# changelog

author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-475.el9]
changelog:
  - bonding: fix incorrect software timestamping report (Hangbin Liu) [RHEL-42409]
  - redhat/configs: increase CONFIG_DEFAULT_MMAP_MIN_ADDR from 32K to 64K for aarch64 (Brian Masney) [RHEL-45195]
  - locking/atomic: Make test_and_*_bit() ordered on failure (Paolo Bonzini) [RHEL-45199]
  - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43794] {CVE-2022-48743}
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (cki-backport-bot) [RHEL-43470] {CVE-2024-36978}
  - serial: port: Don't block system suspend even if bytes are left to xmit (Andrew Halaney) [RHEL-41060]
  - serial: core: Fix missing shutdown and startup for serial base port (Andrew Halaney) [RHEL-41060]
  - serial: core: Clearing the circular buffer before NULLifying it (Andrew Halaney) [RHEL-41060]
  - serial: port: Don't suspend if the port is still busy (Andrew Halaney) [RHEL-41060]
  - mmc: sdhci_am654: Fix ITAPDLY for HS400 timing (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci_am654: Update comments in sdhci_am654_set_clock (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci_am654: Fix itapdly/otapdly array type (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci_am654: Add OTAP/ITAP delay enable (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci_am654: Write ITAPDLY for DDR52 timing (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci_am654: Add tuning algorithm for delay chain (Lucas Karpinski) [RHEL-41085]
  - Revert "mmc: core: Capture correct oemid-bits for eMMC cards" (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Capture correct oemid-bits for eMMC cards (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Fix error propagation for some ioctl commands (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-sprd: Fix error code in sdhci_sprd_tuning() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: Disable LPM during initialization (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: Fix build error unused-function (Lucas Karpinski) [RHEL-41085]
  - mmc: host: Improve I/O read/write performance for GL9763E (Lucas Karpinski) [RHEL-41085]
  - mmc: core: sdio: hold retuning if sdio in 1-bit mode (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: Move card detect gpio polarity quirk to gpiolib (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: Replace platform device pointer by generic one (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: Use temporary variable for struct device (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: Get rid of platform data leftovers (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: Add description for struct member (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: move atmel MCI header file (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: Convert to gpio descriptors (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-sprd: Add SD HS mode online tuning (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Add host specific tuning support for SD HS mode (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pltfm: Rename sdhci_pltfm_register() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pltfm: Remove sdhci_pltfm_unregister() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-st: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pxav2: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-sparx5: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-hlwd: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-esdhc: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-at91: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-iproc: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci_f_sdh30: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-dove: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-cadence: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-bcm-kona: Use sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pltfm: Add sdhci_pltfm_remove() (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Cleanup mmc_sd_num_wr_blocks() function (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: milbeaut: remove redundant of_match_ptr() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-spear: remove redundant of_match_ptr() (Lucas Karpinski) [RHEL-41085]
  - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-st: Use devm_platform_ioremap_resource_byname() (Lucas Karpinski) [RHEL-41085]
  - mmc: block: Fix in_flight[issue_type] value error (Lucas Karpinski) [RHEL-41085]
  - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Lucas Karpinski) [RHEL-41085]
  - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Lucas Karpinski) [RHEL-41085]
  - mmc: f-sdh30: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove (Lucas Karpinski) [RHEL-41085]
  - mmc: uniphier-sd: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: pwrseq: sd8787: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: mvsdio: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: mxcmmc: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-spear: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-esdhc-mcf: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: wmt-sdmmc: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-st: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: usdhi60rol0: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: wbsd: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: owl: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: rockchip: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: alcor: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-msm: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-esdhc-imx: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-acpi: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-tegra: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-sprd: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdio: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-aspeed: Convert to platform remove (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-aspeed: remove unneeded variables (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: moxart: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: pxamci: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: cavium-octeon: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: au1xmmc: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: mxs-mmc: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdhc: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-s3c: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: xenon: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sh_mmcif: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pxav3: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: exynos: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: omap: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-at91: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: omap_hsmmc: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: milbeaut: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pic32: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: hi3798cv200: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: davinci_mmc: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: cb710: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: litex_mmc: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: jz4740: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: bcm2835: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: sunxi: Convert to platform remove callback returning void (Lucas Karpinski) [RHEL-41085]
  - mmc: core: propagate removable attribute to driver core (Lucas Karpinski) [RHEL-41085]
  - mmc: Explicitly include correct DT includes (Lucas Karpinski) [RHEL-41085]
  - mmc: davinci: Make SDIO irq truly optional (Lucas Karpinski) [RHEL-41085]
  - mmc: uniphier-sd: register irqs before registering controller (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: remove outdated indentation (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: register irqs before registering controller (Lucas Karpinski) [RHEL-41085]
  - mmc: pxamci: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: omap_hsmmc: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: mxcmmc: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: Revert "mmc: core: Allow mmc_start_host() synchronously detect a card" (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Improve ux500 debug prints (Lucas Karpinski) [RHEL-41085]
  - mmc: moxart: read scr register without changing byte order (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: Drop redundant WARN_ON() in the irq handler (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Add support for SW busy-end timeouts (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: stm32: add delay block support for STM32MP25 (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: stm32: prepare other delay block support (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: stm32: manage block gap hardware flow control (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Add support for sdmmc variant revision v3.0 (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: add stm32_idmabsize_align parameter (Lucas Karpinski) [RHEL-41085]
  - mmc: usdhi60rol0: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: sunxi: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: sh_mmcif: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-spear: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-acpi: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: owl: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: omap_hsmmc: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: omap: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: mvsdio: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: bcm2835: fix deferred probing (Lucas Karpinski) [RHEL-41085]
  - mmc: litex_mmc: set PROBE_PREFER_ASYNCHRONOUS (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Break out a helper function (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Use a switch statement machine (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Use state machine state as exit condition (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Retry the busy start condition (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Make busy complete state machine explicit (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Break out error check in busy detect (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Stash status while waiting for busy (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Unwind big if() clause (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Clear busy_status when starting command (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: stm32: set feedback clock when using delay block (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: stm32: fix max busy timeout calculation (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: reduce CIT for better performance (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: Add support SD Express card for GL9767 (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Add VDD2 definition for power control register (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: Set SDR104's clock to 205MHz and enable SSC for GL9767 (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: Add Genesys Logic GL9767 support (Lucas Karpinski) [RHEL-41085]
  - rnbd-srv: don't pass a holder for non-exclusive blkdev_get_by_path (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Lucas Karpinski) [RHEL-41085]
  - mmc: block: ioctl: do write error check for spi (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Lucas Karpinski) [RHEL-41085]
  - mmc: sdio: Add/rename SDIO ID of the RTL8723DS SDIO wifi cards (Lucas Karpinski) [RHEL-41085]
  - wifi: rtw88: rtw8723d: Implement RTL8723DS (SDIO) efuse parsing (Lucas Karpinski) [RHEL-41085]
  - wifi: rtw88: sdio: Check the HISR RX_REQUEST bit in rtw_sdio_rx_isr() (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Remove unnecessary error checks and change return type (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (Lucas Karpinski) [RHEL-41085]
  - mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order (Lucas Karpinski) [RHEL-41085]
  - mmc: vub300: fix invalid response handling (Lucas Karpinski) [RHEL-41085]
  - mmc: mediatek: Avoid ugly error message when SDIO wakeup IRQ isn't used (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdhc: Avoid cast to incompatible function type (Lucas Karpinski) [RHEL-41085]
  - mmc: block: Suppress empty whitespaces in prints (Lucas Karpinski) [RHEL-41085]
  - mmc: omap: restore original power up/down steps (Lucas Karpinski) [RHEL-41085]
  - mmc: omap: fix deferred probe (Lucas Karpinski) [RHEL-41085]
  - mmc: omap: fix broken slot switch lookup (Lucas Karpinski) [RHEL-41085]
  - ARM: OMAP2+: fix N810 MMC gpiod table (Lucas Karpinski) [RHEL-41085]
  - ARM: OMAP2+: fix bogus MMC GPIO labels on Nokia N8x0 (Lucas Karpinski) [RHEL-41085]
  - ARM: omap2: Fix copy/paste bug (Lucas Karpinski) [RHEL-41085]
  - ARM/mmc: Convert old mmci-omap to GPIO descriptors (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Make dw_mci_pltfm_remove() return void (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works (Lucas Karpinski) [RHEL-41085]
  - mmc: block: ensure error propagation for non-blk (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-cadence: Fix an error handling path in sdhci_cdns_probe() (Lucas Karpinski) [RHEL-41085]
  - mmc: vub300: remove unreachable code (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-cadence: Support mmc hardware reset (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-cadence: Add AMD Pensando Elba SoC support (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-cadence: Support device specific init during probe (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-cadence: Enable device specific override of writel() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-msm: Switch to the new ICE API (Lucas Karpinski) [RHEL-41085]
  - mmc: sdio: add Realtek SDIO vendor ID and various wifi device IDs (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Remove unused macro mmc_req_rel_wr (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Skip setting clock delay for 400KHz (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Add support for eMMC5.1 on Xilinx Versal Net platform (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Allow mmc_start_host() synchronously detect a card (Lucas Karpinski) [RHEL-41085]
  - mmc: core: remove unnecessary (void*) conversions (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Log about empty non-removable slots (Lucas Karpinski) [RHEL-41085]
  - mmc: sdricoh_cs: remove unused sdricoh_readw function (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Remove Intel Thunder Bay SOC support (Lucas Karpinski) [RHEL-41085]
  - mmc: usdhi6rol0: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-aspeed: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: owl-mmc: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: omap: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: jz4740: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc-pltfm: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: drop useless sdhci_get_compatibility() !OF stub (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: use new helpers mmc_regulator_enable/disable_vqmmc (Lucas Karpinski) [RHEL-41085]
  - mmc: core: add helpers mmc_regulator_enable/disable_vqmmc (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: simplify usage of mmc_regulator_set_ocr (Lucas Karpinski) [RHEL-41085]
  - mmc: arasan: Use of_property_present() for testing DT property presence (Lucas Karpinski) [RHEL-41085]
  - mmc: Use of_property_read_bool() for boolean properties (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: remove R-Car H3 ES1.* handling (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc-starfive: Fix initialization of prev_err (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Allow invalid regulator in mmc_regulator_set_ocr() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Add support to request the "gate" clock (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-o2micro: Fix SDR50 mode timing issue (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: core: fix return value check in devm_mmc_alloc_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: constify member data of struct meson_host (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: use devm_clk_get_enabled() for core clock (Lucas Karpinski) [RHEL-41085]
  - mmc: starfive: Add sdio/emmc driver support (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: Add StarFive MMC module (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: support platform interrupt as card detect interrupt (Lucas Karpinski) [RHEL-41085]
  - mmc: core: support setting card detect interrupt from drivers (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: fix SDIO mode if cap_sdio_irq isn't set (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Align to common busy polling behaviour for mmc ioctls (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: remove meson_mmc_get_cd (Lucas Karpinski) [RHEL-41085]
  - mmc: omap: drop TPS65010 dependency (Lucas Karpinski) [RHEL-41085]
  - mmc: moxart: set maximum request/block/segment sizes (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Use devm_platform_get_and_ioremap_resource() (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: use devm_mmc_alloc_host (Lucas Karpinski) [RHEL-41085]
  - mmc: core: add devm_mmc_alloc_host (Lucas Karpinski) [RHEL-41085]
  - mmc: jz4740: Add support for vqmmc power supply (Lucas Karpinski) [RHEL-41085]
  - mmc: jz4740: Work around bug on JZ4760(B) (Lucas Karpinski) [RHEL-41085]
  - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Lucas Karpinski) [RHEL-41085]
  - mmc: uniphier-sd: Add control to switch UHS speed (Lucas Karpinski) [RHEL-41085]
  - mmc: uniphier-sd: Add control of UHS mode using SD interface logic (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: uniphier-sd: Add socionext,syscon-uhs-mode property (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: sdhci-pxa: add pxav1 (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pxav2: add optional pinctrl for SDIO IRQ workaround (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pxav2: add SDIO card IRQ workaround for PXA168 V1 controller (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pxav2: add optional core clock (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pxav2: change clock name to match DT bindings (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pxav2: add register workaround for PXA168 silicon bug (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pxav2: enable CONFIG_MMC_SDHCI_IO_ACCESSORS (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pxav2: add initial support for PXA168 V1 controller (Lucas Karpinski) [RHEL-41085]
  - mmc: pwrseq_sd8787: Allow being built-in irrespective of dependencies (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Remove SDHCI_QUIRK_MISSING_CAPS (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-iproc: Replace SDHCI_QUIRK_MISSING_CAPS (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pxav3: Replace SDHCI_QUIRK_MISSING_CAPS (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-sprd: Replace SDHCI_QUIRK_MISSING_CAPS (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Replace SDHCI_QUIRK_MISSING_CAPS (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci: Replace SDHCI_QUIRK_MISSING_CAPS for Ricoh controller (Lucas Karpinski) [RHEL-41085]
  - mmc: sdio: Spelling s/compement/complement/ (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: fix race between stop command and start of next command (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: Add RZ/V2M compatible string (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-esdhc: Modify mismatched function name (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: renesas,sdhi: Document RZ/V2M support (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-sprd: Fix eMMC init failure after hw reset (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Resolve "unused" warnings with CONFIG_OF=n (Lucas Karpinski) [RHEL-41085]
  - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-esdhc: limit the SDHC clock frequency (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Remove unneeded semicolon (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Normalize the error handling branch in sd_read_ext_regs() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-sprd: Fix no reset data and command after voltage switch (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Avoid unnecessary ->set_clock() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Fix voltage switch delay (Lucas Karpinski) [RHEL-41085]
  - mmc: mmc-hsq: Use fifo to dispatch mmc_request (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Remove non-data R1B ioctl workaround (Lucas Karpinski) [RHEL-41085]
  - mmc: core: refactor debugfs code (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() (Lucas Karpinski) [RHEL-41085]
  - mmc: Avoid open coding by using mmc_op_tuning() (Lucas Karpinski) [RHEL-41085]
  - mmc: mmc_test: Fix removal of debugfs file (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: use new convenience macro from MMC core (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: add helper to access quirks (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: better reset from HS400 mode (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: alway populate SCC pointer (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Fix ambiguous TRIM and DISCARD arg (Lucas Karpinski) [RHEL-41085]
  - mmc: pwrseq: Use device_match_of_node() (Lucas Karpinski) [RHEL-41085]
  - clk: socfpga: remove the setting of clk-phase for sdmmc_clk (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc-pltfm: socfpga: add method to configure clk-phase (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: synopsys-dw-mshc: document "altr,sysmgr-syscon" (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Fix the SD tuning issue that the SDHCI_TRANSFER_MODE is cleared incorrectly (Lucas Karpinski) [RHEL-41085]
  - mmc: f-sdh30: Add quirks for broken timeout clock capability (Lucas Karpinski) [RHEL-41085]
  - mmc: f-sdh30: Add support for non-removable media (Lucas Karpinski) [RHEL-41085]
  - mmc: f-sdh30: Add compatible string for Socionext F_SDH30_E51 (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: sdhci-fujitsu: Add compatible string for F_SDH30_E51 (Lucas Karpinski) [RHEL-41085]
  - mmc: f-sdh30: Add reset control support (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: Convert sdhci-fujitsu to JSON schema (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: fix two spelling mistakes in comment (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: wbsd: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: via-sdmmc: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: omap_hsmmc: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: litex_mmc: ensure `host->irq == 0` if polling (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: add Inline Crypto Engine clock control (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Lucas Karpinski) [RHEL-41085]
  - mmc: tmio: remove 'alignment_shift' from platform data (Lucas Karpinski) [RHEL-41085]
  - mmc: tmio: remove tmio_mmc_k(un)map_atomic helpers (Lucas Karpinski) [RHEL-41085]
  - mmc: Remove duplicate words in comments (Lucas Karpinski) [RHEL-41085]
  - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: vub300: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: toshsd: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: pxamci: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: mxcmmc: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: moxart: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: alcor: fix return value check of mmc_add_host() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci: Set PROBE_PREFER_ASYNCHRONOUS (Lucas Karpinski) [RHEL-41085]
  - mmc: core: properly select voltage range without power cycle (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-*: Convert drivers to new sdhci_and_cqhci_reset() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Allow building with COMPILE_TEST (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Fix WRITE_ZEROES CQE handling (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Add support for dynamic configuration (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Fix kernel panic when remove non-standard SDIO card (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (Lucas Karpinski) [RHEL-41085]
  - mmc: block: Remove error check of hw_reset on reset (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-sprd: Fix minimum clock limit (Lucas Karpinski) [RHEL-41085]
  - mmc: queue: Cancel recovery work on cleanup (Lucas Karpinski) [RHEL-41085]
  - mmc: remove tmio_mmc driver (Lucas Karpinski) [RHEL-41085]
  - mmc: wbsd: Replace kmap_atomic() with kmap_local_page() (Lucas Karpinski) [RHEL-41085]
  - mmc: au1xmmc: Replace kmap_atomic() with kmap_local_page() (Lucas Karpinski) [RHEL-41085]
  - mmc: tmio_mmc_core: Replace kmap_atomic() with kmap_local_page() (Lucas Karpinski) [RHEL-41085]
  - mmc: tmio_mmc_core: Remove local_irq_{save,restore}() around k[un]map_atomic() (Lucas Karpinski) [RHEL-41085]
  - mmc: tifm_sd: Replace kmap_atomic() with kmap_local_page() (Lucas Karpinski) [RHEL-41085]
  - mmc: tifm_sd: Remove local_irq_{save,restore}() around tifm_sd_bounce_block() (Lucas Karpinski) [RHEL-41085]
  - mmc: tifm_sd: Remove local_irq_{save,restore}() around tifm_sd_transfer_data() (Lucas Karpinski) [RHEL-41085]
  - mmc: mmc_test: Remove local_irq_{save,restore}() around sg_copy_{from,to}_buffer() (Lucas Karpinski) [RHEL-41085]
  - mmc: bcm2835: Replace kmap_atomic() with kmap_local_page() (Lucas Karpinski) [RHEL-41085]
  - mmc: bcm2835: Remove local_irq_{save,restore}() around sg_miter_{next,stop}() (Lucas Karpinski) [RHEL-41085]
  - mmc: bcm2835: Remove local_irq_{save,restore}() around k[un]map_atomic() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Replace kmap_atomic() with kmap_local_page() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Remove local_irq_{save,restore}() around sg_miter_{next,stop}() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Remove local_irq_{save,restore}() around k[un]map_atomic() (Lucas Karpinski) [RHEL-41085]
  - mmc: remove cns3xxx driver (Lucas Karpinski) [RHEL-41085]
  - clk: remove s3c24xx driver (Lucas Karpinski) [RHEL-41085]
  - mmc: remove s3cmci driver (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-sprd: Fix the limitation of div (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Terminate infinite loop in SD-UHS voltage switch (Lucas Karpinski) [RHEL-41085]
  - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Fix host->cmd is null (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: add SDIO interrupt support (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: adjust and re-use constant IRQ_EN_MASK (Lucas Karpinski) [RHEL-41085]
  - mmc: jz4740_mmc: Fix error check for dma_map_sg (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdhc: Fix error check for dma_map_sg (Lucas Karpinski) [RHEL-41085]
  - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Switch to basic workqueue API for sdio_irq_work (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Fix UHS-I SD 1.8V workaround branch (Lucas Karpinski) [RHEL-41085]
  - mmc: sunxi-mmc: Fix clock refcount imbalance during unbind (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: Fix an error handling path in meson_mmc_probe() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-o2micro: fix some SD cards compatibility issue at DDR50 mode (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Clear interrupts when cqe off/disable (Lucas Karpinski) [RHEL-41085]
  - mmc: pxamci: Fix another error handling path in pxamci_probe() (Lucas Karpinski) [RHEL-41085]
  - mmc: pxamci: Fix an error handling path in pxamci_probe() (Lucas Karpinski) [RHEL-41085]
  - mmc: mediatek: add support for SDIO eint wakup IRQ (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Add support for SDIO wakeup interrupt (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: mtk-sd: extend interrupts and pinctrls properties (Lucas Karpinski) [RHEL-41085]
  - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop (Lucas Karpinski) [RHEL-41085]
  - mmc: cavium-octeon: Add of_node_put() when breaking out of loop (Lucas Karpinski) [RHEL-41085]
  - mmc: core: quirks: Add of_node_put() when breaking out of loop (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: use clk_get_rate(base_clk) in PM resume (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-msm: drop redundant of_device_id entries (Lucas Karpinski) [RHEL-41085]
  - mmc: mxcmmc: Use mmc_card_sdio macro (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Use mmc_card_* macro and add a new for the sd_combo type (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Replace with already defined values for readability (Lucas Karpinski) [RHEL-41085]
  - mmc: block: Add single read for 4k sector cards (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R (Lucas Karpinski) [RHEL-41085]
  - mmc: tmio: avoid glitches when resetting (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: Fix typo's (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: Get the reset handle early in the probe (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: re-tuning is needed after a pm transition to support emmc HS200 mode (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Fix a lockdep warning for PM runtime init (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-esdhc: Fixup use of of_find_compatible_node() (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Do not evaluate HS400 capabilities if bus has no MMC capability (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-st: Obviously always return success in remove callback (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Obviously always return success in remove callback (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: rockchip: Obviously always return success in remove callback (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: hi3789cv200: Obviously always return success in remove callback (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: exynos: Obviously always return success in remove callback (Lucas Karpinski) [RHEL-41085]
  - mmc: mediatek: wait dma stop bit reset to 0 (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Initialize base_clk to NULL in sdhci_brcmstb_probe() (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Fix typo in comment (Lucas Karpinski) [RHEL-41085]
  - mmc: debugfs: Fix file release memory leak (Lucas Karpinski) [RHEL-41085]
  - mmc: block: Fix CQE recovery reset success (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: fix typo (Lucas Karpinski) [RHEL-41085]
  - mmc: cqhci: Capture eMMC and SD card errors (Lucas Karpinski) [RHEL-41085]
  - mmc: debugfs: Add debug fs error state entry for mmc driver (Lucas Karpinski) [RHEL-41085]
  - mmc: debugfs: Add debug fs entry for mmc driver (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci: Capture eMMC and SD card errors (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Capture eMMC and SD card errors (Lucas Karpinski) [RHEL-41085]
  - mmc: mxcmmc: Silence a clang warning (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Add ability to increase max clock rate for 72116b0 (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Fix busy polling for MMC_SEND_OP_COND again (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Add NULL check for data field (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Fix compiler warning (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-msm: Add compatible string check for sdx65 (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-msm: Add compatible string check for sm8150 (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-msm: Add SoC specific compatibles (Lucas Karpinski) [RHEL-41085]
  - mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from 11/2019 (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Add SD card quirk for broken discard (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Support zeroout using TRIM for eMMC (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Enable Clock Gating to save power (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-brcmstb: Re-organize flags (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Remove custom ios handler (Lucas Karpinski) [RHEL-41085]
  - mmc: atmel-mci: Simplify if(chan) and if(!chan) (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Add CIDs for cards to the entropy pool (Lucas Karpinski) [RHEL-41085]
  - mmc: core: use kobj_to_dev() (Lucas Karpinski) [RHEL-41085]
  - mmc: sunxi-mmc: Fix DMA descriptors allocated above 32 bits (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Allows to override the timeout value for ioctl() path (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Use of_device_get_match_data() helper (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdhc: Fix initialization frozen issue (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Set HS clock speed before sending HS CMD13 (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Break IRQ status loop when all zero (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: switch to device-managed dmam_alloc_coherent() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: A workaround to allow GL9755 to enter ASPM L1.2 (Lucas Karpinski) [RHEL-41085]
  - mmc: sh_mmcif: move platform_data header to proper location (Lucas Karpinski) [RHEL-41085]
  - mmc: jz4740: Apply DMA engine limits to maximum segment size (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdhc: Use devm_clk_hw_get_clk() for clock retrieval (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdhc: Remove .card_hw_reset callback (Lucas Karpinski) [RHEL-41085]
  - mmc: improve API to make clear hw_reset callback is for cards (Lucas Karpinski) [RHEL-41085]
  - mmc: core: improve API to make clear that mmc_sw_reset is for cards (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: remove superfluous specific M3W entry (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: R-Car V3H ES2.0 gained HS400 support (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: R-Car V3M also has no HS400 (Lucas Karpinski) [RHEL-41085]
  - mmc: omap: Make it CCF clk API compatible (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Fixup support for writeback-cache for eMMC and SD (Lucas Karpinski) [RHEL-41085]
  - mmc: mmc_spi: parse speed mode options (Lucas Karpinski) [RHEL-41085]
  - mmc: core: block: fix sloppy typing in mmc_blk_ioctl_multi_cmd() (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: stm32: use a buffer for unaligned DMA requests (Lucas Karpinski) [RHEL-41085]
  - mmc: block: Check for errors after write on SPI (Lucas Karpinski) [RHEL-41085]
  - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: stm32: correctly check all elements of sg list (Lucas Karpinski) [RHEL-41085]
  - mmc: tmio: remove outdated members from host struct (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Silence delay phase calculation debug log (Lucas Karpinski) [RHEL-41085]
  - mmc: davinci_mmc: Handle error for clk_enable (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: Fix GL9763E runtime PM when the system resumes from suspend (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: Add runtime PM for GL9763E (Lucas Karpinski) [RHEL-41085]
  - mmc: dw-mmc-rockchip: Fix handling invalid clock rates (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Support setting f_min from host drivers (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Restore (almost) the busy polling for MMC_SEND_OP_COND (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Drop HS400 caps unless 8-bit bus is supported too (Lucas Karpinski) [RHEL-41085]
  - mmc: host: Return an error when ->enable_sdio_irq() ops is missing (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Improve fallback to speed modes if eMMC HS200 fails (Lucas Karpinski) [RHEL-41085]
  - mmc: sh_mmcif: Simplify division/shift logic (Lucas Karpinski) [RHEL-41085]
  - mmc: meson: Fix usage of meson_mmc_post_req() (Lucas Karpinski) [RHEL-41085]
  - mmc: core: use sysfs_emit() instead of sprintf() (Lucas Karpinski) [RHEL-41085]
  - mmc: block: fix read single on recovery logic (Lucas Karpinski) [RHEL-41085]
  - mmc: sunxi-mmc: Add D1 MMC variant (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: sunxi: Add D1 MMC and eMMC compatibles (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Use device_property_string_array_count() (Lucas Karpinski) [RHEL-41085]
  - mmc: davinci: Use of_device_get_match_data() helper (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-at91: Use of_device_get_match_data() helper (Lucas Karpinski) [RHEL-41085]
  - mmc: wmt-sdmmc: Use of_device_get_match_data() helper (Lucas Karpinski) [RHEL-41085]
  - moxart: fix potential use-after-free on remove path (Lucas Karpinski) [RHEL-41085]
  - mmc: sh_mmcif: Check for null res pointer (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: Add a switch to enable/disable SSC for GL9750 and GL9755 (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: Enable SSC at 50MHz and 100MHz for GL9750 and GL9755 (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: Reduce the SSC value at 205MHz for GL9750 and GL9755 (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Wait for command setting 'Power Off Notification' bit to complete (Lucas Karpinski) [RHEL-41085]
  - mmc: Add driver for LiteX's LiteSDCard interface (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: Add bindings for LiteSDCard (Lucas Karpinski) [RHEL-41085]
  - MAINTAINERS: co-maintain LiteX platform (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-esdhc: Check for error num after setting mask (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Fix potential null pointer risk (Lucas Karpinski) [RHEL-41085]
  - mmc: au1xmmc: propagate errors from platform_get_irq() (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-o2micro: Improve card input timing at SDR104/HS200 mode (Lucas Karpinski) [RHEL-41085]
  - mmc: jz4740: Support using a bi-directional DMA channel (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: ingenic: Support using bi-directional DMA channel (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Do not wait for DTO in case of error (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Add driver callbacks for data read timeout (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc-exynos: Add support for ARTPEC-8 (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: exynos-dw-mshc: Add support for ARTPEC-8 (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdhc: Drop unused MESON_SDHC_NUM_BUILTIN_CLKS macro (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdio: add IRQ check (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-mx-sdhc: add IRQ check (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: clean up a debug message (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Assign src_clk parent to src_clk_cg for legacy DTs (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Fix usage of devm_clk_get_optional() (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Take action for no-sdio device-tree parameter (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Use BIT() and GENMASK() macros to describe fields (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Use readl_poll_timeout instead of open-coded polling (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: GL975[50]: Issue 8/16-bit MMIO reads as 32-bit reads. (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-gli: GL9755: Support for CD/WP inversion on OF platforms (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: stm32: clear DLYB_CR after sending tuning command (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: add hs200 support for stm32 sdmmc (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: increase stm32 sdmmcv2 clock max freq (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Add support for sdmmc variant revision v2.2 (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Fix blk_status_t handling (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Remove redundant driver match function (Lucas Karpinski) [RHEL-41085]
  - mmc: mediatek: free the ext_csd when mmc_get_ext_csd success (Lucas Karpinski) [RHEL-41085]
  - mmc: mxc: Use the new PM macros (Lucas Karpinski) [RHEL-41085]
  - mmc: jz4740: Use the new PM macros (Lucas Karpinski) [RHEL-41085]
  - mmc: mmc_spi: Use write_or_read temporary variable in mmc_spi_data_do() (Lucas Karpinski) [RHEL-41085]
  - mmc: mmc_spi: Convert 'multiple' to be boolean in mmc_spi_data_do() (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Disable card detect during shutdown (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: initialize variable properly when tuning (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: exynos: use common_caps (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: rockchip: use common_caps (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: hi3798cv200: use common_caps (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: add common capabilities to replace caps (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci: Add PCI ID for Intel ADL (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Allow lower TMOUT value than maximum (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: Simplify an expression (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: Use devm_clk_get_optional() to obtain CD clock (Lucas Karpinski) [RHEL-41085]
  - mmc: spi: Add device-tree SPI IDs (Lucas Karpinski) [RHEL-41085]
  - mmc: omap_hsmmc: Revert special init for wl1251 (Lucas Karpinski) [RHEL-41085]
  - mmc: core: transplant ti,wl1251 quirks from to be retired omap_hsmmc (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO (Lucas Karpinski) [RHEL-41085]
  - mmc: core: provide macro and table to match the device tree to apply quirks (Lucas Karpinski) [RHEL-41085]
  - mmc: core: allow to match the device tree to apply quirks (Lucas Karpinski) [RHEL-41085]
  - mmc: core: rewrite mmc_fixup_device() (Lucas Karpinski) [RHEL-41085]
  - mmc: core: adjust polling interval for CMD1 (Lucas Karpinski) [RHEL-41085]
  - mmc: core: change __mmc_poll_for_busy() parameter type (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Avoid hung state if GEN_CMD transfer fails (Lucas Karpinski) [RHEL-41085]
  - mmc: tmio: reinit card irqs in reset routine (Lucas Karpinski) [RHEL-41085]
  - mmc: tmio: reenable card irqs after the reset callback (Lucas Karpinski) [RHEL-41085]
  - mmc: mediatek: Move cqhci init behind ungate clock (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: exynos: Fix spelling mistake "candiates" -> candidates (Lucas Karpinski) [RHEL-41085]
  - mmc: cqhci: clear HALT state after CQE enable (Lucas Karpinski) [RHEL-41085]
  - mmc: vub300: fix control-message timeouts (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: exynos: fix the finding clock sample value (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Fix build if CONFIG_PM_SLEEP is not set (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Drop use of ->init_card() callback (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Remove forward declaration of sdhci_omap_context_save() (Lucas Karpinski) [RHEL-41085]
  - mmc: add MT7921 SDIO identifiers for MediaTek Bluetooth devices (Lucas Karpinski) [RHEL-41085]
  - mmc: winbond: don't build on M68K (Lucas Karpinski) [RHEL-41085]
  - mmc: mxs-mmc: disable regulator on error and in the remove function (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Configure optional wakeirq (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Allow SDIO card power off and enable aggressive PM (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Implement PM runtime functions (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Add omap_offset to support omap3 and earlier (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Handle voltages to add support omap4 (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: sdhci-omap: Update binding for legacy SoCs (Lucas Karpinski) [RHEL-41085]
  - mmc: moxart: Fix null pointer dereference on pointer host (Lucas Karpinski) [RHEL-41085]
  - mmc: moxart: Fix reference count leaks in moxart_probe (Lucas Karpinski) [RHEL-41085]
  - mmc: slot-gpio: Update default label when no con_id provided (Lucas Karpinski) [RHEL-41085]
  - mmc: slot-gpio: Refactor mmc_gpio_alloc() (Lucas Karpinski) [RHEL-41085]
  - mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-sprd: Wait until DLL locked after being configured (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-pci-o2micro: Fix spelling mistake "unsupport" -> "unsupported" (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-s3c: Describe driver in KConfig (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-at91: replace while loop with read_poll_timeout (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-at91: wait for calibration done before proceed (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: Add small comment about reset thread (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Check MMCHS_HL_HWINFO register for ADMA (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Parse legacy ti,non-removable property (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Restore sysconfig after reset (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Fix context restore (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Add HS400 online tuning support (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: mtk-sd: Add hs400 dly3 setting (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-s3c: drop unneeded MODULE_ALIAS (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: update mmc-card.yaml reference (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Dont wait for DRTO on Write RSP error (Lucas Karpinski) [RHEL-41085]
  - mmc: cqhci: Print out qcnt in case of timeout (Lucas Karpinski) [RHEL-41085]
  - mmc: omap_hsmmc: Make use of the helper macro SET_RUNTIME_PM_OPS() (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Remove unused parameters (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Add intel Thunder Bay SOC support to the arasan eMMC driver (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Remove unused parameters(mrq) (Lucas Karpinski) [RHEL-41085]
  - mmc: mtk-sd: Add wait dma stop done flow (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi: fix regression with hard reset on old SDHIs (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Only inject fault before done/error (Lucas Karpinski) [RHEL-41085]
  - mmc: pwrseq: sd8787: fix compilation warning (Lucas Karpinski) [RHEL-41085]
  - mmc: queue: Remove unused parameters(request_queue) (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Return correct emmc response in case of ioctl error (Lucas Karpinski) [RHEL-41085]
  - mmc: queue: Match the data type of max_segments (Lucas Karpinski) [RHEL-41085]
  - mmc: switch from 'pci_' to 'dma_' API (Lucas Karpinski) [RHEL-41085]
  - mmc: pwrseq: add wilc1000_sdio dependency for pwrseq_sd8787 (Lucas Karpinski) [RHEL-41085]
  - mmc: pwrseq: sd8787: add support for wilc1000 (Lucas Karpinski) [RHEL-41085]
  - dt-bindings: mmc: Extend pwrseq-sd8787 binding for wilc1000 (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Issue HPI in case the BKOPS timed out (Lucas Karpinski) [RHEL-41085]
  - mmc: usdhi6rol0: Implement card_busy function (Lucas Karpinski) [RHEL-41085]
  - mmc: moxart: Fix issue with uninitialized dma_slave_config (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-msm: Use maximum possible data timeout value (Lucas Karpinski) [RHEL-41085]
  - mmc: sdio: Print contents of unknown CIS tuples (Lucas Karpinski) [RHEL-41085]
  - mmc: sdio: Don't warn about vendor CIS tuples (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Avoid hogging the CPU while polling for busy after I/O writes (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Avoid hogging the CPU while polling for busy for mmc ioctls (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Avoid hogging the CPU while polling for busy in the I/O err path (Lucas Karpinski) [RHEL-41085]
  - mmc: dw_mmc: Add data CRC error injection (Lucas Karpinski) [RHEL-41085]
  - mmc: mmci: De-assert reset on probe (Lucas Karpinski) [RHEL-41085]
  - mmc: core: Only print retune error when we don't check for card removal (Lucas Karpinski) [RHEL-41085]
  - mmc: host: factor out clearing the retune state (Lucas Karpinski) [RHEL-41085]
  - mmc: host: add kdoc for mmc_retune_{en|dis}able (Lucas Karpinski) [RHEL-41085]
  - mmc: mmc_spi: Simplify busy loop in mmc_spi_skip() (Lucas Karpinski) [RHEL-41085]
  - mmc: usdhi6rol0: use proper DMAENGINE API for termination (Lucas Karpinski) [RHEL-41085]
  - mmc: sh_mmcif: use proper DMAENGINE API for termination (Lucas Karpinski) [RHEL-41085]
  - mmc: renesas_sdhi_sys_dmac: use proper DMAENGINE API for termination (Lucas Karpinski) [RHEL-41085]
  - mmc: arasan: Fix the issue in reading tap values from DT (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Modify data type of the clk_phase array (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Use appropriate type of division macro (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Check return value of non-void funtions (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Skip Auto tuning for DDR50 mode in ZynqMP platform (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Add "SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12" quirk. (Lucas Karpinski) [RHEL-41085]
  - mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP (Lucas Karpinski) [RHEL-41085]
  - redhat/configs: Adding CONFIG_TYPEC_MUX_IT5205 and CONFIG_USB_DEFAULT_AUTHORIZATION_MODE (Desnes Nunes) [RHEL-37673]
  - redhat/configs: Adding CONFIG_PHY_RTK_RTD_USB2PHY and CONFIG_PHY_RTK_RTD_USB3PHY (Desnes Nunes) [RHEL-37673]
  - redhat/configs: Adding CONFIG_TYPEC_MUX_IT5205 (Desnes Nunes) [RHEL-37673]
  - kcov, usb: disable interrupts in kcov_remote_start_usb_softirq (Desnes Nunes) [RHEL-37673]
  - kcov: fix spelling typos in comments (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps (Desnes Nunes) [RHEL-37673]
  - usb: core: hcd: Convert from tasklet to BH workqueue (Desnes Nunes) [RHEL-37673]
  - backtracetest: Convert from tasklet to BH workqueue (Desnes Nunes) [RHEL-37673]
  - media: dvb_frontend: Use wait_event_freezable_timeout() for freezable kthread (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: Check for port partner validity before consuming it (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: enforce ready state when queueing alt mode vdm (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: unregister existing source caps before re-registration (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: clear pd_event queue in PORT_RESET (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: queue correct sop type in tcpm_queue_vdm_unlocked (Desnes Nunes) [RHEL-37673]
  - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device (Desnes Nunes) [RHEL-37673]
  - usb: ohci: Prevent missed ohci interrupts (Desnes Nunes) [RHEL-37673]
  - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: core: Prevent phy suspend during init (Desnes Nunes) [RHEL-37673]
  - usb: xhci-plat: Don't include xhci.h (Desnes Nunes) [RHEL-37673]
  - USB: serial: option: add Telit FN920C04 rmnet compositions (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: ep0: Don't reset resource alloc flag (Desnes Nunes) [RHEL-37673]
  - Revert "usb: cdc-wdm: close race between read and workqueue" (Desnes Nunes) [RHEL-37673]
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support (Desnes Nunes) [RHEL-37673]
  - USB: serial: option: add Lonsung U8300/U9300 product (Desnes Nunes) [RHEL-37673]
  - USB: serial: option: add support for Fibocom FM650/FG650 (Desnes Nunes) [RHEL-37673]
  - USB: serial: option: support Quectel EM060K sub-models (Desnes Nunes) [RHEL-37673]
  - USB: serial: option: add Fibocom FM135-GL variants (Desnes Nunes) [RHEL-37673]
  - usb: misc: onboard_usb_hub: Disable the USB hub clock on failure (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Avoid notify PM core about runtime PM resume (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Fix wake configurations after device unplug (Desnes Nunes) [RHEL-37673]
  - phy: freescale: imx8m-pcie: fix pcie link-up instability (Desnes Nunes) [RHEL-37673]
  - usb: Disable USB3 LPM at shutdown (Desnes Nunes) [RHEL-37673]
  - xhci: Fix root hub port null pointer dereference in xhci tracepoints (Desnes Nunes) [RHEL-37673]
  - usb: xhci: correct return value in case of STS_HCE (Desnes Nunes) [RHEL-37673]
  - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-37673]
  - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-37673]
  - usb: typec: ucsi: Check capabilities before cable and identity discovery (Desnes Nunes) [RHEL-37673]
  - usb: typec: Return size of buffer if pd_set operation succeeds (Desnes Nunes) [RHEL-37673]
  - usb: udc: remove warning when queue disabled ep (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: Properly set system wakeup (Desnes Nunes) [RHEL-37673]
  - Revert "usb: phy: generic: Get the vbus supply" (Desnes Nunes) [RHEL-37673]
  - usb: cdc-wdm: close race between read and workqueue (Desnes Nunes) [RHEL-37673]
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-37673]
  - USB: UAS: return ENODEV when submit urbs fail with device not attached (Desnes Nunes) [RHEL-37673]
  - usb: usb-acpi: Fix oops due to freeing uninitialized pld pointer (Desnes Nunes) [RHEL-37673]
  - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic (Desnes Nunes) [RHEL-37673]
  - phy: tegra: xusb: Add API to retrieve the port number of phy (Desnes Nunes) [RHEL-37673]
  - usb: Clarify expected behavior of dev_bin_attrs_are_visible() (Desnes Nunes) [RHEL-37673]
  - xhci: Allow RPM on the USB controller (1022:43f7) by default (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: add support to set tcpc connector orientatition (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpci: add generic tcpci fallback compatible (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: typec-tcpci: add tcpci fallback binding (Desnes Nunes) [RHEL-37673]
  - usb: core: Set connect_type of ports based on DT node (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: Add downstream facing ports to realtek binding (Desnes Nunes) [RHEL-37673]
  - usb: misc: onboard_usb_hub: Add support for TI TUSB8020B (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: Add binding for TI USB8020B hub controller (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: core: Add DWC31 version 2.00a controller (Desnes Nunes) [RHEL-37673]
  - usb: typec: ucsi: Register SOP' alternate modes with cable plug (Desnes Nunes) [RHEL-37673]
  - usb: typec: ucsi: Register SOP/SOP' Discover Identity Responses (Desnes Nunes) [RHEL-37673]
  - usb: typec: ucsi: Register cables based on GET_CABLE_PROPERTY (Desnes Nunes) [RHEL-37673]
  - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros (Desnes Nunes) [RHEL-37673]
  - usb: typec: pd: no opencoding of FIELD_GET (Desnes Nunes) [RHEL-37673]
  - usb: typec: altmodes/displayport: send configure message on sop' (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: fix SOP' sequences in tcpm_pd_svdm (Desnes Nunes) [RHEL-37673]
  - usb: usb-acpi: Set port connect type of not connectable ports correctly (Desnes Nunes) [RHEL-37673]
  - usb: Export BOS descriptor to sysfs (Desnes Nunes) [RHEL-37673]
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Desnes Nunes) [RHEL-37673]
  - USB: serial: keyspan: remove redundant assignment to pointer data (Desnes Nunes) [RHEL-37673]
  - USB: serial: ftdi_sio: remove redundant assignment to variable cflag (Desnes Nunes) [RHEL-37673]
  - USB: serial: oti6858: remove redundant assignment to variable divisor (Desnes Nunes) [RHEL-37673]
  - USB: serial: option: add MeiG Smart SLM320 product (Desnes Nunes) [RHEL-37673]
  - USB: serial: cp210x: add ID for MGP Instruments PDS100 (Desnes Nunes) [RHEL-37673]
  - USB: serial: add device ID for VeriFone adapter (Desnes Nunes) [RHEL-37673]
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Desnes Nunes) [RHEL-37673]
  - USB: document some API requirements on disconnection (Desnes Nunes) [RHEL-37673]
  - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-37673]
  - xhci: dbc: poll at different rate depending on data transfer activity (Desnes Nunes) [RHEL-37673]
  - xhci: retry Stop Endpoint on buggy NEC controllers (Desnes Nunes) [RHEL-37673]
  - xhci: fix matching completion events with TDs (Desnes Nunes) [RHEL-37673]
  - usb: xhci: utilize 'xhci_free_segments_for_ring()' for freeing segments (Desnes Nunes) [RHEL-37673]
  - usb: xhci: remove duplicate code from 'xhci_clear_command_ring()' (Desnes Nunes) [RHEL-37673]
  - xhci: save slot ID in struct 'xhci_port' (Desnes Nunes) [RHEL-37673]
  - xhci: replace real & fake port with pointer to root hub port (Desnes Nunes) [RHEL-37673]
  - xhci: rework how real & fake ports are found (Desnes Nunes) [RHEL-37673]
  - usb: typec: constify struct class usage (Desnes Nunes) [RHEL-37673]
  - USB: typec: no opencoding FIELD_GET (Desnes Nunes) [RHEL-37673]
  - media: pvrusb2: fix uaf in pvr2_context_set_notify (Desnes Nunes) [RHEL-37673]
  - media: usb: s2255: Refactor s2255_get_fx2fw (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Constify the struct device_type usage (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Add trace events support for the control channel (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Keep the domain powered when USB4 port is in redrive mode (Desnes Nunes) [RHEL-37673]
  - Revert "xhci: add helper to stop endpoint and wait for completion" (Desnes Nunes) [RHEL-37673]
  - usb: core: constify the struct device_type usage (Desnes Nunes) [RHEL-37673]
  - usb: phy: constify the struct device_type usage (Desnes Nunes) [RHEL-37673]
  - usb: typec: constify the struct device_type usage (Desnes Nunes) [RHEL-37673]
  - usb: typec: ucsi: Get PD revision for partner (Desnes Nunes) [RHEL-37673]
  - usb: typec: ucsi: Update connector cap and status (Desnes Nunes) [RHEL-37673]
  - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37673]
  - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37673]
  - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37673]
  - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37673]
  - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37673]
  - minmax: fix header inclusions (Desnes Nunes) [RHEL-37673]
  - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37673]
  - usb: roles: Link the switch to its connector (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: microchip,usb5744: Remove peer-hub as requirement (Desnes Nunes) [RHEL-37673]
  - usb: image: mdc800: Remove redundant assignment to variable retval (Desnes Nunes) [RHEL-37673]
  - usb: storage: freecom: Remove redundant assignment to variable offset (Desnes Nunes) [RHEL-37673]
  - usb: sysfs: use kstrtobool() if possible (Desnes Nunes) [RHEL-37673]
  - Documentation: usb: Document FunctionFS DMABUF API (Desnes Nunes) [RHEL-37673]
  - usb: gadget: functionfs: Add DMABUF import interface (Desnes Nunes) [RHEL-37673]
  - usb: gadget: functionfs: Factorize wait-for-endpoint code (Desnes Nunes) [RHEL-37673]
  - usb: gadget: Support already-mapped DMA SGs (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: apply snps,host-vbus-glitches workaround unconditionally (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: dwc3: drop 'snps,host-vbus-glitches-quirk' (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: Fix an IS_ERR() vs NULL check in dwc3_power_off_all_roothub_ports() (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: gadget: Remove redundant assignment to pointer trb (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: gadget: Rewrite endpoint allocation flow (Desnes Nunes) [RHEL-37673]
  - usb: core: Kconfig: Improve USB authorization mode help (Desnes Nunes) [RHEL-37673]
  - xhci: add helper to stop endpoint and wait for completion (Desnes Nunes) [RHEL-37673]
  - xhci: Decouple handling an event from checking for unhandled events (Desnes Nunes) [RHEL-37673]
  - xhci: Don't check if the event ring is valid before every event TRB (Desnes Nunes) [RHEL-37673]
  - xhci: add helper that checks for unhandled events on a event ring (Desnes Nunes) [RHEL-37673]
  - xhci: move event processing for one interrupter to a separate function (Desnes Nunes) [RHEL-37673]
  - xhci: update event ring dequeue pointer position to controller correctly (Desnes Nunes) [RHEL-37673]
  - xhci: remove unnecessary event_ring_deq parameter from xhci_handle_event() (Desnes Nunes) [RHEL-37673]
  - xhci: make isoc_bei_interval variable interrupter specific. (Desnes Nunes) [RHEL-37673]
  - xhci: Add helper to set an interrupters interrupt moderation interval (Desnes Nunes) [RHEL-37673]
  - xhci: Add interrupt pending autoclear flag to each interrupter (Desnes Nunes) [RHEL-37673]
  - media: pvrusb2: fix pvr2_stream_callback casts (Desnes Nunes) [RHEL-37673]
  - media: pvrusb2: remove redundant NULL check (Desnes Nunes) [RHEL-37673]
  - media: pvrusb2: Use wait_event_freezable() for freezable kthread (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Improve DisplayPort tunnel setup process to be more robust (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Calculate DisplayPort tunnel bandwidth after DPRX capabilities read (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Reserve released DisplayPort bandwidth for a group for 10 seconds (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Introduce tb_tunnel_direction_downstream() (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Re-order bandwidth group functions (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Fail the failed bandwidth request properly (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Log an error if DPTX request is not cleared (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Handle bandwidth allocation mode disable request (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Re-calculate estimated bandwidth when allocation mode is enabled (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Use DP_LOCAL_CAP for maximum bandwidth calculation (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Correct typo in host_reset parameter (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Skip discovery also in USB4 v2 host (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Reset only non-USB4 host routers in resume (Desnes Nunes) [RHEL-37673]
  - media: cx231xx: controls are from another device, mark this (Desnes Nunes) [RHEL-37673]
  - media: em28xx: annotate unchecked call to media_device_register() (Desnes Nunes) [RHEL-37673]
  - usb: gadget: f_fs: expose ready state in configfs (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: Add workaround for host mode VBUS glitch when boot (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: dwc3: Add snps,host-vbus-glitches-quirk avoid vbus glitch (Desnes Nunes) [RHEL-37673]
  - XHCI: Separate PORT and CAPs macros into dedicated file (Desnes Nunes) [RHEL-37673]
  - usb: typec: altmodes/displayport: add SOP' support (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: add alt mode enter/exit/vdm support for sop' (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: add discover svids and discover modes support for sop' (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: add state machine support for SRC_VDM_IDENTITY_REQUEST (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: add discover identity support for SOP' (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpci: add attempt_vconn_swap_discovery callback (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: add control message support to sop' (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpm: process receive and transmission of sop' messages (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpci: add tcpm_transmit_type to tcpm_pd_receive (Desnes Nunes) [RHEL-37673]
  - usb: typec: tcpci: add cable_comm_capable attribute (Desnes Nunes) [RHEL-37673]
  - usb: typec: altmodes: add svdm version info for typec cables (Desnes Nunes) [RHEL-37673]
  - usb: typec: altmodes: add typec_cable_ops to typec_altmode (Desnes Nunes) [RHEL-37673]
  - usb: phy: generic: Disable vbus on removal (Desnes Nunes) [RHEL-37673]
  - usb: phy: generic: Implement otg->set_vbus (Desnes Nunes) [RHEL-37673]
  - usb: phy: generic: Get the vbus supply (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: usb-nop-xceiv: Repurpose vbus-regulator (Desnes Nunes) [RHEL-37673]
  - usb: mtu3: Add MT8195 MTU3 ip-sleep wakeup support (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: mtu3: Add MT8195 MTU3 ip-sleep support (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: Clean-up "usb-phy" constraints (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: add common Type-C USB Switch schema (Desnes Nunes) [RHEL-37673]
  - usb: core: add phy notify connect and disconnect (Desnes Nunes) [RHEL-37673]
  - phy: realtek: usb: add new driver for the Realtek RTD SoC USB 3.0 PHY (Desnes Nunes) [RHEL-37673]
  - phy: realtek: usb: add new driver for the Realtek RTD SoC USB 2.0 PHY (Desnes Nunes) [RHEL-37673]
  - phy: core: add notify_connect and notify_disconnect callback (Desnes Nunes) [RHEL-37673]
  - usb: core: Make default authorization mode configurable (Desnes Nunes) [RHEL-37673]
  - usb: core: Amend initial authorized_default value (Desnes Nunes) [RHEL-37673]
  - usb: host: Add ac5 to EHCI Orion (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: Add Marvell ac5 (Desnes Nunes) [RHEL-37673]
  - ucsi_ccg: Refine the UCSI Interrupt handling (Desnes Nunes) [RHEL-37673]
  - usb: audio-v2: Correct comments for struct uac_clock_selector_descriptor (Desnes Nunes) [RHEL-37673]
  - usb: typec: mux: Add ITE IT5205 Alternate Mode Passive MUX driver (Desnes Nunes) [RHEL-37673]
  - dt-bindings: usb: Introduce ITE IT5205 Alt. Mode Passive MUX (Desnes Nunes) [RHEL-37673]
  - usb: storage: sddr55: fix sloppy typing in sddr55_{read|write}_data() (Desnes Nunes) [RHEL-37673]
  - usb: usb_autopm_get_interface use modern helper (Desnes Nunes) [RHEL-37673]
  - USB: uapi: OTG 3.0 (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Remove usage of the deprecated ida_simple_xx() API (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Fix rollback in tb_port_lane_bonding_enable() for lane 1 (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Fix XDomain rx_lanes_show and tx_lanes_show (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Reset topology created by the boot firmware (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Make tb_switch_reset() support Thunderbolt 2, 3 and USB4 routers (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Introduce tb_path_deactivate_hop() (Desnes Nunes) [RHEL-37673]
  - thunderbolt: Introduce tb_port_reset() (Desnes Nunes) [RHEL-37673]
  - ABI: sysfs-class-extcon: use uppercase X for wildcards (Desnes Nunes) [RHEL-37673]
  - extcon: Remove unused inline functions (Desnes Nunes) [RHEL-37673]
  - extcon: Amend kernel documentation of struct extcon_dev (Desnes Nunes) [RHEL-37673]
  - extcon: fix possible name leak in extcon_dev_register() (Desnes Nunes) [RHEL-37673]
  - extcon: Drop unneeded assignments (Desnes Nunes) [RHEL-37673]
  - extcon: Use sizeof(*pointer) instead of sizeof(type) (Desnes Nunes) [RHEL-37673]
  - extcon: Use unique number for the extcon device ID (Desnes Nunes) [RHEL-37673]
  - extcon: Remove dup device name in the message and unneeded error check (Desnes Nunes) [RHEL-37673]
  - extcon: Use dev_of_node(dev) instead of dev->of_node (Desnes Nunes) [RHEL-37673]
  - extcon: Use device_match_of_node() helper (Desnes Nunes) [RHEL-37673]
  - extcon: Use sysfs_emit() to instead of sprintf() (Desnes Nunes) [RHEL-37673]
  - extcon: Use DECLARE_BITMAP() to declare bit arrays (Desnes Nunes) [RHEL-37673]
  - extcon: Fix kernel doc of property capability fields to avoid warnings (Desnes Nunes) [RHEL-37673]
  - extcon: Fix kernel doc of property fields to avoid warnings (Desnes Nunes) [RHEL-37673]
  - extcon: Add extcon_alloc_groups to simplify extcon register function (Desnes Nunes) [RHEL-37673]
  - extcon: Add extcon_alloc_muex to simplify extcon register function (Desnes Nunes) [RHEL-37673]
  - extcon: Add extcon_alloc_cables to simplify extcon register function (Desnes Nunes) [RHEL-37673]
  - extcon: Remove redundant null checking for class (Desnes Nunes) [RHEL-37673]
  - extcon: Add EXTCON_DISP_CVBS and EXTCON_DISP_EDP (Desnes Nunes) [RHEL-37673]
  - extcon: Drop unexpected word "the" in the comments (Desnes Nunes) [RHEL-37673]
  - extcon: Modify extcon device to be created after driver data is set (Desnes Nunes) [RHEL-37673]
  - extcon: Fix some kernel-doc comments (Desnes Nunes) [RHEL-37673]
  - extcon: Deduplicate code in extcon_set_state_sync() (Desnes Nunes) [RHEL-37673]
  - pinctrl: tegra: Display pin function in pinconf-groups (Desnes Nunes) [RHEL-37673]
  - pinctrl: tegra: add OF node when logging OF parsing errors (Desnes Nunes) [RHEL-37673]
  - Revert "pinctrl: tegra: Add support to display pin function" (Desnes Nunes) [RHEL-37673]
  - pinctrl: tegra: Switch to use DEFINE_NOIRQ_DEV_PM_OPS() helper (Desnes Nunes) [RHEL-37673]
  - pm: Introduce DEFINE_NOIRQ_DEV_PM_OPS() helper (Desnes Nunes) [RHEL-37673]
  - pinctrl: tegra: Add support to display pin function (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: pci: Don't set "linux,phy_charger_detect" property on Lenovo Yoga Tab2 1380 (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: pci: Drop duplicate ID (Desnes Nunes) [RHEL-37673]
  - usb: dwc3: pci: add support for the Intel Arrow Lake-H (Desnes Nunes) [RHEL-37673]
  - mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (Nico Pache) [RHEL-39710] {CVE-2024-36028}
  - hugetlb: check for hugetlb folio before vmemmap_restore (Nico Pache) [RHEL-39710]
  - hugetlb: set hugetlb page flag before optimizing vmemmap (Nico Pache) [RHEL-39710]
  - ACPI: PM: s2idle: Enable Low-Power S0 Idle MSFT UUID for non-AMD systems (Lenny Szubowicz) [RHEL-25779]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-476.el9]
changelog:
  - igc: Fix Energy Efficient Ethernet support declaration (Corinna Vinschen) [RHEL-17489]
  - igc: Fix LED-related deadlock on driver unbind (Corinna Vinschen) [RHEL-17489]
  - igc: Remove redundant runtime resume for ethtool ops (Corinna Vinschen) [RHEL-17489]
  - igc: Refactor runtime power management flow (Corinna Vinschen) [RHEL-17489]
  - net: intel: implement modern PM ops declarations (Corinna Vinschen) [RHEL-17489]
  - igc: Remove stale comment about Tx timestamping (Corinna Vinschen) [RHEL-17489]
  - igc: Fix missing time sync events (Corinna Vinschen) [RHEL-17489]
  - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-17489 RHEL-33266] {CVE-2024-26853}
  - igc: fix LEDS_CLASS dependency (Corinna Vinschen) [RHEL-17489]
  - eth: igc: remove unused embedded struct net_device (Corinna Vinschen) [RHEL-17489]
  - net: adopt skb_network_offset() and similar helpers (Corinna Vinschen) [RHEL-17489]
  - net: intel: igc: Use linkmode helpers for EEE (Corinna Vinschen) [RHEL-17489]
  - net: intel: i40e/igc: Remove setting Autoneg in EEE capabilities (Corinna Vinschen) [RHEL-17489]
  - igc: Add support for LEDs on i225/i226 (Corinna Vinschen) [RHEL-17489]
  - igc: Remove temporary workaround (Corinna Vinschen) [RHEL-17489]
  - igc: Unify filtering rule fields (Corinna Vinschen) [RHEL-17489]
  - igc: Use netdev printing functions for flex filters (Corinna Vinschen) [RHEL-17489]
  - igc: Use reverse xmas tree (Corinna Vinschen) [RHEL-17489]
  - igc: Fix hicredit calculation (Corinna Vinschen) [RHEL-17489]
  - igc: Check VLAN EtherType mask (Corinna Vinschen) [RHEL-17489]
  - igc: Check VLAN TCI mask (Corinna Vinschen) [RHEL-17489]
  - igc: Report VLAN EtherType matching back to user (Corinna Vinschen) [RHEL-17489]
  - igc: field get conversion (Corinna Vinschen) [RHEL-17489]
  - igc: field prep conversion (Corinna Vinschen) [RHEL-17489]
  - intel: add bit macro includes where needed (Corinna Vinschen) [RHEL-17489]
  - igc: Add support for PTP .getcyclesx64() (Corinna Vinschen) [RHEL-17489]
  - igc: Simplify setting flags in the TX data descriptor (Corinna Vinschen) [RHEL-17489]
  - bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Set TSO max segs on devices with limits (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Update firmware interface to 1.10.3.44 (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Update firmware interface to 1.10.3.39 (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Fix error recovery for 5760X (P7) chips (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Fix memory leak in bnxt_hwrm_get_rings() (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Prevent TX timeout with a very small TX ring (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Fix TX ring indexing logic (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Fix AGG ring check logic in bnxt_check_rings() (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Fix trimming of P5 RX and TX rings (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Fix wrong return value check in bnxt_close_nic() (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Clear resource reservation during resume (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - net: bnxt: fix a potential use-after-free in bnxt_init_tc (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add 5760X (P7) PCI IDs (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Report the new ethtool link modes in the new firmware interface (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Support force speed using the new HWRM fields (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Support new firmware link parameters (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Refactor ethtool speeds logic (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add support for new RX and TPA_START completion types for P7 (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Refactor and refine bnxt_tpa_start() and bnxt_tpa_end(). (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Refactor RX VLAN acceleration logic. (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add new P7 hardware interface definitions (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Refactor RSS capability fields (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Implement the new toggle bit doorbell mechanism on P7 chips (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Consolidate DB offset calculation (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Define basic P7 macros (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Update firmware interface to 1.10.3.15 (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Fix backing store V2 logic (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Rename some macros for the P5 chips (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Modify the NAPI logic for the new P7 chips (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Modify RX ring indexing logic. (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Modify TX ring indexing logic. (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add db_ring_mask and related macro to bnxt_db_info struct. (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add support for HWRM_FUNC_BACKING_STORE_CFG_V2 firmware calls (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add support for new backing store query firmware API (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add bnxt_setup_ctxm_pg_tbls() helper function (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Use the pg_info field in bnxt_ctx_mem_type struct (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add page info to struct bnxt_ctx_mem_type (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Restructure context memory data structures (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Free bp->ctx inside bnxt_free_ctx_mem() (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: The caller of bnxt_alloc_ctx_mem() should always free bp->ctx (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Optimize xmit_more TX path (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Use existing MSIX vectors for all mqprio TX rings (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add macros related to TC and TX rings (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add helper to get the number of CP rings required for TX rings (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Support up to 8 TX rings per MSIX (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Refactor bnxt_hwrm_set_coal() (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: New encoding for the TX opaque field (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Refactor bnxt_tx_int() (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Remove BNXT_RX_HDL and BNXT_TX_HDL (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add completion ring pointer in TX and RX ring structures (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Restructure cp_ring_arr in struct bnxt_cp_ring_info (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add completion ring pointer in TX and RX ring structures (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Put the TX producer information in the TX BD opaque field (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Fix 2 stray ethtool -S counters (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: extend media types to supported and autoneg modes (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: convert to linkmode_set_bit() API (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Refactor NRZ/PAM4 link speed related logic (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: refactor speed independent ethtool modes (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: support lane configuration via ethtool (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: add infrastructure to lookup ethtool link mode (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Fix invoking hwmon_notify_event (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Do not call sleeping hwmon_notify_event() from NAPI (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - eth: bnxt: fix backward compatibility with older devices (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - Revert "bnxt_en: Support QOS and TPID settings for the SRIOV VLAN" (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Update VNIC resource calculation for VFs (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Support QOS and TPID settings for the SRIOV VLAN (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Event handler for Thermal event (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Use non-standard attribute to expose shutdown temperature (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Expose threshold temperatures through hwmon (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Modify the driver to use hwmon_device_register_with_info (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Move hwmon functions into a dedicated file (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Enhance hwmon temperature reporting (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Update firmware interface to 1.10.2.171 (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt: use the NAPI skb allocation cache (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Add tx_resets ring counter (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Display the ring error counters under ethtool -S (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Save ring error counters across reset (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt_en: Increment rx_resets counter in bnxt_disable_napi() (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - bnxt: don't handle XDP in netpoll (Ken Cox) [RHEL-19811 RHEL-23120 RHEL-25505]
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37040 RHEL-37041] {CVE-2024-35839}
  - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37040 RHEL-37041] {CVE-2024-35839}
  - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37040 RHEL-37041] {CVE-2024-35839}
  - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37040 RHEL-37041] {CVE-2024-35839}
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39772] {CVE-2024-36933}
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39772]
  - s390/zcrypt: Use EBUSY to indicate temp unavailability (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: Handle ep11 cprb return code (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: Fix wrong format string in debug feature printout (Tobias Huschle) [RHEL-23687]
  - s390/pkey: improve pkey retry behavior (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: improve zcrypt retry behavior (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: introduce retries on in-kernel send CPRB functions (Tobias Huschle) [RHEL-23687]
  - s390/ap: introduce mutex to lock the AP bus scan (Tobias Huschle) [RHEL-23687]
  - s390/ap: rework ap_scan_bus() to return true on config change (Tobias Huschle) [RHEL-23687]
  - s390/ap: clarify AP scan bus related functions and variables (Tobias Huschle) [RHEL-23687]
  - s390/ap: rearm APQNs bindings complete completion (Tobias Huschle) [RHEL-23687]
  - s390/ap: explicitly include ultravisor header (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: add debug possibility for CCA and EP11 messages (Tobias Huschle) [RHEL-23687]
  - s390/ap: add debug possibility for AP messages (Tobias Huschle) [RHEL-23687]
  - s390/pkey: introduce dynamic debugging for pkey (Tobias Huschle) [RHEL-23687]
  - s390/pkey: harmonize pkey s390 debug feature calls (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: introduce dynamic debugging for AP and zcrypt code (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: harmonize debug feature calls and defines (Tobias Huschle) [RHEL-23687]
  - s390/ap: handle outband SE bind state change (Tobias Huschle) [RHEL-23687]
  - s390/ap: store TAPQ hwinfo in struct ap_card (Tobias Huschle) [RHEL-23687]
  - s390/ap: fix vanishing crypto cards in SE environment (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: don't report online if card or queue is in check-stop state (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: update list of EP11 operation modes (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: remove CEX2 and CEX3 device drivers (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: do not retry administrative requests (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: cleanup some debug code (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: use kvmalloc_array() instead of kzalloc() (Tobias Huschle) [RHEL-23687]
  - s390/pkey: zeroize key blobs (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: rework arrays with length zero occurrences (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: simplify prep of CCA key token (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: remove unused ancient padding code (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: introduce ctfm field in struct CPRBX (Tobias Huschle) [RHEL-23687]
  - s390/zcrypt: fix warning about field-spanning write (Tobias Huschle) [RHEL-23687]
  - xfrm: interface: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - bridge: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - ip_tunnel: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - sit: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - ip6_vti: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - ip6_tunnel: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - ip6_gre: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - vxlan: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - ipv4: add __unregister_nexthop_notifier() (Antoine Tenart) [RHEL-29681]
  - gtp: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - geneve: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - bonding: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - bareudp: use exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - nexthop: convert nexthop_net_exit_batch to exit_batch_rtnl method (Antoine Tenart) [RHEL-29681]
  - net: add exit_batch_rtnl() method (Antoine Tenart) [RHEL-29681]
  - net: remove default_device_exit() (Antoine Tenart) [RHEL-29681]
  - can: gw: switch cangw_pernet_exit() to batch mode (Antoine Tenart) [RHEL-29681]
  - ipmr: introduce ipmr_net_exit_batch() (Antoine Tenart) [RHEL-29681]
  - ip6mr: introduce ip6mr_net_exit_batch() (Antoine Tenart) [RHEL-29681]
  - ipv6: change fib6_rules_net_exit() to batch mode (Antoine Tenart) [RHEL-29681]
  - ipv4: add fib_net_exit_batch() (Antoine Tenart) [RHEL-29681]
  - nexthop: change nexthop_net_exit() to nexthop_net_exit_batch() (Antoine Tenart) [RHEL-29681]
  - net: net_namespace: Optimize the code (Antoine Tenart) [RHEL-29681]
  - netfilter: nf_tables: missing iterator type in lookup walk (Florian Westphal) [RHEL-33380]
  - netfilter: nft_set_pipapo: do not free live element (Florian Westphal) [RHEL-33380 RHEL-34223] {CVE-2024-26924}
  - netfilter: nft_set_pipapo: release elements in clone only from destroy path (Florian Westphal) [RHEL-33380]
  - netfilter: nft_set_pipapo: walk over current view on netlink dump (Florian Westphal) [RHEL-33380]
  - netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR (Florian Westphal) [RHEL-33380]
  - netfilter: nft_set_pipapo: constify lookup fn args where possible (Florian Westphal) [RHEL-33380]
  - netfilter: nft_set_pipapo: fix missing : in kdoc (Florian Westphal) [RHEL-33380]
  - netfilter: nft_set_pipapo: remove scratch_aligned pointer (Florian Westphal) [RHEL-33380]
  - netfilter: nft_set_pipapo: add helper to release pcpu scratch area (Florian Westphal) [RHEL-33380]
  - netfilter: nft_set_pipapo: store index in scratch maps (Florian Westphal) [RHEL-33380]
  - netfilter: nft_set_pipapo: remove static in nft_pipapo_get() (Florian Westphal) [RHEL-33380]
  - Another hunk from an upstream merge commit (John W. Linville) [RHEL-23582]
  - cxl/core/regs: Fix usage of map->reg_type in cxl_decode_regblock() before assigned (John W. Linville) [RHEL-23582]
  - cxl/region: Fix cxlr_pmem leaks (John W. Linville) [RHEL-23582]
  - cxl/region: Fix memregion leaks in devm_cxl_add_region() (John W. Linville) [RHEL-23582]
  - cxl/port: Fix missing target list lock (John W. Linville) [RHEL-23582]
  - cxl/region: Use cxl_calc_interleave_pos() for auto-discovery (John W. Linville) [RHEL-23582]
  - cxl/region: Calculate a target position in a region interleave (John W. Linville) [RHEL-23582]
  - cxl/region: Prepare the decoder match range helper for reuse (John W. Linville) [RHEL-23582]
  - testing: nvdimm: add missing prototypes for wrapped functions (John W. Linville) [RHEL-23582]
  - cxl/core: Fix potential payload size confusion in cxl_mem_get_poison() (John W. Linville) [RHEL-23582]
  - cxl/trace: Correct DPA field masks for general_media & dram events (John W. Linville) [RHEL-23582]
  - cxl/acpi: Fix load failures due to single window creation failure (John W. Linville) [RHEL-23582]
  - perf: CXL: fix mismatched cpmu event opcode (John W. Linville) [RHEL-23582]
  - cxl/memdev: Hold region_rwsem during inject and clear poison ops (John W. Linville) [RHEL-23582]
  - cxl/core: Always hold region_rwsem while reading poison lists (John W. Linville) [RHEL-23582]
  - cxl/memdev: Fix sanitize vs decoder setup locking (John W. Linville) [RHEL-23582]
  - cxl/core: Fix initialization of mbox_cmd.size_out in get event (John W. Linville) [RHEL-23582]
  - cxl/mem: Fix for the index of Clear Event Record Handle (John W. Linville) [RHEL-23582]
  - libnvdimm: mark 'security_show' static again (John W. Linville) [RHEL-23582]
  - cxl/trace: Properly initialize cxl_poison region name (John W. Linville) [RHEL-23582]
  - cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window (John W. Linville) [RHEL-23582]
  - cxl/region：Fix overflow issue in alloc_hpa() (John W. Linville) [RHEL-23582]
  - cxl/port: Fix decoder initialization when nr_targets > interleave_ways (John W. Linville) [RHEL-23582]
  - cxl/region: fix x9 interleave typo (John W. Linville) [RHEL-23582]
  - cxl/pmu: Ensure put_device on pmu devices (John W. Linville) [RHEL-23582]
  - cxl/hdm: Fix dpa translation locking (John W. Linville) [RHEL-23582]
  - cxl/hdm: Remove broken error path (John W. Linville) [RHEL-23582]
  - cxl/port: Fix delete_endpoint() vs parent unregistration race (John W. Linville) [RHEL-23582]
  - cxl/region: Fix x1 root-decoder granularity calculations (John W. Linville) [RHEL-23582]
  - cxl/region: Fix cxl_region_rwsem lock held when returning to user space (John W. Linville) [RHEL-23582]
  - cxl/mbox: Remove useless cast in cxl_mem_create_range_info() (John W. Linville) [RHEL-23582]
  - cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails (John W. Linville) [RHEL-23582]
  - cxl/mem: Fix shutdown order (John W. Linville) [RHEL-23582]
  - cxl/pci: Fix sanitize notifier setup (John W. Linville) [RHEL-23582]
  - cxl/acpi: Annotate struct cxl_cxims_data with __counted_by (John W. Linville) [RHEL-23582]
  - cxl/region: Refactor granularity select in cxl_port_setup_targets() (John W. Linville) [RHEL-23582]
  - cxl/region: Match auto-discovered region decoders by HPA range (John W. Linville) [RHEL-23582]
  - cxl/mbox: Fix CEL logic for poison and security commands (John W. Linville) [RHEL-23582]
  - cxl/pci: Replace host_bridge->native_aer with pcie_aer_is_native() (John W. Linville) [RHEL-23582]
  - cxl/pci: Fix appropriate checking for _OSC while handling CXL RAS registers (John W. Linville) [RHEL-23582]
  - cxl/memdev: Only show sanitize sysfs files when supported (John W. Linville) [RHEL-23582]
  - cxl/memdev: Document security state in kern-doc (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Remove unused SZ_512G macro (John W. Linville) [RHEL-23582]
  - cxl/acpi: Return 'rc' instead of '0' in cxl_parse_cfmws() (John W. Linville) [RHEL-23582]
  - cxl/mem: Fix a double shift bug (John W. Linville) [RHEL-23582]
  - cxl: fix CONFIG_FW_LOADER dependency (John W. Linville) [RHEL-23582]
  - cxl: Fix one kernel-doc comment (John W. Linville) [RHEL-23582]
  - cxl/pci: Use correct flag for sanitize polling (John W. Linville) [RHEL-23582]
  - redhat/configs: add config item for CONFIG_CXL_PMU (John W. Linville) [RHEL-23582]
  - perf: CXL Performance Monitoring Unit driver (John W. Linville) [RHEL-23582]
  - Merge branch 'for-6.5/cxl-type-2' into for-6.5/cxl (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: add firmware update emulation to CXL memdevs (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Use named effects for the Command Effect Log (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Fix command effects for inject/clear poison (John W. Linville) [RHEL-23582]
  - cxl: add a firmware update mechanism using the sysfs firmware loader (John W. Linville) [RHEL-23582]
  - cxl/test: Add Secure Erase opcode support (John W. Linville) [RHEL-23582]
  - cxl/mem: Support Secure Erase (John W. Linville) [RHEL-23582]
  - cxl/test: Add Sanitize opcode support (John W. Linville) [RHEL-23582]
  - cxl/mem: Wire up Sanitization support (John W. Linville) [RHEL-23582]
  - cxl/mbox: Add sanitization handling machinery (John W. Linville) [RHEL-23582]
  - cxl/mem: Introduce security state sysfs file (John W. Linville) [RHEL-23582]
  - cxl/mbox: Allow for IRQ_NONE case in the isr (John W. Linville) [RHEL-23582]
  - Revert "cxl/port: Enable the HDM decoder capability for switch ports" (John W. Linville) [RHEL-23582]
  - cxl/memdev: Formalize endpoint port linkage (John W. Linville) [RHEL-23582]
  - cxl/pci: Unconditionally unmask 256B Flit errors (John W. Linville) [RHEL-23582]
  - cxl/region: Manage decoder target_type at decoder-attach time (John W. Linville) [RHEL-23582]
  - cxl/hdm: Default CXL_DEVTYPE_DEVMEM decoders to CXL_DECODER_DEVMEM (John W. Linville) [RHEL-23582]
  - cxl/port: Rename CXL_DECODER_{EXPANDER, ACCELERATOR} => {HOSTONLYMEM, DEVMEM} (John W. Linville) [RHEL-23582]
  - cxl/memdev: Make mailbox functionality optional (John W. Linville) [RHEL-23582]
  - cxl/mbox: Move mailbox related driver state to its own data structure (John W. Linville) [RHEL-23582]
  - cxl: Remove leftover attribute documentation in 'struct cxl_dev_state' (John W. Linville) [RHEL-23582]
  - cxl: Fix kernel-doc warnings (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Remove unused @cxlds argument (John W. Linville) [RHEL-23582]
  - cxl/regs: Clarify when a 'struct cxl_register_map' is input vs output (John W. Linville) [RHEL-23582]
  - cxl/region: Fix state transitions after reset failure (John W. Linville) [RHEL-23582]
  - cxl/region: Flag partially torn down regions as unusable (John W. Linville) [RHEL-23582]
  - cxl/region: Move cache invalidation before region teardown, and before setup (John W. Linville) [RHEL-23582]
  - cxl/pci: Find and register CXL PMU devices (John W. Linville) [RHEL-23582]
  - cxl: Add functions to get an instance of / count regblocks of a given type (John W. Linville) [RHEL-23582]
  - cxl/mbox: Add background cmd handling machinery (John W. Linville) [RHEL-23582]
  - rcuwait: Support timeouts (John W. Linville) [RHEL-23582]
  - cxl/pci: Introduce cxl_request_irq() (John W. Linville) [RHEL-23582]
  - cxl/pci: Allocate irq vectors earlier during probe (John W. Linville) [RHEL-23582]
  - cxl: Explicitly initialize resources when media is not ready (John W. Linville) [RHEL-23582]
  - cxl: Move cxl_await_media_ready() to before capacity info retrieval (John W. Linville) [RHEL-23582]
  - cxl: Wait Memory_Info_Valid before access memory related info (John W. Linville) [RHEL-23582]
  - cxl/port: Enable the HDM decoder capability for switch ports (John W. Linville) [RHEL-23582]
  - cxl: Add missing return to cdat read error path (John W. Linville) [RHEL-23582]
  - cxl/test: Add mock test for set_timestamp (John W. Linville) [RHEL-23582]
  - cxl/mbox: Update CMD_RC_TABLE (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Require CONFIG_DEBUG_FS (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Add a sysfs attr to test poison inject limits (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Use injected poison for get poison list (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Mock the Clear Poison mailbox command (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Mock the Inject Poison mailbox command (John W. Linville) [RHEL-23582]
  - cxl/mem: Add debugfs attributes for poison inject and clear (John W. Linville) [RHEL-23582]
  - cxl/memdev: Trace inject and clear poison as cxl_poison events (John W. Linville) [RHEL-23582]
  - cxl/memdev: Warn of poison inject or clear to a mapped region (John W. Linville) [RHEL-23582]
  - cxl/memdev: Add support for the Clear Poison mailbox command (John W. Linville) [RHEL-23582]
  - cxl/memdev: Add support for the Inject Poison mailbox command (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Mock support for Get Poison List (John W. Linville) [RHEL-23582]
  - cxl/trace: Add an HPA to cxl_poison trace events (John W. Linville) [RHEL-23582]
  - cxl/region: Provide region info to the cxl_poison trace event (John W. Linville) [RHEL-23582]
  - cxl/memdev: Add trigger_poison_list sysfs attribute (John W. Linville) [RHEL-23582]
  - cxl/trace: Add TRACE support for CXL media-error records (John W. Linville) [RHEL-23582]
  - cxl/mbox: Add GET_POISON_LIST mailbox command (John W. Linville) [RHEL-23582]
  - cxl/mbox: Initialize the poison state (John W. Linville) [RHEL-23582]
  - cxl/mbox: Restrict poison cmds to debugfs cxl_raw_allow_all (John W. Linville) [RHEL-23582]
  - cxl/mbox: Deprecate poison commands (John W. Linville) [RHEL-23582]
  - cxl/port: Fix port to pci device assumptions in read_cdat_data() (John W. Linville) [RHEL-23582]
  - cxl/pci: Rightsize CDAT response allocation (John W. Linville) [RHEL-23582]
  - cxl/pci: Simplify CDAT retrieval error path (John W. Linville) [RHEL-23582]
  - cxl/pci: Use CDAT DOE mailbox created by PCI core (John W. Linville) [RHEL-23582]
  - PCI/DOE: Create mailboxes on device enumeration (John W. Linville) [RHEL-23582]
  - PCI/DOE: Allow mailbox creation without devres management (John W. Linville) [RHEL-23582]
  - PCI/DOE: Deduplicate mailbox flushing (John W. Linville) [RHEL-23582]
  - PCI/DOE: Make asynchronous API private (John W. Linville) [RHEL-23582]
  - cxl/pci: Use synchronous API for DOE (John W. Linville) [RHEL-23582]
  - PCI/DOE: Provide synchronous API and use it internally (John W. Linville) [RHEL-23582]
  - cxl/hdm: Add more HDM decoder debug messages at startup (John W. Linville) [RHEL-23582]
  - cxl/port: Scan single-target ports for decoders (John W. Linville) [RHEL-23582]
  - cxl/core: Drop unused io-64-nonatomic-lo-hi.h (John W. Linville) [RHEL-23582]
  - cxl/hdm: Use 4-byte reads to retrieve HDM decoder base+limit (John W. Linville) [RHEL-23582]
  - cxl/hdm: Extend DVSEC range register emulation for region enumeration (John W. Linville) [RHEL-23582]
  - cxl/hdm: Limit emulation to the number of range registers (John W. Linville) [RHEL-23582]
  - cxl/hdm: Skip emulation when driver manages mem_enable (John W. Linville) [RHEL-23582]
  - cxl/hdm: Fix double allocation of @cxlhdm (John W. Linville) [RHEL-23582]
  - cxl/mem: Add kdoc param for event log driver state (John W. Linville) [RHEL-23582]
  - cxl/trace: Add serial number to trace points (John W. Linville) [RHEL-23582]
  - cxl/trace: Add host output to trace points (John W. Linville) [RHEL-23582]
  - cxl/trace: Standardize device information output (John W. Linville) [RHEL-23582]
  - cxl/pci: Remove locked check for dvsec_range_allowed() (John W. Linville) [RHEL-23582]
  - cxl/hdm: Add emulation when HDM decoders are not committed (John W. Linville) [RHEL-23582]
  - cxl/hdm: Create emulated cxl_hdm for devices that do not have HDM decoders (John W. Linville) [RHEL-23582]
  - cxl/hdm: Emulate HDM decoder from DVSEC range registers (John W. Linville) [RHEL-23582]
  - cxl/pci: Refactor cxl_hdm_decode_init() (John W. Linville) [RHEL-23582]
  - cxl/port: Export cxl_dvsec_rr_decode() to cxl_port (John W. Linville) [RHEL-23582]
  - cxl/pci: Break out range register decoding from cxl_hdm_decode_init() (John W. Linville) [RHEL-23582]
  - cxl: add RAS status unmasking for CXL (John W. Linville) [RHEL-23582]
  - cxl/pmem: Fix nvdimm registration races (John W. Linville) [RHEL-23582]
  - cxl/uapi: Tag commands from cxl_query_cmd() (John W. Linville) [RHEL-23582]
  - cxl/mem: Remove unused CXL_CMD_FLAG_NONE define (John W. Linville) [RHEL-23582]
  - redhat/configs: add config item for CONFIG_DEV_DAX_CXL (John W. Linville) [RHEL-23582]
  - cxl/mem: Correct full ID range allocation (John W. Linville) [RHEL-23582]
  - cxl/pci: Fix irq oneshot expectations (John W. Linville) [RHEL-23582]
  - cxl/pci: Set the device timestamp (John W. Linville) [RHEL-23582]
  - cxl/mbox: Add missing parameter to docs. (John W. Linville) [RHEL-23582]
  - cxl/test: Simulate event log overflow (John W. Linville) [RHEL-23582]
  - cxl/test: Add specific events (John W. Linville) [RHEL-23582]
  - cxl/test: Add generic mock events (John W. Linville) [RHEL-23582]
  - cxl/mem: Trace Memory Module Event Record (John W. Linville) [RHEL-23582]
  - cxl/mem: Trace DRAM Event Record (John W. Linville) [RHEL-23582]
  - cxl/mem: Trace General Media Event Record (John W. Linville) [RHEL-23582]
  - cxl/mem: Wire up event interrupts (John W. Linville) [RHEL-23582]
  - cxl: fix spelling mistakes (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Remove cxl_test module math loading message (John W. Linville) [RHEL-23582]
  - tools/testing/cxl: Add XOR Math support to cxl_test (John W. Linville) [RHEL-23582]
  - cxl/mbox: Add debug messages for enabled mailbox commands (John W. Linville) [RHEL-23582]
  - cxl/mem: Read, trace, and clear events on driver load (John W. Linville) [RHEL-23582]
  - PCI/CXL: Export native CXL error reporting control (John W. Linville) [RHEL-23582]
  - fix build breakage in tools/testing/cxl (John W. Linville) [RHEL-23582]
  - redhat/configs: turn off CONFIG_NVDIMM_SECURITY_TEST (John W. Linville) [RHEL-23582]
  - libnvdimm: Introduce CONFIG_NVDIMM_SECURITY_TEST flag (John W. Linville) [RHEL-23582]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-477.el9]
changelog:
  - KEYS: trusted: Fix memory leak in tpm2_key_encode() (CKI Backport Bot) [RHEL-41151] {CVE-2024-36967}
  - mm/zswap: invalidate duplicate entry when !zswap_enabled (Rafael Aquini) [RHEL-40684]
  - mm: zswap: fix objcg use-after-free in entry destruction (Rafael Aquini) [RHEL-40684]
  - mm: memcg: add per-memcg zswap writeback stat (Rafael Aquini) [RHEL-40684]
  - zswap: make shrinking memcg-aware (Rafael Aquini) [RHEL-40684]
  - memcontrol: implement mem_cgroup_tryget_online() (Rafael Aquini) [RHEL-40684]
  - mm/list_lru.c: remove unused list_lru_from_kmem() (Rafael Aquini) [RHEL-40684]
  - list_lru: allow explicit memcg and NUMA node selection (Rafael Aquini) [RHEL-40684]
  - mm: zswap: fix potential memory corruption on duplicate store (Rafael Aquini) [RHEL-40684]
  - mm: zswap: kill zswap_get_swap_cache_page() (Rafael Aquini) [RHEL-40684]
  - mm: zswap: tighten up entry invalidation (Rafael Aquini) [RHEL-40684]
  - mm: zswap: use zswap_invalidate_entry() for duplicates (Rafael Aquini) [RHEL-40684]
  - zswap: make zswap_load() take a folio (Rafael Aquini) [RHEL-40684]
  - swap: remove some calls to compound_head() in swap_readpage() (Rafael Aquini) [RHEL-40684]
  - memcg: convert get_obj_cgroup_from_page to get_obj_cgroup_from_folio (Rafael Aquini) [RHEL-40684]
  - zswap: make zswap_store() take a folio (Rafael Aquini) [RHEL-40684]
  - mm: kill frontswap (Rafael Aquini) [RHEL-40684]
  - mm: zswap: fix double invalidate with exclusive loads (Rafael Aquini) [RHEL-40684]
  - mm: zswap: invaldiate entry after writeback (Rafael Aquini) [RHEL-40684]
  - mm: zswap: remove zswap_header (Rafael Aquini) [RHEL-40684]
  - mm: zswap: simplify writeback function (Rafael Aquini) [RHEL-40684]
  - mm: zswap: remove shrink from zpool interface (Rafael Aquini) [RHEL-40684]
  - mm: zswap: remove page reclaim logic from zsmalloc (Rafael Aquini) [RHEL-40684]
  - mm: zswap: remove page reclaim logic from z3fold (Rafael Aquini) [RHEL-40684]
  - mm: zswap: remove page reclaim logic from zbud (Rafael Aquini) [RHEL-40684]
  - mm: zswap: add pool shrinking mechanism (Rafael Aquini) [RHEL-40684]
  - mm: zswap: support exclusive loads (Rafael Aquini) [RHEL-40684]
  - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-40684]
  - swap, __read_swap_cache_async(): enlarge get/put_swap_device protection range (Rafael Aquini) [RHEL-40684]
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43969] {CVE-2024-38596}
  - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43969] {CVE-2024-38596}
  - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43969] {CVE-2024-38596}
  - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44477] {CVE-2024-36489}
  - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (cki-backport-bot) [RHEL-43400] {CVE-2024-36974}
  - packet: annotate data-races around ignore_outgoing (cki-backport-bot) [RHEL-33238] {CVE-2024-26862}
  - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40902]
  - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40902]
  - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40902]
  - gfs2: simplify slot_get (Bob Peterson) [RHEL-40902]
  - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40902]
  - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40902]
  - gfs2: use constant for array size (Bob Peterson) [RHEL-40902]
  - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40902]
  - gfs2: Remove useless err set (Bob Peterson) [RHEL-40902]
  - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40902]
  - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40902]
  - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40902]
  - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40902]
  - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40902]
  - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40902]
  - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40902]
  - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40902]
  - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40902]
  - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40902]
  - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40902]
  - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40902]
  - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40902]
  - KVM: arm64: FFA: Release hyp rx buffer (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Ensure that SME controls are disabled in protected mode (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Refactor CPACR trap bit setting/clearing to use ELx format (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Consolidate initializing the host data's fpsimd_state/sve in pKVM (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Eagerly restore host fpsimd/sve state in pKVM (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Allocate memory mapped at hyp for host sve state in pKVM (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Specialize handling of host fpsimd state on trap (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Abstract set/clear of CPTR_EL2 bits behind helper (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Fix prototype for __sve_save_state/__sve_restore_state (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Reintroduce __sve_save_state (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Expose BTI and CSV_frac to a guest hypervisor (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Fix relative priorities of exceptions generated by ERETAx (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: AArch32: Fix spurious trapping of conditional instructions (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Fix AArch32 register narrowing on userspace write (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: arm64: Test vCPU-scoped feature ID registers (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: arm64: Test that feature ID regs survive a reset (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: arm64: Store expected register value in set_id_regs (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: arm64: Rename helper in set_id_regs to imply VM scope (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Only reset vCPU-scoped feature ID regs once (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Reset VM feature ID regs from kvm_reset_sys_regs() (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Rename is_id_reg() to imply VM scope (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Destroy mpidr_data for 'late' vCPU creation (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Move management of __hyp_running_vcpu to load/put on VHE (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic: Allocate private interrupts on demand (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Force injection of a data abort on NISV MMIO exit (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Restrict supported capabilities for protected VMs (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Refactor setting the return value in kvm_vm_ioctl_enable_cap() (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Add is_pkvm_initialized() helper (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Document the KVM/arm64-specific calls in hypercalls.rst (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Rename firmware pseudo-register documentation file (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Reformat/beautify PTP hypercall documentation (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Clarify rationale for ZCR_EL1 value restored on guest exit (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Introduce and use predicates that check for protected VMs (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Simplify vgic-v3 hypercalls (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Move setting the page as dirty out of the critical section (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Change kvm_handle_mmio_return() return polarity (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Fix comment for __pkvm_vcpu_init_traps() (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Prevent kmemleak from accessing .hyp.data (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Do not map the host fpsimd state to hyp in pKVM (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Rename __tlb_switch_to_{guest,host}() in VHE (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Support TLB invalidation in guest context (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Avoid BBM when changing only s/w bits in Stage-2 PTE (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Check for PTE validity when checking for executable/cacheable (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Avoid BUG-ing from the host abort path (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Issue CMOs when tearing down guest s2 pages (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Refactor checks for FP state ownership (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Move guest_owns_fp_regs() to increase its scope (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Initialize the kvm host data's fpsimd_state pointer in pKVM (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Remove duplicated AA64MMFR1_EL1 XNX (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: Add stress test for LPI injection (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: Use MPIDR_HWID_BITMASK from cputype.h (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: Add helper for enabling LPIs on a redistributor (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: Add a minimal library for interacting with an ITS (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: Add quadword MMIO accessors (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: Standardise layout of GIC frames (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: Align with kernel's GIC definitions (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-its: Get rid of the lpi_list_lock (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-its: Rip out the global translation cache (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-its: Use the per-ITS translation cache for injection (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-its: Spin off helper for finding ITS by doorbell addr (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-its: Maintain a translation cache per ITS (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-its: Scope translation cache invalidations to an ITS (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-its: Get rid of vgic_copy_lpi_list() (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-debug: Use an xarray mark for debug iterator (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-its: Walk LPI xarray in vgic_its_cmd_handle_movall() (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-its: Walk LPI xarray in vgic_its_invall() (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: vgic-its: Walk LPI xarray in its_sync_lpi_pending_table() (Sebastian Ott) [RHEL-43288]
  - KVM: Treat the device list as an rculist (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: Add test for uaccesses to non-existent vgic-v2 CPUIF (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Work around lack of pauth support in old toolchains (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Drop trapping of PAuth instructions/keys (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Advertise support for PAuth (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Handle ERETA[AB] instructions (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Add emulation for ERETAx instructions (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Add kvm_has_pauth() helper (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Reinject PAC exceptions caused by HCR_EL2.API==0 (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Handle HCR_EL2.{API,APK} independently (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Honor HFGITR_EL2.ERET being set (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Fast-track 'InHost' exception returns (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Add trap forwarding for ERET and SMC (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Configure HCR_EL2 for FEAT_NV2 (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: nv: Drop VCPU_HYP_CONTEXT flag (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Constraint PAuth support to consistent implementations (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Add helpers for ESR_ELx_ERET_ISS_ERET* (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Harden __ctxt_sys_reg() against out-of-range values (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Remove FFA_MSG_SEND_DIRECT_REQ from the denylist (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Improve out-of-order sysreg table diagnostics (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Exclude FP ownership from kvm_vcpu_arch (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Exclude host_fpsimd_state pointer from kvm_vcpu_arch (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Exclude mdcr_el2_host from kvm_vcpu_arch (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Exclude host_debug_data from vcpu_arch (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Add accessor for per-CPU state (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: Allow many vCPUs and reader threads per UFFD in demand paging test (Sebastian Ott) [RHEL-43288]
  - KVM: selftests: Report per-vcpu demand paging rate from demand paging test (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Rationalise KVM banner output (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Use TLBI_TTL_UNKNOWN in __kvm_tlb_flush_vmid_range() (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Don't pass a TLBI level hint when zapping table entries (Sebastian Ott) [RHEL-43288]
  - KVM: arm64: Don't defer TLB invalidation when zapping table entries (Sebastian Ott) [RHEL-43288]
  - arm64/mm: Update tlb invalidation routines for FEAT_LPA2 (Sebastian Ott) [RHEL-43288]
  - arm64: Avoid cpus_have_const_cap() for ARM64_HAS_ARMv8_4_TTL (Sebastian Ott) [RHEL-43288]
  - vfio/pci: fix potential memory leak in vfio_intx_enable() (Alex Williamson) [RHEL-44424] {CVE-2024-38632}
  - perf test arm64: Fix version that enables VG register on Arm (Michael Petlan) [RHEL-32688]
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-25790]
  - can: isotp: isotp_sendmsg(): fix return error fix on TX path (Radu Rendec) [RHEL-39584]
  - can: isotp: fix error path in isotp_sendmsg() to unlock wait queue (Radu Rendec) [RHEL-39584]
  - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path (Radu Rendec) [RHEL-39584]
  - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in isotp_sendmsg() (Radu Rendec) [RHEL-39584]
  - netfilter: nf_tables: set dormant flag on hook register failure (Phil Sutter) [RHEL-33123] {CVE-2024-26835}
  - perf annotate: Fix segfault on sample histogram (Michael Petlan) [RHEL-29571]
  - perf symbols: Fix ownership of string in dso__load_vmlinux() (Michael Petlan) [RHEL-29571]
  - perf symbols: Update kcore map before merging in remaining symbols (Michael Petlan) [RHEL-29571]
  - perf maps: Re-use __maps__free_maps_by_name() (Michael Petlan) [RHEL-29571]
  - perf symbols: Remove map from list before updating addresses (Michael Petlan) [RHEL-29571]
  - perf annotate: Fix memory leak in annotated_source (Michael Petlan) [RHEL-29571]
  - perf dwarf-aux: Check variable address range properly (Michael Petlan) [RHEL-29571]
  - perf dwarf-aux: Check pointer offset when checking variables (Michael Petlan) [RHEL-29571]
  - perf tests: Remove dependency on lscpu (Michael Petlan) [RHEL-29571]
  - perf map: Remove kernel map before updating start and end addresses (Michael Petlan) [RHEL-29571]
  - perf tests: Apply attributes to all events in object code reading test (Michael Petlan) [RHEL-29571]
  - perf tests: Make "test data symbol" more robust on Neoverse N1 (Michael Petlan) [RHEL-29571]
  - perf test: Use a single fd for the child process out/err (Michael Petlan) [RHEL-29571]
  - perf test: Stat output per thread of just the parent process (Michael Petlan) [RHEL-29571]
  - perf record: Delete session after stopping sideband thread (Michael Petlan) [RHEL-29571]
  - perf riscv: Fix the warning due to the incompatible type (Michael Petlan) [RHEL-29571]
  - perf lock contention: Add a missing NULL check (Michael Petlan) [RHEL-29571]
  - perf annotate: Make sure to call symbol__annotate2() in TUI (Michael Petlan) [RHEL-29571]
  - riscv: andes: Support specifying symbolic firmware and hardware raw events (Michael Petlan) [RHEL-29571]
  - perf annotate: Add comments in the data structures (Michael Petlan) [RHEL-29571]
  - perf annotate: Remove sym_hist.addr[] array (Michael Petlan) [RHEL-29571]
  - perf annotate: Calculate instruction overhead using hashmap (Michael Petlan) [RHEL-29571]
  - perf annotate: Add a hashmap for symbol histogram (Michael Petlan) [RHEL-29571]
  - perf threads: Reduce table size from 256 to 8 (Michael Petlan) [RHEL-29571]
  - perf threads: Switch from rbtree to hashmap (Michael Petlan) [RHEL-29571]
  - perf threads: Move threads to its own files (Michael Petlan) [RHEL-29571]
  - perf machine: Move machine's threads into its own abstraction (Michael Petlan) [RHEL-29571]
  - perf machine: Move fprintf to for_each loop and a callback (Michael Petlan) [RHEL-29571]
  - perf trace: Ignore thread hashing in summary (Michael Petlan) [RHEL-29571]
  - perf report: Sort child tasks by tid (Michael Petlan) [RHEL-29571]
  - perf vendor events amd: Fix Zen 4 cache latency events (Michael Petlan) [RHEL-29571]
  - perf version: Display availability of OpenCSD support (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Add umasks/occ_sel to PCU events. (Michael Petlan) [RHEL-29571]
  - perf map: Fix map reference count issues (Michael Petlan) [RHEL-29571]
  - libperf evlist: Avoid out-of-bounds access (Michael Petlan) [RHEL-29571]
  - perf lock contention: Account contending locks too (Michael Petlan) [RHEL-29571]
  - perf metrics: Fix segv for metrics with no events (Michael Petlan) [RHEL-29571]
  - perf metrics: Fix metric matching (Michael Petlan) [RHEL-29571]
  - perf pmu: Fix a potential memory leak in perf_pmu__lookup() (Michael Petlan) [RHEL-29571]
  - perf test: Fix spelling mistake "curent" -> "current" (Michael Petlan) [RHEL-29571]
  - perf test: Use TEST_FAIL in the TEST_ASSERT macros instead of -1 (Michael Petlan) [RHEL-29571]
  - perf data convert: Fix segfault when converting to json when cpu_desc isn't set (Michael Petlan) [RHEL-29571]
  - perf bpf: Check that the minimal vmlinux.h installed is the latest one (Michael Petlan) [RHEL-29571]
  - perf print-events: make is_event_supported() more robust (Michael Petlan) [RHEL-29571]
  - perf tests: Add option to run tests in parallel (Michael Petlan) [RHEL-29571]
  - perf tests: Run time generate shell test suites (Michael Petlan) [RHEL-29571]
  - perf tests: Use scandirat for shell script finding (Michael Petlan) [RHEL-29571]
  - perf test: Rename builtin-test-list and add missed header guard (Michael Petlan) [RHEL-29571]
  - tools subcmd: Add a no exec function call option (Michael Petlan) [RHEL-29571]
  - perf tests: Avoid fork in perf_has_symbol test (Michael Petlan) [RHEL-29571]
  - perf list: Add scandirat compatibility function (Michael Petlan) [RHEL-29571]
  - perf thread_map: Skip exited threads when scanning /proc (Michael Petlan) [RHEL-29571]
  - perf list: fix short description for some cache events (Michael Petlan) [RHEL-29571]
  - perf stat: Fix metric-only aggregation index (Michael Petlan) [RHEL-29571]
  - perf metrics: Compute unmerged uncore metrics individually (Michael Petlan) [RHEL-29571]
  - perf stat: Pass fewer metric arguments (Michael Petlan) [RHEL-29571]
  - perf: script: prefer capstone to XED (Michael Petlan) [RHEL-29571]
  - perf: script: add raw|disasm arguments to --insn-trace option (Michael Petlan) [RHEL-29571]
  - perf: script: add field 'disasm' to display mnemonic instructions (Michael Petlan) [RHEL-29571]
  - perf: util: use capstone disasm engine to show assembly instructions (Michael Petlan) [RHEL-29571]
  - perf: build: introduce the libcapstone (Michael Petlan) [RHEL-29571]
  - perf list: For metricgroup only list include description (Michael Petlan) [RHEL-29571]
  - perf tools: Fixup module symbol end address properly (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update tigerlake TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update skylakex TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update skylake TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update sapphirerapids TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update sandybridge TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update rocketlake TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update jaketown TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update ivytown TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update ivybridge TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update icelakex TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update icelake TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update haswellx TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update haswell TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update cascadelakex TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update broadwellx TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update broadwellde TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update broadwell TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update alderlake TMA metrics to 4.7 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update tigerlake events to v1.15 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update skylake events to v58 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update sierraforst events to v1.01 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update rocketlake events to v1.02 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update meteorlake events to v1.07 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update icelake events to v1.21 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update haswell events to v35 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update grandridge events to v1.01 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update emeraldrapids events to v1.03 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update broadwell events to v29 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update alderlaken events to v1.24 (Michael Petlan) [RHEL-29571]
  - perf vendor events intel: Update alderlake events to v1.24 (Michael Petlan) [RHEL-29571]
  - perf augmented_raw_syscalls.bpf: Move 'struct timespec64' to vmlinux.h (Michael Petlan) [RHEL-29571]
  - perf testsuite: Install kprobe tests and common files (Michael Petlan) [RHEL-29571]
  - perf testsuite: Add test for kprobe handling (Michael Petlan) [RHEL-29571]
  - perf testsuite: Add common output checking helpers (Michael Petlan) [RHEL-29571]
  - perf testsuite: Add test case for perf probe (Michael Petlan) [RHEL-29571]
  - perf testsuite: Add initialization script for shell tests (Michael Petlan) [RHEL-29571]
  - perf testsuite: Add common setting for shell tests (Michael Petlan) [RHEL-29571]
  - perf testsuite: Add common regex patters (Michael Petlan) [RHEL-29571]
  - perf test: Enable Symbols test to work with a current module dso (Michael Petlan) [RHEL-29571]
  - perf build: Cleanup perf register configuration (Michael Petlan) [RHEL-29571]
  - perf parse-regs: Introduce a weak function arch__sample_reg_masks() (Michael Petlan) [RHEL-29571]
  - perf parse-regs: Always build perf register functions (Michael Petlan) [RHEL-29571]
  - perf build: Remove unused CONFIG_PERF_REGS (Michael Petlan) [RHEL-29571]
  - perf metric: Don't remove scale from counts (Michael Petlan) [RHEL-29571]
  - perf stat: Avoid metric-only segv (Michael Petlan) [RHEL-29571]
  - perf expr: Fix "has_event" function for metric style events (Michael Petlan) [RHEL-29571]
  - perf expr: Allow NaN to be a valid number (Michael Petlan) [RHEL-29571]
  - perf maps: Locking tidy up of nr_maps (Michael Petlan) [RHEL-29571]
  - perf maps: Hide maps internals (Michael Petlan) [RHEL-29571]
  - perf maps: Get map before returning in maps__find_next_entry (Michael Petlan) [RHEL-29571]
  - perf maps: Get map before returning in maps__find_by_name (Michael Petlan) [RHEL-29571]
  - perf maps: Get map before returning in maps__find (Michael Petlan) [RHEL-29571]
  - perf maps: Switch from rbtree to lazily sorted array for addresses (Michael Petlan) [RHEL-29571]
  - perf srcline: Add missed addr2line closes (Michael Petlan) [RHEL-29571]
  - perf stat: Support per-cluster aggregation (Michael Petlan) [RHEL-29571]
  - perf tools: Remove misleading comments on map functions (Michael Petlan) [RHEL-29571]
  - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() (Michael Petlan) [RHEL-29571]
  - perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}() (Michael Petlan) [RHEL-29571]
  - perf sched: Move curr_thread initialization to perf_sched__map() (Michael Petlan) [RHEL-29571]
  - perf sched: Fix memory leak in perf_sched__map() (Michael Petlan) [RHEL-29571]
  - perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay() (Michael Petlan) [RHEL-29571]
  - perf test: Skip metric w/o event name on arm64 in stat STD output linter (Michael Petlan) [RHEL-29571]
  - perf symbols: Slightly improve module file executable section mappings (Michael Petlan) [RHEL-29571]
  - perf tools: Make it possible to see perf's kernel and module memory mappings (Michael Petlan) [RHEL-29571]
  - perf record: Display data size on pipe mode (Michael Petlan) [RHEL-29571]
  - perf script: Print source line for each jump in brstackinsn (Michael Petlan) [RHEL-29571]
  - perf kvm powerpc: Fix build (Michael Petlan) [RHEL-29571]
  - tools: perf: Expose sample ID / stream ID to python scripts (Michael Petlan) [RHEL-29571]
  - perf bpf: Clean up the generated/copied vmlinux.h (Michael Petlan) [RHEL-29571]
  - perf jevents: Drop or simplify small integer values (Michael Petlan) [RHEL-29571]
  - perf parse-events: Print all errors (Michael Petlan) [RHEL-29571]
  - perf parse-events: Improve error location of terms cloned from an event (Michael Petlan) [RHEL-29571]
  - perf tsc: Add missing newlines to debug statements (Michael Petlan) [RHEL-29571]
  - perf Documentation: Add some more hints to tips.txt (Michael Petlan) [RHEL-29571]
  - perf test: Simplify metric value validation test final report (Michael Petlan) [RHEL-29571]
  - perf report: Prevent segfault with --no-parent (Michael Petlan) [RHEL-29571]
  - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() (Michael Petlan) [RHEL-29571]
  - perf evsel: Rename get_states() to parse_task_states() and make it public (Michael Petlan) [RHEL-29571]
  - perf tools: Add -H short option for --hierarchy (Michael Petlan) [RHEL-29571]
  - perf pmu: Treat the msr pmu as software (Michael Petlan) [RHEL-29571]
  - perf test: Skip test_arm_callgraph_fp.sh if unwinding isn't built in (Michael Petlan) [RHEL-29571]
  - perf version: Display availability of HAVE_DWARF_UNWIND_SUPPORT (Michael Petlan) [RHEL-29571]
  - perf mem: Clean up perf_pmus__num_mem_pmus() (Michael Petlan) [RHEL-29571]
  - perf mem: Clean up perf_mem_events__record_args() (Michael Petlan) [RHEL-29571]
  - perf mem: Clean up is_mem_loads_aux_event() (Michael Petlan) [RHEL-29571]
  - perf mem: Clean up perf_mem_event__supported() (Michael Petlan) [RHEL-29571]
  - perf mem: Clean up perf_mem_events__name() (Michael Petlan) [RHEL-29571]
  - perf mem: Clean up perf_mem_events__ptr() (Michael Petlan) [RHEL-29571]
  - perf mem: Add mem_events into the supported perf_pmu (Michael Petlan) [RHEL-29571]
  - perf sched: Commit to evsel__taskstate() to parse task state info (Michael Petlan) [RHEL-29571]
  - perf util: Add evsel__taskstate() to parse the task state info instead (Michael Petlan) [RHEL-29571]
  - perf util: Add helpers to parse task state string from libtraceevent (Michael Petlan) [RHEL-29571]
  - perf sched: Sync state char array with the kernel (Michael Petlan) [RHEL-29571]
  - perf data: Minor code style alignment cleanup (Michael Petlan) [RHEL-29571]
  - perf record: Check conflict between '--timestamp-filename' option and pipe mode before recording (Michael Petlan) [RHEL-29571]
  - perf record: Fix possible incorrect free in record__switch_output() (Michael Petlan) [RHEL-29571]
  - perf dwarf-aux: Check allowed DWARF Ops (Michael Petlan) [RHEL-29571]
  - perf annotate-data: Support stack variables (Michael Petlan) [RHEL-29571]
  - perf dwarf-aux: Add die_get_cfa() (Michael Petlan) [RHEL-29571]
  - perf annotate-data: Support global variables (Michael Petlan) [RHEL-29571]
  - perf annotate-data: Handle PC-relative addressing (Michael Petlan) [RHEL-29571]
  - perf annotate-data: Add stack operation pseudo type (Michael Petlan) [RHEL-29571]
  - perf annotate-data: Handle array style accesses (Michael Petlan) [RHEL-29571]
  - perf annotate-data: Handle macro fusion on x86 (Michael Petlan) [RHEL-29571]
  - perf annotate-data: Parse 'lock' prefix from llvm-objdump (Michael Petlan) [RHEL-29571]
  - perf build: Check whether pkg-config is installed when libtraceevent is linked (Michael Petlan) [RHEL-29571]
  - perf test: raise limit to 20 percent for perf_stat_--bpf-counters_test (Michael Petlan) [RHEL-29571]
  - perf/x86: Fix out of range data (Michael Petlan) [RHEL-29571]
  - perf/x86/intel/ds: Don't clear ->pebs_data_cfg for the last PEBS event (Michael Petlan) [RHEL-29571]
  - perf/x86/amd/core: Avoid register reset when CPU is dead (Michael Petlan) [RHEL-29571]
  - perf/x86/amd/lbr: Discard erroneous branch entries (Michael Petlan) [RHEL-29571]
  - perf/bpf: Fix duplicate type check (Michael Petlan) [RHEL-29571]
  - perf/x86/amd/uncore: Fix __percpu annotation (Michael Petlan) [RHEL-29571]
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Xin Long) [RHEL-31303] {CVE-2024-26663}
  - netfilter: nf_tables: honor table dormant flag from netdev release event path (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: fix memleak in map from abort path (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: restore set elements when delete set fails (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: discard table flag update with pending basechain deletion (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: reject table flag and netdev basechain updates (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: reject new basechain after table flag update (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Florian Westphal) [RHEL-33985] {CVE-2024-26925}
  - netfilter: nf_tables: release batch on table validation from abort path (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: do not compare internal table flags on updates (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: reject constant set with timeout (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: use kzalloc for hook allocation (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: register hooks last when adding new chain/flowtable (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: fix bidirectional offload regression (Florian Westphal) [RHEL-33985]
  - netfilter: nft_set_rbtree: skip end interval element from gc (Florian Westphal) [RHEL-33985] {CVE-2024-26581}
  - netfilter: nf_tables: use timestamp to check for set element timeout (Florian Westphal) [RHEL-33985]
  - netfilter: nft_set_rbtree: Remove unused variable nft_net (Florian Westphal) [RHEL-33985]
  - netfilter: nft_ct: reject direction for ct id (Florian Westphal) [RHEL-33985]
  - netfilter: nft_compat: restrict match/target protocol to u16 (Florian Westphal) [RHEL-33985]
  - netfilter: nft_compat: reject unused compat flag (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: validate NFPROTO_* family (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes (Florian Westphal) [RHEL-33985]
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [RHEL-33985] {CVE-2024-26668}
  - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: skip dead set elements in netlink dump (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: do not allow mismatch field size and set key length (Florian Westphal) [RHEL-33985]
  - netfilter: nft_limit: do not ignore unsupported flags (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: reject invalid set policy (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: shrink memory consumption of set elements (Florian Westphal) [RHEL-33985]
  - netfilter: nft_set_rbtree: prefer sync gc to async worker (Florian Westphal) [RHEL-33985]
  - netfilter: nft_set_rbtree: rename gc deactivate+erase function (Florian Westphal) [RHEL-33985]
  - netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal) [RHEL-33985]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-478.el9]
changelog:
  - netfilter: conntrack: switch connlabels to atomic_t (Xin Long) [RHEL-28816]
  - sched: act_ct: add netns into the key of tcf_ct_flow_table (Xin Long) [RHEL-28816]
  - stm class: Fix a double free in stm_register_device() (David Arcari) [RHEL-44520] {CVE-2024-38627}
  - lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (cki-backport-bot) [RHEL-44261] {CVE-2024-38543}
  - netfilter: complete validation of user input (Phil Sutter) [RHEL-37212] {CVE-2024-35896}
  - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37212] {CVE-2024-35896}
  - xfs: fix reloading entire unlinked bucket lists (Pavel Reichl) [RHEL-7990]
  - xfs: make inode unlinked bucket recovery work with quotacheck (Pavel Reichl) [RHEL-7990]
  - xfs: reload entire unlinked bucket lists (Pavel Reichl) [RHEL-7990]
  - xfs: use i_prev_unlinked to distinguish inodes that are not on the unlinked list (Pavel Reichl) [RHEL-7990]
  - xfs: load uncached unlinked inodes into memory on demand (Pavel Reichl) [RHEL-7990]
  - netfilter: nf_tables: Implement table adoption support (Phil Sutter) [RHEL-32120]
  - netfilter: nf_tables: Introduce NFT_TABLE_F_PERSIST (Phil Sutter) [RHEL-32120]
  - netfilter: uapi: Document NFT_TABLE_F_OWNER flag (Phil Sutter) [RHEL-32120]
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39781] {CVE-2024-36929}
  - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39833]
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39833] {CVE-2024-36905}
  - ppdev: Add an error check in register_device (Steve Best) [RHEL-39127] {CVE-2024-36015}
  - ppdev: Remove usage of the deprecated ida_simple_xx() API (Steve Best) [RHEL-39127] {CVE-2024-36015}
  - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37725] {CVE-2021-47384}
  - of: module: prevent NULL pointer dereference in vsnprintf() (Steve Best) [RHEL-37254] {CVE-2024-35878}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-479.el9]
changelog:
  - REDHAT: Makefile, dont reset dist-git-tmp if set (Lucas Zampieri)
  - Revert "REDHAT: Fix values in Makefile being redefined" (Lucas Zampieri)
  - tools/power turbostat: Add local build_bug.h header for snapshot target (David Arcari) [RHEL-33321]
  - tools/power turbostat: Fix unc freq columns not showing with '-q' or '-l' (David Arcari) [RHEL-33321]
  - tools/power turbostat: option '-n' is ambiguous (David Arcari) [RHEL-33321 RHEL-36084]
  - tools/power turbostat: version 2024.05.10 (David Arcari) [RHEL-33321]
  - tools/power turbostat: Ignore pkg_cstate_limit when it is not available (David Arcari) [RHEL-33321]
  - tools/power turbostat: Fix order of strings in pkg_cstate_limit_strings (David Arcari) [RHEL-33321]
  - tools/power turbostat: Read Package-cstates via perf (David Arcari) [RHEL-33321]
  - tools/power turbostat: Read Core-cstates via perf (David Arcari) [RHEL-33321]
  - tools/power turbostat: Avoid possible memory corruption due to sparse topology IDs (David Arcari) [RHEL-33321]
  - tools/power turbostat: Add columns for clustered uncore frequency (David Arcari) [RHEL-33321]
  - tools/power turbostat: Enable non-privileged users to read sysfs counters (David Arcari) [RHEL-33321]
  - tools/power turbostat: Replace _Static_assert with BUILD_BUG_ON (David Arcari) [RHEL-33321]
  - tools/power turbostat: Add ARL-H support (David Arcari) [RHEL-33321]
  - tools/power turbostat: Enhance ARL/LNL support (David Arcari) [RHEL-33321]
  - tools/power turbostat: Survive sparse die_id (David Arcari) [RHEL-33321]
  - tools/power turbostat: Remember global max_die_id (David Arcari) [RHEL-33321]
  - tools/power turbostat: Harden probe_intel_uncore_frequency() (David Arcari) [RHEL-33321]
  - tools/power turbostat: Add "snapshot:" Makefile target (David Arcari) [RHEL-33321]
  - platform/x86:intel/pmc: Enable S0ix blocker show in Lunar Lake (Steve Best) [RHEL-46817]
  - platform/x86:intel/pmc: Update LNL signal status map (Steve Best) [RHEL-46817]
  - platform/x86:intel/pmc: Add support to show S0ix blocker counter (Steve Best) [RHEL-46817]
  - platform/x86/intel/pmc: Fix PCH names in comments (Steve Best) [RHEL-46817]
  - platform/x86/intel/pmc: Improve PKGC residency counters debug (Steve Best) [RHEL-46817]
  - platform/x86/intel/pmc/arl: Put GNA device in D3 (Steve Best) [RHEL-46817]
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Davide Caratti) [RHEL-45534]
  - net/sched: taprio: extend minimum interval restriction to entire cycle too (Davide Caratti) [RHEL-44375 RHEL-45534] {CVE-2024-36244}
  - net/sched: taprio: make q->picos_per_byte available to fill_sched_entry() (Davide Caratti) [RHEL-44375 RHEL-45534] {CVE-2024-36244}
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39715] {CVE-2024-36017}
  - xfs: process free extents to busy list in FIFO order (Pavel Reichl) [RHEL-7961]
  - xfs: adjust the incore perag block_count when shrinking (Pavel Reichl) [RHEL-7961]
  - xfs: abort fstrim if kernel is suspending (Pavel Reichl) [RHEL-7961]
  - xfs: reduce AGF hold times during fstrim operations (Pavel Reichl) [RHEL-7961]
  - xfs: move log discard work to xfs_discard.c (Pavel Reichl) [RHEL-7961]
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ken Cox) [RHEL-38415] {CVE-2021-47459}
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39354] {CVE-2024-36016}
  - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35058]
  - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35058] {CVE-2024-27010}
  - KVM: SEV-ES: Fix svm_get_msr()/svm_set_msr() for KVM_SEV_ES_INIT guests (Paolo Bonzini) [RHEL-16745]
  - x86/e820: Add a new e820 table update helper (Paolo Bonzini) [RHEL-16745]
  - x86/sev: Add callback to apply RMP table fixups for kexec (Paolo Bonzini) [RHEL-16745]
  - x86/kexec: Do not update E820 kexec table for setup_data (Paolo Bonzini) [RHEL-16745]
  - x86/e820: Don't reserve SETUP_RNG_SEED in e820 (Paolo Bonzini) [RHEL-16745]
  - redhat: add new configs (Paolo Bonzini) [RHEL-16745]
  - KVM: SNP: Fix LBR Virtualization for SNP guest (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Don't save mmu_invalidate_seq after checking private attr (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV-ES: Delegate LBR virtualization to the processor (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV-ES: Disallow SEV-ES guests when X86_FEATURE_LBRV is absent (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV-ES: Prevent MSR access post VMSA encryption (Paolo Bonzini) [RHEL-16745]
  - KVM: SVM: Remove the need to trigger an UNBLOCK event on AP creation (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Don't WARN() if RMP lookup fails when invalidating gmem pages (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Automatically switch reclaimed pages to shared (Paolo Bonzini) [RHEL-16745]
  - KVM: SVM: Add module parameter to enable SEV-SNP (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Avoid WBINVD for HVA-based MMU notifications for SNP (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Implement hook for determining max NPT mapping level (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Implement gmem hook for invalidating private pages (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Implement gmem hook for initializing private pages (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Support SEV-SNP AP Creation NAE event (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add support to handle RMP nested page faults (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add support to handle Page State Change VMGEXIT (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add support to handle MSR based Page State Change VMGEXIT (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add support to handle GHCB GPA register VMGEXIT (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add KVM_SEV_SNP_LAUNCH_FINISH command (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add KVM_SEV_SNP_LAUNCH_UPDATE command (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add KVM_SEV_SNP_LAUNCH_START command (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add initial SEV-SNP support (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Select KVM_GENERIC_PRIVATE_MEM when CONFIG_KVM_AMD_SEV=y (Paolo Bonzini) [RHEL-16745]
  - KVM: MMU: Disable fast path if KVM_EXIT_MEMORY_FAULT is needed (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Add hook for determining max NPT mapping level (Paolo Bonzini) [RHEL-16745]
  - KVM: guest_memfd: Add hook for invalidating memory (Paolo Bonzini) [RHEL-16745]
  - KVM: guest_memfd: Add interface for populating gmem pages with user data (Paolo Bonzini) [RHEL-16745]
  - KVM: guest_memfd: extract __kvm_gmem_get_pfn() (Paolo Bonzini) [RHEL-16745]
  - KVM: guest_memfd: Add hook for initializing memory (Paolo Bonzini) [RHEL-16745]
  - KVM: guest_memfd: limit overzealous WARN (Paolo Bonzini) [RHEL-16745]
  - KVM: guest_memfd: pass error up from filemap_grab_folio (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Advertise max mappable GPA in CPUID.0x80000008.GuestPhysBits (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Split core of hypercall emulation to helper function (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Allow per-guest configuration of GHCB protocol version (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add GHCB handling for termination requests (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add GHCB handling for Hypervisor Feature Support requests (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Add support to handle AP reset MSR protocol (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Sanity check that __kvm_faultin_pfn() doesn't create noslot pfns (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Initialize kvm_page_fault's pfn and hva to error values (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Set kvm_page_fault.hva to KVM_HVA_ERR_BAD for "no slot" faults (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Handle no-slot faults at the beginning of kvm_faultin_pfn() (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Move slot checks from __kvm_faultin_pfn() to kvm_faultin_pfn() (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Explicitly disallow private accesses to emulated MMIO (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Don't force emulation of L2 accesses to non-APIC internal slots (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Move private vs. shared check above slot validity checks (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: WARN and skip MMIO cache on private, reserved page faults (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: check for invalid async page faults involving private memory (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Use synthetic page fault error code to indicate private faults (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: WARN if upper 32 bits of legacy #PF error code are non-zero (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Pass full 64-bit error code when handling page faults (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Move synthetic PFERR_* sanity checks to SVM's #NPF handler (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Define more SEV+ page fault error bits/flags for #NPF (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Remove separate "bit" defines for page fault error code masks (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Exit to userspace with -EFAULT if private fault hits emulation (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Disable KVM_INTEL_PROVE_VE by default (Paolo Bonzini) [RHEL-16745]
  - KVM: VMX: Enumerate EPT Violation #VE support in /proc/cpuinfo (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Print SPTEs on unexpected #VE (Paolo Bonzini) [RHEL-16745]
  - KVM: VMX: Dump VMCS on unexpected #VE (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Add sanity checks that KVM doesn't create EPT #VE SPTEs (Paolo Bonzini) [RHEL-16745]
  - KVM: nVMX: Always handle #VEs in L0 (never forward #VEs from L2 to L1) (Paolo Bonzini) [RHEL-16745]
  - KVM: nVMX: Initialize #VE info page for vmcs02 when proving #VE support (Paolo Bonzini) [RHEL-16745]
  - KVM: VMX: Don't kill the VM on an unexpected #VE (Paolo Bonzini) [RHEL-16745]
  - KVM: VMX: Introduce test mode related to EPT violation VE (Paolo Bonzini) [RHEL-16745]
  - KVM, x86: add architectural support code for #VE (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Track shadow MMIO value on a per-VM basis (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Add Suppress VE bit to EPT shadow_mmio_mask/shadow_present_mask (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Use SHADOW_NONPRESENT_VALUE for atomic zap in TDP MMU (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Fix a largely theoretical race in kvm_mmu_track_write() (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Process atomically-zapped SPTEs after TLB flush (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Allow non-zero value for non-present SPTE and removed SPTE (Paolo Bonzini) [RHEL-16745]
  - KVM: x86/mmu: Replace hardcoded value 0 for the initial value for SPTE (Paolo Bonzini) [RHEL-16745]
  - KVM: Allow page-sized MMU caches to be initialized with custom 64-bit values (Paolo Bonzini) [RHEL-16745]
  - KVM: delete .change_pte MMU notifier callback (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Explicitly zero kvm_caps during vendor module load (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Fully re-initialize supported_mce_cap on vendor module load (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Fully re-initialize supported_vm_types on vendor module load (Paolo Bonzini) [RHEL-16745]
  - selftests: kvm: add test for transferring FPU state into VMSA (Paolo Bonzini) [RHEL-16745]
  - selftests: kvm: split "launch" phase of SEV VM creation (Paolo Bonzini) [RHEL-16745]
  - selftests: kvm: switch to using KVM_X86_*_VM (Paolo Bonzini) [RHEL-16745]
  - selftests: kvm: add tests for KVM_SEV_INIT2 (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: allow SEV-ES DebugSwap again (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: introduce KVM_SEV_INIT2 operation (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: sync FPU and AVX state at LAUNCH_UPDATE_VMSA time (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: define VM types for SEV and SEV-ES (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: introduce to_kvm_sev_info (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: Add supported_vm_types to kvm_caps (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: add fields to struct kvm_arch for CoCo features (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: store VMSA features in kvm_sev_info (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: publish supported VMSA features (Paolo Bonzini) [RHEL-16745]
  - KVM: introduce new vendor op for KVM_GET_DEVICE_ATTR (Paolo Bonzini) [RHEL-16745]
  - KVM: x86: use u64_to_user_ptr() (Paolo Bonzini) [RHEL-16745]
  - KVM: SVM: Compile sev.c if and only if CONFIG_KVM_AMD_SEV=y (Paolo Bonzini) [RHEL-16745]
  - KVM: SVM: Invert handling of SEV and SEV_ES feature flags (Paolo Bonzini) [RHEL-16745]
  - Documentation: kvm/sev: clarify usage of KVM_MEMORY_ENCRYPT_OP (Paolo Bonzini) [RHEL-16745]
  - Documentation: kvm/sev: separate description of firmware (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Track SNP host status with cc_platform_*() (Paolo Bonzini) [RHEL-16745]
  - x86/cc: Add cc_platform_set/_clear() helpers (Paolo Bonzini) [RHEL-16745]
  - x86/kvm/Kconfig: Have KVM_AMD_SEV select ARCH_HAS_CC_PLATFORM (Paolo Bonzini) [RHEL-16745]
  - x86/tdx: Preserve shared bit on mprotect() (Paolo Bonzini) [RHEL-16745]
  - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Update the Zenbleed microcode revisions (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg() (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp - State in dmesg that TSME is enabled (Paolo Bonzini) [RHEL-16745]
  - x86/sev: Disable KMSAN for memory encryption TUs (Paolo Bonzini) [RHEL-16745]
  - x86/sev: Dump SEV_STATUS (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp - Have it depend on AMD_IOMMU (Paolo Bonzini) [RHEL-16745]
  - iommu/amd: Fix failure return from snp_lookup_rmpentry() (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Make snp_range_list static (Paolo Bonzini) [RHEL-16745]
  - Documentation: virt: Fix up pre-formatted text block for SEV ioctls (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Add the SNP_SET_CONFIG command (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Add the SNP_COMMIT command (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Add the SNP_PLATFORM_STATUS command (Paolo Bonzini) [RHEL-16745]
  - x86/cpufeatures: Enable/unmask SEV-SNP CPU feature (Paolo Bonzini) [RHEL-16745]
  - KVM: SEV: Make AVIC backing, VMSA and VMCB memory allocation SNP safe (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Add panic notifier for SEV/SNP firmware shutdown on kdump (Paolo Bonzini) [RHEL-16745]
  - iommu/amd: Clean up RMP entries for IOMMU pages during SNP shutdown (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Handle legacy SEV commands when SNP is enabled (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Handle non-volatile INIT_EX data when SNP is enabled (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Handle the legacy TMR allocation when SNP is enabled (Paolo Bonzini) [RHEL-16745]
  - x86/sev: Introduce an SNP leaked pages list (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Provide an API to issue SEV and SNP commands (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Add support to initialize the AMD-SP for SEV-SNP (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp: Define the SEV-SNP commands (Paolo Bonzini) [RHEL-16745]
  - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked (Paolo Bonzini) [RHEL-16745]
  - x86/sev: Adjust the directmap to avoid inadvertent RMP faults (Paolo Bonzini) [RHEL-16745]
  - x86/sev: Add helper functions for RMPUPDATE and PSMASH instruction (Paolo Bonzini) [RHEL-16745]
  - x86/fault: Dump RMP table information when RMP page faults occur (Paolo Bonzini) [RHEL-16745]
  - x86/traps: Define RMP violation #PF error code (Paolo Bonzini) [RHEL-16745]
  - x86/fault: Add helper for dumping RMP entries (Paolo Bonzini) [RHEL-16745]
  - x86/sev: Add RMP entry lookup helpers (Paolo Bonzini) [RHEL-16745]
  - x86/sev: Add SEV-SNP host initialization support (Paolo Bonzini) [RHEL-16745]
  - x86/mtrr: Don't print errors if MtrrFixDramModEn is set when SNP enabled (Paolo Bonzini) [RHEL-16745]
  - iommu/amd: Don't rely on external callers to enable IOMMU SNP support (Paolo Bonzini) [RHEL-16745]
  - x86/speculation: Do not enable Automatic IBRS if SEV-SNP is enabled (Paolo Bonzini) [RHEL-16745]
  - x86/cpufeatures: Add SEV-SNP CPU feature (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Do the common init on future Zens too (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Add more models to X86_FEATURE_ZEN5 (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN5 (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN1 (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Drop now unused CPU erratum checking function (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Get rid of amd_erratum_1485[] (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Get rid of amd_erratum_400[] (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Get rid of amd_erratum_383[] (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Get rid of amd_erratum_1054[] (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Move the DIV0 bug detection to the Zen1 init function (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Move Zenbleed check to the Zen2 init function (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Rename init_amd_zn() to init_amd_zen_common() (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Call the spectral chicken in the Zen2 init function (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Move erratum 1076 fix into the Zen1 init function (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Move the Zen3 BTC_NO detection to the Zen3 init function (Paolo Bonzini) [RHEL-16745]
  - x86/CPU/AMD: Carve out the erratum 1386 fix (Paolo Bonzini) [RHEL-16745]
  - x86/sev: Fix position dependent variable references in startup code (Paolo Bonzini) [RHEL-16745]
  - x86/Kconfig: Remove CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (Paolo Bonzini) [RHEL-16745]
  - x86/sme: Fix memory encryption setting if enabled by default and not overridden (Paolo Bonzini) [RHEL-16745]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-480.el9]
changelog:
  - sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove() (Luiz Capitulino) [RHEL-45234]
  - platform/mellanox: mlxbf-tmfifo: Drop Tx network packet when Tx TmFIFO is full (Luiz Capitulino) [RHEL-45234]
  - platform/mellanox: mlxbf-tmfifo: Remove unnecessary bool conversion (Luiz Capitulino) [RHEL-45234]
  - platform/mellanox: mlxbf-pmc: fix signedness bugs (Luiz Capitulino) [RHEL-45234]
  - drivers/platform/mellanox: Convert snprintf to sysfs_emit (Luiz Capitulino) [RHEL-45234]
  - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43846] {CVE-2024-38615}
  - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44143] {CVE-2024-38573}
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33200] {CVE-2024-26894}
  - RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation (Aristeu Rozanski) [RHEL-38634]
  - RAS/AMD/ATL: Fix MI300 bank hash (Aristeu Rozanski) [RHEL-38634]
  - arm64: hibernate: Fix level3 translation fault in swsusp_save() (Mark Salter) [RHEL-35086] {CVE-2024-26989}
  - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37717] {CVE-2021-47386}
  - pstore/platform: Add check for kstrdup (Steve Best) [RHEL-38128] {CVE-2023-52869}
  - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (Charles Mirabile) [RHEL-34956] {CVE-2024-26947}
  - PM: sleep: wakeirq: fix wake irq warning in system suspend (Mark Langsdorf) [RHEL-26183]
  - drivers/base/cpu: crash data showing should depends on KEXEC_CORE (Mark Langsdorf) [RHEL-26183]
  - mm/memory_hotplug: fix error handling in add_memory_resource() (Mark Langsdorf) [RHEL-26183]
  - mm/memory_hotplug: add missing mem_hotplug_lock (Mark Langsdorf) [RHEL-26183]
  - regmap: fix bogus error on regcache_sync success (Mark Langsdorf) [RHEL-26183]
  - fw loader: Remove the now superfluous sentinel element from ctl_table array (Mark Langsdorf) [RHEL-26183]
  - regmap: fix NULL deref on lookup (Mark Langsdorf) [RHEL-26183]
  - driver core: platform: Annotate struct irq_affinity_devres with __counted_by (Mark Langsdorf) [RHEL-26183]
  - drivers: base: test: Make property entry API test modular (Mark Langsdorf) [RHEL-26183]
  - drivers/base: Add modular KUnit property entry API tests (Mark Langsdorf) [RHEL-26183]
  - driver core: Add missing parameter description to __fwnode_link_add() (Mark Langsdorf) [RHEL-26183]
  - driver core: platform: Unify the firmware node type check (Mark Langsdorf) [RHEL-26183]
  - driver core: platform: Use temporary variable in platform_device_add() (Mark Langsdorf) [RHEL-26183]
  - driver core: platform: Refactor error path in a couple places (Mark Langsdorf) [RHEL-26183]
  - driver core: platform: Drop redundant check in platform_device_add() (Mark Langsdorf) [RHEL-26183]
  - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Mark Langsdorf) [RHEL-26183]
  - driver core: return an error when dev_set_name() hasn't happened (Mark Langsdorf) [RHEL-26183]
  - crash: memory and CPU hotplug sysfs attributes (Mark Langsdorf) [RHEL-26183]
  - driver core: Call in reversed order in device_platform_notify_remove() (Mark Langsdorf) [RHEL-26183]
  - driver core: Return proper error code when dev_set_name() fails (Mark Langsdorf) [RHEL-26183]
  - mm,thp: fix nodeN/meminfo output alignment (Mark Langsdorf) [RHEL-26183]
  - drivers: base: test: Add missing MODULE_* macros to root device tests (Mark Langsdorf) [RHEL-26183]
  - drivers: base: test: Add missing MODULE_* macros for platform devices tests (Mark Langsdorf) [RHEL-26183]
  - drivers: base: Free devm resources when unregistering a device (Mark Langsdorf) [RHEL-26183]
  - drivers: base: Add basic devm tests for platform devices (Mark Langsdorf) [RHEL-26183]
  - drivers: base: Add basic devm tests for root devices (Mark Langsdorf) [RHEL-26183]
  - drivers/base: Disable CONFIG_DM_KUNIT_TEST (Mark Langsdorf) [RHEL-26183]
  - base/node: Remove duplicated include (Mark Langsdorf) [RHEL-26183]
  - driver core: Call dma_cleanup() on the test_remove path (Mark Langsdorf) [RHEL-26183]
  - driver core: test_async: fix an error code (Mark Langsdorf) [RHEL-26183]
  - of: Move of_device_{add,register,unregister} to platform.c (Mark Langsdorf) [RHEL-26183]
  - of: Move of_platform_register_reconfig_notifier() into DT core (Mark Langsdorf) [RHEL-26183]
  - regmap: Provide user selectable option to enable regmap (Mark Langsdorf) [RHEL-26183]
  - Regmap: Add REGMAP_BUILD (Mark Langsdorf) [RHEL-26183]
  - regmap: Fix the type used for a bitmap pointer (Mark Langsdorf) [RHEL-26183]
  - regmap: Remove dynamic allocation warnings for rbtree and maple (Mark Langsdorf) [RHEL-26183]
  - regmap: rbtree: Use alloc_flags for memory allocations (Mark Langsdorf) [RHEL-26183]
  - regmap: Reject fast_io regmap configurations with RBTREE and MAPLE caches (Mark Langsdorf) [RHEL-26183]
  - regmap-irq: Fix out-of-bounds access when allocating config buffers (Mark Langsdorf) [RHEL-26183]
  - regmap: mmio: Remove unused 64-bit support code (Mark Langsdorf) [RHEL-26183]
  - regmap: cache: Revert "Add 64-bit mode support" (Mark Langsdorf) [RHEL-26183]
  - regmap: Revert "add 64-bit mode support" and Co. (Mark Langsdorf) [RHEL-26183]
  - PM: domains: Move the verification of in-params from genpd_add_device() (Mark Langsdorf) [RHEL-26183]
  - regmap: Drop early readability check (Mark Langsdorf) [RHEL-26183]
  - drivers: fwnode: fix fwnode_irq_get[_byname]() (Mark Langsdorf) [RHEL-26183]
  - regmap: Check for register readability before checking cache during read (Mark Langsdorf) [RHEL-26183]
  - regmap: Add debugfs file for forcing field writes (Mark Langsdorf) [RHEL-26183]
  - regmap: Don't check for changes in regcache_set_val() (Mark Langsdorf) [RHEL-26183]
  - regmap: Add missing cache_only checks (Mark Langsdorf) [RHEL-26183]
  - regmap: regmap-irq: Move handle_post_irq to before pm_runtime_put (Mark Langsdorf) [RHEL-26183]
  - base/node: Use 'property' to identify an access parameter (Mark Langsdorf) [RHEL-26183]
  - isa: Remove unnecessary checks (Mark Langsdorf) [RHEL-26183]
  - PM: suspend: Fix pm_suspend_target_state handling for !CONFIG_PM (Mark Langsdorf) [RHEL-26183]
  - PM: domains: fix integer overflow issues in genpd_parse_state() (Mark Langsdorf) [RHEL-26183]
  - regmap: mmio: Allow passing an empty config->reg_stride (Mark Langsdorf) [RHEL-26183]
  - regmap-irq: Drop backward compatibility for inverted mask/unmask (Mark Langsdorf) [RHEL-26183]
  - regmap-irq: Minor adjustments to .handle_mask_sync() (Mark Langsdorf) [RHEL-26183]
  - regmap-irq: Remove support for not_fixed_stride (Mark Langsdorf) [RHEL-26183]
  - regmap-irq: Remove type registers (Mark Langsdorf) [RHEL-26183]
  - regmap-irq: Remove virtual registers (Mark Langsdorf) [RHEL-26183]
  - regmap-irq: Drop map from handle_mask_sync() parameters (Mark Langsdorf) [RHEL-26183]
  - hwrng: cn10k - use dev_err_probe (Bharat Bhushan) [RHEL-22181]
  - hwrng: cn10k - delete empty remove function (Bharat Bhushan) [RHEL-22181]
  - hwrng: cn10k - Add extended trng register support (Bharat Bhushan) [RHEL-22181]
  - hwrng: octeon - Fix warnings on 32-bit platforms (Bharat Bhushan) [RHEL-22181]
  - REDHAT: Makefile, dont reset dist-git-tmp if set (Lucas Zampieri)


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-2
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "Staat der Nederlanden Root CA - G2"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-90.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-4
changelog:
  - Add Pull request #18
  - Replaces kerberos with gssapi
  - Replaces requests_kerberos with requests_gssapi


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-5
changelog:
  - Add Pull request #19
  - Remove Pull request #17 as it is not accepted
  - Review comment #13, #14 addressed


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Miroslav Lichvar <mlichvar@redhat.com> 4.0-0.8.pre3
changelog:
  - update to 4.0-pre3
  - switch to sourcedir directive for loading servers from DHCP
  - add NetworkManager dispatcher script to save servers from DHCP when
    dhclient is not installed (Robert Fairley)
  - drop old migration code from scriptlet
  - move default paths in /var/run to /run


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-1
changelog:
  - update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
    RHEL-12411)
  - add chronyd-restricted service (RHEL-9972)


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Packit <hello@packit.dev> - 312-1
changelog:
  - Accounts: support lastlog2 and make the page faster
  - Storage: Various Anaconda mode fixes
  - Fix package build if cockpit-bridge package is installed


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Kamil Dudka <kdudka@redhat.com> - 8.32-22
changelog:
  - weaken the dependency on glibc-doc to reduce minimal installations
  - drop the last use of ncurses no longer needed (#1830318)
  - utimens: fix confusing arg type in internal func


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
changelog:
  - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
  - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
  - fips-mode-setup: catch more inconsistencies, clarify --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
changelog:
  - DEFAULT: drop DNSSEC SHA-1 exception
  - openssh: add support for sntrup761x25519-sha512@openssh.com


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git94f0e2c
changelog:
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - FIPS: enforce EMS in FIPS mode
  - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode
  - nss: implement EMS enforcement in FIPS mode (disabled in ELN)
  - openssl: implement EMS enforcement in FIPS mode
  - gnutls: implement EMS enforcement in FIPS mode (disabled in ELN)
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230920-1.git8dcf74d
changelog:
  - OSPP subpolicy: tighten beyond reason for OSPP 4.3
  - fips-mode-setup: more thorough --disable, still unsupported


author: Alexander Sosedkin <asosedkin@redhat.com> - 20231016-1.git77ceb0b
changelog:
  - openssl: fix SHA1 and NO-ENFORCE-EMS interaction
  - bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx


author: Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
changelog:
  - turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
  - fips-mode-setup: increase chroot-friendliness (RHEL-11350)
  - fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)


author: Clemens Lang <cllang@redhat.com> - 20231109-1.git0ceff7f
changelog:
  - Restore support for scoped ssh_etm directives (RHEL-15925)
  - Print matches in syntax deprecation warnings (RHEL-15925)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
changelog:
  - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240202-1.git283706d
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - fips-finish-install: Create/remove /etc/system-fips on ostree systems
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.gitb1c706d
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: use newly introduced SKIP_LINTING=1
  - packaging: drop stale workarounds


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - 2217177 - Delays printing to lpd when reserved ports are exhausted
  - 2217284 - The command "cancel -x <job>" does not remove job files
  - 2217954 - Enlarge backlog queue for listen() in cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-19
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-13
changelog:
  - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2125357


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-14
changelog:
  - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133999
  - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133989
  - Resolves: bz #2133989, #2133999


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-15
changelog:
  - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2141860
  - Add 0068-libmultipath-cleanup-remove_feature.patch
  - Add 0069-libmultipath-cleanup-add_feature.patch
  - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2033080
  - Resolves: bz #2033080, #2141860


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-17
changelog:
  - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2145225


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-21
changelog:
  - Add 0085-multipathd-make-pr-registration-consistent.patch
  - Add 0086-libmultipath-make-prflag-an-enum.patch
  - Add 0087-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0088-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164869


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-22
changelog:
  - Add 0089-RH-Add-mpathcleanup.patch
    * Fixes RHEL-782
  - Add 0090-RH-make-listing-return-an-error-if-the-config-file-i.patch
  - Install mpathcleanup
    * Fixes RHEL-781
  - Resolves: #781, #782


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-23
changelog:
  - Add 0091-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Fixes RHEL-6678 (Add support in multipathd for NVMe to listen for FPIN-Li
      events and mark effected paths as marginal)
  - Add 0092-multipath-tools-add-HPE-Alletra-9000-NVMe-to-hardwar.patch
    * Fixes RHEL-1830 (Changes to Arcus NVMeoFC multipath.conf settings for RHEL
      9.x to be included in kernel by default)
  - Resolves: RHEL-6678
  - Resolves: RHEL-1830


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-24
changelog:
  - Add 0093-RH-multipath-add-mpathcleanup-man-page.patch
    * Fixes RHEL-1266 ("There is no man page for mpathcleanup")
  - Resolves: RHEL-1266


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-25
changelog:
  - Add 0094-libmultipath-Add-max_retries-config-option.patch
    * Fixes RHEL-1729 ("Allow multipathd to set the max_retries of the
      scsi_device for paths")
  - Add 0095-libmutipath-Retain-device-size-if-sysfs_get_size-fai.patch
  - Add 0096-multipathd-check-and-update-all-paths-when-in-cli_re.patch
  - Add 0097-multipathd-move-post-reloading-commands-into-resize_.patch
  - Add 0098-multipathd-move-resize_map-to-multipathd-main.c.patch
  - Add 0099-multipathd-Add-auto_resize-config-option.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986
  - Resolves: RHEL-1729


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-2
changelog:
  - Allow non-zero values in unused index block entries.
  - Fix boundary check on the bitset for cached blocks.
  - Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
  - Fix thin_repair checking keys on a node with a zero key.
  - Enhance error message in cache_check suggesting fix when applicable.


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.14.0-1
changelog:
  - Update to 4.14.0
  - Add doc related to --destdir and --downloadonly options (RhBug:2100811)
  - Fix broken dependencies error reporting (RhBug:2088422)
  - Add support for group upgrade rollback (RhBug:2016070)
  - Expose plugin unload method to API (RhBug:2047251)
  - Fix upgrade from file to noarch pkg (RhBug:2006018)
  - Allow passing plugin parameters with dashes in names (RhBug:1980712)
  - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421)
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)
  - doc: Describe how gpg keys are stored for `repo_ggpcheck` (RhBug:2020678)
  - bash-completion: use sqlite cache when available


author: Nicola Sella <nsella@redhat.com> - 4.14.0-3
changelog:
  - Move system-upgrade plugin to core (RhBug:2131288)
  - offline-upgrade: add support for security filters (RhBug:1939975,2139326)
  - Fix plugins unit tests + unload plugins upon their deletion


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-6
changelog:
  - Add reboot option to DNF Automatic (RhBug:2124793)
  - Omit src RPMs from check-update (RhBug:2151910,2203069)
  - automatic: Fix online detection with proxy (RhBug:2022440,2189851)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-8
changelog:
  - Return an error when transaction fails (RhBug:2170093,2212262)
  - Document symbols in `dnf history list` output (RhBug:2172067,2218113)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-9
changelog:
  - Fix japanese translations (RHEL-11345)
  - Fix substitution in kay-value-pair list in add_new_repo (RHEL-6396)
  - base: Add obsoleters of only latest versions (RHEL-6304)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-11
changelog:
  - Fix handling an installation reason of install-only packages on autoremove
    (RHEL-15902)
  - Fix dnf-automatic service to apply security updates the same way as dnf tool
    (RHEL-21874)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-12
changelog:
  - Fix reporting nothing-to-do for "dnf remove --duplicates" (RHEL-6424)
  - Fix reporting nothing-to-do for "dnf remove --oldinstallonly" (RHEL-6424)


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Martin Osvald <mosvald@redhat.com> - 3.16-3
changelog:
  - Add ownership of /etc/default, /usr/share/X11/fonts,
    /usr/share/fish, /usr/share/zsh
  - Improve directory creation to avoid 'Argument list too long' error
    Resolves: RHEL-35327
    Resolves: RHEL-1337
    Resolves: RHEL-1338


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Dave Dykstra <dwd@fedoraproject.org> - 2.9.9-7
changelog:
  - Update the Requires: fuse-common >= version to 3.4.2-4 because
    fuse-common > 3.4.2-3 is insufficient to force the new version


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Patsy Griffin <patsy@redhat.com> - 2.34-113
changelog:
  - CVE-2024-33601 glibc: netgroup cache may terminate daemon on
    memory allocation failure (RHEL-34272)
  - CVE-2024-33602 glibc: netgroup cache assumes NSS callback 
    uses in-buffer strings (RHEL-34274)


author: Patsy Griffin <patsy@redhat.com> - 2.34-115
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39992)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-67
changelog:
  - grub2-mkconfig: dont overwrite BLS cmdline if BLSCFG is true
  - Resolves: #2203203
  - Resolves: #2212320
  - Resolves: #2221543


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-68
changelog:
  - Revert previous patch as it breaks install
  - Related: #2203203
  - Related: #2212320
  - Related: #2221543


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-69
changelog:
  - grub2-mkconfig: dont overwrite BLS cmdline if BLSCFG is true
  - This is an updated version of the 2.06-67 patch
  - Resolves: #2203203
  - Resolves: #2212320
  - Resolves: #2221543


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-73
changelog:
  - search command: add flag to only search root dev
  - Resolves: #RHEL-20526
  - Resolves: #CVE-2023-4001


author: Tom Stellard <tstellar@redhat.com> - 8.40-50
changelog:
  - Use make_build macro instead of plain make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Jan Macku <jamacku@redhat.com> - 10.07-1
changelog:
  - doc: Fix "Duplicated string found in the file."
  - doc: Documents RES_OPTIONS option
  - doc: Documents ifcfg option LINKSTATUS
  - ci: use up to date keywords and fix some warnings
  - network: fix set_link_up()
  - network: add option to keep the link down
  - Rework of shell ci
  - Translations update from Weblate


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Tao Liu <ltao@redhat.com> - 2:1.8.0-5
changelog:
  - Document migrateval. Resolves: rhbz2071959
  - Confine irqbalance to systems where it is useful. Resolves: rhbz2063930
  - Wrong EnvironmentFile in irqbalance.service. Resolves: rhbz2058509


author: Tao Liu <ltao@redhat.com> - 2:1.9.2-3
changelog:
  - Use misc/irqbalance.env as irqbalance.sysconfig
  - Use new rpm macros: autosetup and make_build
  - Use irqbalance-1.9.0-environment-file
  - Remove _hardened_build
  - Remove triggerun -- irqbalance < 2:0.56-3
  - Use SPDX licence


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-131
changelog:
  - Update amdgpu/gc_11_0_1_rlc.bin file from the following linux-firmware commit:
    commit c0a0bc2 - amdgpu: Update GC 11.0.1 firmware (rhbz 2047462).


author: Herton R. Krzesinski <herton@redhat.com> - 20230210-132
changelog:
  - Update ath10k/ath11k firmware (rhbz 2169013):
    ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
    ath11k: WCN6855 hw2.0: update board-2.bin
    ath11k: WCN6750 hw1.0: update board-2.bin
    ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
    ath11k: IPQ5018 hw1.0: add board-2.bin
    ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
    ath10k: WCN3990 hw1.0: update board-2.bin
  - Ship new firmware files using patch/git apply instead of as rpm sources.


author: Herton R. Krzesinski <herton@redhat.com> - 20230310-133
changelog:
  - Removed notices and check about the liquidio/lio_23xx_vsw.bin file: starting
    with 20230310 release of linux-firmware, it was removed upstream as well.
  - Update to upstream 20230310 release (rhbz 2029566).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qat: update licence text
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  - rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  - WHENCE: remove duplicate File entries
  - WHENCE: remove trailing white space
  - linux-firmware: add fw for qat_4xxx
  - Fix symlinks for Intel firmware
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7921 WiFi device
  - iwlwifi: update core69 and core72 firmwares for Ty device
  - rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  - brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  - brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  - brcm: Add nvram for the Advantech MICA-071 tablet
  - rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  - rtl_bt: Add firmware and config files for RTL8821CS
  - rtw89: 8852b: update fw to v0.29.29.0
  - rtw89: 8852b: update fw to v0.29.26.0
  - liquidio: remove lio_23xx_vsw.bin
  - intel: avs: Add AudioDSP base firmware for CNL-based platforms
  - intel: avs: Add AudioDSP base firmware for APL-based platforms
  - intel: avs: Add AudioDSP base firmware for SKL-based platforms
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ5018 hw1.0: add board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - cnm: update chips&media wave521c firmware.
  - amdgpu: Update GC 11.0.1 firmware
  - intel: catpt: Add AudioDSP base firmware for BDW platforms


author: Jan Stancek <jstancek@redhat.com> - 20230404-134
changelog:
  - Update to upstream 20230404 release (rhbz 2183603).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: Amphion: Update vpu firmware
  - iwlwifi: add new FWs from core78-32 release
  - iwlwifi: update 9000-family firmwares to core78-32
  - amdgpu: Update SDMA 6.0.1 firmware
  - amdgpu: Add PSP 13.0.11 firmware
  - amdgpu: Update PSP 13.0.4 firmware
  - amdgpu: Update GC 11.0.1 firmware
  - amdgpu: Update DCN 3.1.4 firmware
  - amdgpu: Add GC 11.0.4 firmware
  - rtw88: 8822c: Update normal firmware to v9.9.15
  - linux-firmware: Update firmware file for Intel Bluetooth AX101
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: add firmware files for NXP BT chipsets
  - rtw89: 8852b: update format-1 fw to v0.29.29.0
  - rtw89: 8852b: add format-1 fw v0.29.26.0
  - rtw89: 8852b: rollback firmware to v0.27.32.1
  - i915: Update MTL DMC to v2.12
  - i915: Update ADLP DMC to v2.19
  - mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
  - iwlwifi: update core69 and core72 firmwares for So device


author: Jan Stancek <jstancek@redhat.com> - 20230525-135
changelog:
  - Update to upstream 20230525 release (rhbz 2178579).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: update yellow carp firmware for amd.5.5 release
  - amdgpu: update navi14 firmware for amd.5.5 release
  - amdgpu: update navi12 firmware for amd.5.5 release
  - amdgpu: update vega20 firmware for amd.5.5 release
  - amdgpu: update vega12 firmware for amd.5.5 release
  - amdgpu: update navi10 firmware for amd.5.5 release
  - amdgpu: update vega10 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  - amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  - amdgpu: update 13.0.8 firmware for amd.5.5 release
  - amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  - amdgpu: update vangogh firmware for amd.5.5 release
  - amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  - amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  - amdgpu: update renoir firmware for amd.5.5 release
  - amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  - amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  - amdgpu: update green sardine firmware for amd.5.5 release
  - amdgpu: update beige goby firmware for amd.5.5 release
  - amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  - amdgpu: update arcturus firmware for amd.5.5 release
  - amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  - amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  - amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  - amdgpu: update navy flounder firmware for amd.5.5 release
  - amdgpu: update sienna cichlid firmware for amd.5.5 release
  - amdgpu: update aldebaran firmware for amd.5.5 release
  - amdgpu: DMCUB updates for various AMDGPU asics
  - ice: update ice DDP comms package to 1.3.40.0
  - rtlwifi: Add firmware v6.0 for RTL8192FU
  - rtlwifi: Update firmware for RTL8188EU to v28.0
  - cirrus: Add firmware and tuning files for HP G10 series laptops
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - WHENCE: comment out duplicate MediaTek firmware
  - i915: Add GuC v70.6.6 for MTL
  - amdgpu: update DCN 3.1.6 DMCUB firmware
  - rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  - rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  - rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
  - Group all Conexant V4L devices together
  - rtl_nic: update firmware of USB devices
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: update firmware for MT7981
  - qca: Update firmware files for BT chip WCN6750
  - mt76xx: Move the old Mediatek WiFi firmware to mediatek
  - rtl_bt: Add firmware and config files for RTL8851B
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: add firmware for MT7981
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update qat firmware
  - linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops
  - linux-firmware: update firmware for MT7916
  - rtw89: 8852b: update format-1 fw to v0.29.29.1
  - rtw89: 8852c: update fw to v0.27.56.13
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update board-2.bin
  - ath10k: QCA99X0 hw2.0: update board-2.bin
  - ath10k: QCA9984 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin


author: Jan Stancek <jstancek@redhat.com> - 20230625-137
changelog:
  - Fix PSR-SU issues with kernel 6.2 or later (rhbz 2218668)
  - Update to upstream 20230625 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Makefile, copy-firmware: support xz/zstd compressed firmware
  - copy-firmware: silence the last shellcheck warnings
  - copy-firmware: drop obsolete backticks, quote
  - copy-firmware: tweak sed invocation
  - copy-firmware: quote deskdir and dirname
  - check_whence: error if symlinks are in-tree
  - check_whence: error if File: is actually a link
  - check_whence: strip quotation marks
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  - ice: update ice DDP wireless_edge package to 1.3.10.0
  - amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
  - amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  - fix broken cirrus firmware symlinks
  - qcom: Update the microcode files for Adreno a630 GPUs.
  - qcom: sdm845: rename the modem firmware
  - qcom: sdm845: update remoteproc firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  - rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  - amdgpu: DMCUB updates for various AMDGPU asics
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - i915: Add HuC v8.5.0 for MTL
  - mediatek: Update mt8195 SCP firmware to support hevc
  - qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  - cirrus: Add firmware for new Asus ROG Laptops
  - brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  - amdgpu: Update GC 11.0.1 and 11.0.4
  - rtw89: 8851b: add firmware v0.29.41.0
  - ice: update ice DDP comms package to 1.3.40.0
  - cxgb4: Update firmware to revision 1.27.3.0


author: Jan Stancek <jstancek@redhat.com> - 20230726-138
changelog:
  - Navi32 dGPU firmware (rhbz 2047486)
  - CVE-2023-20593 linux-firmware: hw: amd: Cross-Process Information Leak (rhbz 2227156)
  - Update to upstream 20230726 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - copy-firmware: Fix linking directories when using compression
  - copy-firmware: Fix test: unexpected operator
  - qcom: sc8280xp: LENOVO: remove directory sym link
  - qcom: sc8280xp: LENOVO: Remove execute bits
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: add initial SMU 13.0.10 firmware
  - amdgpu: add initial SDMA 6.0.3 firmware
  - amdgpu: add initial PSP 13.0.10 firmware
  - amdgpu: add initial GC 11.0.3 firmware
  - linux-firmware: Update AMD fam17h cpu microcode
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update green sardine VCN firmware
  - amdgpu: update renoir VCN firmware
  - amdgpu: update raven VCN firmware
  - amdgpu: update raven2 VCN firmware
  - amdgpu: update Picasso VCN firmware
  - amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  - Updated NXP SR150 UWB firmware
  - wfx: update to firmware 3.16.1
  - mediatek: Update mt8195 SCP firmware to support 10bit mode
  - i915: update DG2 GuC to v70.8.0
  - i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  - cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models
  - Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - Fix qcom ASoC tglp WHENCE entry
  - check_whence: Check link targets are valid
  - iwlwifi: add new FWs from core80-39 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  - qcom: Add Audio firmware for SC8280XP X13s


author: Jan Stancek <jstancek@redhat.com> - 20230814-139
changelog:
  - CVE-2023-20569 linux-firmware: hw amd: Return Address Predictor velunerability leading to information disclosure (rhbz 2230418)
  - [AMDCLIENT 9.3 Bug] Linux FW update to fix multi monitor behind TBT3 dock & random flickers (rhbz 2227845)
  - amdgpu: partially revert firmware for GC 11.0.0 and GC 11.0.2
  - linux-firmware: Update AMD cpu microcode
  - Merge branch 'for-upstream' of http://git.chelsio.net/pub/git/linux-firmware
  - rtl_bt: Add firmware v2 file for RTL8852C
  - Revert "rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225"
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cxgb4: Update firmware to revision 1.27.4.0
  - Merge branch 'rb3-update' of https://github.com/lumag/linux-firmware
  - Merge https://github.com/pkshih/linux-firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2012.1012
  - linux-firmware: Add URL for latest FW binaries for NXP BT chipsets
  - rtw89: 8851b: update firmware to v0.29.41.1
  - qcom: sdm845: add RB3 sensors DSP firmware
  - amdgpu: Update DMCUB for DCN314 & Yellow Carp
  - Merge branch 'dmc-adlp_2.20-mtl_2.13' of git://anongit.freedesktop.org/drm/drm-firmware
  - Merge branch 'for-upstream' of https://github.com/CirrusLogic/linux-firmware
  - ice: add LAG-supporting DDP package
  - i915: Update MTL DMC to v2.13
  - i915: Update ADLP DMC to v2.20
  - cirrus: Add CS35L41 firmware for Dell Oasis Models


author: Scott Weaver <scweaver@redhat.com> - 20230926-140
changelog:
  - [Intel 9.4 FEAT] [SPR][EMR] QAT firmware update available (rhbz 2238636)
  - [AMDCLIENT 9.4 Feature] Sub-Feature: AMD PMF Linux FW (rhbz 2227340)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amd_pmf: Add initial PMF TA for Smart PC Solution Builder
  - linux-firmware: Update FW files for MRVL PCIE 8997 chipsets
  - rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
  - iwlwifi: add new FWs from core81-65 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release
  - linux-firmware: amd-ucode: Add note on fam19h warnings
  - i915: update MTL HuC to version 8.5.4
  - amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs
  - linux-firmware: add link to sc8280xp audioreach firmware
  - qcom: sm8250: add RB5 sensors DSP firmware
  - qcom: Update vpu-1.0 firmware
  - qcom: sm8250: update DSP firmware
  - qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210
  - qcom: add venus firmware files for v6.0
  - qcom: add firmware for QRB4210 platforms
  - qcom: add firmware for QCM2290 platforms
  - qcom: add GPU firmware for QCM2290 / QRB2210
  - ath10k/WCN3990: move wlanmdsp to qcom/sdm845
  - WHENCE: Don't compress qcom json files
  - WHENCE: amd-ucode: Use new RawFile keyword
  - Create symlinks for all firmware that is duplicate using rdfind
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605
  - Fix carl9170fw shell scripts for shellcheck errors
  - i915: Update MTL DMC to v2.16
  - copy-firmware: Introduce 'RawFile' keyword
  - copy-firmware: Support additional compressor options
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: update firmware for qat_4xxx devices
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: update DMCUB to 0.0.181.0 for various AMDGPU ASICs
  - rtw89: 8852b: update fw to v0.29.29.3
  - rtw89: 8851b: update fw to v0.29.41.2
  - i915: add GSC 102.0.0.1655 for MTL
  - amdgpu: DMCUB updates for various AMDGPU asics
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cirrus: Add CS35L41 firmware for HP G11 models


author: Scott Weaver <scweaver@redhat.com> - 20231030-141
changelog:
  - CVE-2022-46329 linux-firmware: hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (RHEL-14264)
  - amd-ucode early loading broken [RHEL-15387]
  - Update to upstream 20231030 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX101
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - rtl_nic: update firmware of RTL8156B
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update SMU 13.0.0 firmware
  - linux-firmware: add Amlogic bluetooth firmware
  - i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
  - iwlwifi: add a missing FW from core80-39 release
  - WHENCE: add symlink for BananaPi M64
  - linux-firmware: Add firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - i915: Update MTL DMC to v2.17
  - amdgpu: update raven firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.7 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.8 firmware from 5.7 branch
  - amdgpu: update GC 10.3.7 firmware from 5.7 branch
  - amdgpu: update DCN 3.1.6 firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.6 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.5 firmware from 5.7 branch
  - amdgpu: update GC 10.3.6 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.0 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.0 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.0 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.0 firmware from 5.7 branch
  - amdgpu: update GC 11.0.0 firmware from 5.7 branch
  - amdgpu: update vega20 firmware from 5.7 branch
  - amdgpu: update beige goby firmware from 5.7 branch
  - amdgpu: update vega12 firmware from 5.7 branch
  - amdgpu: update vega10 firmware from 5.7 branch
  - amdgpu: update dimgrey cavefish firmware from 5.7 branch
  - amdgpu: update picasso firmware from 5.7 branch
  - amdgpu: update navy flounder firmware from 5.7 branch
  - amdgpu: update vangogh firmware from 5.7 branch
  - amdgpu: update green sardine firmware from 5.7 branch
  - amdgpu: update sienna cichlid firmware from 5.7 branch
  - amdgpu: update PSP 13.0.11 firmware from 5.7 branch
  - amdgpu: update GC 11.0.4 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.1 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.4 firmware from 5.7 branch
  - amdgpu: update GC 11.0.1 firmware from 5.7 branch
  - amdgpu: update navi14 firmware from 5.7 branch
  - amdgpu: update renoir firmware from 5.7 branch
  - amdgpu: update navi12 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.4 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.7 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.2 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.7 firmware from 5.7 branch
  - amdgpu: update GC 11.0.2 firmware from 5.7 branch
  - amdgpu: update yellow carp firmware from 5.7 branch
  - amdgpu: update navi10 firmware from 5.7 branch
  - amdgpu: update raven2 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.10 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.10 firmware from 5.7 branch
  - amdgpu: update GC 11.0.3 firmware from 5.7 branch
  - amdgpu: update aldebaran firmware from 5.7 branch
  - iwlwifi: add FWs for new GL and MA device types with multiple RF modules


author: Scott Weaver <scweaver@redhat.com> - 20240109-142
changelog:
  - [DELL 9.3 BUG]System resume failed from suspend and auto reboot with WCN6856 (1/10 fail rate) (RHEL-4431)
  - [DELL 9.3 FEAT] - linux-firmware: Include to support QCA WIFI-7 WCN7850 Module: wifi firmware support (RHEL-10212)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: update firmware for w1u_uart
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - linux-firmware: add firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: add firmware for MT7925
  - ASoC: tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ASoC: tas2781: Add dsp firmware for different laptops
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.36
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00309-
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2023 Models
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 QRD
  - qcom: Add Audio firmware for SM8550 QRD
  - wfx: update to firmware 3.17
  - wfx: fix broken firmware
  - linux-firmware: Update AMD cpu microcode
  - cxgb4: Update firmware to revision 1.27.5.0
  - linux-firmware: add firmware for en8811h 2.5G ethernet phy
  - s5p-mfc: Add MFC v12 Firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
  - ice: update ice DDP wireless_edge package to 1.3.13.0
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
  - qcom: update qrb4210 firmware
  - qcom: update qcm2290 firmware
  - qcom: update qcm2290/qrb4210 WiFi firmware file
  - qcom: update Venus firmware file for v6.0
  - powervr: add firmware for Imagination Technologies AXE-1-16M GPU
  - ice: update ice DDP comms package to 1.3.45.0
  - ice: update ice DDP package to 1.3.35.0
  - mediatek: Remove an unused packed library
  - mediatek: Sync shared memory structure changes
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
  - i915: Update MTL DMC to v2.19
  - iwlwifi: fix for the new FWs from core83-55 release
  - iwlwifi: add new FWs from core83-55 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP G11 Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on 2024 ASUS Zenbook Laptops
  - linux-firmware: add firmware for mt7988 internal 2.5G ethernet phy
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - nvidia: add GSP-RM version 535.113.01 firmware images
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qca: add bluetooth firmware for WCN3988
  - linux-firmware: ixp4xx: Add the IXP4xx firmware
  - rtw89: 8852b: update fw to v0.29.29.5
  - rtw89: 8852b: update fw to v0.29.29.4
  - rtw89: 8851b: update fw to v0.29.41.3


author: Scott Weaver <scweaver@redhat.com> - 20240219-143
changelog:
  - [AMDCLIENT 9.4 Bug] Update PHX 1/2 firmware to fix some PSR related issues (RHEL-25408)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: First GuC release for LNL and Xe
  - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
  - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
  - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
  - ice: update ice DDP package to 1.3.36.0
  - Intel IPU3 ImgU: Move firmware file under intel/ipu
  - Intel IPU6: Move firmware binaries under ipu/
  - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
  - panthor: Add initial firmware for Gen10 Arm Mali GPUs
  - amdgpu: DMCUB Updates for DCN321: 7.0.38.0
  - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
  - qcom: update venus firmware file for v5.4
  - Montage: add firmware for Mont-TSSE
  - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
  - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
  - linux-firmware: Fix filenames for some CS35L41 firmwares for HP
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
  - rtl_nic: add firmware for RTL8126A
  - linux-firmware: intel: Add IPU6 firmware binaries
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
  - qcom: Add Audio firmware for SM8550 HDK
  - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 MTP
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SDMA 5.2.7 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update SDMA 5.2.6 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: add GC 11.0.1 rlc_1 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update picasso firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update navi14 firmware
  - amdgpu: add VCN 4.0.3 firmware
  - amdgpu: add SDMA 4.4.2 firmware
  - amdgpu: add SMU 13.0.6 firmware
  - amdgpu: add PSP 13.0.6 firmware
  - amdgpu: Add GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - RTL8192E: Remove old realtek WiFi firmware
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for DCN314
  - qcom: Update the firmware for Adreno a630 family of GPUs
  - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
  - linux-firmware: update firmware for qat_4xxx devices
  - cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240603-144
changelog:
  - [AMD 9.3 FEAT]: MI300 GPU firmware (RHEL-10056)
  - CVE-2023-31346 linux-firmware: kernel: Reserved fields in guest message responses may not be zero initialized [rhel-9.4.z] (RHEL-35597)
  - linux-firmware ships encrypted zip files (named *.ncf) (RHEL-32145)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  - linux-firmware: Add tuning parameter configs for CS35L41 Firmware
  - linux-firmware: Fix firmware names for Laptop SSID 104316a3
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - iwlwifi: add gl FW for core87-44 release
  - iwlwifi: add ty/So/Ma firmwares for core87-44 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release
  - nvidia: Update Tegra210 XUSB firmware to v50.29
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update sdma 6.0.1 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update sdma 6.0.2 firmware
  - amdgpu: update ipsp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update raven firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update smu 13.0.6 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update sdma 6.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update  firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update gc 10.3.7 firmware
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9
  - Merge https://github.com/pkshih/linux-firmware into rtw
  - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file
  - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location
  - i915: Add DG2 HuC 7.10.15
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - mekdiatek: Update mt8186 SOF firmware to v2.0.1
  - rtw89: 8852c: update fw to v0.27.56.14
  - rtw89: 8922a: add firmware v0.35.18.0
  - rtw88: Add RTL8703B firmware v11.0.0
  - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops
  - Montage: update firmware for Mont-TSSE
  - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8
  - imx: sdma: update firmware to v3.6/v4.6
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: update 9000-family firmwares to core85-89
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops
  - amdgpu: Update VCN firmware binaries
  - Intel IPU2: Add firmware files
  - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
  - i915: Add Xe2LPD DMC v2.18
  - i915: Update MTL DMC v2.21
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - linux-firmware: add firmware for MT7996


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240716-145
changelog:
  - [Intel 9.5 FEAT] [SRF] QAT_402XX firmware update (RHEL-47355)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - linux-firmware: add firmware for qat_402xx devices
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - intel: avs: Add topology file for I2S Analog Devices 4567
  - intel: avs: Add topology file for I2S Nuvoton 8825
  - intel: avs: Add topology file for I2S Maxim 98927
  - intel: avs: Add topology file for I2S Maxim 98373
  - intel: avs: Add topology file for I2S Maxim 98357a
  - intel: avs: Add topology file for I2S Dialog 7219
  - intel: avs: Add topology file for I2S Realtek 5663
  - intel: avs: Add topology file for I2S Realtek 5640
  - intel: avs: Add topology file for I2S Realtek 5514
  - intel: avs: Add topology file for I2S Realtek 298
  - intel: avs: Add topology file for I2S Realtek 286
  - intel: avs: Add topology file for I2S Realtek 274
  - intel: avs: Add topology file for Digital Microphone Array
  - intel: avs: Add topology file for HDMI codecs
  - intel: avs: Add topology file for HDAudio codecs
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
  - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
  - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - linux-firmware: add new cc33xx firmware for cc33xx chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - linux-firmware: Add firmware for Lenovo Thinkbooks
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update aldebaran firmware
  Resolves: RHEL-47355


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Tao Liu <ltao@redhat.com> - 2.0.26-9
changelog:
  - Introduce a function to get reserved memory size
  - powerpc: update fadump sysfs node path
  - kdumpctl: merge check_current_{kdump,fadump}_status
  - kdumpctl: remove unnecessary uses of $?


author: Tao Liu <ltao@redhat.com> - 2.0.27-3
changelog:
  - Rebase makedumpfile to v1.7.4
  - powerpc: update kdumpctl to load kernel signing key for fadump
  - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded


author: Tao Liu <ltao@redhat.com> - 2.0.27-4
changelog:
  - kdump-lib.sh: add extra 64M to default crashkernel if sme/sev is active
  - Allow _crashkernel_add to address larger memory ranges
  - kdump-lib: Harden _crashkernel_add


author: Tao Liu <ltao@redhat.com> - 2.0.27-7
changelog:
  - Explain the auto_reset_crashkernel option in more details
  - Use the same /etc/resolve.conf in kdump initrd if it's managed manually


author: Tao Liu <ltao@redhat.com> - 2.0.27-10
changelog:
  - mkdumprd: Fix makedumpfile parameter check.
  - Install the driver of physical device for a SR-IOV virtual device
  - Try to install PHY and MDIO bus drivers explicitly


author: Tao Liu <ltao@redhat.com> - 2.0.27-13
changelog:
  - kdump-lib: Drop 'file' dependency in is_uki
  - kdumpctl.8: Add description to reset-crashkernel --reboot
  - kdumpctl: Fix misleading message and erratic reboot in reset_crashkernel
  - kdumpctl: Drop default kexec '-d' option


author: Tao Liu <ltao@redhat.com> - 2.0.26-6
changelog:
  - kdumpctl: Fix the matching of plus symbol by grep's EREs
  - kdump-lib: Evaluate the memory consumption by smmu and mlx5 separately
  - kdump-lib: add support for 64K aarch64
  - kdump-lib: Introduce parse_kver_from_path() to get kernel version from its path name
  - kdump-lib: Introduce a help function _crashkernel_add()
  - Simplify the management of the kernel parameter crashkernel
  - kdump-lib: fix the matching pattern for debug-kernel
  - kdump-lib: always specify version in is_squash_available


author: Tao Liu <ltao@redhat.com> - 2.0.26-7
changelog:
  - kdumpctl: Fix temporary directory location
  - kdump-lib: Match 64k debug kernel in prepare_kdump_bootinfo()


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Make keeping connection more reliable (jhnidek@redhat.com)
  - Small improvements of keep alive (jhnidek@redhat.com)
  - Keep TCP/TLS connection alive and close connection properly
    (jhnidek@redhat.com)
  - ENT-4700: Switch away from 'imp' (mhorky@redhat.com)
  - ENT-4088: Fix flake8 error E731 (mhorky@redhat.com)
  - ENT-4048: Fix flake8 error E501 (mhorky@redhat.com)
  - ENT-240: Add --no-progress-messages CLI option (mhorky@redhat.com)
  - ENT-240: Use spinner to indicate that API communication is pending
    (mhorky@redhat.com)
  - ENT-240: Make verbose messages translatable (mhorky@redhat.com)
  - ENT-240: Make subscription-manager more verbose (mhorky@redhat.com)
  - 2075455: enable sslverifystatus on repos if advertized by CP
    (ptoscano@redhat.com)
  - RepoUpdateActionCommand: lazy load the consumer auth (ptoscano@redhat.com)
  - 2043331: Do not delete installed SCA cert during registration
    (jhnidek@redhat.com)
  - Remove Group tag from .spec file for RHEL/Fedora (jhnidek@redhat.com)
  - 2073354: Print correct status, when access mode has changed
    (jhnidek@redhat.com)
  - flake8: ignore the build directory (ptoscano@redhat.com)
  - Remove ownership of /etc/rhsm (csnyder@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Revert "build: pin flake8 to < 4" (ptoscano@redhat.com)
  - build: simplify flake8 run (ptoscano@redhat.com)
  - flake8: improve the config a bit (ptoscano@redhat.com)
  - jenkins: run stylish.sh with -e (ptoscano@redhat.com)
  - flake8: simplify/update config (ptoscano@redhat.com)
  - tests: remove unused exception variable (ptoscano@redhat.com)
  - Drop cockpit sources & related bits (ptoscano@redhat.com)
  - cockpit: test with split subscription-manager-cockpit (ptoscano@redhat.com)
  - Remove print statements from test suite (mhorky@redhat.com)
  - Run CI's pytest with verbose flag (mhorky@redhat.com)
  - Optimize rhsmlib DBus test strings (mhorky@redhat.com)
  - Change names of some directories in test/ (mhorky@redhat.com)
  - Reorder rhsmlib tests (mhorky@redhat.com)
  - refresh: clear also the release status (ptoscano@redhat.com)
  - 2074110: clear the release cache on release change (ptoscano@redhat.com)
  - Add gcp_license_codes to system facts. (jhnidek@redhat.com)
  - Pass version to make in debian/rules using 'pkg-info.mk' (reisner@atix.de)
  - Refactored rpm-version to pkg-version (reisner@atix.de)
  - Ignore black commit hashes (mhorky@redhat.com)
  - Add check to YumPluginManager.enable_pkg_plugins() if system is using yum/dnf
    to prevent warnings on debian based systems (reisner@atix.de)
  - Extend HardwareCollector.get_distribution() to return ID and ID_LIKE
    (reisner@atix.de)
  - Format code with black==22.3.0 (mhorky@redhat.com)
  - Add Black to CI (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Fix few grammar mistakes in rhsm.conf and man page (jhnidek@redhat.com)
  - 2058662: Fix inaccurate module status in combined profile
    (jhnidek@redhat.com)
  - Add file .git-blame-ignore-revs (mhorky@redhat.com)
  - Update configuration files for flake8 (mhorky@redhat.com)
  - Use double quotes for strings (mhorky@redhat.com)
  - Format the code with black (mhorky@redhat.com)
  - Custom facts should not influence unit tests of cloud-what
    (jhnidek@redhat.com)
  - Drop redhat-uep.pem (ptoscano@redhat.com)
  - Move redhat-entitlement-authority.pem to container plugin
    (ptoscano@redhat.com)
  - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com)
  - spec: relax subscription-manager-rhsm-certificates requires
    (ptoscano@redhat.com)
  - test: Rely on insights-client.service to succeed in testSubAndInAndFail
    (mvollmer@redhat.com)
  - integration-tests: Run testSubAndInAndFail with "setenforce 0"
    (mvollmer@redhat.com)
  - integration-test: Use custom TLS certs for mock-insights
    (mvollmer@redhat.com)
  - Keep the user namespace from the host (csnyder@redhat.com)
  - tracking return values of tests (jmolet@redhat.com)
  - Adding containers for development and test (csnyder@redhat.com)
  - Drop old git-checkcommits bits (ptoscano@redhat.com)
  - tests: drop no more needed bits (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase (ptoscano@redhat.com)
  - Drop the rel-eng directory for old tito versions (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase.assertRaisesNothing()
    (ptoscano@redhat.com)
  - tests: use write_to_file_utf8() from syspurpose.utils (ptoscano@redhat.com)
  - tests: directly use tempfile.TemporaryDirectory() (ptoscano@redhat.com)
  - tests: use Capture from the main sub-man fitxure module (ptoscano@redhat.com)
  - tests: switch from assert_equal_dict() to assertEqual() (ptoscano@redhat.com)
  - tests: switch from assert_string_equals() to assertEqual()
    (ptoscano@redhat.com)
  - cockpit: bump API version to 264 (ptoscano@redhat.com)
  - cockpit: simplify skipUnlessDistroFamily() to properly skip tests
    (ptoscano@redhat.com)
  - cockpit: drop rhel-atomic bits (ptoscano@redhat.com)
  - cockpit: bump candlepin minimum waiting time to 10 seconds
    (ptoscano@redhat.com)
  - integration-test: Updates for newer insights-client (mvollmer@redhat.com)
  - 2018221: Cockpit use "Organization ID" in label (jhnidek@redhat.com)
  - 2059631: rhsm.conf: fix typo in comment (ptoscano@redhat.com)
  - 2057053: Improve API of detection of cloud-what (jhnidek@redhat.com)
  - 1935446: Revert "Revert "1935446: Use updated cert with SHA-256 algorithm""
    (ptoscano@redhat.com)
  - cockpit: set $RPM_BUILD_ROOT w/ installing (ptoscano@redhat.com)
  - 2057053: Facts: do no use heuristics detection of cloud (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Improve azure determination method (suttner@atix.de)
  - 2056896: Handle all exceptions of gathering data properly
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.29-1
changelog:
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5215: Handle all exceptions caused by network problems
    (mhorky@redhat.com)
  - ENT-5215: Handle errors raised in DNF plugin (mhorky@redhat.com)
  - Make TestProfileManager subclass of SubManFixture (mhorky@redhat.com)
  - ENT-5054: Drop singleton implementation in rhsmlib/utils.py
    (mhorky@redhat.com)
  - Rename test file for rhsm/utils.py (mhorky@redhat.com)
  - ENT-5054: Create singleton decorators in rhsm/utils.py (mhorky@redhat.com)
  - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com)
  - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com)
  - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com)
  - facts: add dmidecode parser and facts collector (ptoscano@redhat.com)
  - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com)
  - 2096446: Make 'rhsm-debug' autocomplete --no-progress-messages
    (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 2092014: Do not use injections in rhsm (mhorky@redhat.com)
  - ci: run rpmlint as part of stylish (ptoscano@redhat.com)
  - build: switch rpmlint check to rpmlint 2.x (ptoscano@redhat.com)
  - ci: drop stylish job from Jenkins (ptoscano@redhat.com)
  - ci: add black & flake8 check using GitHub Actions (ptoscano@redhat.com)
  - build: install files without exec permissions (ptoscano@redhat.com)
  - 2092014: Disable progress messages when sub-man RPM is not installed
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.30-1
changelog:
  - Fix issue, when connection is not shared (jhnidek@redhat.com)
  - Unit tests: Add stub class for SyspurposeComplianceStatusCache
    (jhnidek@redhat.com)
  - ENT-4664: Ensure tests clean up after themselves (mhorky@redhat.com)
  - Refactoring of cloud-what unit tests (jhnidek@redhat.com)
  - 2111035: Do not allow reusing TCP connection for rhsm.service
    (jhnidek@redhat.com)
  - spec: remove redundant License from python3-cloud-what (ptoscano@redhat.com)
  - Ensure tests don't fail when run under root (mhorky@redhat.com)
  - Fix issue with unit tests (jhnidek@redhat.com)
  - 2111757: Make parsing of HTTP headers more reliable (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5286: Unify environment variable evaluation (mhorky@redhat.com)
  - Use dmidecode on aarch64 (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Increase security level for zypper repos managed by sub-man (suttner@atix.de)
  - ENT-5271: Fix spelling of Candlepin API endpoint description
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.31-1
changelog:
  - warning: refname 'subscription-manager-1.29.30-1' is ambiguous.
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - tests: fix typos in test method names (ptoscano@redhat.com)
  - 2125227: Fixed incorrect registration warning with yum/dnf
    (jajerome@redhat.com)
  - 2094942: Fixed expected message for manual attach case (jajerome@redhat.com)
  - ENT-5102: Type-hint rhsmlib/facts (mhorky@redhat.com)
  - 2094942: Improve warning message (auto-attach in SCA mode)
    (jhnidek@redhat.com)
  - Update INSTALL.md (mhorky@redhat.com)
  - Remove unused classes of DBus tests (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Unregister objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Register objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Products object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of AllFacts object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Entitlement object (mhorky@redhat.com)
  - Fix typo in method name of EntitlementService (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Consumer object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Attach object (mhorky@redhat.com)
  - Fix possible parsing issues of dmidecode output (mhorky@redhat.com)
  - ENT-5317: New way to test DBus methods, starting with Config
    (mhorky@redhat.com)
  - cockpit: disable the reference branch for sub-man-cockpit
    (ptoscano@redhat.com)
  - TESTING.md: Remove mention of pytest-xdist (mhorky@redhat.com)
  - INSTALL.md: Update list of packages to be installed (mhorky@redhat.com)
  - Stop calling pytest with --failed-first (mhorky@redhat.com)
  - GCP: Better computing of cached token TTL (jhnidek@redhat.com)
  - 2101510: Fix D-Bus Register() and update entitlement certs
    (jhnidek@redhat.com)
  - 2120744: Close keycloak connection properly (jhnidek@redhat.com)
  - 2094942: [RFE] Improve the message, when  SCA is enabled (jhnidek@redhat.com)
  - Replaced list[] with List[] and dict[] with Dict[]. (jhnidek@redhat.com)
  - Update TESTING.md (mhorky@redhat.com)
  - Update README.md (mhorky@redhat.com)
  - Add INSTALL.md (mhorky@redhat.com)
  - Added type hints to package rhsmlib.service (jhnidek@redhat.com)
  - Added some missing imports. (jhnidek@redhat.com)
  - Reformated using black. (jhnidek@redhat.com)
  - Added one FIXME to redeem.py (jhnidek@redhat.com)
  - Added type hints and FIXMEs to rhsm package. (jhnidek@redhat.com)
  - [wip] ENT-5100: Type hint rhsm (mhorky@redhat.com)
  - Added type hints to syspurpose package (jhnidek@redhat.com)
  - Drop libnotify-devel usage (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.32-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - utils: import pkg_resources only when needed (ptoscano@redhat.com)
  - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)
  - Call parent methods in DBusServerStubProvider (mhorky@redhat.com)
  - Base D-Bus tests on SubManFixture (mhorky@redhat.com)
  - ENT-5532: Call rhsm-package-profile-uploader with --force-upload
    (jhnidek@redhat.com)
  - 2108549: do not detect containers in OCP as such (ptoscano@redhat.com)
  - tests: extend InContainerTests for path checks (ptoscano@redhat.com)
  - Resolved issues in PR feedback (jajerome@redhat.com)
  - Updated request handling in connection.py (jajerome@redhat.com)
  - Resolve issues from PR review (jajerome@redhat.com)
  - Removed fixme since activateMachine() is still used (jajerome@redhat.com)
  - Black/flake8 fixes (jajerome@redhat.com)
  - FIXME: renamed default argument to not shadow inbuilt type
    (jajerome@redhat.com)
  - FIXME: removed Restlib and using only BaseRestLib (jajerome@redhat.com)
  - FIXME: updated unregisterConsumer() to return True if status code is 204
    (jajerome@redhat.com)
  - FIXME: changed unbindBySerial/unbindByPoolId to return bool
    (jajerome@redhat.com)
  - FIXME: changed default value of facts in updateConsumerFacts()
    (jajerome@redhat.com)
  - FIXME: sanitized email/lang variables in activateMachine()
    (jajerome@redhat.com)
  - FIXME: made email argument required in activatemachine()
    (jajerome@redhat.com)
  - FIXME: changed default value of serials argument to None
    (jajerome@redhat.com)
  - FIXME: removed unused username/password arguments (jajerome@redhat.com)
  - FIXME: raise exceptions where sanitizing guest Id returns None
    (jajerome@redhat.com)
  - FIXME: renamed response argument to result in validateResponse()
    (jajerome@redhat.com)
  - FIXME: rename info argument to params in _request() (jajerome@redhat.com)
  - FIXME: added error message when redeeming subscription fails
    (jajerome@redhat.com)
  - FIXME: removed unused UEPConnection class methods (jajerome@redhat.com)
  - Fixed profile tests setting Package release numbers as int instead of str
    (jajerome@redhat.com)
  - FIXME: changed epoch data type to str in Package class (jajerome@redhat.com)
  - FIXME: added null-checks for stdout/stderr wrapper (jajerome@redhat.com)
  - FIXME: re-iterated a fix is not needed for urlparse (jajerome@redhat.com)
  - FIXME: added exception messages to parse_url() (jajerome@redhat.com)
  - FIXME: changed  lists to tuples in StatusSpinnerStyle class
    (jajerome@redhat.com)
  - FIXME: fixed type hints for _normalize_string() (jajerome@redhat.com)
  - FIXME: use super() instead of class name (jajerome@redhat.com)
  - FIXME: fixed strings not being translated in is_log_level_valid()
    (jajerome@redhat.com)
  - FIXME: resolved improper use of tempfile in save() (jajerome@redhat.com)
  - FIXME: fixed config_file argument not being used in save()
    (jajerome@redhat.com)
  - FIXME: updated default value for files_name argument in read()
    (jajerome@redhat.com)
  - FIXME: fixed minor typo in bogus() (jajerome@redhat.com)
  - FIXME: changed read() to return self instead of None (jajerome@redhat.com)
  - FIXME: set default argument 'facts' to None in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: renamed argument 'type' to 'consumer_type' in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: ping() resolved in rhsm/connection.py (jajerome@redhat.com)
  - Remove test dependency 'mock' (mhorky@redhat.com)
  - Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - Mark D-Bus tests (mhorky@redhat.com)
  - 2131789: Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com)
  - Catch generic OSError during HTTPSConnection.connect() (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com)
  - Catch also CertificateLoadingError for identity cert loading
    (ptoscano@redhat.com)
  - ENT-4286: Additional fix for exception handling (jajerome@redhat.com)
  - Remove D-Bus env vars from container and CI files (mhorky@redhat.com)
  - 2121350: Implement "force" register option in rhsm dbus python binding
    (jajerome@redhat.com)
  - Show locals in pytest output (mhorky@redhat.com)
  - Improve formatting of CertificateLoadingError (ptoscano@redhat.com)
  - Raise a new CertificateLoadingError on X.509 loading failures
    (ptoscano@redhat.com)
  - Improve formatting of UnknownContentException (ptoscano@redhat.com)
  - connection: improve the internal UnknownContentException
    (ptoscano@redhat.com)
  - utils: add terminal_printable_content (ptoscano@redhat.com)
  - connection: rename NetworkException to UnknownContentException
    (ptoscano@redhat.com)
  - Improve formatting of ProxyException (ptoscano@redhat.com)
  - connection: improve the internal ProxyException (ptoscano@redhat.com)
  - Improve formatting of socket.gaierror (ptoscano@redhat.com)
  - Improve formatting of ConnectionError (ptoscano@redhat.com)
  - Improve formatting of BadCertificateException (ptoscano@redhat.com)
  - connection: extend BadCertificateException w/ SSL exception
    (ptoscano@redhat.com)
  - connection: drop dead code (ptoscano@redhat.com)
  - ENT-4286: Simplify exception reporting with system_exit()
    (jajerome@redhat.com)
  - 2136694: Clear progress messages properly (mhorky@redhat.com)
  - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com)
  - 2097679: Additional fix for non-interactive parameters (jajerome@redhat.com)
  - 2097679: Fixed script hang in non-interactive execution (jajerome@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.33-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Simplify test setup for D-Bus fact collection (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-11
changelog:
  - tests: py: add dnat to port without defining destination address
  - evaluate: fix inet nat with no layer 3 info
  - include: missing sctp_chunk.h in Makefile.am
  - exthdr: Implement SCTP Chunk matching
  - scanner: sctp: Move to own scope
  - scanner: introduce start condition stack
  - json: Simplify non-tcpopt exthdr printing a bit


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-3.3
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-26
changelog:
  - Fix one-byte overflow in SSH banner processing
    Resolves: rhbz#2138345
  - Fix double free() in error path
    Resolves: rhbz#2138347


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-28
changelog:
  - Do not try to use SHA1 for host key ownership proof when we don't support it server-side
    Resolves: rhbz#2088750


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.7-16
changelog:
  - Upload new upstream sources without manually hobbling them.
  - Remove the hobbling script as it is redundant. It is now allowed to ship
    the sources of patented EC curves, however it is still made unavailable to use
    by compiling with the 'no-ec2m' Configure option. The additional forbidden
    curves such as P-160, P-192, wap-tls curves are manually removed by updating
    0011-Remove-EC-curves.patch.
  - Enable Brainpool curves.
  - Apply the changes to ec_curve.c and  ectest.c as a new patch
    0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
  - Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
  - Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.
    Resolves: rhbz#2130618, rhbz#2188180


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-19
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2169757


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-20
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211340


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


