# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.3.4-3
changelog:
  - Bump version to 2.3.4-3
  - Resolves: rhbz#2189954 - RFE Improve reponse time to filters containing 'nsrole'
  - Resolves: rhbz#2189946 - RFE support of slapi_memberof for plugins/core server
  - Resolves: rhbz#1974242 - Paged search impacts performance


author: Mark Reynolds <mreynolds@redhat.com> - 2.3.6-2
changelog:
  - Bump version to 2.3.6-2
  - Resolves: rhbz#2225532 - 389-ds-base FTBFS with rust-1.71.0
  - Resolves: rhbz#2218209 - useradd: invalid user ID '389:389': installing 389-ds-base in container fails to create the dirsrv user
  - Resolves: rhbz#2207691 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2179278 - dirsrv failed to start after reboot because "dirsrv" did not have access on /run/dirsrv


author: Simon Pichugin <spichugi@redhat.com> - 2.3.6-3
changelog:
  - Bump version to 2.3.6-3
  - Resolves: rhbz#2236163 - Regression: replication can't be enabled for consumer or hub role


author: James Chapman <jachapma@redhat.com> - 2.4.4-1
changelog:
  - Bump version to 2.4.4-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base-2.4 in RHEL 9.4
  - Resolves: RHEL-16830 - ns-slapd crash in slapi_attr_basetype


author: James Chapman <jachapma@redhat.com> - 2.4.5-1
changelog:
  - Bump version to 2.4.5-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: James Chapman <jachapma@redhat.com> - 2.4.5-2
changelog:
  - Bump version to 2.4.5-2
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: Simon Pichugin <spichugi@redhat.com> - 2.4.5-4
changelog:
  - Bump version to 2.4.5-4
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: Viktor Ashirov <vashirov@redhat.com> - 2.4.5-6
changelog:
  - Bump version to 2.4.5-6
  - Resolves: RHEL-30588 - [RFE] allows plugins to log multi-factor authentication notification


author: James Chapman <jachapma@redhat.com> - 2.5.1-1
changelog:
  - Bump version to 2.5.1-1
  - Resolves: RHEL-31777 - Rebase 389-ds-base.2.5.1 in RHEL 9.5
  - Resolves: RHEL-33348 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requ


author: James Chapman <jachapma@redhat.com> - 2.5.1-2
changelog:
  - Bump version to 2.5.1-2
  - Resolves: RHEL-44324 - unauthenticated user can trigger a DoS by sending a specific extended search request
  - Resolves: RHEL-40946 - Malformed userPassword hash may cause Denial of Service
  - Resolves: RHEL-33087 - dsconf schema does not show inChain matching rule
  - Resolves: RHEL-28177 - Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-25070 - nsslapd-haproxy-trusted-ip is not in schema


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Ján Václav <jvaclav@redhat.com> - 1.45.9-1
changelog:
  - Update to 1.45.9 (development)
  - Add support for PRP/HSR interface (RHEL-5852)
  - Drop support for the 'slaves-order' option in NetworkManager.conf (RHEL-19437)
  - Return error when setting invalid IP addresses or properties via D-Bus (RHEL-19315)
  - Fix extra route being created besides ECMP route (RHEL-1682)


author: Stanislas FAYE <sfaye@redhat.com> - 1.45.10-1
changelog:
  - Update to 1.45.10 (development)
  - Deprecate and Replace connection.master in libnm-core and libnm (RHEL-17619)


author: Stanislas FAYE <sfaye@redhat.com> - 1.45.90-1
changelog:
  - Update to 1.45.90 release (release candidate)
  - Deprecate and Replace connection.slave-type in libnm-core and libnm (RHEL-17620)
  - [RFE] Support assigning IPv4 static route to interface without IPv4 address (RHEL-5098)


author: Íñigo Huguet <ihuguet@redhat.com> - 1.45.91-1
changelog:
  - Update to 1.45.91 release (release candidate)
  - Support changing the DSCP header field for DHCP packets, and set the default to CS0 (RHEL-16040)
  - Deprecate connection.autoconnect-slaves in favour of autoconnect-ports (RHEL-17621)
  - Don't reset bridge's PVID in reapply if it didn't change (RHEL-21576)


author: Stanislas FAYE <sfaye@redhat.com>
changelog:
  - Update to 1.46.0 release
  - Fix DHCPv4 lease can't be renewed after it expires (RHEL-24127)
  - Support the MACsec offload mode (RHEL-24337)
  - Support creating generic devices via external "device-handler" dispatcher (RHEL-1567)
  - Support changing the eswitch mode (RHEL-1441)


author: Gris Ge <fge@redhat.com> - 1.47.3-1
changelog:
  - Upgrade to 1.47.3 release (development)
  - Support rollback on global DNS (RHEL-23446)
  - Support VLAN over OVS interface which holds the same name as OVS bridge (RHEL-26753)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.47.4-1
changelog:
  - Fix LLDP support for interfaces attached to OVS bridges. (RHEL-1418)
  - Fix NMCI crashes on ovs_mtu and bond tests. (RHEL-30348)


author: Beniamino Galvani <bgalvani@redhat.com> 1:1.48.2-1
changelog:
  - Update to 1.48.2 release
  - Save connection timestamps when shutting down (RHEL-35539)
  - Fix regression with OpenVPN dynamic challenge (RHEL-43720)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Pete Walter <pwalter@fedoraproject.org> - 2.0.14-1
changelog:
  - Update to 2.0.14
  - Rebase multilib.patch
  - Don't use globs in the form of libFOO.so.* for listing files


author: Neal Gompa <ngompa13@gmail.com> - 2.0.14-6
changelog:
  - Switch to CMake to build SDL2
  - Build JACK support unconditionally since PipeWire-JACK exists in RHEL 9


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6-1 [bz#2083464]
  - Adding restart_if implementation for RHEL [bz#2081944]
  - Resolves: bz#2083464
    ([Azure][RHEL-9]Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2081944
    ([Azure][WALA][9.0] WALA provisions VM failed because of no "ifdown")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2098233]
  - Resolves: bz#2098233
    ([Azure][WALA][RHEL-9] [9.1] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2114830]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2093965]
  - Resolves: bz#2114830
    ([Azure][WALA][RHEL-9.1] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2093965
    ([Azure][WALA][RHEL-9] The description of "Logs.Collect" is incorrect)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-7
changelog:
  - wla-redhat-Azure-CVM-specific-udev-rules.patch [bz#2162668]
  - Resolves: bz#2162668
    (Add support for importing remotely sealed TPM2 objects)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-8
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2165042]
  - Resolves: bz#2165042
    ([9.0.z] /dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-9
changelog:
  - wla-redhat-Adjust-tpm2_createprimary-key-attributes-to-m.patch [bz#2167322]
  - Resolves: bz#2167322
    (Adjust TPM primary key creation parameters to match Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.5-1
changelog:
  - Add option for installing RedHat kernel (ozobal)
    Related: rhbz#2164819
    Resolves: rhbz#2214266
  - Add TUI for installing non-standard kernels (ozobal)
    Resolves: rhbz#2214266
    Resolves: rhbz#2164819
  - Add GUI option for installing 64k ARM kernel (ozobal)
    Resolves: rhbz#2214266
    Resolves: rhbz#2164819
  - Add match_available_packages to dnf_manager (ozobal)
    Related: rhbz#2214266
    Related: rhbz#2164819


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.6-1
changelog:
  - Remove unused variable in TUI software selection (ozobal)
    Related: rhbz#2214266
    Related: rhbz#2164819
  - Fix aarch64 architecture detection (jstodola)
    Resolves: rhbz#2164819


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.7-1
changelog:
  - Allow showing passphrase when unlocking LUKS device (jstodola)
    Resolves: rhbz#2013190
  - Be more indulgent when reclaiming disk space (jstodola)
    Resolves: rhbz#2187371
  - Do not print error on inst.ks=cdrom|hd (jkonecny)
    Resolves: rhbz#2077045


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.8-1
changelog:
  - iscsi: Allow changing iSCSI initiator name once set (vtrefny)
    Resolves: rhbz#2223977
  - Missing translation for button labels in Beta dialog
    Resolves: rhbz#2225450


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.9-1
changelog:
  - timezone: for kickstart allow also timezones not offered by GUI (rvykydal)
    Resolves: jira#RHEL-13150
  - Rename Organization to Organization ID on subscription screen (mkolman)
    Resolves: jira#RHEL-11167


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.2-1
changelog:
  - tests: Add a test case for the NVMe module (vtrefny)
    Resolves: RHEL-11543
    Resolves: RHEL-11544
  - Add a simple NVMe module for NVMe Fabrics support (vtrefny)
    Resolves: RHEL-11543
    Resolves: RHEL-11544
  - network: ignore BOOTIF connections when creating device configurations
    (rvykydal)
    Resolves: RHEL-4766
  - network: ignore BOOTIF connections when looking for initramfs bond ports
    (rvykydal)
    Resolves: RHEL-4766


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.3-1
changelog:
  - Fix missing emit of zfcp kickstart statements (maier)
    Related: RHEL-11384
  - DeviceTreeViewer: Add path-id attribute to zfcp-attached SCSI disks (maier)
    Related: RHEL-11384
  - Fix missing WWID values for multipath devices in advanced storage UI
    (#2046654) (maier)
    Resolves: RHEL-11384
  - rescue: Don't allow to mount systems without a root device (vponcova)
    Resolves: RHEL-14696
  - Do not crash on default None values of ostreecontainer command (rvykydal)
    Related: RHEL-2250
  - Fix wrong dracut timeout message (jkonecny)
    Resolves: RHEL-5638
  - Move rpm-ostree deps from Lorax to Anaconda (#2125655) (jkonecny)
    Related: RHEL-2250
  - Implement needs_network for rpm_ostree_container (#2125655) (jkonecny)
    Related: RHEL-2250
  - Add tests for RPM Ostree payload with source from container (#2125655)
    (rvykydal)
    Related: RHEL-2250
  - Enable RPM OSTree from container source in payload (#2125655) (rvykydal)
    Resolves: RHEL-2250
  - Add RPM OSTree source from container (#2125655) (rvykydal)
    Related: RHEL-2250


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.5-1
changelog:
  - bootupd: Use --write-uuid (walters)
    Related: RHEL-17205
  - bootloader: Detect bootupd and skip regular install (vslavik)
    Related: RHEL-17205
  - ostree: Use bootupd if installed by payload (vslavik)
    Resolves: RHEL-17205
  - bootloader: Create an installation task for collecting kernel arguments
    (vponcova)
    Related: RHEL-17205
  - bootloader: Add the collect_arguments method (vponcova)
    Related: RHEL-17205
  - bootloader: Remove the install_boot_loader function (vponcova)
    Related: RHEL-17205
  - Apply the bootloader options before the installation (vponcova)
    Related: RHEL-17205


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.6-1
changelog:
  - Disable bug reporting to Bugzilla from anaconda (kkoukiou)
    Resolves: RHEL-24419
  - Fixed file-write operation to a public directory (ataf)
    Resolves: RHEL-23345


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.4.7-1
changelog:
  - Lower log file permission in /tmp (jkonecny)
    Resolves: RHEL-23345
  - Add utility function to set file mode (jkonecny)
    Related: RHEL-23345


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.1-1
changelog:
  - anaconda-diskroot: wait before dying on media check fail (awilliam)
    Resolves: RHEL-4790
  - Add ping tool to Dracut (jkonecny)
    Resolves: RHEL-5719
  - gui:Fix index error for _remove_treeinfo_repositories() (liuwenyu.0311)
    Resolves: RHEL-29561


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.3-1
changelog:
  - Fix Source0 in spec to point to upstream source URL (kkoukiou)
  - Do not try to load sha256 module in intramfs (rvykydal)
    Resolves: RHEL-4747
  - Do not try to load the floppy kernel module (jstodola)
    Resolves: RHEL-4747
  - anaconda-modprobe: don't try and load cramfs (awilliam)
    Resolves: RHEL-4747


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.5-1
changelog:
  - Update translations from Weblate for rhel-9
  - Do not rewrite logs in rescue mode (jstodola)
    Resolves: RHEL-4794
  - Write a warning rescue selinux (akankovs)
    Resolves: RHEL-14005
  - Fix kickstart --dhcpclass option application (rvykydal)
    Resolves: RHEL-30406


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.6-1
changelog:
  - Update translations from Weblate for rhel-9
  - Change location of rescue mode flag file (jstodola)
    Resolves: RHEL-4794


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.2.0-6
changelog:
  - Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be
    empty - no content was marked for inclusion!)
  - Remove scope from dependencies in pom.xml files (fixes missing
    dependencies, dependencies marked with scope provided are ignored by
    the rpm dependency generator)
  - Drop some more commands: shell, exportreport, mbr (uses parts that
    are not packaged)
  - Resolves: rhbz#2033709


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-61
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-65
changelog:
  - Resolves: rhbz#2121828 Fix the gating tests by using only local test
    Upstream testsuite will not work as this package code is very old


author: Nils Philippsen <nils@tiptoe.de> - 0.1.72-2
changelog:
  - BR: librsvg2-tools for rsvg-convert
  - mark license files as %license
  - use %apiver macro consistently
  - don't ship .gitignore file


author: Siteshwar Vashisht <svashisht@redhat.com> - 5.1.8-9
changelog:
  - Fix a performance regression while using large number of environment variables
    Resolves: RHEL-20020


author: Jerome Marchand <jmarchan@redhat.com> - 0.26.0-3
changelog:
  - Rebuild with LLVM 16 (rhbz#2050112)
  - Fix compactsnoop (rhbz#2042236)
  - Fix killsnoop documentation (rhbz#2075500)
  - Fix funcslower (rhbz#2075415)
  - Fix deadlock memory usage issue (rhbz#2050112)
  - Fix nfsslower (rhbz#2180934)
  - Use upstream fix for nfsslower unititialized struct issue


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-1
changelog:
  - Rebase to v0.28.0 (RHEL-9976)
  - Rebuild with LLVM 17 (RHEL-10591)
  - Fix bpf-biosnoop out of bound access (RHEL-8664)
  - Fix kvmexit missing VM exit reasons and statistics (RHEL-8702)
  - Fix multi-word array type handling (RHEL-8674)
  - Fix tcpstates -Y (RHEL-8490)
  - Fix bio tools (RHEL-8553)


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-5
changelog:
  - Fix libbpf bio tools (RHEL-19368)
  - Add S390x support to libbpf-tools (RHEL-16325)
  - Power enhancements(RHEL-11477)


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-3
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-5
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-6
changelog:
  - Bound the amount of work performed for delegations (CVE-2022-2795)
  - Add /usr/lib64/named to bind-chroot (#2129466)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-9
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Roland Grunberg <rgrunber@redhat.com> - 3.2.9-5
changelog:
  - Set maven-javadoc-plugin source to 1.8 for Java 11 build.
  - Ignore 5 test failures from upstream when run on Java 9 or above.


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Jan Friesse <jfriesse@redhat.com> - 3.1.4-1
changelog:
  - Related: rhbz#1948974
  - Resolves: rhbz#1967485

  - New upstream release (rhbz#1948974)
  - stats: fix crash when iterating over deleted keys (rhbz#1967485)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Nicola Sella <nsella@redhat.com> - 0.16.1
changelog:
  - Update to 0.16.1
  - Add the section number to the manual pages
  - Parse xml snippet in smaller parts (RhBug:1859689)
  - Add module metadata support to createrepo_c (RhBug:1795936)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-1
changelog:
  - 1.28.7, urftopdf nor pdftoopvp aren't compiled anymore
  - 1904405 - HP M281fdw: čžš characters printed as squares with "driverless" driver


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-13
changelog:
  - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2125357


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-14
changelog:
  - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133999
  - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133989
  - Resolves: bz #2133989, #2133999


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-15
changelog:
  - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2141860
  - Add 0068-libmultipath-cleanup-remove_feature.patch
  - Add 0069-libmultipath-cleanup-add_feature.patch
  - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2033080
  - Resolves: bz #2033080, #2141860


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-17
changelog:
  - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2145225


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-21
changelog:
  - Add 0085-multipathd-make-pr-registration-consistent.patch
  - Add 0086-libmultipath-make-prflag-an-enum.patch
  - Add 0087-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0088-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164869


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-22
changelog:
  - Add 0089-RH-Add-mpathcleanup.patch
    * Fixes RHEL-782
  - Add 0090-RH-make-listing-return-an-error-if-the-config-file-i.patch
  - Install mpathcleanup
    * Fixes RHEL-781
  - Resolves: #781, #782


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-23
changelog:
  - Add 0091-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Fixes RHEL-6678 (Add support in multipathd for NVMe to listen for FPIN-Li
      events and mark effected paths as marginal)
  - Add 0092-multipath-tools-add-HPE-Alletra-9000-NVMe-to-hardwar.patch
    * Fixes RHEL-1830 (Changes to Arcus NVMeoFC multipath.conf settings for RHEL
      9.x to be included in kernel by default)
  - Resolves: RHEL-6678
  - Resolves: RHEL-1830


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-24
changelog:
  - Add 0093-RH-multipath-add-mpathcleanup-man-page.patch
    * Fixes RHEL-1266 ("There is no man page for mpathcleanup")
  - Resolves: RHEL-1266


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-25
changelog:
  - Add 0094-libmultipath-Add-max_retries-config-option.patch
    * Fixes RHEL-1729 ("Allow multipathd to set the max_retries of the
      scsi_device for paths")
  - Add 0095-libmutipath-Retain-device-size-if-sysfs_get_size-fai.patch
  - Add 0096-multipathd-check-and-update-all-paths-when-in-cli_re.patch
  - Add 0097-multipathd-move-post-reloading-commands-into-resize_.patch
  - Add 0098-multipathd-move-resize_map-to-multipathd-main.c.patch
  - Add 0099-multipathd-Add-auto_resize-config-option.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986
  - Resolves: RHEL-1729


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Omair Majid <omajid@redhat.com> - 8.0.100~rc.1-0.2
changelog:
  - Add patches to fix mono and arm64 issues
  - Include libmono-*.a files in the SDK
  - Fix CI configuration
  - Related: RHEL-4074


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-3
changelog:
  - We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
    A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
    digests used for the signature are not treated as fatal errors.
  - Resolves: RHEL-28344


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.15-1
changelog:
  - dovecot updated to 2.3.15, pigeonhole updated to 0.5.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access (#1979833)
  - CVE-2021-33515: On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client
  - Add TSLv1.3 support to min_protocols.


author: Timothy Redaelli <tredaelli@redhat.com> - 21.11.2-1
changelog:
  - Rebase to 21.11.2 (#2126159)
  - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-4
changelog:
  - edk2-OvmfPkg-Clarify-invariants-for-NestedInterruptTplLib.patch [bz#2189136]
  - edk2-OvmfPkg-Relax-assertion-that-interrupts-do-not-occur.patch [bz#2189136]
  - Resolves: bz#2189136
    (windows 11 installation broken with edk2-20230301gitf80f052277c8-1.el9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230301gitf80f052277c8-5
changelog:
  - edk2-dbx-update-2023-05-09-black-lotus-edition.patch [RHEL-470]
  - edk2-json-descriptors-explicitly-set-mode-split.patch [RHEL-469]
  - Resolves: RHEL-470
    (edk2: update variable store with latest dbx updates (may 9, black lotus edition))
  - Resolves: RHEL-469
    (explicitly set mode = split in firmware json description files)


author: Oliver Steffen <osteffen@redhat.com> - 20230524-1
changelog:
  - Rebase to edk2-stable202305 tag [RHEL-585]
    Resolves: RHEL-585
    ([rhel-9.3] rebase EDK2 to edk2-stable202305)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-2
changelog:
  - edk2-ArmVirt-add-VirtioSerialDxe-to-ArmVirtQemu-builds.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtio.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtioPc.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-set-up-virtio-serial-.patch [RHEL-643]
  - edk2-OvmfPkg-VirtioSerialDxe-use-TPL_NOTIFY.patch [RHEL-643]
  - edk2-OvmfPkg-VirtioSerialDxe-Remove-noisy-debug-print-on-.patch [RHEL-643]
  - edk2-OvmfPkg-PlatformInitLib-limit-phys-bits-to-46.patch [bz#2174749]
  - edk2-Revert-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174749]
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2124143]
  - edk2-OvmfPkg-PlatformInitLib-check-PcdUse1GPageTable.patch [RHEL-644]
  - edk2-OvmfPkg-OvmfPkgIa32X64-enable-1G-pages.patch [RHEL-644]
  - edk2-OvmfPkg-MicrovmX64-enable-1G-pages.patch [RHEL-644]
  - Resolves: RHEL-643
    (add virtio serial support to armvirt)
  - Resolves: bz#2174749
    ([edk2] re-enable dynamic mmio window)
  - Resolves: bz#2124143
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-9])
  - Resolves: RHEL-644
    (enable gigabyte pages)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-3
changelog:
  - edk2-OvmfPkg-AmdSev-fix-BdsPlatform.c-assertion-failure-d.patch [bz#2190244]
  - edk2-OvmfPkg-IoMmuDxe-add-locking-to-IoMmuAllocateBounceB.patch [bz#2211060]
  - edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch [bz#2218196]
  - Resolves: bz#2190244
    ([EDK2] [AMDSERVER 9.3 Bug] OVMF AP Creation Fixes)
  - Resolves: bz#2211060
    (SEV-es guest randomly stuck at boot to hard drive screen from powerdown and boot again)
  - Resolves: bz#2218196
    (Add vtpm devices with OVMF.amdsev.fd causes VM reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-4
changelog:
  - edk2-OvmfPkg-ResetVector-Fix-assembler-bit-test-flag-chec.patch [RHEL-9943]
  - Resolves: RHEL-9943
    ([EDK2][AMDSERVER Bug] OvmfPkg/ResetVector: Fix assembler bit test flag check [rhel-9.3.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-1
changelog:
  - Rebase to edk2-stable202311 [RHEL-12323]
  - Switch to OpenSSL 3.0 [RHEL-49]
  - Resolves: RHEL-12323
    (Rebase EDK2 for RHEL 9.4)
  - Resolves: RHEL-49
    (consume / bundle RHEL-9 OpenSSL (version 3.0.x) in RHEL-9 edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-2
changelog:
  - edk2-OvmfPkg-RiscVVirt-use-gEfiAuthenticatedVariableGuid-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-3
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21155]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21155]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21155]
  - Resolves: RHEL-21155
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-4
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-5
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411-2.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-411-3.patch [RHEL-21157]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21157]
  - edk2-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch [RHEL-21704]
  - edk2-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch [RHEL-21704]
  - edk2-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch [RHEL-21704]
  - edk2-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch [RHEL-21704]
  - Resolves: RHEL-21157
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-9])
  - Resolves: RHEL-21704
    (vGPU VM take several minutes to show tianocore logo if firmware is ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-6
changelog:
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Updating-SecurityFixes.yaml.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - Resolves: RHEL-21841
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-9])
  - Resolves: RHEL-21843
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-9])
  - Resolves: RHEL-21845
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-9])
  - Resolves: RHEL-21847
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-9])
  - Resolves: RHEL-21849
    (TRIAGE CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-9])
  - Resolves: RHEL-21851
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-9])
  - Resolves: RHEL-21853
    (TRIAGE CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240214-2
changelog:
  - edk2-OvmfPkg-PlatformPei-log-a-warning-when-memory-is-tig.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-consider-AP-stacks-for-pei-memor.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-rewrite-page-table-calculation.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-log-pei-memory-cap-details.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p2.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p3.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p4.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p5.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-return-early-in-GetBspNumber.patch [RHEL-22202]
  - Resolves: RHEL-22202
    ([EDK2] Support booting with 4096 vcpus)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-1
changelog:
  - Rebase to edk2-stable202405
  - Bumo openssl to 8e5beb77088b
  - Resolves: RHEL-32486
    (rebase to edk2-stable202405 [rhel-9])
  - Resolves: RHEL-36446
    (edk2: enable MOR [rhel-9])
  - Resolves: RHEL-21653
    (CVE-2023-6237 edk2: openssl: Excessive time spent checking invalid RSA public keys [rhel-9])
  - Resolves: RHEL-21150
    (CVE-2023-6129 edk2: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC)
  - Resolves: RHEL-22490
    (CVE-2024-0727 edk2: openssl: denial of service via null dereference [rhel-9])


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Miro Hrončok <mhroncok@redhat.com> - 0.29.22-2
changelog:
  - Remove an obsoleted patch
  - Remove old Obsoletes and Conflicts
  - Update description
  - Provide cython, python3-cython


author: Tomas Orsava <torsava@redhat.com> - 0.29.22-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-7
changelog:
  - CVE-2021-3482: Fix heap-based buffer overflow in Jp2Image::readMetadata()
    CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1956174


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-8
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964183

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964189


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-3
changelog:
  - Add back fullname property at the scan matching phase for the backward compatibility.
    Resolves: rhbz#1902881


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-1
changelog:
  - Update to 20201107 version (#1895648)
  - removed %gittag0 macro, as it cause problem to automated package update script


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Antonio Torres <antorres@redhat.com> - 3.0.21-31
changelog:
  - Update OpenSSL 3.0 support backport to current v3.0.x branch state
  - Add "--enable-fips-workaround" to build options
    Related: rhbz#2083699


author: Antonio Torres <antorres@redhat.com> - 3.0.21-34
changelog:
  - Use GID / UID 95 as it's reserved for FreeRADIUS (https://pagure.io/setup/blob/07f8debf03dfb0e5ed36051c13c86c8cd00cd241/f/uidgid#_107)
    Resolves: #2095403


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Dave Dykstra <dwd@fedoraproject.org> - 2.9.9-7
changelog:
  - Update the Requires: fuse-common >= version to 3.4.2-4 because
    fuse-common > 3.4.2-3 is insufficient to force the new version


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Ray Strode <rstrode@redhat.com> - 40.1-9
changelog:
  - Synchronize permission and group ownership for log dir between
    rpm file manifest and daemon expectations.
    Resolves: #1999586


author: Ray Strode <rstrode@redhat.com> - 40.1-12
changelog:
  - More fixes from RHEL 8:
    - Fix DisallowTCP=false
    - Fix crash when both wayland and xorg are unavailable
    Related: #2056931


author: Ray Strode <rstrode@redhat.com> - 40.1-15
changelog:
  - Fix accountsservice user templates
    Resolves: #2062827
  - Properly force Xorg on matrox cards
    Related: #2074013
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2074014


author: Ray Strode <rstrode@redhat.com> - 40.1-23
changelog:
  - Make /var/log/gdm tmpfiles.d snippet match files manifest
    to fix installability test
    Related: RHEL-19410


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Patsy Griffin <patsy@redhat.com> - 2.34-113
changelog:
  - CVE-2024-33601 glibc: netgroup cache may terminate daemon on
    memory allocation failure (RHEL-34272)
  - CVE-2024-33602 glibc: netgroup cache assumes NSS callback 
    uses in-buffer strings (RHEL-34274)


author: Patsy Griffin <patsy@redhat.com> - 2.34-115
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39992)


author: Joonas Sarajärvi <muep@iki.fi> - 0.9.9.8-1
changelog:
  - New upstream release (#1823615)
  - pkgconfig support is no longer supported in upstream and not shipped


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Kalev Lember <klember@redhat.com> - 1.33-1
changelog:
  - Update to 1.33
  - Switch to meson build system
  - Explicitly byte-compile python files using py_byte_compile macro


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-1
changelog:
  - Resolves: rhbz#1969351 Rebase IPA to latest 4.9.x version
  - Resolves: rhbz#1976288 ansible-freeipa automember test fails with `automember_add_condition: testgroup: 'objectclass'` due to ldap cache
  - Resolves: rhbz#1975139 Upgrade error: Add failure missing required attribute "objectclass"
  - Resolves: rhbz#1973024 CA_less ipa-server-install fails if CA cert subject contains non ascii chars
  - Resolves: rhbz#1966101 [RFE] - IDM - Allow specifying permanent logging settings for BIND
  - Resolves: rhbz#1962570 IPA in c9s should not require redhat-logos-ipa as a runtime package 
  - Resolves: rhbz#1957736 [RFE] IPA to allow configuring auto-private-groups at idrange level


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-2
changelog:
  - Resolves: rhbz#1955440 ipa installation fails to configure chrony
  - Resolves: rhbz#1976761 Package python3-ipatests (from CRB repo) Requires python3-coverage
  - Resolves: rhbz#1979609 Unable to set ipaUserAuthType with stageuser-add
  - Resolves: rhbz#1979629 Add checks to prevent assigning authentication indicators to internal IPA services


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-3
changelog:
  - Resolves: rhbz#1979629 Add checks to prevent assigning authentication indicators to internal IPA services
  - Resolves: rhbz#1982212 ipa-trust-add fails with "not enough quota"
  - Resolves: rhbz#1952028 [RFE] Add support for managing subuids and subgids in FreeIPA
  - Resolves: rhbz#1981789 [man page] contradiction in ipa-server-upgrade command's man page and usage


author: Rob Crittenden <rcritten@redhat.com> - 4.9.6-4
changelog:
  - Use new method in check to prevent removal of last KRA (#1985072)
  - ipatests: NAMED_CRYPTO_POLICY_FILE not defined for RHEL (#1982952)
  - Fix index definition for memberOf (#1952028)


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-5
changelog:
  - Resolves: rhbz#1988383 Do SRV discovery in ipa-getkeytab if -s and -H aren't provided 
    - ipa-getkeytab: add option to discover servers using DNS SRV
    - ipa-getkeytab: fix compiler warnings
    - ipatests: test ipa-getkeytab server option
  - Resolves: rhbz#1986329 ipa-server install failure without DNS
    - Fix ldapupdate.get_sub_dict() for missing named user
  - Resolves: rhbz#1980734 Remove python3-pexpect as dependency for ipatests pkg
    - freeipa.spec.in: remove python3-pexpect from Requires
  - Resolves: rhbz#1992538 Backport recent test fixes in python3-ipatests
    - ipatests: use whole date when calling journalctl --since
    - ipatests: Fix for test_source_ipahealthcheck_ipa_host_check_ipahostkeytab
    - ipatests: test_ipahealthcheck: print a message if a system is healthy
    - ipatests: test_installation: move tracking_reqs dependency to ipalib constants ipaserver: krainstance: utilize moved tracking_reqs dependency
    - webui tests: close notification when revoking cert
    - ipatests: Test ipa-cert-fix warns when startup directive is missing from CS.cfg
    - webui tests: fix algo for finding available idrange
    - ipatests: smbclient "-k" => "--use-kerberos=desired"
    - test_acme: refactor with tasks
    - test_acme: make password renewal more robust
    - tasks.py: fix flake8-reported issues
    - ipatests: Test for OTP when the LDAP connection timed out.
    - ipatests: verify that getcert output includes the issued date
    - ipatests: Look for warning into stderr instead of stdout
    - ipatests: use krb5_trace in TestIpaAdTrustInstall
    - ipatests: Test ldapsearch with base scope works with compat tree.
    - ipatests: skip test_basesearch_compat_tree on fedora.
    - ipatests: Refactor test_check_otpd_after_idle_timeout


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-6
changelog:
  - Resolves: rhbz#1998098 - Backport latest test fixes in python3-ipatests
    - ipatests: Test unsecure nsupdate.
    - ipatests: Fix TestAJPSecretUpgrade tests on systems without pkiuser
    - ipatests: test_ipahealthcheck: Verify permissions for /var/log/ files
    - ipatests: test to renew certs on replica using ipa-cert-fix
    - ipatests: wait while http/ldap/pkinit cert get renew on replica
    - ipatests: refactor test_ipa_cert_fix with tasks
    - ipatests: use whole date for journalctl --since


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:1.8.0.332.b09-2
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102435


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-3
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2099801
  - Resolves: rhbz#2100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u342-b06 (EA)
  - Update release notes for shenandoah-8u342-b06.
  - Switch to EA mode for 8u342 pre-release builds.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Resolves: rhbz#2083322


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-2
changelog:
  - Update to shenandoah-jdk8u342-b07 (GA)
  - Update release notes for 8u342-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2106509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112405


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102727


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121273


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102434


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-4
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099839
  - Resolves: rhbz#2100676


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106517


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119528


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130619


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.3.0+7
  - Update release notes to 17.0.3.0+7
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Include a test in the RPM to check the build has the correct vendor information.
  - Resolves: rhbz#2084218


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.7-0.2.ea
changelog:
  - Revert the following changes until copy-java-configs has adapted to relative symlinks:
  - * Move cacerts replacement to install section and retain original of this and tzdb.dat
  - * Run tests on the installed image, rather than the build image
  - * Introduce variables to refer to the static library installation directories
  - * Use relative symlinks so they work within the image
  - * Run debug symbols check during build stage, before the install strips them
  - The move of turning on system security properties is retained so we don't ship with them off
  - Related: rhbz#2084218


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.0.8-3
changelog:
  - Update to jdk-17.0.4.0+8
  - Update release notes to 17.0.4.0+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106524


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-2
changelog:
  - Update to jdk-17.0.4.1+1
  - Update release notes to 17.0.4.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119532


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-3
changelog:
  - Update FIPS support to bring in latest changes
  - * RH2104724: Avoid import/export of DH private keys
  - * RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode
  - * Build the systemconf library on all platforms
  - * RH2048582: Support PKCS#12 keystores
  - * RH2020290: Support TLS 1.3 in FIPS mode
  - Resolves: rhbz#2104725
  - Resolves: rhbz#2117758
  - Resolves: rhbz#2115164
  - Resolves: rhbz#2029665


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.4.1.1-4
changelog:
  - Fix flatpak builds (catering for their uncompressed manual pages)
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102726


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121268


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.5+1
  - Update release notes to 17.0.5+1
  - Switch to EA mode for 17.0.5 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130622


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-2
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-5
changelog:
  - Update FIPS support to bring in latest changes
  - * Add nss.fips.cfg support to OpenJDK tree
  - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
  - * Remove forgotten dead code from RH2020290 and RH2104724
  - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build
  - Resolves: rhbz#2118493


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.1-0.3.ea
changelog:
  - Update to jdk-17.0.6+1
  - Update release notes to 17.0.6+1
  - Switch to EA mode for 17.0.6 pre-release builds.
  - Re-enable EA upstream status check now it is being actively maintained.
  - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
  - Drop JDK-8275535 local patch now this has been accepted and backported upstream
  - Bump tzdata requirement to 2022e now the package is available in RHEL
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.3.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150198


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Petra Alice Mikova <pmikova@redhat.com> - 1:18.0.2.0.9-1
changelog:
  - Update to ea version of jdk18
  - Add new slave jwebserver and corresponding manpage
  - Adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:18.0.2.0.9-1
changelog:
  - Update to jdk-18.0.2 release
  - Support JVM variant zero following JDK-8273494 no longer installing Zero's libjvm.so in the server directory
  - Rebase FIPS patches from fips-18u branch
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Drop now unused fresh_libjvm, build_hotspot_first, bootjdk and buildjdkver variables, as we don't build a JDK here
  - Drop tzdata patches added for 17.0.7 which will eventually appear in the upstream tarball when we reach OpenJDK 21
  - Disable tzdata tests until we are on the latest JDK and things are back in sync
  - Use empty nss.fips.cfg until it is again available via the FIPS patch
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.1.0.10-1
changelog:
  - Update to jdk-19.0.2 release
  - Update release notes to 19.0.2
  - Rebase FIPS patches from fips-19u branch
  - Remove references to sample directory removed by JDK-8284999
  - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag
  - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases
  - Related: RHEL-12998


author: Jiri Vanek <jvanek@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream
  - Adapted rh1750419-redhat_alt_java.patch
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Update to jdk-20.0.2+9
  - Update release notes to 20.0.2+9
  - Update system crypto policy & FIPS patch from new fips-20u tree
  - Update generate_tarball.sh ICEDTEA_VERSION
  - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit)
  - Related: RHEL-12998


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-458.el9]
changelog:
  - memblock: fix crash when reserved memory is not added to memory (Eric Chanudet) [RHEL-36126]
  - mm: pass nid to reserve_bootmem_region() (Eric Chanudet) [RHEL-36126]
  - x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (Prarit Bhargava) [RHEL-29437]
  - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (Sabrina Dubroca) [RHEL-31748]
  - macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst (Sabrina Dubroca) [RHEL-31748]
  - ethernet: Add helper for assigning packet type when dest address does not match device address (Sabrina Dubroca) [RHEL-31748]
  - macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads (Sabrina Dubroca) [RHEL-31748]
  - net: macsec: revert the MAC address if mdo_upd_secy fails (Sabrina Dubroca) [RHEL-31748]
  - net: macsec: documentation for macsec_context and macsec_ops (Sabrina Dubroca) [RHEL-31748]
  - net: macsec: move sci_to_cpu to macsec header (Sabrina Dubroca) [RHEL-31748]
  - net: add DEV_STATS_READ() helper (Sabrina Dubroca) [RHEL-31748]
  - net: macsec: Use helper functions to update stats (Sabrina Dubroca) [RHEL-31748]
  - macsec: use DEV_STATS_INC() (Sabrina Dubroca) [RHEL-31748]
  - net: macsec: remove the prepare flag from the MACsec offloading context (Sabrina Dubroca) [RHEL-31748]
  - ethtool: add linkmode bitmap support to struct ethtool_keee (Ivan Vecera) [RHEL-32101]
  - ethtool: add suffix _u32 to legacy bitmap members of struct ethtool_keee (Ivan Vecera) [RHEL-32101]
  - ethtool: adjust struct ethtool_keee to kernel needs (Ivan Vecera) [RHEL-32101]
  - ethtool: switch back from ethtool_keee to ethtool_eee for ioctl (Ivan Vecera) [RHEL-32101]
  - ethtool: replace struct ethtool_eee with a new struct ethtool_keee on kernel side (Ivan Vecera) [RHEL-32101]
  - treewide: use get_random_u32_below() instead of deprecated function (Bill O'Donnell) [RHEL-36333]
  - powerpc/64s: fix program check interrupt emergency stack path (Mamatha Inamdar) [RHEL-37690] {CVE-2021-47428}
  - ext4: regenerate buddy after block freeing failed if under fc replay (Carlos Maiolino) [RHEL-26678] {CVE-2024-26601}
  - ext4: change the type of blocksize in ext4_mb_init_cache() (Carlos Maiolino) [RHEL-26678] {CVE-2024-26601}
  - ext4: correct grp validation in ext4_mb_good_group (Carlos Maiolino) [RHEL-26678] {CVE-2024-26601}
  - ext4: drop the call to ext4_error() from ext4_get_group_info() (Carlos Maiolino) [RHEL-26678] {CVE-2024-26601}
  - ext4: allow ext4_get_group_info() to fail (Carlos Maiolino) [RHEL-26678] {CVE-2024-26601}
  - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-38348]
  - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-38348]
  - net: dst: fix missing initialization of rt_uncached (Felix Maurer) [RHEL-15695]
  - net: dst: Switch to rcuref_t reference counting (Felix Maurer) [RHEL-15695]
  - net: Use call_rcu_hurry() for dst_release() (Felix Maurer) [RHEL-15695]
  - net: dst: Prevent false sharing vs. dst_entry:: __refcnt (Felix Maurer) [RHEL-15695]
  - rh_messages.h: mark mlx5 on Bluefield-3 as unmaintained (Scott Weaver) [RHEL-33061]
  - rh_messages.h: update driver and device lists (Scott Weaver) [RHEL-35575]
  - i2c: dev: copy userspace array safely (Steve Best) [RHEL-38295] {CVE-2023-52758}
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38173] {CVE-2023-52813}
  - platform/x86/amd/pmc: Modify SMU message port for latest AMD platform (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Add 1Ah family series to STB support list (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Add idlemask support for 1Ah family (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: call amd_pmc_get_ip_info() during driver probe (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Add VPE information for AMDI000A platform (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Send OS_HINT command for AMDI000A platform (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Disable keyboard wakeup on AMD Framework 13 (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Move keyboard wakeup disablement detection to pmc-quirks (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Only run IRQ1 firmware version check on Cezanne (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Move platform defines to header (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: adjust getting DRAM size behavior (David Arcari) [RHEL-24991]
  - platform/x86: Add s2idle quirk for more Lenovo laptops (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Add dump_custom_stb module parameter (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Handle overflow cases where the num_samples range is higher (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Use flex array when calling amd_pmc_stb_debugfs_open_v2() (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Add PMFW command id to support S2D force flush (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Fix build error with randconfig (David Arcari) [RHEL-24991]
  - platform/x86/amd/pmc: Move PMC driver to separate directory (David Arcari) [RHEL-24991]
  - platform/x86/amd: pmc: Use release_mem_region() to undo request_mem_region_muxed() (David Arcari) [RHEL-24991]
  - platform/x86/amd: pmc: Apply nvme quirk to HP 15s-eq2xxx (David Arcari) [RHEL-24991]
  - platform/x86/amd: pmc: Add new ACPI ID AMDI000A (David Arcari) [RHEL-24991]
  - platform/x86: Move s2idle quirk from thinkpad-acpi to amd-pmc (David Arcari) [RHEL-24991]
  - platform/x86/amd: pmc: Use pm_pr_dbg() for suspend related messages (David Arcari) [RHEL-24991]
  - include/linux/suspend.h: Only show pm_pr_dbg messages at suspend/resume (David Arcari) [RHEL-24991]
  - PM: sleep: enable dynamic debug support within pm_pr_dbg() (David Arcari) [RHEL-24991]
  - platform/x86/amd: pmc: Update metrics table info for Pink Sardine (David Arcari) [RHEL-24991]
  - platform/x86/amd: pmc: Add helper function to check the cpu id (David Arcari) [RHEL-24991]
  - platform/x86/amd: pmc: Get STB DRAM size from PMFW (David Arcari) [RHEL-24991]
  - platform/x86/amd: pmc: Pass true/false to bool argument (David Arcari) [RHEL-24991]
  - redhat/configs: Enable INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON (Jerry Snitselaar) [RHEL-28672]
  - idpf: don't skip over ethtool tcp-data-split setting (Michal Schmidt) [RHEL-36182]
  - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38151] {CVE-2023-52730}
  - redhat/configs: Adding CONFIG_TYPEC_MUX_WCD939X_USBSS (Desnes Nunes) [RHEL-34114]
  - usb: xhci: use array_size() when allocating and freeing memory (Desnes Nunes) [RHEL-34114]
  - usb: xhci: check if 'requested segments' exceeds ERST capacity (Desnes Nunes) [RHEL-34114]
  - usb: typec: ucsi: limit the UCSI_NO_PARTNER_PDOS even further (Desnes Nunes) [RHEL-34114]
  - usb: typec: ucsi: allow non-partner GET_PDOS for Qualcomm devices (Desnes Nunes) [RHEL-34114]
  - usb: typec: ucsi: Fix connector check on init (Desnes Nunes) [RHEL-34114]
  - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset (Desnes Nunes) [RHEL-34114]
  - usb: typec: ucsi_acpi: Refactor and fix DELL quirk (Desnes Nunes) [RHEL-34114]
  - usb: typec: ucsi: Ack unsupported commands (Desnes Nunes) [RHEL-34114]
  - usb: typec: ucsi: Check for notifications after init (Desnes Nunes) [RHEL-34114]
  - usb: typec: ucsi: Clear EVENT_PENDING under PPM lock (Desnes Nunes) [RHEL-34114]
  - usb: typec: tcpm: Correct the PDO counting in pd_set (Desnes Nunes) [RHEL-34114]
  - usb: typec: tcpm: Update PD of Type-C port upon pd_set (Desnes Nunes) [RHEL-34114]
  - usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() (Desnes Nunes) [RHEL-34114]
  - usb: typec: tcpm: Correct port source pdo array in pd_set callback (Desnes Nunes) [RHEL-34114]
  - xhci: Fix failure to detect ring expansion need. (Desnes Nunes) [RHEL-34114]
  - usb: port: Don't try to peer unused USB ports based on location (Desnes Nunes) [RHEL-34114]
  - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-34114]
  - usb: typec: tpcm: Fix PORT_RESET behavior for self powered devices (Desnes Nunes) [RHEL-34114]
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-34114]
  - usb: typec: tpcm: Fix issues with power being removed during reset (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: gadget: Don't disconnect if not started (Desnes Nunes) [RHEL-34114]
  - usb: roles: don't get/set_role() when usb_role_switch is unregistered (Desnes Nunes) [RHEL-34114]
  - usb: roles: fix NULL pointer issue when put module's reference (Desnes Nunes) [RHEL-34114]
  - USB: roles: make role_class a static const structure (Desnes Nunes) [RHEL-34114]
  - usb: uhci-grlib: Explicitly include linux/platform_device.h (Desnes Nunes) [RHEL-34114]
  - usb: uhci-grlib: Convert to platform remove callback returning void (Desnes Nunes) [RHEL-34114]
  - scsi: sd: usb_storage: uas: Access media prior to querying device properties (Desnes Nunes) [RHEL-34114]
  - Revert "usb: dwc3: Support EBC feature of DWC_usb31" (Desnes Nunes) [RHEL-34114]
  - dt-bindings: xilinx: replace Piyush Mehta maintainership (Desnes Nunes) [RHEL-34114]
  - USB: serial: option: add Fibocom FM101-GL variant (Desnes Nunes) [RHEL-34114]
  - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e (Desnes Nunes) [RHEL-34114]
  - USB: serial: cp210x: add ID for IMST iM871A-USB (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Fix setting the CNS bit in ROUTER_CS_5 (Desnes Nunes) [RHEL-34114]
  - usb: typec: tcpm: fix the PD disabled case (Desnes Nunes) [RHEL-34114]
  - usb: ucsi_acpi: Quirk to ack a connector change ack cmd (Desnes Nunes) [RHEL-34114]
  - usb: ucsi_acpi: Fix command completion handling (Desnes Nunes) [RHEL-34114]
  - usb: ucsi: Add missing ppm_lock (Desnes Nunes) [RHEL-34114]
  - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-34114]
  - Revert "usb: typec: tcpm: fix cc role at port reset" (Desnes Nunes) [RHEL-34114]
  - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (Desnes Nunes) [RHEL-34114]
  - usb: chipidea: core: handle power lost in workqueue (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend (Desnes Nunes) [RHEL-34114]
  - usb: core: Prevent null pointer dereference in update_port_device_state (Desnes Nunes) [RHEL-34114]
  - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-34114]
  - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-34114]
  - xhci: fix off by one check when adding a secondary interrupter. (Desnes Nunes) [RHEL-34114]
  - xhci: fix possible null pointer dereference at secondary interrupter removal (Desnes Nunes) [RHEL-34114]
  - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK (Desnes Nunes) [RHEL-34114]
  - usb: gadget: ncm: Fix indentations in documentation of NCM section (Desnes Nunes) [RHEL-34114]
  - usb: typec: tipd: fix use of device-specific init function (Desnes Nunes) [RHEL-34114]
  - usb: typec: tipd: Separate reset for TPS6598x (Desnes Nunes) [RHEL-34114]
  - usb: mon: Fix atomicity violation in mon_bin_vma_fault (Desnes Nunes) [RHEL-34114]
  - usb: typec: class: fix typec_altmode_put_partner to put plugs (Desnes Nunes) [RHEL-34114]
  - dt-bindings: usb: dwc3: Limit num-hc-interrupters definition (Desnes Nunes) [RHEL-34114]
  - dt-bindings: usb: xhci: Add num-hc-interrupters definition (Desnes Nunes) [RHEL-34114]
  - xhci: add support to allocate several interrupters (Desnes Nunes) [RHEL-34114]
  - USB: core: Use device_driver directly in struct usb_driver and usb_device_driver (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: gadget: Queue PM runtime idle on disconnect event (Desnes Nunes) [RHEL-34114]
  - usb: chipidea: wait controller resume finished for wakeup irq (Desnes Nunes) [RHEL-34114]
  - usb: chipidea: ci_hdrc_imx: add wakeup clock and keep it always on (Desnes Nunes) [RHEL-34114]
  - usb: gadget: ncm: Add support to update wMaxSegmentSize via configfs (Desnes Nunes) [RHEL-34114]
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Desnes Nunes) [RHEL-34114]
  - usb: gadget: f_ncm: Always set current gadget in ncm_bind() (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: set pm runtime active before resume common (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: Support EBC feature of DWC_usb31 (Desnes Nunes) [RHEL-34114]
  - usb: typec: tcpm: Support multiple capabilities (Desnes Nunes) [RHEL-34114]
  - dt-bindings: connector: Add child nodes for multiple PD capabilities (Desnes Nunes) [RHEL-34114]
  - usb: xhci-plat: fix usb disconnect issue after s4 (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: core: set force_gen1 bit in USB31 devices if max speed is SS (Desnes Nunes) [RHEL-34114]
  - usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: gadget: Handle EP0 request dequeuing properly (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: Properly handle processing of pending events (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Desnes Nunes) [RHEL-34114]
  - USB: fix up merge of 6.4-rc4 into usb-next (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: Add error logs for unknown endpoint events (Desnes Nunes) [RHEL-34114]
  - usb: ueagle-atm: Use wait_event_freezable_timeout() in uea_wait() (Desnes Nunes) [RHEL-34114]
  - usb: typec: tipd: add patch update support for tps6598x (Desnes Nunes) [RHEL-34114]
  - usb: typec: tipd: declare in_data in as const in exec_cmd functions (Desnes Nunes) [RHEL-34114]
  - usb: typec: tipd: add function to request firmware (Desnes Nunes) [RHEL-34114]
  - usb: typec: tipd: add init and reset functions to tipd_data (Desnes Nunes) [RHEL-34114]
  - Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" (Desnes Nunes) [RHEL-34114]
  - Revert "usb: dwc3: Soft reset phy on probe for host" (Desnes Nunes) [RHEL-34114]
  - usb: linux/usb.h: fix Excess kernel-doc description warning (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Reduce retry timeout to speed up boot for some devices (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Keep link as asymmetric if preferred by hardware (Desnes Nunes) [RHEL-34114]
  - thunderbolt: make tb_bus_type const (Desnes Nunes) [RHEL-34114]
  - usb: typec: tcpm: Parse Accessory Mode information (Desnes Nunes) [RHEL-34114]
  - dt-bindings: connector: usb: add accessory mode description (Desnes Nunes) [RHEL-34114]
  - xhci: Fix null pointer dereference during S4 resume when resetting ep0 (Desnes Nunes) [RHEL-34114]
  - usb: dwc3: imx8mp: Fix smatch warning (Desnes Nunes) [RHEL-34114]
  - usb: typec: fixed a typo (Desnes Nunes) [RHEL-34114]
  - usb: gadget: f_fs: fix fortify warning (Desnes Nunes) [RHEL-34114]
  - usb: storage: Remove snprintf() from sysfs call-backs and replace with sysfs_emit() (Desnes Nunes) [RHEL-34114]
  - usb: mon_text: Replace snprintf() with the safer scnprintf() variant (Desnes Nunes) [RHEL-34114]
  - usb: mon_stat: Replace snprintf() with the safer scnprintf() variant (Desnes Nunes) [RHEL-34114]
  - usb: typec: mux: add Qualcomm WCD939X USB SubSystem Altmode Mux driver (Desnes Nunes) [RHEL-34114]
  - dt-bindings: usb: Document WCD939x USB SubSystem Altmode/Analog Audio Switch (Desnes Nunes) [RHEL-34114]
  - usb: core: Fix crash w/ usb_choose_configuration() if no driver (Desnes Nunes) [RHEL-34114]
  - usb: typec: tcpm: Query Source partner for FRS capability only if it is DRP (Desnes Nunes) [RHEL-34114]
  - usb: typec: change altmode SVID to u16 entry (Desnes Nunes) [RHEL-34114]
  - dt-bindings: connector: usb: add altmodes description (Desnes Nunes) [RHEL-34114]
  - usb: typec: Remove usage of the deprecated ida_simple_xx() API (Desnes Nunes) [RHEL-34114]
  - usb: chipidea: Remove usage of the deprecated ida_simple_xx() API (Desnes Nunes) [RHEL-34114]
  - dt-bindings: usb: nxp,ptn5110: Fix typos in the title (Desnes Nunes) [RHEL-34114]
  - dt-bindings: usb: genesys,gl850g: Document 'peer-hub' (Desnes Nunes) [RHEL-34114]
  - usb: cdc-acm: return correct error code on unsupported break (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Add support for Intel Lunar Lake (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Disable PCIe extended encapsulation upon teardown properly (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Make PCIe tunnel setup and teardown follow CM guide (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Improve logging when DisplayPort resource is added due to hotplug (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Use tb_dp_read_cap() to read DP_COMMON_CAP as well (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Disable CL states only when actually needed (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Transition link to asymmetric only when both sides support it (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Log XDomain link speed and width (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Move width_name() helper to tb.h (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Handle lane bonding of Gen 4 XDomain links properly (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Unwind TMU configuration if tb_switch_set_tmu_mode_params() fails (Desnes Nunes) [RHEL-34114]
  - media: uvcvideo: Fix power line control for SunplusIT camera (Desnes Nunes) [RHEL-34114]
  - media: uvcvideo: Pick first best alternate setting insteed of last (Desnes Nunes) [RHEL-34114]
  - media: uvcvideo: Fix power line control for a Chicony camera (Desnes Nunes) [RHEL-34114]
  - usb: typec: ucsi: fix UCSI on buggy Qualcomm devices (Desnes Nunes) [RHEL-34114]
  - media: cx231xx: fix a memleak in cx231xx_init_isoc (Desnes Nunes) [RHEL-34114]
  - usb: xhci: xhci-plat: Add support for BCM2711 (Desnes Nunes) [RHEL-34114]
  - dt-bindings: usb: xhci: Add support for BCM2711 (Desnes Nunes) [RHEL-34114]
  - usb: hub: Add quirk to decrease IN-ep poll interval for Microchip USB491x hub (Desnes Nunes) [RHEL-34114]
  - usb: hub: Replace hardcoded quirk value with BIT() macro (Desnes Nunes) [RHEL-34114]
  - usb: typec: tcpci: add vconn over current fault handling to maxim_core (Desnes Nunes) [RHEL-34114]
  - usb: typec: tcpm: add tcpm_port_error_recovery symbol (Desnes Nunes) [RHEL-34114]
  - dt-bindings: usb: tps6598x: add reset-gpios property (Desnes Nunes) [RHEL-34114]
  - usb: typec: tps6598x: add reset gpio support (Desnes Nunes) [RHEL-34114]
  - r8152: fix unknown device for choose_configuration (Desnes Nunes) [RHEL-34114]
  - r8152: Choose our USB config with choose_configuration() rather than probe() (Desnes Nunes) [RHEL-34114]
  - usb: core: Allow subclassed USB drivers to override usb_choose_configuration() (Desnes Nunes) [RHEL-34114]
  - usb: core: Don't force USB generic_subclass drivers to define probe() (Desnes Nunes) [RHEL-34114]
  - usb: atm: Remove snprintf() from sysfs call-backs and replace with sysfs_emit() (Desnes Nunes) [RHEL-34114]
  - xhci: fix possible null pointer deref during xhci urb enqueue (Desnes Nunes) [RHEL-34114]
  - xhci: Reconfigure endpoint 0 max packet size only during endpoint reset (Desnes Nunes) [RHEL-34114]
  - xhci: minor coding style cleanup in 'xhci_try_enable_msi()' (Desnes Nunes) [RHEL-34114]
  - xhci: rework 'xhci_try_enable_msi()' MSI and MSI-X setup code (Desnes Nunes) [RHEL-34114]
  - xhci: change 'msix_count' to encompass MSI or MSI-X vectors (Desnes Nunes) [RHEL-34114]
  - xhci: refactor static MSI function (Desnes Nunes) [RHEL-34114]
  - xhci: refactor static MSI-X function (Desnes Nunes) [RHEL-34114]
  - xhci: add handler for only one interrupt line (Desnes Nunes) [RHEL-34114]
  - xhci: check if legacy irq is available before using it as fallback (Desnes Nunes) [RHEL-34114]
  - xhci: dbc: Add missing headers (Desnes Nunes) [RHEL-34114]
  - xhci: dbc: Use sizeof(*pointer) instead of sizeof(type) (Desnes Nunes) [RHEL-34114]
  - xhci: dbc: Use sizeof_field() where it makes sense (Desnes Nunes) [RHEL-34114]
  - xhci: dbc: Replace custom return value with proper Linux error code (Desnes Nunes) [RHEL-34114]
  - xhci: dbc: Don't shadow error codes in store() functions (Desnes Nunes) [RHEL-34114]
  - xhci: dbc: Check for errors first in xhci_dbc_stop() (Desnes Nunes) [RHEL-34114]
  - xhci: dbc: Use ATTRIBUTE_GROUPS() (Desnes Nunes) [RHEL-34114]
  - xhci: dbc: Use sysfs_emit() to instead of scnprintf() (Desnes Nunes) [RHEL-34114]
  - xhci: dbc: Convert to use sysfs_streq() (Desnes Nunes) [RHEL-34114]
  - xhci: dbc: Drop duplicate checks for dma_free_coherent() (Desnes Nunes) [RHEL-34114]
  - usb: new quirk to reduce the SET_ADDRESS request timeout (Desnes Nunes) [RHEL-34114]
  - usb: xhci: Add timeout argument in address_device USB HCD callback (Desnes Nunes) [RHEL-34114]
  - media: usb: cx231xx: Stop direct calls to queue num_buffers field (Desnes Nunes) [RHEL-34114]
  - USB: misc: iowarrior: remove redundant assignment to variable io_res (Desnes Nunes) [RHEL-34114]
  - thunderbolt: Remove duplicated re-assignment of pointer 'out' (Desnes Nunes) [RHEL-34114]
  - dt-bindings: phy: imx8mq-usb: add phy tuning properties (Desnes Nunes) [RHEL-34114]
  - dt-bindings: phy: imx8mq-usb: add power-domains property (Desnes Nunes) [RHEL-34114]
  - dt-bindings: phy: imx8mq-usb-phy: convert to json schema (Desnes Nunes) [RHEL-34114]
  - memstick: jmb38x_ms: Annotate struct jmb38x_ms with __counted_by (Desnes Nunes) [RHEL-34114]
  - memstick r592: make memstick_debug_get_tpc_name() static (Desnes Nunes) [RHEL-34114]
  - memstick: fix memory leak if card device is never registered (Desnes Nunes) [RHEL-34114]
  - memstick: core: Imply IOSCHED_BFQ (Desnes Nunes) [RHEL-34114]
  - mmc: core: Imply IOSCHED_BFQ (Desnes Nunes) [RHEL-34114]
  - memstick/mspro_block: Convert to use sysfs_emit()/sysfs_emit_at() APIs (Desnes Nunes) [RHEL-34114]
  - memstick: r592: Fix a UAF bug when removing the driver (Desnes Nunes) [RHEL-34114]
  - memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() (Desnes Nunes) [RHEL-34114]
  - memstick: jmb38x_ms: Prefer struct_size over open coded arithmetic (Desnes Nunes) [RHEL-34114]
  - memstick: switch from 'pci_' to 'dma_' API (Desnes Nunes) [RHEL-34114]
  - memstick: r592: Change the name of the 'pci_driver' structure to be consistent (Desnes Nunes) [RHEL-34114]
  - misc: rtsx: clean up one inconsistent indenting (Desnes Nunes) [RHEL-34114]
  - phy: broadcom: sata: fix Wvoid-pointer-to-enum-cast warning (Desnes Nunes) [RHEL-34114]
  - phy: broadcom: Kconfig: Add configuration menu for Broadcom phy drivers (Desnes Nunes) [RHEL-34114]
  - phy: qcom: qmp-ufs: add missing offsets to sm8150 configuration (Desnes Nunes) [RHEL-34114]
  - phy: core: Remove usage of the deprecated ida_simple_xx() API (Desnes Nunes) [RHEL-34114]
  - phy: core: add debugfs files (Desnes Nunes) [RHEL-34114]
  - PCI: tegra: Convert to devm_of_phy_optional_get() (Desnes Nunes) [RHEL-34114]
  - phy: Add devm_of_phy_optional_get() helper (Desnes Nunes) [RHEL-34114]
  - doc: phy: Document devm_of_phy_get() (Desnes Nunes) [RHEL-34114]
  - phy: Remove unused phy_optional_get() (Desnes Nunes) [RHEL-34114]
  - net: hsr: hsr_slave: Fix the promiscuous mode in offload mode (Felix Maurer) [RHEL-30017]
  - hsr: Handle failures in module init (Felix Maurer) [RHEL-30017]
  - hsr: Fix uninit-value access in hsr_get_node() (Felix Maurer) [RHEL-30017 RHEL-33236] {CVE-2024-26863}
  - net: hsr: Use correct offset for HSR TLV values in supervisory HSR frames (Felix Maurer) [RHEL-30017]
  - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() (Felix Maurer) [RHEL-30017 RHEL-31606] {CVE-2024-26707}
  - net: hsr: Add support for MC filtering at the slave device (Felix Maurer) [RHEL-30017]
  - net: hsr: Disable promiscuous mode in offload mode (Felix Maurer) [RHEL-30017]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-459.el9]
changelog:
  - KVM: arm64: Do not re-initialize the KVM lock (Sebastian Ott) [RHEL-31215 RHEL-36279]
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Sebastian Ott) [RHEL-31215 RHEL-36279]
  - KVM: arm64: Ensure target address is granule-aligned for range TLBI (Sebastian Ott) [RHEL-31215 RHEL-36279]
  - KVM: arm64: Fix host-programmed guest events in nVHE (Sebastian Ott) [RHEL-31215 RHEL-36279]
  - KVM: selftests: Fix spelling mistake "trigged" -> "triggered" (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: removed unused kern_hyp_va asm macro (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: add comments to __kern_hyp_va (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: arm64: Support P52V48 4K and 16K guest_modes (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: arm64: Determine max ipa size per-page size (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: Fix __GUEST_ASSERT() format warnings in ARM's arch timer test (Sebastian Ott) [RHEL-31215]
  - perf build: Fix out of tree build related to installation of sysreg-defs (Sebastian Ott) [RHEL-31215]
  - tools headers: Update tools's copy of arm64/asm headers (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: aarch64: Remove unused functions from vpmu test (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: selftests: Split arch_timer test code (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: selftests: Enable tuning of error margin in arch_timer test (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: selftests: Data type cleanup for arch_timer test (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: Print timer ctl register in ISTATUS assertion (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: Fix GUEST_PRINTF() format warnings in ARM code (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: aarch64: Remove redundant newlines (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: selftests: Handle feature fields with nonzero minimum value correctly (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: Ensure sysreg-defs.h is generated at the expected path (Sebastian Ott) [RHEL-31215]
  - perf build: Ensure sysreg-defs Makefile respects output dir (Sebastian Ott) [RHEL-31215]
  - tools headers arm64: Fix references to top srcdir in Makefile (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: aarch64: Update tools copy of arm_pmuv3.h (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: aarch64: vPMU test for validating user accesses (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: aarch64: vPMU register test for unimplemented counters (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: aarch64: vPMU register test for implemented counters (Sebastian Ott) [RHEL-31215]
  - KVM: selftests: aarch64: Introduce vpmu_counter_access test (Sebastian Ott) [RHEL-31215]
  - tools: Import arm_pmuv3.h (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: selftests: Test for setting ID register from usersapce (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Document vCPU feature selection UAPIs (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Document KVM_ARM_GET_REG_WRITABLE_MASKS (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Fix out-of-IPA space translation fault handling (Sebastian Ott) [RHEL-31215]
  - Revert "KVM: arm64: Snapshot all non-zero RES0/RES1 sysreg fields for later checking" (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Fix TRFCR_EL1/PMSCR_EL1 access in hVHE mode (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Don't initialize idreg debugfs w/ preemption disabled (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Fail the idreg iterator if idregs aren't initialized (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Set io memory s2 pte as normalnc for vfio pci device (Sebastian Ott) [RHEL-31215]
  - mm: Introduce new flag to indicate wc safe (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Introduce new flag for non-cacheable IO memory (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Fix typos (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic: Don't acquire the lpi_list_lock in vgic_put_irq() (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic: Ensure the irq refcount is nonzero when taking a ref (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic: Rely on RCU protection in vgic_get_lpi() (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic: Free LPI vgic_irq structs in an RCU-safe manner (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic: Use atomics to count LPIs (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic: Get rid of the LPI linked-list (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic-its: Walk the LPI xarray in vgic_copy_lpi_list() (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic-v3: Iterate the xarray to find pending LPIs (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic: Use xarray to find LPI in vgic_get_lpi() (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic: Store LPIs in an xarray (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Make build-time check of RES0/RES1 bits optional (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (Sebastian Ott) [RHEL-31215 RHEL-36279]
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Sebastian Ott) [RHEL-31215 RHEL-36279]
  - KVM: arm64: Add debugfs file for guest's ID registers (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Snapshot all non-zero RES0/RES1 sysreg fields for later checking (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Make FEAT_MOPS UNDEF if not advertised to the guest (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Make AMU sysreg UNDEF if FEAT_AMU is not advertised to the guest (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Make PIR{,E0}_EL1 UNDEF if S1PIE is not advertised to the guest (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Make TLBI OS/Range UNDEF if not advertised to the guest (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Streamline save/restore of HFG[RW]TR_EL2 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Move existing feature disabling over to FGU infrastructure (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Propagate and handle Fine-Grained UNDEF bits (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add Fine-Grained UNDEF tracking information (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Rename __check_nv_sr_forward() to triage_sysreg_trap() (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Use the xarray as the primary sysreg/sysinsn walker (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Register AArch64 system register entries with the sysreg xarray (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Always populate the trap configuration xarray (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Move system instructions to their own sys_reg_desc array (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Drop the requirement for XARRAY_MULTI (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Turn encoding ranges into discrete XArray stores (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Correctly handle negative polarity FGTs (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Unify HDFG[WR]TR_GROUP FGT identifiers (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Drop sanitised_sys_reg() helper (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Add sanitising to VNCR-backed HCRX_EL2 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Add sanitising to VNCR-backed FGT sysregs (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Add sanitising to EL2 configuration registers (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Add sanitising to VNCR-backed sysregs (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add feature checking helpers (Sebastian Ott) [RHEL-31215]
  - arm64: sysreg: Add missing ID_AA64ISAR[13]_EL1 fields and variants (Sebastian Ott) [RHEL-31215]
  - arm64: cpufeatures: Fix FEAT_NV check when checking for FEAT_NV1 (Sebastian Ott) [RHEL-31215]
  - arm64: cpufeatures: Only check for NV1 if NV is present (Sebastian Ott) [RHEL-31215]
  - arm64: cpufeatures: Add missing ID_AA64MMFR4_EL1 to __read_sysreg_by_encoding() (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Handle Apple M2 as not having HCR_EL2.NV1 implemented (Sebastian Ott) [RHEL-31215]
  - arm64: kvm: avoid CONFIG_PGTABLE_LEVELS for runtime levels (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Fix double-free following kvm_pgtable_stage2_free_unlinked() (Sebastian Ott) [RHEL-31215 RHEL-36279]
  - KVM: arm64: print Hyp mode (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Force guest's HCR_EL2.E2H RES1 when NV1 is not implemented (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Expose ID_AA64MMFR4_EL1 to guests (Sebastian Ott) [RHEL-31215]
  - arm64: Fix early handling of FEAT_E2H0 not being implemented (Sebastian Ott) [RHEL-31215]
  - arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negative (Sebastian Ott) [RHEL-31215]
  - arm64: cpufeature: Detect HCR_EL2.NV1 being RES0 (Sebastian Ott) [RHEL-31215]
  - arm64: cpufeature: Add ID_AA64MMFR4_EL1 handling (Sebastian Ott) [RHEL-31215]
  - arm64: sysreg: Add layout for ID_AA64MMFR4_EL1 (Sebastian Ott) [RHEL-31215]
  - arm64: cpufeature: Correctly display signed override values (Sebastian Ott) [RHEL-31215]
  - arm64: cpufeatures: Correctly handle signed values (Sebastian Ott) [RHEL-31215]
  - arm64: Add macro to compose a sysreg field value (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Do not source virt/lib/Kconfig twice (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic: fix a kernel-doc warning (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic-its: fix kernel-doc warnings (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vgic-init: fix a kernel-doc warning (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: sys_regs: fix kernel-doc warnings (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: PMU: fix kernel-doc warnings (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: mmu: fix a kernel-doc warning (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: vhe: fix a kernel-doc warning (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: hyp/aarch32: fix kernel-doc warnings (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: guest: fix kernel-doc warnings (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: debug: fix kernel-doc warnings (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Fix circular locking dependency (Sebastian Ott) [RHEL-31215 RHEL-31553 RHEL-36279] {CVE-2024-26691}
  - KVM: arm64: nv: Handle virtual EL2 registers in vcpu_read/write_sys_reg() (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Map VNCR-capable registers to a separate page (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Add EL2_REG_VNCR()/EL2_REG_REDIR() sysreg helpers (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Add include containing the VNCR_EL2 offsets (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Add non-VHE-EL2->EL1 translation helpers (Sebastian Ott) [RHEL-31215]
  - arm64: cpufeatures: Restrict NV support to FEAT_NV2 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Introduce a bad_trap() primitive for unexpected trap handling (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Drop EL12 register traps that are redirected to VNCR (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Compute NV view of idregs as a one-off (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: nv: Hoist vcpu_has_nv() into is_hyp_ctxt() (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Trap external trace for protected VMs (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Mark PAuth as a restricted feature for protected VMs (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Fix which features are marked as allowed for protected VMs (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Macros for setting/clearing FGT bits (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Define FGT nMASK bits relative to other fields (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Use generated FGT RES0 bits instead of specifying them (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add build validation for FGT trap mask values (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Handle HAFGRTR_EL2 trapping in nested virt (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add bit masks for HAFGRTR_EL2 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add missing HFGITR_EL2 FGT entries to nested virt (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add missing HFGxTR_EL2 FGT entries to nested virt (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Add missing system instruction definitions for FGT (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Add missing system register definitions for FGT (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Add missing ExtTrcBuff field definition to ID_AA64DFR0_EL1 (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Add missing Pauth_LR field definitions to ID_AA64ISAR1_EL1 (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Add new system registers for GCS (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Add definition for FPMR (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Update HCRX_EL2 definition for DDI0601 2023-09 (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Update SCTLR_EL1 for DDI0601 2023-09 (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Update ID_AA64SMFR0_EL1 definition for DDI0601 2023-09 (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Add definition for ID_AA64FPFR0_EL1 (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Add definition for ID_AA64ISAR3_EL1 (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Update ID_AA64ISAR2_EL1 defintion for DDI0601 2023-09 (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Add definition for ID_AA64PFR2_EL1 (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: update CPACR_EL1 register (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: add system register POR_EL{0,1} (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Add definition for HAFGRTR_EL2 (Sebastian Ott) [RHEL-31215]
  - arm64/sysreg: Update HFGITR_EL2 definiton to DDI0601 2023-09 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Explicitly trap unsupported HFGxTR_EL2 features (Sebastian Ott) [RHEL-31215]
  - arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Remove VPIPT I-cache handling (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Use helpers to classify exception types reported via ESR (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Allow guests with >48-bit IPA size on FEAT_LPA2 systems (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Support up to 5 levels of translation in kvm_pgtable (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Convert translation level parameter to s8 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Use LPA2 page-tables for stage2 and hyp stage1 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add new (V)TCR_EL2 field definitions for FEAT_LPA2 (Sebastian Ott) [RHEL-31215]
  - arm64: Add ARM64_HAS_LPA2 CPU capability (Sebastian Ott) [RHEL-31215]
  - arm64/mm: Add FEAT_LPA2 specific ID_AA64MMFR0.TGRAN[2] (Sebastian Ott) [RHEL-31215]
  - arm64/mm: Add lpa2_is_enabled() kvm_lpa2_is_enabled() stubs (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: PMU: Allow userspace to limit PMCR_EL0.N for the guest (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Sanitize PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} before first run (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add {get,set}_user for PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: PMU: Set PMCR_EL0.N for vCPU based on the associated PMU (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Select default PMU in KVM_ARM_VCPU_INIT handler (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add PMU event filter bits required if EL3 is implemented (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Make PMEVTYPER<n>_EL0.NSH RES0 if EL2 isn't advertised (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: PMU: Introduce helpers to set the guest's PMU (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Move VTCR_EL2 into struct s2_mmu (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Load the stage-2 MMU context in kvm_vcpu_load_vhe() (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Rename helpers for VHE vCPU load/put (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Reload stage-2 for VMID change on VHE (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Restore the stage-2 context in VHE's __tlb_switch_to_host() (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Don't zero VTTBR in __tlb_switch_to_host() (Sebastian Ott) [RHEL-31215]
  - arm64: kvm: Use cpus_have_final_cap() explicitly (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Expose MOPS instructions to guests (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add handler for MOPS exceptions (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: FFA: Remove access of endpoint memory access descriptor array (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Use mtree_empty() to determine if SMCCC filter configured (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Only insert reserved ranges when SMCCC filter is used (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Add a predicate for testing if SMCCC filter is configured (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Allow userspace to change ID_AA64ZFR0_EL1 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Allow userspace to change ID_AA64PFR0_EL1 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Allow userspace to change ID_AA64MMFR{0-2}_EL1 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Allow userspace to change ID_AA64ISAR{0-2}_EL1 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Bump up the default KVM sanitised debug version to v8p8 (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Reject attempts to set invalid debug arch version (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Advertise selected DebugVer in DBGDIDR.Version (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Use guest ID register values for the sake of emulation (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Allow userspace to get the writable masks for feature ID registers (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Do not transfer page refcount for THP adjustment (Sebastian Ott) [RHEL-31215]
  - KVM: arm64: Don't use kerneldoc comment for arm64_check_features() (Sebastian Ott) [RHEL-31215]
  - Revert "Bluetooth: hci_qca: Set BDA quirk bit if fwnode exists in DT" (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (David Marlin) [RHEL-30099]
  - Bluetooth: qca: Fix triggering coredump implementation (David Marlin) [RHEL-30099]
  - Bluetooth: hci_qca: Set BDA quirk bit if fwnode exists in DT (David Marlin) [RHEL-30099]
  - Bluetooth: qca: Fix wrong event type for patch config command (David Marlin) [RHEL-30099]
  - Bluetooth: Enforce validation on max value of connection interval (David Marlin) [RHEL-30099]
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (David Marlin) [RHEL-30099]
  - Bluetooth: mgmt: Fix limited discoverable off timeout (David Marlin) [RHEL-30099]
  - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR (David Marlin) [RHEL-30099]
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (David Marlin) [RHEL-27921 RHEL-30099] {CVE-2024-22099}
  - Bluetooth: hci_sync: Fix accept_list when attempting to suspend (David Marlin) [RHEL-30099]
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-30099 RHEL-31828] {CVE-2024-26801}
  - Bluetooth: hci_sync: Check the correct flag before starting a scan (David Marlin) [RHEL-30099]
  - Bluetooth: hci_bcm4377: do not mark valid bd_addr as invalid (David Marlin) [RHEL-30099]
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (David Marlin) [RHEL-30099]
  - Bluetooth: Add device 13d3:3572 IMC Networks Bluetooth Radio (David Marlin) [RHEL-30099]
  - Bluetooth: L2CAP: Fix possible multiple reject send (David Marlin) [RHEL-30099]
  - Bluetooth: hci_sync: fix BR/EDR wakeup bug (David Marlin) [RHEL-30099]
  - Bluetooth: btnxpuart: remove useless assignment (David Marlin) [RHEL-30099]
  - Bluetooth: btmtkuart: fix recv_buf() return value (David Marlin) [RHEL-30099]
  - Bluetooth: btnxpuart: fix recv_buf() return value (David Marlin) [RHEL-30099]
  - Bluetooth: qca: Support HFP offload for QCA2066 (David Marlin) [RHEL-30099]
  - Bluetooth: hci_conn: Check non NULL function before calling for HFP offload (David Marlin) [RHEL-30099]
  - Bluetooth: ISO: Avoid creating child socket if PA sync is terminating (David Marlin) [RHEL-30099]
  - Bluetooth: btintel: Print firmware SHA1 (David Marlin) [RHEL-30099]
  - Bluetooth: hci_core: Remove le_restart_scan work (David Marlin) [RHEL-30099]
  - Bluetooth: Add documentation to exported functions in lib (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Don't suspend when there are connections (David Marlin) [RHEL-30099]
  - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 (David Marlin) [RHEL-30099]
  - Bluetooth: ISO: Reassociate a socket with an active BIS (David Marlin) [RHEL-30099]
  - Bluetooth: ISO: Allow binding a PA sync socket (David Marlin) [RHEL-30099]
  - Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE (David Marlin) [RHEL-30099]
  - Bluetooth: L2CAP: Send reject on command corrupted request (David Marlin) [RHEL-30099]
  - Bluetooth: hci_core: Fix hci_conn_hash_lookup_cis (David Marlin) [RHEL-30099]
  - Bluetooth: hci_event: shut up a false-positive warning (David Marlin) [RHEL-30099]
  - Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (David Marlin) [RHEL-30099]
  - Bluetooth: Fix deadlock in vhci_send_frame (David Marlin) [RHEL-30099]
  - Bluetooth: Fix not notifying when connection encryption changes (David Marlin) [RHEL-30099]
  - Bluetooth: btmtksdio: enable bluetooth wakeup in system suspend (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE (David Marlin) [RHEL-30099]
  - Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Add date->evt_skb is NULL check (David Marlin) [RHEL-30099]
  - Bluetooth: msft: __hci_cmd_sync() doesn't return NULL (David Marlin) [RHEL-30099]
  - Bluetooth: ISO: Match QoS adv handle with BIG handle (David Marlin) [RHEL-30099]
  - Bluetooth: ISO: Allow binding a bcast listener to 0 bises (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables (David Marlin) [RHEL-30099]
  - Bluetooth: qca: add support for QCA2066 (David Marlin) [RHEL-30099]
  - Bluetooth: Add support for Intel Misty Peak - 8087:0038 (David Marlin) [RHEL-30099]
  - Bluetooth: Add support ITTIM PE50-M75C (David Marlin) [RHEL-30099]
  - Bluetooth: ISO: Fix BIS cleanup (David Marlin) [RHEL-30099]
  - Bluetooth: Fix a refcnt underflow problem for hci_conn (David Marlin) [RHEL-30099]
  - Bluetooth: vhci: Fix race when opening vhci device (David Marlin) [RHEL-30099]
  - Bluetooth: Avoid redundant authentication (David Marlin) [RHEL-30099]
  - Bluetooth: ISO: Fix handling of listen for unicast (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: add shutdown function for QCA6174 (David Marlin) [RHEL-30099]
  - Bluetooth: Delete unused hci_req_prepare_suspend() declaration (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Fix quirks table naming (David Marlin) [RHEL-30099]
  - Bluetooth: btintel: Send new command for PPAG (David Marlin) [RHEL-30099]
  - Bluetooth: ISO: Add support for periodic adv reports processing (David Marlin) [RHEL-30099]
  - Bluetooth: qca: add support for WCN7850 (David Marlin) [RHEL-30099]
  - Bluetooth: qca: use switch case for soc type behavior (David Marlin) [RHEL-30099]
  - Bluetooth: hci_conn: Fix sending BT_HCI_CMD_LE_CREATE_CONN_CANCEL (David Marlin) [RHEL-30099]
  - Bluetooth: btnxpuart: Improve inband Independent Reset handling (David Marlin) [RHEL-30099]
  - Bluetooth: btnxpuart: Add support for IW624 chipset (David Marlin) [RHEL-30099]
  - Bluetooth: btnxpuart: Remove check for CTS low after FW download (David Marlin) [RHEL-30099]
  - Bluetooth: hci_event: drop only unbound CIS if Set CIG Parameters fails (David Marlin) [RHEL-30099]
  - Bluetooth: Remove unnecessary NULL check before vfree() (David Marlin) [RHEL-30099]
  - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-30099]
  - Bluetooth: Remove unused declaration amp_read_loc_info() (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Move btusb_recv_event_intel to btintel (David Marlin) [RHEL-30099]
  - Bluetooth: btqca: Add WCN3988 support (David Marlin) [RHEL-30099]
  - Bluetooth: btnxpuart: Add support for AW693 chipset (David Marlin) [RHEL-30099]
  - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (David Marlin) [RHEL-30099]
  - bluetooth: Explicitly include correct DT includes (David Marlin) [RHEL-30099]
  - Bluetooth: btbcm: add default address for BCM43430A1 (David Marlin) [RHEL-30099]
  - Bluetooth: ISO: Add support for BT_PKT_STATUS (David Marlin) [RHEL-30099]
  - Bluetooth: af_bluetooth: Make BT_PKT_STATUS generic (David Marlin) [RHEL-30099]
  - Bluetooth: btmtk: Fix kernel crash when processing coredump (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Add support for another MediaTek 7922 VID/PID (David Marlin) [RHEL-30099]
  - Bluetooth: Fix hci_suspend_sync crash (David Marlin) [RHEL-30099]
  - Bluetooth: hci_debugfs: Use kstrtobool() instead of strtobool() (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Add new VID/PID 04ca/3804 for MT7922 (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Add new VID/PID 0489/e102 for MT7922 (David Marlin) [RHEL-30099]
  - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Add a new VID/PID 0489/e0f6 for MT7922 (David Marlin) [RHEL-30099]
  - Bluetooth: msft: Fix error code in msft_cancel_address_filter_sync() (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Add device 0489:e0f5 as MT7922 device (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: mediatek: add MediaTek devcoredump support (David Marlin) [RHEL-30099]
  - Bluetooth: btmtk: introduce btmtk reset work (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: mediatek: readx_poll_timeout replaces open coding (David Marlin) [RHEL-30099]
  - Bluetooth: btmtk: add printing firmware information (David Marlin) [RHEL-30099]
  - Bluetooth: btusb: Add support Mediatek MT7925 (David Marlin) [RHEL-30099]
  - Bluetooth: btintel: Add support to reset bluetooth via ACPI DSM (David Marlin) [RHEL-30099]
  - Bluetooth: hci_qca: Add qcom devcoredump support (David Marlin) [RHEL-30099]
  - Bluetooth: hci_qca: Add qcom devcoredump sysfs support (David Marlin) [RHEL-30099]
  - Bluetooth: hci_sock: Forward credentials to monitor (David Marlin) [RHEL-30099]
  - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-30099]
  - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-30099]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-460.el9]
changelog:
  - powerpc/64s: Fix unrecoverable MCE calling async handler from NMI (Mamatha Inamdar) [RHEL-37688] {CVE-2021-47429}
  - misc: rtsx: do clear express reg every SD_INT (David Arcari) [RHEL-33706]
  - misc: rtsx: Fix rts5264 driver status incorrect when card removed (David Arcari) [RHEL-33706]
  - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37426] {CVE-2024-35959}
  - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() (Jose Ignacio Tornos Martinez) [RHEL-38417] {CVE-2021-47457}
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38115] {CVE-2023-52703}
  - net: hns3: do not allow call hns3_nic_net_open repeatedly (Jose Ignacio Tornos Martinez) [RHEL-37707] {CVE-2021-47400}
  - ice: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-35293]
  - arm64: mm: Don't remap pgtables for allocate vs populate (Eric Chanudet) [RHEL-32699]
  - arm64: mm: Batch dsb and isb when populating pgtables (Eric Chanudet) [RHEL-32699]
  - arm64: mm: Don't remap pgtables per-cont(pte|pmd) block (Eric Chanudet) [RHEL-32699]
  - cgroup: Remove duplicated cgroup_local_stat_show() and cpu_local_stat_show() functions (Waiman Long) [RHEL-36683]
  - Revert "Revert "Merge: cgroup: Backport upstream cgroup commits up to v6.8"" (Waiman Long) [RHEL-36683]
  - x86/tdx: Fix unexpected end of section warning around __tdx_hypercall_failed() (Joe Lawrence) [RHEL-36224]
  - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-36209]
  - net: tipc: remove redundant 'bool' from CONFIG_TIPC_{MEDIA_UDP,CRYPTO} (Xin Long) [RHEL-36209]
  - tipc: node: remove Excess struct member kernel-doc warnings (Xin Long) [RHEL-36209]
  - tipc: socket: remove Excess struct member kernel-doc warning (Xin Long) [RHEL-36209]
  - tipc: Remove some excess struct member documentation (Xin Long) [RHEL-36209]
  - tipc: Remove redundant call to TLV_SPACE() (Xin Long) [RHEL-36209]
  - redhat/configs: Update for ARM_SMMU_V3_KUNIT_TEST (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Make the kunit into a module (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Add unit tests for arm_smmu_write_entry (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Build the whole CD in arm_smmu_make_s1_cd() (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Move the CD generation for SVA into a function (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Allocate the CD table entry in advance (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Make arm_smmu_alloc_cd_ptr() (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Consolidate clearing a CD table entry (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Move the CD generation for S1 domains into a function (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Make CD programming use arm_smmu_write_entry() (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Add an ops indirection to the STE code (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Free MSIs in case of ENOMEM (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu: Convert to domain_alloc_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Add a type for the CD entry (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Do not ATC invalidate the entire domain (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/arm-smmu-v3: Retire disable_bypass parameter (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Decouple igfx_off from graphic identity mapping (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Fix compilation error (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Enable Guest Translation after reading IOMMU feature register (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Add config needed for iommufd_fail_nth (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - selftests/iommu: fix the config fragment (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Add mock IO hugepages tests (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Refactor dirty bitmap tests (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Test u64 unaligned bitmaps (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove caching mode check before device TLB flush (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove private data use in fault message (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove debugfs use of private data field (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Allocate DMAR fault interrupts locally (Jerry Snitselaar) [RHEL-28780]
  - iommu: Pass domain to remove_dev_pasid() op (Jerry Snitselaar) [RHEL-28780]
  - iommu: Undo pasid attachment only for the devices that have succeeded (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Use try_cmpxchg64{,_local}() in iommu.c (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove redundant assignment to variable err (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add SVA domain support (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Initial SVA support for AMD IOMMU (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add support for enable/disable IOPF (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add IO page fault notifier handler (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add support for page response (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Define per-IOMMU iopf_queue (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Enable PCI features based on attached domain capability (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Setup GCR3 table in advance if domain is SVA capable (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce iommu_dev_data.max_pasids (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Fix PPR interrupt processing logic (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Move PPR-related functions into ppr.c (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add support for enabling/disabling IOMMU features (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce per device DTE update function (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Rename amd_iommu_v2_supported() as amd_iommu_pasid_supported() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add ops->domain_alloc_sva() (Jerry Snitselaar) [RHEL-28780]
  - redhat/configs: Clean up CONFIG_AMD_IOMMU_V2 (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Enhance def_domain_type to handle untrusted device (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Add missing IOMMUFD_DRIVER kconfig for the selftest (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: do not set total_used to 0 in swiotlb_create_debugfs_files() (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Fix WARN_ON in iommu probe path (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Allocate local memory for page request queue (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Fix wrong use of pasid config (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Fix possible irq lock inversion dependency issue (Jerry Snitselaar) [RHEL-28780]
  - iommu: Validate the PASID in iommu_attach_device_pasid() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Fix access for STE.SHCFG (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Add cpu_to_le64() around STRTAB_STE_0_V (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Jerry Snitselaar) [RHEL-28780]
  - iommu/dma: Force swiotlb_max_mapping_size on an untrusted device (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: Honour dma_alloc_coherent() alignment in swiotlb_alloc() (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: Enforce page alignment in swiotlb_alloc() (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: Fix double-allocation of slots due to broken alignment handling (Jerry Snitselaar) [RHEL-28780]
  - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: add debugfs to track swiotlb transient pool usage (Jerry Snitselaar) [RHEL-28780]
  - iommu/dma: Document min_align_mask assumption (Jerry Snitselaar) [RHEL-28780]
  - iommu: re-use local fwnode variable in iommu_ops_from_fwnode() (Jerry Snitselaar) [RHEL-28780]
  - iommu: constify fwnode in iommu_ops_from_fwnode() (Jerry Snitselaar) [RHEL-28780]
  - iommu: constify of_phandle_args in xlate (Jerry Snitselaar) [RHEL-28780]
  - iommu: constify pointer to bus_type (Jerry Snitselaar) [RHEL-28780]
  - iommu: Make iommu_report_device_fault() return void (Jerry Snitselaar) [RHEL-28780]
  - iommu: Make iopf_group_response() return void (Jerry Snitselaar) [RHEL-28780]
  - iommu: Track iopf group instead of last fault (Jerry Snitselaar) [RHEL-28780]
  - iommu: Improve iopf_queue_remove_device() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Use refcount for fault data access (Jerry Snitselaar) [RHEL-28780]
  - iommu: Refine locking for per-device fault data management (Jerry Snitselaar) [RHEL-28780]
  - iommu: Separate SVA and IOPF (Jerry Snitselaar) [RHEL-28780]
  - iommu: Make iommu_queue_iopf() more generic (Jerry Snitselaar) [RHEL-28780]
  - iommu: Prepare for separating SVA and IOPF (Jerry Snitselaar) [RHEL-28780]
  - iommu: Merge iommu_fault_event and iopf_fault (Jerry Snitselaar) [RHEL-28780]
  - iommu: Remove iommu_[un]register_device_fault_handler() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Merge iopf_device_param into iommu_fault_param (Jerry Snitselaar) [RHEL-28780]
  - iommu: Cleanup iopf data structure definitions (Jerry Snitselaar) [RHEL-28780]
  - iommu: Remove unrecoverable fault data (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Remove unrecoverable faults reporting (Jerry Snitselaar) [RHEL-28780]
  - iommu: Move iommu fault data to linux/iommu.h (Jerry Snitselaar) [RHEL-28780]
  - iommu/iova: use named kmem_cache for iova magazines (Jerry Snitselaar) [RHEL-28780]
  - iommu/iova: Reorganise some code (Jerry Snitselaar) [RHEL-28780]
  - iommu/iova: Tidy up iova_cache_get() failure (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Fix sleeping in atomic context (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Mark interrupt as managed (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce per-device domain ID to fix potential TLB aliasing issue (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused GCR3 table parameters from struct protection_domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Rearrange device flush code (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused flush pasid functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor GCR3 table helper functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor protection_domain helper functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor attaching / detaching device functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor helper function for setting / clearing GCR3 (Jerry Snitselaar) [RHEL-28780]
  - iommu: Introduce iommu_group_mutex_assert() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Rearrange GCR3 table setup code (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add support for device based TLB invalidation (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Use protection_domain.flags to check page table mode (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce per-device GCR3 table (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce struct protection_domain.pd_mode (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce get_amd_iommu_from_dev() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Enable Guest Translation before registering devices (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Pass struct iommu_dev_data to set_dte_entry() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove EXPORT_SYMBOL for perf counter related functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove redundant error check in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove duplicate function declarations from amd_iommu.h (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused APERTURE_* macros (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused IOVA_* macro (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused PPR_* macros (Jerry Snitselaar) [RHEL-28780]
  - iommu: Fix compilation without CONFIG_IOMMU_INTEL (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove scalabe mode in domain_context_clear_one() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove scalable mode context entry setup from attach_dev (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Setup scalable mode context entry in probe path (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Fix NULL domain on device release (Jerry Snitselaar) [RHEL-28780 RHEL-29357]
  - iommu: Add static iommu_ops->release_domain (Jerry Snitselaar) [RHEL-28780 RHEL-29357]
  - iommu/vt-d: Improve ITE fault handling if target device isn't present (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected (Jerry Snitselaar) [RHEL-28780]
  - PCI: Make pci_dev_is_disconnected() helper public for other drivers (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Use device rbtree in iopf reporting path (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Use rbtree to track iommu probed devices (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Merge intel_svm_bind_mm() into its caller (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove initialization for dynamically heap-allocated rcu_head (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove treatment for revoking PASIDs with pending page faults (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Use kcalloc() instead of kzalloc() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove INTEL_IOMMU_BROKEN_GFX_WA (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Convert to domain_alloc_paging() (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Pass arm_smmu_domain and arm_smmu_device to finalize (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Use the identity/blocked domain during release (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Add a global static BLOCKED domain (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Add a global static IDENTITY domain (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Check that the RID domain is S1 in SVA (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Remove arm_smmu_master->domain (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Pass smmu_domain to arm_enable/disable_ats() (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Put writing the context descriptor in the right order (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Do not change the STE twice during arm_smmu_attach_dev() (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Compute the STE only once for each master (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Hold arm_smmu_asid_lock during all of attach_dev (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Build the whole STE in arm_smmu_make_s2_domain_ste() (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Move the STE generation for S1 and S2 domains into functions (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Consolidate the STE generation for abort/bypass (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Make STE programming independent of the callers (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-qcom: Add X1E80100 MDSS compatible (Jerry Snitselaar) [RHEL-28780]
  - iommu/ipmmu-vmsa: Minor cleanups (Jerry Snitselaar) [RHEL-28780]
  - iommu/msm-iommu: don't limit the driver too much (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Don't check map/unmap pairing with HUGE_PAGES (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Fix protection fault in iommufd_test_syz_conv_iova (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Fix mock_dev_num bug (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Fix iopt_access_list_id overwrite bug (Jerry Snitselaar) [RHEL-28780]
  - iommu/sva: Fix SVA handle sharing in multi device case (Jerry Snitselaar) [RHEL-28780]
  - iommu/sva: Restore SVA handle sharing (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Do not use GFP_KERNEL under as spinlock (Jerry Snitselaar) [RHEL-28780]
  - Revert "iommu/arm-smmu: Convert to domain_alloc_paging()" (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Fix constant-out-of-range warning (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Set SSADE when attaching to a parent with dirty tracking (Jerry Snitselaar) [RHEL-28780 RHEL-29359]
  - iommu/vt-d: Add missing dirty tracking set for parent domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Wrap the dirty tracking loop to be a helper (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove domain parameter for intel_pasid_setup_dirty_tracking() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add missing device iotlb flush for parent domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Update iotlb in nested domain attach (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add missing iotlb flush for parent domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add __iommu_flush_iotlb_psi() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Track nested domains in parent (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Reject non-zero data_type if no data_len is provided (Jerry Snitselaar) [RHEL-28780]
  - iommufd/iova_bitmap: Consider page offset for the pages to be pinned (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Hugepage mock domain support (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Refactor mock_domain_read_and_clear_dirty() (Jerry Snitselaar) [RHEL-28780]
  - iommufd/iova_bitmap: Handle recording beyond the mapped pages (Jerry Snitselaar) [RHEL-28780]
  - iommufd/iova_bitmap: Switch iova_bitmap::bitmap to an u8 array (Jerry Snitselaar) [RHEL-28780]
  - iommufd/iova_bitmap: Bounds check mapped::pages access (Jerry Snitselaar) [RHEL-28780]
  - drm/tegra: Do not assume that a NULL domain means no DMA IOMMU (Jerry Snitselaar) [RHEL-28780]
  - iommu: Allow ops->default_domain to work when !CONFIG_IOMMU_DMA (Jerry Snitselaar) [RHEL-28780]
  - dma-debug: fix kernel-doc warnings (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: check alloc_size before the allocation of a new memory pool (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Check the bus type during probe (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add iotlb flush for nested domain (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add data structure for Intel VT-d stage-1 cache invalidation (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add coverage for IOMMU_HWPT_INVALIDATE ioctl (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add IOMMU_TEST_OP_MD_CHECK_IOTLB test op (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add mock_domain_cache_invalidate_user support (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add iommu_copy_struct_from_user_array helper (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add IOMMU_HWPT_INVALIDATE (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add cache_invalidate_user op (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/sva: Fix memory leak in iommu_sva_bind_device() (Jerry Snitselaar) [RHEL-28780]
  - iommu/dma: Trace bounce buffer usage when mapping buffers (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra: Use tegra_dev_iommu_get_stream_id() in the remaining places (Jerry Snitselaar) [RHEL-28780]
  - acpi: Do not return struct iommu_ops from acpi_iommu_configure_id() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Mark dev_iommu_priv_set() with a lockdep (Jerry Snitselaar) [RHEL-28780]
  - iommu: Mark dev_iommu_get() with lockdep (Jerry Snitselaar) [RHEL-28780]
  - iommu/of: Use -ENODEV consistently in of_iommu_configure() (Jerry Snitselaar) [RHEL-28780]
  - iommmu/of: Do not return struct iommu_ops from of_iommu_configure() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Remove struct iommu_ops *iommu from arch_setup_dma_ops() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Set owner token to SVA domain (Jerry Snitselaar) [RHEL-28780]
  - iommu: Support mm PASID 1:n with sva domains (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - mm: Deprecate pasid field (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - mm: Add structure to keep sva information (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - iommu: Add mm_get_enqcmd_pasid() helper function (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - iommu/vt-d: Remove mm->pasid in intel_sva_bind_mm() (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - iommu: Change kconfig around IOMMU_SVA (Jerry Snitselaar) [RHEL-28780 RHEL-29105]
  - iommu: Extend LPAE page table format to support custom allocators (Jerry Snitselaar) [RHEL-28780]
  - iommu/io-pgtable: Move Apple DART support to its own file (Jerry Snitselaar) [RHEL-28780]
  - iommu: Allow passing custom allocators to pgtable drivers (Jerry Snitselaar) [RHEL-28780]
  - iommu: Clean up open-coded ownership checks (Jerry Snitselaar) [RHEL-28780]
  - iommu: Retire bus ops (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Don't register fwnode for legacy binding (Jerry Snitselaar) [RHEL-28780]
  - iommu: Decouple iommu_domain_alloc() from bus ops (Jerry Snitselaar) [RHEL-28780]
  - iommu: Validate that devices match domains (Jerry Snitselaar) [RHEL-28780]
  - iommu: Decouple iommu_present() from bus ops (Jerry Snitselaar) [RHEL-28780]
  - iommu: Factor out some helpers (Jerry Snitselaar) [RHEL-28780]
  - iommu: Map reserved memory as cacheable if device is coherent (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd/pgtbl_v2: Invalidate updated page ranges only (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Make domain_flush_pages as global function (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Consolidate amd_iommu_domain_flush_complete() call (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor device iotlb invalidation code (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor IOMMU tlb invalidation code (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Add support to invalidate multiple guest pages (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove redundant passing of PDE bit (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove redundant domain flush from attach_device() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Rename iommu_flush_all_caches() -> amd_iommu_flush_all_caches() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Do not flush IRTE when only updating isRun and destination fields (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Set variable amd_dirty_ops to static (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Move inline helpers to header files (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove unused vcmd interfaces (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Remove unused parameter of intel_pasid_setup_pass_through() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Refactor device_to_iommu() to retrieve iommu directly (Jerry Snitselaar) [RHEL-28780]
  - iommu/virtio: Add ops->flush_iotlb_all and enable deferred flush (Jerry Snitselaar) [RHEL-28780]
  - iommu/virtio: Make use of ops->iotlb_sync_map (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Convert to domain_alloc_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Pass arm_smmu_domain to internal functions (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Implement IOMMU_DOMAIN_BLOCKED (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Convert to a global static identity domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu: Reorganize arm_smmu_domain_add_master() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Remove ARM_SMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Master cannot be NULL in arm_smmu_write_strtab_ent() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Add a type for the STE (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: disable stall for quiet_cd (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-qcom: Add QCM2290 MDSS compatible (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-qcom: Add missing GMU entry to match table (Jerry Snitselaar) [RHEL-28780]
  - dma-debug: make dma_debug_add_bus take a const pointer (Jerry Snitselaar) [RHEL-28780]
  - dma-mapping: clear dev->dma_mem to NULL after freeing it (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: reduce area lock contention for non-primary IO TLB pools (Jerry Snitselaar) [RHEL-28780]
  - dma-mapping: don't store redundant offsets (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Do not UAF during iommufd_put_object() (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Add iommufd_ctx to iommufd_put_object() (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Fix _test_mock_dirty_bitmaps() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Fix printk arg in of_iommu_get_resv_regions() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Set variable intel_dirty_ops to static (Jerry Snitselaar) [RHEL-28780]
  - iommu: Flow ERR_PTR out from __iommu_domain_alloc() (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC (Jerry Snitselaar) [RHEL-28780]
  - dma-mapping: fix dma_addressing_limited() if dma_range_map can't cover all system RAM (Jerry Snitselaar) [RHEL-28780]
  - dma-mapping: move dma_addressing_limited() out of line (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: do not free decrypted pages if dynamic (Jerry Snitselaar) [RHEL-28780]
  - s390/pci: prepare is_passed_through() for dma-iommu (Jerry Snitselaar) [RHEL-28780]
  - iommu/dma: Use a large flush queue and timeout for shadow_on_flush (Jerry Snitselaar) [RHEL-28780]
  - iommu/dma: Allow a single FQ in addition to per-CPU FQs (Jerry Snitselaar) [RHEL-28780]
  - iommu/s390: Disable deferred flush for ISM devices (Jerry Snitselaar) [RHEL-28780]
  - s390/pci: Fix reset of IOMMU software counters (Jerry Snitselaar) [RHEL-28780]
  - s390/pci: Use dma-iommu layer (Jerry Snitselaar) [RHEL-28780]
  - s390/pci: convert high_memory to physical address (Jerry Snitselaar) [RHEL-28780]
  - iommu: Allow .iotlb_sync_map to fail and handle s390's -ENOMEM return (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Convert to alloc_domain_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Use ops->blocked_domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Update the definition of the blocking domain (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Refactor spapr_tce_platform_iommu_attach_dev() (Jerry Snitselaar) [RHEL-28780]
  - powerpc/pseries/iommu: DLPAR add doesn't completely initialize pci_controller (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Fix the missing iommu_group_put() during platform domain attach (Jerry Snitselaar) [RHEL-28780]
  - powerpc: iommu: Bring back table group release_ownership() call (Jerry Snitselaar) [RHEL-28780]
  - iommu: Move IOMMU_DOMAIN_BLOCKED global statics to ops->blocked_domain (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Do not do platform domain attach atctions after probe (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Setup a default domain and remove set_platform_dma_ops (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Only build sPAPR access functions on pSeries (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Remove iommu_del_device() (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Add iommu_ops to report capabilities and allow blocking domains (Jerry Snitselaar) [RHEL-28780]
  - powerpc/iommu: Add "borrowing" iommu_table_group_ops (Jerry Snitselaar) [RHEL-28780]
  - powerpc/pci_64: Init pcibios subsys a bit later (Jerry Snitselaar) [RHEL-28780]
  - iommu: change iommu_map_sgtable to return signed values (Jerry Snitselaar) [RHEL-28780]
  - iommu: Fix return code in iommu_group_alloc_default_domain() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Do not use IOMMU_DOMAIN_DMA if CONFIG_IOMMU_DMA is not enabled (Jerry Snitselaar) [RHEL-28780]
  - iommu: Improve map/unmap sanity checks (Jerry Snitselaar) [RHEL-28780]
  - iommu: Retire map/unmap ops (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra-smmu: Update to {map,unmap}_pages (Jerry Snitselaar) [RHEL-28780]
  - iommu/ipmmu-vmsa: Convert to generic_single_device_group() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add generic_single_device_group() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Remove useless group refcounting (Jerry Snitselaar) [RHEL-28780]
  - iommu: Convert remaining simple drivers to domain_alloc_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Convert simple drivers with DOMAIN_DMA to domain_alloc_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add ops->domain_alloc_paging() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add __iommu_group_domain_alloc() (Jerry Snitselaar) [RHEL-28780]
  - iommu: Require a default_domain for all iommu drivers (Jerry Snitselaar) [RHEL-28780]
  - iommu/ipmmu: Add an IOMMU_IDENTITIY_DOMAIN (Jerry Snitselaar) [RHEL-28780]
  - iommu: Remove ops->set_platform_dma_ops() (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra-smmu: Support DMA domains in tegra (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra-smmu: Implement an IDENTITY domain (Jerry Snitselaar) [RHEL-28780]
  - iommu: Allow an IDENTITY domain as the default_domain in ARM32 (Jerry Snitselaar) [RHEL-28780]
  - iommu: Reorganize iommu_get_default_domain_type() to respect def_domain_type() (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra-gart: Remove tegra-gart (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add IOMMU_DOMAIN_PLATFORM for S390 (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add IOMMU_DOMAIN_PLATFORM (Jerry Snitselaar) [RHEL-28780]
  - iommu: Add iommu_ops->identity_domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove DMA_FQ type from domain allocation path (Jerry Snitselaar) [RHEL-28780]
  - Revert "iommu: Fix false ownership failure on AMD systems with PASID activated" (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused EXPORT_SYMBOLS (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove amd_iommu_device_info() (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove PPR support (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove iommu_v2 module (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Initialize iommu_device->max_pasids (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Enable device ATS/PASID/PRI capabilities independently (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce iommu_dev_data.flags to track device capabilities (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce iommu_dev_data.ppr (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Rename ats related variables (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Modify logic for checking GT and PPR features (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Consolidate feature detection and reporting logic (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Miscellaneous clean up when free domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Do not set amd_iommu_pgtable in pass-through mode (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Introduce helper functions for managing GCR3 table (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Refactor protection domain allocation code (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Consolidate logic to allocate protection domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Consolidate timeout pre-define to amd_iommu_type.h (Jerry Snitselaar) [RHEL-28780]
  - iommu/amd: Remove unused amd_io_pgtable.pt_root variable (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: debugfs: Support dumping a specified page table (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: debugfs: Create/remove debugfs file per {device, pasid} (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: debugfs: Dump entry pointing to huge page (Jerry Snitselaar) [RHEL-28780]
  - iommu/virtio: Add __counted_by for struct viommu_request and use struct_size() (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3-sva: Remove bond refcount (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3-sva: Remove unused iommu_sva handle (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-v3: Rename cdcfg to cd_table (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Update comment about STE liveness (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Cleanup arm_smmu_domain_finalise (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Move CD table to arm_smmu_master (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Refactor write_ctx_desc (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: move stall_enabled to the cd table (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Encapsulate ctx_desc_cfg init in alloc_cd_tables (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Replace s1_cfg with cdtab_cfg (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-v3: Move ctx_desc out of s1_cfg (Jerry Snitselaar) [RHEL-12322 RHEL-28780]
  - iommu/arm-smmu-qcom: Add SM7150 SMMUv2 (Jerry Snitselaar) [RHEL-28780]
  - iommu/arm-smmu-qcom: Add SDM670 MDSS compatible (Jerry Snitselaar) [RHEL-28780]
  - iommu/tegra-smmu: Drop unnecessary error check for for debugfs_create_dir() (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Organize the mock domain alloc functions closer to Joerg's tree (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Fix page-size check in iommufd_test_dirty() (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add iopt_area_alloc() (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Fix missing update of domains_itree after splitting iopt_area (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Disallow read-only mappings to nest parent domain (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add nested domain allocation (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Set the nested domain to a device (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Make domain attach helpers to be extern (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add helper to setup pasid nested translation (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add helper for nested domain allocation (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Extend dmar_domain to support nested domain (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Add data structure for Intel VT-d stage-1 domain allocation (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Enhance capability check for nested parent domain allocation (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add coverage for IOMMU_HWPT_ALLOC with nested HWPTs (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add nested domain allocation for mock domain (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add iommu_copy_struct_from_user helper (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add a nested HW pagetable object (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Pass in parent domain with user_data to domain_alloc_user op (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Share iommufd_hwpt_alloc with IOMMUFD_OBJ_HWPT_NESTED (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Derive iommufd_hwpt_paging from iommufd_hw_pagetable (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/device: Wrap IOMMUFD_OBJ_HWPT_PAGING-only configurations (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Rename IOMMUFD_OBJ_HW_PAGETABLE to IOMMUFD_OBJ_HWPT_PAGING (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Only enforce cache coherency in iommufd_hw_pagetable_alloc (Jerry Snitselaar) [RHEL-28780]
  - iommufd/selftest: Test IOMMU_HWPT_GET_DIRTY_BITMAP_NO_CLEAR flag (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Test out_capabilities in IOMMU_GET_HW_INFO (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Test IOMMU_HWPT_GET_DIRTY_BITMAP (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Test IOMMU_HWPT_SET_DIRTY_TRACKING (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Test IOMMU_HWPT_ALLOC_DIRTY_TRACKING (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Expand mock_domain with dev_flags (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/vt-d: Access/Dirty bit support for SS domains (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/amd: Access/Dirty bit support in IOPTEs (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu/amd: Add domain_alloc_user based domain allocation (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add a flag to skip clearing of IOPTE dirty (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Add capabilities to IOMMU_GET_HW_INFO (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add IOMMU_HWPT_GET_DIRTY_BITMAP (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add IOMMU_HWPT_SET_DIRTY_TRACKING (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Add a flag to enforce dirty tracking on attach (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add iommu_domain ops for dirty tracking (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Correct IOMMU_HWPT_ALLOC_NEST_PARENT description (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Rework TEST_LENGTH to test min_size explicitly (Jerry Snitselaar) [RHEL-28780]
  - iommu/vt-d: Add domain_alloc_user op (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Add domain_alloc_user() support in iommu mock (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Support allocating nested parent domain (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Flow user flags for domain allocation to domain_alloc_user() (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd: Use the domain_alloc_user() op for domain allocation (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommu: Add new iommu op to create domains owned by userspace (Jerry Snitselaar) [RHEL-12083 RHEL-28780]
  - iommufd/selftest: Iterate idev_ids in mock_domain's alloc_hwpt test (Jerry Snitselaar) [RHEL-28780]
  - iommufd: Fix spelling errors in comments (Jerry Snitselaar) [RHEL-28780]
  - dma-debug: Fix a typo in a debugging eye-catcher (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: rewrite comment explaining why the source is preserved on DMA_FROM_DEVICE (Jerry Snitselaar) [RHEL-28780]
  - net: fec: use dma_alloc_noncoherent for data cache enabled coldfire (Jerry Snitselaar) [RHEL-28780]
  - dma-direct: warn when coherent allocations aren't supported (Jerry Snitselaar) [RHEL-28780]
  - dma-direct: simplify the use atomic pool logic in dma_direct_alloc (Jerry Snitselaar) [RHEL-28780]
  - dma-direct: add a CONFIG_ARCH_HAS_DMA_ALLOC symbol (Jerry Snitselaar) [RHEL-28780]
  - dma-direct: add dependencies to CONFIG_DMA_GLOBAL_POOL (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: do not try to allocate a TLB bigger than MAX_ORDER pages (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: fix the check whether a device has used software IO TLB (Jerry Snitselaar) [RHEL-28780]
  - dma-contiguous: fix the Kconfig entry for CONFIG_DMA_NUMA_CMA (Jerry Snitselaar) [RHEL-28780]
  - iommu: Explicitly include correct DT includes (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: move slot allocation explanation comment where it belongs (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: search the software IO TLB only if the device makes use of it (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: allocate a new memory pool when existing pools are full (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: determine potential physical address limit (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: if swiotlb is full, fall back to a transient memory pool (Jerry Snitselaar) [RHEL-28780]
  - redhat/configs: add file for SWIOTLB_DYNAMIC (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: add a flag whether SWIOTLB is allowed to grow (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: separate memory pool data from other allocator data (Jerry Snitselaar) [RHEL-28780]
  - swiotlb: add documentation and rename swiotlb_do_find_slots() (Jerry Snitselaar) [RHEL-28780]
  - redhat/configs: Add CONFIG_DMA_NUMA_CMA and remove CONFIG_DMA_PERNUMA_CMA (Jerry Snitselaar) [RHEL-28780]
  - dma-contiguous: support numa CMA for specified node (Jerry Snitselaar) [RHEL-28780]
  - dma-contiguous: support per-numa CMA for all architectures (Jerry Snitselaar) [RHEL-28780]
  - of: Fix "dma-ranges" handling for bus controllers (Jerry Snitselaar) [RHEL-28780]
  - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30492] {CVE-2023-52626}
  - sched/numa: Fix mm numa_scan_seq based unconditional scan (Phil Auld) [RHEL-10049]
  - sched/numa: Complete scanning of inactive VMAs when there is no alternative (Phil Auld) [RHEL-10049]
  - sched/numa: Complete scanning of partial VMAs regardless of PID activity (Phil Auld) [RHEL-10049]
  - sched/numa: Move up the access pid reset logic (Phil Auld) [RHEL-10049]
  - sched/numa: Trace decisions related to skipping VMAs (Phil Auld) [RHEL-10049]
  - sched/numa: Rename vma_numab_state::access_pids[] => ::pids_active[], ::next_pid_reset => ::pids_active_reset (Phil Auld) [RHEL-10049]
  - sched/numa: Document vma_numab_state fields (Phil Auld) [RHEL-10049]
  - sched/numa: use hash_32 to mix up PIDs accessing VMA (Phil Auld) [RHEL-10049]
  - sched/numa: implement access PID reset logic (Phil Auld) [RHEL-10049]
  - selftests/livepatch: fix and refactor new dmesg message code (Ryan Sullivan) [RHEL-31518]
  - docs: automarkup: linkify git revs (Ryan Sullivan) [RHEL-31518]
  - livepatch: Fix missing newline character in klp_resolve_symbols() (Ryan Sullivan) [RHEL-31518]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-461.el9]
changelog:
  - powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE (Mamatha Inamdar) [RHEL-39788] {CVE-2024-36926}
  - thermal/debugfs: Fix two locking issues with thermal zone debug (David Arcari) [RHEL-40008] {CVE-2024-36961}
  - thermal/debugfs: Free all thermal zone debug memory on zone removal (David Arcari) [RHEL-39875] {CVE-2024-36956}
  - thermal/debugfs: Prevent use-after-free from occurring after cdev removal (David Arcari) [RHEL-39774] {CVE-2024-36932}
  - s390/qeth: Fix typo 'weed' in comment (Tobias Huschle) [RHEL-23681]
  - s390/qeth: replace deprecated strncpy with strscpy (Tobias Huschle) [RHEL-23681]
  - s390/ctcm: replace deprecated strncpy with strscpy (Tobias Huschle) [RHEL-23681]
  - s390/qeth: Fix kernel panic after setting hsuid (Tobias Huschle) [RHEL-23681]
  - s390/ism: Properly fix receive message buffer allocation (Tobias Huschle) [RHEL-23681]
  - s390/qeth: handle deferred cc1 (Tobias Huschle) [RHEL-23681]
  - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Tobias Huschle) [RHEL-23681]
  - s390/ism: ism driver implies smc protocol (Tobias Huschle) [RHEL-23681]
  - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-23682]
  - s390/qdio: handle deferred cc1 (Tobias Huschle) [RHEL-23680]
  - scsi: zfcp: Replace strlcpy() with strscpy() (Tobias Huschle) [RHEL-23680]
  - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Tobias Huschle) [RHEL-23680]
  - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37422] {CVE-2024-35960}
  - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36922] {CVE-2024-35835}
  - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37093] {CVE-2023-52667}
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38226] {CVE-2023-52878}
  - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-36684]
  - net: hns3: fix kernel crash when 1588 is received on HIP08 devices (Ken Cox) [RHEL-33213] {CVE-2024-26881}
  - fsverity: use register_sysctl_init() to avoid kmemleak warning (Andrey Albershteyn) [RHEL-36258]
  - ethtool: netlink: Add missing ethnl_ops_begin/complete (Ivan Vecera) [RHEL-36217]
  - ethtool: reformat kerneldoc for struct ethtool_fec_stats (Ivan Vecera) [RHEL-36217]
  - ethtool: reformat kerneldoc for struct ethtool_link_settings (Ivan Vecera) [RHEL-36217]
  - Documentation: networking: add missing PLCA messages from the message list (Ivan Vecera) [RHEL-36217]
  - net: partial revert of the "Make timestamping selectable: series (Ivan Vecera) [RHEL-36217]
  - net: ethtool: ts: Let the active time stamping layer be selectable (Ivan Vecera) [RHEL-36217]
  - net: ethtool: ts: Update GET_TS to reply the current selected timestamp (Ivan Vecera) [RHEL-36217]
  - net: Change the API of PHY default timestamp to MAC (Ivan Vecera) [RHEL-36217]
  - net: Replace hwtstamp_source by timestamping layer (Ivan Vecera) [RHEL-36217]
  - net: ethtool: Add a command to list available time stamping layers (Ivan Vecera) [RHEL-36217]
  - net: ethtool: Add a command to expose current time stamping layer (Ivan Vecera) [RHEL-36217]
  - net_tstamp: Add TIMESTAMPING SOFTWARE and HARDWARE mask (Ivan Vecera) [RHEL-36217]
  - net: phy: micrel: fix ts_info value in case of no phc (Ivan Vecera) [RHEL-36217]
  - net: Make dev_set_hwtstamp_phylib accessible (Ivan Vecera) [RHEL-36217]
  - net: macb: Convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Ivan Vecera) [RHEL-36217]
  - net: ethtool: Refactor identical get_ts_info implementations. (Ivan Vecera) [RHEL-36217]
  - net: phy: Remove the call to phy_mii_ioctl in phy_hwstamp_get/set (Ivan Vecera) [RHEL-36217]
  - net: Convert PHYs hwtstamp callback to use kernel_hwtstamp_config (Ivan Vecera) [RHEL-36217]
  - net: omit ndo_hwtstamp_get() call when possible in dev_set_hwtstamp_phylib() (Ivan Vecera) [RHEL-36217]
  - net: remove phy_has_hwtstamp() -> phy_mii_ioctl() decision from converted drivers (Ivan Vecera) [RHEL-36217]
  - net: fec: delete fec_ptp_disable_hwts() (Ivan Vecera) [RHEL-36217]
  - net: fec: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Ivan Vecera) [RHEL-36217]
  - net: bonding: convert to ndo_hwtstamp_get() / ndo_hwtstamp_set() (Ivan Vecera) [RHEL-36217]
  - net: macvlan: convert to ndo_hwtstamp_get() / ndo_hwtstamp_set() (Ivan Vecera) [RHEL-36217]
  - net: vlan: convert to ndo_hwtstamp_get() / ndo_hwtstamp_set() (Ivan Vecera) [RHEL-36217]
  - net: ethtool: Fix documentation of ethtool_sprintf() (Ivan Vecera) [RHEL-36217]
  - Revert "ethtool: Fix mod state of verbose no_mask bitset" (Ivan Vecera) [RHEL-36217]
  - ethtool: Fix mod state of verbose no_mask bitset (Ivan Vecera) [RHEL-36217]
  - ipv6: also use netdev_hold() in ip6_route_check_nh() (Ivan Vecera) [RHEL-36217]
  - net: create device lookup API with reference tracking (Ivan Vecera) [RHEL-36217]
  - net_tstamp: add SOF_TIMESTAMPING_OPT_ID_TCP (Ivan Vecera) [RHEL-36217]
  - fbcon: always restore the old font data in fbcon_do_set_font() (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Fix incorrect printed function name in fbcon_prepare_logo() (Jocelyn Falempe) [RHEL-23295]
  - hid/picolcd_fb: Set FBINFO_VIRTFB flag (Jocelyn Falempe) [RHEL-23295]
  - fbdev: remove I2C_CLASS_DDC support (Jocelyn Falempe) [RHEL-23295]
  - fbdev/intelfb: Remove driver (Jocelyn Falempe) [RHEL-23295]
  - video/logo: use %u format specifier for unsigned int values (Jocelyn Falempe) [RHEL-23295]
  - video/sticore: Store ROM device in STI struct (Jocelyn Falempe) [RHEL-23295]
  - fbdev: flush deferred IO before closing (Jocelyn Falempe) [RHEL-23295]
  - fbdev: flush deferred work in fb_deferred_io_fsync() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: amba-clcd: Delete the old CLCD driver (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove support for Carillo Ranch driver (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove default file-I/O implementations (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Warn on incorrect framebuffer access (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Move default fb_mmap code into helper function (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Push pgprot_decrypted() into mmap implementations (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Rename FB_SYS_FOPS token to FB_SYSMEM_FOPS (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cyber2000fb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/wm8505fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vt8500lcdfb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/clps711x-fb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/ps3fb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/au1200fb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/udlfb: Select correct helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/smscufx: Select correct helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sh_mobile_lcdcfb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - fbdev/arcfb: Use generator macros for deferred I/O (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vfb: Initialize fb_ops with fbdev macros (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Use dev_err_probe (Jocelyn Falempe) [RHEL-23295]
  - fbdev: offb: Simplify offb_init_fb() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: stifb: Make the STI next font pointer a 32-bit signed offset (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vt8623fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/viafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vga16fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vermilionfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/tridentfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/tgafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/tdfxfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sunxvr500: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/stifb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sm712fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sm501fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sisfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/savagefb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sa1100fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/s3fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/s1d13xxxfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/rivafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/radeon: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pvr2fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pm3fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pm2fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/nvidiafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/neofb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/matroxfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/intelfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/imsttfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/i810fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/hpfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/hitfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/hgafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/gbefb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/ep93xx-fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/dnfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cyber2000fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/controlfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cobalt-lcd: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cirrusfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/au1100fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/atyfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/atafb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/arkfb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/amifb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/amba-clcd: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/68328fb: Initialize fb_ops to fbdev I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Provide I/O-memory helpers as module (Jocelyn Falempe) [RHEL-23295]
  - hid/picolcd: Use fb_ops helpers for deferred I/O (Jocelyn Falempe) [RHEL-23295]
  - console: fix up ARM screen_info reference (Jocelyn Falempe) [RHEL-23295]
  - vga16fb: drop powerpc support (Jocelyn Falempe) [RHEL-23295]
  - dummycon: limit Arm console size hack to footbridge (Jocelyn Falempe) [RHEL-23295]
  - fbdev: core: syscopyarea: fix sloppy typing (Jocelyn Falempe) [RHEL-23295]
  - fbdev: core: cfbcopyarea: fix sloppy typing (Jocelyn Falempe) [RHEL-23295]
  - fbdev: uvesafb: Remove uvesafb_exec() prototype from include/video/uvesafb.h (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Disable PWM on shutdown, suspend and remove (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Replace fb_pgprotect() with pgprot_framebuffer() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Avoid file argument in fb_pgprotect() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: mmp: Annotate struct mmp_path with __counted_by (Jocelyn Falempe) [RHEL-23295]
  - drm: fix up fbdev Kconfig defaults (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Update fbdev source file paths (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Clean up include statements in fbmem.c (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Remove empty internal helpers from fb_logo.c (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Move logo functions into separate source file (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Unexport logo helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Fix style of code for boot-up logo (Jocelyn Falempe) [RHEL-23295]
  - fbdev/hyperv_fb: Use fb_ops helpers for deferred I/O (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Add Kconfig macro FB_IOMEM_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - fbdev: ssd1307fb: Use bool for ssd1307fb_deviceinfo flags (Jocelyn Falempe) [RHEL-23295]
  - fbdev: mx3fb: Remove the driver (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Use list_for_each_entry() helper (Jocelyn Falempe) [RHEL-23295]
  - fbdev/tcx: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/p9100: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/leo: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cg3: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/cg14: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/bw2: Use initializer macro for struct fb_ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sbus: Add initializer macros and Kconfig tokens for SBUS support (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sbus: Build sbuslib.o if CONFIG_FB_SBUS has been selected (Jocelyn Falempe) [RHEL-23295]
  - hid/picolcd: Remove flag FBINFO_FLAG_DEFAULT from fbdev driver (Jocelyn Falempe) [RHEL-23295]
  - backlight: led_bl: Remove redundant of_match_ptr() (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Drop ret variable in brightness change function (Jocelyn Falempe) [RHEL-23295]
  - fbdev: kyro: Remove unused declarations (Jocelyn Falempe) [RHEL-23295]
  - fbdev/xilinxfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vesafb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/valkyriefb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/uvesafb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sunxvr2500: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sunxvr1000: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sstfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/simplefb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/sh7760fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/s3cfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/q40fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pxafb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pxa168fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pmagb-b-fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pmag-ba-fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/pmag-aa-fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/platinumfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/offb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/ocfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/mx3fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/mb862xxfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/maxinefb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/macfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/kyro: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/imxfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/i740fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/gxt4500: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/grvga: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/goldfishfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/g364fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/fsl-diu-fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/fm2fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/efifb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/da8xx-fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/chipsfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/carminefb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/aty128fb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/atmel_lcdfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/asiliantfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev/acornfb: Use fbdev I/O helpers (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Make fbcon_registered_fb and fbcon_num_registered_fb static (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Align deferred I/O with naming of helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Use _DMAMEM_ infix for DMA-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Use _SYSMEM_ infix for system-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Use _IOMEM_ infix for I/O-memory helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Harmonize some comments in <linux/fb.h> (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove FB_DEFAULT_SYS_OPS (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove FBINFO_DEFAULT and FBINFO_FLAG_DEFAULT (Jocelyn Falempe) [RHEL-23295]
  - fbdev: ssd1307fb: Print the PWM's label instead of its number (Jocelyn Falempe) [RHEL-23295]
  - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (Jocelyn Falempe) [RHEL-23295]
  - video: logo: LOGO should depend on FB_CORE i.s.o. FB (Jocelyn Falempe) [RHEL-23295]
  - Revert "fbcon: Use kzalloc() in fbcon_prepare_logo()" (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Catch errors when changing brightness (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Initialize PWM state on first brightness change (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Add fb_ops init macros for framebuffers in DMA-able memory (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Document that framebuffer_alloc() returns zero'ed data (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove FBINFO_FLAG_DEFAULT from framebuffer_alloc()'ed structs (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove FBINFO_FLAG_DEFAULT from kzalloc()'ed structs (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Split frame buffer support in FB and FB_CORE symbols (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Move core fbdev symbols to a separate Kconfig file (Jocelyn Falempe) [RHEL-23295]
  - video: Add auxiliary display drivers to Graphics support menu (Jocelyn Falempe) [RHEL-23295]
  - fbcon: remove unused display (p) from fbcon_redraw() (Jocelyn Falempe) [RHEL-23295]
  - vgacon: cache vc_cell_height in vgacon_cursor() (Jocelyn Falempe) [RHEL-23295]
  - vgacon: let vgacon_doresize() return void (Jocelyn Falempe) [RHEL-23295]
  - vgacon: remove unused xpos from vgacon_set_cursor_size() (Jocelyn Falempe) [RHEL-23295]
  - vgacon: remove unneeded forward declarations (Jocelyn Falempe) [RHEL-23295]
  - vgacon: switch vgacon_scrolldelta() and vgacon_restore_screen() (Jocelyn Falempe) [RHEL-23295]
  - fbdev/xen-fbfront: Select FB_SYS_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - fbdev/ssd1307fb: Generate deferred I/O ops (Jocelyn Falempe) [RHEL-23295]
  - fbdev/ssd1307fb: Select FB_SYS_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - fbdev/metronomefb: Select FB_SYS_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - fbdev/hecubafb: Select FB_SYS_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - fbdev/broadsheetfb: Select FB_SYS_HELPERS_DEFERRED (Jocelyn Falempe) [RHEL-23295]
  - redhat/configs: Enable FB_DEVICE (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Make support for userspace interfaces configurable (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Rework fb init code (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Move file-I/O code into separate file (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Move procfs code to separate file (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Add fb_device_{create,destroy}() (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Move framebuffer and backlight helpers into separate files (Jocelyn Falempe) [RHEL-23295]
  - fbdev/core: Pass Linux device to pm_vt_switch_*() functions (Jocelyn Falempe) [RHEL-23295]
  - backlight/gpio_backlight: Rename field 'fbdev' to 'dev' (Jocelyn Falempe) [RHEL-23295]
  - backlight/gpio_backlight: Compare against struct fb_info.device (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Rename fb_mem*() helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Move framebuffer I/O helpers into <asm/fb.h> (Jocelyn Falempe) [RHEL-23295]
  - arch/x86: Include <asm/fb.h> in fbdev source file (Jocelyn Falempe) [RHEL-23295]
  - arch/x86: Implement <asm/fb.h> with generic helpers (Jocelyn Falempe) [RHEL-23295]
  - arch/powerpc: Implement <asm/fb.h> with generic helpers (Jocelyn Falempe) [RHEL-23295]
  - arch/arm64: Implement <asm/fb.h> with generic helpers (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Prepare generic architecture helpers (Jocelyn Falempe) [RHEL-23295]
  - backlight: led_bl: Take led_access lock when required (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fix potential OOB read in fast_imageblit() (Jocelyn Falempe) [RHEL-23295]
  - video: backlight: lp855x: Get PWM for PWM mode during probe (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Add Kconfig options to select different fb_ops helpers (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Fix null-ptr-deref in soft_cursor (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Remove unneeded checks for valid GPIOs (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbmem: mark get_fb_unmapped_area() static (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Include <linux/fb.h> instead of <asm/fb.h> (Jocelyn Falempe) [RHEL-23295]
  - fbdev/matrox: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-23295]
  - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Validate info->screen_{base, buffer} in fb_ops implementations (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Don't re-validate info->state in fb_ops implementations (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Use screen_buffer in fb_sys_{read,write}() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: vga16fb: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - fbdev: vesafb: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - fbdev: simplefb: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - fbdev: offb: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - fbdev: efifb: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - video: Move HP PARISC STI core code to shared location (Jocelyn Falempe) [RHEL-23295]
  - video/aperture: Provide a VGA helper for gma500 and internal use (Jocelyn Falempe) [RHEL-23295]
  - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (Jocelyn Falempe) [RHEL-23295]
  - video/aperture: Fix typos in comments (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Mark OF related data as maybe unused (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - backlight: led_bl: Convert to platform remove callback returning void (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Use of_property_read_bool() for boolean properties (Jocelyn Falempe) [RHEL-23295]
  - drivers: video: logo: add SPDX comment, remove GPL notice in pnmtologo.c (Jocelyn Falempe) [RHEL-23295]
  - drivers: video: logo: fix code style issues in pnmtologo.c (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Make fb_modesetting_disabled() static inline (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release() (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Don't rely on a disabled PWM emiting inactive state (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Configure pwm only once per backlight toggle (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Drop support for legacy PWM probing (Jocelyn Falempe) [RHEL-23295]
  - backlight: backlight: Fix doc for backlight_device_get_by_name (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Fix invalid page access after closing deferred I/O devices (Jocelyn Falempe) [RHEL-23295]
  - fbdev: remove w100fb driver (Jocelyn Falempe) [RHEL-23295]
  - fbdev: remove tmiofb driver (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove unused struct fb_deferred_io .first_io field (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbmon: fix function name in kernel-doc (Jocelyn Falempe) [RHEL-23295]
  - fbdev: remove s3c2410 framebuffer (Jocelyn Falempe) [RHEL-23295]
  - drm/fbdev: Remove aperture handling and FBINFO_MISC_FIRMWARE (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vga16fb: Do not use struct fb_info.apertures (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vesafb: Do not use struct fb_info.apertures (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vesafb: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-23295]
  - fbdev/simplefb: Do not use struct fb_info.apertures (Jocelyn Falempe) [RHEL-23295]
  - fbdev/offb: Do not use struct fb_info.apertures (Jocelyn Falempe) [RHEL-23295]
  - fbdev/offb: Allocate struct offb_par with framebuffer_alloc() (Jocelyn Falempe) [RHEL-23295]
  - fbdev/efifb: Do not use struct fb_info.apertures (Jocelyn Falempe) [RHEL-23295]
  - fbdev/efifb: Add struct efifb_par for driver data (Jocelyn Falempe) [RHEL-23295]
  - Revert "fbcon: don't lose the console font across generic->chip driver switch" (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-23295]
  - fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB (Jocelyn Falempe) [RHEL-23295]
  - fbdev: make offb driver tristate (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Jocelyn Falempe) [RHEL-23295]
  - fbdev: uvesafb: don't build on UML (Jocelyn Falempe) [RHEL-23295]
  - fbdev: matroxfb: Convert to i2c's .probe_new() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: omapfb: connector-analog-tv: remove support for platform data (Jocelyn Falempe) [RHEL-23295]
  - fbdev: omapfb: panel-dpi: remove support for platform data (Jocelyn Falempe) [RHEL-23295]
  - fbdev: omapfb: panel-sony-acx565akm: remove support for platform data (Jocelyn Falempe) [RHEL-23295]
  - fbdev: ssd1307fb: Drop duplicate NULL checks for PWM APIs (Jocelyn Falempe) [RHEL-23295]
  - fbdev: ssd1307fb: Drop optional dependency (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Convert to i2c's .probe_new() (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Use kzalloc() in fbcon_prepare_logo() (Jocelyn Falempe) [RHEL-23295]
  - Revert "drm/fb-helper: Schedule deferred-I/O worker after writing to framebuffer" (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Add support for the nomodeset kernel parameter (Jocelyn Falempe) [RHEL-23295]
  - drm/fb-helper: Schedule deferred-I/O worker after writing to framebuffer (Jocelyn Falempe) [RHEL-23295]
  - fbdev: MIPS supports iomem addresses (Jocelyn Falempe) [RHEL-23295]
  - fbdev: vga16fb: Add missing MODULE_DEVICE_TABLE() entry (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbcon: Properly revert changes when vc_resize() failed (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Move fbdev drivers from strlcpy to strscpy (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbcon: Destroy mutex on freeing struct fb_info (Jocelyn Falempe) [RHEL-23295]
  - fbdev: ssd1307fb: Fix repeated words in comments (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: offb: Include missing linux/platform_device.h (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Make registered_fb[] private to fbmem.c (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vga16fb: Auto-generate module init/exit code (Jocelyn Falempe) [RHEL-23295]
  - fbdev/vga16fb: Create EGA/VGA devices in sysfb code (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Switch to atomic PWM API (Jocelyn Falempe) [RHEL-23295]
  - Revert "drivers/video/backlight/platform_lcd.c: add support for device tree based probe" (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Use fbcon_info_from_console() in fbcon_modechange_possible() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: simplefb: Check before clk_put() not needed (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Fix accelerated fbdev scrolling while logo is still shown (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Remove obsolete reference to initmem_freed (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: radeon: Fix spelling typo in comment (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Prevent possible use-after-free in fb_release() (Jocelyn Falempe) [RHEL-23295]
  - Revert "fbdev: Prevent probing generic drivers if a FB is already registered" (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Rename pagelist to pagereflist for deferred I/O (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Refactor implementation of page_mkwrite (Jocelyn Falempe) [RHEL-23295]
  - fbcon: replace snprintf in show functions with sysfs_emit (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: aty/matrox/...: Prepare cleanup of powerpc's asm/prom.h (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Fix cfb_imageblit() for arbitrary image widths (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Fix sys_imageblit() for arbitrary image widths (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: offb: fix warning comparing pointer to 0 (Jocelyn Falempe) [RHEL-23295]
  - backlight: backlight: Slighly simplify devm_of_find_backlight() (Jocelyn Falempe) [RHEL-23295]
  - drm/exynos: fimd: add BGR support for exynos4/5 (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Improve performance of cfb_imageblit() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Remove trailing whitespaces from cfbimgblt.c (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Improve performance of sys_imageblit() (Jocelyn Falempe) [RHEL-23295]
  - fbdev: Improve performance of sys_fillrect() (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Avoid 'cap' set but not used warning (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Avoid open coded arithmetic in memory allocation (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbmem: Fix the implicit type casting (Jocelyn Falempe) [RHEL-23295]
  - redhat/configs: disable FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION (Jocelyn Falempe) [RHEL-23295]
  - fbcon: Add option to enable legacy hardware acceleration (Jocelyn Falempe) [RHEL-23295]
  - Revert "fbcon: Disable accelerated scrolling" (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() (Jocelyn Falempe) [RHEL-23295]
  - video: fbmem: use swap() to make code cleaner in fb_rotate_logo() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Make use of the helper function dev_err_probe() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen (Jocelyn Falempe) [RHEL-23295]
  - video: vga16fb: Fix logic that checks for the display standard (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Add support ACPI enumeration (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Add dev helper variable to lp855x_probe() (Jocelyn Falempe) [RHEL-23295]
  - backlight: lp855x: Move device_config setting out of lp855x_configure() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: replace snprintf in show functions with sysfs_emit (Jocelyn Falempe) [RHEL-23295]
  - fbdev: fbmem: Fix double free of 'fb_info->pixmap.addr' (Jocelyn Falempe) [RHEL-23295]
  - backlight: Propagate errors from get_brightness() (Jocelyn Falempe) [RHEL-23295]
  - video: backlight: Drop maximum brightness override for brightness zero (Jocelyn Falempe) [RHEL-23295]
  - fbmem: don't allow too huge resolutions (Jocelyn Falempe) [RHEL-23295]
  - backlight: pwm_bl: Improve bootloader/kernel device handover (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Cache address ranges (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Optimize screen updates (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Extract ssd1307fb_set_{col,page}_range() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Simplify ssd1307fb_update_display() (Jocelyn Falempe) [RHEL-23295]
  - video: fbdev: ssd1307fb: Propagate errors via ssd1307fb_update_display() (Jocelyn Falempe) [RHEL-23295]
  - fbmem: Convert from atomic_t to refcount_t on fb_info->count (Jocelyn Falempe) [RHEL-23295]
  - scsi: lpfc: Copyright updates for 14.4.0.1 patches (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Update lpfc version to 14.4.0.1 (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Define types in a union for generic void *context3 ptr (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Define lpfc_dmabuf type for ctx_buf ptr (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Define lpfc_nodelist type for ctx_ndlp ptr (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Use a dedicated lock for ras_fwlog state (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Avoid -Wstringop-overflow warning (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Remove IRQF_ONESHOT flag from threaded IRQ handling (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Remove unnecessary log message in queuecommand path (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Correct size for cmdwqe/rspwqe for memset() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Correct size for wqe for memset() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Replace deprecated strncpy() with strscpy() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Copyright updates for 14.4.0.0 patches (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Update lpfc version to 14.4.0.0 (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Update lpfc version to 14.2.0.17 (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Move determination of vmid_flag after VMID reinitialization completes (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Reinitialize an NPIV's VMID data structures after FDISC (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Change VMID driver load time parameters to read only (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Change lpfc_vport load_flag member into a bitmask (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Change lpfc_vport fc_flag member into a bitmask (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Protect vport fc_nodes list with an explicit spin lock (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Change nlp state statistic counters into atomic_t (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Move handling of reset congestion statistics events (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Save FPIN frequency statistics upon receipt of peer cgn notifications (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Fix failure to delete vports when discovery is in progress (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Remove D_ID swap log message from trace event logger (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Use sg_dma_len() API to get struct scatterlist's length (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Remove reftag check in DIF paths (Dick Kennedy) [RHEL-24508]
  - lpfc: Use the proper SCSI midlayer interfaces for PI (Dick Kennedy) [RHEL-24508]
  - lpfc: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Fix reftag generation sizing errors (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Dick Kennedy) [RHEL-24508]
  - scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() (Dick Kennedy) [RHEL-24508]
  - x86/coco: Use CC_VENDOR_INTEL for Hyper-V/TDX (Vitaly Kuznetsov) [RHEL-38910]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-462.el9]
changelog:
  - nvmet: fix ns enable/disable possible hang (Maurizio Lombardi) [RHEL-37676]
  - nvme: fix reconnection fail due to reserved tag allocation (Maurizio Lombardi) [RHEL-36896] {CVE-2024-27435}
  - Revert "xen/x2apic: enable x2apic mode when supported for HVM" (Vitaly Kuznetsov) [RHEL-34602]
  - ext4: dax - remove tech preview tag (Bill O'Donnell) [RHEL-39889]
  - redhat: remove the merge subtrees script (Derek Barbosa)
  - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa)
  - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa)
  - redhat: redhat/Makefile: remove dist-maint-update target (Derek Barbosa)
  - nfp: flower: handle acti_netdevs allocation failure (Ken Cox) [RHEL-35158] {CVE-2024-27046}
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35816] {CVE-2024-26974}
  - crypto: qat - specify firmware files for 402xx (Vladis Dronov) [RHEL-35816]
  - crypto: qat - validate slices count returned by FW (Vladis Dronov) [RHEL-35816]
  - crypto: qat - improve error logging to be consistent across features (Vladis Dronov) [RHEL-35816]
  - crypto: qat - improve error message in adf_get_arbiter_mapping() (Vladis Dronov) [RHEL-35816]
  - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-24063]
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid" (Vladis Dronov) [RHEL-35816]
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings (Vladis Dronov) [RHEL-35816]
  - crypto: qat - implement interface for live migration (Vladis Dronov) [RHEL-35816]
  - crypto: qat - add interface for live migration (Vladis Dronov) [RHEL-35816]
  - crypto: qat - add bank save and restore flows (Vladis Dronov) [RHEL-35816]
  - crypto: qat - expand CSR operations for QAT GEN4 devices (Vladis Dronov) [RHEL-35816]
  - crypto: qat - rename get_sla_arr_of_type() (Vladis Dronov) [RHEL-35816]
  - crypto: qat - relocate CSR access code (Vladis Dronov) [RHEL-35816]
  - crypto: qat - move PFVF compat checker to a function (Vladis Dronov) [RHEL-35816]
  - crypto: qat - relocate and rename 4xxx PF2VM definitions (Vladis Dronov) [RHEL-35816]
  - crypto: qat - adf_get_etr_base() helper (Vladis Dronov) [RHEL-35816]
  - powerpc/eeh: Permanently disable the removed device (Mamatha Inamdar) [RHEL-35642]
  - powerpc/eeh: Use a goto for recovery failures (Mamatha Inamdar) [RHEL-35642]
  - powerpc/eeh: Small refactor of eeh_handle_normal_event() (Mamatha Inamdar) [RHEL-35642]
  - REDHAT: Fix values in Makefile being redefined (Lucas Zampieri)
  - selftests/net/lib: no need to record ns name if it already exist (Ivan Vecera) [RHEL-36219]
  - netlink: specs: Add missing bridge linkinfo attrs (Ivan Vecera) [RHEL-36219]
  - net: bridge: switchdev: Ensure deferred event delivery on unoffload (Ivan Vecera) [RHEL-36219]
  - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Fix bridge locked port test flakiness (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Suppress grep warnings (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Fix bridge MDB test flakiness (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Fix layer 2 miss test flakiness (Ivan Vecera) [RHEL-36219]
  - selftests: net: Fix bridge backup port test flakiness (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: List helper scripts in TEST_FILES Makefile variable (Ivan Vecera) [RHEL-36219]
  - selftests: net: Add missing matchall classifier (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: fix disabled snooping after long uptime (Ivan Vecera) [RHEL-36219]
  - selftests/net/lib: update busywait timeout value (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Remove executable bits from lib.sh (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: Avoid failures to source net/lib.sh (Ivan Vecera) [RHEL-36219]
  - bridge: cfm: fix enum typo in br_cc_ccm_tx_parse (Ivan Vecera) [RHEL-36219]
  - selftests: vxlan_mdb: Add MDB bulk deletion test (Ivan Vecera) [RHEL-36219]
  - selftests: bridge_mdb: Add MDB bulk deletion test (Ivan Vecera) [RHEL-36219]
  - vxlan: mdb: Add MDB bulk deletion support (Ivan Vecera) [RHEL-36219]
  - bridge: mdb: Add MDB bulk deletion support (Ivan Vecera) [RHEL-36219]
  - bridge: add MDB state mask uAPI attribute (Ivan Vecera) [RHEL-36219]
  - selftests/net: convert test_bridge_neigh_suppress.sh to run it in unique namespace (Ivan Vecera) [RHEL-36219]
  - selftests/net: convert test_bridge_backup_port.sh to run it in unique namespace (Ivan Vecera) [RHEL-36219]
  - selftests/net: add lib.sh (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add other features (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add netfilter doc (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add switchdev doc (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add multicast doc (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add VLAN doc (Ivan Vecera) [RHEL-36219]
  - docs: bridge: add STP doc (Ivan Vecera) [RHEL-36219]
  - docs: bridge: Add kAPI/uAPI fields (Ivan Vecera) [RHEL-36219]
  - net: bridge: add document for IFLA_BRPORT enum (Ivan Vecera) [RHEL-36219]
  - net: bridge: add document for IFLA_BR enum (Ivan Vecera) [RHEL-36219]
  - docs: bridge: update doc format to rst (Ivan Vecera) [RHEL-36219]
  - net: bridge: fill in MODULE_DESCRIPTION() (Ivan Vecera) [RHEL-36219]
  - selftests: vxlan_mdb: Use MDB get instead of dump (Ivan Vecera) [RHEL-36219]
  - selftests: bridge_mdb: Use MDB get instead of dump (Ivan Vecera) [RHEL-36219]
  - rtnetlink: Add MDB get support (Ivan Vecera) [RHEL-36219]
  - vxlan: mdb: Add MDB get support (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: Add MDB get support (Ivan Vecera) [RHEL-36219]
  - vxlan: mdb: Factor out a helper for remote entry size calculation (Ivan Vecera) [RHEL-36219]
  - vxlan: mdb: Adjust function arguments (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: Rename MDB entry get function (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: Factor out a helper for PG entry size calculation (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: Account for missing attributes (Ivan Vecera) [RHEL-36219]
  - bridge: mcast: Dump MDB entries even when snooping is disabled (Ivan Vecera) [RHEL-36219]
  - br_netfilter: use single forward hook for ip and arp (Ivan Vecera) [RHEL-36219]
  - selftests: forwarding: bridge_fdb_learning_limit: Add a new selftest (Ivan Vecera) [RHEL-36219]
  - net: bridge: Set strict_start_type for br_policy (Ivan Vecera) [RHEL-36219]
  - net: bridge: Add netlink knobs for number / max learned FDB entries (Ivan Vecera) [RHEL-36219]
  - net: bridge: Track and limit dynamically learned FDB entries (Ivan Vecera) [RHEL-36219]
  - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry (Ivan Vecera) [RHEL-36219]
  - selftests: net: Add bridge backup port and backup nexthop ID test (Ivan Vecera) [RHEL-36219]
  - bridge: Add backup nexthop ID support (Ivan Vecera) [RHEL-36219]
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33164] {CVE-2024-26907}
  - powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT (Mark Langsdorf) [RHEL-32447]
  - powerpc: Don't include lppaca.h in paca.h (Mark Langsdorf) [RHEL-32447]
  - cpuidle: dt: Replace deprecated strncpy() with strscpy() (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Avoid unnecessary variable assignments (Mark Langsdorf) [RHEL-32447]
  - cpuidle: menu: Skip tick_nohz_get_sleep_length() call in some cases (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Gather statistics regarding whether or not to stop the tick (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Skip tick_nohz_get_sleep_length() call in some cases (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Do not call tick_nohz_get_sleep_length() upfront (Mark Langsdorf) [RHEL-32447]
  - cpuidle: psci: Move enabling OSI mode after power domains creation (Mark Langsdorf) [RHEL-32447]
  - cpuidle: dt_idle_genpd: Add helper function to remove genpd topology (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Drop utilized from struct teo_cpu (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Avoid stopping the tick unnecessarily when bailing out (Mark Langsdorf) [RHEL-32447]
  - cpuidle: teo: Update idle duration estimate when choosing shallower state (Mark Langsdorf) [RHEL-32447]
  - cpuidle: Adjust includes to remove of_device.h (Mark Langsdorf) [RHEL-32447]
  - cpuidle: Use of_property_present() for testing DT property presence (Mark Langsdorf) [RHEL-32447]
  - nvme-fabrics: prevent overriding of existing host (John Meneghini) [RHEL-30850]
  - tee: amdtee: fix use-after-free vulnerability in amdtee_close_session (David Arcari) [RHEL-24997]
  - tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta' (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Update sps power thermals according to the platform-profiles (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to get sps default APTS index values (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to get APTS index numbers for static slider (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to notify sbios heart beat event (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to get sbios requests in PMF driver (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Disable debugfs support for querying power thermals (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Differentiate PMF ACPI versions (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add debugging message for missing policy data (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Remove smart_pc_status enum (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix possible out-of-bound memory accesses (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Use struct for cookie header (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Do not use readl() for policy buffer access (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix return value of amd_pmf_start_policy_engine() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add missing __iomem attribute to policy_base (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix missing error code in amd_pmf_init_smart_pc() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix a potential race with policy binary sideload (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fixup error handling for amd_pmf_init_smart_pc() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix a suspend hang on Framework 13 (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix TEE enact command failure after suspend and resume (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Fix memory leak in amd_pmf_get_pb_data() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Get ambient light information from AMD SFH driver (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Get Human presence information from AMD SFH driver (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add a new interface for exporting ALS data (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add a new interface for exporting HPD data (David Arcari) [RHEL-24997]
  - HID: amd_sfh: rename float_to_int() to amd_sfh_float_to_int() (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add light chromaticity for SFH1.1 (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add light chromaticity support (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add support for SFH1.1 light color temperature (David Arcari) [RHEL-24997]
  - HID: amd_sfh: Add support for light color temperature (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Return a status code only as a constant in two functions (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Return directly after a failed apmf_if_call() in apmf_sbios_heartbeat_notify() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: dump policy binary data (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add capability to sideload of policy binary (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add facility to dump TA inputs (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Make source_as_str() as non-static (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to update system state (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support update p3t limit (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support to get inputs from other subsystems (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: change amd_pmf_init_features() call sequence (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support for PMF Policy Binary (David Arcari) [RHEL-24997]
  - redhat/configs: enable AMDTEE (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Change return type of amd_pmf_set_dram_addr() (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add support for PMF-TA interaction (David Arcari) [RHEL-24997]
  - platform/x86/amd/pmf: Add PMF TEE interface (David Arcari) [RHEL-24997]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-463.el9]
changelog:
  - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38315] {CVE-2023-52791}
  - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38315] {CVE-2023-52791}
  - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36996] {CVE-2024-35801}
  - platform/x86: p2sb: On Goldmont only cache P2SB and SPI devfn BAR (Steve Best) [RHEL-31058]
  - xen-netfront: Add missing skb_mark_for_recycle (Vitaly Kuznetsov) [RHEL-36573] {CVE-2024-27393}
  - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Steve Best) [RHEL-37368] {CVE-2024-35983}
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37467] {CVE-2024-36000}
  - ice: fix uninitialized dplls mutex usage (Petr Oros) [RHEL-36283]
  - ice: fix pin phase adjust updates on PF reset (Petr Oros) [RHEL-36283]
  - ice: fix dpll periodic work data updates on PF reset (Petr Oros) [RHEL-36283]
  - ice: fix dpll and dpll_pin data access on PF reset (Petr Oros) [RHEL-36283]
  - ice: fix dpll input pin phase_adjust value updates (Petr Oros) [RHEL-36283]
  - ice: fix connection state of DPLL and out pin (Petr Oros) [RHEL-36283]
  - ice: Add automatic VF reset on Tx MDD events (Petr Oros) [RHEL-36317]
  - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35828] {CVE-2024-21823}
  - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35828] {CVE-2024-21823}
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35828] {CVE-2024-21823}
  - scsi: lpfc: Copyright updates for 14.4.0.2 patches (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Update lpfc version to 14.4.0.2 (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Add support for 32 byte CDBs (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Clear deferred RSCN processing flag when driver is unloading (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Update logging of protection type for T10 DIF I/O (Dick Kennedy) [RHEL-35858]
  - scsi: lpfc: Change default logging level for unsolicited CT MIB commands (Dick Kennedy) [RHEL-35858]
  - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled (Aristeu Rozanski) [RHEL-35090 RHEL-35091] {CVE-2024-26987}
  - selftest/bpf: Test the read of vsyscall page under x86-64 (Rafael Aquini) [RHEL-33168] {CVE-2024-26906}
  - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33168] {CVE-2024-26906}
  - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33168] {CVE-2024-26906}
  - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-32940]
  - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32940]
  - arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD (Mark Salter) [RHEL-31321] {CVE-2024-26670}
  - arm64: Rename ARM64_WORKAROUND_2966298 (Mark Salter) [RHEL-31321] {CVE-2024-26670}
  - cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Preserve PM domain votes in system suspend (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Enable virtual power domain devices (Mark Langsdorf) [RHEL-32446]
  - PM: sleep: Add helpers to allow a device to remain powered-on (Mark Langsdorf) [RHEL-32446]
  - cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Introduce cpufreq for ipq95xx (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Enable cpufreq for ipq53xx (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: add support for IPQ8074 (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: add support for IPQ8064 (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: also accept operating-points-v2-krait-cpu (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: drop pvs_ver for format a fuses (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: add support for IPQ6018 (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Add MSM8909 (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Simplify driver data allocation (Mark Langsdorf) [RHEL-32446]
  - cpufreq: arm: Kconfig: Add i.MX7 to supported SoC for ARM_IMX_CPUFREQ_DT (Mark Langsdorf) [RHEL-32446]
  - cpufreq: stats: Fix buffer overflow detection in trans_stats() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: ARM_BRCMSTB_AVS_CPUFREQ cannot be used with ARM_SCMI_CPUFREQ (Mark Langsdorf) [RHEL-32446]
  - cpufreq: ti-cpufreq: Add opp support for am62p5 SoCs (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt-platdev: add am62p5 to blocklist (Mark Langsdorf) [RHEL-32446]
  - cpufreq: userspace: Move is_managed indicator into per-policy structure (Mark Langsdorf) [RHEL-32446]
  - cpufreq: userspace: Use fine-grained mutex in userspace governor (Mark Langsdorf) [RHEL-32446]
  - cpufreq: conservative: Simplify the condition of storing 'down_threshold' (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Replace deprecated strncpy() with strscpy() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt: platdev: Add MSM8909 to blocklist (Mark Langsdorf) [RHEL-32446]
  - cpufreq: pmac32: Use of_property_read_reg() to parse "reg" (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Add QCM6490 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Support per-policy performance boost (Mark Langsdorf) [RHEL-32446]
  - cpufreq: pcc: Fix the potentinal scheduling delays in target_index() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: governor: Free dbs_data directly when gov->init() fails (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Avoid printing kernel addresses in cpufreq_resume() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: tegra194: add online/offline hooks (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-cpufreq-hw: add support for 4 freq domains (Mark Langsdorf) [RHEL-32446]
  - cpufreq: stats: Improve the performance of cpufreq_stats_create_table() (Mark Langsdorf) [RHEL-32446]
  - cpufreq: cppc: Set fie_disabled to FIE_DISABLED if fails to create kworker_fie (Mark Langsdorf) [RHEL-32446]
  - cpufreq: cppc: cppc_cpufreq_get_rate() returns zero in all error cases. (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Prefer to print cpuid in MIN/MAX QoS register error message (Mark Langsdorf) [RHEL-32446]
  - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug (Mark Langsdorf) [RHEL-32446]
  - cpufreq: blocklist MSM8998 in cpufreq-dt-platdev (Mark Langsdorf) [RHEL-32446]
  - cpufreq: omap: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: raspberrypi: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: tegra186: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qoriq: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: acpi: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: kirkwood: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: pcc-cpufreq: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: davinci: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: imx-cpufreq-dt: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: brcmstb-avs-cpufreq: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: tegra194: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: vexpress: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: scpi: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: imx6q: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-cpufreq-hw: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Explicitly include correct DT includes (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Make CONFIG_CPUFREQ_DT_PLATDEV depend on OF (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-cpufreq-hw: Use dev_err_probe() when failing to get icc paths (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt-platdev: Support building as module (Mark Langsdorf) [RHEL-32446]
  - redhat/configs: add default values for CONFIG_CPUFREQ_DT_PLATDEV (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt-platdev: Blacklist ti,am62a7 SoC (Mark Langsdorf) [RHEL-32446]
  - cpufreq: ti-cpufreq: Add support for AM62A7 (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: use helper to get SMEM SoC ID (Mark Langsdorf) [RHEL-32446]
  - cpufreq: qcom-nvmem: use SoC ID-s from bindings (Mark Langsdorf) [RHEL-32446]
  - soc: qcom: smem: introduce qcom_smem_get_soc_id() (Mark Langsdorf) [RHEL-32446]
  - soc: qcom: smem: Switch to EXPORT_SYMBOL_GPL() (Mark Langsdorf) [RHEL-32446]
  - soc: qcom: socinfo: move SMEM item struct and defines to a header (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for SM8475 family (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: add SoC ID for QCM8550 and QCS8550 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add SoC ID for SM8650 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for IPQ8174 family (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add Soc ID for SM7150P (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add SoC ID for SM7125 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: drop the IPQ5019 SoC ID (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: add SoC ID for SM4450 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: add SoC ID for IPQ5300 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: add SoC ID for IPQ5312 and IPQ5302 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for IPQ5018 family (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add Soc ID for SM7150 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for QRB4210 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for IPQ9574 and its variants (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for QCM2290/QRB2210 (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add IDs for IPQ5332 and its variant (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add Soc IDs for IPQ8064 and variants (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add a bunch of older SoCs (Mark Langsdorf) [RHEL-32446]
  - dt-bindings: arm: qcom,ids: Add QRD board ID (Mark Langsdorf) [RHEL-32446]
  - cpufreq: imx6q: don't warn for disabling a non-existing frequency (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Adjust includes to remove of_device.h (Mark Langsdorf) [RHEL-32446]
  - Merge tag 'devicetree-for-6.4-2' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux (Mark Langsdorf) [RHEL-32446]
  - cpufreq: dt-platdev: Add JH7110 SOC to the allowlist (Mark Langsdorf) [RHEL-32446]
  - cpufreq: Add SM7225 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-32446]
  - arch/x86: Fix XSAVE check for x86_64-v2 check (Prarit Bhargava) [RHEL-22439]
  - arch/x86: mark x86_64-v1 and x86_64-v2 processors as deprecated (Prarit Bhargava) [RHEL-22439]
  - scsi: qla2xxx: Update version to 10.02.09.200-k (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Delay I/O Abort on PCI error (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Change debug message during driver unload (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Fix double free of fcport (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Fix command flush on cable pull (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: NVME|FCP prefer flag not being honored (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Update manufacturer detail (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Split FCE|EFT trace control (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Fix N2N stuck connection (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Prevent command send on chip reset (Nilesh Javali) [RHEL-25184]
  - scsi: qla2xxx: Use FIELD_GET() to extract PCIe capability fields (Nilesh Javali) [RHEL-25184]
  - workqueue: Shorten events_freezable_power_efficient name (Audra Mitchell) [RHEL-3534]
  - workqueue.c: Increase workqueue name length (Audra Mitchell) [RHEL-3534]
  - net/mlx5e: Tidy up IPsec NAT-T SA discovery (Amir Tzin) [RHEL-24465]
  - Revert "net/mlx5e: Check the number of elements before walk TC rhashtable" (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Fix peer flow lists handling (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Disable IPsec offload support if not FW steering (Amir Tzin) [RHEL-24465]
  - net/mlx5: Refactor mlx5_flow_destination->rep pointer to vport num (Amir Tzin) [RHEL-24465]
  - mlx5/core: E-Switch, Create ACL FT for eswitch manager in switchdev mode (Amir Tzin) [RHEL-24465]
  - net/mlx5: Return correct EC_VF function ID (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Decrease num_block_tc when unblock tc offload (Amir Tzin) [RHEL-24465]
  - net/mlx5: Devcom, only use devcom after NULL check in mlx5_devcom_send_event() (Amir Tzin) [RHEL-24465]
  - net/mlx5: Fix mlx5_cmd_update_root_ft() error flow (Amir Tzin) [RHEL-24465]
  - net/mlx5: DR, Fix peer domain namespace setting (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Fix overrun reported by coverity (Amir Tzin) [RHEL-24465]
  - RDMA/mlx5: Change the key being sent for MPV device affiliation (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Check the number of elements before walk TC rhashtable (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Reduce eswitch mode_lock protection context (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Support IPsec upper TCP protocol selector (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Add IPsec and ASO syndromes check in HW (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Allow IPsec soft/hard limits in bytes (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Support IPsec upper protocol selector field offload for RX (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Remove exposure of IPsec RX flow steering struct (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Unify esw and normal IPsec status table creation/destruction (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Don't modify the peer sent-to-vport rules for IPSec offload (Amir Tzin) [RHEL-24465]
  - net/mlx5: Handle IPsec steering upon master unbind/bind (Amir Tzin) [RHEL-24465]
  - net/mlx5: Configure IPsec steering for ingress RoCEv2 MPV traffic (Amir Tzin) [RHEL-24465]
  - net/mlx5: Configure IPsec steering for egress RoCEv2 MPV traffic (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add create alias flow table function to ipsec roce (Amir Tzin) [RHEL-24465]
  - net/mlx5: Implement alias object allow and create functions (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add alias flow table bits (Amir Tzin) [RHEL-24465]
  - net/mlx5: Store devcom pointer inside IPsec RoCE (Amir Tzin) [RHEL-24465]
  - net/mlx5: Register mlx5e priv to devcom in MPV mode (Amir Tzin) [RHEL-24465]
  - RDMA/mlx5: Send events from IB driver about device affiliation state (Amir Tzin) [RHEL-24465]
  - net/mlx5: Implement devlink port function cmds to control ipsec_packet (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5: Implement devlink port function cmds to control ipsec_crypto (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5: Provide an interface to block change of IPsec capabilities (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5: Add IFC bits to support IPsec enable/disable (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5e: Rewrite IPsec vs. TC block interface (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5: Drop extra layer of locks in IPsec (Amir Tzin) [RHEL-24458 RHEL-24465 RHEL-6311]
  - net/mlx5: Store vport in struct mlx5_devlink_port and use it in port ops (Amir Tzin) [RHEL-24465]
  - net/mlx5: Check vhca_resource_manager capability in each op and add extack msg (Amir Tzin) [RHEL-24465]
  - net/mlx5: Relax mlx5_devlink_eswitch_get() return value checking (Amir Tzin) [RHEL-24465]
  - net/mlx5: Return -EOPNOTSUPP in mlx5_devlink_port_fn_migratable_set() directly (Amir Tzin) [RHEL-24465]
  - net/mlx5: Reduce number of vport lookups passing vport pointer instead of index (Amir Tzin) [RHEL-24465]
  - net/mlx5: Embed struct devlink_port into driver structure (Amir Tzin) [RHEL-24465]
  - net/mlx5: Don't register ops for non-PF/VF/SF port and avoid checks in ops (Amir Tzin) [RHEL-24465]
  - net/mlx5: Remove no longer used mlx5_esw_offloads_sf_vport_enable/disable() (Amir Tzin) [RHEL-24465]
  - net/mlx5: Introduce mlx5_eswitch_load/unload_sf_vport() and use it from SF code (Amir Tzin) [RHEL-24465]
  - net/mlx5: Allow mlx5_esw_offloads_devlink_port_register() to register SFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Push devlink port PF/VF init/cleanup calls out of devlink_port_register/unregister() (Amir Tzin) [RHEL-24465]
  - net/mlx5: Push out SF devlink port init and cleanup code to separate helpers (Amir Tzin) [RHEL-24465]
  - net/mlx5: Rework devlink port alloc/free into init/cleanup (Amir Tzin) [RHEL-24465]
  - net/mlx5: Rename devlink port ops struct for PFs/VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Remove VPORT_UPLINK handling from devlink_port.c (Amir Tzin) [RHEL-24465]
  - net/mlx5: Call mlx5_esw_offloads_rep_load/unload() for uplink port directly (Amir Tzin) [RHEL-24465]
  - net/mlx5: Give esw_offloads_load/unload_rep() "mlx5_" prefix (Amir Tzin) [RHEL-24465]
  - net/mlx5: Make mlx5_eswitch_load/unload_vport() static (Amir Tzin) [RHEL-24465]
  - net/mlx5: Make mlx5_esw_offloads_rep_load/unload() static (Amir Tzin) [RHEL-24465]
  - net/mlx5: Remove pointless devlink_rate checks (Amir Tzin) [RHEL-24465]
  - net/mlx5: Don't check vport->enabled in port ops (Amir Tzin) [RHEL-24465]
  - net/mlx5: Don't query MAX caps twice (Amir Tzin) [RHEL-24451 RHEL-24465]
  - net/mlx5: Remove unused MAX HCA capabilities (Amir Tzin) [RHEL-24451 RHEL-24465]
  - net/mlx5: Remove unused CAPs (Amir Tzin) [RHEL-24451 RHEL-24465]
  - net/mlx5: Adjust mlx5_query_hca_caps() to upstream (Amir Tzin) [RHEL-24465]
  - net/mlx5: Expose max possible SFs via devlink resource (Amir Tzin) [RHEL-24451 RHEL-24465]
  - net/mlx5e: E-Switch, Allow devcom initialization on more vports (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Register devcom device with switch id key (Amir Tzin) [RHEL-24465]
  - net/mlx5: Devcom, Infrastructure changes (Amir Tzin) [RHEL-24465]
  - net/mlx5: Use shared code for checking lag is supported (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Support IPsec NAT-T functionality (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Check for IPsec NAT-T support (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add relevant capabilities bits to support NAT-T (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Make TC and IPsec offloads mutually exclusive on a netdev (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Add get IPsec offload stats for uplink representor (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Modify and restore TC rules for IPSec TX rules (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Make IPsec offload work together with eswitch and TC (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5: Compare with old_dest param to modify rule destination (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Support IPsec packet offload for TX in switchdev mode (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Refactor IPsec TX tables creation (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Handle IPsec offload for RX datapath in switchdev mode (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Support IPsec packet offload for RX in switchdev mode (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Refactor IPsec RX tables creation and destruction (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Prepare IPsec packet offload for switchdev mode (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Change the parameter of IPsec RX skb handle function (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5e: Add function to get IPsec offload namespace (Amir Tzin) [RHEL-24453 RHEL-24465]
  - net/mlx5: DR, update query of HCA caps for EC VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Fix the macro for accessing EC VF vports (Amir Tzin) [RHEL-24465]
  - net/mlx5: Fix devlink controller number for ECVF (Amir Tzin) [RHEL-24465]
  - net/mlx5: Fix UAF in mlx5_eswitch_cleanup() (Amir Tzin) [RHEL-24465]
  - net/mlx5: Fix SFs kernel documentation error (Amir Tzin) [RHEL-24465]
  - net/mlx5: Bridge, set debugfs access right to root-only (Amir Tzin) [RHEL-24465]
  - net/mlx5: Bridge, expose FDB state via debugfs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Bridge, pass net device when linking vport to bridge (Amir Tzin) [RHEL-24465]
  - net/mlx5: Create eswitch debugfs root directory (Amir Tzin) [RHEL-24465]
  - net/mlx5: Light probe local SFs (Amir Tzin) [RHEL-24417 RHEL-24465]
  - net/mlx5: Move esw multiport devlink param to eswitch code (Amir Tzin) [RHEL-24417 RHEL-24465]
  - net/mlx5: Split function_setup() to enable and open functions (Amir Tzin) [RHEL-24417 RHEL-24465]
  - net/mlx5: Enable 4 ports VF LAG (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5: LAG, block multiport eswitch LAG in case ldev have more than 2 ports (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5: LAG, block multipath LAG in case ldev have more than 2 ports (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5: LAG, change mlx5_shared_fdb_supported() to static (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5: LAG, generalize handling of shared FDB (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5: LAG, check if all eswitches are paired for shared FDB (Amir Tzin) [RHEL-24409 RHEL-24465]
  - {net/RDMA}/mlx5: introduce lag_for_each_peer (Amir Tzin) [RHEL-24409 RHEL-24465]
  - RDMA/mlx5: Free second uplink ib port (Amir Tzin) [RHEL-24409 RHEL-24465]
  - net/mlx5e: E-Switch, Fix shared fdb error flow (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Pass other_vport flag if vport is not 0 (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Use xarray for devcom paired device index (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Add peer fdb miss rules for vport manager or ecpf (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Use vhca_id for device index in vport rx rules (Amir Tzin) [RHEL-24465]
  - net/mlx5: Lag, Remove duplicate code checking lag is supported (Amir Tzin) [RHEL-24465]
  - net/mlx5: Set max number of embedded CPU VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Update SRIOV enable/disable to handle EC/VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Query correct caps for min msix vectors (Amir Tzin) [RHEL-24465]
  - net/mlx5: Use correct vport when restoring GUIDs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add new page type for EC VF pages (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add/remove peer miss rules for EC VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Add management of EC VF vports (Amir Tzin) [RHEL-24465]
  - mlx5/core: E-Switch, Allocate ECPF vport if it's an eswitch manager (Amir Tzin) [RHEL-24465]
  - net/mlx5: Update vport caps query/set for EC VFs (Amir Tzin) [RHEL-24465]
  - net/mlx5: Enable devlink port for embedded cpu VF vports (Amir Tzin) [RHEL-24465]
  - net/mlx5: mlx5_ifc updates for embedded CPU SRIOV (Amir Tzin) [RHEL-24465]
  - net/mlx5: Simplify unload all rep code (Amir Tzin) [RHEL-24465]
  - net/mlx5: Skip inline mode check after mlx5_eswitch_enable_locked() failure (Amir Tzin) [RHEL-24465]
  - net/mlx5: Devcom, extend mlx5_devcom_send_event to work with more than two devices (Amir Tzin) [RHEL-24465]
  - net/mlx5: Devcom, introduce devcom_for_each_peer_entry (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-switch, mark devcom as not ready when all eswitches are unpaired (Amir Tzin) [RHEL-24465]
  - net/mlx5: Devcom, Rename paired to ready (Amir Tzin) [RHEL-24465]
  - net/mlx5: DR, handle more than one peer domain (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-switch, generalize shared FDB creation (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-switch, Handle multiple master egress rules (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-switch, refactor FDB miss rule add/remove (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-switch, enlarge peer miss group table (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Handle offloads flows per peer (Amir Tzin) [RHEL-24465]
  - net/mlx5e: en_tc, re-factor query route port (Amir Tzin) [RHEL-24465]
  - net/mlx5e: rep, store send to vport rules per peer (Amir Tzin) [RHEL-24465]
  - net/mlx5e: tc, Refactor peer add/del flow (Amir Tzin) [RHEL-24465]
  - net/mlx5e: en_tc, Extend peer flows to a list (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Initialize E-Switch for eswitch manager (Amir Tzin) [RHEL-24465]
  - net/mlx5: devlink, Only show PF related devlink warning when needed (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-Switch, Use metadata matching for RoCE loopback rule (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-Switch, Use RoCE version 2 for loopback traffic (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Add a check that log_max_l2_table is valid (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch: move debug print of adding mac to correct place (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Check device is PF when stopping esw offloads (Amir Tzin) [RHEL-24465]
  - net/mlx5: Remove redundant vport_group_manager cap check (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Use metadata for vport matching in send-to-vport rules (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Allow get vport api if esw exists (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Update when to set other vport context (Amir Tzin) [RHEL-24465]
  - net/mlx5e: Remove redundant __func__ arg from fs_err() calls (Amir Tzin) [RHEL-24465]
  - net/mlx5e: E-Switch, Remove flow_source check for metadata matching (Amir Tzin) [RHEL-24465]
  - net/mlx5: E-Switch, Remove redundant check (Amir Tzin) [RHEL-24465]
  - net/mlx5: Remove redundant esw multiport validate function (Amir Tzin) [RHEL-24465]
  - RDMA/mlx5: Handles RoCE MACsec steering rules addition and deletion (Amir Tzin) [RHEL-22227]
  - net/mlx5: Add RoCE MACsec steering infrastructure in core (Amir Tzin) [RHEL-22227]
  - net/mlx5: Configure MACsec steering for ingress RoCEv2 traffic (Amir Tzin) [RHEL-22227]
  - net/mlx5: Configure MACsec steering for egress RoCEv2 traffic (Amir Tzin) [RHEL-22227]
  - net/mlx5: Add MACsec priorities in RDMA namespaces (Amir Tzin) [RHEL-22227]
  - RDMA/mlx5: Implement MACsec gid addition and deletion (Amir Tzin) [RHEL-22227]
  - net/mlx5: Maintain fs_id xarray per MACsec device inside macsec steering (Amir Tzin) [RHEL-22227]
  - net/mlx5: Remove netdevice from MACsec steering (Amir Tzin) [RHEL-22227]
  - net/mlx5e: Move MACsec flow steering and statistics database from ethernet to core (Amir Tzin) [RHEL-22227]
  - net/mlx5e: Rename MACsec flow steering functions/parameters to suit core naming style (Amir Tzin) [RHEL-22227]
  - net/mlx5: Remove dependency of macsec flow steering on ethernet (Amir Tzin) [RHEL-22227]
  - net/mlx5e: Move MACsec flow steering operations to be used as core library (Amir Tzin) [RHEL-22227]
  - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (Amir Tzin) [RHEL-22227]
  - RDMA/mlx5: Handle DCT QP logic separately from low level QP interface (Amir Tzin) [RHEL-22227]
  - RDMA/mlx5: Reduce QP table exposure (Amir Tzin) [RHEL-22227]
  - net/mlx5: Nullify qp->dbg pointer post destruction (Amir Tzin) [RHEL-22227]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-464.el9]
changelog:
  - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38438] {CVE-2021-47497}
  - kernel: watch_queue: copy user-array safely (Steve Best) [RHEL-38238] {CVE-2023-52824}
  - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37739 RHEL-37740] {CVE-2021-47432}
  - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37739 RHEL-37740] {CVE-2021-47432}
  - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33098] {CVE-2024-26843}
  - workqueue: Drain BH work items on hot-unplugged CPUs (Waiman Long) [RHEL-25103]
  - workqueue: Control intensive warning threshold through cmdline (Waiman Long) [RHEL-25103]
  - workqueue: Make @flags handling consistent across set_work_data() and friends (Waiman Long) [RHEL-25103]
  - workqueue: Remove clear_work_data() (Waiman Long) [RHEL-25103]
  - workqueue: Factor out work_grab_pending() from __cancel_work_sync() (Waiman Long) [RHEL-25103]
  - workqueue: Clean up enum work_bits and related constants (Waiman Long) [RHEL-25103]
  - workqueue: Introduce work_cancel_flags (Waiman Long) [RHEL-25103]
  - workqueue: Use variable name irq_flags for saving local irq flags (Waiman Long) [RHEL-25103]
  - workqueue: Reorganize flush and cancel[_sync] functions (Waiman Long) [RHEL-25103]
  - workqueue: Rename __cancel_work_timer() to __cancel_timer_sync() (Waiman Long) [RHEL-25103]
  - workqueue: Use rcu_read_lock_any_held() instead of rcu_read_lock_held() (Waiman Long) [RHEL-25103]
  - workqueue: Cosmetic changes (Waiman Long) [RHEL-25103]
  - workqueue, irq_work: Build fix for !CONFIG_IRQ_WORK (Waiman Long) [RHEL-25103]
  - workqueue: Fix queue_work_on() with BH workqueues (Waiman Long) [RHEL-25103]
  - async: Use a dedicated unbound workqueue with raised min_active (Waiman Long) [RHEL-25103]
  - workqueue: Implement workqueue_set_min_active() (Waiman Long) [RHEL-25103]
  - workqueue: Fix kernel-doc comment of unplug_oldest_pwq() (Waiman Long) [RHEL-25103]
  - workqueue: Bind unbound workqueue rescuer to wq_unbound_cpumask (Waiman Long) [RHEL-25103]
  - kernel/workqueue: Let rescuers follow unbound wq cpumask changes (Waiman Long) [RHEL-25103]
  - workqueue: Enable unbound cpumask update on ordered workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Link pwq's into wq->pwqs from oldest to newest (Waiman Long) [RHEL-25103]
  - workqueue: Don't implicitly make UNBOUND workqueues w/ @max_active==1 ordered (Waiman Long) [RHEL-25103]
  - workqueue: Skip __WQ_DESTROYING workqueues when updating global unbound cpumask (Waiman Long) [RHEL-25103]
  - workqueue: fix a typo in comment (Waiman Long) [RHEL-25103]
  - Revert "workqueue: make wq_subsys const" (Waiman Long) [RHEL-25103]
  - workqueue: Implement BH workqueues to eventually replace tasklets (Waiman Long) [RHEL-25103]
  - workqueue: Factor out init_cpu_worker_pool() (Waiman Long) [RHEL-25103]
  - workqueue: Update lock debugging code (Waiman Long) [RHEL-25103]
  - workqueue: make wq_subsys const (Waiman Long) [RHEL-25103]
  - workqueue: Fix pwq->nr_in_flight corruption in try_to_grab_pending() (Waiman Long) [RHEL-25103]
  - workqueue: Avoid premature init of wq->node_nr_active[].max (Waiman Long) [RHEL-25103]
  - workqueue: Don't call cpumask_test_cpu() with -1 CPU in wq_update_node_max_active() (Waiman Long) [RHEL-25103]
  - tools/workqueue/wq_dump.py: Add node_nr/max_active dump (Waiman Long) [RHEL-25103]
  - workqueue: Implement system-wide nr_active enforcement for unbound workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Introduce struct wq_node_nr_active (Waiman Long) [RHEL-25103]
  - workqueue: Move pwq_dec_nr_in_flight() to the end of work item handling (Waiman Long) [RHEL-25103]
  - workqueue: RCU protect wq->dfl_pwq and implement accessors for it (Waiman Long) [RHEL-25103]
  - workqueue: Make wq_adjust_max_active() round-robin pwqs while activating (Waiman Long) [RHEL-25103]
  - workqueue: Move nr_active handling into helpers (Waiman Long) [RHEL-25103]
  - workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work() (Waiman Long) [RHEL-25103]
  - workqueue: Factor out pwq_is_empty() (Waiman Long) [RHEL-25103]
  - workqueue: Move pwq->max_active to wq->max_active (Waiman Long) [RHEL-25103]
  - workqueue: Break up enum definitions and give names to the types (Waiman Long) [RHEL-25103]
  - workqueue: Drop unnecessary kick_pool() in create_worker() (Waiman Long) [RHEL-25103]
  - tools/workqueue/wq_dump.py: Clean up code and drop duplicate information (Waiman Long) [RHEL-25103]
  - workqueue: mark power efficient workqueue as unbounded if nohz_full enabled (Waiman Long) [RHEL-25103]
  - workqueue: Add rcu lock check at the end of work item execution (Waiman Long) [RHEL-25103]
  - kernel/workqueue: Bind rescuer to unbound cpumask for WQ_UNBOUND (Waiman Long) [RHEL-25103]
  - tools/workqueue: Add rescuers printing to wq_dump.py (Waiman Long) [RHEL-25103]
  - Revert "workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()" (Waiman Long) [RHEL-25103]
  - Documentation/core-api: fix spelling mistake in workqueue (Waiman Long) [RHEL-25103]
  - Documentation/core-api : fix typo in workqueue (Waiman Long) [RHEL-25103]
  - async: Split async_schedule_node_domain() (Waiman Long) [RHEL-25103]
  - workqueue: Provide one lock class key per work_on_cpu() callsite (Waiman Long) [RHEL-25103]
  - workqueue: fix -Wformat-truncation in create_worker (Waiman Long) [RHEL-25103]
  - workqueue: Use the kmem_cache_free() instead of kfree() to release pwq (Waiman Long) [RHEL-25103]
  - workqueue: doc: Fix function and sysfs path errors (Waiman Long) [RHEL-25103]
  - workqueue: Fix UAF report by KASAN in pwq_release_workfn() (Waiman Long) [RHEL-25103]
  - workqueue: Fix missed pwq_release_worker creation in wq_cpu_intensive_thresh_init() (Waiman Long) [RHEL-25103]
  - workqueue: Removed double allocation of wq_update_pod_attrs_buf (Waiman Long) [RHEL-25103]
  - workqueue: fix data race with the pwq->stats[] increment (Waiman Long) [RHEL-25103]
  - workqueue: Rename rescuer kworker (Waiman Long) [RHEL-25103]
  - workqueue: Make default affinity_scope dynamically updatable (Waiman Long) [RHEL-25103]
  - workqueue: Add "Affinity Scopes and Performance" section to documentation (Waiman Long) [RHEL-25103]
  - workqueue: Implement non-strict affinity scope for unbound workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Add workqueue_attrs->__pod_cpumask (Waiman Long) [RHEL-25103]
  - workqueue: Factor out need_more_worker() check and worker wake-up (Waiman Long) [RHEL-25103]
  - workqueue: Factor out work to worker assignment and collision handling (Waiman Long) [RHEL-25103]
  - workqueue: Add multiple affinity scopes and interface to select them (Waiman Long) [RHEL-25103]
  - workqueue: Modularize wq_pod_type initialization (Waiman Long) [RHEL-25103]
  - workqueue: Add tools/workqueue/wq_dump.py which prints out workqueue configuration (Waiman Long) [RHEL-25103]
  - workqueue: Generalize unbound CPU pods (Waiman Long) [RHEL-25103]
  - workqueue: Factor out clearing of workqueue-only attrs fields (Waiman Long) [RHEL-25103]
  - workqueue: Factor out actual cpumask calculation to reduce subtlety in wq_update_pod() (Waiman Long) [RHEL-25103]
  - workqueue: Initialize unbound CPU pods later in the boot (Waiman Long) [RHEL-25103]
  - workqueue: Move wq_pod_init() below workqueue_init() (Waiman Long) [RHEL-25103]
  - workqueue: Rename NUMA related names to use pod instead (Waiman Long) [RHEL-25103]
  - workqueue: Rename workqueue_attrs->no_numa to ->ordered (Waiman Long) [RHEL-25103]
  - workqueue: Make unbound workqueues to use per-cpu pool_workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Call wq_update_unbound_numa() on all CPUs in NUMA node on CPU hotplug (Waiman Long) [RHEL-25103]
  - workqueue: Make per-cpu pool_workqueues allocated and released like unbound ones (Waiman Long) [RHEL-25103]
  - workqueue: Use a kthread_worker to release pool_workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Remove module param disable_numa and sysfs knobs pool_ids and numa (Waiman Long) [RHEL-25103]
  - workqueue: Relocate worker and work management functions (Waiman Long) [RHEL-25103]
  - workqueue: Rename wq->cpu_pwqs to wq->cpu_pwq (Waiman Long) [RHEL-25103]
  - workqueue: Not all work insertion needs to wake up a worker (Waiman Long) [RHEL-25103]
  - workqueue: Cleanups around process_scheduled_works() (Waiman Long) [RHEL-25103]
  - workqueue: Drop the special locking rule for worker->flags and worker_pool->flags (Waiman Long) [RHEL-25103]
  - workqueue: use LIST_HEAD to initialize cull_list (Waiman Long) [RHEL-25103]
  - workqueue: Warn attempt to flush system-wide workqueues. (Waiman Long) [RHEL-25103]
  - workqueue: Scale up wq_cpu_intensive_thresh_us if BogoMIPS is below 4000 (Waiman Long) [RHEL-25103]
  - workqueue: Fix cpu_intensive_thresh_us name in help text (Waiman Long) [RHEL-25103]
  - soc: qcom: qmi: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - dm integrity: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - scsi: NCR5380: Use default @max_active for hostdata->work_q (Waiman Long) [RHEL-25103]
  - crypto: octeontx2: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - xen/pvcalls: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - virt: acrn: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - net: octeontx2: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - net: thunderx: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - greybus: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - powerpc, workqueue: Use alloc_ordered_workqueue() to create ordered workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Disable per-cpu CPU hog detection when wq_cpu_intensive_thresh_us is 0 (Waiman Long) [RHEL-25103]
  - workqueue: Fix WARN_ON_ONCE() triggers in worker_enter_idle() (Waiman Long) [RHEL-25103]
  - workqueue: Track and monitor per-workqueue CPU time usage (Waiman Long) [RHEL-25103]
  - redhat/configs: Add CONFIG_WQ_CPU_INTENSIVE_REPORT (Waiman Long) [RHEL-25103]
  - workqueue: Report work funcs that trigger automatic CPU_INTENSIVE mechanism (Waiman Long) [RHEL-25103]
  - workqueue: Automatically mark CPU-hogging work items CPU_INTENSIVE (Waiman Long) [RHEL-25103]
  - workqueue: Improve locking rule description for worker fields (Waiman Long) [RHEL-25103]
  - workqueue: Move worker_set/clr_flags() upwards (Waiman Long) [RHEL-25103]
  - workqueue: Re-order struct worker fields (Waiman Long) [RHEL-25103]
  - workqueue: Add pwq->stats[] and a monitoring script (Waiman Long) [RHEL-25103]
  - Further upgrade queue_work_on() comment (Waiman Long) [RHEL-25103]
  - workqueue: clean up WORK_* constant types, clarify masking (Waiman Long) [RHEL-25103]
  - workqueue: Introduce show_freezable_workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Print backtraces from CPUs with hung CPU bound workqueues (Waiman Long) [RHEL-25103]
  - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-25103]
  - workqueue: Interrupted create_worker() is not a repeated event (Waiman Long) [RHEL-25103]
  - workqueue: Warn when a new worker could not be created (Waiman Long) [RHEL-25103]
  - workqueue: Fix hung time report of worker pools (Waiman Long) [RHEL-25103]
  - workqueue: Simplify a pr_warn() call in wq_select_unbound_cpu() (Waiman Long) [RHEL-25103]
  - scsi: message: fusion: Avoid flush_scheduled_work() usage (Waiman Long) [RHEL-25103]
  - scsi: message: fusion: Remove unused sas_persist_task work (Waiman Long) [RHEL-25103]
  - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-25103]
  - workqueue: Add a new flag to spot the potential UAF error (Waiman Long) [RHEL-25103]
  - workqueue: Make queue_rcu_work() use call_rcu_hurry() (Waiman Long) [RHEL-25103]
  - treewide: Drop WARN_ON_FUNCTION_MISMATCH (Waiman Long) [RHEL-25103]
  - Input: psmouse-smbus - avoid flush_scheduled_work() usage (Waiman Long) [RHEL-25103]
  - workqueue: Convert the type of pool->nr_running to int (Waiman Long) [RHEL-25103]
  - workqueue: Use wake_up_worker() in wq_worker_sleeping() instead of open code (Waiman Long) [RHEL-25103]
  - Revert "module, async: async_synchronize_full() on module init iff async is used" (Waiman Long) [RHEL-25103]
  - workqueue: Upgrade queue_work_on() comment (Waiman Long) [RHEL-25103]
  - workqueue: doc: Call out the non-reentrance conditions (Waiman Long) [RHEL-25103]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-465.el9]
changelog:
  - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38236] {CVE-2023-52775}
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26494] {CVE-2023-52451}
  - octeontx2-af: avoid off-by-one read from userspace (Kamal Heib) [RHEL-39873] {CVE-2024-36957}
  - iommu/amd: Fix panic accessing amd_iommu_enable_faulting (Jerry Snitselaar) [RHEL-37320 RHEL-40344]
  - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-38596]
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38715] {CVE-2021-47548}
  - watchdog: rti: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-40150]
  - watchdog: rti-wdt:using the pm_runtime_resume_and_get to simplify the code (Andrew Halaney) [RHEL-40150]
  - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking (Andrew Halaney) [RHEL-40150]
  - watchdog: rti_wdt: Fix calculation and evaluation of preset heartbeat (Andrew Halaney) [RHEL-40150]
  - watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function (Andrew Halaney) [RHEL-40150]
  - watchdog: rti-wdt: Make use of the helper function devm_platform_ioremap_resource() (Andrew Halaney) [RHEL-40150]
  - clk: Get runtime PM before walking tree for clk_summary (Andrew Halaney) [RHEL-35062]
  - clk: Get runtime PM before walking tree during disable_unused (Andrew Halaney) [RHEL-35062] {CVE-2024-27004}
  - clk: Initialize struct clk_core kref earlier (Andrew Halaney) [RHEL-35062]
  - clk: Don't hold prepare_lock when calling kref_put() (Andrew Halaney) [RHEL-35062]
  - clk: Remove prepare_lock hold assertion in __clk_release() (Andrew Halaney) [RHEL-35062]
  - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38289] {CVE-2023-52834}
  - scsi: ufs: ti-j721e: Expose device tree aliases (Andrew Halaney) [RHEL-39999]
  - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV (Andrew Halaney) [RHEL-39999]
  - redhat/configs: Enable CONFIG_BLK_CGROUP_IOCOST (Waiman Long) [RHEL-38879]
  - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39662]
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39662]
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag (Waiman Long) [RHEL-38628]
  - lib/stackdepot: off by one in depot_fetch_stack() (Waiman Long) [RHEL-38628]
  - lib/stackdepot: fix first entry having a 0-handle (Waiman Long) [RHEL-38628]
  - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38260] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (David Arcari) [RHEL-38260] {CVE-2023-52864}
  - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-38547]
  - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-38547]
  - mlxbf_gige: call request_irq() after NAPI initialized (Kamal Heib) [RHEL-37179] {CVE-2024-35907}
  - mlxbf_gige: stop PHY during open() error paths (Kamal Heib) [RHEL-37179]
  - fork: defer linking file vma until vma is fully initialized (Rafael Aquini) [RHEL-35022] {CVE-2024-27022}
  - platform/x86/intel-uncore-freq: Don't present root domain on error (David Arcari) [RHEL-38558]
  - platform/x86/intel-uncore-freq: Increase minor number support (David Arcari) [RHEL-38558]
  - x86/cpu/topology: Rename topology_max_die_per_package() (David Arcari) [RHEL-38558]
  - platform/x86/intel-uncore-freq: Process read/write blocked feature status (David Arcari) [RHEL-38558]
  - mlxbf_gige: stop interface during shutdown (Kamal Heib) [RHEL-37244] {CVE-2024-35885}
  - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38442] {CVE-2021-47495}
  - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38442] {CVE-2021-47495}
  - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37430] {CVE-2024-35958}
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37327] {CVE-2024-35944}
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37327] {CVE-2024-35944}
  - x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type (Steve Best) [RHEL-36906] {CVE-2023-52659}
  - powerpc/mm: Align memory_limit value specified using mem= kernel parameter (Joel Savitz) [RHEL-8591]
  - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37113 RHEL-37114] {CVE-2024-35947}
  - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29500] {CVE-2024-26638}
  - cpufreq: amd-pstate: Fix the inconsistency in max frequency units (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: remove global header file (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: fix the highest frequency issue which limits performance (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: remove unused variable lowest_nonlinear_freq (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: fix code format problems (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing (David Arcari) [RHEL-34751]
  - x86/CPU/AMD: Add ZenX generations flags (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: get transition delay and latency value from ACPI tables (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Bail out if min/max/nominal_freq is 0 (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Remove amd_get_{min,max,nominal,lowest_nonlinear}_freq() (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Document the units for freq variables in amd_cpudata (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Document *_limit_* fields in struct amd_cpudata (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: adjust min/max limit perf (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Fix min_perf assignment in amd_pstate_adjust_perf() (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Update amd-pstate preferred core ranking dynamically (David Arcari) [RHEL-34751]
  - cpufreq: amd-pstate: Enable amd-pstate preferred core support (David Arcari) [RHEL-34751]
  - ACPI: CPPC: Add helper to get the highest performance value (David Arcari) [RHEL-34751]
  - cpufreq/amd-pstate: Fix setting scaling max/min freq values (David Arcari) [RHEL-34751]
  - cpufreq/amd-pstate: Only print supported EPP values for performance governor (David Arcari) [RHEL-34751]
  - cpufreq/amd-pstate: Fix scaling_min_freq and scaling_max_freq update (David Arcari) [RHEL-34751]
  - cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() (David Arcari) [RHEL-34751]
  - Merge DRM changes from upstream v6.8..v6.9 (Dave Airlie) [RHEL-24102]
  - Merge DRM changes from upstream v6.7..v6.8 (Dave Airlie) [RHEL-24102]
  - redhat/configs: add new configs from drm backport (Dave Airlie) [RHEL-24102]
  - Partial revert: "file: convert to SLAB_TYPESAFE_BY_RCU" for i915 (Dave Airlie) [RHEL-24102]
  - Revert "drm/ttm: dynamically allocate the drm-ttm_pool shrinker" (Dave Airlie) [RHEL-24102]
  - Revert "drm/i915: dynamically allocate the i915_gem_mm shrinker" (Dave Airlie) [RHEL-24102]
  - Merge DRM changes from upstream v6.6..v6.7 (Dave Airlie) [RHEL-24102]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-466.el9]
changelog:
  - cpu/hotplug: Don't offline the last non-isolated CPU (David Arcari) [RHEL-38274] {CVE-2023-52831}
  - cpu/hotplug: Prevent self deadlock on CPU hot-unplug (David Arcari) [RHEL-38274] {CVE-2023-52831}
  - efi: fix panic in kdump kernel (Steve Best) [RHEL-36998] {CVE-2024-35800}
  - mm/secretmem: fix GUP-fast succeeding on secretmem folios (Waiman Long) [RHEL-37271 RHEL-37272] {CVE-2024-35872}
  - secretmem: convert page_is_secretmem() to folio_is_secretmem() (Waiman Long) [RHEL-37271 RHEL-37272] {CVE-2024-35872}
  - NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking (Scott Mayhew) [RHEL-24133]
  - mtd: mtdpart: Don't create platform device that'll never probe (Rupinderjit Singh) [RHEL-22420]
  - mtd: call of_platform_populate() for MTD partitions (Rupinderjit Singh) [RHEL-22420]
  - bus: imx-weim: make symbol 'weim_of_notifier' static (Rupinderjit Singh) [RHEL-22420]
  - treewide: Fix probing of devices in DT overlays (Rupinderjit Singh) [RHEL-22420]
  - bus: imx-weim: add DT overlay support for WEIM bus (Rupinderjit Singh) [RHEL-22420]
  - of: property: fw_devlink: Fix stupid bug in remote-endpoint parsing (Rupinderjit Singh) [RHEL-22420]
  - of: property: Improve finding the supplier of a remote-endpoint property (Rupinderjit Singh) [RHEL-22420]
  - soc: renesas: Move away from using OF_POPULATED for fw_devlink (Rupinderjit Singh) [RHEL-22420]
  - driver core: Fix device_link_flag_is_sync_state_only() (Rupinderjit Singh) [RHEL-22420]
  - driver core: fw_devlink: Improve logs for cycle detection (Rupinderjit Singh) [RHEL-22420]
  - driver core: fw_devlink: Improve detection of overlapping cycles (Rupinderjit Singh) [RHEL-22420]
  - of: property: Simplify of_link_to_phandle() (Rupinderjit Singh) [RHEL-22420]
  - platform/mellanox: nvsw-sn2201: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/mellanox: mlxreg-lc: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/mellanox: mlxreg-io: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform: mellanox: mlxreg-hotplug: Extend condition for notification callback processing (Mark Langsdorf) [RHEL-33550]
  - platform/mellanox: mlxreg-lc: Make error handling flow consistent (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Handle events during suspend after resume completion (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_uart: properly fix race condition (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Separate host command and irq disable (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: fix compilation warning (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_proto: Mark outdata as const (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_typec_vdm: Mark port_amode_ops const (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Use dev_err_probe() more (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Use semi-colons instead of commas (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Add Displayport Alternatemode 2.1 Support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome/wilco_ec: telemetry: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome/wilco_ec: debugfs: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome/wilco_ec: core: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_usbpd_notify: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_usbpd_logger: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_vbc: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_sysfs: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lightbar: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_debugfs: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_chardev: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: wilco_ec: Annotate struct ec_event_queue with __counted_by (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Configure Retimer cable type (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: chromeos_acpi: print hex string for ACPI_TYPE_BUFFER (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: chromeos_acpi: support official HID GOOG0016 (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Remove EC panic shutdown timeout (Mark Langsdorf) [RHEL-33550]
  - platform: Explicitly include correct DT includes (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_spi: Use %*ph for printing hexdump of a small buffer (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Move host command to prepare/complete (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Report EC panic as uevent (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: wilco_ec: remove return value check of debugfs_create_dir() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_debugfs: fix kernel-doc warning (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Separate logic for getting panic info (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: remove unneeded label and if-condition (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (Mark Langsdorf) [RHEL-33550]
  - platform/olpc: olpc-xo175-ec: Use SPI device ID data to bind device (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Fix spelling mistake (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_typec_vdm: Add Attention support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_typec_vdm: Fix VDO copy (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_uart: fix negative type promoted to high (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Use per-device lockdep key (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: fix kernel-doc warnings for panic notifier (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: initialize the buf variable (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Fix panic notifier registration (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_typec_vdm: Add VDM send support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_typec_vdm: Add VDM reply support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Add initial VDM support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Alter module name with hyphens (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Move structs to header (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Update port DP VDO (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Set port alt mode drvdata (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Stash port driver info (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Shutdown on EC Panic (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Poll EC log on EC panic (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_uart: fix race condition (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_uart: Add DT enumeration support (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_uart: Add transport layer (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: use sysfs_emit_at() instead of scnprintf() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: use sysfs_emit() instead of scnprintf() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Set parent of partner PD object (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Convert to i2c's .probe_new() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Force synchronous probe (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Mark PROBE_PREFER_ASYNCHRONOUS (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lightbar: Set PROBE_PREFER_ASYNCHRONOUS (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_spi: Set PROBE_PREFER_ASYNCHRONOUS (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc: Move mec_init to device probe (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: Use kstrtobool() instead of strtobool() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_lpc_mec: remove cros_ec_lpc_mec_destroy() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: add a driver for HPS (Mark Langsdorf) [RHEL-33550]
  - redhat/configs: enable HPS driver as a module (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Notify the PM of wake events during resume (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Register partner PDOs (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_typec: Correct alt mode index (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec: Expose suspend_timeout_ms in debugfs (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: fix double-free in chromeos_laptop_prepare() (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: fix memory corruption in ioctl (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure (Mark Langsdorf) [RHEL-33550]
  - platform/chrome: fix kernel-doc warning for suspend_timeout_ms (Mark Langsdorf) [RHEL-33550]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-467.el9]
changelog:
  - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26588] {CVE-2023-52463}
  - keys: Fix overwrite of key expiration on instantiation (David Howells) [RHEL-39708] {CVE-2024-36031}
  - cpufreq: intel_pstate: Fix unchecked HWP MSR access (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: fix struct cpudata::epp_cached kernel-doc (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: hide unused intel_pstate_cpu_oob_ids[] (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Update the maximum CPU frequency consistently (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Replace three global.turbo_disabled checks (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Use __ro_after_init for three variables (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Wait for canceled delayed work to complete (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Simplify spinlock locking (David Arcari) [RHEL-39731]
  - cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (David Arcari) [RHEL-39731]
  - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37281] {CVE-2024-35925}
  - block: fix module reference leakage from bdev_open_by_dev error path (Ming Lei) [RHEL-37000] {CVE-2024-35859}
  - net/mlx4_core: replace deprecated strncpy with strscpy (Benjamin Poirier) [RHEL-24474]
  - IB/mlx4: Fix the size of a buffer in add_port_entries() (Benjamin Poirier) [RHEL-24474]
  - mlx4: Delete custom device management logic (Benjamin Poirier) [RHEL-24474]
  - mlx4: Connect the infiniband part to the auxiliary bus (Benjamin Poirier) [RHEL-24474]
  - mlx4: Connect the ethernet part to the auxiliary bus (Benjamin Poirier) [RHEL-24474]
  - mlx4: Register mlx4 devices to an auxiliary virtual bus (Benjamin Poirier) [RHEL-24474]
  - mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (Benjamin Poirier) [RHEL-24474]
  - mlx4: Move the bond work to the core driver (Benjamin Poirier) [RHEL-24474]
  - mlx4: Get rid of the mlx4_interface.activate callback (Benjamin Poirier) [RHEL-24474]
  - mlx4: Replace the mlx4_interface.event callback with a notifier (Benjamin Poirier) [RHEL-24474]
  - mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (Benjamin Poirier) [RHEL-24474]
  - mlx4: Rename member mlx4_en_dev.nb to netdev_nb (Benjamin Poirier) [RHEL-24474]
  - mlx4: Get rid of the mlx4_interface.get_dev callback (Benjamin Poirier) [RHEL-24474]
  - RDMA/mlx4: Copy union directly (Benjamin Poirier) [RHEL-24474]
  - net/mlx4: Remove many unnecessary NULL values (Benjamin Poirier) [RHEL-24474]
  - RDMA/mlx: Remove unnecessary variable initializations (Benjamin Poirier) [RHEL-24474]
  - net/mlx4: clean up a type issue (Benjamin Poirier) [RHEL-24474]
  - RDMA/mlx4: Make check for invalid flags stricter (Benjamin Poirier) [RHEL-24474]
  - net/mlx4: Use bitmap_weight_and() (Benjamin Poirier) [RHEL-24474]
  - RDMA/mlx: Calling qp event handler in workqueue context (Benjamin Poirier) [RHEL-24474]
  - sched/topology: Optimize topology_span_sane() (Phil Auld) [RHEL-39277]
  - cpumask: Add for_each_cpu_from() (Phil Auld) [RHEL-39277]
  - mm/slub, kunit: Use inverted data to corrupt kmem cache (Nico Pache) [RHEL-38018]
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) [RHEL-1016]
  - redhat/configs: Add CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - KVM: x86: Add BHI_NO (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28203 RHEL-28209] {CVE-2024-2201}
  - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28203 RHEL-28209]
  - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28203 RHEL-28209]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-468.el9]
changelog:
  - qede: fix firmware halt over suspend and resume (John Meneghini) [RHEL-14143]
  - mm/vmalloc: eliminated the lock contention from twice to once (Aristeu Rozanski) [RHEL-28501]
  - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33111] {CVE-2024-26840}
  - redhat: include resolve_btfids in kernel-devel (Viktor Malik) [RHEL-40707]
  - nvme: fix namespace removal list (Maurizio Lombardi) [RHEL-40472]
  - nvme: use srcu for iterating namespace list (Maurizio Lombardi) [RHEL-40472]
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39837] {CVE-2024-36904}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Guillaume Nault) [RHEL-39845] {CVE-2024-36902}
  - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (Davide Caratti) [RHEL-36874] {CVE-2024-27414}
  - net: dev_addr_lists: move locking out of init/exit in kunit (Hangbin Liu) [RHEL-21442]
  - net: annotate writes on dev->mtu from ndo_change_mtu() (Ivan Vecera) [RHEL-39583]
  - geneve: fix header validation in geneve[6]_xmit_skb (Antoine Tenart) [RHEL-37386] {CVE-2024-35973}
  - icmp: prevent possible NULL dereferences from icmp_build_probe() (Antoine Tenart) [RHEL-37002] {CVE-2024-35857}
  - netdevsim: add selftest for forwarding skb between connected ports (Petr Oros) [RHEL-38987]
  - netdevsim: add ndo_get_iflink() implementation (Petr Oros) [RHEL-38987]
  - netdevsim: forward skbs from one connected port to another (Petr Oros) [RHEL-38987]
  - netdevsim: allow two netdevsim ports to be connected (Petr Oros) [RHEL-38987]
  - selftests: net: Correct couple of spelling mistakes (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: be less selective for FW for the devlink test (Petr Oros) [RHEL-38987]
  - net: netdevsim: constify the struct device_type usage (Petr Oros) [RHEL-38987]
  - netdevsim: make nsim_bus const (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: stop using ifconfig (Petr Oros) [RHEL-38987]
  - netdevsim: avoid potential loop in nsim_dev_trap_report_work() (Petr Oros) [RHEL-38987]
  - netdevsim: add Makefile for selftests (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: fix the udp_tunnel_nic test (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: correct expected FEC strings (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: sprinkle more udevadm settle (Petr Oros) [RHEL-38987]
  - netdevsim: Don't accept device bound programs (Petr Oros) [RHEL-38987]
  - selftests: netdevsim: use suitable existing dummy file for flash test (Petr Oros) [RHEL-38987]
  - netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() (Petr Oros) [RHEL-38987]
  - xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL (Petr Oros) [RHEL-38863]
  - ice: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Petr Oros) [RHEL-38863]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Petr Oros) [RHEL-38863]
  - ice: remove redundant xdp_rxq_info registration (Petr Oros) [RHEL-38863]
  - ice: work on pre-XDP prog frag count (Petr Oros) [RHEL-38863]
  - xsk: fix usage of multi-buffer BPF helpers for ZC XDP (Petr Oros) [RHEL-38863]
  - xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags (Petr Oros) [RHEL-38863]
  - xsk: recycle buffer in case Rx queue was full (Petr Oros) [RHEL-38863]
  - net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (Kamal Heib) [RHEL-34192] {CVE-2024-26858}
  - netlabel: fix RCU annotation for IPv4 options on socket creation (Davide Caratti) [RHEL-31390]
  - net: fix sk_memory_allocated_{add|sub} vs softirqs (Paolo Abeni) [RHEL-34070]
  - tcp: sk_forced_mem_schedule() optimization (Paolo Abeni) [RHEL-34070]
  - net: make SK_MEMORY_PCPU_RESERV tunable (Paolo Abeni) [RHEL-34070]
  - rcu: Restrict access to RCU CPU stall notifiers (Waiman Long) [RHEL-34076]
  - rcu: Add RCU CPU stall notifier (Waiman Long) [RHEL-34076]
  - rcu/exp: Handle RCU expedited grace period kworker allocation failure (Waiman Long) [RHEL-34076]
  - rcu/exp: Fix RCU expedited parallel grace period kworker allocation failure recovery (Waiman Long) [RHEL-34076]
  - rcu: Break rcu_node_0 --> &rq->__lock order (Waiman Long) [RHEL-34076]
  - rcu/tree: Defer setting of jiffies during stall reset (Waiman Long) [RHEL-34076]
  - rcutorture: Add test of RCU CPU stall notifiers (Waiman Long) [RHEL-34076]
  - rcu: Eliminate check_cpu_stall() duplicate code (Waiman Long) [RHEL-34076]
  - rcu: Don't redump the stalled CPU where RCU GP kthread last ran (Waiman Long) [RHEL-34076]
  - rcu: Delete a redundant check in rcu_check_gp_kthread_starvation() (Waiman Long) [RHEL-34076]
  - rcu-tasks: Make rcu_tasks_lazy_ms static (Waiman Long) [RHEL-34076]
  - rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop (Waiman Long) [RHEL-34076]
  - rcu-tasks: Add printk()s to localize boot-time self-test hang (Waiman Long) [RHEL-34076]
  - refscale: Print out additional module parameters (Waiman Long) [RHEL-34076]
  - refscale: Fix misplaced data re-read (Waiman Long) [RHEL-34076]
  - srcu: Only accelerate on enqueue time (Waiman Long) [RHEL-34076]
  - srcu: Fix callbacks acceleration mishandling (Waiman Long) [RHEL-34076]
  - rcu: Conditionally build CPU-hotplug teardown callbacks (Waiman Long) [RHEL-34076]
  - rcu: Assume rcu_report_dead() is always called locally (Waiman Long) [RHEL-34076]
  - rcu: Assume IRQS disabled from rcu_report_dead() (Waiman Long) [RHEL-34076]
  - rcu: Use rcu_segcblist_segempty() instead of open coding it (Waiman Long) [RHEL-34076]
  - rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects (Waiman Long) [RHEL-34076]
  - srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (Waiman Long) [RHEL-34076]
  - rcu: Eliminate rcu_gp_slow_unregister() false positive (Waiman Long) [RHEL-34076]
  - rcu: Dump memory object info if callback function is invalid (Waiman Long) [RHEL-34076]
  - rcu: Add sysfs to provide throttled access to rcu_barrier() (Waiman Long) [RHEL-34076]
  - rcu/tree: Remove superfluous return from void call_rcu* functions (Waiman Long) [RHEL-34076]
  - srcu: Fix error handling in init_srcu_struct_fields() (Waiman Long) [RHEL-34076]
  - rcutorture: Traverse possible cpu to set maxcpu in rcu_nocb_toggle() (Waiman Long) [RHEL-34076]
  - rcutorture: Replace schedule_timeout*() 1-jiffy waits with HZ/20 (Waiman Long) [RHEL-34076]
  - torture: Move rcutorture_sched_setaffinity() out of rcutorture (Waiman Long) [RHEL-34076]
  - rcu: Include torture_sched_setaffinity() declaration (Waiman Long) [RHEL-34076]
  - rcutorture: Stop right-shifting torture_random() return values (Waiman Long) [RHEL-34076]
  - rcutorture: Dump grace-period state upon rtort_pipe_count incidents (Waiman Long) [RHEL-34076]
  - refscale: Add a "jiffies" test (Waiman Long) [RHEL-34076]
  - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() (Waiman Long) [RHEL-34076]
  - rcuscale: fix building with RCU_TINY (Waiman Long) [RHEL-34076]
  - rcuscale: Add RCU Tasks Rude testing (Waiman Long) [RHEL-34076]
  - rcuscale: Measure RCU Tasks Trace grace-period kthread CPU time (Waiman Long) [RHEL-34076]
  - rcuscale: Measure grace-period kthread CPU time (Waiman Long) [RHEL-34076]
  - rcuscale: Print out full set of kfree_rcu parameters (Waiman Long) [RHEL-34076]
  - rcuscale: Print out full set of module parameters (Waiman Long) [RHEL-34076]
  - rcuscale: Add minruntime module parameter (Waiman Long) [RHEL-34076]
  - rcuscale: Fix gp_async_max typo: s/reader/writer/ (Waiman Long) [RHEL-34076]
  - rcuscale: Permit blocking delays between writers (Waiman Long) [RHEL-34076]
  - rcu-tasks: Fix boot-time RCU tasks debug-only deadlock (Waiman Long) [RHEL-34076]
  - rcu-tasks: Permit use of debug-objects with RCU Tasks flavors (Waiman Long) [RHEL-34076]
  - rcu-tasks: Cancel callback laziness if too many callbacks (Waiman Long) [RHEL-34076]
  - rcu-tasks: Add kernel boot parameters for callback laziness (Waiman Long) [RHEL-34076]
  - rcu-tasks: Remove redundant #ifdef CONFIG_TASKS_RCU (Waiman Long) [RHEL-34076]
  - rcu-tasks: Treat only synchronous grace periods urgently (Waiman Long) [RHEL-34076]
  - rcu: Make the rcu_nocb_poll boot parameter usable via boot config (Waiman Long) [RHEL-34076]
  - rcu: Mark __rcu_irq_enter_check_tick() ->rcu_urgent_qs load (Waiman Long) [RHEL-34076]
  - rcu: Clarify rcu_is_watching() kernel-doc comment (Waiman Long) [RHEL-34076]
  - rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale (Waiman Long) [RHEL-34076]
  - rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() (Waiman Long) [RHEL-34076]
  - rcu-tasks: Clarify the cblist_init_generic() function's pr_info() output (Waiman Long) [RHEL-34076]
  - rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() (Waiman Long) [RHEL-34076]
  - rcu/nocb: Make shrinker iterate only over NOCB CPUs (Waiman Long) [RHEL-34076]
  - rcu/nocb: Recheck lazy callbacks under the ->nocb_lock from shrinker (Waiman Long) [RHEL-34076]
  - rcu/nocb: Fix shrinker race against callback enqueuer (Waiman Long) [RHEL-34076]
  - rcu/nocb: Protect lazy shrinker against concurrent (de-)offloading (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Make drain_page_cache() take early return if cache is disabled (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Make fill page cache start from krcp->nr_bkv_objs (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Do not run a page work if a cache is disabled (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Use consistent krcp when growing kfree_rcu() page cache (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Invoke debug_rcu_bhead_unqueue() after checking bnode->gp_snap (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Add debug check for GP complete for kfree_rcu_cpu list (Waiman Long) [RHEL-34076]
  - rcu/kvfree: Add debug to check grace periods (Waiman Long) [RHEL-34076]
  - rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs (Waiman Long) [RHEL-34076]
  - rcu: Make rcu_cpu_starting() rely on interrupts being disabled (Waiman Long) [RHEL-34076]
  - rcu: Mark rcu_cpu_kthread() accesses to ->rcu_cpu_has_work (Waiman Long) [RHEL-34076]
  - rcu: Mark additional concurrent load from ->cpu_no_qs.b.exp (Waiman Long) [RHEL-34076]
  - rcu: Employ jiffies-based backstop to callback time limit (Waiman Long) [RHEL-34076]
  - rcu: Check callback-invocation time limit for rcuc kthreads (Waiman Long) [RHEL-34076]
  - rcutorture: Verify NUM_ACTIVE_RCU_POLL_OLDSTATE (Waiman Long) [RHEL-34076]
  - rcutorture: Verify NUM_ACTIVE_RCU_POLL_FULL_OLDSTATE (Waiman Long) [RHEL-34076]
  - rcu-tasks: Make grace-period-age message human-readable (Waiman Long) [RHEL-34076]
  - rcu: Synchronize ->qsmaskinitnext in rcu_boost_kthread_setaffinity() (Waiman Long) [RHEL-34076]
  - rcu/nocb: Add CPU number to CPU-{,de}offload failure messages (Waiman Long) [RHEL-34076]
  - rcutorture: Fix ksoftirqd boosting timing and iteration (Waiman Long) [RHEL-34076]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-469.el9]
changelog:
  - arm64: mm: Make hibernation aware of KFENCE (Maxim Levitsky) [RHEL-7225]
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38200] {CVE-2023-52809}
  - pinctrl: core: delete incorrect free in pinctrl_enable() (David Arcari) [RHEL-39758] {CVE-2024-36940}
  - x86/coco: Require seeding RNG with RDRAND on CoCo systems (Lenny Szubowicz) [RHEL-37269] {CVE-2024-35875}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34969] {CVE-2024-26961}
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37721] {CVE-2021-47385}
  - redhat/configs: add CONFIG_CSD_LOCK_WAIT_DEBUG_DEFAULT (Leonardo Bras) [RHEL-13876]
  - trace,smp: Add tracepoints for scheduling remotelly called functions (Leonardo Bras) [RHEL-13876]
  - trace,smp: Add tracepoints around remotelly called functions (Leonardo Bras) [RHEL-13876]
  - trace,smp: Trace all smp_function_call*() invocations (Leonardo Bras) [RHEL-13876]
  - locking/csd_lock: Remove added data from CSD lock debugging (Leonardo Bras) [RHEL-13876]
  - trace,smp: Add tracepoints for scheduling remotelly called functions (Leonardo Bras) [RHEL-13876]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-470.el9]
changelog:
  - modules: wait do_free_init correctly (Donald Dutile) [RHEL-28063]
  - Subject: revert of revert KEYS: Make use of platform keyring for module signature verify (Donald Dutile) [RHEL-28063]
  - linux/export: Ensure natural alignment of kcrctab array (Donald Dutile) [RHEL-28063]
  - linux/export: Fix alignment for 64-bit ksymtab entries (Donald Dutile) [RHEL-28063]
  - kernel/module: improve documentation for try_module_get() (Donald Dutile) [RHEL-28063]
  - module: Remove redundant TASK_UNINTERRUPTIBLE (Donald Dutile) [RHEL-28063]
  - params: Introduce the param_unknown_fn type (Donald Dutile) [RHEL-28063]
  - module/decompress: use kvmalloc() consistently (Donald Dutile) [RHEL-28063]
  - module: Annotate struct module_notes_attrs with __counted_by (Donald Dutile) [RHEL-28063]
  - module: Fix comment typo (Donald Dutile) [RHEL-28063]
  - module: Make is_mapping_symbol() return bool (Donald Dutile) [RHEL-28063]
  - module/decompress: use vmalloc() for gzip decompression workspace (Donald Dutile) [RHEL-28063]
  - module: Clarify documentation of module_param_call() (Donald Dutile) [RHEL-28063]
  - modpost: do not make find_tosym() return NULL (Donald Dutile) [RHEL-28063]
  - modpost: Optimize symbol search from linear to binary search (Donald Dutile) [RHEL-28063]
  - module/decompress: use vmalloc() for zstd decompression workspace (Donald Dutile) [RHEL-28063]
  - dyndbg: add source filename to prefix (Donald Dutile) [RHEL-28063]
  - dyndbg: increase PREFIX_SIZE to 128 (Donald Dutile) [RHEL-28063]
  - dyndbg: constify opt_array (Donald Dutile) [RHEL-28063]
  - module: Expose module_init_layout_section() (Donald Dutile) [RHEL-28063]
  - modpost, kallsyms: Treat add '$'-prefixed symbols as mapping symbols (Donald Dutile) [RHEL-28063]
  - module: Ignore RISC-V mapping symbols too (Donald Dutile) [RHEL-28063]
  - module: fix init_module_from_file() error handling (Donald Dutile) [RHEL-28063]
  - modules: catch concurrent module loads, treat them as idempotent (Donald Dutile) [RHEL-28063]
  - module: split up 'finit_module()' into init_module_from_file() helper (Donald Dutile) [RHEL-28063]
  - kallsyms: Fix kallsyms_selftest failure (Donald Dutile) [RHEL-28063]
  - kallsyms: Add more debug output for selftest (Donald Dutile) [RHEL-28063]
  - modpost: check static EXPORT_SYMBOL* by modpost again (Donald Dutile) [RHEL-28063]
  - kbuild: generate KSYMTAB entries by modpost (Donald Dutile) [RHEL-28063]
  - modpost: pass struct module pointer to check_section_mismatch() (Donald Dutile) [RHEL-28063]
  - modpost: fix off by one in is_executable_section() (Donald Dutile) [RHEL-28063]
  - modpost: Include '.text.*' in TEXT_SECTIONS (Donald Dutile) [RHEL-28063]
  - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() (Donald Dutile) [RHEL-28063]
  - tick/nohz: unexport __init-annotated tick_nohz_full_setup() (Donald Dutile) [RHEL-28063]
  - kallsyms: make kallsyms_show_value() as generic function (Donald Dutile) [RHEL-28063]
  - kallsyms: move kallsyms_show_value() out of kallsyms.c (Donald Dutile) [RHEL-28063]
  - modpost: detect section mismatch for R_ARM_REL32 (Donald Dutile) [RHEL-28063]
  - modpost: fix section_mismatch message for R_ARM_THM_{CALL,JUMP24,JUMP19} (Donald Dutile) [RHEL-28063]
  - modpost: detect section mismatch for R_ARM_THM_{MOVW_ABS_NC,MOVT_ABS} (Donald Dutile) [RHEL-28063]
  - modpost: refactor find_fromsym() and find_tosym() (Donald Dutile) [RHEL-28063]
  - modpost: detect section mismatch for R_ARM_{MOVW_ABS_NC,MOVT_ABS} (Donald Dutile) [RHEL-28063]
  - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Donald Dutile) [RHEL-28063]
  - modpost: fix section mismatch message for R_ARM_ABS32 (Donald Dutile) [RHEL-28063]
  - module/decompress: Fix error checking on zstd decompression (Donald Dutile) [RHEL-28063]
  - module: fix module load for ia64 (Donald Dutile) [RHEL-28063]
  - modpost: remove *_sections[] arrays (Donald Dutile) [RHEL-28063]
  - modpost: merge bad_tosec=ALL_EXIT_SECTIONS entries in sectioncheck table (Donald Dutile) [RHEL-28063]
  - modpost: merge fromsec=DATA_SECTIONS entries in sectioncheck table (Donald Dutile) [RHEL-28063]
  - modpost: remove is_shndx_special() check from section_rel(a) (Donald Dutile) [RHEL-28063]
  - modpost: replace r->r_offset, r->r_addend with faddr, taddr (Donald Dutile) [RHEL-28063]
  - modpost: unify 'sym' and 'to' in default_mismatch_handler() (Donald Dutile) [RHEL-28063]
  - modpost: remove unused argument from secref_whitelist() (Donald Dutile) [RHEL-28063]
  - Revert "modpost: skip ELF local symbols during section mismatch check" (Donald Dutile) [RHEL-28063]
  - kallsyms: remove unsed API lookup_symbol_attrs (Donald Dutile) [RHEL-28063]
  - module: Remove preempt_disable() from module reference counting. (Donald Dutile) [RHEL-28063]
  - module: Fix use-after-free bug in read_file_mod_stats() (Donald Dutile) [RHEL-28063]
  - modpost: rename find_elf_symbol() and find_elf_symbol2() (Donald Dutile) [RHEL-28063]
  - modpost: pass section index to find_elf_symbol2() (Donald Dutile) [RHEL-28063]
  - modpost: pass 'tosec' down to default_mismatch_handler() (Donald Dutile) [RHEL-28063]
  - modpost: squash extable_mismatch_handler() into default_mismatch_handler() (Donald Dutile) [RHEL-28063]
  - modpost: clean up is_executable_section() (Donald Dutile) [RHEL-28063]
  - modpost: squash report_sec_mismatch() into default_mismatch_handler() (Donald Dutile) [RHEL-28063]
  - modpost: squash report_extable_warnings() into extable_mismatch_handler() (Donald Dutile) [RHEL-28063]
  - modpost: remove get_prettyname() (Donald Dutile) [RHEL-28063]
  - modpost: remove fromsym info in __ex_table section mismatch warning (Donald Dutile) [RHEL-28063]
  - modpost: remove broken calculation of exception_table_entry size (Donald Dutile) [RHEL-28063]
  - module: include internal.h in module/dups.c (Donald Dutile) [RHEL-28063]
  - module: add debugging auto-load duplicate module support (Donald Dutile) [RHEL-28063]
  - module: stats: fix invalid_mod_bytes typo (Donald Dutile) [RHEL-28063]
  - module: remove use of uninitialized variable len (Donald Dutile) [RHEL-28063]
  - module: fix building stats for 32-bit targets (Donald Dutile) [RHEL-28063]
  - module: stats: include uapi/linux/module.h (Donald Dutile) [RHEL-28063]
  - module: avoid allocation if module is already present and ready (Donald Dutile) [RHEL-28063]
  - module: add debug stats to help identify memory pressure (Donald Dutile) [RHEL-28063]
  - module: extract patient module check into helper (Donald Dutile) [RHEL-28063]
  - modules/kmod: replace implementation with a semaphore (Donald Dutile) [RHEL-28063]
  - module: fix kmemleak annotations for non init ELF sections (Donald Dutile) [RHEL-28063]
  - module: Ignore L0 and rename is_arm_mapping_symbol() (Donald Dutile) [RHEL-28063]
  - module: Move is_arm_mapping_symbol() to module_symbol.h (Donald Dutile) [RHEL-28063]
  - module: Sync code of is_arm_mapping_symbol() (Donald Dutile) [RHEL-28063]
  - module: already_uses() - reduce pr_debug output volume (Donald Dutile) [RHEL-28063]
  - module: add section-size to move_module pr_debug (Donald Dutile) [RHEL-28063]
  - module: add symbol-name to pr_debug Absolute symbol (Donald Dutile) [RHEL-28063]
  - module: in layout_sections, move_module: add the modname (Donald Dutile) [RHEL-28063]
  - module: fold usermode helper kmod into modules directory (Donald Dutile) [RHEL-28063]
  - module: merge remnants of setup_load_info() to elf validation (Donald Dutile) [RHEL-28063]
  - module: move more elf validity checks to elf_validity_check() (Donald Dutile) [RHEL-28063]
  - module: add stop-grap sanity check on module memcpy() (Donald Dutile) [RHEL-28063]
  - module: add sanity check for ELF module section (Donald Dutile) [RHEL-28063]
  - module: rename check_module_license_and_versions() to check_export_symbol_versions() (Donald Dutile) [RHEL-28063]
  - module: converge taint work together (Donald Dutile) [RHEL-28063]
  - module: move signature taint to module_augment_kernel_taints() (Donald Dutile) [RHEL-28063]
  - module: move tainting until after a module hits our linked list (Donald Dutile) [RHEL-28063]
  - module: split taint adding with info checking (Donald Dutile) [RHEL-28063]
  - module: split taint work out of check_modinfo_livepatch() (Donald Dutile) [RHEL-28063]
  - module: rename set_license() to module_license_taint_check() (Donald Dutile) [RHEL-28063]
  - module: move check_modinfo() early to early_mod_check() (Donald Dutile) [RHEL-28063]
  - module: move early sanity checks into a helper (Donald Dutile) [RHEL-28063]
  - module: add a for_each_modinfo_entry() (Donald Dutile) [RHEL-28063]
  - module: rename next_string() to module_next_tag_pair() (Donald Dutile) [RHEL-28063]
  - module: move get_modinfo() helpers all above (Donald Dutile) [RHEL-28063]
  - modpost: Fix processing of CRCs on 32-bit build machines (Donald Dutile) [RHEL-28063]
  - module/decompress: Never use kunmap() for local un-mappings (Donald Dutile) [RHEL-28063]
  - kallsyms: Delete an unused parameter related to {module_}kallsyms_on_each_symbol() (Donald Dutile) [RHEL-28063]
  - dyndbg: cleanup dynamic usage in ib_srp.c (Donald Dutile) [RHEL-28063]
  - kernel/module: add documentation for try_module_get() (Donald Dutile) [RHEL-28063]
  - ARM: dyndbg: allow including dyndbg.h in decompressor (Donald Dutile) [RHEL-28063]
  - dyndbg: use the module notifier callbacks (Donald Dutile) [RHEL-28063]
  - dyndbg: remove unused 'base' arg from __ddebug_add_module() (Donald Dutile) [RHEL-28063]
  - module: make module_ktype structure constant (Donald Dutile) [RHEL-28063]
  - module: Remove the unused function within (Donald Dutile) [RHEL-28063]
  - scripts/gdb: fix usage of MOD_TEXT not defined when CONFIG_MODULES=n (Donald Dutile) [RHEL-28063]
  - scripts/gdb: fix 'lx-lsmod' show the wrong size (Donald Dutile) [RHEL-28063]
  - scripts/gdb: use mem instead of core_layout to get the module address (Donald Dutile) [RHEL-28063]
  - module: replace module_layout with module_memory (Donald Dutile) [RHEL-28063]
  - s390/module: fix loading modules with a lot of relocations (Donald Dutile) [RHEL-28063]
  - module: Use kstrtobool() instead of strtobool() (Donald Dutile) [RHEL-28063]
  - livepatch: Improve the search performance of module_kallsyms_on_each_symbol() (Donald Dutile) [RHEL-28063]
  - kallsyms: Fix scheduling with interrupts disabled in self-test (Donald Dutile) [RHEL-28063]
  - modpost: error out if addend_*_rel() is not implemented for REL arch (Donald Dutile) [RHEL-28063]
  - module/decompress: Support zstd in-kernel decompression (Donald Dutile) [RHEL-28063]
  - module: add module_elf_check_arch for module-specific checks (Donald Dutile) [RHEL-28063]
  - modpost: Mark uuid_le type to be suitable only for MEI (Donald Dutile) [RHEL-28063]
  - modpost: fix array_size.cocci warning (Donald Dutile) [RHEL-28063]
  - modpost: Join broken long printed messages (Donald Dutile) [RHEL-28063]
  - kallsyms: Remove unneeded semicolon (Donald Dutile) [RHEL-28063]
  - kallsyms: Add self-test facility (Donald Dutile) [RHEL-28063]
  - kallsyms: Add helper kallsyms_on_each_match_symbol() (Donald Dutile) [RHEL-28063]
  - kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] (Donald Dutile) [RHEL-28063]
  - kallsyms: Improve the performance of kallsyms_lookup_name() (Donald Dutile) [RHEL-28063]
  - module: Fix NULL vs IS_ERR checking for module_get_next_page (Donald Dutile) [RHEL-28063]
  - module: Remove unused macros module_addr_min/max (Donald Dutile) [RHEL-28063]
  - module: remove redundant module_sysfs_initialized variable (Donald Dutile) [RHEL-28063]
  - module: tracking: Keep a record of tainted unloaded modules only (Donald Dutile) [RHEL-28063]
  - linux/export: use inline assembler to populate symbol CRCs (Donald Dutile) [RHEL-28063]
  - powerpc/xmon: Use KSYM_NAME_LEN in array size (Donald Dutile) [RHEL-28063]
  - kallsyms: increase maximum kernel symbol length to 512 (Donald Dutile) [RHEL-28063]
  - kallsyms: support "big" kernel symbols (Donald Dutile) [RHEL-28063]
  - kallsyms: add static relationship between `KSYM_NAME_LEN{,_BUFFER}` (Donald Dutile) [RHEL-28063]
  - kallsyms: avoid hardcoding buffer size (Donald Dutile) [RHEL-28063]
  - cfi: Drop __CFI_ADDRESSABLE (Donald Dutile) [RHEL-28063]
  - cfi: Remove CONFIG_CFI_CLANG_SHADOW (Donald Dutile) [RHEL-28063]
  - module/decompress: generate sysfs string at compile time (Donald Dutile) [RHEL-28063]
  - module: Add debugfs interface to view unloaded tainted modules (Donald Dutile) [RHEL-28063]
  - dyndbg: add drm.debug style (drm/parameters/debug) bitmap support (Donald Dutile) [RHEL-28063]
  - dyndbg: validate class FOO by checking with module (Donald Dutile) [RHEL-28063]
  - dyndbg: add ddebug_attach_module_classes (Donald Dutile) [RHEL-28063]
  - kernel/module: add __dyndbg_classes section (Donald Dutile) [RHEL-28063]
  - dyndbg: add DECLARE_DYNDBG_CLASSMAP macro (Donald Dutile) [RHEL-28063]
  - dyndbg: add __pr_debug_cls for testing (Donald Dutile) [RHEL-28063]
  - dyndbg: add class_id to pr_debug callsites (Donald Dutile) [RHEL-28063]
  - dyndbg: gather __dyndbg[] state into struct _ddebug_info (Donald Dutile) [RHEL-28063]
  - dyndbg: cleanup auto vars in dynamic_debug_init (Donald Dutile) [RHEL-28063]
  - dyndbg: drop EXPORTed dynamic_debug_exec_queries (Donald Dutile) [RHEL-28063]
  - dyndbg: let query-modname override actual module name (Donald Dutile) [RHEL-28063]
  - dyndbg: use ESCAPE_SPACE for cat control (Donald Dutile) [RHEL-28063]
  - dyndbg: reverse module.callsite walk in cat control (Donald Dutile) [RHEL-28063]
  - dyndbg: reverse module walk in cat control (Donald Dutile) [RHEL-28063]
  - dyndbg: show both old and new in change-info (Donald Dutile) [RHEL-28063]
  - dyndbg: fix module.dyndbg handling (Donald Dutile) [RHEL-28063]
  - dyndbg: fix static_branch manipulation (Donald Dutile) [RHEL-28063]
  - modpost: fix module versioning when a symbol lacks valid CRC (Donald Dutile) [RHEL-28063]
  - modpost: remove .symbol_white_list field entirely (Donald Dutile) [RHEL-28063]
  - modpost: remove unneeded .symbol_white_list initializers (Donald Dutile) [RHEL-28063]
  - modpost: add PATTERNS() helper macro (Donald Dutile) [RHEL-28063]
  - modpost: shorten warning messages in report_sec_mismatch() (Donald Dutile) [RHEL-28063]
  - Revert "Kbuild, lto, workaround: Don't warn for initcall_reference in modpost" (Donald Dutile) [RHEL-28063]
  - modpost: use more reliable way to get fromsec in section_rel(a)() (Donald Dutile) [RHEL-28063]
  - modpost: add array range check to sec_name() (Donald Dutile) [RHEL-28063]
  - modpost: refactor get_secindex() (Donald Dutile) [RHEL-28063]
  - modpost: remove unused Elf_Sword macro (Donald Dutile) [RHEL-28063]
  - modpost: use sym_get_data() to get module device_table data (Donald Dutile) [RHEL-28063]
  - modpost: drop executable ELF support (Donald Dutile) [RHEL-28063]
  - module: Replace kmap() with kmap_local_page() (Donald Dutile) [RHEL-28063]
  - module: Show the last unloaded module's taint flag(s) (Donald Dutile) [RHEL-28063]
  - module: Use strscpy() for last_unloaded_module (Donald Dutile) [RHEL-28063]
  - module: Modify module_flags() to accept show_state argument (Donald Dutile) [RHEL-28063]
  - module: Move module's Kconfig items in kernel/module/ (Donald Dutile) [RHEL-28063]
  - module: panic: Taint the kernel when selftest modules load (Donald Dutile) [RHEL-28063]
  - module: Use vzalloc() instead of vmalloc()/memset(0) (Donald Dutile) [RHEL-28063]
  - module: Increase readability of module_kallsyms_lookup_name() (Donald Dutile) [RHEL-28063]
  - module: Fix ERRORs reported by checkpatch.pl (Donald Dutile) [RHEL-28063]
  - module: Add support for default value for module async_probe (Donald Dutile) [RHEL-28063]
  - module: kallsyms: Ensure preemption in add_kallsyms() with PREEMPT_RT (Donald Dutile) [RHEL-28063]
  - module: Fix "warning: variable 'exit' set but not used" (Donald Dutile) [RHEL-28063]
  - module: Fix selfAssignment cppcheck warning (Donald Dutile) [RHEL-28063]
  - modules: Fix corruption of /proc/kallsyms (Donald Dutile) [RHEL-28063]
  - modpost: fix section mismatch check for exported init/exit sections (Donald Dutile) [RHEL-28063]
  - modpost: use fnmatch() to simplify match() (Donald Dutile) [RHEL-28063]
  - modpost: simplify mod->name allocation (Donald Dutile) [RHEL-28063]
  - module: Fix prefix for module.sig_enforce module param (Donald Dutile) [RHEL-28063]
  - kbuild: check static EXPORT_SYMBOL* by script instead of modpost (Donald Dutile) [RHEL-28063]
  - modpost: squash if...else-if in find_elf_symbol2() (Donald Dutile) [RHEL-28063]
  - modpost: reuse ARRAY_SIZE() macro for section_mismatch() (Donald Dutile) [RHEL-28063]
  - modpost: remove the unused argument of check_sec_ref() (Donald Dutile) [RHEL-28063]
  - modpost: fix undefined behavior of is_arm_mapping_symbol() (Donald Dutile) [RHEL-28063]
  - modpost: fix removing numeric suffixes (Donald Dutile) [RHEL-28063]
  - genksyms: adjust the output format to modpost (Donald Dutile) [RHEL-28063]
  - kbuild: stop merging *.symversions (Donald Dutile) [RHEL-28063]
  - kbuild: link symbol CRCs at final link, removing CONFIG_MODULE_REL_CRCS (Donald Dutile) [RHEL-28063]
  - modpost: extract symbol versions from *.cmd files (Donald Dutile) [RHEL-28063]
  - modpost: add sym_find_with_module() helper (Donald Dutile) [RHEL-28063]
  - module: merge check_exported_symbol() into find_exported_symbol_in_section() (Donald Dutile) [RHEL-28063]
  - module: do not binary-search in __ksymtab_gpl if fsa->gplok is false (Donald Dutile) [RHEL-28063]
  - module: do not pass opaque pointer for symbol search (Donald Dutile) [RHEL-28063]
  - module: show disallowed symbol name for inherit_taint() (Donald Dutile) [RHEL-28063]
  - module: fix [e_shstrndx].sh_size=0 OOB access (Donald Dutile) [RHEL-28063]
  - module: Introduce module unload taint tracking (Donald Dutile) [RHEL-28063]
  - module: Move module_assert_mutex_or_preempt() to internal.h (Donald Dutile) [RHEL-28063]
  - module: Make module_flags_taint() accept a module's taints bitmap and usable outside core code (Donald Dutile) [RHEL-28063]
  - module.h: simplify MODULE_IMPORT_NS (Donald Dutile) [RHEL-28063]
  - modpost: change the license of EXPORT_SYMBOL to bool type (Donald Dutile) [RHEL-28063]
  - kbuild: record symbol versions in *.cmd files (Donald Dutile) [RHEL-28063]
  - kbuild: generate a list of objects in vmlinux (Donald Dutile) [RHEL-28063]
  - modpost: move *.mod.c generation to write_mod_c_files() (Donald Dutile) [RHEL-28063]
  - modpost: merge add_{intree_flag,retpoline,staging_flag} to add_header (Donald Dutile) [RHEL-28063]
  - modpost: split new_symbol() to symbol allocation and hash table addition (Donald Dutile) [RHEL-28063]
  - modpost: make sym_add_exported() always allocate a new symbol (Donald Dutile) [RHEL-28063]
  - modpost: make multiple export error (Donald Dutile) [RHEL-28063]
  - modpost: dump Module.symvers in the same order of modules.order (Donald Dutile) [RHEL-28063]
  - modpost: traverse the namespace_list in order (Donald Dutile) [RHEL-28063]
  - modpost: use doubly linked list for dump_lists (Donald Dutile) [RHEL-28063]
  - modpost: traverse unresolved symbols in order (Donald Dutile) [RHEL-28063]
  - modpost: add sym_add_unresolved() helper (Donald Dutile) [RHEL-28063]
  - modpost: traverse modules in order (Donald Dutile) [RHEL-28063]
  - modpost: import include/linux/list.h (Donald Dutile) [RHEL-28063]
  - modpost: change mod->gpl_compatible to bool type (Donald Dutile) [RHEL-28063]
  - modpost: use bool type where appropriate (Donald Dutile) [RHEL-28063]
  - modpost: move struct namespace_list to modpost.c (Donald Dutile) [RHEL-28063]
  - modpost: retrieve the module dependency and CRCs in check_exports() (Donald Dutile) [RHEL-28063]
  - modpost: add a separate error for exported symbols without definition (Donald Dutile) [RHEL-28063]
  - modpost: remove stale comment about sym_add_exported() (Donald Dutile) [RHEL-28063]
  - modpost: do not write out any file when error occurred (Donald Dutile) [RHEL-28063]
  - modpost: use snprintf() instead of sprintf() for safety (Donald Dutile) [RHEL-28063]
  - kbuild: refactor cmd_modversions_S (Donald Dutile) [RHEL-28063]
  - kbuild: refactor cmd_modversions_c (Donald Dutile) [RHEL-28063]
  - modpost: remove annoying namespace_from_kstrtabns() (Donald Dutile) [RHEL-28063]
  - modpost: remove redundant initializes for static variables (Donald Dutile) [RHEL-28063]
  - modpost: move export_from_secname() call to more relevant place (Donald Dutile) [RHEL-28063]
  - modpost: remove useless export_from_sec() (Donald Dutile) [RHEL-28063]
  - kbuild: do not remove empty *.symtypes explicitly (Donald Dutile) [RHEL-28063]
  - kbuild: factor out genksyms command from cmd_gensymtypes_{c,S} (Donald Dutile) [RHEL-28063]
  - module: Remove module_addr_min and module_addr_max (Donald Dutile) [RHEL-28063]
  - module: Add CONFIG_ARCH_WANTS_MODULES_DATA_IN_VMALLOC (Donald Dutile) [RHEL-28063]
  - module: Introduce data_layout (Donald Dutile) [RHEL-28063]
  - module: Prepare for handling several RB trees (Donald Dutile) [RHEL-28063]
  - module: Always have struct mod_tree_root (Donald Dutile) [RHEL-28063]
  - module: Rename debug_align() as strict_align() (Donald Dutile) [RHEL-28063]
  - module: Rework layout alignment to avoid BUG_ON()s (Donald Dutile) [RHEL-28063]
  - module: Move module_enable_x() and frob_text() in strict_rwx.c (Donald Dutile) [RHEL-28063]
  - module: Make module_enable_x() independent of CONFIG_ARCH_HAS_STRICT_MODULE_RWX (Donald Dutile) [RHEL-28063]
  - module: Move version support into a separate file (Donald Dutile) [RHEL-28063]
  - module: Move kdb module related code out of main kdb code (Donald Dutile) [RHEL-28063]
  - module: Move sysfs support into a separate file (Donald Dutile) [RHEL-28063]
  - module: Move procfs support into a separate file (Donald Dutile) [RHEL-28063]
  - module: kallsyms: Fix suspicious rcu usage (Donald Dutile) [RHEL-28063]
  - module: Move kallsyms support into a separate file (Donald Dutile) [RHEL-28063]
  - module: Move kmemleak support to a separate file (Donald Dutile) [RHEL-28063]
  - module: Move extra signature support out of core code (Donald Dutile) [RHEL-28063]
  - module: Move strict rwx support to a separate file (Donald Dutile) [RHEL-28063]
  - module: Move latched RB-tree support to a separate file (Donald Dutile) [RHEL-28063]
  - module: Move livepatch support to a separate file (Donald Dutile) [RHEL-28063]
  - module: Make internal.h and decompress.c more compliant (Donald Dutile) [RHEL-28063]
  - module: Simple refactor in preparation for split (Donald Dutile) [RHEL-28063]
  - scripts/gdb: Fix gdb 'lx-symbols' command (Donald Dutile) [RHEL-28063]
  - module: Move all into module/ (Donald Dutile) [RHEL-28063]
  - modpost: restore the warning message for missing symbol versions (Donald Dutile) [RHEL-28063]
  - ftrace: Have architectures opt-in for mcount build time sorting (Donald Dutile) [RHEL-28063]
  - ftrace: Fix assuming build time sort works for s390 (Donald Dutile) [RHEL-28063]
  - script/sorttable: Fix some initialization problems (Donald Dutile) [RHEL-28063]
  - ftrace: Add test to make sure compiled time sorts work (Donald Dutile) [RHEL-28063]
  - scripts: ftrace - move the sort-processing in ftrace_init (Donald Dutile) [RHEL-28063]
  - module.h: allow #define strings to work with MODULE_IMPORT_NS (Donald Dutile) [RHEL-28063]
  - livepatch: Avoid CPU hogging with cond_resched (Donald Dutile) [RHEL-28063]
  - sections: provide internal __is_kernel() and __is_kernel_text() helper (Donald Dutile) [RHEL-28063]
  - kallsyms: fix address-checks for kernel related range (Donald Dutile) [RHEL-28063]
  - dyndbg: refine verbosity 1-4 summary-detail (Donald Dutile) [RHEL-28063]
  - dyndbg: fix spurious vNpr_info change (Donald Dutile) [RHEL-28063]
  - dyndbg: no vpr-info on empty queries (Donald Dutile) [RHEL-28063]
  - dyndbg: vpr-info on remove-module complete, not starting (Donald Dutile) [RHEL-28063]
  - dyndbg: Remove support for ddebug_query param (Donald Dutile) [RHEL-28063]
  - dyndbg: make dyndbg a known cli param (Donald Dutile) [RHEL-28063]
  - dyndbg: show module in vpr-info in dd-exec-queries (Donald Dutile) [RHEL-28063]
  - scripts: update the comments of kallsyms support (Donald Dutile) [RHEL-28063]
  - modpost: get the *.mod file path more simply (Donald Dutile) [RHEL-28063]
  - kbuild: merge vmlinux_link() between ARCH=um and other architectures (Donald Dutile) [RHEL-28063]
  - kbuild: do not remove 'linux' link in scripts/link-vmlinux.sh (Donald Dutile) [RHEL-28063]
  - kbuild: merge vmlinux_link() between the ordinary link and Clang LTO (Donald Dutile) [RHEL-28063]
  - module: fix signature check failures when using in-kernel decompression (Donald Dutile) [RHEL-28063]
  - module: Remove outdated comment (Donald Dutile) [RHEL-28063]
  - module: fix building with sysfs disabled (Donald Dutile) [RHEL-28063]
  - kernel: Fix spelling mistake "compresser" -> "compressor" (Donald Dutile) [RHEL-28063]
  - module: add in-kernel support for decompressing (Donald Dutile) [RHEL-28063]
  - module: change to print useful messages from elf_validity_check() (Donald Dutile) [RHEL-28063]
  - module: fix validate_section_offset() overflow bug on 64-bit (Donald Dutile) [RHEL-28063]
  - module: fix clang CFI with MODULE_UNLOAD=n (Donald Dutile) [RHEL-28063]
  - Subject: revert KEYS: Make use of platform keyring for module signature verify (Donald Dutile) [RHEL-28063]
  - lib/bitmap.c make bitmap_print_bitmask_to_buf parseable (Donald Dutile) [RHEL-28063]
  - bitmap: extend comment to bitmap_print_bitmask/list_to_buf (Donald Dutile) [RHEL-28063]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-471.el9]
changelog:
  - Revert "kernel/panic.c: Move the location of bust_spinlocks to prevent hanging." (Derek Barbosa) [RHEL-39473]
  - arch/x86: Fix typos [partial] (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: switch to use device_add_groups() (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Remove extra parenthesis and add a space (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Add support for ACPI based probing (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Restructure sysfs group creation (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Define a struct to hold mailbox regs (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Create static func to handle platdev (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket (David Arcari) [RHEL-43368]
  - platform/x86/amd/hsmp: Move hsmp_test to probe (David Arcari) [RHEL-43368]
  - octeontx2-af: fix the double free in rvu_npc_freemem() (Kamal Heib) [RHEL-39651] {CVE-2024-36030}
  - e1000e: Add support for the next LOM generation (Ken Cox) [RHEL-17484]
  - e1000e: Use PME poll to circumvent unreliable ACPI wake (Ken Cox) [RHEL-17484]
  - net: e1000e: Remove unused declarations (Ken Cox) [RHEL-17484]
  - e1000e: Add @adapter description to kdoc (Ken Cox) [RHEL-17484]
  - mm: huge_memory: don't force huge page alignment on 32 bit (Rafael Aquini) [RHEL-22187]
  - x86/topology: Fix max_siblings calculation for some hybrid cpus (David Arcari) [RHEL-40607]
  - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39786]
  - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39786] {CVE-2024-36927}
  - Enable ALSA (CONFIG_SND) on aarch64 (Charles Mirabile) [RHEL-40411]
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Steve Best) [RHEL-39849] {CVE-2024-36899}
  - Add CONFIG_PCP_BATCH_SCALE_MAX to RHEL configs collection (Chris von Recklinghausen) [RHEL-20141]
  - mm and cache_info: remove unnecessary CPU cache info update (Chris von Recklinghausen) [RHEL-20141]
  - mm, pcp: reduce detecting time of consecutive high order page freeing (Chris von Recklinghausen) [RHEL-20141]
  - mm, pcp: decrease PCP high if free pages < high watermark (Chris von Recklinghausen) [RHEL-20141]
  - mm: tune PCP high automatically (Chris von Recklinghausen) [RHEL-20141]
  - mm: add framework for PCP high auto-tuning (Chris von Recklinghausen) [RHEL-20141]
  - mm, page_alloc: scale the number of pages that are batch allocated (Chris von Recklinghausen) [RHEL-20141]
  - mm: restrict the pcp batch scale factor to avoid too long latency (Chris von Recklinghausen) [RHEL-20141]
  - mm, pcp: reduce lock contention for draining high-order pages (Chris von Recklinghausen) [RHEL-20141]
  - cacheinfo: calculate size of per-CPU data cache slice (Chris von Recklinghausen) [RHEL-20141]
  - mm, pcp: avoid to drain PCP when process exit (Chris von Recklinghausen) [RHEL-20141]
  - mm/page_alloc: remove unnecessary parameter batch of nr_pcp_free (Chris von Recklinghausen) [RHEL-20141]
  - mm/page_alloc: remove track of active PCP lists range in bulk free (Chris von Recklinghausen) [RHEL-20141]
  - mm: remove obsolete comment above struct per_cpu_pages (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move is_check_pages_enabled() into page_alloc.c (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move sysctls into it own fils (Chris von Recklinghausen) [RHEL-20141]
  - mm: vmscan: use gfp_has_io_fs() (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move pm_* function into power (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move mark_free_page() into snapshot.c (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: split out DEBUG_PAGEALLOC (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: split out FAIL_PAGE_ALLOC (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: remove alloc_contig_dump_pages() stub (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: squash page_is_consistent() (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: collect mem statistic into show_mem.c (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move set_zone_contiguous() into mm_init.c (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move init_on_alloc/free() into mm_init.c (Chris von Recklinghausen) [RHEL-20141]
  - mm: page_alloc: move mirrored_kernelcore into mm_init.c (Chris von Recklinghausen) [RHEL-20141]
  - rxrpc: replace zero-lenth array with DECLARE_FLEX_ARRAY() helper (Ivan Vecera) [RHEL-40250]
  - ext4: fix fortify warning in fs/ext4/fast_commit.c:1551 (Ivan Vecera) [RHEL-40250]
  - string: Allow 2-argument strscpy_pad() (Ivan Vecera) [RHEL-40250]
  - string: Redefine strscpy_pad() as a macro (Ivan Vecera) [RHEL-40250]
  - string: Allow 2-argument strscpy() (Ivan Vecera) [RHEL-40250]
  - kernel.h: split out COUNT_ARGS() and CONCATENATE() to args.h (Ivan Vecera) [RHEL-40250]
  - uml: Replace strlcpy with strscpy (Ivan Vecera) [RHEL-40250]
  - fortify: strscpy: Fix flipped q and p docstring typo (Ivan Vecera) [RHEL-40250]
  - fortify: Use const variables for __member_size tracking (Ivan Vecera) [RHEL-40250]
  - overflow: add DEFINE_FLEX() for on-stack allocs (Ivan Vecera) [RHEL-40250]
  - fortify: Use __builtin_dynamic_object_size() when available (Ivan Vecera) [RHEL-40250]
  - fortify: Short-circuit known-safe calls to strscpy() (Ivan Vecera) [RHEL-40250]
  - string: Rewrite and add more kern-doc for the str*() functions (Ivan Vecera) [RHEL-40250]
  - fortify: Convert to struct vs member helpers (Ivan Vecera) [RHEL-40250]
  - fortify: Explicitly check bounds are compile-time constants (Ivan Vecera) [RHEL-40250]
  - fortify: Use SIZE_MAX instead of (size_t)-1 (Ivan Vecera) [RHEL-40250]
  - fortify: Add run-time WARN for cross-field memcpy() (Ivan Vecera) [RHEL-40250]
  - sched/x86: Export 'percpu arch_freq_scale' (Phil Auld) [RHEL-39512]
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Mark Salter) [RHEL-39308]
  - randomize_kstack: Improve entropy diffusion (Chris von Recklinghausen) [RHEL-37308] {CVE-2024-35918}
  - net: usb: lan78xx: add phy dependency for user tools (Jose Ignacio Tornos Martinez) [RHEL-17582]
  - aio: Fix incorrect usage of eventfd_signal_allowed() (Waiman Long) [RHEL-38738]
  - aio: fix use-after-free due to missing POLLFREE handling (Waiman Long) [RHEL-38738 RHEL-38739] {CVE-2021-47505}
  - aio: keep poll requests on waitqueue until completed (Waiman Long) [RHEL-38738 RHEL-38739] {CVE-2021-47505}
  - redhat/configs: Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-28760]
  - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-28760]
  - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-28760]
  - md: Revert "md: Fix overflow in is_mddev_idle" (Nigel Croxon) [RHEL-39038]
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37018] {CVE-2024-35852}
  - pwm: Fix double shift bug (Steve Best) [RHEL-38280] {CVE-2023-52756}
  - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35178] {CVE-2024-27025}
  - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33260] {CVE-2024-26908}
  - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36934] {CVE-2024-35824}
  - ice: final upstream version of the fix for RHEL-19000 (Michal Schmidt) [RHEL-35969]
  - kernel.spec: add iommu selftests to kernel-selftests-internal (Eder Zulian) [RHEL-32894]
  - virtiofs: include a newline in sysfs tag (Brian Foster) [RHEL-34071]
  - virtio_fs: remove duplicate check if queue is broken (Brian Foster) [RHEL-34071]
  - virtiofs: drop __exit from virtio_fs_sysfs_exit() (Brian Foster) [RHEL-34071]
  - virtiofs: emit uevents on filesystem events (Brian Foster) [RHEL-34071]
  - virtiofs: export filesystem tags through sysfs (Brian Foster) [RHEL-34071]
  - virtiofs: forbid newlines in tags (Brian Foster) [RHEL-34071]
  - xsk: Add missing SPDX to AF_XDP TX metadata documentation (Petr Oros) [RHEL-31944]
  - xsk: Don't assume metadata is always requested in TX completion (Petr Oros) [RHEL-31944]
  - selftests/bpf: Add TX side to xdp_hw_metadata (Petr Oros) [RHEL-31944]
  - selftests/bpf: Convert xdp_hw_metadata to XDP_USE_NEED_WAKEUP (Petr Oros) [RHEL-31944]
  - selftests/bpf: Fix broken build where char is unsigned (Petr Oros) [RHEL-31944]
  - selftests/bpf: Add options and frags to xdp_hw_metadata (Petr Oros) [RHEL-31944]
  - selftests/bpf: xdp_hw_metadata track more timestamps (Petr Oros) [RHEL-31944]
  - selftests/bpf: Add TX side to xdp_metadata (Petr Oros) [RHEL-31944]
  - selftests/bpf: Add csum helpers (Petr Oros) [RHEL-31944]
  - selftests/xsk: Support tx_metadata_len (Petr Oros) [RHEL-31944]
  - xsk: Add option to calculate TX checksum in SW (Petr Oros) [RHEL-31944]
  - xsk: Validate xsk_tx_metadata flags (Petr Oros) [RHEL-31944]
  - xsk: Document tx_metadata_len layout (Petr Oros) [RHEL-31944]
  - tools: ynl: Print xsk-features from the sample (Petr Oros) [RHEL-31944]
  - xsk: Add TX timestamp and TX checksum offload support (Petr Oros) [RHEL-31944]
  - xsk: Support tx_metadata_len (Petr Oros) [RHEL-31944]
  - xsk: Elide base_addr comparison in xp_unaligned_validate_desc (Petr Oros) [RHEL-31944]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-472.el9]
changelog:
  - ext4: enable meta_bg only when new desc blocks are needed (Carlos Maiolino) [RHEL-36282]
  - ext4: verify s_clusters_per_group even without bigalloc (Carlos Maiolino) [RHEL-36282]
  - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36976] {CVE-2024-35807}
  - ext4_get_link(): fix breakage in RCU mode (Carlos Maiolino) [RHEL-36282]
  - ext4: correct best extent lstart adjustment logic (Carlos Maiolino) [RHEL-36282]
  - ext4: forbid commit inconsistent quota data when errors=remount-ro (Carlos Maiolino) [RHEL-36282]
  - ext4: add a hint for block bitmap corrupt state in mb_groups (Carlos Maiolino) [RHEL-36282]
  - ext4: fix the comment of ext4_map_blocks()/ext4_ext_map_blocks() (Carlos Maiolino) [RHEL-36282]
  - ext4: mark the group block bitmap as corrupted before reporting an error (Carlos Maiolino) [RHEL-36282]
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Carlos Maiolino) [RHEL-31702] {CVE-2024-26772}
  - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() (Carlos Maiolino) [RHEL-36282]
  - ext4: do not trim the group with corrupted block bitmap (Carlos Maiolino) [RHEL-36282]
  - ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() (Carlos Maiolino) [RHEL-36282]
  - ext4_add_entry(): ->d_name.len is never 0 (Carlos Maiolino) [RHEL-36282]
  - ext4: don't access the source subdirectory content on same-directory rename (Carlos Maiolino) [RHEL-36282]
  - Revert "ext4: apply umask if ACL support is disabled" (Carlos Maiolino) [RHEL-36282]
  - ext4: apply umask if ACL support is disabled (Carlos Maiolino) [RHEL-36282]
  - ext4: mark buffer new if it is unwritten to avoid stale data exposure (Carlos Maiolino) [RHEL-36282]
  - ext4: move 'ix' sanity check to corrent position (Carlos Maiolino) [RHEL-36282]
  - ext4: remove unnecessary initialization of count2 in set_flexbg_block_bitmap (Carlos Maiolino) [RHEL-36282]
  - ext4: remove unnecessary check to avoid repeat update_backups for the same gdb (Carlos Maiolino) [RHEL-36282]
  - ext4: simplify the gdbblock calculation in add_new_gdb_meta_bg (Carlos Maiolino) [RHEL-36282]
  - ext4: use saved local variable sbi instead of EXT4_SB(sb) (Carlos Maiolino) [RHEL-36282]
  - ext4: remove EXT4FS_DEBUG defination in resize.c (Carlos Maiolino) [RHEL-36282]
  - ext4: calculate free_clusters_count in cluster unit in verify_group_input (Carlos Maiolino) [RHEL-36282]
  - ext4: remove commented code in reserve_backup_gdb (Carlos Maiolino) [RHEL-36282]
  - ext4: remove redundant check of count (Carlos Maiolino) [RHEL-36282]
  - ext4: fix typo in setup_new_flex_group_blocks (Carlos Maiolino) [RHEL-36282]
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Carlos Maiolino) [RHEL-36282]
  - ext4: correct return value of ext4_convert_meta_bg (Carlos Maiolino) [RHEL-36282]
  - ext4: add missed brelse in update_backups (Carlos Maiolino) [RHEL-36282]
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36282]
  - ext4: fix incorrect offset (Carlos Maiolino) [RHEL-36282]
  - ext4: correct the start block of counting reserved clusters (Carlos Maiolino) [RHEL-36282]
  - ext4: make running and commit transaction have their own freed_data_list (Carlos Maiolino) [RHEL-36282]
  - ext4: fix traditional comparison using max/min method (Carlos Maiolino) [RHEL-36282]
  - ext4: add missing initialization of call_notify_error in update_super_work() (Carlos Maiolino) [RHEL-36282]
  - ext4: remove redundant checks of s_encoding (Carlos Maiolino) [RHEL-36282]
  - ext4: reject casefold inode flag without casefold feature (Carlos Maiolino) [RHEL-36282]
  - ext4: rename s_error_work to s_sb_upd_work (Carlos Maiolino) [RHEL-36282]
  - ext4: add periodic superblock update check (Carlos Maiolino) [RHEL-36282]
  - ext4: fix unttached inode after power cut with orphan file feature enabled (Carlos Maiolino) [RHEL-36282]
  - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (Carlos Maiolino) [RHEL-36282]
  - ext4: mballoc: avoid garbage value from err (Carlos Maiolino) [RHEL-36282]
  - ext4: fix race between writepages and remount (Carlos Maiolino) [RHEL-36282]
  - ext4: avoid potential data overflow in next_linear_group (Carlos Maiolino) [RHEL-36282]
  - jbd2: abort journal when detecting metadata writeback error of fs dev (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove unused 'JBD2_CHECKPOINT_IO_ERROR' and 'j_atomic_flags' (Carlos Maiolino) [RHEL-36282]
  - jbd2: replace journal state flag by checking errseq (Carlos Maiolino) [RHEL-36282]
  - jbd2: add errseq to detect client fs's bdev writeback error (Carlos Maiolino) [RHEL-36282]
  - jbd2: fix soft lockup in journal_finish_inode_data_buffers() (Carlos Maiolino) [RHEL-36282]
  - jbd2: increase the journal IO's priority (Carlos Maiolino) [RHEL-36282]
  - jbd2: correct the printing of write_flags in jbd2_write_superblock() (Carlos Maiolino) [RHEL-36282]
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Carlos Maiolino) [RHEL-36282]
  - jbd2: fix printk format type for 'io_block' in do_one_pass() (Carlos Maiolino) [RHEL-36282]
  - jbd2: print io_block if check data block checksum failed when do recovery (Carlos Maiolino) [RHEL-36282]
  - jbd2: Fix memory leak in journal_init_common() (Carlos Maiolino) [RHEL-36282]
  - jbd2: correct the end of the journal recovery scan range (Carlos Maiolino) [RHEL-36282]
  - jbd2: jbd2_journal_init_{dev,inode} return proper error return value (Carlos Maiolino) [RHEL-36282]
  - jbd2: drop useless error tag in jbd2_journal_wipe() (Carlos Maiolino) [RHEL-36282]
  - jbd2: cleanup journal_init_common() (Carlos Maiolino) [RHEL-36282]
  - jbd2: add fast_commit space check (Carlos Maiolino) [RHEL-36282]
  - jbd2: cleanup load_superblock() (Carlos Maiolino) [RHEL-36282]
  - jbd2: open code jbd2_verify_csum_type() helper (Carlos Maiolino) [RHEL-36282]
  - jbd2: checking valid features early in journal_get_superblock() (Carlos Maiolino) [RHEL-36282]
  - jbd2: don't load superblock in jbd2_journal_check_used_features() (Carlos Maiolino) [RHEL-36282]
  - jbd2: move load_superblock() into journal_init_common() (Carlos Maiolino) [RHEL-36282]
  - jbd2: move load_superblock() dependent functions (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove unused function '__cp_buffer_busy' (Carlos Maiolino) [RHEL-36282]
  - jbd2: check 'jh->b_transaction' before removing it from checkpoint (Carlos Maiolino) [RHEL-36282]
  - jbd2: fix checkpoint cleanup performance regression (Carlos Maiolino) [RHEL-36282]
  - fs: jbd2: fix an incorrect warn log (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove __journal_try_to_free_buffer() (Carlos Maiolino) [RHEL-36282]
  - jbd2: fix a race when checking checkpoint buffer busy (Carlos Maiolino) [RHEL-36282]
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove journal_clean_one_cp_list() (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove t_checkpoint_io_list (Carlos Maiolino) [RHEL-36282]
  - jbd2: recheck chechpointing non-dirty buffer (Carlos Maiolino) [RHEL-36282]
  - jbd2: skip reading super block if it has been verified (Carlos Maiolino) [RHEL-36282]
  - jbd2: remove j_format_version (Carlos Maiolino) [RHEL-36282]
  - jbd2: factor out journal initialization from journal_get_superblock() (Carlos Maiolino) [RHEL-36282]
  - jbd2: switch to check format version in superblock directly (Carlos Maiolino) [RHEL-36282]
  - jbd2: Avoid printing outside the boundary of the buffer (Carlos Maiolino) [RHEL-36282]
  - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39813] {CVE-2024-36917}
  - Revert "i2c: Make remove callback return void" for ti-tfp410.c (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Drop unused fields in struct pca953x_platform_data (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: add support for TCA9538 (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Remove unused PCAL953X_OUT_CONF from pcal6534_recalc_addr() (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Clean up pcal6534_check_register() (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: avoid logically dead code (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: avoid to use uninitialized value pinctrl (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Convert to i2c's .probe_new() (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Add missing header(s) (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Add support for PCAL6534 (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Swap if statements to save later complexity (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Fix pca953x_gpio_set_pull_up_down() (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: introduce support for nxp,pcal6408 (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Add mutex_lock for regcache sync in PM (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Make platform teardown callback return void (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: use the correct register address when regcache sync during init (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: use the correct range when do regmap sync (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: only use single read/write for No AI mode (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: use the correct register address to do regcache sync (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Make the irqchip immutable (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) (Andrew Halaney) [RHEL-35606]
  - gpio: pca953xx: Add support for pca6408 (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: Improve bias setting (Andrew Halaney) [RHEL-35606]
  - gpio: pca953x: do not ignore i2c errors (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4: Add main esm address range (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4-main: Enable support for UHS mode (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4-evm: Fix UART pin type and macro type (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4: Use exact ranges for FSS node (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4: Remove UART baud rate selection (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4: Add Wave5 Video Encoder/Decoder Node (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4-main: Fix mux-reg-masks in serdes_ln_ctrl (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4-main: Add CSI2RX capture nodes (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4-evm: Enable camera peripherals (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: k3-j784s4: Add MIT license along with GPL-2.0 (Andrew Halaney) [RHEL-35606]
  - arm64: dts: ti: Add phase tags for memory node on J784S4 EVM and AM69 SK (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Fix sync-lost issue with two displays (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Fix initial plane zpos values (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Use DRM_PLANE_COMMIT_ACTIVE_ONLY (Andrew Halaney) [RHEL-35606]
  - drm/tidss: IRQ code cleanup (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Fix dss reset (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Add simple K2G manual reset (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Check for K2G in in dispc_softreset() (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Return error value from from softreset (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Move reset to the end of dispc_init() (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Drop useless variable init (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Use PM autosuspend (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Use pm_runtime_resume_and_get() (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Add support for AM62A7 DSS (Andrew Halaney) [RHEL-35606]
  - mux: mmio: use reg property when parent device is not a syscon (Andrew Halaney) [RHEL-35606]
  - dt-bindings: phy: cadence-sierra: Add clock ID for derived reference clock (Andrew Halaney) [RHEL-35606]
  - dt-bindings: phy: cadence-torrent: Rename SSC macros to use generic names (Andrew Halaney) [RHEL-35606]
  - dt-bindings: phy: cadence-torrent: Add clock IDs for derived and received refclk (Andrew Halaney) [RHEL-35606]
  - dt-bindings: phy: Add PHY_TYPE_USXGMII definition (Andrew Halaney) [RHEL-35606]
  - dt-bindings: msm: dsi: document phy-type property for 7nm dsi phy (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Add SGMII support in WIZ driver for J784S4 (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Use key:value pair table for all settings (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add single link USXGMII configuration for 156.25MHz refclk (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add USB + DP multilink configuration (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add PCIe + DP multilink configuration for 100MHz refclk (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Prepare driver for multilink DP support (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add function to get PLL to be configured for DP (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Add a determine_rate hook (Andrew Halaney) [RHEL-35606]
  - phy: cadence: torrent: Add a determine_rate hook (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Add SGMII support in WIZ driver for J721E (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select() (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-35606]
  - phy: cadence: phy-cadence-torrent: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Add support to enable LN23 Type-C swap (Andrew Halaney) [RHEL-35606]
  - phy: ti: j721e-wiz: Manage TypeC lane swap if typec-dir-gpios not specified (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: add j721s2-wiz-10g module support (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: add j784s4-wiz-10g module support (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: fix reference leaks in wiz_probe() (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: stop name conflict if multiple serdes are initialized (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: set PMA_CMN_REFCLK_DIG_DIV based on reflk rate (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: add support for j7200-wiz-10g (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz.c: Add usxgmii support in wiz driver (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: Add SGMII support in wiz driver for J7200 (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Remove unused `regmap` field from state struct (Andrew Halaney) [RHEL-35606]
  - phy: ti: phy-j721e-wiz: use OF data for device specific data (Andrew Halaney) [RHEL-35606]
  - phy: ti: Fix missing sentinel for clk_div_table (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: use swap() to make code cleaner (Andrew Halaney) [RHEL-35606]
  - phy: ti: report 2 non-kernel-doc comments (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add support to output received reference clock (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Model reference clock driver as a clock to enable derived refclk (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Migrate to clk_hw based registration and OF APIs (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Check PIPE mode PHY status to be ready for operation (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add debug information for PHY configuration (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add separate functions for reusable code (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add PHY configuration for DP with 100MHz ref clock (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add PHY registers for DP in array format (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Configure PHY registers as a function of input reference clock rate (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Add enum for supported input reference clock frequencies (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Reorder few functions to remove function declarations (Andrew Halaney) [RHEL-35606]
  - phy: cadence-torrent: Remove use of CamelCase to fix checkpatch CHECK message (Andrew Halaney) [RHEL-35606]
  - drm/gem: rename struct drm_gem_dma_object.{paddr => dma_addr} (Andrew Halaney) [RHEL-35606]
  - drm: Remove linux/media-bus-format.h from drm_crtc.h (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Update encoder/bridge chain connect model (Andrew Halaney) [RHEL-35606]
  - drm/bridge: Centralize error message when bridge attach fails (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Add support for AM625 DSS (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Convert to platform remove callback returning void (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Use GEM DMA fbdev emulation (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Implement struct drm_plane_helper_funcs.atomic_enable (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Remove return values from dispc_plane_{setup, enable}() (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Remove unnecessary include statements for drm_crtc_helper.h (Andrew Halaney) [RHEL-35606]
  - drm/fb-helper: Remove unnecessary include statements (Andrew Halaney) [RHEL-35606]
  - drm/fb-helper: Move generic fbdev emulation into separate source file (Andrew Halaney) [RHEL-35606]
  - drm/gem: rename GEM CMA helpers to GEM DMA helpers (Andrew Halaney) [RHEL-35606]
  - drm: Remove CONFIG_DRM_KMS_CMA_HELPER option (Andrew Halaney) [RHEL-35606]
  - drm/fb: rename FB CMA helpers to FB DMA helpers (Andrew Halaney) [RHEL-35606]
  - drm: Drop drm_blend.h from drm_crtc.h (Andrew Halaney) [RHEL-35606]
  - drm/fb: remove unused includes of drm_fb_cma_helper.h (Andrew Halaney) [RHEL-35606]
  - drm: Drop drm_framebuffer.h from drm_crtc.h (Andrew Halaney) [RHEL-35606]
  - drm: Remove unnecessary include statements of drm_plane_helper.h (Andrew Halaney) [RHEL-35606]
  - drm: tidss: Fix pixel format definition (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Set max DMA segment size (Andrew Halaney) [RHEL-35606]
  - drm/tidss: fix repeated words in comments (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Soft Reset DISPC on startup (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Use drm_module_platform_driver() to register the driver (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Fix warning: unused variable 'tidss_pm_ops' (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Make use of the helper macro SET_RUNTIME_PM_OPS() (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Convert to Linux IRQ interfaces (Andrew Halaney) [RHEL-35606]
  - drm/tidss: Don't use struct drm_device.irq_enabled (Andrew Halaney) [RHEL-35606]
  - drm/<driver>: drm_gem_plane_helper_prepare_fb is now the default (Andrew Halaney) [RHEL-35606]
  - selftests/bpf: Check VLAN tag and proto in xdp_metadata (Petr Oros) [RHEL-31890]
  - selftests/bpf: Add AF_INET packet generation to xdp_metadata (Petr Oros) [RHEL-31890]
  - selftests/bpf: Add flags and VLAN hint to xdp_hw_metadata (Petr Oros) [RHEL-31890]
  - selftests/bpf: Allow VLAN packets in xdp_hw_metadata (Petr Oros) [RHEL-31890]
  - net: make vlan_get_tag() return -ENODATA instead of -EINVAL (Petr Oros) [RHEL-31890]
  - veth: Implement VLAN tag XDP hint (Petr Oros) [RHEL-31890]
  - xdp: Add VLAN tag hint (Petr Oros) [RHEL-31890]
  - xsk: add functions to fill control buffer (Petr Oros) [RHEL-31890]
  - redhat: remove gcc version check for ENABLE_WERROR (Eric Chanudet) [RHEL-43372]
  - vduse: Temporarily fail if control queue feature requested (Cindy Lu) [RHEL-23888]
  - redhat/configs: Enable CONFIG_VDPA_USER (Cindy Lu) [RHEL-23888]
  - mm: replace vma->vm_flags direct modifications with modifier calls (Cindy Lu) [RHEL-23888]
  - vduse: enable Virtio-net device type (Cindy Lu) [RHEL-23888]
  - vduse: validate block features only with block devices (Cindy Lu) [RHEL-23888]
  - file: Export receive_fd() to modules (Cindy Lu) [RHEL-23888]
  - eventfd: simplify eventfd_signal() (Cindy Lu) [RHEL-23888]
  - vduse: implement DMA sync callbacks (Cindy Lu) [RHEL-23888]
  - vduse: make vduse_class constant (Cindy Lu) [RHEL-23888]
  - vdpa: Provide interface to read driver features (Cindy Lu) [RHEL-23888]
  - vduse: Use proper spinlock for IRQ injection (Cindy Lu) [RHEL-23888]
  - vduse: fix NULL pointer dereference (Cindy Lu) [RHEL-23888]
  - vduse: avoid empty string for dev name (Cindy Lu) [RHEL-23888]
  - vduse: Support specifying bounce buffer size via sysfs (Cindy Lu) [RHEL-23888]
  - vduse: Delay iova domain creation (Cindy Lu) [RHEL-23888]
  - vduse: Signal vq trigger eventfd directly if possible (Cindy Lu) [RHEL-23888]
  - vduse: Add sysfs interface for irq callback affinity (Cindy Lu) [RHEL-23888]
  - vduse: Support get_vq_affinity callback (Cindy Lu) [RHEL-23888]
  - vduse: Support set_vq_affinity callback (Cindy Lu) [RHEL-23888]
  - vduse: Refactor allocation for vduse virtqueues (Cindy Lu) [RHEL-23888]
  - driver core: class: remove module * from class_create() (Cindy Lu) [RHEL-23888]
  - vduse: Remove include of rwlock.h (Cindy Lu) [RHEL-23888]
  - vduse: Validate vq_num in vduse_validate_config() (Cindy Lu) [RHEL-23888]
  - driver core: make struct class.devnode() take a const * (Cindy Lu) [RHEL-23888]
  - vduse: prevent uninitialized memory accesses (Cindy Lu) [RHEL-23888]
  - vduse: Support querying information of IOVA regions (Cindy Lu) [RHEL-23888]
  - vduse: Support registering userspace memory for IOVA regions (Cindy Lu) [RHEL-23888]
  - vduse: Support using userspace pages as bounce buffer (Cindy Lu) [RHEL-23888]
  - vduse: Use memcpy_{to,from}_page() in do_bounce() (Cindy Lu) [RHEL-23888]
  - vduse: Remove unnecessary spin lock protection (Cindy Lu) [RHEL-23888]
  - vduse: Tie vduse mgmtdev and its device (Cindy Lu) [RHEL-23888]
  - vduse: Fix NULL pointer dereference on sysfs access (Cindy Lu) [RHEL-23888]
  - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (Cindy Lu) [RHEL-23888]
  - vdpa: multiple address spaces support (Cindy Lu) [RHEL-23888]
  - vdpa: introduce virtqueue groups (Cindy Lu) [RHEL-23888]
  - iommu/iova: Separate out rcache init (Cindy Lu) [RHEL-23888]
  - vduse: moving kvfree into caller (Cindy Lu) [RHEL-23888]
  - iommu/iova: Move fast alloc size roundup into alloc_iova_fast() (Cindy Lu) [RHEL-23888]
  - vduse: check that offset is within bounds in get_config() (Cindy Lu) [RHEL-23888]
  - vduse: fix memory corruption in vduse_dev_ioctl() (Cindy Lu) [RHEL-23888]
  - vdpa: Enable user to set mac and mtu of vdpa device (Cindy Lu) [RHEL-23888]
  - vduse: Fix race condition between resetting and irq injecting (Cindy Lu) [RHEL-23888]
  - vduse: Disallow injecting interrupt before DRIVER_OK is set (Cindy Lu) [RHEL-23888]
  - VDUSE: fix documentation underline warning (Cindy Lu) [RHEL-23888]
  - vduse: Cleanup the old kernel states after reset failure (Cindy Lu) [RHEL-23888]
  - vduse: missing error code in vduse_init() (Cindy Lu) [RHEL-23888]
  - Documentation: Add documentation for VDUSE (Cindy Lu) [RHEL-23888]
  - vduse: Introduce VDUSE - vDPA Device in Userspace (Cindy Lu) [RHEL-23888]
  - vduse: Implement an MMU-based software IOTLB (Cindy Lu) [RHEL-23888]
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Davide Caratti) [RHEL-33410]
  - net: replace calls to sock->ops->connect() with kernel_connect() (Davide Caratti) [RHEL-33410]
  - net: Avoid address overwrite in kernel_connect (Davide Caratti) [RHEL-30875 RHEL-33410]
  - af_unix: Fix garbage collector racing against connect() (Davide Caratti) [RHEL-33410]
  - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-33410]
  - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-33410]
  - net: veth: do not manipulate GRO when using XDP (Davide Caratti) [RHEL-33410]
  - net: veth: clear GRO when clearing XDP even when down (Davide Caratti) [RHEL-33410]
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Davide Caratti) [RHEL-33410]
  - llc: call sock_orphan() at release time (Davide Caratti) [RHEL-33410]
  - llc: Drop support for ETH_P_TR_802_2. (Davide Caratti) [RHEL-33410]
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Davide Caratti) [RHEL-33410]
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Davide Caratti) [RHEL-33410]
  - ethtool: netlink: Add missing ethnl_ops_begin/complete (Davide Caratti) [RHEL-33410]
  - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Davide Caratti) [RHEL-33410]
  - net/ipv6: convert skip_notify_on_dev_down sysctl to u8 (Davide Caratti) [RHEL-33410]
  - net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down (Davide Caratti) [RHEL-33410]
  - neighbour: fix unaligned access to pneigh_entry (Davide Caratti) [RHEL-33410]
  - af_packet: do not use READ_ONCE() in packet_bind() (Davide Caratti) [RHEL-33410]
  - af_packet: Fix data-races of pkt_sk(sk)->num. (Davide Caratti) [RHEL-33410]
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Davide Caratti) [RHEL-33410]
  - af_unix: Fix data race around sk->sk_err. (Davide Caratti) [RHEL-33410]
  - af_unix: Fix data-races around sk->sk_shutdown. (Davide Caratti) [RHEL-33410]
  - af_unix: Fix data races around sk->sk_shutdown. (Davide Caratti) [RHEL-33410]
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->pressure to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->running to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->has_vnet_hdr to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->tp_loss to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->tp_tx_has_off to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: annotate accesses to po->tp_tstamp (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->auxdata to an atomic flag (Davide Caratti) [RHEL-33410]
  - net/packet: convert po->origdev to an atomic flag (Davide Caratti) [RHEL-33410]
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Felix Maurer) [RHEL-30107]
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Felix Maurer) [RHEL-30107]
  - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program (Felix Maurer) [RHEL-30107]
  - xsk: Add truesize to skb_add_rx_frag(). (Felix Maurer) [RHEL-30107]
  - xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL (Felix Maurer) [RHEL-30107]
  - xsk: fix usage of multi-buffer BPF helpers for ZC XDP (Felix Maurer) [RHEL-28894 RHEL-30107] {CVE-2024-26611}
  - xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags (Felix Maurer) [RHEL-30107]
  - xsk: recycle buffer in case Rx queue was full (Felix Maurer) [RHEL-30107]
  - xsk: Skip polling event check for unbound socket (Felix Maurer) [RHEL-30107]
  - bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings (Felix Maurer) [RHEL-30107]
  - bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint (Felix Maurer) [RHEL-30107]
  - bpf: Factor out socket lookup functions for the TC hookpoint. (Felix Maurer) [RHEL-30107]
  - selftest/cgroup: Update test_cpuset_prs.sh to match changes (Waiman Long) [RHEL-43331]
  - cgroup/cpuset: Make cpuset.cpus.exclusive independent of cpuset.cpus (Waiman Long) [RHEL-43331]
  - cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition (Waiman Long) [RHEL-43331]
  - selftest/cgroup: Fix test_cpuset_prs.sh problems reported by test robot (Waiman Long) [RHEL-43331]
  - cgroup/cpuset: Fix remote root partition creation problem (Waiman Long) [RHEL-43331]
  - cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls (Waiman Long) [RHEL-43331]
  - cgroup/cpuset: Make cpuset hotplug processing synchronous (Waiman Long) [RHEL-43331]
  - mm/mglru: Revert "don't sync disk for each aging cycle" (Waiman Long) [RHEL-43371]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-473.el9]
changelog:
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45031] {CVE-2024-39276}
  - epoll: be better about file lifetimes (Pavel Reichl) [RHEL-44083] {CVE-2024-38580}
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44402] {CVE-2024-33621}
  - net: micrel: Fix receiving the timestamp in the frame for lan8841 (Jose Ignacio Tornos Martinez) [RHEL-43994] {CVE-2024-38593}
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (Jose Ignacio Tornos Martinez) [RHEL-43623] {CVE-2021-47596}
  - usb: dwc3: Wait unconditionally after issuing EndXfer command (Desnes Nunes) [RHEL-43396] {CVE-2024-36977}
  - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-38622]
  - ixgbe: fix end of loop test in ixgbe_set_vf_macvlan() (Ken Cox) [RHEL-17490 RHEL-25594]
  - ixgbe: fix crash with empty VF macvlan list (Ken Cox) [RHEL-17490 RHEL-25594]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (Ken Cox) [RHEL-17490 RHEL-25594]
  - ethernet/intel: Use list_for_each_entry() helper (Ken Cox) [RHEL-17490 RHEL-25594]
  - ixgbe: fix timestamp configuration code (Ken Cox) [RHEL-17490 RHEL-25594]
  - redhat: deprecate bnx2xx drivers in rhel-9.5 (John Meneghini) [RHEL-40741]
  - net/tg3: fix race condition in tg3_reset_task() (Ken Cox) [RHEL-23102 RHEL-25507 RHEL-34072]
  - tg3: Increment tx_dropped in tg3_tso_bug() (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: Move the [rt]x_dropped counters to tg3_napi (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: Fix the TX ring stall (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: power down device only on SYSTEM_POWER_OFF (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: Improve PTP TX timestamping logic (Ken Cox) [RHEL-23102 RHEL-25507]
  - ethernet: tg3: remove unreachable code (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: Use slab_build_skb() when needed (Ken Cox) [RHEL-23102 RHEL-25507]
  - tg3: Use pci_dev_id() to simplify the code (Ken Cox) [RHEL-23102 RHEL-25507]
  - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Ken Cox) [RHEL-23102 RHEL-25507]
  - scsi: qedi: Fix crash while reading debugfs attribute (John Meneghini) [RHEL-8112]
  - iomap: clear the per-folio dirty bits on all writeback failures (Pavel Reichl) [RHEL-11455]
  - iomap: don't skip reading in !uptodate folios when unsharing a range (Pavel Reichl) [RHEL-11455]
  - iomap: Add per-block dirty state tracking to improve performance (Pavel Reichl) [RHEL-11455]
  - iomap: Allocate ifs in ->write_begin() early (Pavel Reichl) [RHEL-11455]
  - iomap: Refactor iomap_write_delalloc_punch() function out (Pavel Reichl) [RHEL-11455]
  - iomap: Use iomap_punch_t typedef (Pavel Reichl) [RHEL-11455]
  - iomap: Fix possible overflow condition in iomap_write_delalloc_scan (Pavel Reichl) [RHEL-11455]
  - iomap: Add some uptodate state handling helpers for ifs state bitmap (Pavel Reichl) [RHEL-11455]
  - iomap: Drop ifs argument from iomap_set_range_uptodate() (Pavel Reichl) [RHEL-11455]
  - iomap: Rename iomap_page to iomap_folio_state and others (Pavel Reichl) [RHEL-11455]
  - iomap: Remove unnecessary test from iomap_release_folio() (Pavel Reichl) [RHEL-11455]
  - iomap: Simplify is_partially_uptodate a little (Pavel Reichl) [RHEL-11455]
  - iomap: Remove test for folio error (Pavel Reichl) [RHEL-11455]
  - ip_tunnel: harden copying IP tunnel params to userspace (Ivan Vecera) [RHEL-40130]
  - ip_tunnel: convert __be16 tunnel flags to bitmaps (Ivan Vecera) [RHEL-40130]
  - bitmap: introduce generic optimized bitmap_size() (Ivan Vecera) [RHEL-40130]
  - tools: move alignment-related macros to new <linux/align.h> (Ivan Vecera) [RHEL-40130]
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Ivan Vecera) [RHEL-40130]
  - bitmap: don't assume compiler evaluates small mem*() builtins calls (Ivan Vecera) [RHEL-40130]
  - vxlan: use generic function for tunnel IPv6 route lookup (Ivan Vecera) [RHEL-40130]
  - ipv6: mark address parameters of udp_tunnel6_xmit_skb() as const (Ivan Vecera) [RHEL-40130]
  - geneve: use generic function for tunnel IPv6 route lookup (Ivan Vecera) [RHEL-40130]
  - ipv6: add new arguments to udp_tunnel6_dst_lookup() (Ivan Vecera) [RHEL-40130]
  - ipv6: remove "proto" argument from udp_tunnel6_dst_lookup() (Ivan Vecera) [RHEL-40130]
  - ipv6: rename and move ip6_dst_lookup_tunnel() (Ivan Vecera) [RHEL-40130]
  - vxlan: use generic function for tunnel IPv4 route lookup (Ivan Vecera) [RHEL-40130]
  - geneve: use generic function for tunnel IPv4 route lookup (Ivan Vecera) [RHEL-40130]
  - geneve: add dsfield helper function (Ivan Vecera) [RHEL-40130]
  - ipv4: use tunnel flow flags for tunnel route lookups (Ivan Vecera) [RHEL-40130]
  - ipv4: add new arguments to udp_tunnel_dst_lookup() (Ivan Vecera) [RHEL-40130]
  - ipv4: remove "proto" argument from udp_tunnel_dst_lookup() (Ivan Vecera) [RHEL-40130]
  - ipv4: rename and move ip_route_output_tunnel() (Ivan Vecera) [RHEL-40130]
  - nfp: flower: add support for tunnel offload without key ID (Ivan Vecera) [RHEL-40130]
  - ip6_gre: Make IP6GRE and IP6GRETAP devices always NETIF_F_LLTX (Ivan Vecera) [RHEL-40130]
  - ip_gre: Make GRE and GRETAP devices always NETIF_F_LLTX (Ivan Vecera) [RHEL-40130]
  - ip_tunnel: use a separate struct to store tunnel params in the kernel (Ivan Vecera) [RHEL-40130]
  - lib/bitmap: add bitmap_{read,write}() (Ivan Vecera) [RHEL-40130]
  - net: Add helper function to parse netlink msg of ip_tunnel_parm (Ivan Vecera) [RHEL-40130]
  - net: Add helper function to parse netlink msg of ip_tunnel_encap (Ivan Vecera) [RHEL-40130]
  - selftests/memfd: fix spelling mistakes (Waiman Long) [RHEL-37152]
  - selftests/memfd: delete unused declarations (Waiman Long) [RHEL-37152]
  - memfd: drop warning for missing exec-related flags (Waiman Long) [RHEL-37152]
  - selftests: improve vm.memfd_noexec sysctl tests (Waiman Long) [RHEL-37152]
  - memfd: replace ratcheting feature from vm.memfd_noexec with hierarchy (Waiman Long) [RHEL-37152]
  - memfd: do not -EACCES old memfd_create() users with vm.memfd_noexec=2 (Waiman Long) [RHEL-37152]
  - selftests: memfd: error out test process when child test fails (Waiman Long) [RHEL-37152]
  - kernel: pid_namespace: remove unused set_memfd_noexec_scope() (Waiman Long) [RHEL-37152]
  - kernel: pid_namespace: simplify sysctls with register_sysctl() (Waiman Long) [RHEL-37152]
  - selftests/memfd: fix test_sysctl (Waiman Long) [RHEL-37152]
  - xfs: warn deprecation of V4 format beginning with RHEL10 instead of 2030. (Bill O'Donnell) [RHEL-40421]
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Add a missing check in bnxt_qplib_query_srq (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Return error for SRQ resize (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Fix unconditional fence for newer adapters (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Remove a redundant check inside bnxt_re_vf_res_config (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Avoid creating fence MR for newer adapters (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Fix error code in bnxt_re_create_cq() (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Fix the sparse warnings (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Share a page to expose per CQ info with userspace (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Add UAPI to share a page with user space (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Adds MSN table capability for Gen P7 adapters (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Doorbell changes (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Get the toggle bits from CQ completions (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Update the HW interface definitions (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Update the BAR offsets (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Support new 5760X P7 devices (Sreekanth Reddy) [RHEL-19812]
  - RDMA/bnxt_re: Correct module description string (Sreekanth Reddy) [RHEL-19812]
  - nfs: fix UAF in direct writes (Benjamin Coddington) [RHEL-34977] {CVE-2024-26958}
  - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38133] {CVE-2023-52762}
  - mm/kmemleak: disable KASAN instrumentation in kmemleak (Waiman Long) [RHEL-8656]
  - mm/kmemleak: compact kmemleak_object further (Waiman Long) [RHEL-8656]
  - kmemleak: avoid RCU stalls when freeing metadata for per-CPU pointers (Waiman Long) [RHEL-8656]
  - kmemleak: add checksum to backtrace report (Waiman Long) [RHEL-8656]
  - kmemleak: drop (age <increasing>) from leak record (Waiman Long) [RHEL-8656]
  - mm/kmemleak: move set_track_prepare() outside raw_spinlocks (Waiman Long) [RHEL-8656]
  - Revert "mm/kmemleak: move the initialisation of object to __link_object" (Waiman Long) [RHEL-8656]
  - mm/kmemleak: move the initialisation of object to __link_object (Waiman Long) [RHEL-8656]
  - mm/kmemleak: fix partially freeing unknown object warning (Waiman Long) [RHEL-8656]
  - mm: kmemleak: add __find_and_remove_object() (Waiman Long) [RHEL-8656]
  - mm: kmemleak: use mem_pool_free() to free object (Waiman Long) [RHEL-8656]
  - mm: kmemleak: split __create_object into two functions (Waiman Long) [RHEL-8656]
  - mm/kmemleak: fix print format of pointer in pr_debug() (Waiman Long) [RHEL-8656]
  - mm/kmemleak: move up cond_resched() call in page scanning loop (Waiman Long) [RHEL-8656]
  - Rename kmemleak_initialized to kmemleak_late_initialized (Waiman Long) [RHEL-8656]
  - mm/kmemleak: use %pK to display kernel pointers in backtrace (Waiman Long) [RHEL-8656]
  - mptcp: cleanup SOL_TCP handling (Paolo Abeni) [RHEL-28492]
  - mptcp: implement TCP_NOTSENT_LOWAT support (Paolo Abeni) [RHEL-28492]
  - mptcp: avoid some duplicate code in socket option handling (Paolo Abeni) [RHEL-28492]
  - mptcp: cleanup writer wake-up (Paolo Abeni) [RHEL-28492]
  - mptcp: check the protocol in mptcp_sk() with DEBUG_NET (Paolo Abeni) [RHEL-28492]
  - mptcp: check the protocol in tcp_sk() with DEBUG_NET (Paolo Abeni) [RHEL-28492]
  - mptcp: token kunit: set protocol (Paolo Abeni) [RHEL-28492]
  - mptcp: annotate lockless accesses around read-mostly fields (Paolo Abeni) [RHEL-28492]
  - mptcp: annotate lockless access for token (Paolo Abeni) [RHEL-28492]
  - mptcp: annotate lockless access for RX path fields (Paolo Abeni) [RHEL-28492]
  - mptcp: annotate lockless access for the tx path (Paolo Abeni) [RHEL-28492]
  - mptcp: annotate access for msk keys (Paolo Abeni) [RHEL-28492]
  - mptcp: use mptcp_set_state (Paolo Abeni) [RHEL-28492]
  - mptcp: add CurrEstab MIB counter support (Paolo Abeni) [RHEL-28492]
  - mptcp: rename mptcp_setsockopt_sol_ip_set_transparent() (Paolo Abeni) [RHEL-28492]
  - netlink: specs: mptcp: rename the MPTCP path management spec (Paolo Abeni) [RHEL-28492]
  - mptcp: add mptcpi_subflows_total counter (Paolo Abeni) [RHEL-28492]
  - net: atlantic: Fix DMA mapping for PTP hwts ring (Michal Schmidt) [RHEL-31367 RHEL-36002] {CVE-2024-26680}
  - net: atlantic: eliminate double free in error handling logic (Michal Schmidt) [RHEL-36002]
  - net: atlantic: fix double free in ring reinit logic (Michal Schmidt) [RHEL-36002]
  - net: atlantic: Fix NULL dereference of skb pointer in (Michal Schmidt) [RHEL-36002]
  - net: atlantic: Remove unnecessary (void*) conversions (Michal Schmidt) [RHEL-36002]
  - net: atlantic: Define aq_pm_ops conditionally on CONFIG_PM (Michal Schmidt) [RHEL-36002]
  - atlantic:hw_atl2:hw_atl2_utils_fw: Remove unnecessary (void*) conversions (Michal Schmidt) [RHEL-36002]
  - net: aquantia: constify pointers to hwmon_channel_info (Michal Schmidt) [RHEL-36002]
  - block: fix deadlock between bd_link_disk_holder and partition scan (Ming Lei) [RHEL-34860] {CVE-2024-26899}
  - xfs: recovery should not clear di_flushiter unconditionally (Bill O'Donnell) [RHEL-25419]
  - xfs: revert commit 44af6c7e59b12 (Bill O'Donnell) [RHEL-25419]
  - xfs: use dontcache for grabbing inodes during scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: fix imprecise logic in xchk_btree_check_block_owner (Bill O'Donnell) [RHEL-25419]
  - xfs: fix perag leak when growfs fails (Bill O'Donnell) [RHEL-25419]
  - xfs: add lock protection when remove perag from radix tree (Bill O'Donnell) [RHEL-25419]
  - xfs: fix units conversion error in xfs_bmap_del_extent_delay (Bill O'Donnell) [RHEL-25419]
  - xfs: fix dqiterate thinko (Bill O'Donnell) [RHEL-25419]
  - xfs: fix agf_fllast when repairing an empty AGFL (Bill O'Donnell) [RHEL-25419]
  - xfs: convert flex-array declarations in xfs attr shortform objects (Bill O'Donnell) [RHEL-25419]
  - xfs: convert flex-array declarations in xfs attr leaf blocks (Bill O'Donnell) [RHEL-25419]
  - xfs: convert flex-array declarations in struct xfs_attrlist* (Bill O'Donnell) [RHEL-25419]
  - xfs: fix uninit warning in xfs_growfs_data (Bill O'Donnell) [RHEL-25419]
  - xfs: Remove unneeded semicolon (Bill O'Donnell) [RHEL-25419]
  - xfs: AGI length should be bounds checked (Bill O'Donnell) [RHEL-25419]
  - xfs: fix xfs_btree_query_range callers to initialize btree rec fully (Bill O'Donnell) [RHEL-25419]
  - xfs: validate fsmap offsets specified in the query keys (Bill O'Donnell) [RHEL-25419]
  - xfs: clean up the rtbitmap fsmap backend (Bill O'Donnell) [RHEL-25419]
  - xfs: fix getfsmap reporting past the last rt extent (Bill O'Donnell) [RHEL-25419]
  - xfs: AGF length has never been bounds checked (Bill O'Donnell) [RHEL-25419]
  - xfs: journal geometry is not properly bounds checked (Bill O'Donnell) [RHEL-25419]
  - xfs: don't block in busy flushing when freeing extents (Bill O'Donnell) [RHEL-25419]
  - xfs: allow extent free intents to be retried (Bill O'Donnell) [RHEL-25419]
  - xfs: pass alloc flags through to xfs_extent_busy_flush() (Bill O'Donnell) [RHEL-25419]
  - xfs: use deferred frees for btree block freeing (Bill O'Donnell) [RHEL-25419]
  - xfs: remove redundant initializations of pointers drop_leaf and save_leaf (Bill O'Donnell) [RHEL-25419]
  - xfs: fix ag count overflow during growfs (Bill O'Donnell) [RHEL-25419]
  - xfs: set FMODE_CAN_ODIRECT instead of a dummy direct_IO method (Bill O'Donnell) [RHEL-25419]
  - xfs: drop EXPERIMENTAL tag for large extent counts (Bill O'Donnell) [RHEL-25419]
  - xfs: fix broken logic when detecting mergeable bmap records (Bill O'Donnell) [RHEL-25419]
  - xfs: Fix undefined behavior of shift into sign bit (Bill O'Donnell) [RHEL-25419]
  - xfs: disable reaping in fscounters scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: fix negative array access in xfs_getbmap (Bill O'Donnell) [RHEL-25419]
  - xfs: don't allocate into the data fork for an unshare request (Bill O'Donnell) [RHEL-25419]
  - xfs: flush dirty data and drain directios before scrubbing cow fork (Bill O'Donnell) [RHEL-25419]
  - xfs: fix duplicate includes (Bill O'Donnell) [RHEL-25419]
  - xfs: simplify two-level sysctl registration for xfs_table (Bill O'Donnell) [RHEL-25419]
  - xfs: fix BUG_ON in xfs_getbmap() (Bill O'Donnell) [RHEL-25419]
  - xfs: _{attr,data}_map_shared should take ILOCK_EXCL until iread_extents is completely done (Bill O'Donnell) [RHEL-25419]
  - xfs: remove WARN when dquot cache insertion fails (Bill O'Donnell) [RHEL-25419]
  - xfs: Extend table marker on deprecated mount options table (Bill O'Donnell) [RHEL-25419]
  - xfs: deprecate the ascii-ci feature (Bill O'Donnell) [RHEL-25419]
  - xfs: test the ascii case-insensitive hash (Bill O'Donnell) [RHEL-25419]
  - xfs: cross-reference rmap records with refcount btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: cross-reference rmap records with inode btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: cross-reference rmap records with free space btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: cross-reference rmap records with ag btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: introduce bitmap type for AG blocks (Bill O'Donnell) [RHEL-25419]
  - xfs: convert xbitmap to interval tree (Bill O'Donnell) [RHEL-25419]
  - xfs: drop the _safe behavior from the xbitmap foreach macro (Bill O'Donnell) [RHEL-25419]
  - xfs: don't load local xattr values during scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: remove the for_each_xbitmap_ helpers (Bill O'Donnell) [RHEL-25419]
  - xfs: only allocate free space bitmap for xattr scrub if needed (Bill O'Donnell) [RHEL-25419]
  - xfs: clean up xattr scrub initialization (Bill O'Donnell) [RHEL-25419]
  - xfs: check used space of shortform xattr structures (Bill O'Donnell) [RHEL-25419]
  - xfs: move xattr scrub buffer allocation to top level function (Bill O'Donnell) [RHEL-25419]
  - xfs: remove flags argument from xchk_setup_xattr_buf (Bill O'Donnell) [RHEL-25419]
  - xfs: split valuebuf from xchk_xattr_buf.buf (Bill O'Donnell) [RHEL-25419]
  - xfs: split usedmap from xchk_xattr_buf.buf (Bill O'Donnell) [RHEL-25419]
  - xfs: split freemap from xchk_xattr_buf.buf (Bill O'Donnell) [RHEL-25419]
  - xfs: remove unnecessary dstmap in xattr scrubber (Bill O'Donnell) [RHEL-25419]
  - xfs: don't shadow @leaf in xchk_xattr_block (Bill O'Donnell) [RHEL-25419]
  - xfs: xattr scrub should ensure one namespace bit per name (Bill O'Donnell) [RHEL-25419]
  - xfs: check for reverse mapping records that could be merged (Bill O'Donnell) [RHEL-25419]
  - xfs: check overlapping rmap btree records (Bill O'Donnell) [RHEL-25419]
  - xfs: flag refcount btree records that could be merged (Bill O'Donnell) [RHEL-25419]
  - xfs: don't call xchk_bmap_check_rmaps for btree-format file forks (Bill O'Donnell) [RHEL-25419]
  - xfs: flag free space btree records that could be merged (Bill O'Donnell) [RHEL-25419]
  - xfs: split the xchk_bmap_check_rmaps into a predicate (Bill O'Donnell) [RHEL-25419]
  - xfs: alert the user about data/attr fork mappings that could be merged (Bill O'Donnell) [RHEL-25419]
  - xfs: split xchk_bmap_xref_rmap into two functions (Bill O'Donnell) [RHEL-25419]
  - xfs: accumulate iextent records when checking bmap (Bill O'Donnell) [RHEL-25419]
  - xfs: change bmap scrubber to store the previous mapping (Bill O'Donnell) [RHEL-25419]
  - xfs: don't take the MMAPLOCK when scrubbing file metadata (Bill O'Donnell) [RHEL-25419]
  - xfs: retain the AGI when we can't iget an inode to scrub the core (Bill O'Donnell) [RHEL-25419]
  - xfs: rename xchk_get_inode -> xchk_iget_for_scrubbing (Bill O'Donnell) [RHEL-25419]
  - xfs: fix an inode lookup race in xchk_get_inode (Bill O'Donnell) [RHEL-25419]
  - xfs: fix parent pointer scrub racing with subdirectory reparenting (Bill O'Donnell) [RHEL-25419]
  - xfs: manage inode DONTCACHE status at irele time (Bill O'Donnell) [RHEL-25419]
  - xfs: simplify xchk_parent_validate (Bill O'Donnell) [RHEL-25419]
  - xfs: remove xchk_parent_count_parent_dentries (Bill O'Donnell) [RHEL-25419]
  - xfs: always check the existence of a dirent's child inode (Bill O'Donnell) [RHEL-25419]
  - xfs: streamline the directory iteration code for scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: ensure that single-owner file blocks are not owned by others (Bill O'Donnell) [RHEL-25419]
  - xfs: convert xfs_ialloc_has_inodes_at_extent to return keyfill scan results (Bill O'Donnell) [RHEL-25419]
  - xfs: teach scrub to check for sole ownership of metadata objects (Bill O'Donnell) [RHEL-25419]
  - xfs: directly cross-reference the inode btrees with each other (Bill O'Donnell) [RHEL-25419]
  - xfs: clean up broken eearly-exit code in the inode btree scrubber (Bill O'Donnell) [RHEL-25419]
  - xfs: remove pointless shadow variable from xfs_difree_inobt (Bill O'Donnell) [RHEL-25419]
  - xfs: ensure that all metadata and data blocks are not cow staging extents (Bill O'Donnell) [RHEL-25419]
  - xfs: check the reference counts of gaps in the refcount btree (Bill O'Donnell) [RHEL-25419]
  - xfs: implement masked btree key comparisons for _has_records scans (Bill O'Donnell) [RHEL-25419]
  - xfs: replace xfs_btree_has_record with a general keyspace scanner (Bill O'Donnell) [RHEL-25419]
  - xfs: refactor ->diff_two_keys callsites (Bill O'Donnell) [RHEL-25419]
  - xfs: refactor converting btree irec to btree key (Bill O'Donnell) [RHEL-25419]
  - xfs: check btree keys reflect the child block (Bill O'Donnell) [RHEL-25419]
  - xfs: detect unwritten bit set in rmapbt node block keys (Bill O'Donnell) [RHEL-25419]
  - xfs: hoist inode record alignment checks from scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: hoist rmap record flag checks from scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: complain about bad file mapping records in the ondisk bmbt (Bill O'Donnell) [RHEL-25419]
  - xfs: hoist rmap record flag checks from scrub (Bill O'Donnell) [RHEL-25419]
  - xfs: complain about bad records in query_range helpers (Bill O'Donnell) [RHEL-25419]
  - xfs: standardize ondisk to incore conversion for bmap btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: standardize ondisk to incore conversion for rmap btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: return a failure address from xfs_rmap_irec_offset_unpack (Bill O'Donnell) [RHEL-25419]
  - xfs: standardize ondisk to incore conversion for refcount btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: standardize ondisk to incore conversion for inode btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: standardize ondisk to incore conversion for free space btrees (Bill O'Donnell) [RHEL-25419]
  - xfs: scrub should use ECHRNG to signal that the drain is needed (Bill O'Donnell) [RHEL-25419]
  - xfs: minimize overhead of drain wakeups by using jump labels (Bill O'Donnell) [RHEL-25419]
  - xfs: clean up scrub context if scrub setup returns -EDEADLOCK (Bill O'Donnell) [RHEL-25419]
  - xfs: allow queued AG intents to drain before scrubbing (Bill O'Donnell) [RHEL-25419]
  - xfs: add a tracepoint to report incorrect extent refcounts (Bill O'Donnell) [RHEL-25419]
  - xfs: update copyright years for scrub/ files (Bill O'Donnell) [RHEL-25419]
  - xfs: fix author and spdx headers on scrub/ files (Bill O'Donnell) [RHEL-25419]
  - xfs: create traced helper to get extra perag references (Bill O'Donnell) [RHEL-25419]
  - xfs: give xfs_refcount_intent its own perag reference (Bill O'Donnell) [RHEL-25419]
  - xfs: give xfs_rmap_intent its own perag reference (Bill O'Donnell) [RHEL-25419]
  - xfs: give xfs_extfree_intent its own perag reference (Bill O'Donnell) [RHEL-25419]
  - xfs: pass per-ag references to xfs_free_extent (Bill O'Donnell) [RHEL-25419]
  - xfs: give xfs_bmap_intent its own perag reference (Bill O'Donnell) [RHEL-25419]
  - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program (Viktor Malik) [RHEL-23644 RHEL-36815] {CVE-2024-27431}
  - selftests: net: veth: test the ability to independently manipulate GRO and XDP (Viktor Malik) [RHEL-23644 RHEL-31820] {CVE-2024-26803}
  - net: veth: do not manipulate GRO when using XDP (Viktor Malik) [RHEL-23644 RHEL-31820] {CVE-2024-26803}
  - selftests: net: veth: test syncing GRO and XDP state while device is down (Viktor Malik) [RHEL-23644 RHEL-31820] {CVE-2024-26803}
  - net: veth: clear GRO when clearing XDP even when down (Viktor Malik) [RHEL-23644 RHEL-31820] {CVE-2024-26803}
  - selftests/bpf: Run cgroup1_hierarchy test in own mount namespace (Viktor Malik) [RHEL-23644]
  - selftests/bpf: fix RELEASE=1 build for tc_opts (Viktor Malik) [RHEL-23644]
  - bpf: don't emit warnings intended for global subprogs for static subprogs (Viktor Malik) [RHEL-23644]
  - bpf: make sure scalar args don't accept __arg_nonnull tag (Viktor Malik) [RHEL-23644]
  - bpf: Protect against int overflow for stack access size (Viktor Malik) [RHEL-23644]
  - libbpf: Prevent null-pointer dereference when prog to load has no BTF (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add negtive test cases for task iter (Viktor Malik) [RHEL-23644]
  - bpf: Fix an issue due to uninitialized bpf_iter_task (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test racing between bpf_timer_cancel_and_free and bpf_timer_cancel (Viktor Malik) [RHEL-23644]
  - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (Viktor Malik) [RHEL-23644 RHEL-31726] {CVE-2024-26737}
  - bpf, scripts: Correct GPL license name (Viktor Malik) [RHEL-23644]
  - bpf: Fix warning for bpf_cpumask in verifier (Viktor Malik) [RHEL-23644]
  - libbpf: fix return value for PERF_EVENT __arg_ctx type fix up check (Viktor Malik) [RHEL-23644]
  - libbpf: fix __arg_ctx type enforcement for perf_event programs (Viktor Malik) [RHEL-23644]
  - bpftool: Fix wrong free call in do_show_link (Viktor Malik) [RHEL-23644]
  - libbpf: warn on unexpected __arg_ctx type when rewriting BTF (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add tests confirming type logic in kernel for __arg_ctx (Viktor Malik) [RHEL-23644]
  - bpf: enforce types for __arg_ctx-tagged arguments in global subprogs (Viktor Malik) [RHEL-23644]
  - bpf: extract bpf_ctx_convert_map logic and make it more reusable (Viktor Malik) [RHEL-23644]
  - libbpf: feature-detect arg:ctx tag support in kernel (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (Viktor Malik) [RHEL-23644]
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (Viktor Malik) [RHEL-23644 RHEL-26467] {CVE-2024-26589}
  - selftests/bpf: Test re-attachment fix for bpf_tracing_prog_attach (Viktor Malik) [RHEL-23644]
  - bpf: Fix re-attachment branch in bpf_tracing_prog_attach (Viktor Malik) [RHEL-23644 RHEL-26486] {CVE-2024-26591}
  - selftests/bpf: Add test for recursive attachment of tracing progs (Viktor Malik) [RHEL-23644]
  - bpf: Relax tracing prog recursive attach rules (Viktor Malik) [RHEL-23644]
  - bpf, x86: Use emit_nops to replace memcpy x86_nops (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test gotol with large offsets (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Double the size of test_loader log (Viktor Malik) [RHEL-23644]
  - bpf: Remove unnecessary cpu == 0 check in memalloc (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add __arg_ctx BTF rewrite test (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add arg:ctx cases to test_global_funcs tests (Viktor Malik) [RHEL-23644]
  - libbpf: implement __arg_ctx fallback logic (Viktor Malik) [RHEL-23644]
  - libbpf: move BTF loading step after relocation step (Viktor Malik) [RHEL-23644]
  - libbpf: move exception callbacks assignment logic into relocation step (Viktor Malik) [RHEL-23644]
  - libbpf: use stable map placeholder FDs (Viktor Malik) [RHEL-23644]
  - libbpf: don't rely on map->fd as an indicator of map being created (Viktor Malik) [RHEL-23644]
  - libbpf: use explicit map reuse flag to skip map creation steps (Viktor Malik) [RHEL-23644]
  - libbpf: make uniform use of btf__fd() accessor inside libbpf (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Convert profiler.c to bpf_cmp. (Viktor Malik) [RHEL-23644]
  - bpf: Add bpf_nop_mov() asm macro. (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Remove bpf_assert_eq-like macros. (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Convert exceptions_assert.c to bpf_cmp (Viktor Malik) [RHEL-23644]
  - bpf: Introduce "volatile compare" macros (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Attempt to build BPF programs with -Wsign-compare (Viktor Malik) [RHEL-23644]
  - bpf: Add a possibly-zero-sized read test (Viktor Malik) [RHEL-23644]
  - bpf: Simplify checking size of helper accesses (Viktor Malik) [RHEL-23644]
  - bpf: Avoid unnecessary use of comma operator in verifier (Viktor Malik) [RHEL-23644]
  - bpf: Re-support uid and gid when mounting bpffs (Viktor Malik) [RHEL-23644]
  - libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos (Viktor Malik) [RHEL-23644]
  - libbpf: Skip DWARF sections in linker sanity check (Viktor Malik) [RHEL-23644]
  - samples/bpf: Use %lu format specifier for unsigned long values (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Close cgrp fd before calling cleanup_cgroup_environment() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add freplace of BTF-unreliable main prog test (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add global subprog annotation tests (Viktor Malik) [RHEL-23644]
  - libbpf: add __arg_xxx macros for annotating global func args (Viktor Malik) [RHEL-23644]
  - bpf: add support for passing dynptr pointer to global subprog (Viktor Malik) [RHEL-23644]
  - bpf: support 'arg:xxx' btf_decl_tag-based hints for global subprog args (Viktor Malik) [RHEL-23644]
  - bpf: reuse subprog argument parsing logic for subprog call checks (Viktor Malik) [RHEL-23644]
  - bpf: move subprog call logic back to verifier.c (Viktor Malik) [RHEL-23644]
  - bpf: prepare btf_prepare_func_args() for handling static subprogs (Viktor Malik) [RHEL-23644]
  - bpf: reuse btf_prepare_func_args() check for main program BTF validation (Viktor Malik) [RHEL-23644]
  - bpf: abstract away global subprog arg preparation logic from reg state setup (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add testcase to verifier_bounds.c for BPF_JNE (Viktor Malik) [RHEL-23644]
  - selftests/bpf: activate the OP_NE logic in range_cond() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: remove reduplicated s32 casting in "crafted_cases" (Viktor Malik) [RHEL-23644]
  - bpf: make the verifier tracks the "not equal" for regs (Viktor Malik) [RHEL-23644]
  - Revert BPF token-related functionality (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add more uprobe multi fail tests (Viktor Malik) [RHEL-23644]
  - bpf: Fail uprobe multi link with negative offset (Viktor Malik) [RHEL-23644]
  - bpf: Ensure precise is reset to false in __mark_reg_const_zero() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test the release of map btf (Viktor Malik) [RHEL-23644]
  - s390/bpf: Fix indirect trampoline generation (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Temporarily disable dummy_struct_ops test on s390 (Viktor Malik) [RHEL-23644]
  - x86/cfi,bpf: Fix bpf_exception_cb() signature (Viktor Malik) [RHEL-23644]
  - bpf: Fix dtor CFI (Viktor Malik) [RHEL-23644]
  - cfi: Add CFI_NOSEAL() (Viktor Malik) [RHEL-23644]
  - x86/cfi,bpf: Fix bpf_struct_ops CFI (Viktor Malik) [RHEL-23644]
  - x86/cfi,bpf: Fix bpf_callback_t CFI (Viktor Malik) [RHEL-23644]
  - x86/cfi,bpf: Fix BPF JIT call (Viktor Malik) [RHEL-23644]
  - cfi: Flip headers (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test for abnormal cnt during multi-kprobe attachment (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Don't use libbpf_get_error() in kprobe_multi_test (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test for abnormal cnt during multi-uprobe attachment (Viktor Malik) [RHEL-23644]
  - bpf: Limit the number of kprobes when attaching program to multiple kprobes (Viktor Malik) [RHEL-23644]
  - selftests/bpf: utilize string values for delegate_xxx mount options (Viktor Malik) [RHEL-23644]
  - bpf: support symbolic BPF FS delegation mount options (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Remove flaky test_btf_id test (Viktor Malik) [RHEL-23644]
  - bpf: Fix a race condition between btf_put() and map_free() (Viktor Malik) [RHEL-23644]
  - bpf: Use GFP_KERNEL in bpf_event_entry_gen() (Viktor Malik) [RHEL-23644]
  - bpf: Reduce the scope of rcu_read_lock when updating fd map (Viktor Malik) [RHEL-23644]
  - bpf: Update the comments in maybe_wait_bpf_programs() (Viktor Malik) [RHEL-23644]
  - bpf: add small subset of SECURITY_PATH hooks to BPF sleepable_lsm_hooks list (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add tests for LIBBPF_BPF_TOKEN_PATH envvar (Viktor Malik) [RHEL-23644]
  - libbpf: support BPF token path setting through LIBBPF_BPF_TOKEN_PATH envvar (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add tests for BPF object load with implicit token (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add BPF object loading tests with explicit token passing (Viktor Malik) [RHEL-23644]
  - libbpf: wire up BPF token support at BPF object level (Viktor Malik) [RHEL-23644]
  - libbpf: wire up token_fd into feature probing logic (Viktor Malik) [RHEL-23644]
  - libbpf: move feature detection code into its own file (Viktor Malik) [RHEL-23644]
  - libbpf: further decouple feature checking logic from bpf_object (Viktor Malik) [RHEL-23644]
  - libbpf: split feature detectors definitions from cached results (Viktor Malik) [RHEL-23644]
  - bpf: fail BPF_TOKEN_CREATE if no delegation option was set on BPF FS (Viktor Malik) [RHEL-23644]
  - bpf: selftests: Add verifier tests for CO-RE bitfield writes (Viktor Malik) [RHEL-23644]
  - bpf: selftests: test_loader: Support __btf_path() annotation (Viktor Malik) [RHEL-23644]
  - libbpf: Add BPF_CORE_WRITE_BITFIELD() macro (Viktor Malik) [RHEL-23644]
  - bpf: Support uid and gid when mounting bpffs (Viktor Malik) [RHEL-23644]
  - selftests/bpf: fix compiler warnings in RELEASE=1 mode (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Relax time_tai test for equal timestamps in tai_forward (Viktor Malik) [RHEL-23644]
  - bpf: Comment on check_mem_size_reg (Viktor Malik) [RHEL-23644]
  - bpf: Remove unused backtrack_state helper functions (Viktor Malik) [RHEL-23644]
  - bpf: use bitfields for simple per-subprog bool flags (Viktor Malik) [RHEL-23644]
  - bpf: tidy up exception callback management a bit (Viktor Malik) [RHEL-23644]
  - bpf: emit more dynptr information in verifier log (Viktor Malik) [RHEL-23644]
  - bpf: log PTR_TO_MEM memory size in verifier log (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate eliminated global subprog is not freplaceable (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test for bpf_cpumask_weight() kfunc (Viktor Malik) [RHEL-23644]
  - bpf: Add bpf_cpumask_weight() kfunc (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate fake register spill/fill precision backtracking logic (Viktor Malik) [RHEL-23644]
  - bpf: handle fake register spill to stack with BPF_ST_MEM instruction (Viktor Malik) [RHEL-23644]
  - bpf: Set uattr->batch.count as zero before batched update or deletion (Viktor Malik) [RHEL-23644]
  - bpf: Only call maybe_wait_bpf_programs() when map operation succeeds (Viktor Malik) [RHEL-23644]
  - bpf: Add missed maybe_wait_bpf_programs() for htab of maps (Viktor Malik) [RHEL-23644]
  - bpf: Call maybe_wait_bpf_programs() only once for generic_map_update_batch() (Viktor Malik) [RHEL-23644]
  - bpf: Remove unnecessary wait from bpf_map_copy_value() (Viktor Malik) [RHEL-23644]
  - libbpf: Add pr_warn() for EINVAL cases in linker_sanity_check_elf (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add selftests for cgroup1 local storage (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add a new cgroup helper open_classid() (Viktor Malik) [RHEL-23644]
  - bpf: Enable bpf_cgrp_storage for cgroup1 non-attach case (Viktor Malik) [RHEL-23644]
  - selftests/bpf: fix timer/test_bad_ret subtest on test_progs-cpuv4 flavor (Viktor Malik) [RHEL-23644]
  - bpf: Minor cleanup around stack bounds (Viktor Malik) [RHEL-23644]
  - bpf: Fix accesses to uninit stack slots (Viktor Malik) [RHEL-23644]
  - bpf: Add some comments to stack representation (Viktor Malik) [RHEL-23644]
  - bpf: Load vmlinux btf for any struct_ops map (Viktor Malik) [RHEL-23644]
  - bpf: Guard stack limits against 32bit overflow (Viktor Malik) [RHEL-23644 RHEL-37076] {CVE-2023-52676}
  - bpf: Add verifier regression test for previous patch (Viktor Malik) [RHEL-23644]
  - bpf: Fix verification of indirect var-off stack access (Viktor Malik) [RHEL-23644]
  - x86, bpf: Use bpf_prog_pack for bpf trampoline (Viktor Malik) [RHEL-23644]
  - bpf: Use arch_bpf_trampoline_size (Viktor Malik) [RHEL-23644]
  - bpf: Add arch_bpf_trampoline_size() (Viktor Malik) [RHEL-23644]
  - bpf, x86: Adjust arch_prepare_bpf_trampoline return value (Viktor Malik) [RHEL-23644]
  - bpf: Add helpers for trampoline image management (Viktor Malik) [RHEL-23644]
  - bpf: Adjust argument names of arch_prepare_bpf_trampoline() (Viktor Malik) [RHEL-23644]
  - bpf: Let bpf_prog_pack_free handle any pointer (Viktor Malik) [RHEL-23644]
  - bpf: rename MAX_BPF_LINK_TYPE into __MAX_BPF_LINK_TYPE for consistency (Viktor Malik) [RHEL-23644]
  - bpf,selinux: allocate bpf_security_struct per BPF token (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add BPF token-enabled tests (Viktor Malik) [RHEL-23644]
  - libbpf: add BPF token support to bpf_prog_load() API (Viktor Malik) [RHEL-23644]
  - libbpf: add BPF token support to bpf_btf_load() API (Viktor Malik) [RHEL-23644]
  - libbpf: add BPF token support to bpf_map_create() API (Viktor Malik) [RHEL-23644]
  - libbpf: add bpf_token_create() API (Viktor Malik) [RHEL-23644]
  - bpf,lsm: add BPF token LSM hooks (Viktor Malik) [RHEL-23644]
  - bpf,lsm: refactor bpf_map_alloc/bpf_map_free LSM hooks (Viktor Malik) [RHEL-23644]
  - bpf,lsm: refactor bpf_prog_alloc/bpf_prog_free LSM hooks (Viktor Malik) [RHEL-23644]
  - lsm: move the bpf hook comments to security/security.c (Viktor Malik) [RHEL-23644]
  - bpf: consistently use BPF token throughout BPF verifier logic (Viktor Malik) [RHEL-23644]
  - bpf: take into account BPF token when fetching helper protos (Viktor Malik) [RHEL-23644]
  - bpf: add BPF token support to BPF_PROG_LOAD command (Viktor Malik) [RHEL-23644]
  - bpf: add BPF token support to BPF_BTF_LOAD command (Viktor Malik) [RHEL-23644]
  - bpf: add BPF token support to BPF_MAP_CREATE command (Viktor Malik) [RHEL-23644]
  - bpf: introduce BPF token object (Viktor Malik) [RHEL-23644]
  - bpf: add BPF token delegation mount options to BPF FS (Viktor Malik) [RHEL-23644]
  - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros (Viktor Malik) [RHEL-23644]
  - bpf: track aligned STACK_ZERO cases as imprecise spilled registers (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate zero preservation for sub-slot loads (Viktor Malik) [RHEL-23644]
  - bpf: preserve constant zero when doing partial register restore (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate STACK_ZERO is preserved on subreg spill (Viktor Malik) [RHEL-23644]
  - bpf: preserve STACK_ZERO slots on partial reg spills (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add stack access precision test (Viktor Malik) [RHEL-23644]
  - bpf: support non-r10 register spill/fill to/from stack in precision tracking (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test bpf_kptr_xchg stashing of bpf_rb_root (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-23644]
  - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-23644]
  - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-23644]
  - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-23644]
  - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-23644]
  - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-23644 RHEL-30513] {CVE-2023-52621}
  - bpf: Minor logging improvement (Viktor Malik) [RHEL-23644]
  - bpf: simplify tnum output if a fully known constant (Viktor Malik) [RHEL-23644]
  - selftests/bpf: adjust global_func15 test to validate prog exit precision (Viktor Malik) [RHEL-23644]
  - selftests/bpf: validate async callback return value check correctness (Viktor Malik) [RHEL-23644]
  - bpf: enforce precision of R0 on program/async callback return (Viktor Malik) [RHEL-23644]
  - bpf: unify async callback and program retval checks (Viktor Malik) [RHEL-23644]
  - bpf: enforce precise retval range on program exit (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add selftest validating callback result is enforced (Viktor Malik) [RHEL-23644]
  - bpf: enforce exact retval range on subprog/callback exit (Viktor Malik) [RHEL-23644]
  - bpf: enforce precision of R0 on callback return (Viktor Malik) [RHEL-23644]
  - bpf: provide correct register name for exception callback retval check (Viktor Malik) [RHEL-23644]
  - bpf: rearrange bpf_func_state fields to save a bit of memory (Viktor Malik) [RHEL-23644]
  - bpf/tests: Remove duplicate JSGT tests (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Use pkg-config for libelf (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Override PKG_CONFIG for static builds (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Choose pkg-config for the target (Viktor Malik) [RHEL-23644]
  - bpftool: Add support to display uprobe_multi links (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add link_info test for uprobe_multi link (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Use bpf_link__destroy in fill_link_info tests (Viktor Malik) [RHEL-23644]
  - bpf: Add link_info support for uprobe multi link (Viktor Malik) [RHEL-23644]
  - bpf: Store ref_ctr_offsets values in bpf_uprobe array (Viktor Malik) [RHEL-23644]
  - libbpf: Add st_type argument to elf_resolve_syms_offsets function (Viktor Malik) [RHEL-23644]
  - selftests/bpf: update test_offload to use new orphaned property (Viktor Malik) [RHEL-23644]
  - bpftool: mark orphaned programs during prog show (Viktor Malik) [RHEL-23644]
  - bpf: Fix a few selftest failures due to llvm18 change (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add lazy global subprog validation tests (Viktor Malik) [RHEL-23644]
  - bpf: Validate global subprogs lazily (Viktor Malik) [RHEL-23644]
  - bpf: Emit global subprog name in verifier logs (Viktor Malik) [RHEL-23644]
  - libbpf: Start v1.4 development cycle (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Replaces the usage of CHECK calls for ASSERTs in vmlinux (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Replaces the usage of CHECK calls for ASSERTs in bpf_obj_id (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Replaces the usage of CHECK calls for ASSERTs in bind_perm (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Replaces the usage of CHECK calls for ASSERTs in bpf_tcp_ca (Viktor Malik) [RHEL-23644]
  - selftests/bpf: reduce verboseness of reg_bounds selftest logs (Viktor Malik) [RHEL-23644]
  - bpf: bpf_iter_task_next: use next_task(kit->task) rather than next_task(kit->pos) (Viktor Malik) [RHEL-23644]
  - bpf: bpf_iter_task_next: use __next_thread() rather than next_thread() (Viktor Malik) [RHEL-23644]
  - bpf: task_group_seq_get_next: use __next_thread() rather than next_thread() (Viktor Malik) [RHEL-23644]
  - change next_thread() to use __next_thread() ?: group_leader (Viktor Malik) [RHEL-23644]
  - introduce __next_thread(), fix next_tid() vs exec() race (Viktor Malik) [RHEL-23644]
  - bpf: emit frameno for PTR_TO_STACK regs if it differs from current one (Viktor Malik) [RHEL-23644]
  - bpf: smarter verifier log number printing logic (Viktor Malik) [RHEL-23644]
  - bpf: omit default off=0 and imm=0 in register state log (Viktor Malik) [RHEL-23644]
  - bpf: emit map name in register state if applicable and available (Viktor Malik) [RHEL-23644]
  - bpf: print spilled register state in stack slot (Viktor Malik) [RHEL-23644]
  - bpf: extract register state printing (Viktor Malik) [RHEL-23644]
  - bpf: move verifier state printing code to kernel/bpf/log.c (Viktor Malik) [RHEL-23644]
  - bpf: move verbose_linfo() into kernel/bpf/log.c (Viktor Malik) [RHEL-23644]
  - bpf: rename BPF_F_TEST_SANITY_STRICT to BPF_F_TEST_REG_INVARIANTS (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add iter test requiring range x range logic (Viktor Malik) [RHEL-23644]
  - veristat: add ability to set BPF_F_TEST_SANITY_STRICT flag with -r flag (Viktor Malik) [RHEL-23644]
  - selftests/bpf: set BPF_F_TEST_SANITY_SCRIPT by default (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add randomized reg_bounds tests (Viktor Malik) [RHEL-23644]
  - selftests/bpf: add range x range test to reg_bounds (Viktor Malik) [RHEL-23644]
  - selftests/bpf: adjust OP_EQ/OP_NE handling to use subranges for branch taken (Viktor Malik) [RHEL-23644]
  - selftests/bpf: BPF register range bounds tester (Viktor Malik) [RHEL-23644]
  - bpf: make __reg{32,64}_deduce_bounds logic more robust (Viktor Malik) [RHEL-23644]
  - bpf: remove redundant s{32,64} -> u{32,64} deduction logic (Viktor Malik) [RHEL-23644]
  - bpf: add register bounds sanity checks and sanitization (Viktor Malik) [RHEL-23644]
  - bpf: enhance BPF_JEQ/BPF_JNE is_branch_taken logic (Viktor Malik) [RHEL-23644]
  - bpf: generalize is_scalar_branch_taken() logic (Viktor Malik) [RHEL-23644]
  - bpf: generalize reg_set_min_max() to handle non-const register comparisons (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add selftests for cgroup1 hierarchy (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add a new cgroup helper get_cgroup_hierarchy_id() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add a new cgroup helper get_classid_cgroup_id() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add parallel support for classid (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Fix issues in setup_classid_environment() (Viktor Malik) [RHEL-23644]
  - bpf: Add a new kfunc for cgroup1 hierarchy (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add assert for user stacks in test_task_stack (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Viktor Malik) [RHEL-23644 RHEL-40832]
  - bpf: Add crosstask check to __bpf_get_stack (Viktor Malik) [RHEL-23644]
  - bpf: Use named fields for certain bpf uapi structs (Viktor Malik) [RHEL-23644]
  - veristat: add ability to filter top N results (Viktor Malik) [RHEL-23644]
  - veristat: add ability to sort by stat's absolute value (Viktor Malik) [RHEL-23644]
  - bpf: replace register_is_const() with is_reg_const() (Viktor Malik) [RHEL-23644]
  - libbpf: Fix potential uninitialized tail padding with LIBBPF_OPTS_RESET (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Test bpf_refcount_acquire of node obtained via direct ld (Viktor Malik) [RHEL-23644]
  - bpf: Mark direct ld of stashed bpf_{rb,list}_node as non-owning ref (Viktor Malik) [RHEL-23644]
  - bpf: Move GRAPH_{ROOT,NODE}_MASK macros into btf_field_type enum (Viktor Malik) [RHEL-23644]
  - bpf: Use bpf_mem_free_rcu when bpf_obj_dropping non-refcounted nodes (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add test passing MAYBE_NULL reg to bpf_refcount_acquire (Viktor Malik) [RHEL-23644]
  - bpf: Add KF_RCU flag to bpf_refcount_acquire_impl (Viktor Malik) [RHEL-23644]
  - bpf: Introduce KF_ARG_PTR_TO_CONST_STR (Viktor Malik) [RHEL-23644]
  - bpf: Factor out helper check_reg_const_str() (Viktor Malik) [RHEL-23644]
  - bpf: Add __bpf_dynptr_data* for in kernel use (Viktor Malik) [RHEL-23644]
  - bpf, lpm: Fix check prefixlen before walking trie (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Disable CONFIG_DEBUG_INFO_REDUCED in config.aarch64 (Viktor Malik) [RHEL-23644]
  - bpftool: Fix prog object type in manpage (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Consolidate VIRTIO/9P configs in config.vm file (Viktor Malik) [RHEL-23644]
  - bpf: generalize reg_set_min_max() to handle two sets of two registers (Viktor Malik) [RHEL-23644]
  - bpf: prepare reg_set_min_max for second set of registers (Viktor Malik) [RHEL-23644]
  - bpf: unify 32-bit and 64-bit is_branch_taken logic (Viktor Malik) [RHEL-23644]
  - bpf: generalize is_branch_taken to handle all conditional jumps in one place (Viktor Malik) [RHEL-23644]
  - selftsets/bpf: Retry map update for non-preallocated per-cpu map (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Export map_update_retriable() (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Use value with enough-size when updating per-cpu map (Viktor Malik) [RHEL-23644]
  - bpf: move is_branch_taken() down (Viktor Malik) [RHEL-23644]
  - bpf: generalize is_branch_taken() to work with two registers (Viktor Malik) [RHEL-23644]
  - bpf: rename is_branch_taken reg arguments to prepare for the second one (Viktor Malik) [RHEL-23644]
  - bpf: drop knowledge-losing __reg_combine_{32,64}_into_{64,32} logic (Viktor Malik) [RHEL-23644]
  - bpf: try harder to deduce register bounds from different numeric domains (Viktor Malik) [RHEL-23644]
  - bpf: improve deduction of 64-bit bounds from 32-bit bounds (Viktor Malik) [RHEL-23644]
  - bpf: add special smin32/smax32 derivation from 64-bit bounds (Viktor Malik) [RHEL-23644]
  - bpf: derive subreg bounds from full bounds when upper 32 bits are constant (Viktor Malik) [RHEL-23644]
  - bpf: derive smin32/smax32 from umin32/umax32 bounds (Viktor Malik) [RHEL-23644]
  - bpf: derive smin/smax from umin/max bounds (Viktor Malik) [RHEL-23644]
  - selftests/bpf: satisfy compiler by having explicit return in btf test (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add malloc failure checks in bpf_iter (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Convert CHECK macros to ASSERT_* macros in bpf_iter (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Add tests for open-coded task_vma iter (Viktor Malik) [RHEL-23644]
  - bpf: Introduce task_vma open-coded iterator kfuncs (Viktor Malik) [RHEL-23644]
  - selftests/bpf: Fix potential premature unload in bpf_testmod (Viktor Malik) [RHEL-19647]
  - bpf: Move kernel test kfuncs to bpf_testmod (Viktor Malik) [RHEL-19647]


