbd2: cleanup load_superblock() (Carlos Maiolino) [RHEL-36282]
  - jbd2: open code jbd2_verify_csum_type() helper (Carlos Maiolino) [RHEL-36282]
  - jbd2: checking valid features early in journal_get_superblock() (Carlos Maiolino) [RHEL-36282]
  - jbd2: don't load superblock in jbd2_journal_check_used_features() (Carlos Maiolino) [RHEL-36282]
  - jbd2: move load_superblock() into journal_init_common() (Carlos Maiolino) [RHEL-36282]
  - jbd2: move load_superblock() dependent functions (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove unused function '__cp_buffer_busy' (Carlos Maiolino) [RHEL-36282]
  - jbd2: check 'jh->b_transaction' before removing it from checkpoint (Carlos Maiolino) [RHEL-36282]
  - jbd2: fix checkpoint cleanup performance regression (Carlos Maiolino) [RHEL-36282]
  - fs: jbd2: fix an incorrect warn log (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove __journal_try_to_free_buffer() (Carlos Maiolino) [RHEL-36282]
  - jbd2: fix a race when checking checkpoint buffer busy (Carlos Maiolino) [RHEL-36282]
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove journal_clean_one_cp_list() (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove t_checkpoint_io_list (Carlos Maiolino) [RHEL-36282]
  - jbd2: recheck chechpointing non-dirty buffer (Carlos Maiolino) [RHEL-36282]
  - jbd2: skip reading super block if it has been verified (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove j_format_version (Carlos Maiolino) [RHEL-36282]
  - jbd2: factor out journal initialization from journal_get_superblock() (Carlos Maiolino) [RHEL-36282]
  - jbd2: switch to check format version in superblock directly (Carlos Maiolino) [RHEL-36282]
  - jbd2: Avoid printing outside the boundary of the buffer (Carlos Maiolino) [RHEL-36282]
  - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39813] {CVE-2024-36917}
  - Revert "i2c: Make remove callback return void" for ti-tfp410.c (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Drop unused fields in struct pca953x_platform_data (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: add support for TCA9538 (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Remove unused PCAL953X_OUT_CONF from pcal6534_recalc_addr() (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Clean up pcal6534_check_register() (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: avoid logically dead code (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: avoid to use uninitialized value pinctrl (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Convert to i2c's .probe_new() (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Add missing header(s) (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Add support for PCAL6534 (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Swap if statements to save later complexity (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Fix pca953x_gpio_set_pull_up_down() (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: introduce support for nxp,pcal6408 (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Add mutex_lock for regcache sync in PM (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Make platform teardown callback return void (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: use the correct register address when regcache sync during init (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: use the correct range when do regmap sync (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: only use single read/write for No AI mode (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: use the correct register address to do regcache sync (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Make the irqchip immutable (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) (Andrew Halaney) [RHEL-35606]
  - gpio: pca953xx: Add support for pca6408 (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Improve bias setting (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: do not ignore i2c errors (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4: Add main esm address range (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4-main: Enable support for UHS mode (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4-evm: Fix UART pin type and macro type (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4: Use exact ranges for FSS node (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4: Remove UART baud rate selection (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4: Add Wave5 Video Encoder/Decoder Node (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4-main: Fix mux-reg-masks in serdes_ln_ctrl (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4-main: Add CSI2RX capture nodes (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4-evm: Enable camera peripherals (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: Add phase tags for memory node on J784S4 EVM and AM69 SK (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Fix sync-lost issue with two displays (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Fix initial plane zpos values (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Use DRM_PLANE_COMMIT_ACTIVE_ONLY (Andrew Halaney) [RHEL-35606]
  - drm/tidss: IRQ code cleanup (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Fix dss reset (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Add simple K2G manual reset (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Check for K2G in in dispc_softreset() (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Return error value from from softreset (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Move reset to the end of dispc_init() (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Drop useless variable init (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Use PM autosuspend (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Use pm_runtime_resume_and_get() (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Add support for AM62A7 DSS (Andrew Halaney) [RHEL-35606]
  - mux: mmio: use reg property when parent device is not a syscon (Andrew Halaney) [RHEL-35606]
  - dt-bindings: phy: cadence-sierra: Add clock ID for derived reference clock (Andrew Halaney) [RHEL-35606]
  - dt-bindings: phy: cadence-torrent: Rename SSC macros to use generic names (Andrew Halaney) [RHEL-35606]
  - dt-bindings: phy: cadence-torrent: Add clock IDs for derived and received refclk (Andrew Halaney) [RHEL-35606]
  - dt-bindings: phy: Add PHY_TYPE_USXGMII definition (Andrew Halaney) [RHEL-35606]
  - dt-bindings: msm: dsi: document phy-type property for 7nm dsi phy (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Add SGMII support in WIZ driver for J784S4 (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Use key:value pair table for all settings (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add single link USXGMII configuration for 156.25MHz refclk (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add USB + DP multilink configuration (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add PCIe + DP multilink configuration for 100MHz refclk (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Prepare driver for multilink DP support (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add function to get PLL to be configured for DP (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Add a determine_rate hook (Andrew Halaney) [RHEL-35606]
  - phy: cadence: torrent: Add a determine_rate hook (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Add SGMII support in WIZ driver for J721E (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select() (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-35606]
  - phy: cadence: phy-cadence-torrent: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Add support to enable LN23 Type-C swap (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Manage TypeC lane swap if typec-dir-gpios not specified (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: add j721s2-wiz-10g module support (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: add j784s4-wiz-10g module support (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: fix reference leaks in wiz_probe() (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: stop name conflict if multiple serdes are initialized (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: set PMA_CMN_REFCLK_DIG_DIV based on reflk rate (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: add support for j7200-wiz-10g (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz.c: Add usxgmii support in wiz driver (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: Add SGMII support in wiz driver for J7200 (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Remove unused `regmap` field from state struct (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: use OF data for device specific data (Andrew Halaney) [RHEL-35606]
  - phy: ti: Fix missing sentinel for clk_div_table (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: use swap() to make code cleaner (Andrew Halaney) [RHEL-35606]
  - phy: ti: report 2 non-kernel-doc comments (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add support to output received reference clock (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Model reference clock driver as a clock to enable derived refclk (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Migrate to clk_hw based registration and OF APIs (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Check PIPE mode PHY status to be ready for operation (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add debug information for PHY configuration (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add separate functions for reusable code (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add PHY configuration for DP with 100MHz ref clock (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add PHY registers for DP in array format (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Configure PHY registers as a function of input reference clock rate (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add enum for supported input reference clock frequencies (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Reorder few functions to remove function declarations (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Remove use of CamelCase to fix checkpatch CHECK message (Andrew Halaney) [RHEL-35606]
  - drm/gem: rename struct drm_gem_dma_object.{paddr => dma_addr} (Andrew Halaney) [RHEL-35606]
  - drm: Remove linux/media-bus-format.h from drm_crtc.h (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Update encoder/bridge chain connect model (Andrew Halaney) [RHEL-35606]
  - drm/bridge: Centralize error message when bridge attach fails (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Add support for AM625 DSS (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Use GEM DMA fbdev emulation (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Implement struct drm_plane_helper_funcs.atomic_enable (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Remove return values from dispc_plane_{setup, enable}() (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Remove unnecessary include statements for drm_crtc_helper.h (Andrew Halaney) [RHEL-35606]
  - drm/fb-helper: Remove unnecessary include statements (Andrew Halaney) [RHEL-35606]
  - drm/fb-helper: Move generic fbdev emulation into separate source file (Andrew Halaney) [RHEL-35606]
  - drm/gem: rename GEM CMA helpers to GEM DMA helpers (Andrew Halaney) [RHEL-35606]
  - drm: Remove CONFIG_DRM_KMS_CMA_HELPER option (Andrew Halaney) [RHEL-35606]
  - drm/fb: rename FB CMA helpers to FB DMA helpers (Andrew Halaney) [RHEL-35606]
  - drm: Drop drm_blend.h from drm_crtc.h (Andrew Halaney) [RHEL-35606]
  - drm/fb: remove unused includes of drm_fb_cma_helper.h (Andrew Halaney) [RHEL-35606]
  - drm: Drop drm_framebuffer.h from drm_crtc.h (Andrew Halaney) [RHEL-35606]
  - drm: Remove unnecessary include statements of drm_plane_helper.h (Andrew Halaney) [RHEL-35606]
  - drm: tidss: Fix pixel format definition (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Set max DMA segment size (Andrew Halaney) [RHEL-35606]
  - drm/tidss: fix repeated words in comments (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Soft Reset DISPC on startup (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Use drm_module_platform_driver() to register the driver (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Fix warning: unused variable 'tidss_pm_ops' (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Make use of the helper macro SET_RUNTIME_PM_OPS() (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Convert to Linux IRQ interfaces (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Don't use struct drm_device.irq_enabled (Andrew Halaney) [RHEL-35606]
  - drm/<driver>: drm_gem_plane_helper_prepare_fb is now the default (Andrew Halaney) [RHEL-35606]
  - selftests/bpf: Check VLAN tag and proto in xdp_metadata (Petr Oros) [RHEL-31890]
  - selftests/bpf: Add AF_INET packet generation to xdp_metadata (Petr Oros) [RHEL-31890]
  - selftests/bpf: Add flags and VLAN hint to xdp_hw_metadata (Petr Oros) [RHEL-31890]
  - selftests/bpf: Allow VLAN packets in xdp_hw_metadata (Petr Oros) [RHEL-31890]
  - net: make vlan_get_tag() return -ENODATA instead of -EINVAL (Petr Oros) [RHEL-31890]
  - veth: Implement VLAN tag XDP hint (Petr Oros) [RHEL-31890]
  - xdp: Add VLAN tag hint (Petr Oros) [RHEL-31890]
  - xsk: add functions to fill control buffer (Petr Oros) [RHEL-31890]
  - redhat: remove gcc version check for ENABLE_WERROR (Eric Chanudet) [RHEL-43372]
  - vduse: Temporarily fail if control queue feature requested (Cindy Lu) [RHEL-23888]
  - redhat/configs: Enable CONFIG_VDPA_USER (Cindy Lu) [RHEL-23888]
  - mm: replace vma->vm_flags direct modifications with modifier calls (Cindy Lu) [RHEL-23888]
  - vduse: enable Virtio-net device type (Cindy Lu) [RHEL-23888]
  - vduse: validate block features only with block devices (Cindy Lu) [RHEL-23888]
  - file: Export receive_fd() to modules (Cindy Lu) [RHEL-23888]
  - eventfd: simplify eventfd_signal() (Cindy Lu) [RHEL-23888]
  - vduse: implement DMA sync callbacks (Cindy Lu) [RHEL-23888]
  - vduse: make vduse_class constant (Cindy Lu) [RHEL-23888]
  - vdpa: Provide interface to read driver features (Cindy Lu) [RHEL-23888]
  - vduse: Use proper spinlock for IRQ injection (Cindy Lu) [RHEL-23888]
  - vduse: fix NULL pointer dereference (Cindy Lu) [RHEL-23888]
  - vduse: avoid empty string for dev name (Cindy Lu) [RHEL-23888]
  - vduse: Support specifying bounce buffer size via sysfs (Cindy Lu) [RHEL-23888]
  - vduse: Delay iova domain creation (Cindy Lu) [RHEL-23888]
  - vduse: Signal vq trigger eventfd directly if possible (Cindy Lu) [RHEL-23888]
  - vduse: Add sysfs interface for irq callback affinity (Cindy Lu) [RHEL-23888]
  - vduse: Support get_vq_affinity callback (Cindy Lu) [RHEL-23888]
  - vduse: Support set_vq_affinity callback (Cindy Lu) [RHEL-23888]
  - vduse: Refactor allocation for vduse virtqueues (Cindy Lu) [RHEL-23888]
  - driver core: class: remove module * from class_create() (Cindy Lu) [RHEL-23888]
  - vduse: Remove include of rwlock.h (Cindy Lu) [RHEL-23888]
  - vduse: Validate vq_num in vduse_validate_config() (Cindy Lu) [RHEL-23888]
  - driver core: make struct class.devnode() take a const * (Cindy Lu) [RHEL-23888]
  - vduse: prevent uninitialized memory accesses (Cindy Lu) [RHEL-23888]
  - vduse: Support querying information of IOVA regions (Cindy Lu) [RHEL-23888]
  - vduse: Support registering userspace memory for IOVA regions (Cindy Lu) [RHEL-23888]
  - vduse: Support using userspace pages as bounce buffer (Cindy Lu) [RHEL-23888]
  - vduse: Use memcpy_{to,from}_page() in do_bounce() (Cindy Lu) [RHEL-23888]
  - vduse: Remove unnecessary spin lock protection (Cindy Lu) [RHEL-23888]
  - vduse: Tie vduse mgmtdev and its device (Cindy Lu) [RHEL-23888]
  - vduse: Fix NULL pointer dereference on sysfs access (Cindy Lu) [RHEL-23888]
  - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (Cindy Lu) [RHEL-23888]
  - vdpa: multiple address spaces support (Cindy Lu) [RHEL-23888]
  - vdpa: introduce virtqueue groups (Cindy Lu) [RHEL-23888]
  - iommu/iova: Separate out rcache init (Cindy Lu) [RHEL-23888]
  - vduse: moving kvfree into caller (Cindy Lu) [RHEL-23888]
  - iommu/iova: Move fast alloc size roundup into alloc_iova_fast() (Cindy Lu) [RHEL-23888]
  - vduse: check that offset is within bounds in get_config() (Cindy Lu) [RHEL-23888]
  - vduse: fix memory corruption in vduse_dev_ioctl() (Cindy Lu) [RHEL-23888]
  - vdpa: Enable user to set mac and mtu of vdpa device (Cindy Lu) [RHEL-23888]
  - vduse: Fix race condition between resetting and irq injecting (Cindy Lu) [RHEL-23888]
  - vduse: Disallow injecting interrupt before DRIVER_OK is set (Cindy Lu) [RHEL-23888]
  - VDUSE: fix documentation underline warning (Cindy Lu) [RHEL-23888]
  - vduse: Cleanup the old kernel states after reset failure (Cindy Lu) [RHEL-23888]
  - vduse: missing error code in vduse_init() (Cindy Lu) [RHEL-23888]
  - Documentation: Add documentation for VDUSE (Cindy Lu) [RHEL-23888]
  - vduse: Introduce VDUSE - vDPA Device in Userspace (Cindy Lu) [RHEL-23888]
  - vduse: Implement an MMU-based software IOTLB (Cindy Lu) [RHEL-23888]
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Davide Caratti) [RHEL-33410]
  - net: replace calls to sock->ops->connect() with kernel_connect() (Davide Caratti) [RHEL-33410]
  - net: Avoid address overwrite in kernel_connect (Davide Caratti) [RHEL-30875 RHEL-33410]
  - af_unix: Fix garbage collector racing against connect() (Davide Caratti) [RHEL-33410]
  - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-33410]
  - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-33410]
  - net: veth: do not manipulate GRO when using XDP (Davide Caratti) [RHEL-33410]
  - net: veth: clear GRO when clearing XDP even when down (Davide Caratti) [RHEL-33410]
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Davide Caratti) [RHEL-33410]
  - llc: call sock_orphan() at release time (Davide Caratti) [RHEL-33410]
  - llc: Drop support for ETH_P_TR_802_2. (Davide Caratti) [RHEL-33410]
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Davide Caratti) [RHEL-33410]
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Davide Caratti) [RHEL-33410]
  - ethtool: netlink: Add missing ethnl_ops_begin/complete (Davide Caratti) [RHEL-33410]
  - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Davide Caratti) [RHEL-33410]
  - net/ipv6: convert skip_notify_on_dev_down sysctl to u8 (Davide Caratti) [RHEL-33410]
  - net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down (Davide Caratti) [RHEL-33410]
  - neighbour: fix unaligned access to pneigh_entry (Davide Caratti) [RHEL-33410]
  - af_packet: do not use READ_ONCE() in packet_bind() (Davide Caratti) [RHEL-33410]
  - af_packet: Fix data-races of pkt_sk(sk)->num. (Davide Caratti) [RHEL-33410]
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Davide Caratti) [RHEL-33410]
  - af_unix: Fix data race around sk->sk_err. (Davide Caratti) [RHEL-33410]
  - af_unix: Fix data-races around sk->sk_shutdown. (Davide Caratti) [RHEL-33410]
  - af_unix: Fix data races around sk->sk_shutdown. (Davide Caratti) [RHEL-33410]
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->pressure to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->running to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->has_vnet_hdr to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->tp_loss to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->tp_tx_has_off to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: annotate accesses to po->tp_tstamp (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->auxdata to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->origdev to an atomic flag (Davide Caratti) [RHEL-33410]
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Felix Maurer) [RHEL-30107]
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Felix Maurer) [RHEL-30107]
  - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program (Felix Maurer) [RHEL-30107]
  - xsk: Add truesize to skb_add_rx_frag(). (Felix Maurer) [RHEL-30107]
  - xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL (Felix Maurer) [RHEL-30107]
  - xsk: fix usage of multi-buffer BPF helpers for ZC XDP (Felix Maurer) [RHEL-28894 RHEL-30107] {CVE-2024-26611}
  - xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags (Felix Maurer) [RHEL-30107]
  - xsk: recycle buffer in case Rx queue was full (Felix Maurer) [RHEL-30107]
  - xsk: Skip polling event check for unbound socket (Felix Maurer) [RHEL-30107]
  - bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings (Felix Maurer) [RHEL-30107]
  - bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint (Felix Maurer) [RHEL-30107]
  - bpf: Factor out socket lookup functions for the TC hookpoint. (Felix Maurer) [RHEL-30107]
  - selftest/cgroup: Update test_cpuset_prs.sh to match changes (Waiman Long) [RHEL-43331]
  - cgroup/cpuset: Make cpuset.cpus.exclusive independent of cpuset.cpus (Waiman Long) [RHEL-43331]
  - cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition (Waiman Long) [RHEL-43331]
  - selftest/cgroup: Fix test_cpuset_prs.sh problems reported by test robot (Waiman Long) [RHEL-43331]
  - cgroup/cpuset: Fix remote root partition creation problem (Waiman Long) [RHEL-43331]
  - cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls (Waiman Long) [RHEL-43331]
  - cgroup/cpuset: Make cpuset hotplug processing synchronous (Waiman Long) [RHEL-43331]
  - mm/mglru: Revert "don't sync disk for each aging cycle" (Waiman Long) [RHEL-43371]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-473.el9]
changelog:
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45031] {CVE-2024-39276}
  - epoll: be better about file lifetimes (Pavel Reichl) [RHEL-44083] {CVE-2024-38580}
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44402] {CVE-2024-33621}
  - net: micrel: Fix receiving the timestamp in the frame for lan8841 (Jose Ignacio Tornos Martinez) [RHEL-43994] {CVE-2024-38593}
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (Jose Ignacio Tornos Martinez) [RHEL-43623] {CVE-2021-47596}
  - usb: dwc3: Wait unconditionally after issuing EndXfer command (Desnes Nunes) [RHEL-43396] {CVE-2024-36977}
  - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-38622]
  - ixgbe: fix end of loop test in ixgbe_set_vf_macvlan() (Ken Cox) [RHEL-17490 RHEL-25594]
  - ixgbe: fix crash with empty VF macvlan list (Ken Cox) [RHEL-17490 RHEL-25594]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (Ken Cox) [RHEL-17490 RHEL-25594]
  - ethernet/intel: Use list_for_each_entry() helper (Ken Cox) [RHEL-17490 RHEL-25594]
  - ixgbe: fix timestamp configuration code (Ken Cox) [RHEL-17490 RHEL-25594]
  - redhat: deprecate bnx2xx drivers in rhel-9.5 (John Meneghini) [RHEL-40741]
  - net/tg3: fix race condition in tg3_reset_task() (Ken Cox) [RHEL-23102 RHEL-25507 RHEL-34072]
  - tg3: Increment tx_dropped in tg3_tso_bug() (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: Move the [rt]x_dropped counters to tg3_napi (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: Fix the TX ring stall (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: power down device only on SYSTEM_POWER_OFF (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: Improve PTP TX timestamping logic (Ken Cox) [RHEL-23102 RHEL-25507]
  - ethernet: tg3: remove unreachable code (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: Use slab_build_skb() when needed (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: Use pci_dev_id() to simplify the code (Ken Cox) [RHEL-23102 RHEL-25507]
  - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Ken Cox) [RHEL-23102 RHEL-25507]
  - scsi: qedi: Fix crash while reading debugfs attribute (John Meneghini) [RHEL-8112]
  - iomap: clear the per-folio dirty bits on all writeback failures (Pavel Reichl) [RHEL-11455]
  - iomap: don't skip reading in !uptodate folios when unsharing a range (Pavel Reichl) [RHEL-11455]
  - iomap: Add per-block dirty state tracking to improve performance (Pavel Reichl) [RHEL-11455]
  - iomap: Allocate ifs in ->write_begin() early (Pavel Reichl) [RHEL-11455]
  - iomap: Refactor iomap_write_delalloc_punch() function out (Pavel Reichl) [RHEL-11455]
  - iomap: Use iomap_punch_t typedef (Pavel Reichl) [RHEL-11455]
  - iomap: Fix possible overflow condition in iomap_write_delalloc_scan (Pavel Reichl) [RHEL-11455]
  - iomap: Add some uptodate state handling helpers for ifs state bitmap (Pavel Reichl) [RHEL-11455]
  - iomap: Drop ifs argument from iomap_set_range_uptodate() (Pavel Reichl) [RHEL-11455]
  - iomap: Rename iomap_page to iomap_folio_state and others (Pavel Reichl) [RHEL-11455]
  - iomap: Remove unnecessary test from iomap_release_folio() (Pavel Reichl) [RHEL-11455]
  - iomap: Simplify is_partially_uptodate a little (Pavel Reichl) [RHEL-11455]
  - iomap: Remove test for folio error (Pavel Reichl) [RHEL-11455]
  - ip_tunnel: harden copying IP tunnel params to userspace (Ivan Vecera) [RHEL-40130]
  - ip_tunnel: convert __be16 tunnel flags to bitmaps (Ivan Vecera) [RHEL-40130]
  - bitmap: introduce generic optimized bitmap_size() (Ivan Vecera) [RHEL-40130]
  - tools: move alignment-related macros to new <linux/align.h> (Ivan Vecera) [RHEL-40130]
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Ivan Vecera) [RHEL-40130]
  - bitmap: don't assume compiler evaluates small mem*() builtins calls (Ivan Vecera) [RHEL-40130]
  - vxlan: use generic function for tunnel IPv6 route lookup (Ivan Vecera) [RHEL-40130]
  - ipv6: mark address parameters of udp_tunnel6_xmit_skb() as const (Ivan Vecera) [RHEL-40130]
  - geneve: use generic function for tunnel IPv6 route lookup (Ivan Vecera) [RHEL-40130]
  - ipv6: add new arguments to udp_tunnel6_dst_lookup() (Ivan Vecera) [RHEL-40130]
  - ipv6: remove "proto" argument from udp_tunnel6_dst_lookup() (Ivan Vecera) [RHEL-40130]
  - ipv6: rename and move ip6_dst_lookup_tunnel() (Ivan Vecera) [RHEL-40130]
  - vxlan: use generic function for tunnel IPv4 route lookup (Ivan Vecera) [RHEL-40130]
  - geneve: use generic function for tunnel IPv4 route lookup (Ivan Vecera) [RHEL-40130]
  - geneve: add dsfield helper function (Ivan Vecera) [RHEL-40130]
  - ipv4: use tunnel flow flags for tunnel route lookups (Ivan Vecera) [RHEL-40130]
  - ipv4: add new arguments to udp_tunnel_dst_lookup() (Ivan Vecera) [RHEL-40130]
  - ipv4: remove "proto" argument from udp_tunnel_dst_lookup() (Ivan Vecera) [RHEL-40130]
  - ipv4: rename and move ip_route_output_tunnel() (Ivan Vecera) [RHEL-40130]
  - nfp: flower: add support for tunnel offload without key ID (Ivan Vecera) [RHEL-40130]
  - ip6_gre: Make IP6GRE and IP6GRETAP devices always NETIF_F_LLTX (Ivan Vecera) [RHEL-40130]
  - ip_gre: Make GRE and GRETAP devices always NETIF_F_LLTX (Ivan Vecera) [RHEL-40130]
  - ip_tunnel: use a separate struct to store tunnel params in the kernel (Ivan Vecera) [RHEL-40130]
  - lib/bitmap: add bitmap_{read,write}() (Ivan Vecera) [RHEL-40130]
  - net: Add helper function to parse netlink msg of ip_tunnel_parm (Ivan Vecera) [RHEL-40130]
  - net: Add helper function to parse netlink msg of ip_tunnel_encap (Ivan Vecera) [RHEL-40130]
  - selftests/memfd: fix spelling mistakes (Waiman Long) [RHEL-37152]
  - selftests/memfd: delete unused declarations (Waiman Long) [RHEL-37152]
  - memfd: drop warning for missing exec-related flags (Waiman Long) [RHEL-37152]
  - selftests: improve vm.memfd_noexec sysctl tests (Waiman Long) [RHEL-37152]
  - memfd: replace ratcheting feature from vm.memfd_noexec with hierarchy (Waiman Long) [RHEL-37152]
  - memfd: do not -EACCES old memfd_create() users with vm.memfd_noexec=2 (Waiman Long) [RHEL-37152]
  - selftests: memfd: error out test process when child test fails (Waiman Long) [RHEL-37152]
  - kernel: pid_namespace: remove unused set_memfd_noexec_scope() (Waiman Long) [RHEL-37152]
  - kernel: pid_namespace: simplify sysctls with register_sysctl() (Waiman Long) [RHEL-37152]
  - selftests/memfd: fix test_sysctl (Waiman Long) [RHEL-37152]
  - xfs: warn deprecation of V4 format beginning with RHEL10 instead of 2030. (Bill O'Donnell) [RHEL-40421]
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Add a missing check in bnxt_qplib_query_srq (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Return error for SRQ resize (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Fix unconditional fence for newer adapters (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Remove a redundant check inside bnxt_re_vf_res_config (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Avoid creating fence MR for newer adapters (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Fix error code in bnxt_re_create_cq() (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Fix the sparse warnings (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Share a page to expose per CQ info with userspace (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Add UAPI to share a page with user space (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Adds MSN table capability for Gen P7 adapters (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Doorbell changes (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Get the toggle bits from CQ completions (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Update the HW interface definitions (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Update the BAR offsets (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Support new 5760X P7 devices (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Correct module description string (Sreekanth Reddy) [RHEL-19812]
  - nfs: fix UAF in direct writes (Benjamin Coddington) [RHEL-34977] {CVE-2024-26958}
  - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38133] {CVE-2023-52762}
  - mm/kmemleak: disable KASAN instrumentation in kmemleak (Waiman Long) [RHEL-8656]
  - mm/kmemleak: compact kmemleak_object further (Waiman Long) [RHEL-8656]
  - kmemleak: avoid RCU stalls when freeing metadata for per-CPU pointers (Waiman Long) [RHEL-8656]
  - kmemleak: add checksum to backtrace report (Waiman Long) [RHEL-8656]
  - kmemleak: drop (age <increasing>) from leak record (Waiman Long) [RHEL-8656]
  - mm/kmemleak: move set_track_prepare() outside raw_spinlocks (Waiman Long) [RHEL-8656]
  - Revert "mm/kmemleak: move the initialisation of object to __link_object" (Waiman Long) [RHEL-8656]
  - mm/kmemleak: move the initialisation of object to __link_object (Waiman Long) [RHEL-8656]
  - mm/kmemleak: fix partially freeing unknown object warning (Waiman Long) [RHEL-8656]
  - mm: kmemleak: add __find_and_remove_object() (Waiman Long) [RHEL-8656]
  - mm: kmemleak: use mem_pool_free() to free object (Waiman Long) [RHEL-8656]
  - mm: kmemleak: split __create_object into two functions (Waiman Long) [RHEL-8656]
  - mm/kmemleak: fix print format of pointer in pr_debug() (Waiman Long) [RHEL-8656]
  - mm/kmemleak: move up cond_resched() call in page scanning loop (Waiman Long) [RHEL-8656]
  - Rename kmemleak_initialized to kmemleak_late_initialized (Waiman Long) [RHEL-8656]
  - mm/kmemleak: use %pK to display kernel pointers in backtrace (Waiman Long) [RHEL-8656]
  - mptcp: cleanup SOL_TCP handling (Paolo Abeni) [RHEL-28492]
  - mptcp: implement TCP_NOTSENT_LOWAT support (Paolo Abeni) [RHEL-28492]
  - mptcp: avoid some duplicate code in socket option handling (Paolo Abeni) [RHEL-28492]
  - mptcp: cleanup writer wake-up (Paolo Abeni) [RHEL-28492]
  - mptcp: check the protocol in mptcp_sk() with DEBUG_NET (Paolo Abeni) [RHEL-28492]
  - mptcp: check the protocol in tcp_sk() with DEBUG_NET (Paolo Abeni) [RHEL-28492]
  - mptcp: token kunit: set protocol (Paolo Abeni) [RHEL-28492]
  - mptcp: annotate lockless accesses around read-mostly fields (Paolo Abeni) [RHEL-28492]
  - mptcp: annotate lockless access for token (Paolo Abeni) [RHEL-28492]
  - mptcp: annotate lockless access for RX path fields (Paolo Abeni) [RHEL-28492]
  - mptcp: annotate lockless access for the tx path (Paolo Abeni) [RHEL-28492]
  - mptcp: annotate access for msk keys (Paolo Abeni) [RHEL-28492]
  - mptcp: use mptcp_set_state (Paolo Abeni) [RHEL-28492]
  - mptcp: add CurrEstab MIB counter support (Paolo Abeni) [RHEL-28492]
  - mptcp: rename mptcp_setsockopt_sol_ip_set_transparent() (Paolo Abeni) [RHEL-28492]
  - netlink: specs: mptcp: rename the MPTCP path management spec (Paolo Abeni) [RHEL-28492]
  - mptcp: add mptcpi_subflows_total counter (Paolo Abeni) [RHEL-28492]
  - net: atlantic: Fix DMA mapping for PTP hwts ring (Michal Schmidt) [RHEL-31367 RHEL-36002] {CVE-2024-26680}
  - net: atlantic: eliminate double free in error handling logic (Michal Schmidt) [RHEL-36002]
  - net: atlantic: fix double free in ring reinit logic (Michal Schmidt) [RHEL-36002]
  - net: atlantic: Fix NULL dereference of skb pointer in (Michal Schmidt) [RHEL-36002]
  - net: atlantic: Remove unnecessary (void*) conversions (Michal Schmidt) [RHEL-36002]
  - net: atlantic: Define aq_pm_ops conditionally on CONFIG_PM (Michal Schmidt) [RHEL-36002]
  - atlantic:hw_atl2:hw_atl2_utils_fw: Remove unnecessary (void*) conversions (Michal Schmidt) [RHEL-36002]
  - net: aquantia: constify pointers to hwmon_channel_info (Michal Schmidt) [RHEL-36002]
  - block: fix deadlock between bd_link_disk_holder and partition scan (Ming Lei) [RHEL-34860] {CVE-2024-26899}
  - xfs: recovery should not clear di_flushiter unconditionally (Bill O'Donnell) [RHEL-25419]
  - xfs: revert commit 44af6c7e59b12 (Bill O'Donnell) [RHEL-25419]
  - xfs: use dontcache for grabbing inodes during scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: fix imprecise logic in xchk_btree_check_block_owner (Bill O'Donnell) [RHEL-25419]
  - xfs: fix perag leak when growfs fails (Bill O'Donnell) [RHEL-25419]
  - xfs: add lock protection when remove perag from radix tree (Bill O'Donnell) [RHEL-25419]
  - xfs: fix units conversion error in xfs_bmap_del_extent_delay (Bill O'Donnell) [RHEL-25419]
  - xfs: fix dqiterate thinko (Bill O'Donnell) [RHEL-25419]
  - xfs: fix agf_fllast when repairing an empty AGFL (Bill O'Donnell) [RHEL-25419]
  - xfs: convert flex-array declarations in xfs attr shortform objects (Bill O'Donnell) [RHEL-25419]
  - xfs: convert flex-array declarations in xfs attr leaf blocks (Bill O'Donnell) [RHEL-25419]
  - xfs: convert flex-array declarations in struct xfs_attrlist* (Bill O'Donnell) [RHEL-25419]
  - xfs: fix uninit warning in xfs_growfs_data (Bill O'Donnell) [RHEL-25419]
  - xfs: Remove unneeded semicolon (Bill O'Donnell) [RHEL-25419]
  - xfs: AGI length should be bounds checked (Bill O'Donnell) [RHEL-25419]
  - xfs: fix xfs_btree_query_range callers to initialize btree rec fully (Bill O'Donnell) [RHEL-25419]
  - xfs: validate fsmap offsets specified in the query keys (Bill O'Donnell) [RHEL-25419]
  - xfs: clean up the rtbitmap fsmap backend (Bill O'Donnell) [RHEL-25419]
  - xfs: fix getfsmap reporting past the last rt extent (Bill O'Donnell) [RHEL-25419]
  - xfs: AGF length has never been bounds checked (Bill O'Donnell) [RHEL-25419]
  - xfs: journal geometry is not properly bounds checked (Bill O'Donnell) [RHEL-25419]
  - xfs: don't block in busy flushing when freeing extents (Bill O'Donnell) [RHEL-25419]
  - xfs: allow extent free intents to be retried (Bill O'Donnell) [RHEL-25419]
  - xfs: pass alloc flags through to xfs_extent_busy_flush() (Bill O'Donnell) [RHEL-25419]
  - xfs: use deferred frees for btree block freeing (Bill O'Donnell) [RHEL-25419]
  - xfs: remove redundant initializations of pointers drop_leaf and save_leaf (Bill O'Donnell) [RHEL-25419]
  - xfs: fix ag count overflow during growfs (Bill O'Donnell) [RHEL-25419]
  - xfs: set FMODE_CAN_ODIRECT instead of a dummy direct_IO method (Bill O'Donnell) [RHEL-25419]
  - xfs: drop EXPERIMENTAL tag for large extent counts (Bill O'Donnell) [RHEL-25419]
  - xfs: fix broken logic when detecting mergeable bmap records (Bill O'Donnell) [RHEL-25419]
  - xfs: Fix undefined behavior of shift into sign bit (Bill O'Donnell) [RHEL-25419]
  - xfs: disable reaping in fscounters scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: fix negative array access in xfs_getbmap (Bill O'Donnell) [RHEL-25419]
  - xfs: don't allocate into the data fork for an unshare request (Bill O'Donnell) [RHEL-25419]
  - xfs: flush dirty data and drain directios before scrubbing cow fork (Bill O'Donnell) [RHEL-25419]
  - xfs: fix duplicate includes (Bill O'Donnell) [RHEL-25419]
  - xfs: simplify two-level sysctl registration for xfs_table (Bill O'Donnell) [RHEL-25419]
  - xfs: fix BUG_ON in xfs_getbmap() (Bill O'Donnell) [RHEL-25419]
  - xfs: _{attr,data}_map_shared should take ILOCK_EXCL until iread_extents is completely done (Bill O'Donnell) [RHEL-25419]
  - xfs: remove WARN when dquot cache insertion fails (Bill O'Donnell) [RHEL-25419]
  - xfs: Extend table marker on deprecated mount options table (Bill O'Donnell) [RHEL-25419]
  - xfs: deprecate the ascii-ci feature (Bill O'Donnell) [RHEL-25419]
  - xfs: test the ascii case-insensitive hash (Bill O'Donnell) [RHEL-25419]
  - xfs: cross-reference rmap records with refcount btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: cross-reference rmap records with inode btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: cross-reference rmap records with free space btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: cross-reference rmap records with ag btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: introduce bitmap type for AG blocks (Bill O'Donnell) [RHEL-25419]
  - xfs: convert xbitmap to interval tree (Bill O'Donnell) [RHEL-25419]
  - xfs: drop the _safe behavior from the xbitmap foreach macro (Bill O'Donnell) [RHEL-25419]
  - xfs: don't load local xattr values during scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: remove the for_each_xbitmap_ helpers (Bill O'Donnell) [RHEL-25419]
  - xfs: only allocate free space bitmap for xattr scrub if needed (Bill O'Donnell) [RHEL-25419]
  - xfs: clean up xattr scrub initialization (Bill O'Donnell) [RHEL-25419]
  - xfs: check used space of shortform xattr structures (Bill O'Donnell) [RHEL-25419]
  - xfs: move xattr scrub buffer allocation to top level function (Bill O'Donnell) [RHEL-25419]
  - xfs: remove flags argument from xchk_setup_xattr_buf (Bill O'Donnell) [RHEL-25419]
  - xfs: split valuebuf from xchk_xattr_buf.buf (Bill O'Donnell) [RHEL-25419]
  - xfs: split usedmap from xchk_xattr_buf.buf (Bill O'Donnell) [RHEL-25419]
  - xfs: split freemap from xchk_xattr_buf.buf (Bill O'Donnell) [RHEL-25419]
  - xfs: remove unnecessary dstmap in xattr scrubber (Bill O'Donnell) [RHEL-25419]
  - xfs: don't shadow @leaf in xchk_xattr_block (Bill O'Donnell) [RHEL-25419]
  - xfs: xattr scrub should ensure one namespace bit per name (Bill O'Donnell) [RHEL-25419]
  - xfs: check for reverse mapping records that could be merged (Bill O'Donnell) [RHEL-25419]
  - xfs: check overlapping rmap btree records (Bill O'Donnell) [RHEL-25419]
  - xfs: flag refcount btree records that could be merged (Bill O'Donnell) [RHEL-25419]
  - xfs: don't call xchk_bmap_check_rmaps for btree-format file forks (Bill O'Donnell) [RHEL-25419]
  - xfs: flag free space btree records that could be merged (Bill O'Donnell) [RHEL-25419]
  - xfs: split the xchk_bmap_check_rmaps into a predicate (Bill O'Donnell) [RHEL-25419]
  - xfs: alert the user about data/attr fork mappings that could be merged (Bill O'Donnell) [RHEL-25419]
  - xfs: split xchk_bmap_xref_rmap into two functions (Bill O'Donnell) [RHEL-25419]
  - xfs: accumulate iextent records when checking bmap (Bill O'Donnell) [RHEL-25419]
  - xfs: change bmap scrubber to store the previous mapping (Bill O'Donnell) [RHEL-25419]
  - xfs: don't take the MMAPLOCK when scrubbing file metadata (Bill O'Donnell) [RHEL-25419]
  - xfs: retain the AGI when we can't iget an inode to scrub the core (Bill O'Donnell) [RHEL-25419]
  - xfs: rename xchk_get_inode -> xchk_iget_for_scrubbing (Bill O'Donnell) [RHEL-25419]
  - xfs: fix an inode lookup race in xchk_get_inode (Bill O'Donnell) [RHEL-25419]
  - xfs: fix parent pointer scrub racing with subdirectory reparenting (Bill O'Donnell) [RHEL-25419]
  - xfs: manage inode DONTCACHE status at irele time (Bill O'Donnell) [RHEL-25419]
  - xfs: simplify xchk_parent_validate (Bill O'Donnell) [RHEL-25419]
  - xfs: remove xchk_parent_count_parent_dentries (Bill O'Donnell) [RHEL-25419]
  - xfs: always check the existence of a dirent's child inode (Bill O'Donnell) [RHEL-25419]
  - xfs: streamline the directory iteration code for scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: ensure that single-owner file blocks are not owned by others (Bill O'Donnell) [RHEL-25419]
  - xfs: convert xfs_ialloc_has_inodes_at_extent to return keyfill scan results (Bill O'Donnell) [RHEL-25419]
  - xfs: teach scrub to check for sole ownership of metadata objects (Bill O'Donnell) [RHEL-25419]
  - xfs: directly cross-reference the inode btrees with each other (Bill O'Donnell) [RHEL-25419]
  - xfs: clean up broken eearly-exit code in the inode btree scrubber (Bill O'Donnell) [RHEL-25419]
  - xfs: remove pointless shadow variable from xfs_difree_inobt (Bill O'Donnell) [RHEL-25419]
  - xfs: ensure that all metadata and data blocks are not cow staging extents (Bill O'Donnell) [RHEL-25419]
  - xfs: check the reference counts of gaps in the refcount btree (Bill O'Donnell) [RHEL-25419]
  - xfs: implement masked btree key comparisons for _has_records scans (Bill O'Donnell) [RHEL-25419]
  - xfs: replace xfs_btree_has_record with a general keyspace scanner (Bill O'Donnell) [RHEL-25419]
  - xfs: refactor ->diff_two_keys callsites (Bill O'Donnell) [RHEL-25419]
  - xfs: refactor converting btree irec to btree key (Bill O'Donnell) [RHEL-25419]
  - xfs: check btree keys reflect the child block (Bill O'Donnell) [RHEL-25419]
  - xfs: detect unwritten bit set in rmapbt node block keys (Bill O'Donnell) [RHEL-25419]
  - xfs: hoist inode record alignment checks from scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: hoist rmap record flag checks from scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: complain about bad file mapping records in the ondisk bmbt (Bill O'Donnell) [RHEL-25419]
  - xfs: hoist rmap record flag checks from scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: complain about bad records in query_range helpers (Bill O'Donnell) [RHEL-25419]
  - xfs: standardize ondisk to incore conversion for bmap btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: standardize ondisk to incore conversion for rmap btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: return a failure address from xfs_rmap_irec_offset_unpack (Bill O'Donnell) [RHEL-25419]
  - xfs: standardize ondisk to incore conversion for refcount btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: standardize ondisk to incore conversion for inode btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: standardize ondisk to incore conversion for free space btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: scrub should use ECHRNG to signal that the drain is needed (Bill O'Donnell) [RHEL-25419]
  - xfs: minimize overhead of drain wakeups by using jump labels (Bill O'Donnell) [RHEL-25419]
  - xfs: clean up scrub context if scrub setup returns -EDEADLOCK (Bill O'Donnell) [RHEL-25419]
  - xfs: allow queued AG intents to drain before scrubbing (Bill O'Donnell) [RHEL-25419]
  - xfs: add a tracepoint to report incorrect extent refcounts (Bill O'Donnell) [RHEL-25419]
  - xfs: update copyright years for scrub/ files (Bill O'Donnell) [RHEL-25419]
  - xfs: fix author and spdx headers on scrub/ files (Bill O'Donnell) [RHEL-25419]
  - xfs: create traced helper to get extra perag references (Bill O'Donnell) [RHEL-25419]
  - xfs: give xfs_refcount_intent its own perag reference (Bill O'Donnell) [RHEL-25419]
  - xfs: give xfs_rmap_intent its own perag reference (Bill O'Donnell) [RHEL-25419]
  - xfs: give xfs_extfree_intent its own perag reference (Bill O'Donnell) [RHEL-25419]
  - xfs: pass per-ag references to xfs_free_extent (Bill O'Donnell) [RHEL-25419]
  - xfs: give xfs_bmap_intent its own perag reference (Bill O'Donnell) [RHEL-25419]
  - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program (Viktor Malik) [RHEL-23644 RHEL-36815] {CVE-2024-27431}
  - selftests: net: veth: test the ability to independently manipulate GRO and XDP (Viktor Malik) [RHEL-23644 RHEL-31820] {CVE-2024-26803}
  - net: veth: do not manipulate GRO when using XDP (Viktor Malik) [RHEL-23644 RHEL-31820] {CVE-2024-26803}
  - selftests: net: veth: test syncing GRO and XDP state while device is down (Viktor Malik) [RHEL-23644 RHEL-31820] {CVE-2024-26803}
  - net: veth: clear GRO when clearing XDP even when down (Viktor Malik) [RHEL-23644 RHEL-31820] {CVE-2024-26803}
  - selftests/bpf: Run cgroup1_hierarchy test in own mount namespace (Viktor Malik) [RHEL-23644]
  - selftests/bpf: fix RELEASE=1 build for tc_opts (Viktor Malik) [RHEL-23644]
  - bpf: don't emit warnings intended for global subprogs for static subprogs (Viktor Malik) [RHEL-23644]
  - bpf: make sure scalar args don't accept __arg_nonnull tag (Viktor Malik) [RHEL-23644]
  - bpf: Protect against int overflow for stack access size (Viktor Malik) [RHEL-23644]
  - libbpf: Prevent null-pointer dereference when prog to load has no BTF (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add negtive test cases for task iter (Viktor Malik) [RHEL-23644]
  - bpf: Fix an issue due to uninitialized bpf_iter_task (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test racing between bpf_timer_cancel_and_free and bpf_timer_cancel (Viktor Malik) [RHEL-23644]
  - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (Viktor Malik) [RHEL-23644 RHEL-31726] {CVE-2024-26737}
  - bpf, scripts: Correct GPL license name (Viktor Malik) [RHEL-23644]
  - bpf: Fix warning for bpf_cpumask in verifier (Viktor Malik) [RHEL-23644]
  - libbpf: fix return value for PERF_EVENT __arg_ctx type fix up check (Viktor Malik) [RHEL-23644]
  - libbpf: fix __arg_ctx type enforcement for perf_event programs (Viktor Malik) [RHEL-23644]
  - bpftool: Fix wrong free call in do_show_link (Viktor Malik) [RHEL-23644]
  - libbpf: warn on unexpected __arg_ctx type when rewriting BTF (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add tests confirming type logic in kernel for __arg_ctx (Viktor Malik) [RHEL-23644]
  - bpf: enforce types for __arg_ctx-tagged arguments in global subprogs (Viktor Malik) [RHEL-23644]
  - bpf: extract bpf_ctx_convert_map logic and make it more reusable (Viktor Malik) [RHEL-23644]
  - libbpf: feature-detect arg:ctx tag support in kernel (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (Viktor Malik) [RHEL-23644]
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (Viktor Malik) [RHEL-23644 RHEL-26467] {CVE-2024-26589}
  - selftests/bpf: Test re-attachment fix for bpf_tracing_prog_attach (Viktor Malik) [RHEL-23644]
  - bpf: Fix re-attachment branch in bpf_tracing_prog_attach (Viktor Malik) [RHEL-23644 RHEL-26486] {CVE-2024-26591}
  - selftests/bpf: Add test for recursive attachment of tracing progs (Viktor Malik) [RHEL-23644]
  - bpf: Relax tracing prog recursive attach rules (Viktor Malik) [RHEL-23644]
  - bpf, x86: Use emit_nops to replace memcpy x86_nops (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test gotol with large offsets (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Double the size of test_loader log (Viktor Malik) [RHEL-23644]
  - bpf: Remove unnecessary cpu == 0 check in memalloc (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add __arg_ctx BTF rewrite test (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add arg:ctx cases to test_global_funcs tests (Viktor Malik) [RHEL-23644]
  - libbpf: implement __arg_ctx fallback logic (Viktor Malik) [RHEL-23644]
  - libbpf: move BTF loading step after relocation step (Viktor Malik) [RHEL-23644]
  - libbpf: move exception callbacks assignment logic into relocation step (Viktor Malik) [RHEL-23644]
  - libbpf: use stable map placeholder FDs (Viktor Malik) [RHEL-23644]
  - libbpf: don't rely on map->fd as an indicator of map being created (Viktor Malik) [RHEL-23644]
  - libbpf: use explicit map reuse flag to skip map creation steps (Viktor Malik) [RHEL-23644]
  - libbpf: make uniform use of btf__fd() accessor inside libbpf (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Convert profiler.c to bpf_cmp. (Viktor Malik) [RHEL-23644]
  - bpf: Add bpf_nop_mov() asm macro. (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Remove bpf_assert_eq-like macros. (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Convert exceptions_assert.c to bpf_cmp (Viktor Malik) [RHEL-23644]
  - bpf: Introduce "volatile compare" macros (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Attempt to build BPF programs with -Wsign-compare (Viktor Malik) [RHEL-23644]
  - bpf: Add a possibly-zero-sized read test (Viktor Malik) [RHEL-23644]
  - bpf: Simplify checking size of helper accesses (Viktor Malik) [RHEL-23644]
  - bpf: Avoid unnecessary use of comma operator in verifier (Viktor Malik) [RHEL-23644]
  - bpf: Re-support uid and gid when mounting bpffs (Viktor Malik) [RHEL-23644]
  - libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos (Viktor Malik) [RHEL-23644]
  - libbpf: Skip DWARF sections in linker sanity check (Viktor Malik) [RHEL-23644]
  - samples/bpf: Use %lu format specifier for unsigned long values (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Close cgrp fd before calling cleanup_cgroup_environment() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add freplace of BTF-unreliable main prog test (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add global subprog annotation tests (Viktor Malik) [RHEL-23644]
  - libbpf: add __arg_xxx macros for annotating global func args (Viktor Malik) [RHEL-23644]
  - bpf: add support for passing dynptr pointer to global subprog (Viktor Malik) [RHEL-23644]
  - bpf: support 'arg:xxx' btf_decl_tag-based hints for global subprog args (Viktor Malik) [RHEL-23644]
  - bpf: reuse subprog argument parsing logic for subprog call checks (Viktor Malik) [RHEL-23644]
  - bpf: move subprog call logic back to verifier.c (Viktor Malik) [RHEL-23644]
  - bpf: prepare btf_prepare_func_args() for handling static subprogs (Viktor Malik) [RHEL-23644]
  - bpf: reuse btf_prepare_func_args() check for main program BTF validation (Viktor Malik) [RHEL-23644]
  - bpf: abstract away global subprog arg preparation logic from reg state setup (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add testcase to verifier_bounds.c for BPF_JNE (Viktor Malik) [RHEL-23644]
  - selftests/bpf: activate the OP_NE logic in range_cond() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: remove reduplicated s32 casting in "crafted_cases" (Viktor Malik) [RHEL-23644]
  - bpf: make the verifier tracks the "not equal" for regs (Viktor Malik) [RHEL-23644]
  - Revert BPF token-related functionality (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add more uprobe multi fail tests (Viktor Malik) [RHEL-23644]
  - bpf: Fail uprobe multi link with negative offset (Viktor Malik) [RHEL-23644]
  - bpf: Ensure precise is reset to false in __mark_reg_const_zero() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test the release of map btf (Viktor Malik) [RHEL-23644]
  - s390/bpf: Fix indirect trampoline generation (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Temporarily disable dummy_struct_ops test on s390 (Viktor Malik) [RHEL-23644]
  - x86/cfi,bpf: Fix bpf_exception_cb() signature (Viktor Malik) [RHEL-23644]
  - bpf: Fix dtor CFI (Viktor Malik) [RHEL-23644]
  - cfi: Add CFI_NOSEAL() (Viktor Malik) [RHEL-23644]
  - x86/cfi,bpf: Fix bpf_struct_ops CFI (Viktor Malik) [RHEL-23644]
  - x86/cfi,bpf: Fix bpf_callback_t CFI (Viktor Malik) [RHEL-23644]
  - x86/cfi,bpf: Fix BPF JIT call (Viktor Malik) [RHEL-23644]
  - cfi: Flip headers (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test for abnormal cnt during multi-kprobe attachment (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Don't use libbpf_get_error() in kprobe_multi_test (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test for abnormal cnt during multi-uprobe attachment (Viktor Malik) [RHEL-23644]
  - bpf: Limit the number of kprobes when attaching program to multiple kprobes (Viktor Malik) [RHEL-23644]
  - selftests/bpf: utilize string values for delegate_xxx mount options (Viktor Malik) [RHEL-23644]
  - bpf: support symbolic BPF FS delegation mount options (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Remove flaky test_btf_id test (Viktor Malik) [RHEL-23644]
  - bpf: Fix a race condition between btf_put() and map_free() (Viktor Malik) [RHEL-23644]
  - bpf: Use GFP_KERNEL in bpf_event_entry_gen() (Viktor Malik) [RHEL-23644]
  - bpf: Reduce the scope of rcu_read_lock when updating fd map (Viktor Malik) [RHEL-23644]
  - bpf: Update the comments in maybe_wait_bpf_programs() (Viktor Malik) [RHEL-23644]
  - bpf: add small subset of SECURITY_PATH hooks to BPF sleepable_lsm_hooks list (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add tests for LIBBPF_BPF_TOKEN_PATH envvar (Viktor Malik) [RHEL-23644]
  - libbpf: support BPF token path setting through LIBBPF_BPF_TOKEN_PATH envvar (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add tests for BPF object load with implicit token (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add BPF object loading tests with explicit token passing (Viktor Malik) [RHEL-23644]
  - libbpf: wire up BPF token support at BPF object level (Viktor Malik) [RHEL-23644]
  - libbpf: wire up token_fd into feature probing logic (Viktor Malik) [RHEL-23644]
  - libbpf: move feature detection code into its own file (Viktor Malik) [RHEL-23644]
  - libbpf: further decouple feature checking logic from bpf_object (Viktor Malik) [RHEL-23644]
  - libbpf: split feature detectors definitions from cached results (Viktor Malik) [RHEL-23644]
  - bpf: fail BPF_TOKEN_CREATE if no delegation option was set on BPF FS (Viktor Malik) [RHEL-23644]
  - bpf: selftests: Add verifier tests for CO-RE bitfield writes (Viktor Malik) [RHEL-23644]
  - bpf: selftests: test_loader: Support __btf_path() annotation (Viktor Malik) [RHEL-23644]
  - libbpf: Add BPF_CORE_WRITE_BITFIELD() macro (Viktor Malik) [RHEL-23644]
  - bpf: Support uid and gid when mounting bpffs (Viktor Malik) [RHEL-23644]
  - selftests/bpf: fix compiler warnings in RELEASE=1 mode (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Relax time_tai test for equal timestamps in tai_forward (Viktor Malik) [RHEL-23644]
  - bpf: Comment on check_mem_size_reg (Viktor Malik) [RHEL-23644]
  - bpf: Remove unused backtrack_state helper functions (Viktor Malik) [RHEL-23644]
  - bpf: use bitfields for simple per-subprog bool flags (Viktor Malik) [RHEL-23644]
  - bpf: tidy up exception callback management a bit (Viktor Malik) [RHEL-23644]
  - bpf: emit more dynptr information in verifier log (Viktor Malik) [RHEL-23644]
  - bpf: log PTR_TO_MEM memory size in verifier log (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate eliminated global subprog is not freplaceable (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test for bpf_cpumask_weight() kfunc (Viktor Malik) [RHEL-23644]
  - bpf: Add bpf_cpumask_weight() kfunc (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate fake register spill/fill precision backtracking logic (Viktor Malik) [RHEL-23644]
  - bpf: handle fake register spill to stack with BPF_ST_MEM instruction (Viktor Malik) [RHEL-23644]
  - bpf: Set uattr->batch.count as zero before batched update or deletion (Viktor Malik) [RHEL-23644]
  - bpf: Only call maybe_wait_bpf_programs() when map operation succeeds (Viktor Malik) [RHEL-23644]
  - bpf: Add missed maybe_wait_bpf_programs() for htab of maps (Viktor Malik) [RHEL-23644]
  - bpf: Call maybe_wait_bpf_programs() only once for generic_map_update_batch() (Viktor Malik) [RHEL-23644]
  - bpf: Remove unnecessary wait from bpf_map_copy_value() (Viktor Malik) [RHEL-23644]
  - libbpf: Add pr_warn() for EINVAL cases in linker_sanity_check_elf (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add selftests for cgroup1 local storage (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add a new cgroup helper open_classid() (Viktor Malik) [RHEL-23644]
  - bpf: Enable bpf_cgrp_storage for cgroup1 non-attach case (Viktor Malik) [RHEL-23644]
  - selftests/bpf: fix timer/test_bad_ret subtest on test_progs-cpuv4 flavor (Viktor Malik) [RHEL-23644]
  - bpf: Minor cleanup around stack bounds (Viktor Malik) [RHEL-23644]
  - bpf: Fix accesses to uninit stack slots (Viktor Malik) [RHEL-23644]
  - bpf: Add some comments to stack representation (Viktor Malik) [RHEL-23644]
  - bpf: Load vmlinux btf for any struct_ops map (Viktor Malik) [RHEL-23644]
  - bpf: Guard stack limits against 32bit overflow (Viktor Malik) [RHEL-23644 RHEL-37076] {CVE-2023-52676}
  - bpf: Add verifier regression test for previous patch (Viktor Malik) [RHEL-23644]
  - bpf: Fix verification of indirect var-off stack access (Viktor Malik) [RHEL-23644]
  - x86, bpf: Use bpf_prog_pack for bpf trampoline (Viktor Malik) [RHEL-23644]
  - bpf: Use arch_bpf_trampoline_size (Viktor Malik) [RHEL-23644]
  - bpf: Add arch_bpf_trampoline_size() (Viktor Malik) [RHEL-23644]
  - bpf, x86: Adjust arch_prepare_bpf_trampoline return value (Viktor Malik) [RHEL-23644]
  - bpf: Add helpers for trampoline image management (Viktor Malik) [RHEL-23644]
  - bpf: Adjust argument names of arch_prepare_bpf_trampoline() (Viktor Malik) [RHEL-23644]
  - bpf: Let bpf_prog_pack_free handle any pointer (Viktor Malik) [RHEL-23644]
  - bpf: rename MAX_BPF_LINK_TYPE into __MAX_BPF_LINK_TYPE for consistency (Viktor Malik) [RHEL-23644]
  - bpf,selinux: allocate bpf_security_struct per BPF token (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add BPF token-enabled tests (Viktor Malik) [RHEL-23644]
  - libbpf: add BPF token support to bpf_prog_load() API (Viktor Malik) [RHEL-23644]
  - libbpf: add BPF token support to bpf_btf_load() API (Viktor Malik) [RHEL-23644]
  - libbpf: add BPF token support to bpf_map_create() API (Viktor Malik) [RHEL-23644]
  - libbpf: add bpf_token_create() API (Viktor Malik) [RHEL-23644]
  - bpf,lsm: add BPF token LSM hooks (Viktor Malik) [RHEL-23644]
  - bpf,lsm: refactor bpf_map_alloc/bpf_map_free LSM hooks (Viktor Malik) [RHEL-23644]
  - bpf,lsm: refactor bpf_prog_alloc/bpf_prog_free LSM hooks (Viktor Malik) [RHEL-23644]
  - lsm: move the bpf hook comments to security/security.c (Viktor Malik) [RHEL-23644]
  - bpf: consistently use BPF token throughout BPF verifier logic (Viktor Malik) [RHEL-23644]
  - bpf: take into account BPF token when fetching helper protos (Viktor Malik) [RHEL-23644]
  - bpf: add BPF token support to BPF_PROG_LOAD command (Viktor Malik) [RHEL-23644]
  - bpf: add BPF token support to BPF_BTF_LOAD command (Viktor Malik) [RHEL-23644]
  - bpf: add BPF token support to BPF_MAP_CREATE command (Viktor Malik) [RHEL-23644]
  - bpf: introduce BPF token object (Viktor Malik) [RHEL-23644]
  - bpf: add BPF token delegation mount options to BPF FS (Viktor Malik) [RHEL-23644]
  - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros (Viktor Malik) [RHEL-23644]
  - bpf: track aligned STACK_ZERO cases as imprecise spilled registers (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate zero preservation for sub-slot loads (Viktor Malik) [RHEL-23644]
  - bpf: preserve constant zero when doing partial register restore (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate STACK_ZERO is preserved on subreg spill (Viktor Malik) [RHEL-23644]
  - bpf: preserve STACK_ZERO slots on partial reg spills (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add stack access precision test (Viktor Malik) [RHEL-23644]
  - bpf: support non-r10 register spill/fill to/from stack in precision tracking (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test bpf_kptr_xchg stashing of bpf_rb_root (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-23644]
  - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-23644]
  - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-23644]
  - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-23644]
  - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-23644]
  - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-23644 RHEL-30513] {CVE-2023-52621}
  - bpf: Minor logging improvement (Viktor Malik) [RHEL-23644]
  - bpf: simplify tnum output if a fully known constant (Viktor Malik) [RHEL-23644]
  - selftests/bpf: adjust global_func15 test to validate prog exit precision (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate async callback return value check correctness (Viktor Malik) [RHEL-23644]
  - bpf: enforce precision of R0 on program/async callback return (Viktor Malik) [RHEL-23644]
  - bpf: unify async callback and program retval checks (Viktor Malik) [RHEL-23644]
  - bpf: enforce precise retval range on program exit (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add selftest validating callback result is enforced (Viktor Malik) [RHEL-23644]
  - bpf: enforce exact retval range on subprog/callback exit (Viktor Malik) [RHEL-23644]
  - bpf: enforce precision of R0 on callback return (Viktor Malik) [RHEL-23644]
  - bpf: provide correct register name for exception callback retval check (Viktor Malik) [RHEL-23644]
  - bpf: rearrange bpf_func_state fields to save a bit of memory (Viktor Malik) [RHEL-23644]
  - bpf/tests: Remove duplicate JSGT tests (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Use pkg-config for libelf (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Override PKG_CONFIG for static builds (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Choose pkg-config for the target (Viktor Malik) [RHEL-23644]
  - bpftool: Add support to display uprobe_multi links (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add link_info test for uprobe_multi link (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Use bpf_link__destroy in fill_link_info tests (Viktor Malik) [RHEL-23644]
  - bpf: Add link_info support for uprobe multi link (Viktor Malik) [RHEL-23644]
  - bpf: Store ref_ctr_offsets values in bpf_uprobe array (Viktor Malik) [RHEL-23644]
  - libbpf: Add st_type argument to elf_resolve_syms_offsets function (Viktor Malik) [RHEL-23644]
  - selftests/bpf: update test_offload to use new orphaned property (Viktor Malik) [RHEL-23644]
  - bpftool: mark orphaned programs during prog show (Viktor Malik) [RHEL-23644]
  - bpf: Fix a few selftest failures due to llvm18 change (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add lazy global subprog validation tests (Viktor Malik) [RHEL-23644]
  - bpf: Validate global subprogs lazily (Viktor Malik) [RHEL-23644]
  - bpf: Emit global subprog name in verifier logs (Viktor Malik) [RHEL-23644]
  - libbpf: Start v1.4 development cycle (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Replaces the usage of CHECK calls for ASSERTs in vmlinux (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Replaces the usage of CHECK calls for ASSERTs in bpf_obj_id (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Replaces the usage of CHECK calls for ASSERTs in bind_perm (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Replaces the usage of CHECK calls for ASSERTs in bpf_tcp_ca (Viktor Malik) [RHEL-23644]
  - selftests/bpf: reduce verboseness of reg_bounds selftest logs (Viktor Malik) [RHEL-23644]
  - bpf: bpf_iter_task_next: use next_task(kit->task) rather than next_task(kit->pos) (Viktor Malik) [RHEL-23644]
  - bpf: bpf_iter_task_next: use __next_thread() rather than next_thread() (Viktor Malik) [RHEL-23644]
  - bpf: task_group_seq_get_next: use __next_thread() rather than next_thread() (Viktor Malik) [RHEL-23644]
  - change next_thread() to use __next_thread() ?: group_leader (Viktor Malik) [RHEL-23644]
  - introduce __next_thread(), fix next_tid() vs exec() race (Viktor Malik) [RHEL-23644]
  - bpf: emit frameno for PTR_TO_STACK regs if it differs from current one (Viktor Malik) [RHEL-23644]
  - bpf: smarter verifier log number printing logic (Viktor Malik) [RHEL-23644]
  - bpf: omit default off=0 and imm=0 in register state log (Viktor Malik) [RHEL-23644]
  - bpf: emit map name in register state if applicable and available (Viktor Malik) [RHEL-23644]
  - bpf: print spilled register state in stack slot (Viktor Malik) [RHEL-23644]
  - bpf: extract register state printing (Viktor Malik) [RHEL-23644]
  - bpf: move verifier state printing code to kernel/bpf/log.c (Viktor Malik) [RHEL-23644]
  - bpf: move verbose_linfo() into kernel/bpf/log.c (Viktor Malik) [RHEL-23644]
  - bpf: rename BPF_F_TEST_SANITY_STRICT to BPF_F_TEST_REG_INVARIANTS (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add iter test requiring range x range logic (Viktor Malik) [RHEL-23644]
  - veristat: add ability to set BPF_F_TEST_SANITY_STRICT flag with -r flag (Viktor Malik) [RHEL-23644]
  - selftests/bpf: set BPF_F_TEST_SANITY_SCRIPT by default (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add randomized reg_bounds tests (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add range x range test to reg_bounds (Viktor Malik) [RHEL-23644]
  - selftests/bpf: adjust OP_EQ/OP_NE handling to use subranges for branch taken (Viktor Malik) [RHEL-23644]
  - selftests/bpf: BPF register range bounds tester (Viktor Malik) [RHEL-23644]
  - bpf: make __reg{32,64}_deduce_bounds logic more robust (Viktor Malik) [RHEL-23644]
  - bpf: remove redundant s{32,64} -> u{32,64} deduction logic (Viktor Malik) [RHEL-23644]
  - bpf: add register bounds sanity checks and sanitization (Viktor Malik) [RHEL-23644]
  - bpf: enhance BPF_JEQ/BPF_JNE is_branch_taken logic (Viktor Malik) [RHEL-23644]
  - bpf: generalize is_scalar_branch_taken() logic (Viktor Malik) [RHEL-23644]
  - bpf: generalize reg_set_min_max() to handle non-const register comparisons (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add selftests for cgroup1 hierarchy (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add a new cgroup helper get_cgroup_hierarchy_id() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add a new cgroup helper get_classid_cgroup_id() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add parallel support for classid (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Fix issues in setup_classid_environment() (Viktor Malik) [RHEL-23644]
  - bpf: Add a new kfunc for cgroup1 hierarchy (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add assert for user stacks in test_task_stack (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Viktor Malik) [RHEL-23644 RHEL-40832]
  - bpf: Add crosstask check to __bpf_get_stack (Viktor Malik) [RHEL-23644]
  - bpf: Use named fields for certain bpf uapi structs (Viktor Malik) [RHEL-23644]
  - veristat: add ability to filter top N results (Viktor Malik) [RHEL-23644]
  - veristat: add ability to sort by stat's absolute value (Viktor Malik) [RHEL-23644]
  - bpf: replace register_is_const() with is_reg_const() (Viktor Malik) [RHEL-23644]
  - libbpf: Fix potential uninitialized tail padding with LIBBPF_OPTS_RESET (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test bpf_refcount_acquire of node obtained via direct ld (Viktor Malik) [RHEL-23644]
  - bpf: Mark direct ld of stashed bpf_{rb,list}_node as non-owning ref (Viktor Malik) [RHEL-23644]
  - bpf: Move GRAPH_{ROOT,NODE}_MASK macros into btf_field_type enum (Viktor Malik) [RHEL-23644]
  - bpf: Use bpf_mem_free_rcu when bpf_obj_dropping non-refcounted nodes (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test passing MAYBE_NULL reg to bpf_refcount_acquire (Viktor Malik) [RHEL-23644]
  - bpf: Add KF_RCU flag to bpf_refcount_acquire_impl (Viktor Malik) [RHEL-23644]
  - bpf: Introduce KF_ARG_PTR_TO_CONST_STR (Viktor Malik) [RHEL-23644]
  - bpf: Factor out helper check_reg_const_str() (Viktor Malik) [RHEL-23644]
  - bpf: Add __bpf_dynptr_data* for in kernel use (Viktor Malik) [RHEL-23644]
  - bpf, lpm: Fix check prefixlen before walking trie (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Disable CONFIG_DEBUG_INFO_REDUCED in config.aarch64 (Viktor Malik) [RHEL-23644]
  - bpftool: Fix prog object type in manpage (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Consolidate VIRTIO/9P configs in config.vm file (Viktor Malik) [RHEL-23644]
  - bpf: generalize reg_set_min_max() to handle two sets of two registers (Viktor Malik) [RHEL-23644]
  - bpf: prepare reg_set_min_max for second set of registers (Viktor Malik) [RHEL-23644]
  - bpf: unify 32-bit and 64-bit is_branch_taken logic (Viktor Malik) [RHEL-23644]
  - bpf: generalize is_branch_taken to handle all conditional jumps in one place (Viktor Malik) [RHEL-23644]
  - selftsets/bpf: Retry map update for non-preallocated per-cpu map (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Export map_update_retriable() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Use value with enough-size when updating per-cpu map (Viktor Malik) [RHEL-23644]
  - bpf: move is_branch_taken() down (Viktor Malik) [RHEL-23644]
  - bpf: generalize is_branch_taken() to work with two registers (Viktor Malik) [RHEL-23644]
  - bpf: rename is_branch_taken reg arguments to prepare for the second one (Viktor Malik) [RHEL-23644]
  - bpf: drop knowledge-losing __reg_combine_{32,64}_into_{64,32} logic (Viktor Malik) [RHEL-23644]
  - bpf: try harder to deduce register bounds from different numeric domains (Viktor Malik) [RHEL-23644]
  - bpf: improve deduction of 64-bit bounds from 32-bit bounds (Viktor Malik) [RHEL-23644]
  - bpf: add special smin32/smax32 derivation from 64-bit bounds (Viktor Malik) [RHEL-23644]
  - bpf: derive subreg bounds from full bounds when upper 32 bits are constant (Viktor Malik) [RHEL-23644]
  - bpf: derive smin32/smax32 from umin32/umax32 bounds (Viktor Malik) [RHEL-23644]
  - bpf: derive smin/smax from umin/max bounds (Viktor Malik) [RHEL-23644]
  - selftests/bpf: satisfy compiler by having explicit return in btf test (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add malloc failure checks in bpf_iter (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Convert CHECK macros to ASSERT_* macros in bpf_iter (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add tests for open-coded task_vma iter (Viktor Malik) [RHEL-23644]
  - bpf: Introduce task_vma open-coded iterator kfuncs (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Fix potential premature unload in bpf_testmod (Viktor Malik) [RHEL-19647]
  - bpf: Move kernel test kfuncs to bpf_testmod (Viktor Malik) [RHEL-19647]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-474.el9]
changelog:
  - wifi: save new module iwlwifi-tests in internal rpm (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: restore country code during resume (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: refactor setting country code logic (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: don't change BA sessions during restart (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: mark EMLSR disabled in cleanup iterator (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: assign link STA ID lookups during restart (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: check BSSID Index against MaxBSSID (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: improve association error reporting slightly (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - bus: mhi: host: Add mhi_power_down_keep_dev() API to support system suspend/hibernation (Jose Ignacio Tornos Martinez) [RHEL-12349 RHEL-34696]
  - net: qrtr: support suspend/hibernation (Jose Ignacio Tornos Martinez) [RHEL-12349 RHEL-34696]
  - wifi: ath11k: support hibernation (Jose Ignacio Tornos Martinez) [RHEL-12349 RHEL-34696]
  - wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of firmware command (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-36253]
  - wifi: rtw89: reset AFEDIG register in power off sequence (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-36253]
  - wifi: nl80211: Avoid address calculations via out of bounds array indexing (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: transmit deauth only if link is available (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: connac: use muar idx 0xe for non-mt799x as well (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7603: add wpdma tx eof flag for PSE client reset (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7915: add missing chanctx ops (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: fix check in iwl_mvm_sta_fw_id_mask (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: reconfigure TLC during HW restart (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: select STA mask only for active links (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: set wider BW OFDMA ignore correctly (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: fix active link counting during recovery (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: don't select link ID if not provided in scan request (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: fix uninitialized variable in mt7996_irq_tasklet() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: Do not warn on invalid link on scan complete (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: ignore non-TX BSSs in per-STA profile (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: ensure 4-byte alignment for suspend & wow command (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: fix size of txpower MCU command (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: connac: check for null before dereferencing (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: fix link ID management (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: fix unaligned le16 access (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove link before AP (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: init peer measurement result (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-39754] {CVE-2024-36941}
  - wifi: mac80211: mlme: re-parse if AP mode is less than client (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: mlme: fix memory leak (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: mlme: re-parse with correct mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: fix idle calculation with multi-link (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - Revert "wifi: iwlwifi: bump FW API to 90 for BZ/SC devices" (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: remove old PASN station when adding a new one (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: split mesh fast tx cache into local/proxied/forwarded (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: ensure beacon is non-S1G prior to extracting the beacon timestamp field (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: don't use rate mask for scanning (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: check EHT/TTLM action frame length (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: include link ID when releasing frames (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: handle debugfs names more carefully (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-39803] {CVE-2024-36921}
  - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-39799] {CVE-2024-36922}
  - wifi: iwlwifi: fw: don't always use FW dump trig (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-37165] {CVE-2024-35912}
  - wifi: mac80211: correctly set active links upon TTLM (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: Configure the link mapping for non-MLD FW (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: consider having one active link (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-37161] {CVE-2024-35913}
  - wifi: mac80211: fix prep_connection error path (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: fix rdev_dump_mpp() arguments order (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: disable MLO for the time being (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: add a flag to disable wireless extensions (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-36809] {CVE-2024-35789}
  - wifi: mac80211: fix mlme_link_id_dbg() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: coex: fix configuration for shared antenna for 8922A (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: wow: move release offload packet earlier for WoWLAN mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: wow: set security engine options for 802.11ax chips only (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: update suspend/resume for different generation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: wow: update config mac function with different generation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: update DMA function with different generation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: wow: update WoWLAN status register for different generation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: wow: update WoWLAN reason register for different chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-35152] {CVE-2024-27048}
  - wifi: rtw89: coex: Add coexistence policy to decrease WiFi packet CRC-ERR (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: coex: When Bluetooth not available don't set power/gain (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: coex: add return value to ensure H2C command is success or not (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: coex: Reorder H2C command index to align with firmware (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: coex: add BTC ctrl_info version 7 and related logic (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: coex: add init_info H2C command format version 7 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add coexistence helpers of SW grant (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: mac: add coexistence helpers {cfg/get}_plt (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtlwifi: Remove rtl_intf_ops.read_efuse_byte (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw88: 8821c: Fix false alarm count (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw88: 8821c: Fix beacon loss and disconnect (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw88: 8821cu: Fix connection failure (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw88: 8821cu: Fix firmware upload fail (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw88: Add missing VID/PIDs for 8811CU and 8821CU (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove TDLS peers on link deactivation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove TDLS peers only on affected link (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: mlme: unify CSA handling (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: introduce a feature flag for quiet in CSA (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: pass link conf to abort_channel_switch (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: pass link_id to channel switch ops (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: allow cfg80211_defragment_element() without output (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: expose cfg80211_iter_rnr() to drivers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: hide element parsing internals (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove unneeded scratch_len subtraction (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: defragment reconfiguration MLE when parsing (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: simplify multi-link element parsing (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove unnecessary ML element checks (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: add ieee80211_vif_link_active() helper (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove unnecessary ML element type check (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: update scratch_pos after defrag (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: Adjust CQM handling for MLO (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: Allow beacons to update BSS table regardless of scan (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: add link id to ieee80211_gtk_rekey_add() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: print flags in tracing in hex (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: obtain AP HT/VHT data for assoc request (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: don't add VHT capa on links without them (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: handle netif carrier up/down with link AP during MLO (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove only link keys during stopping link AP (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-37345] {CVE-2024-35937}
  - wifi: iwlwifi: Add missing MODULE_FIRMWARE() for *.pnvm (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: track capability/opmode NSS separately (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: fix supported rate masking in scan (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: check link exists before use (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: always initialize match_auth (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: fix license in p2p.c and p2p.h (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: constify MHI channel and controller configs (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add rcu lock for ath12k_wmi_p2p_noa_event() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-37341] {CVE-2024-35938}
  - wifi: rtl8xxxu: fix mixed declarations in rtl8xxxu_set_aifs() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rt2x00: silence sparse warnings (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmsmac: silence sparse warnings (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: do not pass hidden SSID attribute as value directly (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: pci: implement PCI CLK/ASPM/L1SS for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: Update EHT PHY beamforming capability (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: advertise missing extended scan feature (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: fweh: Fix boot crash on Raspberry Pi 4 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - bus: mhi: host: pci_generic: constify modem_telit_fn980_hw_v1_config (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: thermal: don't try to register multiple times (Jose Ignacio Tornos Martinez) [RHEL-12349 RHEL-34696]
  - wifi: ath11k: fix warning on DMA ring capabilities event (Jose Ignacio Tornos Martinez) [RHEL-12349 RHEL-34696]
  - wifi: ath11k: do not dump SRNG statistics during resume (Jose Ignacio Tornos Martinez) [RHEL-12349 RHEL-34696]
  - wifi: ath11k: remove MHI LOOPBACK channels (Jose Ignacio Tornos Martinez) [RHEL-12349 RHEL-34696]
  - wifi: ath11k: rearrange IRQ enable/disable in reset path (Jose Ignacio Tornos Martinez) [RHEL-12349 RHEL-34696]
  - wifi: mt76: Remove redundant assignment to variable tidno (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: fix the issue of missing txpwr settings from ch153 to ch177 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7921: fix suspend issue on MediaTek COB platform (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7921: fix a potential association failure upon resuming (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7921: fix the unfinished command of regd_notifier before suspend (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt792x: update the country list of EU for ACPI SAR (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt792x: fix a potential loading failure of the 6Ghz channel config from ACPI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7921: fix incorrect type conversion for CLC command (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-35148] {CVE-2024-27049}
  - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-34868] {CVE-2024-26892}
  - wifi: mt76: mt792x: add the illegal value check for mtcl table of acpi (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: fix the wrong data type for scan command (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: set page_pool napi pointer for mmio devices (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt792x: fix ethtool warning (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: fix HIF_TXD_V2_1 value (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: connac: set correct muar_idx for mt799x chipsets (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: add locking for accessing mapped registers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: remove TXS queue setting (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: fix efuse reading issue (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: mark GCMP IGTK unsupported (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: fix HE beamformer phy cap for station vif (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: fix incorrect interpretation of EHT MCS caps (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: disable AMSDU for non-data frames (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: fix TWT issues (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: check txs format before getting skb by pid (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: support temperature sensor (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: update PCIe DMA settings (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: add support to set ifs time by mcu command (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: add flow to avoid chip bt function fail (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: fix the wrong header translation config (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: fix WoW failed in encrypted mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: fix fw download fail (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: fix wmm queue mapping (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: fix mcu query command fail (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: fix SAP no beacon issue in 5Ghz and 6Ghz band (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7925: fix connect to 80211b mode fail in 2Ghz band (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt76x2u: add netgear wdna3100v3 to device table (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt792xu: enable dmashdl support (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: usb: store usb endpoint in mt76_queue (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: usb: create a dedicated queue for psd traffic (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7996: fix fw loading timeout (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7915: update mt798x_wmac_adie_patch_7976 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7915: add locking for accessing mapped registers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: mt7915: fix error recovery with WED enabled (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: check txs format before getting skb by pid (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mt76: disable HW AMSDU when using fixed rate (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - bus: mhi: host: Change the trace string for the userspace tools mapping (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: revert reset line logic flip (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: Add DMI nvram filename quirk for ACEPC W5 Pro (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtlwifi: set initial values for unexpected cases of USB endpoint priority (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: check vif before using in rtl8xxxu_tx() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtlwifi: rtl8192cu: Fix TX aggregation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: remove AKM suite be32 conversion for external auth request (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: nl80211: refactor parsing CSA offsets (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: nl80211: force WLAN_AKM_SUITE_SAE in big endian in NL80211_CMD_EXTERNAL_AUTH (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: load b0 version of ucode for HR1/HR2 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: handle per-phy statistics from fw (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: iwl-fh.h: fix kernel-doc issues (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: api: fix kernel-doc reference (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: unlock mvm if there is no primary link (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: support PHY context version 6 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: partially support PHY context version 6 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: support wider-bandwidth OFDMA (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: use ML element parsing helpers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: align ieee80211_mle_get_bss_param_ch_cnt() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: refactor RNR parsing (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: clean up cfg80211_inform_bss_frame_data() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: remove cfg80211_inform_single_bss_frame_data() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: set correct param change count in ML element (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: Add KHZ_PER_GHZ to units.h and reuse (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: clean up assignments to pointer cache. (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: make associated BSS pointer visible to the driver (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: add support for switch_vif_chanctx callback (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: check beacon countdown is complete on per link basis (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - bus: mhi: ep: check the correct variable in mhi_ep_register_controller() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - Revert "bus: mhi: core: Add support for reading MHI info from device" (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: add missing read critical sections around vif list traversal (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: fix declarations ordering (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: use SRCU instead of RCU for vif list traversal (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: split deeply nested RCU list traversal in dedicated helper (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add helper of set_channel (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add set_channel RF part (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add set_channel BB part (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add set_channel MAC part (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmsmac: avoid function pointer casts (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: remove unused scan_events from struct scan_req_params (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: add support for QCA2066 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: move pci.ops registration ahead (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: provide address list if chip supports 2 stations (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: support 2 station interfaces (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtlwifi: rtl_usb: Store the endpoint addresses (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtlwifi: rtl8192cu: Fix 2T2R chip type detection (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: remove unnecessary rcu_read_unlock() for punctured (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: declare to support two chanctx (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: chan: support MCC on Wi-Fi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: implement MRC H2C command functions (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: mac: implement MRC C2H event handling (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: add definition of H2C command and C2H event for MRC series (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: validate chip id during bus probe (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: use IEEE80211_MAX_MESH_ID_LEN appropriately (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: cancel session protection only if there is one (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: remove IWL_MVM_STATUS_NEED_FLUSH_P2P (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: remove the unused scan_events from ath12k_wmi_scan_req_arg (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Remove unused scan_flags from struct ath12k_wmi_scan_req_arg (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Do not use scan_flags from struct ath12k_wmi_scan_req_arg (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: Remove scan_flags union from struct scan_req_params (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: Do not directly use scan_flags in struct scan_req_params (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - net: sched: codel replace GPLv2/BSD boilerplate (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: check own capabilities for EMLSR (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: bump FW API to 89 for AX/BZ/SC devices (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: iwl-trans.h: clean up kernel-doc (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: fw: file: clean up kernel-doc (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: api: dbg-tlv: fix up kernel-doc (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: error-dump: fix kernel-doc issues (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: fix thermal kernel-doc (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: don't use TRUE/FALSE with bool (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: api: fix constant version to match FW (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: Fix the listener MAC filter flags (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: Extend support for P2P service discovery (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: work around A-MSDU size problem (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: nvm: parse the VLP/AFC bit from regulatory (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: iwlmvm: handle unprotected deauth/disassoc in d3 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: report unprotected deauth/disassoc in wowlan (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: nl80211: allow reporting wakeup for unprot deauth/disassoc (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: drop injection on disabled-chan monitor (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: optionally support monitor on disabled channels (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: rename UHB to 6 GHz (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: Add 160MHz bw range to regdom_custom_04 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove only own link stations during stop_ap (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: flush only stations using requests links (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: add support for link id attribute in NL80211_CMD_DEL_STATION (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove gfp parameter from ieee80211_obss_color_collision_notify (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: change qutoa to DBCC by default for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: reference quota mode when setting Tx power (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: implement AP mode related reg for BE generation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: correct register definition and merge IO for ctrl_nbtg_bt_tx() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: differentiate narrow_bw_ru_dis setting according to chip gen (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: use PLCP information to match BSS_COLOR and AID (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: mac: reset PHY-1 hardware when going to enable/disable (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: mac: correct MUEDCA setting for MAC-1 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: mac: return held quota of DLE when changing MAC-1 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: load BB parameters to PHY-1 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: correct PHY register offset for PHY-1 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: do not cast hidden SSID attribute value to boolean (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mwifiex: Refactor 1-element array into flexible array in struct mwifiex_ie_types_chan_list_param_set (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: correct CRC7 calculation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: chan: MCC take reconfig into account (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: chan: move handling from add/remove to assign/unassign for MLO (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: chan: tweak weight recalc ahead before MLO (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: chan: tweak bitmap recalc ahead before MLO (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: chan: add sub-entity swap function to cover replacing (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: drop TIMING_BEACON_ONLY and sync beacon TSF by self (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: set preamble size to auto as default in wilc_init_fw_config() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mwifiex: use kstrtoX_from_user() in debugfs handlers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: fix #ifdef CONFIG_ACPI check (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: fix kernel-doc for cfg80211_chandef_primary (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: queue: improve warning for no skb in reclaim (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: move BA notif messages before action (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: show skb_mac_gso_segment() failure reason (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: remove flags for enable/disable beacon filter (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: don't set replay counters to 0xff (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: pcie: Add new PCI device id and CNVI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: don't send the smart fifo command if not needed (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-36900] {CVE-2024-27434}
  - wifi: iwlwifi: fw: allow vmalloc for PNVM image (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: don't do duplicate detection for nullfunc packets (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: fix erroneous queue index mask (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: avoid garbage iPN (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: always update keys in D3 exit (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: limit pseudo-D3 to 60 seconds (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: combine condition/warning (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: fix the key PN index (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: Keep connection in case of missed beacons during RX (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: properly check if link is active (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: take SGOM and UATS code out of ACPI ifdef (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: don't abort queue sync in CT-kill (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: define RX queue sync timeout as a macro (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: expand queue sync warning messages (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: Declare support for secure LTF measurement (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: advertise support for protected ranging negotiation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: remove one queue sync on BA session stop (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: support EHT for WH (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: don't support reduced tx power on ack for new devices (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: use system_unbound_wq for debug dump (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: remove EHT code from mac80211.c (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: read mac step from aux register (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: adjust rx_phyinfo debugfs to MLO (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: const-ify chandef pointers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: Add support for PPAG cmd v5 and PPAG revision 3 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: pcie: don't allow hw-rfkill to stop device on gen2 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: add HONOR to PPAG approved list (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: add support to call csa_finish on a link (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: start and finalize channel switch on link basis (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: handle set csa/after_csa beacon on per link basis (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: update beacon counters per link basis (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: send link id in channel_switch ops (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: refactor STA CSA parsing flows (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: Add utility for converting op_class into chandef (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: return negative -EINVAL instead of positive EINVAL (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: don't use sband->band early (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: add missing kernel-doc (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: add missing kernel-doc for fast_tx_check (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: clarify vif handling in TX dequeue (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: allow CSA to same channel (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: convert ieee80211_ie_build_eht_cap() to SKB use (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: convert ieee80211_ie_build_he_cap() to SKB use (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: move element parsing to a new file (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: start building elements in SKBs (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: simplify adding supported rates (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: tdls: use ieee80211_put_he_6ghz_cap() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: rename ieee80211_ie_build_he_6ghz_cap() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: limit HE RU capabilities when limiting bandwidth (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: adjust EHT capa when lowering bandwidth (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: simplify HE/EHT element length functions (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: disallow basic multi-link element in per-STA profile (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: disambiguate element parsing errors (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: implement MLO multicast deduplication (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: add/use ieee80211_get_sn() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211/mac80211: move puncturing into chandef (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - iwlwifi: mvm: Use for_each_thermal_trip() for walking trip points (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - iwlwifi: mvm: Populate trip table before registering thermal zone (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - iwlwifi: mvm: Drop unused fw_trips_index[] from iwl_mvm_thermal_device (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: use cfg80211_chandef_primary_freq() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: simplify cfg80211_chandef_compatible() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wireless: declare different S1G chandefs incompatible (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: refactor puncturing bitmap extraction (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: move puncturing validation code (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: validate assoc response channel config (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: support wider bandwidth OFDMA config (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: add and use a link iteration macro (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: introduce 'channel request' (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: chan: chandef is non-NULL for reserved (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: simplify non-chanctx drivers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: clean up HE 6 GHz and EHT chandef parsing (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: clean up connection process (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: clean up band switch in duration (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove extra shadowing variable (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove unused MAX_MSG_LEN define (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Fix uninitialized use of ret in ath12k_mac_allocate() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: Really consistently use ath11k_vif_to_arvif() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: advertise P2P dev support for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: designating channel frequency for ROC scan (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: move peer delete after vdev stop of station for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: allow specific mgmt frame tx while vdev is not up (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: change WLAN_SCAN_PARAMS_MAX_IE_LEN from 256 to 512 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: implement remain on channel for P2P mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: implement handling of P2P NoA event (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add P2P IE in beacon template (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: change interface combination for P2P mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: fix incorrect logic of calculating vdev_stats_id (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: fix broken structure wmi_vdev_create_cmd (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: update rate mask per sta (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: download firmware with key data for secure boot (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: parse secure section from firmware file (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: read firmware secure information from efuse (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: consider checksum length of security data (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add chip_ops::rfk_hw_init (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add chip_ops::rfk_init_late to do initial RF calibrations later (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: rfk: implement chip_ops to call RF calibrations (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: rfk: add H2C command to trigger TSSI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: rfk: add H2C command to trigger TXGAPK (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: rfk: add H2C command to trigger DACK (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: rfk: add H2C command to trigger DPK (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: rfk: add H2C command to trigger RX DCK (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: rfk: add H2C command to trigger IQK (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: rfk: send channel information to firmware for RF calibrations (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: rfk: add a completion to wait RF calibration report from C2H event (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - bus: mhi: host: Add tracing support (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: remove setting msg.spi (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mwifiex: Drop unused headers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmsmac: Drop legacy header (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: Add TP-Link TL-WN823N V2 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: initialize eirp_power before use (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: initialize rx_mcs_80 and rx_mcs_160 before use (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: enable 802.11 power save mode in station mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: fix kunit exports (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: fix warnings from dmi_get_system_info() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: fw: fix compiler warning for NULL string print (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: fw: fix compile w/o CONFIG_ACPI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - bus: mhi: ep: Use kcalloc() instead of kzalloc() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: make functions public (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: bump FW API to 88 for AX/BZ/SC devices (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: don't send BT_COEX_CI command on new devices (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: read DSM functions from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: prepare for reading DSM from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: simplify getting DSM from ACPI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: take send-DSM-to-FW flows out of ACPI ifdef (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: rfi: use a single DSM function for all RFI configurations (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: read ECKV table from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: read WRDD table from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: support link command version 2 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: use fast balance scan in case of an active P2P GO (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: don't send NDPs for new tx devices (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: read SPLC from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: prepare for reading SPLC from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: api: clean up some kernel-doc/typos (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: remove unused function prototype (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - iwlwifi: fw: fix more kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: don't allow deactivation of all links (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: enable all links only in MLO (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: nl80211: move WPA version validation to policy (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: clean up FILS discovery change flags handling (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: trace SMPS requests from driver (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: add control to skip beacons (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: read WTAS table from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: separate TAS 'read-from-BIOS' and 'send-to-FW' flows (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: prepare for reading TAS table from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: don't check TAS block list size twice (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: read PPAG table from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: validate PPAG table when sent to FW (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: prepare for reading PPAG table from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: small cleanups in PPAG table flows (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: read SAR tables from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: cleanup sending PER_CHAIN_LIMIT_OFFSET_CMD (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: prepare for reading SAR tables from UEFI (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: check AP supports EMLSR (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: d3: implement suspend with MLO (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: read BIOS PNVM only for non-Intel SKU (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: tests: verify BSS use flags of NSTR links (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: add a kunit test for 6 GHz colocated AP parsing (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: refactor duplicate chanctx condition (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: log dropped packets due to MIC error (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: support SPP A-MSDUs (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: pcie: Add the PCI device id for new hardware (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: fix the TLC command after ADD_STA (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: use FW rate for non-data only on new devices (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: remove Gl A-step remnants (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: Fix FTM initiator flags (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: always have 'uats_enabled' (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: don't set trigger frame padding in AP mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: Fix spelling mistake "SESION" -> "SESSION" (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: d3: fix IPN byte order (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: add support for TID to link mapping neg request (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: fix EWRD table validity check (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: cleanup uefi variables loading (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: implement GLAI ACPI table loading (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: initialize rates in FW earlier (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: acpi: fix WPFC reading (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: fw: dbg: ensure correct config name sizes (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-37028] {CVE-2024-35845}
  - wifi: iwlwifi: dbg-tlv: use struct_size() for allocation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: dbg-tlv: avoid extra allocation/copy (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: fix some kernel-doc issues (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: d3: disconnect on GTK rekey failure (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: report beacon protection failures (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: Add support for removing responder TKs (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: disable eSR when BT is active (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor the rfkill worker (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add processing for TWT disable event (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add processing for TWT enable event (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: disable QMI PHY capability learn in split-phy QCN9274 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Read board id to support split-PHY QCN9274 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: fix PCI read and write (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add MAC id support in WBM error path (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: subscribe required word mask from rx tlv (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: remove hal_desc_sz from hw params (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: split hal_ops to support RX TLVs word mask compaction (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: fix firmware assert during insmod in memory segment mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Add logic to write QRTR node id to scratch (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: fix fetching MCBC flag for QCN9274 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add support for peer meta data version (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: fetch correct pdev id from WMI_SERVICE_READY_EXT_EVENTID (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: indicate NON MBSSID vdev by default during vdev start (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add firmware-2.bin support (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: change to move WMI_VDEV_PARAM_SET_HEMU_MODE before WMI_PEER_ASSOC_CMDID (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34187 RHEL-34696] {CVE-2024-26897}
  - wifi: ath9k: remove redundant assignment to variable ret (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: fix error messages (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add more fields to beacon H2C command to support multi-links (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: update ps_state register for chips with different generation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: add new H2C for PS mode in 802.11be chip (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add ieee80211_ops::hw_scan (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: prepare scan leaf functions for wifi 7 ICs (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: debug: add FW log component for scan (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: update scan C2H messages for wifi 7 IC (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: set chip_ops FEM and GPIO to NULL (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add chip_ops to get thermal value (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add RF read/write v2 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add chip_ops::cfg_txrx_path (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: implement {stop,resume}_sch_tx and cfg_ppdu (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: hook handlers of TX/RX descriptors to chip_ops (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: pci: enlarge RX DMA buffer to consider size of RX descriptor (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: pci: validate RX tag for RXQ and RPQ (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: pci: interrupt v2 refine IMR for SER (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: pci: update SER timer unit and timeout time (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: fix copyright year mentioned in platform_data header (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: add linefeed at end of file (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - bus: mhi: host: Read PK HASH dynamically (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - Revert "nl80211/cfg80211: Specify band specific min RSSI thresholds with sched scan" (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: add support for a wiphy_work rx handler (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: implement can_activate_links callback (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: bump FW API to 87 for AX/BZ/SC devices (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: introduce PHY_CONTEXT_CMD_API_VER_5 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: skip affinity setting on non-SMP (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: nvm-parse: advertise common packet padding (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: remove retry loops in start (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: mvm: limit EHT 320 MHz MCS for STEP URM (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: disable 160 MHz based on subsystem device ID (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: make TB reallocation a debug message (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: Add support for new 802.11be device (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: add kunit test for devinfo ordering (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: apply duration for SW scan (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: don't set bss_conf in parsing (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: disallow drivers with HT wider than HE (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: simplify HE capability access (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: remove extra element parsing (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: simplify ieee80211_config_bw() prototype (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: advertise 15 simultaneous links (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: validate MLO connections better (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: take EML/MLD capa from assoc response (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: advertise AP-side EMLSR/EMLMR capa (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: add support for SPP A-MSDUs (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: add support for SPP A-MSDUs (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: Declare support for negotiated TTLM (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: add support for negotiated TTLM request (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: handle BSS_CHANGED_MLD_TTLM (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211_hwsim: handle TID to link mapping neg request (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mac80211: process and save negotiated TID to Link mapping request (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ieee80211: add definitions for negotiated TID to Link map (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: cfg80211: add RNR with reporting AP information (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wireless: avoid strlen() in cfg80211_michael_mic_failure() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: fix connection failure due to unexpected peer delete (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: rename ath11k_start_vdev_delay() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: remove invalid peer create logic (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: enable 36 bit mask for stream DMA (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Fix issues in channel list update (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fix disabling concurrent mode TX hang issue (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fix HW scan timeout due to TSF sync issue (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: add wait/completion for abort scan (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-37357] {CVE-2024-35946}
  - wifi: rtw89: disable RTS when broadcast/multicast (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: Set default CQM config if not present (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: refine hardware scan C2H events (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: refine add_chan H2C command to encode_bits (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add BTG functions to assist BT coexistence to control TX/RX (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add TX power related ops (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add register definitions of H2C, C2H, page, RRSR and EDCCA (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add chip_ops related to BB init (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add chip_ops::{enable,disable}_bb_rf (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: add mlo_dbcc_mode for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: Fix enum ath10k_fw_crash_dump_type kernel-doc (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: Fix htt_data_tx_completion kernel-doc warning (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: fix htt_q_state_conf & htt_q_state kernel-doc (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: correctly document enum wmi_tlv_tx_pause_id (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: add missing wmi_10_4_feature_mask documentation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add support for collecting firmware log (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Introduce the container for mac80211 hw (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Refactor the mac80211 hw access from link/radio (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtlwifi: Speed up firmware loading for USB (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: add missing number of sec cam entries for all variants (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: allow per-vendor event handling (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: avoid invalid list operation when vendor attach fails (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: Demote vendor-specific attach/detach messages to info (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: cfg80211: Use WSEC to set SAE password (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: move feature overrides before feature_disable (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: add per-vendor feature detection callback (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: export firmware interface functions (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rt2x00: simplify rt2x00crypto_rx_insert_iv() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: mwifiex: Use helpers to check multicast addresses (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: brcmsmac: phy: Remove unreachable code (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: make instances of iface limit and combination to be static const (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: convert EN_DESC_ID of TX descriptor to le32 type (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: fix multi-vif management when deleting a vif (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: fix incorrect power down sequence (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: do not realloc workqueue everytime an interface is added (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: fix driver_handler when committing initial configuration (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtlwifi: rtl8192de: Don't read register in _rtl92de_query_rxphystatus (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: extend JOIN H2C command to support WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: use struct to fill JOIN H2C command (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: add H2C command to reset DMAC table for WiFi 7 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: add H2C command to reset CMAC table for WiFi 7 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: update TX AMPDU parameter to CMAC table (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: add chip_ops to update CMAC table to associated station (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: fill CMAC table to associated station for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: add H2C command to update security CAM v2 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: declare EXT NSS BW of VHT capability (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: add EHT capabilities for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: change supported bandwidths of chip_info to bit mask (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: adjust init_he_cap() to add EHT cap into iftype_data (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw88: use kstrtoX_from_user() in debugfs handlers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: change MAC buffer ring size to 2048 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add support for BA1024 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: fix wrong definitions of hal_reo_update_rx_queue (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: replace ENOTSUPP with EOPNOTSUPP (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: replace ENOTSUPP with EOPNOTSUPP (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: replace ENOTSUPP with EOPNOTSUPP (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add QMI PHY capability learn support (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor QMI MLO host capability helper function (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: document HAL_RX_BUF_RBM_SW4_BM (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: ath12k_start_vdev_delay(): convert to use ar (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_op_flush() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_op_ampdu_action() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_op_configure_filter() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_op_update_vif_offload() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_op_stop() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_op_start() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_op_conf_tx() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_bss_assoc() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_op_config() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_register() and ath12k_mac_unregister() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_setup_channels_rates() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_mac_allocate() and ath12k_mac_destroy() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: relocate ath12k_dp_pdev_pre_alloc() call (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: enable channel switch support (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-35142] {CVE-2024-27052}
  - wifi: ath12k: Use initializers for QMI message buffers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Add missing qmi_txn_cancel() calls (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Remove unnecessary struct qmi_txn initializers (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: use WMI_VDEV_SET_TPC_POWER_CMDID when EXT_TPC_REG_SUPPORT for 6 GHz (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: add handler for WMI_VDEV_SET_TPC_POWER_CMDID (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: add WMI_TLV_SERVICE_EXT_TPC_REG_SUPPORT service bit (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: fill parameters for vdev set tpc power WMI command (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: save max transmit power in vdev start response event from firmware (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: add parse of transmit power envelope element (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: save power spectral density(PSD) of regulatory rule (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: update regulatory rules when connect to AP on 6 GHz band for station (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: update regulatory rules when interface added (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: fix a possible dead lock caused by ab->base_lock (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: store cur_regulatory_info for each radio (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: add support to select 6 GHz regulatory type (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtlwifi: rtl_usb: Use sync register writes (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtlwifi: cleanup few rtlxxx_tx_fill_desc() routines (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: add chip_ops::update_beacon to abstract update beacon operation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: add H2C command to download beacon frame for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: use struct to fill H2C command to download beacon frame (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: add new H2C command to pause/sleep transmitting by MAC ID (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: refine H2C command that pause transmitting by MAC ID (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: fw: use struct to fill BA CAM H2C commands (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: update BA CAM number to 24 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: add chip_ops::h2c_ba_cam() to configure BA CAM (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: mac: add feature_init to initialize BA CAM V1 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: add firmware H2C command of BA CAM V1 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: fix RCU usage in connect path (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: wilc1000: fix declarations ordering (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: refactor ath12k_wmi_tlv_parse_alloc() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: fix IOMMU errors on buffer rings (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: Fix off by one initial RTS rate (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: Fix LED control code of RTL8192FU (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: declare concurrent mode support for 8188f (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: make supporting AP mode only on port 0 transparent (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: add hw crypto support for AP mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: remove obsolete priv->vif (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: add macids for STA mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: support multiple interface in start_ap() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: support multiple interfaces in bss_info_changed() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: support multiple interfaces in {add,remove}_interface() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: support multiple interfaces in watchdog_callback() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: support multiple interfaces in configure_filter() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: support multiple interfaces in update_beacon_work_callback() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: support multiple interfaces in set_aifs() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: support setting bssid register for multiple interfaces (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: don't parse CFO, if both interfaces are connected in STA mode (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: extend check for matching bssid to both interfaces (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: extend wifi connected check to both interfaces (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: support setting mac address register for both interfaces (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: 8188e: convert usage of priv->vif to priv->vifs[0] (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: support setting linktype for both interfaces (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: prepare supporting two virtual interfaces (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtl8xxxu: remove assignment of priv->vif in rtl8xxxu_bss_info_changed() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw88: 8822ce: refine power parameters for RFE type 5 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: mac: Fix spelling mistakes "notfify" -> "notify" (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: phy: set channel_info for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: phy: add BB wrapper of TX power for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: add NCTL pre-settings for WiFi 7 chips (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: phy: ignore special data from BB parameter file (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: update the register used in DIG and the DIG flow (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8922a: set RX gain along with set_channel operation (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: phy: add parser to support RX gain dynamic setting flow (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: phy: move bb_gain_info used by WiFi 6 chips to union (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8851b: update TX power tables to R37 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: 8852b: update TX power tables to R36 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: Make QMI message rules const (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: support default regdb while searching board-2.bin for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add support to search regdb data in board-2.bin for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: remove unused ATH12K_BD_IE_BOARD_EXT (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add fallback board name without variant while searching board-2.bin (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath12k: add string type to search board data in board-2.bin for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: remove duplicate memset() in 10.4 TDLS peer update (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: use flexible array in struct wmi_tdls_peer_capabilities (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: remove unused template structs (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: remove struct wmi_pdev_chanlist_update_event (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: use flexible arrays for WMI start scan TLVs (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: use flexible array in struct wmi_host_mem_chunks (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath9k: Convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath9k: delete some unused/duplicate macros (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath11k: refactor ath11k_wmi_tlv_parse_alloc() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Jose Ignacio Tornos Martinez) [RHEL-34696 RHEL-35199] {CVE-2023-52651}
  - bcma: Use PCI_HEADER_TYPE_MASK instead of literal (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - bcma: make bcma_bus_type const (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - bcma: convert to platform remove callback returning void (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - wifi: iwlwifi: drop NULL pointer check in iwl_mvm_tzone_set_trip_temp() (Jose Ignacio Tornos Martinez) [RHEL-34696]
  - mm: use memalloc_nofs_save() in page_cache_ra_order() (Nico Pache) [RHEL-39635] {CVE-2024-36882}
  - afs: Don't cross .backup mountpoint from backup volume (Marc Dionne) [RHEL-39509]
  - afs: Fix fileserver rotation getting stuck (Marc Dionne) [RHEL-39509]
  - rxrpc: Only transmit one ACK per jumbo packet received (Marc Dionne) [RHEL-39509]
  - rxrpc: Fix congestion control algorithm (Marc Dionne) [RHEL-39509]
  - rxrpc: Clients must accept conn from any address (Marc Dionne) [RHEL-39509]
  - rxrpc: Fix error check on ->alloc_txbuf() (Marc Dionne) [RHEL-39509]
  - afs: Fix occasional rmdir-then-VNOVNODE with generic/011 (Marc Dionne) [RHEL-39509]
  - afs: Don't cache preferred address (Marc Dionne) [RHEL-39509]
  - rxrpc: Extract useful fields from a received ACK to skb priv data (Marc Dionne) [RHEL-39509]
  - rxrpc: Clean up the resend algorithm (Marc Dionne) [RHEL-39509]
  - rxrpc: Record probes after transmission and reduce number of time-gets (Marc Dionne) [RHEL-39509]
  - rxrpc: Use ktimes for call timeout tracking and set the timer lazily (Marc Dionne) [RHEL-39509]
  - rxrpc: Differentiate PING ACK transmission traces. (Marc Dionne) [RHEL-39509]
  - rxrpc: Don't permit resending after all Tx packets acked (Marc Dionne) [RHEL-39509]
  - rxrpc: Parse received packets before dealing with timeouts (Marc Dionne) [RHEL-39509]
  - rxrpc: Do zerocopy using MSG_SPLICE_PAGES and page frags (Marc Dionne) [RHEL-39509]
  - rxrpc: Use rxrpc_txbuf::kvec[0] instead of rxrpc_txbuf::wire (Marc Dionne) [RHEL-39509]
  - rxrpc: Move rxrpc_send_ACK() to output.c with rxrpc_send_ack_packet() (Marc Dionne) [RHEL-39509]
  - rxrpc: Don't pick values out of the wire header when setting up security (Marc Dionne) [RHEL-39509]
  - rxrpc: Split up the DATA packet transmission function (Marc Dionne) [RHEL-39509]
  - rxrpc: Add a kvec[] to the rxrpc_txbuf struct (Marc Dionne) [RHEL-39509]
  - rxrpc: Merge together DF/non-DF branches of data Tx function (Marc Dionne) [RHEL-39509]
  - rxrpc: Do lazy DF flag resetting (Marc Dionne) [RHEL-39509]
  - rxrpc: Remove atomic handling on some fields only used in I/O thread (Marc Dionne) [RHEL-39509]
  - rxrpc: Strip barriers and atomics off of timer tracking (Marc Dionne) [RHEL-39509]
  - rxrpc: Fix the names of the fields in the ACK trailer struct (Marc Dionne) [RHEL-39509]
  - rxrpc: Note cksum in txbuf (Marc Dionne) [RHEL-39509]
  - rxrpc: Convert rxrpc_txbuf::flags into a mask and don't use atomics (Marc Dionne) [RHEL-39509]
  - rxrpc: Record the Tx serial in the rxrpc_txbuf and retransmit trace (Marc Dionne) [RHEL-39509]
  - ice: Fix ASSERT_RTNL() warning during certain scenarios (Ivan Vecera) [RHEL-30139]
  - netdev-genl: Add PID for the NAPI thread (Ivan Vecera) [RHEL-30139]
  - netdev-genl: spec: Add PID in netdev netlink YAML spec (Ivan Vecera) [RHEL-30139]
  - net: Add NAPI IRQ support (Ivan Vecera) [RHEL-30139]
  - net: minor reshuffle of napi_struct (Ivan Vecera) [RHEL-30139]
  - netdev-genl: spec: Add irq in netdev netlink YAML spec (Ivan Vecera) [RHEL-30139]
  - netdev-genl: Add netlink framework functions for napi (Ivan Vecera) [RHEL-30139]
  - netdev-genl: spec: Extend netdev netlink spec in YAML for NAPI (Ivan Vecera) [RHEL-30139]
  - netdev-genl: Add netlink framework functions for queue (Ivan Vecera) [RHEL-30139]
  - ice: Add support in the driver for associating queue with napi (Ivan Vecera) [RHEL-30139]
  - net: Add queue and napi association (Ivan Vecera) [RHEL-30139]
  - netdev-genl: spec: Extend netdev netlink spec in YAML for queue (Ivan Vecera) [RHEL-30139]
  - ice: implement AQ download pkg retry (Petr Oros) [RHEL-17318]
  - io_uring: drop any code related to SCM_RIGHTS (Jeff Moyer) [RHEL-36366] {CVE-2023-52656}
  - io_uring/unix: drop usage of io_uring socket (Jeff Moyer) [RHEL-36366] {CVE-2023-52656}
  - nvme-tcp: strict pdu pacing to avoid send stalls on TLS (Chris Leech) [RHEL-35558]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: Dodji Seketeli <dodji@redhat.com> - 1.8.1-1
changelog:
  - Update to upsteram fixes up to libabigail-1.8.1
    This encompasses this fixes, compared to the last 1.8 release:
        ir: Add better comments to types_have_similar_structure
        mainpage: Update web page for 1.8 release
        Bug 26992 - Try harder to resolve declaration-only classes
        Bug 27204 -  potential loss of some aliased ELF function symbols
        Ignore duplicated functions and those not associated with ELF symbols
        Bug 27236 - Pointer comparison wrongly fails because of typedef change
        Bug 27233 - fedabipkgdiff fails on package gnupg2 from Fedora 33
        Bug 27232 - fedabipkgdiff fails on gawk from Fedora 33
        dwarf-reader: Support fast DW_FORM_line_strp string comparison
        gen-changelog.py: Update call to subprocess.Popen & cleanup
        Bug 27255 - fedabipkgdiff fails on nfs-utils on Fedora 33
        abidiff: support --dump-diff-tree with --leaf-changes-only
        ir: Arrays are indirect types for type structure similarity purposes
        Add qualifier / typedef / array / pointer test
        abg-ir: Optimize calls to std::string::find() for a single char.
        abipkgdiff: Address operator precedence warning
  -Resolves: rhbz#1901016


author: Dodji Seketeli <dodji@redhat.com> - 2.1-1
changelog:
  - Update to upstream 2.1 release.
  - Remove the now useless text about getting the source from git.
  - Update the license reference.
  - Resolves: rhbz#1944096


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.46.1-1
changelog:
  - Rebase to new stable branch version 1.46.1
    resolves: rhbz#2011711
  - Add --enable-appliance-format-auto
  - Add support for Kylin
  - Document lazy-counters setting cannot be changed in XFS version 5
    resolves: rhbz#2025944, rhbz#1995391, rhbz#2024022
  - Require libvirt-daemon-driver-storage-core
    resolves: rhbz#2018358
  - Fix usage of strerror_r which caused corrupted error messages
    resolves: rhbz#2030396


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-2
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453
  - Add zstd support to guestfs_file_architecture
    resolves: rhbz#2117004


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-4
changelog:
  - New API: guestfs_inspect_get_build_id
  - Add support for detecting Windows >= 10, returned through osinfo
    resolves: rhbz#2012658


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-1
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.18-1
changelog:
  - New upstream release
  - Add ability to change crypto configuration at runtime without
    restarting knet and without packet drop
  - Add compatibility support for openssl 3.0
  - Add functional testing framework and new test cases
  - Minor build fixes
  - Fix BuildRequires to use libqb doxygen2man vs internal copy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Remi Collet <remi@remirepo.net> - 1.1.0-2
changelog:
  - remove internal AES implementation and use libcrypto
    https://github.com/awesomized/libmemcached/pull/114
  - fix build ussing upstream patch to update catch version


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-2
changelog:
  - RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466)
  - spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466)


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-1
changelog:
  - Rebased to libvirt-8.10.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075
      rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-2
changelog:
  - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
  - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
  - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
  - qemu: Init ext devices paths on reconnect (rhbz#2150760)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-2
changelog:
  - vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
  - domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
  - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
  - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
  - conf: clarify some external TPM error messages (rhbz#2063723)
  - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
  - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
  - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
  - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Jiri Denemark <jdenemar@redhat.com> - 9.1.0-1
changelog:
  - Rebased to libvirt-9.1.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2004850, rhbz#2137346, rhbz#2166235, rhbz#1961326


author: Jiri Denemark <jdenemar@redhat.com> - 9.2.0-1
changelog:
  - Rebased to libvirt-9.2.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2178885, rhbz#2000410, rhbz#2175582, rhbz#2154750, rhbz#2175449
      rhbz#2181234, rhbz#2078693, rhbz#2176924, rhbz#2156300, rhbz#2173142
      rhbz#2171973, rhbz#2178866, rhbz#2182961, rhbz#2174397, rhbz#2179030
      rhbz#2161965, rhbz#2035985


author: Jiri Denemark <jdenemar@redhat.com> - 9.3.0-1
changelog:
  - Rebased to libvirt-9.3.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2181235, rhbz#2176215, rhbz#2187133, rhbz#2178885, rhbz#2174700
      rhbz#2160435, rhbz#2184966, rhbz#2187278, rhbz#2014030, rhbz#2185184
      rhbz#2156300


author: Jiri Denemark <jdenemar@redhat.com> - 9.4.0-1
changelog:
  - Rebased to libvirt-9.4.0 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2119007, rhbz#2193315, rhbz#2209658, rhbz#2143158, rhbz#2208946
      rhbz#2138150, rhbz#2203657, rhbz#2180679, rhbz#2203709


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-0rc1.1
changelog:
  - Rebased to libvirt-9.5.0-rc1 (rhbz#2175785)
  - The rebase also fixes the following bugs:
      rhbz#2160356, rhbz#2209191, rhbz#2210287, rhbz#2209853, rhbz#2171860
      rhbz#2138150, rhbz#2171384


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-2
changelog:
  - nodedev: transient mdev update on nodeDeviceCreateXML (rhbz#2143158)
  - nodedev: refactor mdevctl thread functions (rhbz#2143158)
  - nodedev: update mdevs from the mdevctl thread (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-3
changelog:
  - tests: remove acpi support from s390x ccw hotplug tests (rhbz#2168499)
  - tests: add capabilities for QEMU 8.1.0 on s390x (rhbz#2168499)
  - qemu: add run-with async-teardown capability (rhbz#2168499)
  - qemu: allow use of async teardown in domain (rhbz#2168499)
  - conf: domcaps: Add 'async-teardown' domain capability (rhbz#2168499)
  - qemu: S390 does not provide physical address size (rhbz#2224016)
  - nodedev: report mdev persistence properly (rhbz#2143158)
  - node_device: Don't leak error message buffer from virMdevctlListDefined|Active (rhbz#2143158)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-4
changelog:
  - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (CVE-2023-3750, rhbz#2221851)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-5
changelog:
  - Revert "qemu_passt: Actually use @logfd" (rhbz#2209191)
  - Revert "qemu_passt: Precreate passt logfile" (rhbz#2209191)


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-6
changelog:
  - tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178)
  - tests: Switch to firmware autoselection for hvf (rhbz#2196178)
  - tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178)
  - tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178)
  - tests: Turn abi-update.xml into a symlink (rhbz#2196178)
  - tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178)
  - qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178)
  - qemu: Fix lookup against stateless/combined pflash (rhbz#2196178)
  - tests: Add some more DO_TEST*ABI_UPDATE* macros (rhbz#2196178)
  - tests: Add more tests for firmware selection (rhbz#2196178)
  - tests: Update firmware descriptor files (rhbz#2196178)
  - tests: Drop tags from BIOS firmware descriptor (rhbz#2196178)
  - tests: Include microvm in firmwaretest (rhbz#2196178)
  - qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178)
  - qemu: Generate NVRAM path in more cases (rhbz#2196178)
  - qemu: Filter firmware based on loader.readonly (rhbz#2196178)
  - qemu: Match NVRAM template extension for new domains (rhbz#2196178)
  - conf: Don't default to raw format for loader/NVRAM (rhbz#2196178)
  - tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178)
  - tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178)
  - rpm: Reorder scriptlets (rhbz#2210058)
  - rpm: Reduce use of with_modular_daemons (rhbz#2210058)
  - rpm: Remove custom libvirtd restart logic (rhbz#2210058)
  - rpm: Introduce new macros for handling of systemd units (rhbz#2210058)
  - rpm: Switch to new macros for handling of systemd units (rhbz#2210058)
  - rpm: Delete unused macros (rhbz#2210058)


author: Jiri Denemark <jdenemar@redhat.com> - 9.9.0-1
changelog:
  - Rebased to libvirt-9.9.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-7525, rhbz#RHEL-7570, rhbz#RHEL-7542, rhbz#RHEL-7568, rhbz#RHEL-7545
      rhbz#RHEL-3231, rhbz#RHEL-7382, rhbz#RHEL-7345, rhbz#RHEL-1717, rhbz#RHEL-7528
      rhbz#RHEL-1833, rhbz#RHEL-7569, rhbz#RHEL-4432, rhbz#RHEL-974, rhbz#RHEL-4994
      rhbz#RHEL-7419


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-7
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - qemu: Fix migration with custom XML (RHEL-30622)


author: Jiri Denemark <jdenemar@redhat.com> - 10.3.0-1
changelog:
  - Rebased to libvirt-10.3.0 (RHEL-29642)
  - The rebase also fixes the following bugs:
      RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
      RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
      RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-7489)
  - The rebase also fixes the following bugs:
      RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
      RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
      RHEL-39400


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.7.0-1
changelog:
  - Rebased to libvirt-8.7.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2084046, rhbz#2108483, rhbz#2123371, rhbz#2101633, rhbz#1988211
      rhbz#2086677, rhbz#2103132, rhbz#2078805, rhbz#2111301, rhbz#2094641


author: Jiri Denemark <jdenemar@redhat.com> - 8.8.0-1
changelog:
  - Rebased to libvirt-8.8.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2122534, rhbz#2121262, rhbz#2130089, rhbz#2121276, rhbz#2121627
      rhbz#2125111, rhbz#2129239, rhbz#1964855, rhbz#2114866


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-1
changelog:
  - Rebased to libvirt-8.9.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2074559, rhbz#2134009, rhbz#1777212, rhbz#2013523, rhbz#2114866
      rhbz#1964855


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "aarch64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-1
changelog:
  - New upstream stable version 1.26.3.
    resolves: rhbz#1950632
  - Add Python .cleanup() method.
  - Fix data corruption in zero and trim on unaligned tail.
    resolves: rhbz#1990134


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-3
changelog:
  - Fix parsing of delay-* options
    resolves: rhbz#1991649
  - Fix assertion failure during server shutdown
  - Fix delay-close option
    resolves: rhbz#1991652
  - tests/test-debug-flags.sh: Don't use port 10809 during test
    resolves: rhbz#1991945


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.5-1
changelog:
  - Rebase along stable branch to 1.26.5
    resolves: rhbz#1995327
  - Add nbdkit-vddk-plugin -D vddk.stats=1 flag
    resolves: rhbz#1995329
  - Add nbdkit-cow-filter cow-block-size parameter
    resolves: rhbz#1995332
  - Fix CVE-2021-3716 nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS
  - Update keyring


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-11
changelog:
  - tests: py: add dnat to port without defining destination address
  - evaluate: fix inet nat with no layer 3 info
  - include: missing sctp_chunk.h in Makefile.am
  - exthdr: Implement SCTP Chunk matching
  - scanner: sctp: Move to own scope
  - scanner: introduce start condition stack
  - json: Simplify non-tcpopt exthdr printing a bit


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-1
changelog:
  - new version 1.20.1
  - Resolves: #1964814 - CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy()
    when labels are followed by a pointer to a root domain name


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
changelog:
  - Added some linker hardening flags to pass annocheck
    Related: rhbz#2031802

    * Tue Dec 14 2021 Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
  - Added gating
    Related: rhbz#2031794


author: Michael Petlan <mpetlan@redhat.com> - 1.2.0-2
changelog:
  - Update to upstream 1.2.0 -- fix opencsd_tag
    Related: rhbz#2041578

    * Fri Jan 21 2022 Michael Petlan <mpetlan@redhat.com> - 1.2.0-1
  - Update to upstream 1.2.0
    Related: rhbz#2041578


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2023.5-1
changelog:
  - https://github.com/ostreedev/ostree/releases/tag/v2023.5
    backport: https://github.com/ostreedev/ostree/commit/7f70614a1ac1950ebde3df0e26cc9ab1d72b2f1f
    Resolves: rhbz#2221997


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Paul Howarth <paul@city-fan.org> - 7.17-1
changelog:
  - Update to 7.17
    - Work around antique openssl version in RHEL-7 by formatting dh parameters
      differently
    - Add t/13_weaken.t


author: Petr Pisar <ppisar@redhat.com> - 7.17-6
changelog:
  - Conditionalize POE support
  - Conditionalize Tk support
  - Conditionalize Glib support
  - Conditionalize Event support


author: Paul Howarth <paul@city-fan.org> - 2.13-1
changelog:
  - Update to 2.13
    - Bypass prototypes when testing for lvalue attribute
    - Fixed a class name in tests to avoid conflicting with a core module


author: Paul Howarth <paul@city-fan.org> - 1.6-1
changelog:
  - Update to 1.6
    - Fixed confusing Changes entry about Perl's licensing terms (CPAN RT#132843)
    - Added optional Changes testing (skipped unless AUTHOR_TESTING)
    - Reformatted Changes file as per CPAN::Changes::Spec
    - Added optional POD coverage testing (skipped unless AUTHOR_TESTING)
    - Added optional Perl::Critic testing (skipped unless AUTHOR_TESTING)
    - Made code Perl::Critic clean
    - Added optional POD testing (skipped unless AUTHOR_TESTING)
    - Included GitHub repository URLs in metadata now that source code has been
      uploaded to GitHub (as of version 1.5)
    - Included META.json file in addition to META.yml
    - Set minimum required ExtUtils::MakeMaker version to 6.64 to ensure that all
      parameters used are supported, to save jumping through hoops to support
      earlier versions (this should not be a problem since ExtUtils::MakeMaker
      6.64 is easily installed into Perl 5.8.1 and above, that being the whole
      point of the new choice of minimum supported Perl version)
    - Set minimum required Perl version to 5.8.1; this is in line with the
      minimum requirement of the "Perl Toolchain"
    - Corrected typo in a comment (CPAN RT#86336)
  - Use author-independent source URL
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely
  - Package Artistic, Copying and LICENCE licence files


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.318-1
changelog:
  - Update to 0.318
  - Add perl(File::Slurper) as a dependency
  - Use /usr/bin/perl instead of perl
  - Use %{make_install} instead of make pure_install
  - Use %{make_build} instead of make


author: Paul Howarth <paul@city-fan.org> - 2:1.52-1
changelog:
  - Update to 1.52
    - Added a $dt->is_between($dt1, $dt2) method (based on GH#97)
    - Simplify the calculation of leap seconds in XS (GH#91); this is a little
      more efficient for most use cases (anything with future or recent past
      datetimes)


author: Paul Howarth <paul@city-fan.org> - 0.8200-4
changelog:
  - Fix License: tag to reflect content of actual shipped files, not just what
    the LICENSE file says (#1600504, CPAN RT#125832)


author: Paul Howarth <paul@city-fan.org> - 1:1.77-1
changelog:
  - Update to 1.77
    - When the parsed string contained an invalid time zone offset (parsed with
      "%z") like "-9999", the error handling set in the parser's constructor was
      ignored and an exception was always thrown (GH#25)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1:1.78-1
changelog:
  - Update to 1.78
    - Fix tests for new failure caused by locale data changes in DateTime::Locale
      1.29 (GH#28)
    - Added a warning about using locale-specific patterns; some of these patterns
      can change quite a bit as the locale data is updated, so using them for
      parsing does not produce stable results across time - this is what caused
      the test failures that this release fixes


author: Michal Josef Spacek <mspacek@redhat.com> - 1:1.79-1
changelog:
  - Update to 1.79
    - Fix too-strict type checking for time zones: this module now uses the same
      check as DateTime itself, which allows for things that don't subclass
      DateTime::TimeZone as long as they provide the same API (GH#30) (rhbz#1964546)


author: Paul Howarth <paul@city-fan.org> - 0.11-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.3.4-1
changelog:
  - Update to 0.3.4
    - Now at https://github.com/shlomif/perl-file-find-object
    - tidyall
    - Add *~ files to MANIFEST.SKIP (GH#1)


author: Paul Howarth <paul@city-fan.org> - 0.3.5-1
changelog:
  - Update to 0.3.5
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.14-5
changelog:
  - Fix FTBFS due to false detection of strlcpy() and _getpty()
    https://github.com/toddr/IO-Tty/pull/24
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Skip winsize test on Solaris and QNX NTO (GH#22)
    - Make function tests more robust (GH#24)
    - Work around a header name collision on util.h; this is breaking on recent
      OSX (GH#26)


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Switch to GitHub for issue tracker
    - Switch to testsuite CI workflow
    - Tidy


author: Paul Howarth <paul@city-fan.org> - 2.112-1
changelog:
  - Update to 2.112
    - Added the change log from any prior source that could be found, and
      formatted the log to fit metacpan.org loose standards
    - Change use vars qw() to our $whatever instead
    - Hide IO::WrapTie subclasses from PAUSE
    - Rebuild Makefile.PL to contain all of the prerequisites
    - Convert README to README.md
    - Fix the documentation in the main module, IO::Stringy to better indicate
      where to get info and how to use the module
    - Fix the dist's META information to indicate the original author and license
    - Add a LICENSE file
    - Add AppVeyor CI testing
    - Add Travis CI testing
    - Update t/IO_InnerFile.t to use Test::More and a proper TEMP file
      (CPAN RT#103895)
  - Use author-independent source URL
  - Simplify find command using -delete
  - Add Provides: for perl-IO-Stringy
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.113-1
changelog:
  - Update to 2.113
    - Get rid of use of Common and TBone in all tests
    - Convert to Dist::Zilla for authoring
    - Cleaned up some of the docs (needs more)


author: Paul Howarth <paul@city-fan.org> - 20200505.0-1
changelog:
  - Update to 20200505.0
    - Fix syntax errors in POD examples (GH#125)
    - Switch Readonly testing requirement to a recommends (GH#127)
    - Fix full_result to always return $? (GH#129)
    - kill_kill: Immediately KILL the child process as documented for Win32 (GH#136)
    - Switch to GitHub actions for CI testing
    - Re-structure shipped files into eg/
    - Move author tests into xt/ and test them separately


author: Paul Howarth <paul@city-fan.org> - 2.18-1
changelog:
  - Update to 2.18
    - Update with newest data
    - Mojo 6.0 changed types() into mapping()
    - Mojo 7.94 adds experimental file_type()
    - Mojo 7.94 adds experimental content_type()


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Updated distribution metadata and packaging
    - Configuration phase now uses ExtUtils::HasCompiler


author: Paul Howarth <paul@city-fan.org> - 0.112-1
changelog:
  - Update to 0.112
    - Another test fix on Windows, possibly due to a behavior change in
      Cwd::getdcwd


author: Paul Howarth <paul@city-fan.org> - 0.118-1
changelog:
  - Update to 0.118
    - Skip symlink tests on Windows by actually testing symlinks, as Perl 5.33.5
      adds notional support but it's not possible without elevated privileges


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Make unread by :crlf on top of :utf8_strict reliable
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.47-1
changelog:
  - Update to 0.47
    - Change Specio constraint object's stringification overloading to return the
      type name rather than the default Perl object stringification, which gives
      you something like
      "Specio::Constraint::Parameterized=HASH(0x564d258efb48)"; anonymous are
      special cased to return something you can print
    - All types now overload the 'eq' comparison operator: Moose expects types to
      be comparable in this manner when doing role summation (GH#18)


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - %DB::sub is now populated correctly for sub names with wide characters or
      nulls (GH#9)
    - Better Perl 5.6 compatibility by lowering prereqs of core modules
    - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10)
    - Small internal changes to bring implementation in line with changes to
      Sub::Util
    - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls
      (CPAN RT#125158)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.130-1
changelog:
  - Update to 1.128
    - Allow 'use Test::Deep' while other modules use Test::Deep::NoTest (GH#76)
    - Added true/false optional imports (GH#41, GH#44)
    - Documentation fixes (GH#79)
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.016-1
changelog:
  - Update to 0.016
    - Add default descriptions to tests
    - Work on ancient Test::Builder code
  - Use author-independent source URL
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Re-packaging
  - Drop running of extra tests at package build time to avoid need for
    bootstrapping
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.027-1
changelog:
  - Update to 0.027
    - New :fail_on_warning feature, for more easily seeing where the surprising
      warning appeared during testing
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.029-1
changelog:
  - Update to 0.029
    - New :report_warnings feature, for printing all of the (unexpected) warning
      content when had_no_warnings() is called (GH#10)


author: Paul Howarth <paul@city-fan.org> - 0.030-1
changelog:
  - Update to 0.030
    - Fix tests that can fail when there is already an installed module named
      Foo::Bar::Baz (CPAN RT#132140)


author: Paul Howarth <paul@city-fan.org> - 1.01-1
changelog:
  - Update to 1.01
    - Implement Types::Serialiser::as_bool
    - Slight documentation tweaks
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Fix cstring for Perl 5.32 (GH#6, GH#7)
    - Remove unneeded module dependencies (GH#2)
    - Add compatibility with Perl 5.8 (GH#9)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.81-1
changelog:
  - Update to 0.81
    - Breaking Change: Set $YAML::XS::LoadBlessed default to false to make it
      more secure


author: Paul Howarth <paul@city-fan.org> - 1:0.82-1
changelog:
  - Update to 0.82
    - Updated libyaml sources to 0.2.4; changes affecting YAML::XS are:
      - Output '...' at the stream end after a block scalar with trailing empty
        lines
      - Accept '%YAML 1.2' directives (they are ignored and do not change
        behaviour though)


author: Paul Howarth <paul@city-fan.org> - 3.7.5-1
changelog:
  - Update to 3.75
    - Make build (more) reproducible
    - Removed "portable" from the warnings list, as 32-bit perls (as opposed to
      32-bit platforms) are practically extinct and it warns about a weird subset
      of operations, e.g. 64-bit hex() is not ok, 64-bit addition is fine, makes
      no sense; additionally, other than hex/oct etc. harassment, there is
      nothing in this category that otherwise could be useful
  - Specify all build dependencies
  - Drop ancient obsoletes/provides for removed tests sub-package
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Switch from Test::Requires to Test::Needs
    - Report on the installed versions of more optional modules


author: Mat Booth <mat.booth@redhat.com> - 0.0.7-29
changelog:
  - Unecessary restriction on plexus-util, with the patch it's actually still
    source compatible with older versions


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Petr Viktorin <pviktori@redhat.com> - 1.1-1
changelog:
  - Update to 1.1 to fix Python 3.8 compatibility in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1758446


author: Tomas Orsava <torsava@redhat.com> - 2.6.2-4
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Manually add Provides and Obsoletes for python39-pybind11-devel
  - Related: rhbz#1990421


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 0-55
changelog:
  - %pyproject_buildrequires: Generate BuildRequires for this package
    This package is already installed, but this way, the resulting SRPM explicitly BuildRequires it


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.0-1
changelog:
  - %pyproject_buildrequires: Add provisional -w flag for build backends without
    prepare_metadata_for_build_wheel hook
    When used, the wheel is built in %pyproject_buildrequires
    and information about runtime requires and extras is read from that wheel.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Charalampos Stratakis <cstratak@redhat.com> - 1:3.4.3-7
changelog:
  - Obsolete and provide the python-sphinx-locale package to fix the upgrade path
  Related: rhbz#1985219


author: Jerry James <loganjerry@gmail.com> - 0.5.0-1
changelog:
  - Version 0.5.0
  - Drop upstreamed -script patch
  - Do not even link to fonts; modify the CSS to point to system fonts
  - Remove all traces of html5shiv


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.16-1
changelog:
  - Update to 3.9.16
  - Security fixes for CVE-2022-42919 and CVE-2022-45061
  Resolves: rhbz#2138705, rhbz#2144072


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0-5
changelog:
  - Initial package for RHEL 9
  - Resolves: RHEL-12338
  - Fedora+EPEL contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.14-5
changelog:
  - Subpackages python2-greenlet, python2-greenlet-devel have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-2
changelog:
  - Resolves: RHEL-14292 Backport latest test fixes in python3-ipatests
  - Resolves: RHEL-15443 Server install: failure to install with externally signed CA because of timezone issue
  - Resolves: RHEL-15444 Minimum length parameter in pwpolicy cannot be removed with empty string
  - Resolves: RHEL-14842 Upstream xmlrpc tests are failing in RHEL9.4


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-5
changelog:
  - Resolves: RHEL-12589 ipa: Invalid CSRF protection
  - Resolves: RHEL-19748 ipa hbac-test did not report that it hit an arbitrary search limit
  - Resolves: RHEL-21059 'DogtagCertsConfigCheck' fails, displaying the error message 'Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca'
  - Resolves: RHEL-21804 ipa client 4.10.2 - Failed to obtain host TGT
  - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix
  - Resolves: RHEL-21810 ipa-client-install --automount-location does not work
  - Resolves: RHEL-21811 Handle change in behavior of pki-server ca-config-show in pki 11.5.0
  - Resolves: RHEL-21812 Backport latest test fixes in ipa
  - Resolves: RHEL-21813 krb5kdc fails to start when pkinit and otp auth type is enabled in ipa
  - Resolves: RHEL-21815 IPA 389ds plugins need to have better logging and tracing
  - Resolves: RHEL-21937 Make sure a default NetBIOS name is set if not passed in by ADTrust instance constructor


author: 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-6
changelog:
  - Resolves: RHEL-23627 IPA stops working if HTTP/... service principal was created before FreeIPA 4.4.0 and never modified
  - Resolves: RHEL-23625 sidgen plugin does not ignore staged users
  - Resolves: RHEL-23621 session cookie can't be read
  - Resolves: RHEL-22372 Gating-DL1 test failure in test_integration/test_dns_locations.py::TestDNSLocations::()::test_ipa_ca_records
  - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix
  - Resolves: RHEL-17996 Memory leak in IdM's KDC


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-7
changelog:
  - Resolves: RHEL-25260 tier-1-upstream-dns-locations failed on RHEL8.8 gating
  - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available
  - Resolves: RHEL-25815 Backport latest test fixes in python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-8
changelog:
  - Resolves: RHEL-12143 'ipa vault-add is failing with ipa: ERROR: an internal error has occurred in FIPS mode
  - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-9
changelog:
  - Resolves: RHEL-28258 vault fails on non-fips client if server is in FIPS mode
  - Resolves: RHEL-26154 ipa: freeipa: specially crafted HTTP requests potentially lead to DoS or data exposure


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-10
changelog:
  - Resolves: RHEL-23377 Enforce OTP for ldap bind (in some scenarios)
  - Resolves: RHEL-29745 Unable to re-add broken AD trust - NT_STATUS_INVALID_PARAMETER
  - Resolves: RHEL-30905 Backport latest test fixes in ipa


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-3
changelog:
  - Resolves: rhbz#2229712 Delete operation protection for admin user
  - Resolves: rhbz#2227831 Interrupt request processing in ipadb_fill_info3() if connection to 389ds is lost
  - Resolves: rhbz#2227784 libipa_otp_lasttoken plugin memory leak
  - Resolves: rhbz#2224570 Improved error messages are needed when attempting to add a non-existing idp to a user
  - Resolves: rhbz#2230251 Backport latest test fixes to python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.2-4
changelog:
  - Resolves: rhbz#2231847 RHEL 8.8 & 9.2 fails to create AD trust with STIG applied
  - Resolves: rhbz#2232056 Include latest test fixes in python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1
changelog:
  - Resolves: RHEL-39140 Rebase ipa to the latest 4.12 version for RHEL 9.5
  - Resolves: RHEL-34757 The change for preventing deletion of the admin user caused a regression in disable
  - Resolves: RHEL-30553 Depend on nfsv4-client-utils or nfs-utils
  - Resolves: RHEL-29762 IPA sidgen fails to create SID for manually set ID for a new range [rhel-9.5.0]
  - Resolves: RHEL-26261 Fix replica connection check for use with AD administrator
  - Resolves: RHEL-18062 ipa ca-show NAME --certificate-out=file creates empty file when NAME does not exist
  - Resolves: RHEL-12149 traceback in ipaserver/dcerpc.py
  - Resolves: RHEL-4810 [RFE] FreeIPA-to-FreeIPA migration
  - Resolves: RHEL-4807 [RFE] Support in IPA for HSM boxes


author: Julien Rische <jrische@redhat.com> - 4.12.0-4
changelog:
  - Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-9
changelog:
  - RHEL 9 patch for openssl missing configuration file
    https://bugzilla.redhat.com/show_bug.cgi?id=1977214#c13


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-11
changelog:
  - Fix: syslinux: failed to create ldlinux.sys
    resolves: rhbz#1990720, rhbz#1950627
  - Fix license files.
  - Move appliance to separate subpackage
    resolves: rhbz#1989514


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.3.4-2
changelog:
  - Apply PR6 by Igor Raits <ignatenkobrain@fedoraproject.org>: Support
    for building on EPEL8 + upstream tests invocation.
  - Remove unused BR on python3-tidy (we'd need pytidylib instead, which
    doesn't seem to be packaged).


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.4-3
changelog:
  - Update runtime and buildtime dependencies
  - Remove sqlalchemy, whoosh and xapian dependencies from RHEL9


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-5
changelog:
  - Make the python-wheel-wheel subpackage versioned (python3-wheel-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-6
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomas Hrnciar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3045, RHEL-3269


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.10.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        jonathanspw <jonathan@almalinux.org>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.0.7-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alan Pevec <alan.pevec@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David King <amigadave@amigadave.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        José Abílio Oliveira Matos <jamatos@fedoraproject.org>
        José Matos <jamatos@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Terje Røsten <terje.rosten@ntnu.no>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        yatin <ykarel@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 7.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.8.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Davide Cavalca <dcavalca@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Javier Pena <jpena@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.5.2-1
changelog:
  - Initial import
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.29.35-2
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <i.gnatenko.brain@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@gmail.com>
        Tomas Hrcka <thrcka@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.1-1
changelog:
  - Initial package
  - Fedora contributions by:
       Lumir Balhar <lbalhar@redhat.com>
       Miro Hrončok <miro@hroncok.cz>
       Tomas Hrnciar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Pavel Šimovec <psimovec@redhat.com>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 7.4.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.7.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Fabio Valentini <decathorpe@gmail.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-26
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - -gui: add mesa-dri-drivers soft dep for rhel8+ too
    Resolves: bz#1998959
  - Fix out-of-bound write in QOutlineMapper::converPath
    Resolves: bz#1996876


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-27
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - validate configure results (base, egl-x11)

    Resolves: bz#2014991


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Pavel Valena <pvalena@redhat.com> - 3.0.1-154
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix dependencies of gems with explicit source installed from a
    different source.
    Resolves: CVE-2020-36327
  - Pass ldflags to gem install via CONFIGURE_ARGS.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-160
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096347
  - OpenSSL test suite fixes due to disabled SHA1.
    Resolves: rbhz#2107696
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-160
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix File.utime test.


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-161
changelog:
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-12724
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-12724


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-162
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-35740
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-35741
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-35742
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-35743
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-35744
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-35746
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-35747


author: Pavel Valena <pvalena@redhat.com> - 3.10.1-7
changelog:
  - Re-add Requires: rubygem(rake), as it's needed for runtime.
    Resolves: rhbz#1982410
    Resolves: rhbz#1982419


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.14.0-5
changelog:
  - seabios-Disable-power-support.patch [bz#1951027]
  - Resolves: bz#1951027
    (SeaBios no longer needed for ppc64)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.14.0-7
changelog:
  - seabios-Drop-fedora-bits-they-are-not-tested-and-currently-f.patch [bz#2004169]
  - seabios-Disable-TPM-support.patch [bz#2004169]
  - Resolves: bz#2004169
    (seabios  implements and/or uses the deprecated SHA-1 algorithm by default)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.15.0-1
changelog:
  - Rebase to seabios to 1.15.0 [bz#2018393]
  - 0003-pci-let-firmware-reserve-IO-for-pcie-pci-bridge.patch [bz#2001732]
  - 0004-pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001732]
  - Resolves: bz#2018393
    ([rebase] update seabios to nov '21 release)
  - Resolves: bz#2001732
    ([virtual network][qemu-6.1.0-1] Fail to hotplug nic with rtl8139 driver)


author: Paweł Poławski <ppolawsk@redhat.com> - 1.16.0-1
changelog:
  - Rebase to upstream 1.16.0 release [bz#2066826]
  - Resolves: bz#2066826
    (rebase seabios to 1.16 release)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-2
changelog:
  - seabios-malloc-use-variable-for-ZoneHigh-size.patch [bz#2004662]
  - seabios-malloc-use-large-ZoneHigh-when-there-is-enough-memor.patch [bz#2004662]
  - Resolves: bz#2004662
    (RFE: "Unable to allocate resource at romfile_loader_allocate:87" when running very large VMs)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-3
changelog:
  - seabios-pci-refactor-the-pci_config_-functions.patch [bz#2086407]
  - seabios-reset-force-standard-PCI-configuration-access.patch [bz#2086407]
  - Resolves: bz#2086407
    (qemu reboot problem with seabios 1.16.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-4
changelog:
  - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2108555]
  - Resolves: bz#2108555
    ([rhel.9.1] Loading a kernel/initrd is sometimes very slow)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-1
changelog:
  - Rebase to 1.16.3 [RHEL-19239]
  - Removed vgabios-qxl.bin [RHEL-383]
  - Resolves: RHEL-19239
    (Rebase seabios to 1.16.3)
  - Resolves: RHEL-383
    (remove vgabios-qxl.bin from seavgabios in rhel9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-2
changelog:
  - seabios-add-hwerr_printf-function-for-threads.patch [RHEL-7110]
  - seabios-display-error-message-for-blocksizes-512.patch [RHEL-7110]
  - Resolves: RHEL-7110
    ([seabios] Can't boot from a disk with 4K sector size)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-9
changelog:
  - libsubid: creation and nsswitch support. Resolves: #1859252
  - Creation of subid and subid-devel subpackages
  - man: mention NSS in new[ug]idmap manpages
  - libsubid: move development header to shadow folder
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - useradd: fix SUB_UID_COUNT=0
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - man: clarify subid delegation
  - libsubid: make shadow_logfd not extern
  - login.defs: include HMAC_CRYPTO_ALGO key


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - useradd: modify check ID range for system users. Resolves: #2004911
  - Fix release sources
  - Add subid requirement for subid-devel


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Robert-André Mauchin <zebob.m@gmail.com> - 4.0.2-16
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: systemd maintenance team <systemd-maint@redhat.com> - 252-15
changelog:
  - ci: trigger `differential-shellcheck` workflow on push (#2100440)
  - ci: workflow for gathering metadata for source-git automation (#2100440)
  - ci: first part of the source-git automation - commit linter (#2100440)
  - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440)
  - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440)
  - Support /etc/system-update for OSTree systems (#2203133)
  - journal-def: fix type of signature to match the actual field in the Header structure (#2183546)
  - journal: use compound initialization for journal file Header structure (#2183546)
  - journald: fix log message (#2183546)
  - sd-journal: cache results of parsing environment variables (#2183546)
  - compress: introduce compression_supported() helper function (#2183546)
  - sd-journal: always use the compression algorithm specified in the header (#2183546)
  - sd-journal: allow to specify compression algorithm through env (#2183546)
  - test: add test case that journal file is created with the requested compression algorithm (#2183546)
  - rules: do not online CPU automatically on IBM platforms (#2143107)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-16
changelog:
  - ci: update permissions for source-git automation workflows (#2170883)
  - pstore: fixes for dmesg.txt reconstruction (#2170883)
  - pstore: explicitly set the base when converting record ID (#2170883)
  - pstore: avoid opening the dmesg.txt file if not requested (#2170883)
  - test: add a couple of tests for systemd-pstore (#2170883)
  - test: match all messages with the FILE field (#2170883)
  - test: build the SELinux test module on the host (#2170883)
  - test: make the stress test slightly less stressful on slower machines (#2170883)
  - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883)
  - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883)
  - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883)
  - core/transaction: do not log "(null)" (#2170883)
  - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883)
  - elf-util: discard PT_LOAD segment early based on the start address. (#2215412)
  - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412)
  - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959)
  - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959)
  - journal-vacuum: count size of all journal files (#2182632)
  - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632)
  - macro: introduce FOREACH_ARRAY() macro (#2182632)
  - journal-vacuum: rename function to match struct name (#2182632)
  - journal-vacuum: use CLEANUP_ARRAY (#2182632)
  - pam: add call to pam_umask (#2210145)
  - udev-builtin-net_id: align VF representor names with VF names (#2218886)
  - pam: add a call to pam_namespace (#2218184)
  - rules: online CPU automatically on IBM s390x platforms when configured (#2212612)
  - core/mount: escape invalid UTF8 char in dbus reply (#2208240)
  - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899)
  - udev-rules: fix nvme symlink creation on namespace changes (#2172509)
  - rules: add whitespace after comma before the line continuation (#2172509)
  - udev: restore compat symlink for nvme devices (#2172509)
  - rules: drop doubled space (#2172509)
  - manager: don't taint the host if cgroups v1 is used (#2193456)
  - core/service: when resetting PID also reset known flag (#2210237)
  - ci: drop systemd-stable from advanced-commit-linter config (#2170883)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-17
changelog:
  - Revert "core/service: when resetting PID also reset known flag" (#2225667
  - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-18
changelog:
  - doc: add downstream CONTRIBUTING document (#2170883)
  - doc: improve CONTRIBUTING document (#2170883)
  - doc: use link with prefilled Jira issue (#2170883)
  - docs: link downstream CONTRIBUTING in README (#2170883)
  - bpf: fix restrict_fs on s390x (#2230364)
  - udev/net_id: use naming scheme for RHEL-9.3 (#2231845)
  - core/timer: Always use inactive_exit_timestamp if it is set (#2211065)
  - timer: Use dual_timestamp_is_set() in one more place (#2211065)
  - loginctl: list-users: also show state (#2209912)
  - loginctl: list-sessions: minor modernization (#2209912)
  - loginctl: list-sessions: also show state (#2209912)
  - test: add test for state in loginctl list-{users,sessions} (#2209912)
  - test: add a missing session activation (#2209912)
  - test: extend test for loginctl list-* (#2209912)
  - loginctl: shorten variable name (#2209912)
  - loginctl: use bus_map_all_properties (#2209912)
  - loginctl: show session idle status in list-sessions (#2209912)
  - loginctl: some modernizations (#2209912)
  - loginctl: list-sessions: fix timestamp for idle hint (#2209912)
  - loginctl: list-users: use bus_map_all_properties (#2209912)
  - loginctl: also show idle hint in session-status (#2209912)
  - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226)
  - static-destruct: several cleanups (#2190226)
  - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226)
  - macro: support the case that the number of elements has const qualifier (#2190226)
  - shared/generator: apply similar config reordering of generated units (#2190226)
  - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226)
  - generator: teach generator_add_symlink() to instantiate specified unit (#2190226)
  - units: rework growfs units to be just a regular unit that is instantiated (#2190226)
  - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226)
  - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226)
  - test: add fstab file support for fstab-generator tests (#2190226)
  - test-fstab-generator: also check file contents (#2190226)
  - test-fstab-generator: add tests for mount options (#2190226)
  - fstab-generator: split out several functions from parse_fstab() (#2190226)
  - fstab-generator: call add_swap() earlier (#2190226)
  - fstab-generator: refuse to add swap earlier if disabled (#2190226)
  - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226)
  - fstab-generator: fix error code propagation in run_generator() (#2190226)
  - fstab-generator: support defining mount units through kernel command line (#2190226)
  - test: add test cases for defining mount and swap units from kernel cmdline (#2190226)
  - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226)
  - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226)
  - fstab-generator: use correct swap name var (#2190226)
  - fstab-generator: add more parameter name comments (#2190226)
  - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226)
  - fstab-util: add fstab_is_bind (#2190226)
  - fstab-generator: resolve bind mount source when in initrd (#2190226)
  - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226)
  - fstab-generator: fix target of /sysroot/usr (#2190226)
  - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226)
  - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226)
  - test-fstab-generator: extract core part as a function (#2190226)
  - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226)
  - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226)
  - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226)
  - core: use correct scope of looking up units (#2226980)
  - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521)
  - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521)
  - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521)
  - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521)
  - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521)
  - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521)
  - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521)
  - test: move TEST-23's units into a dedicated subfolder (#2213521)
  - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521)
  - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521)
  - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521)
  - test: abstract the common test parts into a utility script (#2213521)
  - test: add tests for JoinsNamespaceOf= (#2213521)
  - core/unit: drop doubled empty line (#2213521)
  - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521)
  - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521)
  - core/unit: update bidirectional dependency simultaneously (#2213521)
  - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260)
  - resolved: add some line-breaks/comments (#2161260)
  - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260)
  - blockdev-util: add simple wrapper around BLKSSZGET (#2170883)
  - loop-util: insist on setting the sector size correctly (#2170883)
  - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883)
  - loop-util: always tell kernel explicitly about loopback sector size (#2170883)
  - Revert "Treat EPERM as "not available" too" (#2178222)
  - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-19
changelog:
  - ci: Extend source-git-automation (RHEL-1086)
  - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026)
  - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070)
  - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070)
  - systemd-analyze: Add tab complete logic for plot (RHEL-5070)
  - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070)
  - ci: enable source-git automation to validate reviews and ci results (RHEL-1086)
  - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086)
  - ci: enable auto-merge GH Action (RHEL-1086)
  - ci: add missing permissions (RHEL-1086)
  - ci: `permissions: write-all` (RHEL-1086)
  - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086)
  - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-20
changelog:
  - udev/net: allow new link name as an altname before renaming happens (RHEL-5988)
  - sd-netlink: do not swap old name and alternative name (RHEL-5988)
  - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988)
  - udev: attempt device rename even if interface is up (RHEL-5988)
  - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988)
  - test-network: add a test for renaming device to current altname (RHEL-5988)
  - udev: align table (RHEL-5988)
  - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988)
  - sd-device: do not directly access entry in sd-device object (RHEL-5988)
  - udev: move device_rename() from device-private.c (RHEL-5988)
  - udev: restore syspath and properties on failure (RHEL-5988)
  - sd-device: introduce device_get_property_int() (RHEL-5988)
  - core/device: downgrade log level for ignored errors (RHEL-5988)
  - core/device: ignore failed uevents (RHEL-5988)
  - test: add tests for failure in renaming network interface (RHEL-5988)
  - test: modernize test-netlink.c (RHEL-5988)
  - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988)
  - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988)
  - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988)
  - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988)
  - udev/net: generate new network interface name only on add uevent (RHEL-5988)
  - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988)
  - udev/net: assign alternative names only on add uevent (RHEL-5988)
  - test: add tests for renaming network interface (RHEL-5988)
  - Backport ukify from upstream (RHEL-13199)
  - bootctl: make --json output normal json (RHEL-13199)
  - test: replace readfp() with read_file() (RHEL-13199)
  - stub/measure: document and measure .uname UKI section (RHEL-13199)
  - boot: measure .sbat section (RHEL-13199)
  - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199)
  - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199)
  - kernel-install: Add uki layout (RHEL-16354)
  - kernel-install: remove math slang from man page (RHEL-16354)
  - kernel-install: handle uki installs automatically (RHEL-16354)
  - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354)
  - kernel-install: Log location that uki is installed in (RHEL-16354)
  - bootctl: fix errno logging (RHEL-16354)
  - bootctl: add kernel-identity command (RHEL-16354)
  - bootctl: add kernel-inspect command (RHEL-16354)
  - bootctl: add kernel-inspect to --help text (RHEL-16354)
  - bootctl: drop full stop at end of --help texts (RHEL-16354)
  - bootctl: change section title for kernel image commands (RHEL-16354)
  - bootctl: remove space that should not be there (RHEL-16354)
  - bootctl: kernel-inspect: print os info (RHEL-16354)
  - bootctl-uki: several coding style fixlets (RHEL-16354)
  - tree-wide: unify how we pick OS pretty name to display (RHEL-16354)
  - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354)
  - bootctl: Add missing %m (RHEL-16354)
  - bootctl: tweak DOS header magic check (RHEL-16354)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-21
changelog:
  - meson: fix installation of ukify (RHEL-13199)
  - sd-id128: introduce id128_hash_ops_free (RHEL-5988)
  - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988)
  - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988)
  - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988)
  - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988)
  - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090)
  - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090)
  - manager: add one more assert() (RHEL-6090)
  - pid1: add new Type=notify-reload service type (RHEL-6090)
  - man: document Type=notify-reload (RHEL-6090)
  - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090)
  - networkd: implement Type=notify-reload protocol (RHEL-6090)
  - udevd: implement the full Type=notify-reload protocol (RHEL-6090)
  - logind: implement Type=notify-reload protocol properly (RHEL-6090)
  - notify: add --stopping + --reloading switches (RHEL-6090)
  - test: add Type=notify-reload testcase (RHEL-6090)
  - update TODO (RHEL-6090)
  - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-22
changelog:
  - Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436)
  - man: mention RHEL documentation in systemctl's man page (RHEL-19436)
  - resolved: actually check authenticated flag of SOA transaction (RHEL-6216)
  - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317)
  - man: environment value -> udev property (RHEL-1317)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-23
changelog:
  - logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757)
  - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757)
  - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757)
  - meson: Properly install 90-uki-copy.install (RHEL-16354)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-24
changelog:
  - ci: use source-git-automation composite Action (RHEL-1086)
  - ci: increase the cron interval to 45 minutes (RHEL-1086)
  - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086)
  - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427)
  - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443)
  - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443)
  - udev: add new builtin net_driver (RHEL-22443)
  - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-27
changelog:
  - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086)
  - test: use the default nsec3-iterations value (RHEL-1086)
  - test: explicitly set nsec3-iterations to 0 (RHEL-1086)
  - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483)
  - ci: deploy systemd man to GitHub Pages (RHEL-1086)
  - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-7026)
  - man: reorder the list of supported naming schemes (RHEL-7026)
  - tree-wide: fix return value handling of base64mem() (RHEL-16182)
  - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182)
  - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182)
  - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182)
  - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182)
  - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182)
  - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182)
  - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182)
  - man: document the new crypttab measurement options (RHEL-16182)
  - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182)
  - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182)
  - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182)
  - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182)
  - generators: optionally, measure file systems at boot (RHEL-16182)
  - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182)
  - man: document new machine-id/fs measurement options (RHEL-16182)
  - test: add simple integration test for checking PCR extension works as it should (RHEL-16182)
  - update TODO (RHEL-16182)
  - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182)
  - boot: Simplify object erasure (RHEL-16182)
  - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182)
  - dlfcn: add new safe_dclose() helper (RHEL-16182)
  - tpm2: rename tpm2 alg id<->string functions (RHEL-16182)
  - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182)
  - tpm2: use ref counter for Tpm2Context (RHEL-16182)
  - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182)
  - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182)
  - tpm2: simplify tpm2_seal() blob creation (RHEL-16182)
  - tpm2: add salt to pin (RHEL-16182)
  - basic/macro: add macro to iterate variadic args (RHEL-16182)
  - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182)
  - basic/bitfield: add bitfield operations (RHEL-16182)
  - test/test-bitfield: add tests for bitfield macros (RHEL-16182)
  - tpm2: add tpm2_get_policy_digest() (RHEL-16182)
  - tpm2: add TPM2_PCR_VALID() (RHEL-16182)
  - tpm2: add/rename functions to manage pcr selections (RHEL-16182)
  - test/test-tpm2: add tests for pcr selection functions (RHEL-16182)
  - tpm2: add tpm2_pcr_read() (RHEL-16182)
  - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182)
  - tpm2: add tpm2_is_encryption_session() (RHEL-16182)
  - tpm2: move policy building out of policy session creation (RHEL-16182)
  - tpm2: add support for a trusted SRK (RHEL-16182)
  - tpm2: fix nits from PR #26185 (RHEL-16182)
  - tpm2: replace magic number (RHEL-16182)
  - tpm2: add tpm2_digest_*() functions (RHEL-16182)
  - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182)
  - tpm2: add tpm2_set_auth() (RHEL-16182)
  - tpm2: add tpm2_get_name() (RHEL-16182)
  - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182)
  - tpm2: add tpm2_policy_pcr() (RHEL-16182)
  - tpm2: add tpm2_policy_auth_value() (RHEL-16182)
  - tpm2: add tpm2_policy_authorize() (RHEL-16182)
  - tpm2: use tpm2_policy_authorize() (RHEL-16182)
  - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182)
  - tpm: remove external calls to dlopen_tpm2() (RHEL-16182)
  - tpm2: remove all extern tpm2-tss symbols (RHEL-16182)
  - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182)
  - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182)
  - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182)
  - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182)
  - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182)
  - tpm2: add tpm2_read_public() (RHEL-16182)
  - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182)
  - tpm2: add tpm2_load() (RHEL-16182)
  - tpm2: add tpm2_load_external() (RHEL-16182)
  - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182)
  - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182)
  - tpm2: add tpm2_create() (RHEL-16182)
  - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182)
  - basic/alloc-util: add greedy_realloc_append() (RHEL-16182)
  - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182)
  - tpm2: cache TPM algorithms (RHEL-16182)
  - tpm2: add tpm2_persist_handle() (RHEL-16182)
  - tpm2: add tpm2_get_or_create_srk() (RHEL-16182)
  - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182)
  - tpm2: remove tpm2_make_primary() (RHEL-16182)
  - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182)
  - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182)
  - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182)
  - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182)
  - added more test cases (RHEL-16182)
  - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182)
  - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182)
  - cryptenroll: fix an assertion with weak passwords (RHEL-16182)
  - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182)
  - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182)
  - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182)
  - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182)
  - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182)
  - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182)
  - tpm2: move declared functions in header lower down (RHEL-16182)
  - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182)
  - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182)
  - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182)
  - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182)
  - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182)
  - openssl: add openssl_pkey_from_pem() (RHEL-16182)
  - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182)
  - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182)
  - test: add DEFINE_HEX_PTR() helper function (RHEL-16182)
  - openssl: add test-openssl (RHEL-16182)
  - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182)
  - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182)
  - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182)
  - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182)
  - tpm2: change *alg_to_* functions to use switch() (RHEL-16182)
  - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182)
  - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182)
  - tpm2: in validator functions, return false instead of assert failure (RHEL-16182)
  - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182)
  - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182)
  - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182)
  - tpm2: simplify call to asprintf() (RHEL-16182)
  - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182)
  - tpm2: use strempty() (RHEL-16182)
  - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182)
  - tpm2: remove ret_ prefix from input/output params (RHEL-16182)
  - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182)
  - openssl: use new(char, size) instead of malloc(size) (RHEL-16182)
  - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182)
  - tpm2: use switch() instead of if-else (RHEL-16182)
  - tpm2: make logging level consistent at debug for some functions (RHEL-16182)
  - tpm2: remove unnecessary void* cast (RHEL-16182)
  - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182)
  - tpm2: wrap (7) in UINT32_C() (RHEL-16182)
  - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182)
  - openssl: add log_openssl_errors() (RHEL-16182)
  - openssl: add openssl_digest_size() (RHEL-16182)
  - openssl: add openssl_digest_many() (RHEL-16182)
  - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182)
  - openssl: add openssl_hmac_many() (RHEL-16182)
  - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182)
  - openssl: add kdf_kb_hmac_derive() (RHEL-16182)
  - openssl: add openssl_cipher_many() (RHEL-16182)
  - openssl: add ecc_edch() (RHEL-16182)
  - openssl: add kdf_ss_derive() (RHEL-16182)
  - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182)
  - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182)
  - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182)
  - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182)
  - tpm2: fix build failure without openssl (RHEL-16182)
  - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182)
  - tpm2: downgrade most log functions from error to debug (RHEL-16182)
  - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182)
  - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182)
  - tpm2: update tpm2 test for supported commands (RHEL-16182)
  - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182)
  - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182)
  - tpm2: cache TPM's supported ECC curves (RHEL-16182)
  - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182)
  - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182)
  - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182)
  - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182)
  - tpm2: do not call Esys_TR_Close() (RHEL-16182)
  - tpm2: don't use GetCapability() to check transient handles (RHEL-16182)
  - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182)
  - tpm2: add tpm2_get_pin_auth() (RHEL-16182)
  - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182)
  - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182)
  - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182)
  - cryptenroll: drop deadcode (RHEL-16182)
  - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182)
  - tpm2: add test to verify srk templates (RHEL-16182)
  - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182)
  - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182)
  - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182)
  - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182)
  - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182)
  - openssl-util: avoid freeing invalid pointer (RHEL-16182)
  - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182)
  - creds-util: do not try TPM2 if there is not support (RHEL-16182)
  - creds-util: merge the TPM2 detection for initrd (RHEL-16182)
  - cryptenroll: fix a memory leak (RHEL-16182)
  - sd-journal: introduce sd_journal_step_one() (RHEL-11591)
  - test: modernize test-journal-flush (RHEL-11591)
  - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591)
  - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591)
  - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-28
changelog:
  - random-seed: shorten a bit may_credit() (RHEL-16952)
  - random-seed: make one more use of random_write_entropy() (RHEL-16952)
  - random-seed: use getopt() (RHEL-16952)
  - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952)
  - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952)
  - random-seed: split out run() (RHEL-16952)
  - random_seed: minor improvement in run() (RHEL-16952)
  - random-seed: downgrade some messages (RHEL-16952)
  - random-seed: clarify one comment (RHEL-16952)
  - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952)
  - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952)
  - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952)
  - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952)
  - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952)
  - random-seed: handle post-merge review nits (RHEL-16952)
  - boot: do not truncate random seed file (RHEL-16952)
  - bootctl: install system token on virtualized systems (RHEL-16952)
  - boot: remove random-seed-mode (RHEL-16952)
  - stub: handle random seed like sd-boot does (RHEL-16952)
  - efi: add efi_guid_equal() helper (RHEL-16952)
  - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952)
  - boot: Detect hypervisors using SMBIOS info (RHEL-16952)
  - boot: Skip soft-brick warning when in a VM (RHEL-16952)
  - boot: Replace UINTN with size_t (RHEL-16952)
  - boot: Use unsigned for beep counting (RHEL-16952)
  - boot: Use unicode literals (RHEL-16952)
  - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952)
  - meson: use 0|1 for SD_BOOT (RHEL-16952)
  - boot: Add printf functions (RHEL-16952)
  - boot: Use printf for error logging (RHEL-16952)
  - boot: Introduce log_wait (RHEL-16952)
  - boot: Add log_trace debugging helper (RHEL-16952)
  - tree-wide: Use __func__ in asserts (RHEL-16952)
  - boot: Drop use of xpool_print/SPrint (RHEL-16952)
  - boot: Drop use of Print (RHEL-16952)
  - boot: Rework GUID handling (RHEL-16952)
  - efi-string: Fix strchr() null byte handling (RHEL-16952)
  - efi-string: Add startswith8() (RHEL-16952)
  - efi-string: Add efi_memchr() (RHEL-16952)
  - vmm: Add more const (RHEL-16952)
  - vmm: Add smbios_find_oem_string() (RHEL-16952)
  - stub: Read extra kernel command line items from SMBIOS (RHEL-16952)
  - vmm: Modernize get_smbios_table() (RHEL-16952)
  - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952)
  - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952)
  - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952)
  - ukify: use empty stub for addons (RHEL-16952)
  - stub: allow loading and verifying cmdline addons (RHEL-16952)
  - TODO: remove fixed item (RHEL-16952)
  - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-30
changelog:
  - resolved: limit the number of signature validations in a transaction (RHEL-26643)
  - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643)
  - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133)
  - units: change assert to condition to skip running in initrd/os (RHEL-16182)
  - ci: add configuration for regression sniffer GA (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-31
changelog:
  - bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952)
  - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952)
  - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952)
  - sha256: add helper than hashes a buffer *and* its size (RHEL-16952)
  - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952)
  - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952)
  - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952)
  - bootctl: split out setting of system token into function of its own (RHEL-16952)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-33
changelog:
  - execute: Pass AT_FDCWD instead of -1 (RHEL-31783)
  - ci(src-git): update list of supported products (RHEL-30372)
  - coredump: by default process and store core files up to 1GiB (RHEL-15501)
  - coredump: keep core files for two weeks (RHEL-15501)
  - ukify: make the test happy with the latest OpenSSL (RHEL-30372)
  - test_ukify: use raw string for the regex (RHEL-30372)
  - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430)
  - test: add a couple of tests for systemd-coredump (RHEL-29430)
  - test: don't expand the subshell expression prematurely (RHEL-29430)
  - coredump filter: fix stack overflow with =all (RHEL-29430)
  - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430)
  - test: add coverage for CoredumpFilter=all (RHEL-29430)
  - test: rotate journal before storing coredumps (RHEL-29430)
  - test: sync with the fake binary before killing it (RHEL-29430)
  - test: check coredump handling in containers & namespaces (RHEL-29430)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.7b-1
changelog:
  - New upstream release 3.2.7b
  - Add patch fixing CVE-2019-19746 (rhbz#1787040)
  - Add patch fixing CVE-2019-19797 (rhbz#1786726)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-7
changelog:
  - Fixed CVE-2020-21681 (#1998350)
  - Fixed CVE-2020-21683 (#1998594)
  - Fixed CVE-2020-21680 (#1998306)
  - Fixed CVE-2020-21684 (#2000747)
  - Fixed CVE-2020-21678 (#2000741)
  - Fixed CVE-2020-21676 (#2000751)
  - Fixed CVE-2020-21682 (#2000738)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-8
changelog:
  - Fixed CVE-2020-21529 (#2005518)
  - Fixed CVE-2020-21532 (#2006007)
  - Fixed CVE-2020-21531 (#2006002)


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 6.5.1-2
changelog:
  - Pulled support for el6
  - Pulled support for sysvinit
  - aarch64 builds now with jemalloc again on el7


author: Luboš Uhliarik <luhliari@redhat.com> - 6.5.2-1
changelog:
  - new version 6.5.2
  - Resolves: #1984185 - Rebase varnish to 6.5.2
  - Resolves: #1982858 - CVE-2021-36740 varnish: HTTP/2 request smuggling attack
    via a large Content-Length header for a POST request


