# changelog

author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.526.2.el7uek]
changelog:
  - Revert "net/sched: Retire tcindex classifier" (Saeed Mirzamohammadi)  [Orabug: 35415066]  
  - elba.dtsi: Improved sdclk and sdclk-hsmmc timing. (David Clear)  [Orabug: 35411611]  
  - dsc-drivers: update ionic drivers to 23.04.1-001 (Dave Kleikamp)  [Orabug: 35411611]  
  - dsc-drivers: update ionic drivers to 22.11.1-001 (Dave Kleikamp)  [Orabug: 35411611]  
  - dsc-drivers: update drivers for 1.15.9-C-100 (Dave Kleikamp)  [Orabug: 35411611]  
  - kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan)  [Orabug: 35257586]  
  - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan)  [Orabug: 35257586]  
  - kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan)  [Orabug: 35257586]  
  - btrfs: scan device in non-exclusive mode (Anand Jain)  [Orabug: 35153012]  
  - btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain)  [Orabug: 35153012]  
  - SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo)  [Orabug: 34640827]  
  - KVM: nVMX: add CR4_LA57 bit to nested CR4_FIXED1 (Chenyi Qiang)  [Orabug: 32715898]  
  - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" (Liu Jian)   
  - Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" (Zhihao Cheng)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.526.2.1.el7uek]
changelog:
  - xfs: log recovery stage split EFIs with multiple extents (Wengang Wang)  [Orabug: 35490075]  
  - xfs: IO time one extent per EFI (Wengang Wang)  [Orabug: 35490075]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.527.1.el7uek]
changelog:
  - mips64: Enable CRYPTO_USER_API_SKCIPHER config (Vijay Kumar)  [Orabug: 35458816]  
  - net/rds: Fix copy&paste error (Gerd Rausch)  [Orabug: 35416949]  
  - uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy)  [Orabug: 35408336]  
  - LTS version: v4.14.316 (Saeed Mirzamohammadi)   
  - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET)   
  - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET)   
  - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy)   
  - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter)   
  - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri)   
  - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede)   
  - power: supply: leds: Fix blink to LED on transition (Hans de Goede)   
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia)   
  - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav)   
  - media: radio-shark: Add endpoint checks (Alan Stern)   
  - USB: sisusbvga: Add endpoint checks (Alan Stern)   
  - x86/mm: Avoid incomplete Global INVLPG flushes (Saeed Mirzamohammadi)   
  - USB: core: Add routines for endpoint checks in old drivers (Alan Stern)   
  - selftests/memfd: Fix unknown type name build failure (Hardik Garg)   
  - netfilter: nf_tables: fix register ordering (Florian Westphal)   
  - netfilter: nf_tables: do not allow SET_ID to refer to another table (Pablo Neira Ayuso)   
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Pablo Neira Ayuso)   
  - netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL (Pablo Neira Ayuso)   
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso)   
  - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso)   
  - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso)   
  - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso)   
  - parisc: Allow to reboot machine after system halt (Helge Deller)   
  - m68k: Move signal frame following exception on 68020/030 (Finn Thain)   
  - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy)   
  - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy)   
  - spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode (Rasmus Villemoes)   
  - netfilter: nf_tables: bogus EBUSY in helper removal from transaction (Pablo Neira Ayuso)   
  - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi)   
  - ceph: force updating the msg pointer in non-split case (Xiubo Li)   
  - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin)   
  - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich)   
  - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale)   
  - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai)   
  - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon)   
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet)   
  - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov)   
  - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET)   
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen)   
  - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou)   
  - vsock: avoid to close connected socket after the timeout (Zhuang Shengen)   
  - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-König)   
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner)   
  - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny)   
  - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning)   
  - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat)   
  - Input: xpad - add constants for GIP interface numbers (Vicki Pfau)   
  - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann)   
  - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng)   
  - sched: Fix KCSAN noinstr violation (Josh Poimboeuf)   
  - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren)   
  - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke)   
  - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld)   
  - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera)   
  - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera)   
  - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann)   
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Min Li)   
  - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede)   
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo)   
  - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi)   
  - gfs2: Fix inode height consistency check (Andreas Gruenbacher)   
  - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang)   
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen)   
  - net: Catch invalid index in XPS mapping (Nick Child)   
  - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor)   
  - ext2: Check block size validity during mount (Jan Kara)   
  - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin)   
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red)   
  - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein)   
  - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein)   
  - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf)   
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang)   
  - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein)   
  - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa)   
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima)   
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng)   
  - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet)   
  - netlink: annotate accesses to nlk->cb_running (Eric Dumazet)   
  - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima)   
  - LTS version: v4.14.315 (Saeed Mirzamohammadi)   
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa)   
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa)   
  - drbd: correctly submit flush bio on barrier (Christoph Böhmwalder)   
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen)   
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen)   
  - perf bench: Share some global variables to fix build with gcc 10 (Arnaldo Carvalho de Melo)   
  - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o)   
  - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o)   
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o)   
  - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o)   
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o)   
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)   
  - HID: wacom: Set a default resolution for older tablets (Ping Cheng)   
  - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski)   
  - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap)   
  - sh: math-emu: fix macro redefined warning (Randy Dunlap)   
  - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek)   
  - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova)   
  - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana)   
  - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong)   
  - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring)   
  - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain)   
  - ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (Ruliang Lin)   
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima)   
  - net/sched: act_mirred: Add carrier check (Victor Nogueira)   
  - writeback: fix call of incorrect macro (Maxim Korotkov)   
  - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang)   
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: bogus EBUSY when deleting set after flush (Pablo Neira Ayuso)   
  - netfilter: nf_tables: use-after-free in failing rule with bound set (Pablo Neira Ayuso)   
  - netfilter: nft_hash: fix nft_hash_deactivate (Pablo Neira Ayuso)   
  - netfilter: nf_tables: unbind set in rule from commit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: split set destruction in deactivate and destroy phase (Florian Westphal)   
  - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter)   
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer)   
  - dm flakey: fix a crash with invalid table line (Mikulas Patocka)   
  - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer)   
  - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland)   
  - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo)   
  - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz)   
  - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith)   
  - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi)   
  - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi)   
  - parisc: Fix argument pointer in real64_call_asm() (Helge Deller)   
  - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea)   
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui)   
  - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust)   
  - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey)   
  - clk: add missing of_node_put() in "assigned-clocks" property parsing (Clément Léger)   
  - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel)   
  - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova)   
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong)   
  - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch)   
  - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap)   
  - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/wii: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap)   
  - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He)   
  - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash)   
  - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann)   
  - serial: 8250: Add missing wakeup event reporting (Florian Fainelli)   
  - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang)   
  - usb: chipidea: fix missing goto in `ci_hdrc_probe` (Yinhao Hu)   
  - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz)   
  - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Saeed Mirzamohammadi)   
  - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap)   
  - of: Fix modalias string generation (Miquel Raynal)   
  - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy)   
  - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap)   
  - pstore: Revert pmsg_lock back to a normal mutex (John Stultz)   
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima)   
  - net: amd: Fix link leak when verifying config failed (Gencen Gan)   
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan)   
  - ixgbe: Enable setting RSS table to default values (Joe Damato)   
  - ixgbe: Allow flow hash to be set via ethtool (Joe Damato)   
  - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg)   
  - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach)   
  - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai)   
  - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov)   
  - scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie)   
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet)   
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet)   
  - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko)   
  - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn)   
  - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin)   
  - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter)   
  - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov)   
  - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg)   
  - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar)   
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang)   
  - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak)   
  - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter)   
  - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang)   
  - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley)   
  - drm/vgem: add missing mutex_destroy (Maíra Canal)   
  - drm/rockchip: Drop unbalanced obj unref (Rob Clark)   
  - selinux: ensure av_permissions.h is built when needed (Paul Moore)   
  - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek)   
  - ubifs: Free memory for tmpfile name (Mårten Lindahl)   
  - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing)   
  - i2c: omap: Fix standard mode false ACK readings (Reid Tonking)   
  - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu)   
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg)   
  - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang)   
  - staging: iio: resolver: ads1210: fix config mode (Nuno Sá)   
  - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo)   
  - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold)   
  - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlström)   
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Arınç ÜNAL)   
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li)   
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.527.2.el7uek]
changelog:
  - Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" (Greg Kroah-Hartman)   
  - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings)   
  - selinux: don't use make's grouped targets feature yet (Paul Moore)   
  - xfs: log recovery stage split EFIs with multiple extents (Wengang Wang)  [Orabug: 35475139]  
  - xfs: IO time one extent per EFI (Wengang Wang)  [Orabug: 35475139]  
  - uek_kabi: Add UEK_KABI_DEPRECATE_ENUM (Sherry Yang)  [Orabug: 35469884]  
  - bnxt_en: Clear DEFRAG flag in firmware message when retry flashing. (Pavan Chebbi)  [Orabug: 35406837]  
  - bnxt_en: Enable batch mode when using HWRM_NVM_MODIFY to flash packages. (Michael Chan)  [Orabug: 35406837]  
  - bnxt_en: Retry installing FW package under NO_SPACE error condition. (Pavan Chebbi)  [Orabug: 35406837]  
  - bnxt_en: Restructure bnxt_flash_package_from_fw_obj() to execute in a loop. (Pavan Chebbi)  [Orabug: 35406837]  
  - bnxt_en: Rearrange the logic in bnxt_flash_package_from_fw_obj(). (Michael Chan)  [Orabug: 35406837]  
  - bnxt_en: Refactor bnxt_flash_nvram. (Pavan Chebbi)  [Orabug: 35406837]  
  - bnxt_en: fix error handling when flashing from file (Edwin Peer)  [Orabug: 35406837]  
  - bnxt_en: Fix return code to "flash_device". (Vasundhara Volam)  [Orabug: 35406837]  
  - bnxt_en: Return -EAGAIN if fw command returns BUSY (Vasundhara Volam)  [Orabug: 35406837]  
  - bnxt_en: Convert error code in firmware message response to standard code. (Michael Chan)  [Orabug: 35406837]  
  - bnxt_en: return proper error when FW returns HWRM_ERR_CODE_RESOURCE_ACCESS_DENIED (Vasundhara Volam)  [Orabug: 35406837]  
  - bnxt_en: Use a common function to print the same ethtool -f error message. (Michael Chan)  [Orabug: 35406837]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.526.1.el7uek]
changelog:
  - mm, compaction: Skip all pinned pages during scan (Khalid Aziz)  [Orabug: 35300710]  
  - LTS version: v4.14.314 (Saeed Mirzamohammadi)   
  - ASN.1: Fix check for strdup() success (Ekaterina Orlova)   
  - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (Dan Carpenter)   
  - counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray)   
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima)   
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima)   
  - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). (Kuniyuki Iwashima)   
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima)   
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima)   
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)   
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani)   
  - Revert "ext4: fix use-after-free in ext4_xattr_set_entry" (Tudor Ambarus)   
  - x86/purgatory: Don't generate debug info for purgatory.ro (Pingfan Liu)   
  - memstick: fix memory leak if card device is never registered (Greg Kroah-Hartman)   
  - nilfs2: initialize unused bytes in segment summary blocks (Ryusuke Konishi)   
  - xen/netback: use same error messages for same errors (Juergen Gross)   
  - s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (Heiko Carstens)   
  - net: dsa: b53: mmap: add phy ops (Álvaro Fernández Rojas)   
  - scsi: core: Improve scsi_vpd_inquiry() checks (Damien Le Moal)   
  - scsi: megaraid_sas: Fix fw_crash_buffer_show() (Tomas Henzl)   
  - selftests: sigaltstack: fix -Wuninitialized (Nick Desaulniers)   
  - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (Douglas Raillard)   
  - e1000e: Disable TSO on i219-LM card to increase speed (Sebastian Basierski)   
  - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (Nikita Zhandarovich)   
  - i40e: fix i40e_setup_misc_vector() error handling (Aleksandr Loktionov)   
  - i40e: fix accessing vsi->active_filters without holding lock (Aleksandr Loktionov)   
  - virtio_net: bugfix overflow inside xdp_linearize_page() (Xuan Zhuo)   
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung)   
  - ARM: dts: rockchip: fix a typo error for rk3288 spdif node (Jianqun Xu)   
  - LTS version: v4.14.313 (Saeed Mirzamohammadi)   
  - arm64: KVM: Fix system register enumeration (Marc Zyngier)   
  - KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (Dave Martin)   
  - KVM: arm64: Factor out core register ID enumeration (Dave Martin)   
  - coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Steve Clevenger)   
  - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (George Cherian)   
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long)   
  - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng)   
  - verify_pefile: relax wrapper length check (Robbie Harwood)   
  - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Hans de Goede)   
  - i2c: imx-lpi2c: clean rx/tx buffers upon new message (Alexander Stein)   
  - net: macb: fix a memory corruption in extended buffer descriptor mode (Roman Gushchin)   
  - qlcnic: check pci_reset_function result (Denis Plotnikov)   
  - niu: Fix missing unwind goto in niu_alloc_channels() (Harshit Mogalapalli)   
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang)   
  - mtdblock: tolerate corrected bit-flips (Bang Li)   
  - Bluetooth: Fix race condition in hidp_session_thread (Min Li)   
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Luiz Augusto von Dentz)   
  - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (Oswald Buddenhagen)   
  - ALSA: i2c/cs8427: fix iec958 mixer control deactivation (Oswald Buddenhagen)   
  - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (Oswald Buddenhagen)   
  - ALSA: emu10k1: fix capture interrupt handler unlinking (Oswald Buddenhagen)   
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Rongwei Wang)   
  - ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian)   
  - ftrace: Mark get_lock_parent_ip() __always_inline (John Keeping)   
  - perf/core: Fix the same task check in perf_event_set_output (Kan Liang)   
  - nilfs2: fix sysfs interface lifetime (Ryusuke Konishi)   
  - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (Ryusuke Konishi)   
  - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (Biju Das)   
  - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (William Breathitt Gray)   
  - USB: serial: option: add Quectel RM500U-CN modem (Bjørn Mork)   
  - USB: serial: option: add Telit FE990 compositions (Enrico Sau)   
  - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (Kees Jan Koster)   
  - gpio: davinci: Add irq chip flag to skip set wake (Dhruva Gole)   
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb() (Ziyang Xuan)   
  - icmp: guard against too small mtu (Eric Dumazet)   
  - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau)   
  - pwm: cros-ec: Explicitly set .polarity in .get_state() (Uwe Kleine-König)   
  - LTS version: v4.14.312 (Saeed Mirzamohammadi)   
  - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (Harshit Mogalapalli)   
  - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983585] {CVE-2023-23454}
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin)   
  - usb: host: ohci-pxa27x: Fix and & vs | typo (Dan Carpenter)   
  - s390/uaccess: add missing earlyclobber annotations to __clear_user() (Heiko Carstens)   
  - drm/etnaviv: fix reference leak when mmaping imported buffer (Lucas Stach)   
  - ALSA: usb-audio: Fix regression on detection of Roland VS-100 (Takashi Iwai)   
  - ALSA: hda/conexant: Partial revert of a quirk for Lenovo (Takashi Iwai)   
  - pinctrl: at91-pio4: fix domain name assignment (Johan Hovold)   
  - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp)   
  - Input: focaltech - use explicitly signed char type (Jason A. Donenfeld)   
  - i40e: fix registers dump after run ethtool adapter self test (Radoslaw Tyl)   
  - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Ivan Orlov)   
  - scsi: megaraid_sas: Fix crash after a double completion (Tomas Henzl)   
  - fbdev: au1200fb: Fix potential divide by zero (Wei Chen)   
  - fbdev: lxfb: Fix potential divide by zero (Wei Chen)   
  - fbdev: intelfb: Fix potential divide by zero (Wei Chen)   
  - fbdev: nvidia: Fix potential divide by zero (Wei Chen)   
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized (Linus Torvalds)   
  - fbdev: tgafb: Fix potential divide by zero (Wei Chen)   
  - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Kuninori Morimoto)   
  - ALSA: asihpi: check pao in control_message() (Kuninori Morimoto)   
  - md: avoid signed overflow in slot_store() (NeilBrown)   
  - ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel)   
  - sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot)   
  - sched/fair: sanitize vruntime of entity being placed (Zhang Qiao)   
  - dm crypt: add cond_resched() to dmcrypt_write() (Mikulas Patocka)   
  - dm stats: check for and propagate alloc_percpu failure (Jiasheng Jiang)   
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen)   
  - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Ryusuke Konishi)   
  - usb: chipidea: core: fix possible concurrent when switch role (Xu Yang)   
  - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (Xu Yang)   
  - igb: revert rtnl_lock() that causes deadlock (Lin Ma)   
  - usb: gadget: u_audio: don't let userspace block driver unbind (Alvin Šipraga)   
  - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (Joel Selvaraj)   
  - sh: sanitize the flags on sigreturn (Al Viro)   
  - net: usb: qmi_wwan: add Telit 0x1080 composition (Enrico Sau)   
  - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (Enrico Sau)   
  - scsi: ufs: core: Add soft dependency on governor_simpleondemand (Adrien Thierry)   
  - scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi)   
  - m68k: Only force 030 bus error if PC not in exception table (Michael Schmitz)   
  - ca8210: fix mac_len negative array access (Alexander Aring)   
  - riscv: Bump COMMAND_LINE_SIZE value to 1024 (Alexandre Ghiti)   
  - thunderbolt: Use const qualifier for `ring_interrupt_index` (Mario Limonciello)   
  - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (Yaroslav Furman)   
  - hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs (Frank Crawford)   
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Zheng Wang)   
  - Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Stephan Gerhold)   
  - net: mdio: thunder: Add missing fwnode_handle_put() (Liang He)   
  - hvc/xen: prevent concurrent accesses to the shared ring (Roger Pau Monne)   
  - atm: idt77252: fix kmemleak when rmmod idt77252 (Li Zetao)   
  - net/mlx5: Read the TC mapping of all priorities on ETS query (Maher Sanalla)   
  - bpf: Adjust insufficient default bpf_jit_limit (Daniel Borkmann)   
  - net/ps3_gelic_net: Use dma_mapping_error (Geoff Levand)   
  - net/ps3_gelic_net: Fix RX sk_buff length (Geoff Levand)   
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang)   
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang)   
  - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Daniil Tatianin)   
  - net: usb: smsc95xx: Limit packet length to skb->len (Szymon Heidrich)   
  - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Yu Kuai)   
  - i2c: imx-lpi2c: check only for enabled interrupt flags (Alexander Stein)   
  - igbvf: Regard vf reset nack as success (Akihiko Odaki)   
  - intel/igbvf: free irq on the error path in igbvf_request_msix() (Gaosheng Cui)   
  - iavf: fix inverted Rx hash condition leading to disabled hash (Alexander Lobakin)   
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang)   
  - LTS version: v4.14.311 (Saeed Mirzamohammadi)   
  - HID: uhid: Over-ride the default maximum data buffer value with our own (Lee Jones)   
  - HID: core: Provide new max_buffer_size attribute to over-ride the default (Lee Jones)   
  - serial: 8250_em: Fix UART port type (Biju Das)   
  - drm/i915: Don't use stolen memory for ring buffers with LLC (John Harrison)   
  - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (Helge Deller)   
  - ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin)   
  - sh: intc: Avoid spurious sizeof-pointer-div warning (Michael Karcher)   
  - ext4: fix task hung in ext4_xattr_delete_inode (Baokun Li)   
  - ext4: fail ext4_iget if special inode unallocated (Baokun Li)   
  - mmc: atmel-mci: fix race between stop command and start of next command (Tobias Schramm)   
  - media: m5mols: fix off-by-one loop termination error (Linus Torvalds)   
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang)   
  - hwmon: (adt7475) Fix masking of hysteresis registers (Tony O'Brien)   
  - hwmon: (adt7475) Display smoothing attributes in correct order (Tony O'Brien)   
  - ethernet: sun: add check for the mdesc_grab() (Liang He)   
  - net/iucv: Fix size of interrupt data (Alexandra Winter)   
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Szymon Heidrich)   
  - ipv4: Fix incorrect table ID in IOCTL path (Ido Schimmel)   
  - block: sunvdc: add check for mdesc_grab() returning NULL (Liang He)   
  - nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal)   
  - net: usb: smsc75xx: Limit packet length to skb->len (Szymon Heidrich)   
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang)   
  - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (Heiner Kallweit)   
  - net: tunnels: annotate lockless accesses to dev->needed_headroom (Eric Dumazet)   
  - qed/qed_dev: guard against a possible division by zero (Daniil Tatianin)   
  - nfc: pn533: initialize struct pn533_out_arg properly (Fedor Pchelkin)   
  - tcp: tcp_make_synack() can be called from process context (Breno Leitao)   
  - fs: sysfs_emit_at: Remove PAGE_SIZE alignment check (Eric Biggers)   
  - ext4: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers)   
  - LTS version: v4.14.310 (Saeed Mirzamohammadi)   
  - drm/i915: Don't use BAR mappings for ring buffers with LLC (John Harrison)   
  - tipc: improve function tipc_wait_for_cond() (Tung Nguyen)   
  - media: ov5640: Fix analogue gain control (Paul Elder)   
  - PCI: Add SolidRun vendor ID (Alvaro Karsz)   
  - macintosh: windfarm: Use unsigned type for 1-bit bitfields (Nathan Chancellor)   
  - alpha: fix R_ALPHA_LITERAL reloc for large modules (Edward Humes)   
  - MIPS: Fix a compilation issue (xurui)   
  - net: caif: Fix use-after-free in cfusbl_device_notify() (Shigeru Yoshida)   
  - ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() (Eric Dumazet)   
  - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (Kang Chen)   
  - nfc: change order inside nfc_se_io error path (Fedor Pchelkin)   
  - ext4: zero i_disksize when initializing the bootloader inode (Zhihao Cheng)   
  - ext4: fix WARNING in ext4_update_inline_data (Ye Bin)   
  - ext4: move where set the MAY_INLINE_DATA flag is set (Ye Bin)   
  - ext4: fix another off-by-one fsmap error on 1k block filesystems (Darrick J. Wong)   
  - ext4: fix RENAME_WHITEOUT handling for inline directories (Eric Whitney)   
  - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (Andrew Cooper)   
  - LTS version: v4.14.309 (Saeed Mirzamohammadi)   
  - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (Philipp Hortmann)   
  - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (Philipp Hortmann)   
  - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" (Hector Martin)   
  - LTS version: v4.14.308 (Saeed Mirzamohammadi)   
  - thermal: intel: powerclamp: Fix cur_state for multi package system (Srinivas Pandruvada)   
  - tcp: Fix listen() regression in 4.14.303. (Kuniyuki Iwashima)   
  - s390/setup: init jump labels before command line parsing (Vasily Gorbik)   
  - s390/maccess: add no DAT mode to kernel_write (Vasily Gorbik)   
  - Bluetooth: hci_sock: purge socket queues in the destruct() callback (Nguyen Dinh Phi)   
  - phy: rockchip-typec: Fix unsigned comparison with less than zero (Jiapeng Chong)   
  - usb: uvc: Enumerate valid values for color matching (Daniel Scally)   
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook)   
  - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (Kees Cook)   
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (Harshit Mogalapalli)   
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (Harshit Mogalapalli)   
  - tools/iio/iio_utils:fix memory leak (Yulong Zhang)   
  - tty: serial: fsl_lpuart: disable the CTS when send break signal (Sherry Sun)   
  - tty: fix out-of-bounds access in tty_driver_lookup_tty() (Sven Schnelle)   
  - media: uvcvideo: Handle cameras with invalid descriptors (Ricardo Ribalda)   
  - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (Darrell Kavanagh)   
  - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (Jia-Ju Bai)   
  - thermal: intel: quark_dts: fix error pointer dereference (Dan Carpenter)   
  - scsi: ipr: Work around fortify-string warning (Arnd Bergmann)   
  - tcp: tcp_check_req() can be called from process context (Eric Dumazet)   
  - ARM: dts: spear320-hmi: correct STMPE GPIO compatible (Krzysztof Kozlowski)   
  - nfc: fix memory leak of se_io context in nfc_genl_se_io (Fedor Pchelkin)   
  - 9p/xen: fix connection sequence (Juergen Gross)   
  - 9p/xen: fix version parsing (Juergen Gross)   
  - net: fix __dev_kfree_skb_any() vs drop monitor (Eric Dumazet)   
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua)   
  - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (Li Hua)   
  - watchdog: Fix kmemleak in watchdog_cdev_register (Chen Jun)   
  - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (ruanjinjie)   
  - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list (Ammar Faizi)   
  - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed (Zhihao Cheng)   
  - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() (Zhihao Cheng)   
  - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (Zhihao Cheng)   
  - ubifs: dirty_cow_znode: Fix memleak in error handling path (Zhihao Cheng)   
  - ubifs: Re-statistic cleaned znode count if commit failed (Zhihao Cheng)   
  - ubi: Fix possible null-ptr-deref in ubi_free_volume() (Yang Yingliang)   
  - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (Li Zetao)   
  - ubi: Fix use-after-free when volume resizing failed (Li Zetao)   
  - ubifs: Reserve one leb for each journal head while doing budget (Zhihao Cheng)   
  - ubifs: Fix wrong dirty space budget for dirty inode (Zhihao Cheng)   
  - ubifs: Rectify space budget for ubifs_xrename() (Zhihao Cheng)   
  - ubi: ensure that VID header offset + VID header size <= alloc, size (George Kennedy)   
  - pwm: stm32-lp: fix the check on arr and cmp registers update (Fabrice Gasnier)   
  - fs/jfs: fix shift exponent db_agl2size negative (Liu Shixin via Jfs-discussion)   
  - net/sched: Retire tcindex classifier (Jamal Hadi Salim)   
  - kbuild: Port silent mode detection to future gnu make. (Dmitry Goncharov)   
  - drm/radeon: Fix eDP for single-display iMac11,2 (Mark Hawrylak)   
  - PCI: Avoid FLR for AMD FCH AHCI adapters (Damien Le Moal)   
  - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl)   
  - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl)   
  - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl)   
  - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl)   
  - scsi: ses: Don't attach if enclosure has no components (James Bottomley)   
  - scsi: qla2xxx: Fix erroneous link down (Quinn Tran)   
  - scsi: qla2xxx: Fix link failure in NPIV environment (Quinn Tran)   
  - ktest.pl: Fix missing "end_monitor" when machine check fails (Steven Rostedt)   
  - mips: fix syscall_get_nr (Elvira Khabirova)   
  - alpha: fix FEN fault handling (Al Viro)   
  - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ilya Dryomov)   
  - ARM: dts: exynos: correct TMU phandle in Odroid XU (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct TMU phandle in Exynos4 (Krzysztof Kozlowski)   
  - dm flakey: don't corrupt the zero page (Mikulas Patocka)   
  - dm flakey: fix logic when corrupting a bio (Mikulas Patocka)   
  - wifi: cfg80211: Fix use after free for wext (Alexander Wetzel)   
  - wifi: rtl8xxxu: Use a longer retry limit of 48 (Bitterblue Smith)   
  - ext4: refuse to create ea block when umounted (Jun Nie)   
  - ext4: optimize ea_inode block expansion (Jun Nie)   
  - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (Dmitry Fomin)   
  - irqdomain: Drop bogus fwspec-mapping error handling (Johan Hovold)   
  - irqdomain: Fix disassociation race (Johan Hovold)   
  - irqdomain: Fix association race (Johan Hovold)   
  - ima: Align ima_file_mmap() parameters with mmap_file LSM hook (Roberto Sassu)   
  - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (KP Singh)   
  - x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD))   
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (Borislav Petkov (AMD))   
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (Borislav Petkov (AMD))   
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (Yang Jihong)   
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (Yang Jihong)   
  - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (Sean Christopherson)   
  - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (Sean Christopherson)   
  - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (Sean Christopherson)   
  - udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara)   
  - udf: Do not update file length for failed writes to inline files (Jan Kara)   
  - udf: Do not bother merging very long extents (Jan Kara)   
  - udf: Truncate added extents on failed expansion (Jan Kara)   
  - ocfs2: fix non-auto defrag path not working issue (Heming Zhao via Ocfs2-devel)   
  - ocfs2: fix defrag path triggering jbd2 ASSERT (Heming Zhao via Ocfs2-devel)   
  - f2fs: fix information leak in f2fs_move_inline_dirents() (Eric Biggers)   
  - fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu)   
  - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (Liu Shixin)   
  - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (Vasily Gorbik)   
  - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (Vasily Gorbik)   
  - rtc: pm8xxx: fix set-alarm race (Johan Hovold)   
  - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (Jun ASAKA)   
  - spi: bcm63xx-hsspi: Fix multi-bit mode setting (William Zhang)   
  - dm cache: add cond_resched() to various workqueue loops (Mike Snitzer)   
  - dm thin: add cond_resched() to various workqueue loops (Mike Snitzer)   
  - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (Claudiu Beznea)   
  - regulator: s5m8767: Bounds check id indexing into arrays (Kees Cook)   
  - regulator: max77802: Bounds check regulator id against opmode (Kees Cook)   
  - ASoC: kirkwood: Iterate over array indexes instead of using pointer math (Kees Cook)   
  - docs/scripts/gdb: add necessary make scripts_gdb step (Jakob Koschel)   
  - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang)   
  - drm/radeon: free iio for atombios when driver shutdown (Liwei Song)   
  - ACPI: video: Fix Lenovo Ideapad Z570 DMI match (Hans de Goede)   
  - m68k: Check syscall_trace_enter() return code (Michael Schmitz)   
  - net: bcmgenet: Add a check for oversized packets (Florian Fainelli)   
  - ACPI: Don't build ACPICA with '-Os' (Mark Rutland)   
  - inet: fix fast path in __inet_hash_connect() (Pietro Borrello)   
  - timers: Prevent union confusion from unexpected restart_syscall() (Jann Horn)   
  - thermal: intel: Fix unsigned comparison with less than zero (Yang Li)   
  - rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() (Paul E. McKenney)   
  - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (Jisoo Jang)   
  - ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (Markuss Broks)   
  - udf: Define EFSCORRUPTED error code (Jan Kara)   
  - rpmsg: glink: Avoid infinite loop on intent for missing channel (Bjorn Andersson)   
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb (Duoming Zhou)   
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou) [Orabug: 35181651] {CVE-2023-1118}
  - media: platform: ti: Add missing check for devm_regulator_get (Jiasheng Jiang)   
  - MIPS: vpe-mt: drop physical_memsize (Randy Dunlap)   
  - powerpc/pseries/lparcfg: add missing RTAS retry status handling (Nathan Lynch)   
  - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (Frederic Barrat)   
  - Input: ads7846 - don't check penirq immediately for 7845 (Luca Ellero)   
  - Input: ads7846 - don't report pressure for ads7845 (Luca Ellero)   
  - mtd: rawnand: sunxi: Fix the size of the last OOB region (Samuel Holland)   
  - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (Qiheng Lin)   
  - dm: remove flush_scheduled_work() during local_exit() (Mike Snitzer)   
  - scsi: aic94xx: Add missing check for dma_map_single() (Jiasheng Jiang)   
  - hwmon: (ltc2945) Handle error case in ltc2945_value_store (Jonathan Cormier)   
  - gpio: vf610: connect GPIO label to dev name (Haibo Chen)   
  - ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() (Kuninori Morimoto)   
  - drm/mediatek: Drop unbalanced obj unref (Rob Clark)   
  - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (Daniel Mentz)   
  - ALSA: hda/ca0132: minor fix for allocation size (Alexey V. Vissarionov)   
  - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (Miaoqian Lin)   
  - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang)   
  - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (Liang He)   
  - drm/bridge: megachips: Fix error handling in i2c_register_driver() (Yuan Can)   
  - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (Geert Uytterhoeven)   
  - irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts (Florian Fainelli)   
  - can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error (Frank Jungclaus)   
  - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (Dan Carpenter)   
  - m68k: /proc/hardware should depend on PROC_FS (Randy Dunlap)   
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete (Herbert Xu)   
  - Bluetooth: L2CAP: Fix potential user-after-free (Luiz Augusto von Dentz)   
  - cpufreq: davinci: Fix clk use after free (Uwe Kleine-König)   
  - irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe (Miaoqian Lin)   
  - irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains (Miaoqian Lin)   
  - net/mlx5: Enhance debug print in page allocation failure (Jack Morgenstein)   
  - crypto: seqiv - Handle EBUSY correctly (Herbert Xu)   
  - ACPI: battery: Fix missing NUL-termination with large strings (Armin Wolf)   
  - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (Minsuk Kang)   
  - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (Fedor Pchelkin)   
  - wifi: orinoco: check return value of hermes_write_wordrec() (Alexey Kodanev)   
  - ACPICA: nsrepair: handle cases without a return value correctly (Daniil Tatianin)   
  - lib/mpi: Fix buffer overrun when SG is too long (Herbert Xu)   
  - genirq: Fix the return type of kstat_cpu_irqs_sum() (Zhen Lei)   
  - wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (Zhengchao Shao)   
  - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (Zhang Changzhong)   
  - wifi: ipw2200: fix memory leak in ipw_wdev_init() (Zhengchao Shao)   
  - wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: libertas: fix memory leak in lbs_init_adapter() (Zhengchao Shao)   
  - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (Neil Armstrong)   
  - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (Neil Armstrong)   
  - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (Neil Armstrong)   
  - ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato (Krzysztof Kozlowski)   
  - ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (Yang Yingliang)   
  - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (Martin Blumenstingl)   
  - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (Martin Blumenstingl)   
  - ARM: zynq: Fix refcount leak in zynq_early_slcr_init (Qiheng Lin)   
  - ARM: OMAP2+: Fix memory leak in realtime_counter_init() (Chen Hui)   
  - HID: asus: use spinlock to safely schedule workers (Pietro Borrello) [Orabug: 35181604] {CVE-2023-1079}
  - HID: asus: use spinlock to protect concurrent accesses (Pietro Borrello)   
  - HID: asus: Remove check for same LED brightness on set (Luke D. Jones)   
  - USB: core: Don't hold device lock while reading the "descriptors" sysfs file (Alan Stern)   
  - USB: serial: option: add support for VW/Skoda "Carstick LTE" (Florian Zumbiehl)   
  - dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size (Jiasheng Jiang)   
  - bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann)   
  - bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann) [Orabug: 33041998] {CVE-2021-3600}
  - bpf: fix subprog verifier bypass by div/mod by 0 exception (Daniel Borkmann)   
  - bpf: Do not use ax register in interpreter on div/mod (Daniel Borkmann)   
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima)   
  - IB/hfi1: Assign npages earlier (Dean Luick)   
  - btrfs: send: limit number of clones and allocated memory size (David Sterba)   
  - ARM: dts: rockchip: add power-domains property to dp node on rk3288 (Johan Jonker)   
  - LTS version: v4.14.307 (Saeed Mirzamohammadi)   
  - wifi: mwifiex: Add missing compatible string for SD8787 (Lukas Wunner)   
  - uaccess: Add speculation barrier to copy_from_user() (Dave Hansen)   
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN (Thomas Gleixner)   
  - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 (Sean Anderson)   
  - random: always mix cycle counter in add_latent_entropy() (Jason A. Donenfeld)   
  - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G (Sean Anderson)   
  - wifi: rtl8xxxu: gen2: Turn on the rate control (Bitterblue Smith)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.527.1.el7uek]
changelog:
  - mips64: Enable CRYPTO_USER_API_SKCIPHER config (Vijay Kumar)  [Orabug: 35458816]  
  - net/rds: Fix copy&paste error (Gerd Rausch)  [Orabug: 35416949]  
  - uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy)  [Orabug: 35408336]  
  - LTS version: v4.14.316 (Saeed Mirzamohammadi)   
  - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET)   
  - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET)   
  - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy)   
  - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter)   
  - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri)   
  - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede)   
  - power: supply: leds: Fix blink to LED on transition (Hans de Goede)   
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia)   
  - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav)   
  - media: radio-shark: Add endpoint checks (Alan Stern)   
  - USB: sisusbvga: Add endpoint checks (Alan Stern)   
  - x86/mm: Avoid incomplete Global INVLPG flushes (Saeed Mirzamohammadi)   
  - USB: core: Add routines for endpoint checks in old drivers (Alan Stern)   
  - selftests/memfd: Fix unknown type name build failure (Hardik Garg)   
  - netfilter: nf_tables: fix register ordering (Florian Westphal)   
  - netfilter: nf_tables: do not allow SET_ID to refer to another table (Pablo Neira Ayuso)   
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Pablo Neira Ayuso)   
  - netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL (Pablo Neira Ayuso)   
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [Orabug: 34362007] {CVE-2022-34918}
  - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso)   
  - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso)   
  - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso)   
  - parisc: Allow to reboot machine after system halt (Helge Deller)   
  - m68k: Move signal frame following exception on 68020/030 (Finn Thain)   
  - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy)   
  - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy)   
  - spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode (Rasmus Villemoes)   
  - netfilter: nf_tables: bogus EBUSY in helper removal from transaction (Pablo Neira Ayuso)   
  - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi)   
  - ceph: force updating the msg pointer in non-split case (Xiubo Li)   
  - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin)   
  - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich)   
  - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale)   
  - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai)   
  - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon)   
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet)   
  - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov)   
  - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET)   
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen)   
  - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou)   
  - vsock: avoid to close connected socket after the timeout (Zhuang Shengen)   
  - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-König)   
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner)   
  - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny)   
  - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning)   
  - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat)   
  - Input: xpad - add constants for GIP interface numbers (Vicki Pfau)   
  - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann)   
  - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng)   
  - sched: Fix KCSAN noinstr violation (Josh Poimboeuf)   
  - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren)   
  - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke)   
  - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld)   
  - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera)   
  - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera)   
  - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann)   
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Min Li)   
  - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede)   
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo)   
  - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi)   
  - gfs2: Fix inode height consistency check (Andreas Gruenbacher)   
  - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang)   
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen)   
  - net: Catch invalid index in XPS mapping (Nick Child)   
  - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor)   
  - ext2: Check block size validity during mount (Jan Kara)   
  - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin)   
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red)   
  - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein)   
  - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein)   
  - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf)   
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang)   
  - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein)   
  - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa)   
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima)   
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng)   
  - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet)   
  - netlink: annotate accesses to nlk->cb_running (Eric Dumazet)   
  - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima)   
  - LTS version: v4.14.315 (Saeed Mirzamohammadi)   
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa)   
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa)   
  - drbd: correctly submit flush bio on barrier (Christoph Böhmwalder)   
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen)   
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen)   
  - perf bench: Share some global variables to fix build with gcc 10 (Arnaldo Carvalho de Melo)   
  - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o)   
  - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o)   
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o)   
  - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o)   
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o)   
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)   
  - HID: wacom: Set a default resolution for older tablets (Ping Cheng)   
  - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski)   
  - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap)   
  - sh: math-emu: fix macro redefined warning (Randy Dunlap)   
  - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek)   
  - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova)   
  - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana)   
  - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong)   
  - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring)   
  - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain)   
  - ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (Ruliang Lin)   
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima)   
  - net/sched: act_mirred: Add carrier check (Victor Nogueira)   
  - writeback: fix call of incorrect macro (Maxim Korotkov)   
  - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang)   
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: bogus EBUSY when deleting set after flush (Pablo Neira Ayuso)   
  - netfilter: nf_tables: use-after-free in failing rule with bound set (Pablo Neira Ayuso)   
  - netfilter: nft_hash: fix nft_hash_deactivate (Pablo Neira Ayuso)   
  - netfilter: nf_tables: unbind set in rule from commit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: split set destruction in deactivate and destroy phase (Florian Westphal)   
  - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter)   
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer)   
  - dm flakey: fix a crash with invalid table line (Mikulas Patocka)   
  - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer)   
  - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland)   
  - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo)   
  - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz)   
  - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith)   
  - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi)   
  - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi)   
  - parisc: Fix argument pointer in real64_call_asm() (Helge Deller)   
  - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea)   
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui)   
  - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust)   
  - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey)   
  - clk: add missing of_node_put() in "assigned-clocks" property parsing (Clément Léger)   
  - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel)   
  - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova)   
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong)   
  - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch)   
  - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap)   
  - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/wii: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap)   
  - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He)   
  - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash)   
  - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann)   
  - serial: 8250: Add missing wakeup event reporting (Florian Fainelli)   
  - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang)   
  - usb: chipidea: fix missing goto in `ci_hdrc_probe` (Yinhao Hu)   
  - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz)   
  - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Saeed Mirzamohammadi)   
  - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap)   
  - of: Fix modalias string generation (Miquel Raynal)   
  - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy)   
  - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap)   
  - pstore: Revert pmsg_lock back to a normal mutex (John Stultz)   
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima)   
  - net: amd: Fix link leak when verifying config failed (Gencen Gan)   
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan)   
  - ixgbe: Enable setting RSS table to default values (Joe Damato)   
  - ixgbe: Allow flow hash to be set via ethtool (Joe Damato)   
  - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg)   
  - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach)   
  - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai)   
  - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov)   
  - scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie)   
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet)   
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet)   
  - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko)   
  - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn)   
  - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin)   
  - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter)   
  - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov)   
  - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg)   
  - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar)   
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang)   
  - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak)   
  - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter)   
  - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang)   
  - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley)   
  - drm/vgem: add missing mutex_destroy (Maíra Canal)   
  - drm/rockchip: Drop unbalanced obj unref (Rob Clark)   
  - selinux: ensure av_permissions.h is built when needed (Paul Moore)   
  - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek)   
  - ubifs: Free memory for tmpfile name (Mårten Lindahl)   
  - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing)   
  - i2c: omap: Fix standard mode false ACK readings (Reid Tonking)   
  - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu)   
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg)   
  - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang)   
  - staging: iio: resolver: ads1210: fix config mode (Nuno Sá)   
  - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo)   
  - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold)   
  - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlström)   
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Arınç ÜNAL)   
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li)   
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.528.1.el7uek]
changelog:
  - LTS version: v4.14.320 (Saeed Mirzamohammadi)   
  - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (Clark Wang)   
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava)   
  - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Min Li)   
  - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (Min Li)   
  - drm/exynos: vidi: fix a wrong error return (Inki Dae)   
  - s390/cio: unregister device when the only path is gone (Vineeth Vijayan)   
  - usb: gadget: udc: fix NULL dereference in remove() (Dan Carpenter)   
  - fbdev: imsttfb: Release framebuffer and dealloc cmap on error path (Helge Deller)   
  - nfcsim.c: Fix error checking for debugfs_create_dir (Osama Muhammad)   
  - arm64: Add missing Set/Way CMO encodings (Marc Zyngier)   
  - HID: wacom: Add error check to wacom_parse_and_register() (Denis Arefev)   
  - scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi)   
  - netfilter: nf_tables: disallow element updates of bound anonymous sets (Pablo Neira Ayuso)   
  - be2net: Extend xmit workaround to BE3 chip (Ross Lagerwall)   
  - mmc: usdhi60rol0: fix deferred probing (Sergey Shtylyov)   
  - mmc: omap_hsmmc: fix deferred probing (Sergey Shtylyov)   
  - mmc: omap: fix deferred probing (Sergey Shtylyov)   
  - mmc: mtk-sd: fix deferred probing (Sergey Shtylyov)   
  - net: qca_spi: Avoid high load if QCA7000 is not available (Stefan Wahren)   
  - xfrm: Linearize the skb after offloading if needed. (Sebastian Andrzej Siewior)   
  - nilfs2: prevent general protection fault in nilfs_clear_dirty_page() (Ryusuke Konishi)   
  - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng)   
  - Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (Michael Kelley)   
  - nilfs2: fix buffer corruption due to concurrent device reads (Ryusuke Konishi)   
  - nilfs2: reject devices with insufficient block count (Ryusuke Konishi)   
  - serial: lantiq: add missing interrupt ack (Bernhard Seibold)   
  - LTS version: v4.14.319 (Saeed Mirzamohammadi)   
  - mmc: block: ensure error propagation for non-blk (Christian Loehle)   
  - powerpc: Fix defconfig choice logic when cross compiling (Michael Ellerman)   
  - neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky)   
  - neighbour: Remove unused inline function neigh_key_eq16() (Gaosheng Cui)   
  - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (Alex Maftei)   
  - net: tipc: resize nlattr array to correct size (Lin Ma)   
  - net: lapbether: only support ethernet devices (Eric Dumazet)   
  - drm/nouveau/dp: check for NULL nv_connector->native_mode (Natalia Petrova)   
  - igb: fix nvm.ops.read() error handling (Aleksandr Loktionov)   
  - sctp: fix an error code in sctp_sf_eat_auth() (Dan Carpenter)   
  - IB/isert: Fix incorrect release of isert connection (Saravanan Vajravel)   
  - IB/isert: Fix possible list corruption in CMA handler (Saravanan Vajravel)   
  - IB/isert: Fix dead lock in ib_isert (Saravanan Vajravel)   
  - ping6: Fix send to link-local addresses with VRF. (Guillaume Nault)   
  - netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM (Pablo Neira Ayuso)   
  - USB: serial: option: add Quectel EM061KGL series (Jerry Meng)   
  - Remove DECnet support from kernel (Stephen Hemminger)   
  - net: usb: qmi_wwan: add support for Compal RXM-G1 (Wes Huang)   
  - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (Ryusuke Konishi)   
  - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (Ryusuke Konishi)   
  - nios2: dts: Fix tse_mac "max-frame-size" property (Janne Grunau)   
  - ocfs2: check new file size on fallocate call (Luís Henriques)   
  - ocfs2: fix use-after-free when unmounting read-only filesystem (Luís Henriques)   
  - xen/blkfront: Only check REQ_FUA for writes (Ross Lagerwall)   
  - mips: Move initrd_start check after initrd address sanitisation. (Liviu Dudau)   
  - MIPS: Alchemy: fix dbdma2 (Manuel Lauss)   
  - power: supply: Fix logic checking if system is running from battery (Mario Limonciello)   
  - regulator: Fix error checking for debugfs_create_dir (Osama Muhammad)   
  - power: supply: Ratelimit no data debug output (Marek Vasut)   
  - ARM: dts: vexpress: add missing cache properties (Krzysztof Kozlowski)   
  - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (Hans de Goede)   
  - power: supply: ab8500: Fix external_power_changed race (Hans de Goede)   
  - LTS version: v4.14.318 (Saeed Mirzamohammadi)   
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu)   
  - btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik)   
  - ext4: only check dquot_initialize_needed() when debugging (Theodore Ts'o)   
  - i2c: sprd: Delete i2c adapter in .remove's error path (Uwe Kleine-König)   
  - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Luiz Augusto von Dentz)   
  - ceph: fix use-after-free bug for inodes when flushing capsnaps (Xiubo Li)   
  - drm/amdgpu: fix xclk freq on CHIP_STONEY (Chia-I Wu)   
  - Input: psmouse - fix OOB access in Elantech protocol (Dmitry Torokhov)   
  - Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (Ismael Ferreras Morezuelas)   
  - batman-adv: Broken sync while rescheduling delayed work (Vladislav Efanov)   
  - bnxt_en: Query default VLAN before VNIC setup on a VF (Somnath Kotur)   
  - net: sched: move rtm_tca_policy declaration to include file (Eric Dumazet)   
  - rfs: annotate lockless accesses to RFS sock flow table (Eric Dumazet)   
  - rfs: annotate lockless accesses to sk->sk_rxhash (Eric Dumazet)   
  - Bluetooth: L2CAP: Add missing checks for invalid DCID (Sungwoo Kim)   
  - Bluetooth: Fix l2cap_disconnect_req deadlock (Ying Hsu)   
  - spi: qup: Request DMA before enabling clocks (Stephan Gerhold)   
  - i40e: fix build warnings in i40e_alloc.h (Greg Kroah-Hartman)   
  - i40iw: fix build warning in i40iw_manage_apbvt() (Greg Kroah-Hartman)   
  - LTS version: v4.14.317 (Saeed Mirzamohammadi)   
  - wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih)   
  - Fix double fget() in vhost_net_set_backend() (Al Viro)   
  - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus)   
  - cdc_ncm: Fix the build warning (Alexander Bersenev)   
  - cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev)   
  - scsi: dpt_i2o: Do not process completions with invalid addresses (Ben Hutchings)   
  - scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) (Ben Hutchings)   
  - fbcon: Fix null-ptr-deref in soft_cursor (Helge Deller)   
  - ext4: add lockdep annotations for i_data_sem for ea_inode's (Theodore Ts'o)   
  - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (Sherry Sun)   
  - mmc: vub300: fix invalid response handling (Deren Wu)   
  - regulator: da905{2,5}: Remove unnecessary array check (Nathan Chancellor)   
  - wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski)   
  - lib/dynamic_debug.c: use address-of operator on section symbols (Nathan Chancellor)   
  - kernel/extable.c: use address-of operator on section symbols (Nathan Chancellor)   
  - eth: sun: cassini: remove dead code (Martin Liška)   
  - gcc-12: disable '-Wdangling-pointer' warning for now (Linus Torvalds)   
  - ACPI: thermal: drop an always true check (Adam Borowski)   
  - x86/boot: Wrap literal addresses in absolute_pointer() (Kees Cook)   
  - ata: libata-scsi: Use correct device no in ata_find_dev() (Damien Le Moal)   
  - scsi: stex: Fix gcc 13 warnings (Bart Van Assche)   
  - usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal)   
  - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (Sebastian Krzyszkowiak)   
  - iio: dac: mcp4725: Fix i2c_master_send() return value handling (Marek Vasut)   
  - HID: wacom: avoid integer overflow in wacom_intuos_inout() (Nikita Zhandarovich)   
  - iio: adc: mxs-lradc: fix the order of two cleanup operations (Jiakai Luo)   
  - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (Dan Carpenter)   
  - atm: hide unused procfs functions (Arnd Bergmann)   
  - ALSA: oss: avoid missing-prototype warnings (Arnd Bergmann)   
  - netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT (Tom Rix)   
  - wifi: b43: fix incorrect __packed annotation (Arnd Bergmann)   
  - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (Wenchao Hao)   
  - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Yun Lu)   
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim)   
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai)   
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim)   
  - media: netup_unidvb: fix irq init by register it at the end of probe (Wei Chen)   
  - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (Wei Chen)   
  - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (Wei Chen)   
  - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Zhang Shurong)   
  - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Wei Chen)   
  - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Wei Chen)   
  - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (Wei Chen)   
  - ASoC: ssm2602: Add workaround for playback distortions (Paweł Anikiel)   
  - ASoC: dwc: limit the number of overrun messages (Maxim Kochetkov)   
  - nbd: Fix debugfs_create_dir error checking (Ivan Orlov)   
  - fbdev: stifb: Fix info entry in sti_struct on error path (Helge Deller)   
  - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Helge Deller)   
  - ARM: 9295/1: unwind:fix unwind abort for uleb128 case (Haibo Li)   
  - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (Lee Jones)   
  - net: dsa: mv88e6xxx: Increase wait after reset deactivation (Andreas Svensson)   
  - udp6: Fix race condition in udp6_sendmsg & connect (Vladislav Efanov)   
  - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu)   
  - af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet)   
  - af_packet: Fix data-races of pkt_sk(sk)->num. (Kuniyuki Iwashima)   
  - netrom: fix info-leak in nr_write_internal() (Eric Dumazet)   
  - dmaengine: pl330: rename _start to prevent build error (Randy Dunlap)   
  - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li)   
  - ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski)   
  - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.528.2.1.el7uek]
changelog:
  - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35698204]  
  - x86/microcode/AMD: Clean up per-family patch size checks (Borislav Petkov)  [Orabug: 35698200]  
  - Revert "sched/fair: sanitize vruntime of entity being placed" (Saeed Mirzamohammadi)  [Orabug: 35698196]  
  - Revert "sched/fair: Sanitize vruntime of entity being migrated" (Saeed Mirzamohammadi)  [Orabug: 35698196]  
  - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35698191]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.528.2.2.el7uek]
changelog:
  - xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35905454]  
  - xfs: reserve blocks for refcount / rmap log item recovery (Darrick J. Wong)  [Orabug: 35905454]  
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35905446]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.528.2.3.el7uek]
changelog:
  - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda)  [Orabug: 36201748]


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.528.2.4.el7uek]
changelog:
  - scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 36345482]  
  - scsi: megaraid_sas: Update max supported LD IDs to 240 (Chandrakanth Patil)  [Orabug: 36345456]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.527.1.el7uek]
changelog:
  - mips64: Enable CRYPTO_USER_API_SKCIPHER config (Vijay Kumar)  [Orabug: 35458816]  
  - net/rds: Fix copy&paste error (Gerd Rausch)  [Orabug: 35416949]  
  - uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy)  [Orabug: 35408336]  
  - LTS version: v4.14.316 (Saeed Mirzamohammadi)   
  - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET)   
  - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET)   
  - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy)   
  - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter)   
  - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri)   
  - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede)   
  - power: supply: leds: Fix blink to LED on transition (Hans de Goede)   
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia)   
  - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav)   
  - media: radio-shark: Add endpoint checks (Alan Stern)   
  - USB: sisusbvga: Add endpoint checks (Alan Stern)   
  - x86/mm: Avoid incomplete Global INVLPG flushes (Saeed Mirzamohammadi)   
  - USB: core: Add routines for endpoint checks in old drivers (Alan Stern)   
  - selftests/memfd: Fix unknown type name build failure (Hardik Garg)   
  - netfilter: nf_tables: fix register ordering (Florian Westphal)   
  - netfilter: nf_tables: do not allow SET_ID to refer to another table (Pablo Neira Ayuso)   
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Pablo Neira Ayuso)   
  - netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL (Pablo Neira Ayuso)   
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [Orabug: 34362007] {CVE-2022-34918}
  - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso)   
  - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso) [Orabug: 34012908] {CVE-2022-1015}
  - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso)   
  - parisc: Allow to reboot machine after system halt (Helge Deller)   
  - m68k: Move signal frame following exception on 68020/030 (Finn Thain)   
  - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy)   
  - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy)   
  - spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode (Rasmus Villemoes)   
  - netfilter: nf_tables: bogus EBUSY in helper removal from transaction (Pablo Neira Ayuso)   
  - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi)   
  - ceph: force updating the msg pointer in non-split case (Xiubo Li)   
  - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin)   
  - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich)   
  - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale)   
  - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai)   
  - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon)   
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet)   
  - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov)   
  - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET)   
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen)   
  - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou)   
  - vsock: avoid to close connected socket after the timeout (Zhuang Shengen)   
  - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-König)   
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner)   
  - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny)   
  - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning)   
  - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat)   
  - Input: xpad - add constants for GIP interface numbers (Vicki Pfau)   
  - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann)   
  - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng)   
  - sched: Fix KCSAN noinstr violation (Josh Poimboeuf)   
  - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren)   
  - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke)   
  - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld)   
  - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera)   
  - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera)   
  - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann)   
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Min Li)   
  - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede)   
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo)   
  - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi)   
  - gfs2: Fix inode height consistency check (Andreas Gruenbacher)   
  - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang)   
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen)   
  - net: Catch invalid index in XPS mapping (Nick Child)   
  - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor)   
  - ext2: Check block size validity during mount (Jan Kara)   
  - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin)   
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red)   
  - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein)   
  - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein)   
  - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf)   
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang)   
  - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein)   
  - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa)   
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima)   
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng)   
  - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet)   
  - netlink: annotate accesses to nlk->cb_running (Eric Dumazet)   
  - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima)   
  - LTS version: v4.14.315 (Saeed Mirzamohammadi)   
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa)   
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa)   
  - drbd: correctly submit flush bio on barrier (Christoph Böhmwalder)   
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen)   
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen)   
  - perf bench: Share some global variables to fix build with gcc 10 (Arnaldo Carvalho de Melo)   
  - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o)   
  - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o)   
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o)   
  - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o)   
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o)   
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)   
  - HID: wacom: Set a default resolution for older tablets (Ping Cheng)   
  - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski)   
  - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap)   
  - sh: math-emu: fix macro redefined warning (Randy Dunlap)   
  - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek)   
  - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova)   
  - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana)   
  - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong)   
  - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring)   
  - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain)   
  - ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (Ruliang Lin)   
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima)   
  - net/sched: act_mirred: Add carrier check (Victor Nogueira)   
  - writeback: fix call of incorrect macro (Maxim Korotkov)   
  - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang)   
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: bogus EBUSY when deleting set after flush (Pablo Neira Ayuso)   
  - netfilter: nf_tables: use-after-free in failing rule with bound set (Pablo Neira Ayuso)   
  - netfilter: nft_hash: fix nft_hash_deactivate (Pablo Neira Ayuso)   
  - netfilter: nf_tables: unbind set in rule from commit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: split set destruction in deactivate and destroy phase (Florian Westphal)   
  - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter)   
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer)   
  - dm flakey: fix a crash with invalid table line (Mikulas Patocka)   
  - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer)   
  - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland)   
  - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo)   
  - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz)   
  - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith)   
  - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi)   
  - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi)   
  - parisc: Fix argument pointer in real64_call_asm() (Helge Deller)   
  - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea)   
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui)   
  - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust)   
  - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey)   
  - clk: add missing of_node_put() in "assigned-clocks" property parsing (Clément Léger)   
  - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel)   
  - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova)   
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong)   
  - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch)   
  - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap)   
  - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/wii: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap)   
  - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He)   
  - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash)   
  - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann)   
  - serial: 8250: Add missing wakeup event reporting (Florian Fainelli)   
  - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang)   
  - usb: chipidea: fix missing goto in `ci_hdrc_probe` (Yinhao Hu)   
  - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz)   
  - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Saeed Mirzamohammadi)   
  - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap)   
  - of: Fix modalias string generation (Miquel Raynal)   
  - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy)   
  - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap)   
  - pstore: Revert pmsg_lock back to a normal mutex (John Stultz)   
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima)   
  - net: amd: Fix link leak when verifying config failed (Gencen Gan)   
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan)   
  - ixgbe: Enable setting RSS table to default values (Joe Damato)   
  - ixgbe: Allow flow hash to be set via ethtool (Joe Damato)   
  - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg)   
  - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach)   
  - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai)   
  - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov)   
  - scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie)   
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet)   
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet)   
  - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko)   
  - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn)   
  - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin)   
  - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter)   
  - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov)   
  - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg)   
  - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar)   
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang)   
  - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak)   
  - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter)   
  - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang)   
  - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley)   
  - drm/vgem: add missing mutex_destroy (Maíra Canal)   
  - drm/rockchip: Drop unbalanced obj unref (Rob Clark)   
  - selinux: ensure av_permissions.h is built when needed (Paul Moore)   
  - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek)   
  - ubifs: Free memory for tmpfile name (Mårten Lindahl)   
  - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing)   
  - i2c: omap: Fix standard mode false ACK readings (Reid Tonking)   
  - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu)   
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg)   
  - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang)   
  - staging: iio: resolver: ads1210: fix config mode (Nuno Sá)   
  - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo)   
  - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold)   
  - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlström)   
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Arınç ÜNAL)   
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li)   
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.529.1.el7uek]
changelog:
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy)  [Orabug: 35649492]  {CVE-2023-3567} 
  - ocfs2: always read both high and low parts of dinode link count (Alexey Asemov)  [Orabug: 35643004]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.529.2.el7uek]
changelog:
  - x86/cpu: persist X86_FEATURE_NT_GOOD for late reload (Ankur Arora)  [Orabug: 35693947]  
  - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35678739]  
  - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35678693]  
  - Revert "sched/fair: sanitize vruntime of entity being placed" (Saeed Mirzamohammadi)  [Orabug: 35651310]  
  - Revert "sched/fair: Sanitize vruntime of entity being migrated" (Saeed Mirzamohammadi)  [Orabug: 35651310]  
  - x86/microcode/AMD: Clean up per-family patch size checks (Borislav Petkov)  [Orabug: 35643967]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.529.3.el7uek]
changelog:
  - uek-rpm: Update kernel linux-firmware dependency to 20230516-999.26.git6c9e0ed5. (Somasundaram Krishnasamy)  [Orabug: 35724203]  
  - LTS version: v4.14.322 (Saeed Mirzamohammadi)   
  - drm/edid: fix objtool warning in drm_cvt_modes() (Linus Torvalds)   
  - mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros)   
  - test_firmware: fix a memory leak with reqs buffer (Mirsad Goran Todorovac)   
  - ext2: Drop fragment support (Jan Kara)   
  - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern)   
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim)   
  - fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya)   
  - USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard)   
  - libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov)   
  - loop: Select I/O scheduler 'none' from inside add_disk() (Bart Van Assche)   
  - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_net (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_vals[] (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_lock (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_stamp (Eric Dumazet)   
  - tcp_metrics: fix addr_same() helper (Eric Dumazet)   
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing)   
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - net: add missing data-race annotation for sk_ll_usec (Eric Dumazet)   
  - net: add missing data-race annotations around sk->sk_peek_off (Eric Dumazet)   
  - perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Müller)   
  - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong)   
  - word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com)   
  - perf: Fix function pointer case (Peter Zijlstra)   
  - net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones)   
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela)   
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan)   
  - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe)   
  - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber)   
  - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown)   
  - s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland)   
  - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski)   
  - tpm_tis: Explicitly check for error code (Alexander Steffen)   
  - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz)   
  - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong)   
  - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman)   
  - usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda)   
  - usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen)   
  - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde)   
  - USB: serial: simple: sort driver entries (Johan Hovold)   
  - USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum)   
  - USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi)   
  - USB: serial: option: support Quectel EM060K_128 (Jerry Meng)   
  - tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian)   
  - ring-buffer: Fix wrong stat of cpu_buffer->read (Zheng Yejian)   
  - ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann)   
  - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai)   
  - block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche)   
  - ASoC: fsl_spdif: Silence output on stop (Matus Gajdos)   
  - benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong)   
  - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy)   
  - team: reset team's flags when down link is P2P device (Hangbin Liu)   
  - bonding: reset bond's flags when down link is P2P device (Hangbin Liu)   
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith)   
  - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Żenczykowski)   
  - ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong)   
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming)   
  - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede)   
  - tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet)   
  - tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet)   
  - tcp: annotate data-races around rskq_defer_accept (Eric Dumazet)   
  - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal)   
  - llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima)   
  - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong)   
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil)   
  - pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello)   
  - fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser)   
  - spi: bcm63xx: fix max prepend length (Jonas Gorski)   
  - igb: Fix igb_down hung on surprise removal (Ying Hsu)   
  - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva)   
  - bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau)   
  - sched/fair: Don't balance task to its current running CPU (Yicong Yang)   
  - posix-timers: Ensure timer ID search-loop limit is valid (Saeed Mirzamohammadi)   
  - md/raid10: prevent soft lockup while flush writes (Yu Kuai)   
  - md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai)   
  - nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua)   
  - debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa)   
  - ext4: correct inline offset when handling xattrs in inode body (Eric Whitney)   
  - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing)   
  - fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi)   
  - perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Müller)   
  - serial: atmel: don't enable IRQs prematurely (Dan Carpenter)   
  - scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar)   
  - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali)   
  - scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika)   
  - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran)   
  - xtensa: ISS: fix call to split_if_spec (Max Filippov)   
  - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian)   
  - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET)   
  - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET)   
  - Revert "8250: add support for ASIX devices with a FIFO bug" (Jiaqing Zhao)   
  - meson saradc: fix clock divider mask length (George Stark)   
  - hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser)   
  - fs: dlm: return positive pid value for F_GETLK (Alexander Aring)   
  - md/raid0: add discard support for the 'original' layout (Jason Baron)   
  - misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal)   
  - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy)   
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant)   
  - ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li)   
  - ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi)   
  - perf intel-pt: Fix CYC timestamps after standalone CBR (Adrian Hunter)   
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui)   
  - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen)   
  - net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela)   
  - wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap)   
  - ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan)   
  - NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang)   
  - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can)   
  - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can)   
  - ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can)   
  - udp6: fix udp6_ehashfn() typo (Eric Dumazet)   
  - net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka)   
  - workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds)   
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo)   
  - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest)   
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Pablo Neira Ayuso)   
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso)   
  - spi: spi-fsl-spi: allow changing bits_per_word while CS is still active (Rasmus Villemoes)   
  - spi: spi-fsl-spi: relax message sanity checking a little (Rasmus Villemoes)   
  - spi: spi-fsl-spi: remove always-true conditional in fsl_spi_do_one_msg (Rasmus Villemoes)   
  - ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann)   
  - btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana)   
  - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick)   
  - integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang)   
  - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko)   
  - mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko)   
  - NFSD: add encoding of op_recall flag for write delegation (Dai Ngo)   
  - sh: dma: Fix DMA channel offset calculation (Artur Rojek)   
  - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma)   
  - tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet)   
  - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean)   
  - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap)   
  - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon)   
  - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski)   
  - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider)   
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye)   
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET)   
  - mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET)   
  - mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang)   
  - mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold)   
  - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang)   
  - extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko)   
  - extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko)   
  - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou)   
  - media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut)   
  - media: usb: Check az6007_read() return value (Daniil Dulov)   
  - sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz)   
  - w1: fix loop in w1_fini() (Dan Carpenter)   
  - block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz)   
  - USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin)   
  - modpost: fix off by one in is_executable_section() (Dan Carpenter)   
  - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada)   
  - modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada)   
  - crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap)   
  - pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea)   
  - perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim)   
  - pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko)   
  - PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng)   
  - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang)   
  - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui)   
  - drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich)   
  - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET)   
  - soc/fsl/qe: fix usb.c build errors (Randy Dunlap)   
  - ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea)   
  - ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann)   
  - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi)   
  - Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut)   
  - ARM: dts: BCM5301X: Drop "clock-names" from the SPI node (Rafał Miłecki)   
  - Input: drv260x - sleep between polling GO bit (Luca Weiss)   
  - radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich)   
  - netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima)   
  - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov)   
  - lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden)   
  - gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima)   
  - netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet)   
  - netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet)   
  - wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov)   
  - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel)   
  - memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann)   
  - kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei)   
  - watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson)   
  - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson)   
  - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin)   
  - wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET)   
  - wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET)   
  - wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET)   
  - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET)   
  - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET)   
  - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin)   
  - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer)   
  - evm: Complete description of evm_inode_setattr() (Roberto Sassu)   
  - PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich)   
  - md/raid10: fix io loss while replacement replace rdev (Li Nan)   
  - md/raid10: fix wrong setting of max_corr_read_errors (Li Nan)   
  - md/raid10: fix overflow of md/safe_mode_delay (Li Nan)   
  - treewide: Remove uninitialized_var() usage (Kees Cook)   
  - drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen)   
  - scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish)   
  - drm/edid: Fix uninitialized variable in drm_cvt_modes() (Lyude Paul)   
  - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (Zheng Wang)   
  - x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner)   
  - x86/microcode/AMD: Load late on both threads too (Borislav Petkov (AMD))   
  - gfs2: Don't deref jdesc in evict (Bob Peterson)   
  - LTS version: v4.14.321 (Saeed Mirzamohammadi)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.529.3.1.el7uek]
changelog:
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35708852]  {CVE-2023-22024}


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-2047.529.3.2.el7uek]
changelog:
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)  [Orabug: 35824309]  
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa)  [Orabug: 35824309]  
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824309]  {CVE-2023-42753}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.1.el7uek]
changelog:
  - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood)  [Orabug: 35742762]  
  - smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan)  [Orabug: 35236407]  
  - smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan)  [Orabug: 35236407]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.2.el7uek]
changelog:
  - LTS version: v4.14.325 (Saeed Mirzamohammadi)   
  - Revert "ARM: ep93xx: fix missing-prototype warnings" (Greg Kroah-Hartman)   
  - Revert "MIPS: Alchemy: fix dbdma2" (Greg Kroah-Hartman)   
  - LTS version: v4.14.324 (Saeed Mirzamohammadi)   
  - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark)   
  - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang)   
  - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang)   
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel)   
  - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang)   
  - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen)   
  - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller)   
  - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel)   
  - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel)   
  - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel)   
  - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann)   
  - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman)   
  - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong)   
  - ipvs: Improve robustness to the ipvs sysctl (Junwei Hu)   
  - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani)   
  - sock: annotate data-races around prot->memory_pressure (Eric Dumazet)   
  - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian)   
  - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen)   
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma)   
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing)   
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima)   
  - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong)   
  - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long)   
  - test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac)   
  - binder: fix memory leak in binder_init() (Qi Zheng)   
  - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren)   
  - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang)   
  - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical)   
  - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang)   
  - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet)   
  - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu)   
  - i40e: fix misleading debug logs (Andrii Staikov)   
  - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso)   
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma)   
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - net: af_key: fix sadb_x_filter validation (Lin Ma)   
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma)   
  - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong)   
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig)   
  - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang)   
  - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf)   
  - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li)   
  - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil)   
  - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong)   
  - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir)   
  - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir)   
  - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva)   
  - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh)   
  - udf: Fix uninitialized array access for some pathnames (Jan Kara)   
  - quota: fix warning in dqgrab() (Ye Bin)   
  - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara)   
  - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen)   
  - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002)   
  - lib/mpi: Eliminate unused umul_ppmm definitions for MIPS (Nathan Chancellor)   
  - LTS version: v4.14.323 (Saeed Mirzamohammadi)   
  - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada)   
  - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina)   
  - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley)   
  - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby)   
  - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso)   
  - btrfs: don't stop integrity writeback too early (Christoph Hellwig)   
  - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller)   
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner)   
  - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet)   
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - net/packet: annotate data-races around tp->status (Eric Dumazet)   
  - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst)   
  - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov)   
  - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao)   
  - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern)   
  - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo)   
  - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac)   
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi)   
  - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King)   
  - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Järvinen)   
  - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Żenczykowski)   
  - mmc: moxart: read scr register without changing byte order (Sergei Antonov)   
  - sparc: fix up arch_cpu_finalize_init() build breakage. (Greg Kroah-Hartman)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.3.el7uek]
changelog:
  - Add the new PCI Device IDs to support new generation of AMD 19h processors. (Partha Sarathi Satapathy)  [Orabug: 35773822]  
  - hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Babu Moger)  [Orabug: 35773822]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.4.el7uek]
changelog:
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35819110]  {CVE-2023-22024} 
  - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent)  [Orabug: 35796772]  
  - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda)  [Orabug: 35756463]  
  - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi)  [Orabug: 35702793]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.5.el7uek]
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824288]  {CVE-2023-42753} 
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa)   
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.5.1.el7uek]
changelog:
  - Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK" (Saeed Mirzamohammadi)  [Orabug: 35896831]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.531.1.el7uek]
changelog:
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35859332]  
  - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda)  [Orabug: 35848949]  
  - LTS version: v4.14.326 (Saeed Mirzamohammadi)   
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang)   
  - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang)   
  - mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang)   
  - mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang)   
  - nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton)   
  - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana)   
  - attr: block mode changes of symlinks (Christian Brauner)   
  - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon)   
  - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei)   
  - serial: cpm_uart: Avoid suspicious locking (Christophe Leroy)   
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin)   
  - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke)   
  - media: pci: cx23885: replace BUG with error return (Hans Verkuil)   
  - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil)   
  - iio: core: Use min() instead of min_t() to make code more robust (Andy Shevchenko)   
  - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong)   
  - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong)   
  - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong)   
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong)   
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong)   
  - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie)   
  - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion)   
  - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner)   
  - ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger)   
  - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong)   
  - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li)   
  - alx: fix OOB-read compiler warning (GONG, Ruiqi)   
  - tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen)   
  - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan)   
  - wifi: mwifiex: fix fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix printk specifier (Dongliang Mu)   
  - hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak)   
  - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE))   
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar)   
  - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo)   
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin)   
  - parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller)   
  - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima)   
  - ixgbe: fix timestamp configuration code (Vadim Fedorenko)   
  - kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida)   
  - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua)   
  - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida)   
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis)   
  - af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima)   
  - af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima)   
  - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie)   
  - igb: disable virtualization features on 82580 (Corinna Vinschen)   
  - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet)   
  - pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy)   
  - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav)   
  - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson)   
  - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin)   
  - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov)   
  - parisc: led: Reduce CPU overhead for disk & lan LED computation (Helge Deller)   
  - parisc: led: Fix LAN receive and transmit LEDs (Helge Deller)   
  - drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann)   
  - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann)   
  - scsi: qla2xxx: Turn off noisy message log (Quinn Tran)   
  - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran)   
  - crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin)   
  - pstore/ram: Check start of empty przs during init (Enlin Mu)   
  - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel)   
  - X.509: if signature is unsupported skip validation (Thore Sommer)   
  - dccp: Fix out of bounds access in DCCP error handler (Jann Horn)   
  - parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller)   
  - procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai)   
  - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" (Bjorn Helgaas)   
  - ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang)   
  - ntb: Clean up tx tail index on link down (Dave Jiang)   
  - ntb: Drop packets when qp link is down (Dave Jiang)   
  - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman)   
  - backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann)   
  - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva)   
  - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai)   
  - PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon)   
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl)   
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet)   
  - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie)   
  - rpmsg: glink: Add check for kstrdup (Jiasheng Jiang)   
  - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu)   
  - Revert "IB/isert: Fix incorrect release of isert connection" (Leon Romanovsky)   
  - amba: bus: fix refcount leak (Peng Fan)   
  - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang)   
  - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye)   
  - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby)   
  - cgroup:namespace: Remove unused cgroup_namespaces_init() (Lu Jialin)   
  - USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern)   
  - media: go7007: Remove redundant if statement (Colin Ian King)   
  - dma-buf/sync_file: Fix docs syntax (Rob Clark)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko)   
  - x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap)   
  - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma)   
  - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang)   
  - media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang)   
  - media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov)   
  - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET)   
  - media: dib7000p: Fix potential division by zero (Daniil Dulov)   
  - drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu)   
  - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever)   
  - fs: lockd: avoid possible wrong NULL parameter (Su Hui)   
  - jfs: validate max amount of blocks before allocation. (Alexei Filippov)   
  - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey)   
  - nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter)   
  - wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (Wu Zongyong)   
  - clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua)   
  - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du)   
  - ALSA: ac97: Fix possible error value of *rac97 (Su Hui)   
  - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui)   
  - smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter)   
  - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie)   
  - drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean)   
  - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafał Miłecki)   
  - netrom: Deny concurrent connect(). (Kuniyuki Iwashima)   
  - net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan)   
  - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming)   
  - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov)   
  - wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin)   
  - wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi)   
  - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov)   
  - fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev)   
  - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai)   
  - crypto: caam - fix unchecked return value error (Gaurav Jain)   
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong)   
  - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong)   
  - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi)   
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde)   
  - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong)   
  - regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter)   
  - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang)   
  - fs: Fix error checking for d_hash_and_lookup() (Wang Ming)   
  - reiserfs: Check the return value from __getblk() (Matthew Wilcox)   
  - Revert "net: macsec: preserve ingress frame ordering" (Sabrina Dubroca)   
  - udf: Handle error when adding extent to a file (Jan Kara)   
  - udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov)   
  - powerpc/32s: Fix assembler warning about r0 (Christophe Leroy)   
  - powerpc/32: Include .branch_lt in data section (Joel Stanley)   
  - ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai)   
  - cifs: add a warning when the in-flight count goes negative (Shyam Prasad N)   
  - sctp: handle invalid error codes without calling BUG() (Dan Carpenter)   
  - bnx2x: fix page fault following EEH recovery (David Christensen)   
  - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin)   
  - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Chengfeng Ye)   
  - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He)   
  - net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn)   
  - security: keys: perform capable check only on privileged operations (Christian Göttsche)   
  - ASoc: codecs: ES8316: Fix DMIC config (Edgar)   
  - fs/nls: make load_nls() take a const parameter (Saeed Mirzamohammadi)   
  - s390/dasd: use correct number of retries for ERP requests (Stefan Haberland)   
  - m68k: Fix invalid .section syntax (Ben Hutchings)   
  - ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong)   
  - ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka)   
  - 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet)   
  - lib/ubsan: remove returns-nonnull-attribute checks (Andrey Ryabinin)   
  - pinctrl: amd: Don't show `Invalid config param` errors (Mario Limonciello)   
  - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi)   
  - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve)   
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang)   
  - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra)   
  - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao)   
  - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn)   
  - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig)   
  - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig)   
  - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig)   
  - ARM: pxa: remove use of symbol_get() (Arnd Bergmann)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.531.2.el7uek]
changelog:
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel)  [Orabug: 35867429]  
  - Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK" (Boris Ostrovsky)  [Orabug: 35867429]  
  - rds: Add proper refcnt when an RDS MR references an RDS Socket (Håkon Bugge)  [Orabug: 35836950]  
  - rds: Check for UAF in rds_destroy_mr (Håkon Bugge)  [Orabug: 35836950]  
  - xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35587163]  
  - xfs: reserve blocks for refcount / rmap log item recovery (Darrick J. Wong)  [Orabug: 35587163]  
  - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin)   
  - dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.531.2.1.el7uek]
changelog:
  - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli)  [Orabug: 35973454]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.2.el7uek]
changelog:
  - LTS version: v4.14.325 (Saeed Mirzamohammadi)   
  - Revert "ARM: ep93xx: fix missing-prototype warnings" (Greg Kroah-Hartman)   
  - Revert "MIPS: Alchemy: fix dbdma2" (Greg Kroah-Hartman)   
  - LTS version: v4.14.324 (Saeed Mirzamohammadi)   
  - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark)   
  - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang)   
  - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang)   
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel)   
  - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang)   
  - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen)   
  - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller)   
  - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel)   
  - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel)   
  - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel)   
  - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann)   
  - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman)   
  - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong)   
  - ipvs: Improve robustness to the ipvs sysctl (Junwei Hu)   
  - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani)   
  - sock: annotate data-races around prot->memory_pressure (Eric Dumazet)   
  - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian)   
  - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen)   
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma)   
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing)   
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) [Orabug: 35814409] {CVE-2023-4622}
  - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong)   
  - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long)   
  - test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac)   
  - binder: fix memory leak in binder_init() (Qi Zheng)   
  - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren)   
  - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang)   
  - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical)   
  - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang)   
  - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet)   
  - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu)   
  - i40e: fix misleading debug logs (Andrii Staikov)   
  - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso)   
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) [Orabug: 35754508] {CVE-2023-3772}
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - net: af_key: fix sadb_x_filter validation (Lin Ma)   
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [Orabug: 35923516] {CVE-2023-39194}
  - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong)   
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig)   
  - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang)   
  - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf)   
  - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li)   
  - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil)   
  - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong)   
  - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir)   
  - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir)   
  - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva)   
  - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh)   
  - udf: Fix uninitialized array access for some pathnames (Jan Kara)   
  - quota: fix warning in dqgrab() (Ye Bin)   
  - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara)   
  - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen)   
  - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002)   
  - lib/mpi: Eliminate unused umul_ppmm definitions for MIPS (Nathan Chancellor)   
  - LTS version: v4.14.323 (Saeed Mirzamohammadi)   
  - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada)   
  - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina)   
  - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley)   
  - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby)   
  - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso)   
  - btrfs: don't stop integrity writeback too early (Christoph Hellwig)   
  - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller)   
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner)   
  - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet)   
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - net/packet: annotate data-races around tp->status (Eric Dumazet)   
  - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst)   
  - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov)   
  - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao)   
  - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern)   
  - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo)   
  - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac)   
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi)   
  - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King)   
  - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Järvinen)   
  - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Żenczykowski)   
  - mmc: moxart: read scr register without changing byte order (Sergei Antonov)   
  - sparc: fix up arch_cpu_finalize_init() build breakage. (Greg Kroah-Hartman)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.5.el7uek]
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824288]  {CVE-2023-42753} 
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35923468] {CVE-2023-39192}
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35923499] {CVE-2023-39193}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.531.1.el7uek]
changelog:
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35859332]  
  - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda)  [Orabug: 35848949]  
  - LTS version: v4.14.326 (Saeed Mirzamohammadi)   
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35814287] {CVE-2023-4207} 
  - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang)   
  - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang)   
  - mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang)   
  - mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang)   
  - nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton)   
  - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana)   
  - attr: block mode changes of symlinks (Christian Brauner)   
  - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon)   
  - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei)   
  - serial: cpm_uart: Avoid suspicious locking (Christophe Leroy)   
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin)   
  - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke)   
  - media: pci: cx23885: replace BUG with error return (Hans Verkuil)   
  - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil)   
  - iio: core: Use min() instead of min_t() to make code more robust (Andy Shevchenko)   
  - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong)   
  - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong)   
  - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong)   
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong)   
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong)   
  - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie)   
  - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion)   
  - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner)   
  - ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger)   
  - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong)   
  - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li)   
  - alx: fix OOB-read compiler warning (GONG, Ruiqi)   
  - tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen)   
  - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan)   
  - wifi: mwifiex: fix fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix printk specifier (Dongliang Mu)   
  - hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak)   
  - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE))   
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar)   
  - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo)   
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin)   
  - parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller)   
  - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima)   
  - ixgbe: fix timestamp configuration code (Vadim Fedorenko)   
  - kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida)   
  - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua)   
  - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida)   
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) [Orabug: 35814456] {CVE-2023-4921}
  - af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima)   
  - af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima)   
  - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie)   
  - igb: disable virtualization features on 82580 (Corinna Vinschen)   
  - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet)   
  - pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy)   
  - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav)   
  - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson)   
  - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin)   
  - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov)   
  - parisc: led: Reduce CPU overhead for disk & lan LED computation (Helge Deller)   
  - parisc: led: Fix LAN receive and transmit LEDs (Helge Deller)   
  - drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann)   
  - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann)   
  - scsi: qla2xxx: Turn off noisy message log (Quinn Tran)   
  - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran)   
  - crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin)   
  - pstore/ram: Check start of empty przs during init (Enlin Mu)   
  - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel)   
  - X.509: if signature is unsupported skip validation (Thore Sommer)   
  - dccp: Fix out of bounds access in DCCP error handler (Jann Horn)   
  - parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller)   
  - procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai)   
  - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" (Bjorn Helgaas)   
  - ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang)   
  - ntb: Clean up tx tail index on link down (Dave Jiang)   
  - ntb: Drop packets when qp link is down (Dave Jiang)   
  - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman)   
  - backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann)   
  - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva)   
  - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai)   
  - PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon)   
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) [Orabug: 35924097] {CVE-2023-45871}
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [Orabug: 35924001] {CVE-2023-42752}
  - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie)   
  - rpmsg: glink: Add check for kstrdup (Jiasheng Jiang)   
  - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu)   
  - Revert "IB/isert: Fix incorrect release of isert connection" (Leon Romanovsky)   
  - amba: bus: fix refcount leak (Peng Fan)   
  - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang)   
  - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye)   
  - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby)   
  - cgroup:namespace: Remove unused cgroup_namespaces_init() (Lu Jialin)   
  - USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern)   
  - media: go7007: Remove redundant if statement (Colin Ian King)   
  - dma-buf/sync_file: Fix docs syntax (Rob Clark)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko)   
  - x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap)   
  - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma)   
  - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang)   
  - media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang)   
  - media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov)   
  - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET)   
  - media: dib7000p: Fix potential division by zero (Daniil Dulov)   
  - drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu)   
  - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever)   
  - fs: lockd: avoid possible wrong NULL parameter (Su Hui)   
  - jfs: validate max amount of blocks before allocation. (Alexei Filippov)   
  - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey)   
  - nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter)   
  - wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (Wu Zongyong)   
  - clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua)   
  - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du)   
  - ALSA: ac97: Fix possible error value of *rac97 (Su Hui)   
  - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui)   
  - smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter)   
  - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie)   
  - drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean)   
  - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafał Miłecki)   
  - netrom: Deny concurrent connect(). (Kuniyuki Iwashima)   
  - net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan)   
  - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming)   
  - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov)   
  - wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin)   
  - wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi)   
  - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov)   
  - fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev)   
  - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai)   
  - crypto: caam - fix unchecked return value error (Gaurav Jain)   
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong)   
  - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong)   
  - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi)   
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde)   
  - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong)   
  - regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter)   
  - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang)   
  - fs: Fix error checking for d_hash_and_lookup() (Wang Ming)   
  - reiserfs: Check the return value from __getblk() (Matthew Wilcox)   
  - Revert "net: macsec: preserve ingress frame ordering" (Sabrina Dubroca)   
  - udf: Handle error when adding extent to a file (Jan Kara)   
  - udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov)   
  - powerpc/32s: Fix assembler warning about r0 (Christophe Leroy)   
  - powerpc/32: Include .branch_lt in data section (Joel Stanley)   
  - ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai)   
  - cifs: add a warning when the in-flight count goes negative (Shyam Prasad N)   
  - sctp: handle invalid error codes without calling BUG() (Dan Carpenter)   
  - bnx2x: fix page fault following EEH recovery (David Christensen)   
  - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin)   
  - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Chengfeng Ye)   
  - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He)   
  - net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn)   
  - security: keys: perform capable check only on privileged operations (Christian Göttsche)   
  - ASoc: codecs: ES8316: Fix DMIC config (Edgar)   
  - fs/nls: make load_nls() take a const parameter (Saeed Mirzamohammadi)   
  - s390/dasd: use correct number of retries for ERP requests (Stefan Haberland)   
  - m68k: Fix invalid .section syntax (Ben Hutchings)   
  - ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong)   
  - ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka)   
  - 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet)   
  - lib/ubsan: remove returns-nonnull-attribute checks (Andrey Ryabinin)   
  - pinctrl: amd: Don't show `Invalid config param` errors (Mario Limonciello)   
  - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi)   
  - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve)   
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) [Orabug: 35282808] {CVE-2023-1989}
  - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra)   
  - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao)   
  - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn)   
  - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig)   
  - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig)   
  - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig)   
  - ARM: pxa: remove use of symbol_get() (Arnd Bergmann)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.532.1.el7uek]
changelog:
  - rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan)  [Orabug: 35649849]  
  - rds: Provision to allow all trace points at module load time (Arumugam Kolappan)  [Orabug: 35355776]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.532.2.el7uek]
changelog:
  - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli)  [Orabug: 35905888]  
  - LTS version: 4.14.328 (Saeed Mirzamohammadi)   
  - Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz)   
  - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook)   
  - Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD)   
  - gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen)   
  - s390/pci: fix iommu bitmap allocation (Niklas Schnelle)   
  - perf: Disallow mis-matched inherited group reads (Saeed Mirzamohammadi)   
  - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu)   
  - USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoît Monin)   
  - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda)   
  - ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L)   
  - Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" (Andy Shevchenko)   
  - mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman)   
  - sky2: Make sure there is at least one frag_addr available (Kees Cook)   
  - wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg)   
  - wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong)   
  - Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz)   
  - Bluetooth: Avoid redundant authentication (Ying Hsu)   
  - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke)   
  - tracing: relax trace_event_eval_update() execution with cond_resched() (Clément Léger)   
  - ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal)   
  - gpio: timberdale: Fix potential deadlock on &tgpio->lock (Chengfeng Ye)   
  - overlayfs: set ctime when setting mtime and atime (Jeff Layton)   
  - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit)   
  - btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik)   
  - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren)   
  - i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt)   
  - net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter)   
  - net: rfkill: gpio: prevent value glitch during probe (Josua Mayer)   
  - net: ipv6: fix return value check in esp_remove_trailer (Ma Ke)   
  - net: ipv4: fix return value check in esp_remove_trailer (Ma Ke)   
  - xfrm: fix a data-race in xfrm_gen_index() (Saeed Mirzamohammadi)   
  - netfilter: nft_payload: fix wrong mac header matching (Florian Westphal)   
  - KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson)   
  - regmap: fix NULL deref on lookup (Johan Hovold)   
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski)   
  - Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann)   
  - Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz)   
  - Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy)   
  - Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan)   
  - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi)   
  - Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi)   
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo)   
  - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD))   
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati)   
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)   
  - pinctrl: avoid unsafe code pattern in find_pinctrl() (Dmitry Torokhov)   
  - cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutný)   
  - Input: xpad - add PXN V900 support (Matthias Berndt)   
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco)   
  - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li)   
  - mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia)   
  - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl)   
  - iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell)   
  - usb: musb: Modify the "HWVers" register address (Xingxing Luo)   
  - usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo)   
  - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco)   
  - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng)   
  - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long)   
  - nfc: nci: assert requested protocol is valid (Jeremy Cline)   
  - ixgbe: fix crash with empty VF macvlan list (Dan Carpenter)   
  - drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze)   
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu)   
  - drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey)   
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede)   
  - RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev)   
  - LTS version: 4.14.327 (Saeed Mirzamohammadi)   
  - parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin)   
  - RDMA/mlx5: Fix NULL string error (Shay Drory)   
  - RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky)   
  - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski)   
  - IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET)   
  - cpupower: add Makefile dependencies for install targets (Ivan Babrou)   
  - sctp: update hb timer immediately after users change hb_interval (Xin Long)   
  - sctp: update transport state when processing a dupcook packet (Xin Long)   
  - tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell)   
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida)   
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells)   
  - modpost: add missing else to the "of" check (Mauricio Faria de Oliveira)   
  - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi)   
  - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald)   
  - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina)   
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng)   
  - wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva)   
  - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu)   
  - media: dvb: symbol fixup for dvb_attach() - again (Greg Kroah-Hartman)   
  - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel)   
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [Orabug: 35810543] {CVE-2023-4623}
  - ext4: fix rec_len verify error (Shida Zhang)   
  - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy)   
  - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer)   
  - ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer)   
  - ata: libata-core: Fix port and device removal (Damien Le Moal)   
  - ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal)   
  - btrfs: properly report 0 avail for very full file systems (Josef Bacik)   
  - i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit)   
  - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel)   
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian)   
  - serial: 8250_port: Check IRQ data before use (Andy Shevchenko)   
  - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg)   
  - watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg)   
  - ata: libahci: clear pending interrupt status (Szuying Chen)   
  - ata: ahci: Drop pointless VPRINTK() calls and convert the remaining ones (Hannes Reinecke)   
  - fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann)   
  - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel)   
  - ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian)   
  - selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian)   
  - parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller)   
  - parisc: iosapic.c: Fix sparse warnings (Helge Deller)   
  - parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller)   
  - xtensa: boot/lib: fix function prototypes (Max Filippov)   
  - xtensa: boot: don't add include-dirs (Randy Dunlap)   
  - clk: tegra: fix error return case for recalc_rate (Timo Alho)   
  - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang)   
  - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET)   
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan)   
  - powerpc/perf/hv-24x7: Update domain value check (Kajol Jain)   
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng)   
  - NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.532.3.el7uek]
changelog:
  - Revert "mmc: core: Capture correct oemid-bits for eMMC cards" (Dominique Martinet)   
  - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil)   
  - perf/core: Fix potential NULL deref (Peter Zijlstra)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.532.3.1.el7uek]
changelog:
  - KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson)  [Orabug: 36148712]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.533.1.el7uek]
changelog:
  - vhost-scsi: fix vqs allocation memory corruption (Dongli Zhang)  [Orabug: 36110885]  
  - xfs: try to avoid allocation blocking on busy extents (Mark Tinguely)  [Orabug: 35960820]  
  - KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson)  [Orabug: 35910097]


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.533.2.el7uek]
changelog:
  - LTS version: 4.14.334 (Yifei Liu)   
  - powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)   
  - powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)   
  - ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))   
  - team: Fix use-after-free when an option instance allocation fails (Florent Revest)   
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)   
  - HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)   
  - net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)   
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)   
  - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)   
  - HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)   
  - platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)   
  - bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)   
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)   
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)   
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)   
  - sign-file: Fix incorrect return values check (Yusong Gao)   
  - net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)   
  - qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu)   
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim)   
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)   
  - atm: solos-pci: Fix potential deadlock on &tx_queue_lock (Chengfeng Ye)   
  - atm: solos-pci: Fix potential deadlock on &cli_queue_lock (Chengfeng Ye)   
  - qca_spi: Fix reset behavior (Stefan Wahren)   
  - qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren)   
  - qca_debug: Prevent crash on TX ring changes (Stefan Wahren)   
  - LTS version: 4.14.333 (Yifei Liu)   
  - drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group (Ido Schimmel)   
  - psample: Require 'CAP_NET_ADMIN' when joining "packets" group (Ido Schimmel)   
  - genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel)   
  - netlink: don't call ->netlink_bind with table lock held (Ido Schimmel)   
  - nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi)   
  - KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda)   
  - serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl)   
  - serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack)   
  - parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams)   
  - packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)   
  - tracing: Fix a possible race when disabling buffered events (Petr Pavlu)   
  - tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu)   
  - tracing: Always update snapshot buffer size (Steven Rostedt (Google))   
  - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi)   
  - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)   
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu)   
  - tracing: Fix a warning when allocating buffered events fails (Petr Pavlu)   
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf)   
  - RDMA/bnxt_re: Correct module description string (Kalesh AP)   
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet)   
  - net: hns: fix fake link up on xge port (Yonglong Liu)   
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang)   
  - tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov)   
  - tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov)   
  - LTS version: 4.14.332 (Yifei Liu)   
  - driver core: Release all resources during unbind before updating device links (Saravana Kannan)   
  - net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea)   
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda)   
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)   
  - btrfs: send: ensure send_fd is writable (Jann Horn)   
  - btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana)   
  - powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson)   
  - dm verity: don't perform FEC for failed readahead IO (Wu Bo)   
  - dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka)   
  - firewire: core: fix possible memory leak in create_units() (Yang Yingliang)   
  - pinctrl: avoid reload of p state in list iteration (Maria Yu)   
  - usb: dwc3: set the dma max_seg_size (Ricardo Ribalda)   
  - USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak)   
  - USB: serial: option: fix FM101R-GL defines (Puliang Lu)   
  - USB: serial: option: add Fibocom L7xx modules (Victor Fragoso)   
  - bcache: prevent potential division by zero error (Rand Deeb)   
  - bcache: check return value from btree_node_alloc_replacement() (Coly Li)   
  - USB: serial: option: add Luat Air72*U series products (Asuna Yang)   
  - s390/dasd: protect device queue against concurrent access (Jan Höppner)   
  - mtd: rawnand: brcmnand: Fix ecc chunk calculation for erased page bitfips (Claire Lin)   
  - net: axienet: Fix check for partial TX checksum (Samuel Holland)   
  - amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju)   
  - amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju)   
  - arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini)   
  - net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez)   
  - ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan)   
  - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (Jonas Karlman)   
  - ata: pata_isapnp: Add missing error check for devm_ioport_map() (Chen Ni)   
  - drm/panel: simple: Fix Innolux G101ICE-L01 timings (Marek Vasut)   
  - RDMA/irdma: Prevent zero-length STAG registration (Christopher Bednarz)   
  - LTS version: 4.14.331 (Yifei Liu)   
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet)   
  - scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids (Dongli Zhang)   
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Kemeng Shi)   
  - ext4: correct return value of ext4_convert_meta_bg (Kemeng Shi)   
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi)   
  - ext4: apply umask if ACL support is disabled (Max Kellermann)   
  - media: venus: hfi: fix the check to handle session buffer requirement (Vikash Garodia)   
  - media: sharp: fix sharp encoding (Sean Young)   
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (Heiner Kallweit)   
  - net: dsa: lan9303: consequently nested-lock physical MDIO (Alexander Sverdlin)   
  - ALSA: info: Fix potential deadlock at disconnection (Takashi Iwai)   
  - parisc/pgtable: Do not drop upper 5 address bits of physical address (Helge Deller)   
  - parisc: Prevent booting 64-bit kernels on PA1.x machines (Helge Deller)   
  - mcb: fix error handling for different scenarios when parsing (Sanjuán García, Jorge)   
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng)   
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (Herve Codina)   
  - mmc: meson-gx: Remove setting of CMD_CFG_ERROR (Rong Chen)   
  - PM: hibernate: Clean up sync_read handling in snapshot_write_next() (Brian Geffon)   
  - PM: hibernate: Use __get_safe_page() rather than touching the list (Brian Geffon)   
  - mmc: vub300: fix an error code (Dan Carpenter)   
  - PCI/sysfs: Protect driver's D3cold preference from user space (Lukas Wunner)   
  - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (David Woodhouse)   
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() (Paul Moore)   
  - audit: don't take task_lock() in audit_exe_compare() code path (Paul Moore)   
  - KVM: x86: Ignore MSR_AMD64_TW_CFG access (Maciej S. Szmigiero)   
  - randstruct: Fix gcc-plugin performance mode to stay in group (Kees Cook)   
  - media: venus: hfi: add checks to perform sanity on queue pointers (Vikash Garodia)   
  - pwm: Fix double shift bug (Dan Carpenter)   
  - gfs2: ignore negated quota changes (Bob Peterson)   
  - media: vivid: avoid integer overflow (Hans Verkuil)   
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde)   
  - i2c: sun6i-p2wi: Prevent potential division by zero (Axel Lin)   
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang)   
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)   
  - atm: iphase: Do PCI error checks on own line (Ilpo Järvinen)   
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski)   
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat)   
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat)   
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng)   
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng)   
  - RDMA/hfi1: Use FIELD_GET() to extract Link Width (Ilpo Järvinen)   
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)   
  - selftests/efivarfs: create-read: fix a resource leak (zhujun2)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello)   
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet)   
  - wifi: ath10k: fix clang-specific fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix clang-specific fortify warnings (Dmitry Antipov)   
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih)   
  - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size (Mike Rapoport (IBM))   
  - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (Ronald Wahl)   
  - clocksource/drivers/timer-imx-gpt: Fix potential memory leak (Jacky Bai)   
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz)   
  - LTS version: 4.14.330 (Yifei Liu)   
  - btrfs: use u64 for buffer sizes in the tree search ioctls (Filipe Manana)   
  - fbdev: fsl-diu-fb: mark wr_reg_wa() static (Arnd Bergmann)   
  - netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Maciej Żenczykowski)   
  - tg3: power down device only on SYSTEM_POWER_OFF (George Shuklin)   
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. (Kuniyuki Iwashima)   
  - dccp: Call security_inet_conn_request() after setting IPv4 addresses. (Kuniyuki Iwashima)   
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida)   
  - llc: verify mac len before reading mac header (Willem de Bruijn)   
  - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (Florian Fainelli)   
  - media: s3c-camif: Avoid inappropriate kfree() (Katya Orlova)   
  - pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: ds: fix refcount leak in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: cs: fix possible hung task and memory leak pccardd() (Yang Yingliang)   
  - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (Christophe JAILLET)   
  - USB: usbip: fix stub_dev hub disconnect (Jonas Blixt)   
  - misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan)   
  - dmaengine: ti: edma: handle irq_of_parse_and_map() errors (Dan Carpenter)   
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai)   
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang)   
  - mfd: dln2: Fix double put in dln2_probe (Dinghao Liu)   
  - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (Cezary Rojewski)   
  - sh: bios: Revive earlyprintk support (Geert Uytterhoeven)   
  - RDMA/hfi1: Workaround truncation compilation error (Leon Romanovsky)   
  - ext4: move 'ix' sanity check to corrent position (Gou Hao)   
  - ARM: 9321/1: memset: cast the constant byte to unsigned char (Kursad Oney)   
  - hwrng: geode - fix accessing registers (Jonas Gorski)   
  - firmware: ti_sci: Mark driver as non removable (Dhruva Gole)   
  - ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator (Krzysztof Kozlowski)   
  - drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (Christophe JAILLET)   
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze)   
  - drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (Jonas Karlman)   
  - platform/x86: wmi: Fix probe failure when failing to register WMI devices (Armin Wolf)   
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (Dan Carpenter)   
  - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (Devi Priya)   
  - ipv6: avoid atomic fragment on GSO packets (Yan Zhai)   
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (Christophe JAILLET)   
  - thermal: core: prevent potential string overflow (Dan Carpenter)   
  - wifi: rtlwifi: fix EDCA limit set by BT coexistence (Dmitry Antipov)   
  - tcp_metrics: do not create an entry from tcp_init_metrics() (Eric Dumazet)   
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() (Eric Dumazet)   
  - i40e: fix potential memory leaks in i40e_remove() (Andrii Staikov)   
  - LTS version: 4.14.329 (Yifei Liu)   
  - tty: 8250: Add support for Intashield IS-100 (Cameron Williams)   
  - tty: 8250: Add support for Brainboxes UP cards (Cameron Williams)   
  - tty: 8250: Add support for additional Brainboxes UC cards (Cameron Williams)   
  - tty: 8250: Remove UC-257 and UC-431 (Cameron Williams)   
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility (LihaSika)   
  - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (Vicki Pfau)   
  - remove the sx8 block driver (Christoph Hellwig)   
  - ata: ahci: fix enum constants for gcc-13 (Arnd Bergmann)   
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Su Hui)   
  - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (Hans de Goede)   
  - scsi: mpt3sas: Fix in error path (Tomas Henzl)   
  - fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() (Jorge Maidana)   
  - ASoC: rt5650: fix the wrong result of key button (Shuming Fan)   
  - netfilter: nfnetlink_log: silence bogus compiler warning (Florian Westphal)   
  - fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (Arnd Bergmann)   
  - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (Dmitry Torokhov)   
  - dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (Zhang Shurong)   
  - irqchip/stm32-exti: add missing DT IRQ flag translation (Ben Wolsieffer)   
  - ASoC: simple-card: fixup asoc_simple_probe() error handling (Kuninori Morimoto)   
  - x86: Fix .brk attribute in linker script (Juergen Gross)   
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Hangyu Hua)   
  - rpmsg: glink: Release driver_override (Bjorn Andersson)   
  - rpmsg: Fix calling device_lock() on non-initialized device (Krzysztof Kozlowski)   
  - rpmsg: Fix kfree() of static memory on setting driver_override (Krzysztof Kozlowski)   
  - driver: platform: Add helper for safer setting of driver_override (Krzysztof Kozlowski)   
  - x86/mm: Fix RESERVE_BRK() for older binutils (Josh Poimboeuf)   
  - x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf)   
  - x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility (Thomas Gleixner)   
  - nfsd: lock_rename() needs both directories to live on the same fs (Al Viro)   
  - f2fs: fix to do sanity check on inode type during garbage collection (Chao Yu)   
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai)   
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() (Lukasz Majczak)   
  - ARM: 8933/1: replace Sun/Solaris style flag on section directive (Nick Desaulniers)   
  - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera)   
  - gtp: uapi: fix GTPA_MAX (Pablo Neira Ayuso)   
  - tcp: fix wrong RTO timeout when received SACK reneging (Fred Chen)   
  - r8152: Increase USB control msg timeout to 5000ms as per spec (Douglas Anderson)   
  - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (Mateusz Palczewski)   
  - treewide: Spelling fix in comment (Kunwu Chan)   
  - virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan)   
  - mcb-lpc: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - mcb: Return actual parsed size when reading chameleon table (Rodríguez Barbarin, José Javier)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.533.3.el7uek]
changelog:
  - net: rfkill: gpio: set GPIO direction (Rouven Czerwinski)   
  - sched/fair: Fix tg->load when offlining a CPU (Vincent Guittot)  [Orabug: 36185208]  
  - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang)  [Orabug: 36143229]  
  - sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello)  [Orabug: 35181559]  {CVE-2023-1077}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.532.2.el7uek]
changelog:
  - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli)  [Orabug: 35905888]  
  - LTS version: 4.14.328 (Saeed Mirzamohammadi)   
  - Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz)   
  - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook)   
  - Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD)   
  - gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen)   
  - s390/pci: fix iommu bitmap allocation (Niklas Schnelle)   
  - perf: Disallow mis-matched inherited group reads (Saeed Mirzamohammadi)   
  - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu)   
  - USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoît Monin)   
  - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda)   
  - ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L)   
  - Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" (Andy Shevchenko)   
  - mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman)   
  - sky2: Make sure there is at least one frag_addr available (Kees Cook)   
  - wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg)   
  - wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong)   
  - Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz)   
  - Bluetooth: Avoid redundant authentication (Ying Hsu)   
  - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke)   
  - tracing: relax trace_event_eval_update() execution with cond_resched() (Clément Léger)   
  - ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal)   
  - gpio: timberdale: Fix potential deadlock on &tgpio->lock (Chengfeng Ye)   
  - overlayfs: set ctime when setting mtime and atime (Jeff Layton)   
  - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit)   
  - btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik)   
  - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren)   
  - i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt)   
  - net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter)   
  - net: rfkill: gpio: prevent value glitch during probe (Josua Mayer)   
  - net: ipv6: fix return value check in esp_remove_trailer (Ma Ke)   
  - net: ipv4: fix return value check in esp_remove_trailer (Ma Ke)   
  - xfrm: fix a data-race in xfrm_gen_index() (Saeed Mirzamohammadi)   
  - netfilter: nft_payload: fix wrong mac header matching (Florian Westphal)   
  - KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson)   
  - regmap: fix NULL deref on lookup (Johan Hovold)   
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski)   
  - Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann)   
  - Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz)   
  - Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy)   
  - Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan)   
  - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi) [Orabug: 35959597] {CVE-2020-26555}
  - Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi)   
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo)   
  - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD))   
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati)   
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)   
  - pinctrl: avoid unsafe code pattern in find_pinctrl() (Dmitry Torokhov)   
  - cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutný)   
  - Input: xpad - add PXN V900 support (Matthias Berndt)   
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco)   
  - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li)   
  - mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia)   
  - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl)   
  - iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell)   
  - usb: musb: Modify the "HWVers" register address (Xingxing Luo)   
  - usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo)   
  - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco)   
  - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng)   
  - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long)   
  - nfc: nci: assert requested protocol is valid (Jeremy Cline)   
  - ixgbe: fix crash with empty VF macvlan list (Dan Carpenter)   
  - drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze)   
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu)   
  - drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey)   
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede)   
  - RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev)   
  - LTS version: 4.14.327 (Saeed Mirzamohammadi)   
  - parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin)   
  - RDMA/mlx5: Fix NULL string error (Shay Drory)   
  - RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky)   
  - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski)   
  - IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET)   
  - cpupower: add Makefile dependencies for install targets (Ivan Babrou)   
  - sctp: update hb timer immediately after users change hb_interval (Xin Long)   
  - sctp: update transport state when processing a dupcook packet (Xin Long)   
  - tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell)   
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida)   
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells)   
  - modpost: add missing else to the "of" check (Mauricio Faria de Oliveira)   
  - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi)   
  - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald)   
  - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina)   
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng)   
  - wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva)   
  - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu)   
  - media: dvb: symbol fixup for dvb_attach() - again (Greg Kroah-Hartman)   
  - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel)   
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [Orabug: 35810543] {CVE-2023-4623}
  - ext4: fix rec_len verify error (Shida Zhang)   
  - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy)   
  - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer)   
  - ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer)   
  - ata: libata-core: Fix port and device removal (Damien Le Moal)   
  - ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal)   
  - btrfs: properly report 0 avail for very full file systems (Josef Bacik)   
  - i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit)   
  - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel)   
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian)   
  - serial: 8250_port: Check IRQ data before use (Andy Shevchenko)   
  - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg)   
  - watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg)   
  - ata: libahci: clear pending interrupt status (Szuying Chen)   
  - ata: ahci: Drop pointless VPRINTK() calls and convert the remaining ones (Hannes Reinecke)   
  - fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann)   
  - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel)   
  - ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian)   
  - selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian)   
  - parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller)   
  - parisc: iosapic.c: Fix sparse warnings (Helge Deller)   
  - parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller)   
  - xtensa: boot/lib: fix function prototypes (Max Filippov)   
  - xtensa: boot: don't add include-dirs (Randy Dunlap)   
  - clk: tegra: fix error return case for recalc_rate (Timo Alho)   
  - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang)   
  - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET)   
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan)   
  - powerpc/perf/hv-24x7: Update domain value check (Kajol Jain)   
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng)   
  - NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust)


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.533.2.el7uek]
changelog:
  - LTS version: 4.14.334 (Yifei Liu)   
  - powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)   
  - powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)   
  - ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))   
  - team: Fix use-after-free when an option instance allocation fails (Florent Revest)   
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)   
  - HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)   
  - net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)   
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)   
  - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)   
  - HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)   
  - platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)   
  - bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)   
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)   
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)   
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)   
  - sign-file: Fix incorrect return values check (Yusong Gao)   
  - net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)   
  - qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu)   
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim)   
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)   
  - atm: solos-pci: Fix potential deadlock on &tx_queue_lock (Chengfeng Ye)   
  - atm: solos-pci: Fix potential deadlock on &cli_queue_lock (Chengfeng Ye)   
  - qca_spi: Fix reset behavior (Stefan Wahren)   
  - qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren)   
  - qca_debug: Prevent crash on TX ring changes (Stefan Wahren)   
  - LTS version: 4.14.333 (Yifei Liu)   
  - drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group (Ido Schimmel)   
  - psample: Require 'CAP_NET_ADMIN' when joining "packets" group (Ido Schimmel)   
  - genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel)   
  - netlink: don't call ->netlink_bind with table lock held (Ido Schimmel)   
  - nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi)   
  - KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda)   
  - serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl)   
  - serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack)   
  - parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams)   
  - packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)   
  - tracing: Fix a possible race when disabling buffered events (Petr Pavlu)   
  - tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu)   
  - tracing: Always update snapshot buffer size (Steven Rostedt (Google))   
  - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi)   
  - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)   
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu)   
  - tracing: Fix a warning when allocating buffered events fails (Petr Pavlu)   
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf)   
  - RDMA/bnxt_re: Correct module description string (Kalesh AP)   
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet)   
  - net: hns: fix fake link up on xge port (Yonglong Liu)   
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang)   
  - tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov)   
  - tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov)   
  - LTS version: 4.14.332 (Yifei Liu)   
  - driver core: Release all resources during unbind before updating device links (Saravana Kannan)   
  - net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea)   
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda)   
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)   
  - btrfs: send: ensure send_fd is writable (Jann Horn)   
  - btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana)   
  - powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson)   
  - dm verity: don't perform FEC for failed readahead IO (Wu Bo)   
  - dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka)   
  - firewire: core: fix possible memory leak in create_units() (Yang Yingliang)   
  - pinctrl: avoid reload of p state in list iteration (Maria Yu)   
  - usb: dwc3: set the dma max_seg_size (Ricardo Ribalda)   
  - USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak)   
  - USB: serial: option: fix FM101R-GL defines (Puliang Lu)   
  - USB: serial: option: add Fibocom L7xx modules (Victor Fragoso)   
  - bcache: prevent potential division by zero error (Rand Deeb)   
  - bcache: check return value from btree_node_alloc_replacement() (Coly Li)   
  - USB: serial: option: add Luat Air72*U series products (Asuna Yang)   
  - s390/dasd: protect device queue against concurrent access (Jan Höppner)   
  - mtd: rawnand: brcmnand: Fix ecc chunk calculation for erased page bitfips (Claire Lin)   
  - net: axienet: Fix check for partial TX checksum (Samuel Holland)   
  - amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju)   
  - amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju)   
  - arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini)   
  - net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez)   
  - ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan)   
  - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (Jonas Karlman)   
  - ata: pata_isapnp: Add missing error check for devm_ioport_map() (Chen Ni)   
  - drm/panel: simple: Fix Innolux G101ICE-L01 timings (Marek Vasut)   
  - RDMA/irdma: Prevent zero-length STAG registration (Christopher Bednarz) [Orabug: 36155615] {CVE-2023-25775}
  - LTS version: 4.14.331 (Yifei Liu)   
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet) [Orabug: 35250826] {CVE-2023-0590}
  - scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids (Dongli Zhang)   
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Kemeng Shi)   
  - ext4: correct return value of ext4_convert_meta_bg (Kemeng Shi)   
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi)   
  - ext4: apply umask if ACL support is disabled (Max Kellermann)   
  - media: venus: hfi: fix the check to handle session buffer requirement (Vikash Garodia)   
  - media: sharp: fix sharp encoding (Sean Young)   
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (Heiner Kallweit)   
  - net: dsa: lan9303: consequently nested-lock physical MDIO (Alexander Sverdlin)   
  - ALSA: info: Fix potential deadlock at disconnection (Takashi Iwai)   
  - parisc/pgtable: Do not drop upper 5 address bits of physical address (Helge Deller)   
  - parisc: Prevent booting 64-bit kernels on PA1.x machines (Helge Deller)   
  - mcb: fix error handling for different scenarios when parsing (Sanjuán García, Jorge)   
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng)   
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (Herve Codina)   
  - mmc: meson-gx: Remove setting of CMD_CFG_ERROR (Rong Chen)   
  - PM: hibernate: Clean up sync_read handling in snapshot_write_next() (Brian Geffon)   
  - PM: hibernate: Use __get_safe_page() rather than touching the list (Brian Geffon)   
  - mmc: vub300: fix an error code (Dan Carpenter)   
  - PCI/sysfs: Protect driver's D3cold preference from user space (Lukas Wunner)   
  - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (David Woodhouse)   
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() (Paul Moore)   
  - audit: don't take task_lock() in audit_exe_compare() code path (Paul Moore)   
  - KVM: x86: Ignore MSR_AMD64_TW_CFG access (Maciej S. Szmigiero)   
  - randstruct: Fix gcc-plugin performance mode to stay in group (Kees Cook)   
  - media: venus: hfi: add checks to perform sanity on queue pointers (Vikash Garodia)   
  - pwm: Fix double shift bug (Dan Carpenter)   
  - gfs2: ignore negated quota changes (Bob Peterson)   
  - media: vivid: avoid integer overflow (Hans Verkuil)   
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde)   
  - i2c: sun6i-p2wi: Prevent potential division by zero (Axel Lin)   
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang)   
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)   
  - atm: iphase: Do PCI error checks on own line (Ilpo Järvinen)   
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski)   
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat)   
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat)   
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng)   
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng)   
  - RDMA/hfi1: Use FIELD_GET() to extract Link Width (Ilpo Järvinen)   
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)   
  - selftests/efivarfs: create-read: fix a resource leak (zhujun2)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello)   
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet)   
  - wifi: ath10k: fix clang-specific fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix clang-specific fortify warnings (Dmitry Antipov)   
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih)   
  - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size (Mike Rapoport (IBM))   
  - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (Ronald Wahl)   
  - clocksource/drivers/timer-imx-gpt: Fix potential memory leak (Jacky Bai)   
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz)   
  - LTS version: 4.14.330 (Yifei Liu)   
  - btrfs: use u64 for buffer sizes in the tree search ioctls (Filipe Manana)   
  - fbdev: fsl-diu-fb: mark wr_reg_wa() static (Arnd Bergmann)   
  - netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Maciej Żenczykowski)   
  - tg3: power down device only on SYSTEM_POWER_OFF (George Shuklin)   
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. (Kuniyuki Iwashima)   
  - dccp: Call security_inet_conn_request() after setting IPv4 addresses. (Kuniyuki Iwashima)   
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida)   
  - llc: verify mac len before reading mac header (Willem de Bruijn)   
  - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (Florian Fainelli)   
  - media: s3c-camif: Avoid inappropriate kfree() (Katya Orlova)   
  - pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: ds: fix refcount leak in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: cs: fix possible hung task and memory leak pccardd() (Yang Yingliang)   
  - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (Christophe JAILLET)   
  - USB: usbip: fix stub_dev hub disconnect (Jonas Blixt)   
  - misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan)   
  - dmaengine: ti: edma: handle irq_of_parse_and_map() errors (Dan Carpenter)   
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai)   
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang)   
  - mfd: dln2: Fix double put in dln2_probe (Dinghao Liu)   
  - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (Cezary Rojewski)   
  - sh: bios: Revive earlyprintk support (Geert Uytterhoeven)   
  - RDMA/hfi1: Workaround truncation compilation error (Leon Romanovsky)   
  - ext4: move 'ix' sanity check to corrent position (Gou Hao)   
  - ARM: 9321/1: memset: cast the constant byte to unsigned char (Kursad Oney)   
  - hwrng: geode - fix accessing registers (Jonas Gorski)   
  - firmware: ti_sci: Mark driver as non removable (Dhruva Gole)   
  - ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator (Krzysztof Kozlowski)   
  - drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (Christophe JAILLET)   
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze)   
  - drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (Jonas Karlman)   
  - platform/x86: wmi: Fix probe failure when failing to register WMI devices (Armin Wolf)   
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (Dan Carpenter)   
  - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (Devi Priya)   
  - ipv6: avoid atomic fragment on GSO packets (Yan Zhai)   
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (Christophe JAILLET)   
  - thermal: core: prevent potential string overflow (Dan Carpenter)   
  - wifi: rtlwifi: fix EDCA limit set by BT coexistence (Dmitry Antipov)   
  - tcp_metrics: do not create an entry from tcp_init_metrics() (Eric Dumazet)   
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() (Eric Dumazet)   
  - i40e: fix potential memory leaks in i40e_remove() (Andrii Staikov)   
  - LTS version: 4.14.329 (Yifei Liu)   
  - tty: 8250: Add support for Intashield IS-100 (Cameron Williams)   
  - tty: 8250: Add support for Brainboxes UP cards (Cameron Williams)   
  - tty: 8250: Add support for additional Brainboxes UC cards (Cameron Williams)   
  - tty: 8250: Remove UC-257 and UC-431 (Cameron Williams)   
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility (LihaSika)   
  - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (Vicki Pfau)   
  - remove the sx8 block driver (Christoph Hellwig)   
  - ata: ahci: fix enum constants for gcc-13 (Arnd Bergmann)   
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Su Hui)   
  - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (Hans de Goede)   
  - scsi: mpt3sas: Fix in error path (Tomas Henzl)   
  - fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() (Jorge Maidana)   
  - ASoC: rt5650: fix the wrong result of key button (Shuming Fan)   
  - netfilter: nfnetlink_log: silence bogus compiler warning (Florian Westphal)   
  - fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (Arnd Bergmann)   
  - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (Dmitry Torokhov)   
  - dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (Zhang Shurong)   
  - irqchip/stm32-exti: add missing DT IRQ flag translation (Ben Wolsieffer)   
  - ASoC: simple-card: fixup asoc_simple_probe() error handling (Kuninori Morimoto)   
  - x86: Fix .brk attribute in linker script (Juergen Gross)   
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Hangyu Hua)   
  - rpmsg: glink: Release driver_override (Bjorn Andersson)   
  - rpmsg: Fix calling device_lock() on non-initialized device (Krzysztof Kozlowski)   
  - rpmsg: Fix kfree() of static memory on setting driver_override (Krzysztof Kozlowski)   
  - driver: platform: Add helper for safer setting of driver_override (Krzysztof Kozlowski)   
  - x86/mm: Fix RESERVE_BRK() for older binutils (Josh Poimboeuf)   
  - x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf) [Orabug: 34335626] {CVE-2022-23816} {CVE-2022-29901}
  - x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility (Thomas Gleixner)   
  - nfsd: lock_rename() needs both directories to live on the same fs (Al Viro)   
  - f2fs: fix to do sanity check on inode type during garbage collection (Chao Yu)   
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai) [Orabug: 35924075] {CVE-2023-45863}
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() (Lukasz Majczak)   
  - ARM: 8933/1: replace Sun/Solaris style flag on section directive (Nick Desaulniers)   
  - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera)   
  - gtp: uapi: fix GTPA_MAX (Pablo Neira Ayuso)   
  - tcp: fix wrong RTO timeout when received SACK reneging (Fred Chen)   
  - r8152: Increase USB control msg timeout to 5000ms as per spec (Douglas Anderson)   
  - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (Mateusz Palczewski)   
  - treewide: Spelling fix in comment (Kunwu Chan)   
  - virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan)   
  - mcb-lpc: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - mcb: Return actual parsed size when reading chameleon table (Rodríguez Barbarin, José Javier)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.534.1.el7uek]
changelog:
  -  LTS version: 4.14.336 (Yifei Liu)   
  - mmc: core: Cancel delayed work before releasing host (Geert Uytterhoeven)   
  - mmc: rpmb: fixes pause retune on all RPMB partitions. (Jorge Ramirez-Ortiz)   
  - firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards (Takashi Sakamoto)   
  - i40e: fix use-after-free in i40e_aqc_add_filters() (Ke Xiao)   
  - net: bcmgenet: Fix FCS generation for fragmented skbuffs (Adrian Cinal)   
  - net: sched: em_text: fix possible memory leak in em_text_destroy() (Hangyu Hua)   
  - nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local (Siddh Raman Pant)   
  - LTS version: 4.14.335 (Yifei Liu)   
  - block: Don't invalidate pagecache for invalid falloc modes (Sarthak Kukreti)   
  - dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() (Mikulas Patocka)   
  - net: 9p: avoid freeing uninit memory in p9pdu_vreadf (Fedor Pchelkin)   
  - Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (Luiz Augusto von Dentz)   
  - USB: serial: option: add Quectel RM500Q R13 firmware support (Reinhard Speyerer)   
  - USB: serial: option: add Foxconn T99W265 with new baseline (Slark Xiao)   
  - USB: serial: option: add Quectel EG912Y module support (Alper Ak)   
  - USB: serial: ftdi_sio: update Actisense PIDs constant names (Mark Glover)   
  - wifi: cfg80211: fix certs build to not depend on file order (Johannes Berg)   
  - wifi: cfg80211: Add my certificate (Chen-Yu Tsai)   
  - iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table (Javier Carrasco)   
  - Input: ipaq-micro-keys - add error handling for devm_kmemdup (Haoran Liu)   
  - iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw (Su Hui)   
  - ethernet: atheros: fix a memleak in atl1e_setup_ring_resources (Zhipeng Lu)   
  - net: sched: ife: fix potential use-after-free (Eric Dumazet)   
  - wifi: mac80211: mesh_plink: fix matches_local logic (Johannes Berg)   
  - s390/vx: fix save/restore of fpu kernel context (Heiko Carstens)   
  - ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (Kunwu Chan)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.534.2.el7uek]
changelog:
  - workqueue: Make sure struct worker is accessible for wq_worker_comm() (Tejun Heo)  [Orabug: 36300552]  
  - workqueue: Show the latest workqueue name in /proc/PID/{comm,stat,status} (Tejun Heo)  [Orabug: 36300552]  
  - workqueue: Set worker->desc to workqueue name by default (Tejun Heo)  [Orabug: 36300552]  
  - workqueue: Make worker_attach/detach_pool() update worker->pool (Tejun Heo)  [Orabug: 36300552]  
  - workqueue: Replace pool->attach_mutex with global wq_pool_attach_mutex (Tejun Heo)  [Orabug: 36300552]


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.534.3.el7uek]
changelog:
  - scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 36345169]  
  - scsi: megaraid_sas: Update max supported LD IDs to 240 (Chandrakanth Patil)  [Orabug: 36344166]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.534.3.1.el7uek]
changelog:
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36251145]  {CVE-2024-1086}


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.533.2.el7uek]
changelog:
  - LTS version: 4.14.334 (Yifei Liu)   
  - powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)   
  - powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)   
  - ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))   
  - team: Fix use-after-free when an option instance allocation fails (Florent Revest)   
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)   
  - HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)   
  - net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)   
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)   
  - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)   
  - HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)   
  - platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)   
  - bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)   
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)   
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)   
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)   
  - sign-file: Fix incorrect return values check (Yusong Gao)   
  - net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)   
  - qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu)   
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim)   
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim) [Orabug: 36229395] {CVE-2023-51780}
  - atm: solos-pci: Fix potential deadlock on &tx_queue_lock (Chengfeng Ye)   
  - atm: solos-pci: Fix potential deadlock on &cli_queue_lock (Chengfeng Ye)   
  - qca_spi: Fix reset behavior (Stefan Wahren)   
  - qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren)   
  - qca_debug: Prevent crash on TX ring changes (Stefan Wahren)   
  - LTS version: 4.14.333 (Yifei Liu)   
  - drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group (Ido Schimmel)   
  - psample: Require 'CAP_NET_ADMIN' when joining "packets" group (Ido Schimmel)   
  - genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel)   
  - netlink: don't call ->netlink_bind with table lock held (Ido Schimmel)   
  - nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi)   
  - KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda)   
  - serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl)   
  - serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack)   
  - parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams)   
  - packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)   
  - tracing: Fix a possible race when disabling buffered events (Petr Pavlu)   
  - tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu)   
  - tracing: Always update snapshot buffer size (Steven Rostedt (Google))   
  - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi)   
  - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)   
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu)   
  - tracing: Fix a warning when allocating buffered events fails (Petr Pavlu)   
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf)   
  - RDMA/bnxt_re: Correct module description string (Kalesh AP)   
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet)   
  - net: hns: fix fake link up on xge port (Yonglong Liu)   
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang)   
  - tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov)   
  - tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov)   
  - LTS version: 4.14.332 (Yifei Liu)   
  - driver core: Release all resources during unbind before updating device links (Saravana Kannan)   
  - net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea)   
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda)   
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)   
  - btrfs: send: ensure send_fd is writable (Jann Horn)   
  - btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana)   
  - powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson)   
  - dm verity: don't perform FEC for failed readahead IO (Wu Bo)   
  - dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka)   
  - firewire: core: fix possible memory leak in create_units() (Yang Yingliang)   
  - pinctrl: avoid reload of p state in list iteration (Maria Yu)   
  - usb: dwc3: set the dma max_seg_size (Ricardo Ribalda)   
  - USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak)   
  - USB: serial: option: fix FM101R-GL defines (Puliang Lu)   
  - USB: serial: option: add Fibocom L7xx modules (Victor Fragoso)   
  - bcache: prevent potential division by zero error (Rand Deeb)   
  - bcache: check return value from btree_node_alloc_replacement() (Coly Li)   
  - USB: serial: option: add Luat Air72*U series products (Asuna Yang)   
  - s390/dasd: protect device queue against concurrent access (Jan Höppner)   
  - mtd: rawnand: brcmnand: Fix ecc chunk calculation for erased page bitfips (Claire Lin)   
  - net: axienet: Fix check for partial TX checksum (Samuel Holland)   
  - amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju)   
  - amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju)   
  - arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini)   
  - net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez)   
  - ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan)   
  - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (Jonas Karlman)   
  - ata: pata_isapnp: Add missing error check for devm_ioport_map() (Chen Ni)   
  - drm/panel: simple: Fix Innolux G101ICE-L01 timings (Marek Vasut)   
  - RDMA/irdma: Prevent zero-length STAG registration (Christopher Bednarz) [Orabug: 36155615] {CVE-2023-25775}
  - LTS version: 4.14.331 (Yifei Liu)   
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet) [Orabug: 35250826] {CVE-2023-0590}
  - scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids (Dongli Zhang)   
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Kemeng Shi)   
  - ext4: correct return value of ext4_convert_meta_bg (Kemeng Shi)   
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi)   
  - ext4: apply umask if ACL support is disabled (Max Kellermann)   
  - media: venus: hfi: fix the check to handle session buffer requirement (Vikash Garodia)   
  - media: sharp: fix sharp encoding (Sean Young)   
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (Heiner Kallweit)   
  - net: dsa: lan9303: consequently nested-lock physical MDIO (Alexander Sverdlin)   
  - ALSA: info: Fix potential deadlock at disconnection (Takashi Iwai)   
  - parisc/pgtable: Do not drop upper 5 address bits of physical address (Helge Deller)   
  - parisc: Prevent booting 64-bit kernels on PA1.x machines (Helge Deller)   
  - mcb: fix error handling for different scenarios when parsing (Sanjuán García, Jorge)   
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng)   
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (Herve Codina)   
  - mmc: meson-gx: Remove setting of CMD_CFG_ERROR (Rong Chen)   
  - PM: hibernate: Clean up sync_read handling in snapshot_write_next() (Brian Geffon)   
  - PM: hibernate: Use __get_safe_page() rather than touching the list (Brian Geffon)   
  - mmc: vub300: fix an error code (Dan Carpenter)   
  - PCI/sysfs: Protect driver's D3cold preference from user space (Lukas Wunner)   
  - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (David Woodhouse)   
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() (Paul Moore)   
  - audit: don't take task_lock() in audit_exe_compare() code path (Paul Moore)   
  - KVM: x86: Ignore MSR_AMD64_TW_CFG access (Maciej S. Szmigiero)   
  - randstruct: Fix gcc-plugin performance mode to stay in group (Kees Cook)   
  - media: venus: hfi: add checks to perform sanity on queue pointers (Vikash Garodia)   
  - pwm: Fix double shift bug (Dan Carpenter)   
  - gfs2: ignore negated quota changes (Bob Peterson)   
  - media: vivid: avoid integer overflow (Hans Verkuil)   
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde)   
  - i2c: sun6i-p2wi: Prevent potential division by zero (Axel Lin)   
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang)   
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)   
  - atm: iphase: Do PCI error checks on own line (Ilpo Järvinen)   
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski)   
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat)   
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat)   
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng)   
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng)   
  - RDMA/hfi1: Use FIELD_GET() to extract Link Width (Ilpo Järvinen)   
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)   
  - selftests/efivarfs: create-read: fix a resource leak (zhujun2)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello)   
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet)   
  - wifi: ath10k: fix clang-specific fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix clang-specific fortify warnings (Dmitry Antipov)   
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih)   
  - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size (Mike Rapoport (IBM))   
  - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (Ronald Wahl)   
  - clocksource/drivers/timer-imx-gpt: Fix potential memory leak (Jacky Bai)   
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz)   
  - LTS version: 4.14.330 (Yifei Liu)   
  - btrfs: use u64 for buffer sizes in the tree search ioctls (Filipe Manana)   
  - fbdev: fsl-diu-fb: mark wr_reg_wa() static (Arnd Bergmann)   
  - netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Maciej Żenczykowski)   
  - tg3: power down device only on SYSTEM_POWER_OFF (George Shuklin)   
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. (Kuniyuki Iwashima)   
  - dccp: Call security_inet_conn_request() after setting IPv4 addresses. (Kuniyuki Iwashima)   
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida)   
  - llc: verify mac len before reading mac header (Willem de Bruijn)   
  - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (Florian Fainelli)   
  - media: s3c-camif: Avoid inappropriate kfree() (Katya Orlova)   
  - pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: ds: fix refcount leak in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: cs: fix possible hung task and memory leak pccardd() (Yang Yingliang)   
  - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (Christophe JAILLET)   
  - USB: usbip: fix stub_dev hub disconnect (Jonas Blixt)   
  - misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan)   
  - dmaengine: ti: edma: handle irq_of_parse_and_map() errors (Dan Carpenter)   
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai)   
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang)   
  - mfd: dln2: Fix double put in dln2_probe (Dinghao Liu)   
  - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (Cezary Rojewski)   
  - sh: bios: Revive earlyprintk support (Geert Uytterhoeven)   
  - RDMA/hfi1: Workaround truncation compilation error (Leon Romanovsky)   
  - ext4: move 'ix' sanity check to corrent position (Gou Hao)   
  - ARM: 9321/1: memset: cast the constant byte to unsigned char (Kursad Oney)   
  - hwrng: geode - fix accessing registers (Jonas Gorski)   
  - firmware: ti_sci: Mark driver as non removable (Dhruva Gole)   
  - ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator (Krzysztof Kozlowski)   
  - drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (Christophe JAILLET)   
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze)   
  - drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (Jonas Karlman)   
  - platform/x86: wmi: Fix probe failure when failing to register WMI devices (Armin Wolf)   
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (Dan Carpenter)   
  - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (Devi Priya)   
  - ipv6: avoid atomic fragment on GSO packets (Yan Zhai)   
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (Christophe JAILLET)   
  - thermal: core: prevent potential string overflow (Dan Carpenter)   
  - wifi: rtlwifi: fix EDCA limit set by BT coexistence (Dmitry Antipov)   
  - tcp_metrics: do not create an entry from tcp_init_metrics() (Eric Dumazet)   
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() (Eric Dumazet)   
  - i40e: fix potential memory leaks in i40e_remove() (Andrii Staikov)   
  - LTS version: 4.14.329 (Yifei Liu)   
  - tty: 8250: Add support for Intashield IS-100 (Cameron Williams)   
  - tty: 8250: Add support for Brainboxes UP cards (Cameron Williams)   
  - tty: 8250: Add support for additional Brainboxes UC cards (Cameron Williams)   
  - tty: 8250: Remove UC-257 and UC-431 (Cameron Williams)   
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility (LihaSika)   
  - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (Vicki Pfau)   
  - remove the sx8 block driver (Christoph Hellwig)   
  - ata: ahci: fix enum constants for gcc-13 (Arnd Bergmann)   
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Su Hui)   
  - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (Hans de Goede)   
  - scsi: mpt3sas: Fix in error path (Tomas Henzl)   
  - fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() (Jorge Maidana)   
  - ASoC: rt5650: fix the wrong result of key button (Shuming Fan)   
  - netfilter: nfnetlink_log: silence bogus compiler warning (Florian Westphal)   
  - fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (Arnd Bergmann)   
  - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (Dmitry Torokhov)   
  - dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (Zhang Shurong)   
  - irqchip/stm32-exti: add missing DT IRQ flag translation (Ben Wolsieffer)   
  - ASoC: simple-card: fixup asoc_simple_probe() error handling (Kuninori Morimoto)   
  - x86: Fix .brk attribute in linker script (Juergen Gross)   
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Hangyu Hua)   
  - rpmsg: glink: Release driver_override (Bjorn Andersson)   
  - rpmsg: Fix calling device_lock() on non-initialized device (Krzysztof Kozlowski)   
  - rpmsg: Fix kfree() of static memory on setting driver_override (Krzysztof Kozlowski)   
  - driver: platform: Add helper for safer setting of driver_override (Krzysztof Kozlowski)   
  - x86/mm: Fix RESERVE_BRK() for older binutils (Josh Poimboeuf)   
  - x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf) [Orabug: 34335626] {CVE-2022-23816} {CVE-2022-29901}
  - x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility (Thomas Gleixner)   
  - nfsd: lock_rename() needs both directories to live on the same fs (Al Viro)   
  - f2fs: fix to do sanity check on inode type during garbage collection (Chao Yu)   
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai) [Orabug: 35924075] {CVE-2023-45863}
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() (Lukasz Majczak)   
  - ARM: 8933/1: replace Sun/Solaris style flag on section directive (Nick Desaulniers)   
  - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera)   
  - gtp: uapi: fix GTPA_MAX (Pablo Neira Ayuso)   
  - tcp: fix wrong RTO timeout when received SACK reneging (Fred Chen)   
  - r8152: Increase USB control msg timeout to 5000ms as per spec (Douglas Anderson)   
  - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (Mateusz Palczewski)   
  - treewide: Spelling fix in comment (Kunwu Chan)   
  - virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan)   
  - mcb-lpc: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - mcb: Return actual parsed size when reading chameleon table (Rodríguez Barbarin, José Javier)


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.535.1.el7uek]
changelog:
  - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334310]  
  - net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248431]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.535.2.el7uek]
changelog:
  - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 33499812]  
  - LTS version: v4.14.338 (Saeed Mirzamohammadi)   
  - crypto: scompress - initialize per-CPU variables on each CPU (Sebastian Andrzej Siewior)   
  - Revert "NFSD: Fix possible sleep during nfsd4_release_lockowner()" (Greg Kroah-Hartman)   
  - i2c: s3c24xx: fix transferring more than one message in polling mode (Marek Szyprowski)   
  - i2c: s3c24xx: fix read transfers in polling mode (Marek Szyprowski)   
  - kdb: Fix a potential buffer overflow in kdb_local() (Christophe JAILLET)   
  - kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ (Daniel Thompson)   
  - ipvs: avoid stat macros calls from preemptible context (Fedor Pchelkin)   
  - net: ravb: Fix dma_addr_t truncation in error case (Nikita Yushchenko)   
  - serial: imx: Correct clock error message in function probe() (Christoph Niedermaier)   
  - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin)   
  - MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() (Christophe JAILLET)   
  - MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() (Christophe JAILLET)   
  - HID: wacom: Correct behavior when processing some confidence == false touches (Jason Gerecke)   
  - wifi: mwifiex: configure BSSID consistently when starting AP (David Lin)   
  - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (Ilpo Järvinen)   
  - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (Ilpo Järvinen)   
  - fbdev: flush deferred work in fb_deferred_io_fsync() (Nam Cao)   
  - ALSA: oxygen: Fix right channel of capture volume mixer (Takashi Iwai)   
  - usb: mon: Fix atomicity violation in mon_bin_vma_fault (Gui-Dong Han)   
  - usb: chipidea: wait controller resume finished for wakeup irq (Xu Yang)   
  - usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (Uttkarsh Aggarwal)   
  - usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (Xu Yang)   
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug (Heiko Carstens)   
  - binder: fix unused alloc->free_async_space (Carlos Llamas)   
  - binder: fix race between mmput() and do_exit() (Carlos Llamas)   
  - Input: atkbd - use ab83 as id when skipping the getid command (Hans de Goede)   
  - binder: fix async space check for 0-sized buffers (Carlos Llamas)   
  - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (Stefan Wahren)   
  - watchdog: set cdev owner before adding (Curtis Klein)   
  - gpu/drm/radeon: fix two memleaks in radeon_vm_init (Zhipeng Lu)   
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu)   
  - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu)   
  - media: dvbdev: drop refcount on error path in dvb_device_open() (Dan Carpenter)   
  - media: cx231xx: fix a memleak in cx231xx_init_isoc (Zhipeng Lu)   
  - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (Zhipeng Lu)   
  - drm/radeon/dpm: fix a memleak in sumo_parse_power_table (Zhipeng Lu)   
  - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Yang Yingliang)   
  - drm/drv: propagate errors from drm_modeset_register_all() (Dmitry Baryshkov)   
  - drm/msm/mdp4: flush vblank event on disable (Dmitry Baryshkov)   
  - ASoC: cs35l34: Fix GPIO name and drop legacy include (Linus Walleij)   
  - ASoC: cs35l33: Fix GPIO name and drop legacy include (Linus Walleij)   
  - drm/radeon: check return value of radeon_ring_lock() (Nikita Zhandarovich)   
  - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (Nikita Zhandarovich)   
  - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (Nikita Zhandarovich)   
  - f2fs: fix to avoid dirent corruption (Chao Yu)   
  - drm/bridge: Fix typo in post_disable() description (Dario Binacchi)   
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere)   
  - RDMA/usnic: Silence uninitialized symbol smatch warnings (Leon Romanovsky)   
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet)   
  - Bluetooth: Fix bogus check for re-auth no supported with non-ssp (Luiz Augusto von Dentz)   
  - wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (Su Hui)   
  - rtlwifi: rtl8192de: make arrays static const, makes object smaller (Colin Ian King)   
  - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: add calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (Su Hui)   
  - rtlwifi: Use ffs in <foo>_phy_calculate_bit_shift (Joe Perches)   
  - firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (Christophe JAILLET)   
  - net/ncsi: Fix netlink major/minor version numbers (Peter Delevoryas)   
  - ncsi: internal.h: Fix a spello (Bhaskar Chowdhury)   
  - wifi: libertas: stop selecting wext (Arnd Bergmann)   
  - bpf, lpm: Fix check prefixlen before walking trie (Florian Lehner)   
  - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (Trond Myklebust)   
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou)   
  - crypto: scompress - Use per-CPU struct instead multiple variables (Sebastian Andrzej Siewior)   
  - crypto: scompress - return proper error code for allocation failure (Sebastian Andrzej Siewior)   
  - crypto: sahara - do not resize req->src when doing hash operations (Ovidiu Panait)   
  - crypto: sahara - fix processing hash requests with req->nbytes < sg->length (Ovidiu Panait)   
  - crypto: sahara - improve error handling in sahara_sha_process() (Ovidiu Panait)   
  - crypto: sahara - fix wait_for_completion_timeout() error handling (Ovidiu Panait)   
  - crypto: sahara - fix ahash reqsize (Ovidiu Panait)   
  - crypto: virtio - Wait for tasklet to complete on device remove (wangyangxin)   
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov)   
  - crypto: sahara - fix error handling in sahara_hw_descriptor_create() (Ovidiu Panait)   
  - crypto: sahara - fix processing requests with cryptlen < sg->length (Ovidiu Panait)   
  - crypto: sahara - fix ahash selftest failure (Ovidiu Panait)   
  - crypto: sahara - remove FLAGS_NEW_KEY logic (Ovidiu Panait)   
  - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu)   
  - crypto: ccp - fix memleak in ccp_init_dm_workarea (Dinghao Liu)   
  - crypto: virtio - Handle dataq logic with tasklet (Gonglei (Arei))   
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang)   
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia)   
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian)   
  - net: netlabel: Fix kerneldoc warnings (Andrew Lunn)   
  - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin)   
  - mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (Ronald Monthero)   
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan)   
  - selftests/powerpc: Fix error handling in FPU/VMX preemption tests (Michael Ellerman)   
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch)   
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour)   
  - powerpc/44x: select I2C for CURRITUCK (Randy Dunlap)   
  - powerpc: remove redundant 'default n' from Kconfig-s (Bartlomiej Zolnierkiewicz)   
  - powerpc: add crtsavres.o to always-y instead of extra-y (Masahiro Yamada)   
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann)   
  - x86/lib: Fix overflow when counting digits (Colin Ian King)   
  - coresight: etm4x: Fix width of CCITMIN field (James Clark)   
  - uio: Fix use-after-free in uio_open (Guanghui Feng)   
  - binder: fix comment on binder_alloc_new_buf() return value (Carlos Llamas)   
  - drm/crtc: fix uninitialized variable use (Jani Nikula)   
  - Input: xpad - add Razer Wolverine V2 support (Luca Weiss)   
  - ARC: fix spare error (Vineet Gupta)   
  - s390/scm: fix virtual vs physical address confusion (Vineeth Vijayan)   
  - Input: atkbd - skip ATKBD_CMD_GETID in translated mode (Hans de Goede)   
  - reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (Krzysztof Kozlowski)   
  - ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (Steven Rostedt (Google))   
  - tracing: Add size check when printing trace_marker output (Steven Rostedt (Google))   
  - tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (Steven Rostedt (Google))   
  - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (Ziqi Zhao)   
  - jbd2: correct the printing of write_flags in jbd2_write_superblock() (Zhang Yi)   
  - clk: rockchip: rk3128: Fix HCLK_OTG gate register (Weihao Li)   
  - drm/exynos: fix a potential error pointer dereference (Xiang Yang)   
  - ASoC: da7219: Support low DC impedance headset (David Rau)   
  - net/tg3: fix race condition in tg3_reset_task() (Thinh Tran)   
  - ASoC: rt5650: add mutex to avoid the jack detection failure (Shuming Fan)   
  - ASoC: cs43130: Fix incorrect frame delay configuration (Maciej Strozek)   
  - ASoC: cs43130: Fix the position of const qualifier (Maciej Strozek)   
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers)   
  - LTS version: v4.14.337 (Saeed Mirzamohammadi)   
  - ipv6: remove max_size check inline with ipv4 (Saeed Mirzamohammadi)   
  - ipv6: make ip6_rt_gc_expire an atomic_t (Saeed Mirzamohammadi)   
  - net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet)   
  - net: add a route cache full diagnostic message (Peter Oskolkov)   
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) [Orabug: 36192153] {CVE-2023-6040}
  - fuse: nlookup missing decrement in fuse_direntplus_link (ruanmeisi)   
  - mm: fix unmap_mapping_range high bits shift bug (Jiajun Xie)   
  - mm/memory-failure: check the mapcount of the precise page (Matthew Wilcox (Oracle))   
  - bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() (Michael Chan)   
  - asix: Add check for usbnet_get_endpoints (Chen Ni)   
  - net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues (Dinghao Liu)   
  - net/qla3xxx: switch from 'pci_' to 'dma_' API (Christophe JAILLET)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.535.2.1.el7uek]
changelog:
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36467681]  {CVE-2024-1086}


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-9
changelog:
  - kdumpctl: bail out earlier in case of no reserved memory
  - kdumpctrl: kdump feasibility should fail if no crash memory
  - kdumpctl: improve "while read" time for /etc/kdump.conf
  - kdumpctl: update check_dump_fs_modified() to use "lsinitrd -f"
  - kdumpctl: improve check_wdt_modified()
  - kdumpctl: remove is_mode_switched()
  - arm64: cmdline: modify to optimize size for memory reservation


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-10
changelog:
  - kdumpctl: call strip_comments only when necessary to speedup
  - Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: EL Errata <el-errata_ww@oracle.com> - 2.0.14-17.0.1
changelog:
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> 2.0.15-5
changelog:
  - Revert "Update kdump anaconda addon"
  - Revert "Update kdump anaconda addon: fix the md5sum in source file"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-7
changelog:
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: remove "root=X" for kdump boot
  - kdumpctl: fix a bug in remove_cmdline_param()


author: Pingfan Liu <piliu@redhat.com> 2.0.15-9
changelog:
  - makedumpfile: Fix 'kernel_version' variable being uninitialized & introduce minor reorganization
  - makedumpfile: Fix segmentation fault when using --split on a vmcore
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not


author: Pingfan Liu <piliu@redhat.com> 2.0.15-10
changelog:
  - kexec-tools.spec: require dracut >= 033-522 to make 99kdump module installed correctly
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-11
changelog:
  - dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Pingfan Liu <piliu@redhat.com> 2.0.15-13
changelog:
  * Thu Feb 1 2018 Pingfan Liu <piliu@redhat.com> 2.0.15-12
  - makedumpfile/sadump: Fix a problem of PTI enabled kernel
  - makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'


author: Dave Kleikamp <dave.kleikamp@oracle.com> - 2.0.15-13.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug 28043892]
  - don't patch files in SOURCES directory. That breaks building from the srpm.


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-13.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug 28043892]
  - don't patch files in SOURCES directory. That breaks building from the srpm.
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.1
changelog:
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug 28043892]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.15-21.0.3.el7_6.3
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.4.el7_6.3
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug: 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 28043892]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-32
changelog:
  - makedumpfile: exclude pages that are logically offline
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-33
changelog:
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
    [Fix the Fix the patch to make sure makedumpfile-1.6.2/ path is used]


author: Livy Ge <livy.ge@oracle.com> 2.0.15-33.0.1
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-37
changelog:
  - dracut-module-setup: get localhost alias by manual
  - dracut-module-setup: filter out localhost for generic_fence_kdump
  - kdumpctl: distinguish the reason for ssh failure


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43
changelog:
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-43.0.1
changelog:
  - trigger initramfs cleanup for kernel-uek and kernel-uek-debug [Orabug: 30192631]
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.0.15-43.0.4
changelog:
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - rebase on top makedumpfile 1.6.6 [Orabug: 30352094]
  - makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30521746]
  - makedumpfile: backport needed upstream aarch64 patches [Orabug: 30352094]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48
changelog:
  - dracut-module-setup.sh: ensure cluster info is ready before query.
  - dracut-module-setup.sh: improve get_alias()


author: Alex Burmashev <alexander.burmashev@oracle.com> 2.0.15-51.0.1.1
changelog:
  - Check MokSBStateRT variable state to identify SecureBoot mode [Orabug: 31903240]
  - Add delay to avoid upstream race condition [Orabug: 31121959]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - rebase on top makedumpfile 1.6.6 [Orabug: 30352094]
  - makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30521746]
  - makedumpfile: backport needed upstream aarch64 patches [Orabug: 30352094]
  - trigger initramfs cleanup for kernel-uek and kernel-uek-debug [Orabug: 30192631]
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Tianyue Lan <tianyue.lan@oracle.com> 2.0.15-51.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug: 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 28043892]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface (Sriharsha Yadagudde) [Orabug: 18905671]
  - droped orabug30928441.kdump.no_timer_check.patch


author: Brian Maly <brian.maly@oracle.com> 2.0.20-1.0.2
changelog:
  - fix kdump start with multiple crashkernel reservations [Orabug: 32133785]
  - fix OOM kill of makedumpfile when using smaller crashkernel reservations [Orabug: 32133850]
  - rebase to kexec-tools-2.0.20 [Orabug: 31933990]


author: Mridula Shastry <mridula.c.shastry@oracle.com> - 2.0.20-1.0.10
changelog:
  - kdumpctl: Add rd.md.uuid to kdump commandline if /boot is
   on a dedicated md device when fips is enabled (Todd Vierling) [Orabug: 34672180]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.8-1
changelog:
  - Resolves: rhbz#1673716 - Rebase k-h-c-i to version 0.8
  - The rebase also includes fixes for:
    - rhbz#1533190 - CVE-2017-15111 keycloak-httpd-client-install: unsafe
                     /tmp log file in --log-file option in keycloak_cli.py
    - rhbz#1533202 - CVE-2017-15112 keycloak-httpd-client-install: unsafe
                     use of -p/--admin-password on command line


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-2
changelog:
  - Resolves: #997594, misbehaving checkbox "Allow encryption with untrusted keys"
  - Resolves: #997599, Key Manager does not refresh after change
  - Resolves: #999850, shows error message despite the change was successful


author: Rex Dieter <rdieter@fedoraproject.org> - 4.10.1-2
changelog:
  - pull a few upstream patches, in particular...
  - kmix crahes moving streams between sinks (#922849)


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-10
changelog:
  - weak-modules: deprecate --delete-modules switch.
  - weak-modules: implement some pathes configuration from cmdline.
  - weak-modules: redesign to reuse depmod -aeE functionality
    (with some preparation changes).
    This is an updated version of the script which doesn't support
    multiple installation of the same out-of-tree module (stored in the
    'extra' subdirectory). But it more correctly checks dependencies
    between the modules.
    Resolves: rhbz#1367942


author: Tony Camuso <tcamuso@redhat.com> - 20-10
changelog:
  - Rename patches so they are not specific to the build. This was
    causing problems with z-stream builds.
    Resolves: rhbz#1416498


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.2
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1482385


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.3
changelog:
  - weak-modules: implement dry run by symlink restoration.
  - weak-modules: fix dry-run for non-lib-modules installation.
    Resolves: rhbz#1489696.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.5
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1511943.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Natalya Naumova <natalya.naumova@oracle.com> - 20-23.0.1
changelog:
  - weak-modules: add patch for [Orabug: 26672773]
  - add PKCS#7 signature support [Orabug: 27645962]
  - Reviewed-by: Alexey Petrenko <alexey.petrenko@oracle.com>


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Jacob Wen <jian.w.wen@oracle.com> - 20-28.0.3
changelog:
  - Use ASN1_STRING_data for openssl-1.0.2k [Orabug: 31160124]
  - build: fix make distcheck [Orabug: 31160124]
  - libkmod-signature: implement pkcs7 parsing with openssl [Orabug: 31160124]
  - signature: do not report wrong data for pkc#7 signature [Orabug: 31160124]
  - libkmod: modinfo: implement signature output [Orabug: 31160124]
  - libkmod: modinfo: implement line splitting in hex_to_str [Orabug: 31160124]
  - libkmod: modinfo: use own function for sig_key hex output [Orabug: 31160124]
  - libkmod: modinfo: fix sig_id output [Orabug: 31160124]


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-3
changelog:
  - Enable direct calls
  - Fix method arguments that are both input and output
  - Don't install Find*.cmake files


author: Radek Novacek <rnovacek@redhat.com> 0.9.1-3
changelog:
  - Set format(printf) attribute to __KReturn2 function
  - Fix possible integer overflow
  - Resolves: rhbz#1000434, rhbz#1000430


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-1
changelog:
  - Bump to krb5-1.15.1 (very small change)
  - Apply some sanity to our patches and ordering
  - Resolves: #1389073


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-4
changelog:
  - Backport certauth plugin and related pkinit changes
  - Note: related changes cannot be tested because RHEL does not allow
    binary git diffs
  - Resolves: #1428484


author: Robbie Harwood <rharwood@redhat.com> - 1.15-1
changelog:
  - Rebase to 1.15-final
  - Resolves: #1389073
  - Resolves: #1367169
  - Resolves: #1389072
  - Resolves: #1366863


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1484937


author: Kamil Dudka <kdudka@redhat.com> - 20120801-137
changelog:
  - Increase the release number by 100 to make sure it stays higher than in RHEL-6
    Related: #1484937


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - closing a file descriptor in a command substitution caused loss of the output (#1202439)
  - fix: in a login shell "( cmd & )" does nothing (#1217237)
  - exporting fixed with variable corrupted its data (#1192026)
  - fix segfault when handling a trap (#1211540)
  - combining alarm and IFS caused segfault (#1192119)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
  - do not inherit invalid variables during shell initializaton (#1211538)
  - case in a for loop inside a subshell caused syntax error (#1241014)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.11-1
changelog:
  - Update to 0.0.11
  - Add translations for DE and NL territories in nds (reported by Vratislav Podzimek)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.12-1
changelog:
  - Update to 0.0.12
  - Match case insensitively in languageId() (Resolves: rhbz#1002000 (case insensitive languageId function needed))


author: Mike FABIAN <mfabian@redhat.com> - 0.0.13-4
changelog:
  - Add Add-support-for-timezone-translations.patch (Related: rhbz#1015209)
  - Add Fix-Chinese-translation-problem.patch (Related: rhbz#1015209)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.31-1
changelog:
  - Update langtable to 0.0.31
  - Resolves: rhbz#1202875
  - Revert change included in 0.0.31 which uses "eurlatgr" as the default
    consolefont for many languages because that font is not available in RHEL
  - Remove patches which are already included in 0.0.31


author: John Dennis <jdennis@redhat.com> - 2.4.1-7
changelog:
  - Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
    Resolves: #1205342


author: John Dennis <jdennis@redhat.com> - 2.4.1-8
changelog:
  - Add explicit minimum dependency on glib2 2.42,
    for some reason RPM is not automatically detecting the dependency
    Resolves: #1254989


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3
changelog:
  - Resolves: #1634267 - ECP signature check fails with
                         LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                         instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4
changelog:
  - Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5
changelog:
  - Resolves: #1719014 - Expired certificate prevents tests from running
  - Actually apply the patch file for the previous build
  - Related: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6
changelog:
  - Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                         vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7
changelog:
  - Fix Coverity warning introduced by the previous patch
  - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                        vulnerability when parsing SAML responses


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-7
changelog:
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.


author: Jiri Olsa <jolsa@redhat.com> - 0.5.11-5.1
changelog:
  - latrace-aarch64-basic-audit.patch: add basic aarch64 LD_AUDIT support.
  - Add aarch64 to ExclusiveArch. (BZ#1094501)


author: Jiri Olsa <jolsa@redhat.com> - 0.5.11-6
changelog:
  - latrace-ppcle64-basic-audit.patch: add basic ppc64le LD_AUDIT support.
  - Add ppc64le to ExclusiveArch. (BZ#1125756)


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-8
changelog:
  - Resolves: bug 684012 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream bug https://bugzilla.mozilla.org/show_bug.cgi?id=640750


author: Matthew Harmsen <mharmsen@redhat.com> 0:4.19-5
changelog:
  - Fix build for CentOS 7 (mharmsen)
  - Resolves rhbz#1465103 - Missing getter methods in JDAPFilter classes
    (edewata)


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11.1
changelog:
  - Resolves: #1797963 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-12
changelog:
  - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased


author: Michal Ruprich <michalruprich@gmail.com> - 4.4.8-12.1
changelog:
  - Resolves: #1797964 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-13
changelog:
  - Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1392944 - File size decreases when synchronizing folders with a sftp account using lftp


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1.5-3
changelog:
  - libXt 1.1.5
  - Merge F25:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps
  - Exclude docs from main package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Tomas Popela <tpopela@redhat.com> - 12.10.0-12
changelog:
  - Move package from EPEL 7 to RHEL 7, but leave the mono support in EPEL in
    libappindicator-sharp package.
  - Resolves: rhbz#1546657


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Jochen Schmitt <Jochen herr-schmitt de> - 2.3.21-7
changelog:
  - Add aarch64 as a 65-Bit architecture (#975267)
  - Add libtool as a BR
  - Call libtoolize before autoreconf


author: Karel Zak <kzak@redhat.com> 2.23.2-36
changelog:
  - fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
  - fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
  - fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
  - fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
  - fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
  - fix #1369436 - losetup man page incorrect syntax for Setup loop device
  - fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
  - fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
  - fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
  - fix #1417722 - umount -a results in selinux being reported as Disabled
  - fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
  - fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
  - fix #1403971 - /usr/bin/more crash in end_it due to double free
  - fix #1358095 - ipcs shows wrong gid information
  - fix #1358097 - ipcs shows strange status message in ja locale
  - fix #1378100 - fix swapon discard option parsing
  - fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
  - fix #1358755 - Backport request for zramctl on util-linux v2.23.2
  - fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
  - fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
  - fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
  - fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices


author: Karel Zak <kzak@redhat.com> 2.23.2-41
changelog:
  - fix #1451704 - IMSM RAID on 4k disks not assembled on boot
  - force gettext messages refresh (for #1358097 bugfix)


author: Karel Zak <kzak@redhat.com> 2.23.2-43.el7_4.1
changelog:
  - fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages


author: Karel Zak <kzak@redhat.com> 2.23.2-44
changelog:
  - fix #1478002 - systemd read-only container produces errors
  - fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
  - fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
  - fix #1490984 - Please update fdisk's manual page
  - fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
  - fix #1468646 - lscpu output missing Hypervisor
  - fix #1455398 - flock --timeout=0 doesn't work on RHEL7
  - fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
  - fix #1427500 - util-linux: script does not retry on EINTR when logging command output
  - fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
  - fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h <ipv4-mapping-to-ipv6>" hostname


author: Karel Zak <kzak@redhat.com> 2.23.2-45
changelog:
  - fix #1501953 - blkid shows wrong return code on failure with ambivalent results
  - fix #1486777 - wipefs printing duplicate gpt clear messages
  - fix #1454652 - fix test suite


author: Karel Zak <kzak@redhat.com> 2.23.2-49
changelog:
  - fix #1520906 - make hostname in login(1) prompt optional
  - fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume


author: Karel Zak <kzak@redhat.com> 2.23.2-54
changelog:
  - fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
  - fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
  - fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
  - fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
  - fix #1562125 - "setarch ppc<*>" fails with "Unrecognized architecture"
  - fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
  - fix #1528959 - rbind creates duplicate entries in /proc/mounts
  - fix #1538721 - mount man page says sync option has no effect for ext4
  - fix #1252764 - icrnl is not set when autologin is used
  - fix #1561200 - [RFE] - sulogin: improve support for locked root account
  - fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device


author: Karel Zak <kzak@redhat.com> 2.23.2-59
changelog:
  - fix #1618711 - exec option in mount unable to override the implicit noexec in user option
  - fix #1616264 - Login to emergency shell failed


author: Karel Zak <kzak@redhat.com> 2.23.2-59.el7_6.1
changelog:
  - fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login


author: Karel Zak <kzak@redhat.com> 2.23.2-61
changelog:
  - #1203378 - Cannot use swapon with fallocated XFS swapfile
  - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
  - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
  - #1639465 - Bad formatting in agetty.8 man page
  - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
  - #1678451 - Unable to mount to a directory that matches a dm device under /dev


author: Karel Zak <kzak@redhat.com> 2.23.2-62
changelog:
  - fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1712768 - lsmem segfaults on ppc64 wih -o
  - fix #1690102 - setarch(8) does not check error return values properly.
  - fix #1734261 - lscpu not showing Physical socket, chips information


author: Karel Zak <kzak@redhat.com> 2.23.2-64
changelog:
  - fix #1788896 - Internal testsuite: libmount tests failed
  - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
  - fix #1816183 - "mount -a" should ignore already mounted bind mounts.
  - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
  - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit


author: Karel Zak <kzak@redhat.com> 2.23.2-65
changelog:
  - fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
  - fix #1745657 - mismatch between spec file and uuidd runtime directory


author: Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1
changelog:
  - fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
  - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
  - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Bastien Nocera <bnocera@redhat.com> - 0.2.3-6
changelog:
  + libbluray-0.2.3-0.12.git
  - Fix security issues in parts of the library that we never exercised
  Related: rhbz#1045453 rhbz#1045452


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.9-1
changelog:
  - Allow the Size python class to be easily imported (vpodzime)
  - Make sure pyexecdir is defined (vpodzime)
  - Do not run Python 3 tests without python3 (vpodzime)
  - Disable python3 on RHEL (vpodzime)
  - Reflect the configuration in the spec file template (vpodzime)
  - Make documentation generation conditional (vpodzime)
  - Make python3 support conditional (vpodzime)
  - Require lower version of libpcre (vpodzime)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.10-1
changelog:
  - Fix installation without specifying --exec-prefix (martin)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.11-1
changelog:
  - Fix README file name (vtrefny)
  - Add a build status image to the README.md (vpodzime)
  - Remove "glibc-all-langpacks" from test dependencies (vtrefny)
  - Check for requires in generated spec file, not in the template (vtrefny)
  - Fix checking for available locales (vtrefny)
  - Fix library name in acinclude.m4 (vtrefny)
  - Do not try to run translation tests on CentOS/RHEL 7 (vtrefny)
  - Skip tests if they require unavailable locales (vpodzime)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-4
changelog:
  - Python 2 binary package renamed to python2-libbytesize
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Make more space for CI status image (vtrefny)
  - Include limits.h to make sure ULONG_MAX is defined (vpodzime)
  - Remove extra 'is' in two docstrings (vpodzime)
  - Properly support 64bit operands (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Add NEWS.rst file (vtrefny)
  - Fix source and url in spec file (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Actually translate the units when expected (vpodzime)
  - Add two temporary test files to .gitignore (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: Steve Grubb <sgrubb@redhat.com> 0.7.5-2
changelog:
  - resolves: #1185610 - libcap-ng: update caps table for newer kernels
  - Fix a leaked FD in upstream code


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-2
changelog:
  - added missing files from git: COPYING-GPL and COPYING-LGPL
  - added patch from git for missing pkgconfig requires
    and fixed FSF address


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-3
changelog:
  - included upstreamed patches which are changing the license
    headers to be LGPLv2+ for the library parts and GPLv2+ for the
    binaries


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.4-1
changelog:
  - Update to 0.12.4
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.4.news


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-4
changelog:
  - BuildRequires for libchewing-python changed
    from python-devel to python2-devel
  - RPM_BUILD_ROOT changed to buildroot


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-1
changelog:
  - Upstream update to 0.3.4
  - Download is changed to Google Code.
  - /usr/share/chewing is removed, data files now located in
    /usr/lib(64)/libchewing
  - Info for libchewing is included.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-3
changelog:
  - Fixed [Bug 913214] libchewing complains "no info dir entry" while installing
    Add direntry in libchewing.texi so it can be listed under 
    Category "Localization"


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Lane <tgl@redhat.com> 0.8.3-4
changelog:
  - Do not use -ffast-math; it breaks things and seems quite unlikely to offer
    any useful performance benefit for this type of package, anyway
  Resolves: #629964


author: Tom Lane <tgl@redhat.com> 0.8.4-1
changelog:
  - Update to version 0.8.4 (seems to contain only configure-support updates,
    but might as well adopt it)
  - Fix memory leak due to incorrect test in _is_row_fetched()
  Related: #733413


author: Tom Lane <tgl@redhat.com> 0.8.3-12
changelog:
  - Remove unnecessary package-name Requires:, since dependencies on library
    sonames should be enough, and we don't want to hard-wire assumptions about
    which packages provide which libraries
  - isa-ify cross-subpackage Requires:


author: Simone Caronni <negativo17@gmail.com> - 16.04.0-2
changelog:
  - Add tests, remove valgrind-devel build requirements (#1262274).
  - Disable tests until dbus-test-runner is available.


author: Richard W.M. Jones <rjones@redhat.com> - 1.12-13.1.el7
changelog:
  - Add patch to fix multilib conflicts in dnet-config
    resolves: rhbz#1059593
  - Remove RPM cruft from the spec file.


author: - nick.alcock@oracle.com - 0.5.0-3
changelog:
  - Include the distribution in the RPM release. [Orabug: 21211461]
  - No longer Provide: our own name. [Orabug: 21622263]


author: - nick.alcock@oracle.com - 0.7.1-1
changelog:
  - Fix CTF archive alignment and failed write() handling
    (Tomas Jedlicka) [Orabug: 27191792, 27204447]
  - Build on arm64 (Vincent Lim) [Orabug: 27418554]


author: - nick.alcock@oracle.com - 0.8.1-1
changelog:
  - Fix ctf_rollback() in client containers to delete only the types
  added since the last snapshot, rather than all of them.
  [Orabug: 27971037]


author: - nick.alcock@oracle.com - 1.0.0-1
changelog:
  - Format v2, supporting many more types and enum/struct/union members.
  v1 CTF files are transparently updated to v2. No soname change, but
  some API for users directly accessing CTF files is broken.
  [Orabug: 28150489]


author: - nick.alcock@oracle.com - 1.1.0-1
changelog:
  - Add ctf_add_{struct,union}_sized(). [Orabug: 29054972]
  - Work around some very minor CTF-generation bugs seen in the wild
    in old UEK kernels. [Orabug: 28952429]
  - Do not mprotect() the heap by mistake when reading CTF from a
    user-provided buffer. [Orabug: 28952429]


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Pravin Satpute <psatpute@redhat.com> - 1:1.07.2-11
changelog:
  - Decided to defer Liberation 2.0 feature in Fedora 18.
  - Reverting to Liberation 1.07.2. 
  - Using 11 release to match with Liberation Sans Narrow


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-13
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Debarshi Ray <rishi@fedoraproject.org> - 0.10.4-4
changelog:
  - Ensure that the new exiv2 soname is used during the build
  - Adapt to Exiv2::BasicIo API change
    Resolves: rhbz#1486570


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.0.1-0.2.20180226gitb029c24
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Ray Strode <rstrode@redhat.com> 2.32.1-4
changelog:
  - drop /etc/skel entry. libgnome creates it by default if it's
    not around and it needs it anyway. Better not to clutter users
    home directories just because they install glade.


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.3-5
changelog:
  - New storage format added in oVirt 4.1
    Resolves: rhbz#1346215
  - Check if operation was cancelled before disconnecting signal
    Resolves: rhbz#1431275


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.4-1
changelog:
  - Rebase to latest 0.3.4 upstream release. Still quite a few patches as
    there was no 0.3.5 release yet
    Resolves: rhbz#1584266


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-2
changelog:
  - Parse XML nodes automatically
    Related: rhbz#1427467
  - Set detailed error message for async call
    Related: rhbz#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-4
changelog:
  - Use certificate data from XML
    Resolves: rhbz#https://bugzilla.redhat.com/show_bug.cgi?id=1402909


author: Rex Dieter <rdieter@fedoraproject.org> - 0.8.2-7
changelog:
  - libgpod.pc Requires: libimobiledevice-1.0 ... overlinking (#818594)
  - tighten subpkg deps (via %_isa)
  - omit -devel deps that (should) get autodetected already


author: Caolán McNamara <caolanm@redhat.com> 1.14.26-1
changelog:
  - latest version
  - drop integrated gnome689706.gsf_input_dup.patch
  - libgsf-python is gone with "excise old bit-rotted python support"


author: Lukas Nykryn <lnykryn@redhat.com> - 219-35
changelog:
  - tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
  - util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-37
changelog:
  - core: add support for the "pids" cgroup controller (#1337244)
  - core: add new DefaultTasksMax= setting for system.conf (#1337244)
  - logind: add a new UserTasksMax= setting to logind.conf (#1337244)
  - core: support percentage specifications on TasksMax= (#1337244)
  - core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
  - core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-39
changelog:
  - tests: set tasks_max to infinity (#1337244)
  - Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
  - sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
  - load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
  - core: manager: add some missing dbus properties (#1427927)
  - core: manager: expose DefaultLimit* as properties on dbus (#1427927)
  - fstab-generator: remove bogus condition (#1446171)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-40
changelog:
  - readahead-collect: don't print warning message when handling symlink (#1387095)
  - tmpfiles: don't recursively descend into journal directories in /var (#1411199)
  - tmpfiles: also set acls on /var/log/journal (#1411199)
  - tmpfiles: set acls on system.journal explicitly (#1411199)
  - sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
  - units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
  - systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
  - sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)


author: EL Errata <el-errata_ww@oracle.com> - 219-42.0.1
changelog:
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]


author: Lukas Nykryn <lnykryn@redhat.com> - 219-42.1
changelog:
  - Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
  - reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule


author: Lukas Nykryn <lnykryn@redhat.com> - 219-42.4
changelog:
  - manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-42.5
changelog:
  - unmount: Pass in mount options when remounting read-only (#1312002)
  - shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
  - shutdown: fix incorrect fscanf() result check (#6806) (#1312002)


author: EL Errata <el-errata_ww@oracle.com> - 219-42.0.2.6
changelog:
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]


author: Lukas Nykryn <lnykryn@redhat.com> - 219-46
changelog:
  - Support 'rdma' as a ListenNetlink= argument (#6626) (#1494610)
  - core/namespace: Protect /usr instead of /home with ProtectSystem=yes (#1493047)
  - udev: Use parent bus id for virtio disk builtin path-id (#5500) (#1496697)
  - socket-util: socket_address_parse() should not log errors on its own (#1497639)
  - test: fix failing test-socket-util when running with ipv6.disable=1 kernel param (#1497639)
  - scsi_id: add missing options to getopt_long() (#6501) (#1476910)
  - unmount: Pass in mount options when remounting read-only (#1312002)
  - shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
  - shutdown: fix incorrect fscanf() result check (#6806) (#1312002)
  - path-util: make use of "mnt_id" field exported in /proc/self/fdinfo/<fd> (#1472439)
  - support ranges when parsing CPUAffinity (#1493976)
  - man: Update man page documentation for CPUAffinity (#1493976)
  - test-path-util: force rm_rf (#1472439)
  - Export NVMe WWID udev attribute (#5348) (#1503253)
  - mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076) (#1437518)
  - journald: never accept fds from file systems with mandatory locking enabled (#1501017)
  - udev: builtin-keyboard: move fetching the device node up (#1500119)
  - udev: builtin-keyboard: immediately EVIOCSKEYCODE when we have a pair (#1500119)
  - udev: builtin-keyboard: move actual key mapping to a helper function (#1500119)
  - udev: builtin-keyboard: invert a condition (#1500119)
  - udev: builtin-keyboard: add support for EVDEV_ABS_* (#1500119)
  - hwdb: sync 60-evdev.hwdb from systemd v235 (rhbz#1500119)
  - journal: ensure open journals from find_journal() (#3973) (#1493846)
  - journal: only check available space when journal is open (#1493846)
  - automount: if an automount unit is masked, don't react to activation anymore (#5445) (#1498318)
  - units: add [Install] section to remote-cryptsetup.target (#1477757)
  - units: replace remote-cryptsetup-pre.target with remote-fs-pre.target (#1477757)
  - man: add a note about _netdev usage (#1477757)
  - units: make remote-cryptsetup.target also after cryptsetup-pre.target (#1477757)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-47
changelog:
  - cryptsetup-generator: use after free (#1477757)
  - manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)
  - journal-remote: make --url option support arbitrary url (#1505385)
  - journald: make maximum size of stream log lines configurable and bump it to 48K (#6838) (#1442262)
  - service: serialize information about currently executing command (#1404657,#1471230)
  - tests: add new test for issue #518 (#1404657,)
  - tests: in RHEL-7 we don't have python3 by default (#1404657,)
  - service: attempt to execute next main command only for oneshot services (#6619) (#1404657,)
  - timedatectl: stop using xstrftime (#1503942)
  - Add support to read lz4 compressed journals (rhbz#1431687)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-48
changelog:
  - journald: never block when sending messages on NOTIFY_SOCKET socket (#1511565)
  - journal: restore watchdog support (#1511565)
  - cgroup resource property setting ignored if einval (rhbz#1302305)
  - fileio: add new helper call read_line() as bounded getline() replacement (#1503106)
  - def: add new constant LONG_LINE_MAX (#1503106)
  - fileio: rework read_one_line_file() on top of read_line() (#1503106)
  - cgroup-util: replace one use of fgets() by read_line() (#1503106)
  - conf-parse: remove 4K line length limit (#1503106)
  - test-conf-parser: add tests for config parser (#1503106)
  - fileio: use _cleanup_ for FILE unlocking (#1503106)
  - test-fileio: also test read_line() with actual files (#1503106)
  - fileio: return 0 from read_one_line_file on success (#1503106)
  - man: fix description of --force in halt(8) (#7392) (#1515130)
  - journal: return better error for empty files (#1465759)
  - journalctl: continue operation, even if we run into an invalid file (#1465759)
  - journal: remove error check that never happens (#1465759)
  - sd-journal: various clean-ups and modernizations (#1465759)
  - journalctl: when we fail to open a journal file, print why (#1465759)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-50
changelog:
  - core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
  - shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
  - enable display manager only on systemd installation (#1464893)
  - remove unnecessary dependency on dracut (#1466676)
  - substitute PACKAGE_STRING with the actual package NVR (#1453153)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-52
changelog:
  - cryptsetup: when unlocking always put path to the object into Id (#1511043)
  - cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
  - cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
  - introduce naming based on phys_port_name for nfp via udev rule (#1516283)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-54
changelog:
  - automount: ack automount requests even when already mounted (#1535135)
  - udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
  - journald-native: Fix typo in MANDLOCK message (#1501017)
  - process-util: make our freeze() routine do something useful (#1540941)
  - dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
  - bus-util.c: fix TasksMax= property assignment (#1537147)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-55
changelog:
  - sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
  - core: Let two more booleans survive a daemon-reload (#1542391)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-57
changelog:
  - sd-journal: properly handle inotify queue overflow (#1540538)
  - sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
  - journalctl: Periodically call sd_journal_process in journalctl (#1540538)
  - sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-57.1
changelog:
  - umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
  - core: Implement timeout based umount/remount limit (#1571098)
  - core: Implement sync_with_progress() (#1571098)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-58
changelog:
  - tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
  - timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
  - doc: fix links to binfmt_misc kernel documentation (#1572244)
  - man/udevadm: remove superfluous --version from subcommand (#1553076)
  - man/udevadm: correctly show the short version of --exit (#1552712)
  - core/timer: downgrade message about random time addition (#5229) (#1587906)
  - fd-util: add new acquire_data_fd() API helper (#1446095)
  - systemd-analyze: make dump work for large # of units (#1446095)
  - use max. message size allowed by DBus spec (#8936) (#1446095)
  - cryptsetup: support LUKS2 on-disk format (#1573838)
  - units: don't put udev to its own mount namespace with slave propagation (#1432211)
  - rules: disable support for Lenovo IR cameras (#1540418)
  - core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
  - core: fix confusing logging of instantaneous jobs (#1506256)
  - core: correct return value from reload methods (#1506256)
  - core: always try harder to get unit status message format string (#1506256)
  - core: unit_get_status_message_format() never returns NULL (#1506256)
  - core: try harder to get job completion messages too (#1506256)
  - core: remove generic job completion messages from unit vtables (#1506256)
  - core: do not log done failed-condition jobs as if unit started (#1506256)
  - core: log completion of remaining job types (#1506256)
  - core: adjust job completion message log levels (#1506256)
  - mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
  - rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
  - umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
  - core: Implement timeout based umount/remount limit (#1571098)
  - core: Implement sync_with_progress() (#1571098)
  - journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
  - tmpfiles: use safe_glob() (#1436004)
  - core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-59
changelog:
  - man: correct the meaning of TimeoutStopSec= (#1305509)
  - rules: mark hotplugged memory as movable (#1563532)
  - udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
  - rules: disable support for Dell IR cameras (#1591316)
  - rpm: fix 
  if [ $1 -eq 1 ] ; then 
                  systemctl preset \--global  >/dev/null 2>&1 || : 
  fi 
  () macro. (#1582383)
  - rpm: remove confusing --user before --global (#1582383)
  - automount: handle state changes of the corresponding mount unit correctly (#1596241)
  - man: document that SIGCONT always follows SIGTERM (#1601794)
  - rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-60
changelog:
  - Revert "rules: mark hotplugged memory as movable" (#1614686)
  - rules: implement new memory hotplug policy (#1614686)
  - Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-62
changelog:
  - cryptsetup-generator: introduce basic keydev support (#1619743)
  - cryptsetup-generator: don't return error if target directory already exists (#1619743)
  - cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
  - Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-62.2
changelog:
  - journald: do not store the iovec entry for process commandline on stack (#1657788)
  - journald: set a limit on the number of fields (1k) (#1657792)
  - journal-remote: set a limit on the number of fields in a message (#1657792)


author: EL Errata <el-errata_ww@oracle.com> - 219-62.0.4
changelog:
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]


author: Lukas Nykryn <lnykryn@redhat.com> - 219-62.4
changelog:
  - Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
  - Allocate temporary strings to hold dbus paths on the heap (#1667870)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-62.6
changelog:
  - Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-63
changelog:
  - dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
  - journald: do not store the iovec entry for process commandline on stack (#1657788)
  - journald: set a limit on the number of fields (1k) (#1657792)
  - journal-remote: set a limit on the number of fields in a message (#1657792)
  - journald: free cmdline buffers owned by iovec (#1666646)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-64
changelog:
  - detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
  - core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
  - networkd: respect DHCP UseRoutes option (#1663365)
  - networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
  - networkd: dont crash when mtu changes (#6594) (#1663365)
  - tmpfiles: "e" takes globs (#1641764)
  - tmpfiles: 'e' is supposed to operate on directory only (#1641764)
  - tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
  - bus-message: do not crash on message with a string of zero length (#1643396)
  - Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
  - set automount state to waiting when the mount is stopped (#1651257)
  - core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
  - shorten hostname before checking for trailing dot (#1631625)
  - journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
  - local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
  - rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
  - 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
  - core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
  - units/rescue.service.in: fix announcement message (#1660422)
  - systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
  - main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
  - shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
  - journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
  - journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
  - journal-remote: show error message if output file name does not end with .journal (bz#1267552)
  - artificially serialize building of .policy files (#1272485)
  - cryptsetup: add support for sector-size= option (#9936) (#1571801)
  - cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
  - journal: fix syslog_parse_identifier() (#1657794)
  - journal: do not remove multiple spaces after identifier in syslog message (#1657794)
  - tmpfiles: change ownership of symlinks too (#1620110)
  - tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
  - shared/install: allow "enable" on linked unit files (#1628575)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-65
changelog:
  - backport fd_is_fs_type (#1663143)
  - backport chase_symlinks (#1663143)
  - fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
  - fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
  - sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
  - notify: add new --uid= command (#1663143)
  - core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
  - journald: respect KeepFree= as well as MaxUse= values (#1361893)
  - shutdown: in_container was used before its definition (#1693716)
  - core: Fix edge case when processing /proc/self/mountinfo (#1691511)
  - sd-bus: deal with cookie overruns (#1693559)
  - Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
  - Allocate temporary strings to hold dbus paths on the heap (#1667871)
  - sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
  - udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
  - udev: call poll() again after killing the spawned process (#1697909)
  - udev: check age against both timeouts to prevent integer wraparound (#1697909)
  - avoid possible hang if our child process hangs (#1697909)
  - missing: when adding syscall replacements, use different names (#1694605)
  - include sys/sysmacros.h in more places (#1694605)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-66
changelog:
  - sd-bus: unify three code-paths which free struct bus_container (#1643394)
  - hashmap: don't use mempool (#1609349)
  - man: be more explicit about thread safety of sd_journal (#1609349)
  - selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-67.1
changelog:
  - return error value on failure (#1729226)
  - revert local changes made during backport of the test (#1729226)
  - core/timer: Prevent timer looping when unit cannot start (#1729230)
  - core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
  - core: rerun GC logic for a unit that loses a reference (#1729228)
  - pid1: rename unit_check_gc to unit_may_gc (#1729228)
  - pid1: include the source unit in UnitRef (#1729228)
  - pid1: fix collection of cycles of units which reference one another (#1729228)
  - pid1: free basic unit information at the very end, before freeing the unit (#1729228)
  - pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
  - service: relax PID file symlink chain checks a bit (#8133) (#1729414)
  - path-util: fix more path_is_mount e792e890f fallout (#1279231)


author: EL Errata <el-errata_ww@oracle.com> - 219-67.0.5
changelog:
  - fix to generate the systemd-pstore.service file [Orabug: 30235241]
  - Backport upstream patches for the new systemd-pstore tool [Orabug: 30235241]
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]


author: systemd maintenance team <systemd-maint@redhat.com> - 219-67.4
changelog:
  - core: when restarting services, don't close fds (#1798162)
  - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1798162)
  - tests: add basic journal test (#1798162)
  - tests: add regression test for `systemctl restart systemd-journald` (#1798162)
  - tests: add test that journald keeps fds over termination by signal (#1798162)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-69
changelog:
  - revert local changes made during backport of the test (#1726785)
  - core: add a "Requires=" dependency between units and the slices they are located in (#1718953)
  - core: rerun GC logic for a unit that loses a reference (#1718953)
  - pid1: rename unit_check_gc to unit_may_gc (#1718953)
  - pid1: include the source unit in UnitRef (#1718953)
  - pid1: fix collection of cycles of units which reference one another (#1718953)
  - pid1: free basic unit information at the very end, before freeing the unit (#1718953)
  - pid1: properly remove references to the unit from gc queue during final cleanup (#1718953)
  - core/timer: Prevent timer looping when unit cannot start (#1710302)
  - service: relax PID file symlink chain checks a bit (#8133) (#1724420)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-70
changelog:
  - udev-rules: Add rule for /dev/kfd (#1659516)
  - core: exclude .slice units from "systemctl isolate" (#1745199)
  - udev/scsi_id: fix incorrect page length when get device identification VPD page (#1635945)
  - core: when determining whether a process exit status is clean, consider whether it is a command or a daemon (#1560417)
  - units: add Wants=initrd-cleanup.service to initrd-switch-root.target (#4345) (#1560417)
  - units: make sure initrd-cleanup.service terminates before switching to rootfs (#1560417)
  - core: tiny tweak for cgroup trimming during manager_free() (#1630378)
  - process: an empty environment block should be returned as such (#1685648)
  - core: make sure initrd-switch-root command survives PID1's killing spree (#4730) (#1754053)
  - systemctl: always avoid being killed when doing switch-root (#1754053)
  - units: drop KillMode= from initrd-switch-root.service (#1754053)
  - systemctl: ignore SIGTERM after switch root (#1754053)
  - units: restore Before dependencies for systemd-vconsole-setup.service (#1754053)
  - core: reduce the number of stalled PIDs from the watched processes list when possible (#1501796)
  - timedate: use gmtime_r() and localtime_r() (#1694605)
  - sd-bus: stop using the result of an assignment as an operand of && (#1694605)
  - journal-upload: add asserts that snprintf does not return an error (#1694605)
  - analyze: actually select longest activated-time of services (#1694605)
  - pid1: remove unnecessary error reassignment (#1694605)
  - core: drop unnecessary condition (#1694605)
  - import: drop unnecessary condition (#1694605)
  - journal-verify: add comment and silence LGTM warning (#1694605)
  - journal: drop redundant condition (#1694605)
  - lldp: set correct state for processing (#1694605)
  - sd-bus: fix implicit downcast of bitfield reported by LGTM (#1694605)
  - tree-wide: use 'signed int' instead of 'int' for bit field variables (#1694605)
  - machinectl: check correct FD for a return value (#1694605)
  - shared/install: avoid overwriting 'r' counter with a partial result (#1694605)
  - systemctl: set_put() can't return (-)EEXIST (#1694605)
  - systemctl: remove dead check (#1694605)
  - journal-gateway: explicitly declare local variables (#1694605)
  - journal-gateway: use localStorage["cursor"] only when it has valid value (#1694605)
  - lgtm: ignore files dropped in upstream (#1694605)
  - lgtm: suppress several constant comparisons (#1694605)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-71
changelog:
  - core: add a new unit_needs_console() call (#1524359)
  - core: rework how we count the n_on_console counter (#1524359)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-72
changelog:
  - service: introduce protocol error type (#1733998)
  - service: fix main processes exit behavior for type notify services (#1733998)
  - service: go through stop_post on failure (#4770) (#1733998)
  - Call getgroups() to know size of supplementary groups array to allocate (#1743230256 KB)
  - udev: introduce CONST key name (#1748051)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 219-73.0.1
changelog:
  - enable and start the pstore service [Orabug: 30950903]
  - fix to generate the systemd-pstore.service file [Orabug: 30235241]
  - Backport upstream patches for the new systemd-pstore tool [Orabug: 30235241]
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]


author: systemd maintenance team <systemd-maint@redhat.com> - 219-73.2
changelog:
  - core: when restarting services, don't close fds (#1803802)
  - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
  - tests: add basic journal test (#1803802)
  - tests: add regression test for `systemctl restart systemd-journald` (#1803802)
  - tests: add test that journald keeps fds over termination by signal (#1803802)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-73.4
changelog:
  - mount: don't propagate errors from mount_setup_unit() further up (#1809159)
  - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1809159)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-73.5
changelog:
  - core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1810576)
  - core: rework StopWhenUnneeded= logic (#1810576)
  - fix the fix for #1691511 (#1809159)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-73.6
changelog:
  - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1817504)
  - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1820073)
  - sd-journal: remove the dead code and actually fix #14695 (#1820073)
  - swap: adjust swap.c in a similar way to what we just did to mount.c (#1821261)
  - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1821261)


author: EL Errata <el-errata_ww@oracle.com> - 219-73.0.1
changelog:
  - udev rules: fix memory hot add and remove [Orabug: 31309730]
  - enable and start the pstore service [Orabug: 30950903]
  - fix to generate the systemd-pstore.service file [Orabug: 30235241]
  - Backport upstream patches for the new systemd-pstore tool [Orabug: 30235241]
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]


author: EL Errata <el-errata_ww@oracle.com> - 219-73.0.1.el7_8.8
changelog:
  - backport upstream pstore tmpfiles patch (Eric DeVolder) [Orabug: 31414539]
  - udev rules: fix memory hot add and remove [Orabug: 31309730]
  - enable and start the pstore service [Orabug: 30950903]
  - fix to generate the systemd-pstore.service file [Orabug: 30235241]
  - Backport upstream patches for the new systemd-pstore tool [Orabug: 30235241]
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]


author: systemd maintenance team <systemd-maint@redhat.com> - 219-74
changelog:
  - sd-bus: bump message queue size again (#1770158)
  - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
  - add test for ExecStopPost (#1733998)
  - core: when restarting services, don't close fds (#1757704)
  - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
  - tests: add basic journal test (#1757704)
  - tests: add regression test for `systemctl restart systemd-journald` (#1757704)
  - tests: add test that journald keeps fds over termination by signal (#1757704)
  - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
  - journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
  - mount: don't propagate errors from mount_setup_unit() further up (#1804757)
  - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
  - fix the fix for #1691511 (#1804757)
  - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
  - Consider smb3 as remote filesystem (#1811700)
  - mount: don't add Requires for tmp.mount (#1813270)
  - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
  - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
  - sd-journal: remove the dead code and actually fix #14695 (#1812889)
  - swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
  - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
  - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
  - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
  - core: clarify that the CollectMode bus property is constant (#1817576)
  - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
  - logind: check PolicyKit before allowing VT switch (#1797672)
  - timer: don't use persietent file timestamps from the future (#6823) (#1769923)
  - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
  - bus_open leak sd_event_source when udevadm trigger。 (#1798503)
  - journal-remote: split-mode=host, remove port from journal filename (#1244691)
  - core: downgrade log message about inability to propagate cgroup release message (#1679934)
  - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
  - set kptr_restrict=1 (#1689344)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-76
changelog:
  - core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
  - core: rework StopWhenUnneeded= logic (#1775291)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-77
changelog:
  - core: coldplug possible nop_job (#1829754)
  - core: make sure to restore the control command id, too (#1828953)


author: Tianyue Lan <tianyue.lan@oracle.com> - 219-78.0.1
changelog:
  - Backport upstream patches related to private-tmp (Sushmita Bhattacharya) [Orabug: 31561883]
  - backport upstream pstore tmpfiles patch (Eric DeVolder) [Orabug: 31414539]
  - udev rules: fix memory hot add and remove [Orabug: 31309730]
  - enable and start the pstore service [Orabug: 30950903]
  - fix to generate the systemd-pstore.service file [Orabug: 30235241]
  - Backport upstream patches for the new systemd-pstore tool [Orabug: 30235241]
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]


author: Eric DeVolder <eric.devolder@oracle.com> - 219-78.0.1.el7.1 [Orabug 31414539]
changelog:
  - Change to have file tmpfiles.d/systemd-pstore.conf installe on upon
    initial installation, not on rpm update.


author: systemd maintenance team <systemd-maint@redhat.com> - 219-78.1
changelog:
  - device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
  - device: don't emit PropetiesChanged needlessly (#1793527)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-78.2
changelog:
  - core: don't update unit description if it is already set to the same value (#1793527)
  - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
  - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 219-78.0.1.el7_9.2
changelog:
  - Change to have file tmpfiles.d/systemd-pstore.conf installed on upon
    initial installation, not on rpm update. [Orabug 31414539]
  - Backport upstream patches related to private-tmp (Sushmita Bhattacharya) [Orabug: 31561883]
  - backport upstream pstore tmpfiles patch (Eric DeVolder) [Orabug: 31414539]
  - udev rules: fix memory hot add and remove [Orabug: 31309730]
  - enable and start the pstore service [Orabug: 30950903]
  - fix to generate the systemd-pstore.service file [Orabug: 30235241]
  - Backport upstream patches for the new systemd-pstore tool [Orabug: 30235241]
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]


author: systemd maintenance team <systemd-maint@redhat.com> - 219-78.4
changelog:
  - test: add a test/reproducer for BZ#1989245 (#1989245)
  - strv: fix buffer size calculation in strv_join_quoted() (#1989245)
  - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 219-78.0.9.el7_9.7
changelog:
  - Core: explicitly trigger changing udev systemd_wants property [Orabug: 31858125]
  - Disable unprivileged BPF by default [Orabug: 32871008]
  - Resolve missing installation files for systemd-pstore [Orabug 32497787]
  - Change to have file tmpfiles.d/systemd-pstore.conf installed on upon
  	initial installation, not on rpm update. [Orabug 31414539]
  - Backport upstream patches related to private-tmp (Sushmita Bhattacharya) [Orabug: 31561883]
  - backport upstream pstore tmpfiles patch (Eric DeVolder) [Orabug: 31414539]
  - udev rules: fix memory hot add and remove [Orabug: 31309730]
  - enable and start the pstore service [Orabug: 30950903]
  - fix to generate the systemd-pstore.service file [Orabug: 30235241]
  - Backport upstream patches for the new systemd-pstore tool [Orabug: 30235241]
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]
  - daemon reload race fix [Orabug: 34205619]


author: Eric DeVolder <eric.devolder@oracle.com> - 219-78.0.10.el7_9.7
changelog:
  - Backport upstream pstore dmesg fix [Orabug: 34845435]
  - Fix pstore StateDirectory error message [Orabug: 34852549]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 219-78.0.10.el7_9.8
changelog:
  - Backport upstream pstore dmesg fix [Orabug: 34845435]
  - Fix pstore StateDirectory error message [Orabug: 34852549]
  - Core: explicitly trigger changing udev systemd_wants property [Orabug: 31858125]
  - Disable unprivileged BPF by default [Orabug: 32871008]
  - Resolve missing installation files for systemd-pstore [Orabug 32497787]
  - Change to have file tmpfiles.d/systemd-pstore.conf installed on upon
  	initial installation, not on rpm update [Orabug 31414539]
  - Backport upstream patches related to private-tmp (Sushmita Bhattacharya) [Orabug: 31561883]
  - backport upstream pstore tmpfiles patch (Eric DeVolder) [Orabug: 31414539]
  - udev rules: fix memory hot add and remove [Orabug: 31309730]
  - enable and start the pstore service [Orabug: 30950903]
  - fix to generate the systemd-pstore.service file [Orabug: 30235241]
  - Backport upstream patches for the new systemd-pstore tool [Orabug: 30235241]
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]
  - daemon reload race fix [Orabug: 34205619]


author: Codrin Pruteanu <codrin.pruteanu@oracle.com> - 219-78.0.10.el7_9.9
changelog:
  - Backport upstream pstore dmesg fix [Orabug: 34845435]
  - Fix pstore StateDirectory error message [Orabug: 34852549]
  - Core: explicitly trigger changing udev systemd_wants property [Orabug: 31858125]
  - Disable unprivileged BPF by default [Orabug: 32871008]
  - Resolve missing installation files for systemd-pstore [Orabug 32497787]
  - Change to have file tmpfiles.d/systemd-pstore.conf installed on upon
      initial installation, not on rpm update [Orabug 31414539]
  - Backport upstream patches related to private-tmp (Sushmita Bhattacharya) [Orabug: 31561883]
  - backport upstream pstore tmpfiles patch (Eric DeVolder) [Orabug: 31414539]
  - udev rules: fix memory hot add and remove [Orabug: 31309730]
  - enable and start the pstore service [Orabug: 30950903]
  - fix to generate the systemd-pstore.service file [Orabug: 30235241]
  - Backport upstream patches for the new systemd-pstore tool [Orabug: 30235241]
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]
  - daemon reload race fix [Orabug: 34205619]
  - Backport upstream pstore dmesg fix [Orabug: 34845435]
  - Fix pstore StateDirectory error message [Orabug: 34852549]


author: Sushmita Bhattacharya <sushmita.bhattacharya@oracle.com> - 219-78.0.13
changelog:
  - Add an extra timeout, configurable through env, before udev kills workers. Set to 10 min [Orabug: 35909317]


author: David Kubat <david.kubat@oracle.com> - 219-78.0.7.5
changelog:
  - Core: explicitly trigger changing udev systemd_wants property [Orabug: 31858125]
  - Disable unprivileged BPF by default [Orabug: 32871008]
  - Resolve missing installation files for systemd-pstore [Orabug 32497787]
  - Change to have file tmpfiles.d/systemd-pstore.conf installed on upon
    initial installation, not on rpm update. [Orabug 31414539]
  - Backport upstream patches related to private-tmp (Sushmita Bhattacharya) [Orabug: 31561883]
  - backport upstream pstore tmpfiles patch (Eric DeVolder) [Orabug: 31414539]
  - udev rules: fix memory hot add and remove [Orabug: 31309730]
  - enable and start the pstore service [Orabug: 30950903]
  - fix to generate the systemd-pstore.service file [Orabug: 30235241]
  - Backport upstream patches for the new systemd-pstore tool [Orabug: 30235241]
  - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
  - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
  - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.32.7-3
changelog:
  - Rebase to libguestfs 1.32 in RHEL 7.3
    resolves: rhbz#1218766
  - The full tests are now run after the package has been built.
  - New tool and subpackage: virt-dib (safe diskimage-builder replacement).
  - New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
    (see https://bugzilla.redhat.com/1194158).
  - New tool: virt-get-kernel.
  - Depend on java-headless instead of full java.
  - New tool: virt-v2v-copy-to-local.
  - Disable virt-v2v subpackage on ppc64 etc
    resolves: rhbz#1287826
  - v2v: Remove VirtualBox Additions correctly
    resolves: rhbz#1296606
  - Add clearer warnings sections to all man pages
    resolves: rhbz#1293527
  - v2v: Disable the --in-place option.
  - v2v: Support conversion of Windows > 7
    resolves: rhbz#1190669
  - Add code to verify tarball signatures.
  - General performance improvements.
  - v2v: Prevent duplicate -b, -n, -oa options
    resolves: rhbz#1326266
    resolves: rhbz#1325825
  - v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
  - v2v: Fix alignment issues in treeviews in conversion dialog
    resolves: rhbz#1340407
  - p2v: spinner should be hidden when it stops spinning
    resolves: rhbz#1341564
  - p2v: ethtool command is not supported on p2v client
    resolves: rhbz#1341608
  - p2v: Add ifconfig command to ISO
    resolves: rhbz#1342447
  - p2v: Warn if virt-p2v-make-disk used on a partition
    resolves: rhbz#1342337
  - Build using OCaml with fix for CVE-2015-8869.
    resolves: rhbz#1343101
  - customize: Add --uninstall option (upstream 1343375)
  - p2v: Document permissions on id_rsa file
    resolves: rhbz#1343414
  - p2v: Print full curl error message
    resolves: rhbz#1343423
  - get-kernel: Fix --format auto
    resolves: rhbz#1341984
  - v2v: Provide better <Origin/> information to RHEV-M
    resolves: rhbz#1342398
  - customize: Give an error if --truncate-recursive path does not exist
    resolves: rhbz#1345809
  - sysprep: Add --network option so that --install option can be used
    resolves: rhbz#1345813
  - p2v: Print proper error if incorrect password is given
    resolves: rhbz#1227599
  - p2v: Print ssh error if incorrect hostname is given
    resolves: rhbz#1167916
  - p2v: Display progress of operation in non-GUI mode
    resolves: rhbz#1229386
  - p2v: Add a dialog confirming the user really means to cancel
    resolves: rhbz#1340464
  - p2v: log window should process colour escapes and backspaces
    resolves: rhbz#1314244
  - v2v: Fix installation of virtio drivers with *.dll files
    resolves: rhbz#1311373
  - p2v: Improve error message when ssh login to conversion server fails
    resolves: rhbz#1348900
  - v2v: Remove --dcpath parameter from manual
    resolves: rhbz#1315237
  - v2v: Fix conversion of guests with floppy drives
    resolves: rhbz#1309706
  - p2v: Better error when sudo requires a password
    resolves: rhbz#1340809
  - v2v: Refuse to convert if there is < 1GB free in temporary directory
    resolves: rhbz#1316479
  - inspection: Get Windows drive letters for GPT disks
    resolves: rhbz#1349237
  - p2v: Add disk utils and display serial number of disks
    resolves: rhbz#855058
  - p2v: Fix timeout error when connecting to unresponsive ssh server
    resolves: rhbz#1350363
  - Remove external dependency generator.  Use supermin RPM deps instead.
    related: rhbz#1309796
  - p2v: Flush messages to the journal immediately
    resolves: rhbz#1229386
  - customize: Fix --install on ppc64le
    resolves: rhbz#1264835
  - lib: Fix finding icons in Windows 7 64 bit guests
    resolevs: rhbz#1352761
  - v2v: Add virsh --quiet flag when running virt-v2v --quiet
    resolves: rhbz#1358142
  - lib: Fix inspection of ISOs with latest libosinfo
    resolves: rhbz#1359652
  - dib: Fix run_command exit handlers on failure
    resolves: rhbz#1362357
  - dib: Rework run of extra-data.d hooks
    resolves: rhbz#1362354
  - Miscellaneous fixes to man pages and --help output
    resolves: rhbz#1362668
  - lib: Specify backing format for read-only files
    resolves: rhbz#1354335
  - Fix --selinux-relabel option
    resolves: rhbz#1362669
  - sparsify: Fix --in-place option with UEFI guest
    resolves: rhbz#1364347
  - p2v: Use latest linux-firmware in ISO
    resolves: rhbz#1364419
  - v2v: Fix guest name when using -i disk
    resolves: rhbz#1365005
  - p2v: Fix GUI message.
  - v2v: Make fstrim message clearer
    resolves: rhbz#1366456
  - v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
    resolves: rhbz#1367615
  - lib: Fix assert-fail if port is missing in libvirt XML
    resolves: rhbz#1370424


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-6
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
    resolves: rhbz#1503497
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.50
changelog:
  - v2v:
    * When debugging, dump OVF to stderr.
    * Ignore missing kernels from grub
      resolves: rhbz#1230412
    * Calculate VMware dcPath correctly (1256823)
    * Map empty VMware network or bridge name to default (1257895)
  - p2v:
    * Wait for network to come online before testing connection
      resolves: rhbz#1256222
  - Fix tests to run correctly with libguestfs-winsupport 7.2.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.51
changelog:
  - v2v: Fix handling of extra slashes in dcPath calculation
    resolves: rhbz#1258342 rhbz#1256823
  - v2v: Fix -oa preallocation option
    resolves: rhbz#1251909


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.52
changelog:
  - v2v: Warn if Group Policy or AV software may result in 7B boot failure
    (1260689)
  - v2v: Fix OVF XML to enable qxl display
    resolves: rhbz#1260590


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.53
changelog:
  - v2v: Error if certain options appear twice on the command line (1261242)
  - v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
  - v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
  - v2v: Detect AVG Technologies as AV software (1261436)
    resolves: rhbz#1261281


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12
changelog:
  - Rebase to libguestfs 1.38.2 in RHEL 7.6.
    resolves: rhbz#1551055
  - v2v: warn about unknown VMware controller types
    resolves: rhbz#1510801
  - df: show correct sizes in human-readable mode for filesystems with
    block size = 512
    resolves: rhbz#1525262
  - v2v: fix example URL in man page
    resolves: rhbz#1540535
  - Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
    resolves: rhbz#1541525
  - Fix qemu-img-ma dependency in non-x86_64 architectures
    resolves: rhbz#1568676
  - v2v: update "resume=/dev/sdaX" entries in GRUB command lines
    resolves: rhbz#1532224
  - v2v: fix virtio-rng and memballoon OVF fragment for RHV
    resolves: rhbz#1550168
  - v2v: detect whether the root filesystem was not mounted in read-write mode
    resolves: rhbz#1567763
  - v2v: import OVAs with snapshots
    resolves: rhbz#1570407
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1571237
  - Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
    place where it used now (by virt-builder-repository).
  - v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
    oVirt REST API
    resolves: rhbz#1557273
  - Start lvmetad earlier when booting the appliance
    resolves: rhbz#1581810
  - v2v: fix kernel detection in Ubuntu guests since 18.04
    resolves: rhbz#1591248
  - v2v: convert the CPU topology correctly
    resolves: rhbz#1541908
  - Add a new inspect_get_osinfo API, and add its result to the output of
    virt-inspector
    resolves: rhbz#1544842
  - Pass absolute paths to NBD sockets when using the libvirt backend
    resolves: rhbz#1588451
  - v2v: do not write only <vendor> without <model> in libvirt XMLs
    resolves: rhbz#1591789
  - v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
    used for -it vddk, and -o rhv-upload
    resolves: rhbz#1589776
    resolves: rhbz#1608718
  - v2v/p2v: disable on aarch64, since it is not supported (nor even working)
    there
    resolves: rhbz#1601488
  - v2v: handle srN devices in libvirt XML (for virt-p2v)
    resolves: rhbz#1612785
  - Do not use the -cpu parameter under any circumstances for ppc64le.
    resolves: rhbz#1605071


author: EL Errata <el-errata_ww@oracle.com> - 1:1.38.2-12.0.1
changelog:
  - Set DISTRO_ORACLE_LINUX corresponding to ol
  - Remove 0001-update-distro-for-oracle.patch
    To support OL, update related code about /etc/os-release [bug 28760753]
  - Update packagelist.in for OL


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12.el7_6.1
changelog:
  - v2v: update documentation regarding SHA-2 certificates in Windows 7 and
    Windows Server 2008 R2
    resolves: rhbz#1632788
  - v2v: fix rhev-apt firstboot command for Windows
    resolves: rhbz#1625216


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5
changelog:
  - Rebase to libguestfs 1.40.2 in RHEL 7.7.
    resolves: rhbz#1621895
  - v2v: uninstall the VMware Tools correctly
    resolves: rhbz#1465849
    resolves: rhbz#1481930
  - v2v: fix VMware vCenter roles needed for conversion
    resolves: rhbz#1530967
  - v2v: preserve the VM Generation ID
    resolves: rhbz#1598350
  - Query QEMU to known whether KVM is supported
    resolves: rhbz#1605071
  - v2v: add --mac option
    resolves: rhbz#1607274
  - v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
    resolves: rhbz#1619665
    resolves: rhbz#1691659
  - v2v: provide a way to query for the estimated size of the disks
    resolves: rhbz#1622785
  - Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
    resolves: rhbz#1634248
  - p2v: add an option to Shutdown the machine after the conversion
    resolves: rhbz#1642044
  - v2v: fix epoch when querying installed RPM packages
    resolves: rhbz#1669395
  - Use a better icon for RHEL >= 7 guests
    resolves: rhbz#1679482
  - v2v: improve the architecture detection of Linux kernel modules
    resolves: rhbz#1690574
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688155
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1605242
  - v2v: warn when a guest has 'direct' network interfaces
    resolves: rhbz#1151902
  - v2v: use proper SELinux label for nbdkit sockets
    resolves: rhbz#1698437


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5.el7_7.1
changelog:
  - v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
    for 'rhv-upload'
    resolves: rhbz#1726168


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-7
changelog:
  - v2v: -o rhv-upload: improve wait logic after finalize
    resolves: rhbz#1680361
  - v2v: fix DISKTYPE value in generated .ovf files
    resolves: rhbz#1750719


author: EL Errata <el-errata_ww@oracle.com> - 1:1.40.2-10.0.1
changelog:
  - Set DISTRO_ORACLE_LINUX corresponding to ol
  - Remove 0001-update-distro-for-oracle.patch
    To support OL, update related code about /etc/os-release [Orabug: 28760753]
  - Update packagelist.in for OL


author: Richard W.M. Jones <rjones@redhat.com> - 7.0-2
changelog:
  - Resync against Rawhide package (ntfs-3g 2013.1.13).
  - Drop HAL file since HAL is dead.
    resolves: rhbz#819939


author: Richard W.M. Jones <rjones@redhat.com> - 7.1-2
changelog:
  - New package for RHEL 7.1
  - Rebase to ntfs-3g 2014.2.15
    resolves: rhbz#1100319
  - Change the package so it works with supermin5.
  - Remove dependency on external FUSE.


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698502


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Marek Kasik <mkasik@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Backport several important patches from current master
  - Revert addition of GXPSImage (it would change ABI)
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.2.5-1
changelog:
  - Update to newly released 0.2.5
  - Preserve ABI by exporting the same set of methods as before
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-2
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Resolves: #1574844


author: Rafael Aquini <aquini@redhat.com> - 2.16-13
changelog:
  - tests/stack_grow_into libhugetlbfs test fixes (#1422960)
  - PPC vm/hugepage/libhugetlbfs test fix (#1515365)


author: Doug Ledford <dledford@redhat.com> - 1.3.11-1
changelog:
  - Update to latest upstream release (dependency for another package)
  - Enable valgrind in build
  - Related: bz1092538


author: Doug Ledford <dledford@redhat.com> - 1.3.12-1
changelog:
  - Build on s390
  - Update to latest version to work with OPA enabled libibumad
  - Related: bz1169962, bz1186159


author: Doug Ledford <dledford@redhat.com> - 1.3.10.2-1
changelog:
  - Update to latest upstream release
  - Pick up OPA MAD support
  - Drop s390 restriction
  - Resolves: bz1169962
  - Related: bz1186159


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Build against valgrind on ppc64le
  - Fix a coverity found issue
  - Resolves: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Fix one of the coverity bugs in a different way (the original fix
    caused a problem in libmlx4)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-6
changelog:
  - Add build on s390
  - Drop back to building against libnl instead of libnl3
  - Resolves: bz1182178, bz1177115


author: Doug Ledford <dledford@redhat.com> - 1.1.8-7
changelog:
  - Add checksum offload support
  - Update the various patches to the ones from the official upstream git repo
  - Related: bz1195888


author: Jarod Wilson <jarod@redhat.com> 1.2.0-1
changelog:
  - Update to libiec61883 v1.2.0 release
  - Rework installtests patch to not require autoreconf
  - Make iso channel allocation work w/o local fw node r/w


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.3-3
changelog:
  - Fix touchpad tap timestamps (#1491525)
  - Fix missing show-keycodes entry in man page (#1491532)
  - Change palm detection thresholds (#1491537)
  - Ignore tap motion threshold for nfingers > nslots (#1491533)
  - Fix a memory leak on destroy
  - Ignore hovering touches while tapping
  - Fix a man page typo


author: Peter Hutterer <peter.hutterer@redhat.com> 1.5.2-2
changelog:
  - Swap to the correct tarball so we match the checksums from upstream (had a
    local mixup of tarballs)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-3
changelog:
  - capitalize Name,Summary,Version tags
  - -devel: capitalize Summary
  - fix spurious permissions on header files
  - refresh upstream source
  - -admin,-devel: add %defattr(...)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-4
changelog:
  - -devel: install headers to /usr/include/libiodbc/ to better avoid
    conflicts and need for bogus unixODBC-devel dep


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-41
changelog:
  - Resolves: rhbz#1445445 - Smart card login fails if same cert mapped to
                             IdM user and AD user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-43
changelog:
  - Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                             properly in v 1.15


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-44
changelog:
  - Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                             after changing default_domain_suffix to
                             ADdomin in /etc/sssd/sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-47
changelog:
  - Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                             most of the entries once the cleanup task kicks in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-48
changelog:
  - Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                             information retured by the KDC during
                             PKINIT/Smartcard authentication


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-49
changelog:
  - Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                             from trusted domains with the same name when
                             shortname user resolution is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50
changelog:
  - Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                             connected to AD child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50.1
changelog:
  - Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                             [rhel-7.4.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50.2
changelog:
  - Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                             ID can mark the AD domain offline [rhel-7.4.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.15.2-50.3
changelog:
  - Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                             rules refresh [rhel-7.4.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50.4
changelog:
  - Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                             on 7.4 [rhel-7.4.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.15.2-50.6
changelog:
  - Add a patch that was missed in 1.15.2-50.4
  - Related: rhbz#1489290 - samba shares with sssd authentication broken
                            on 7.4 [rhel-7.4.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.15.2-50.7
changelog:
  - Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                             libldb >= 1.2.0 (1.1.30) [rhel-7.4.z]
  - Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                             PAC responder [rhel-7.4.z]
  - Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database [rhel-7.4.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.15.2-50.8
changelog:
  - Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                             mapping is applied [rhel-7.4.z]
  - Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                             list and a request that is using the list can
                             cause a segfault is sssd_nss [rhel-7.4.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-19.1
changelog:
  - Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-19.2
changelog:
  - Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-19.4
changelog:
  - Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-19.5
changelog:
  - Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.0-19.6
changelog:
  - Resolves: rhbz#1594178 - Login with sshkeys stored in ipa not working after update to RHEL-7.5 [rhel-7.5.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.0-19.7
changelog:
  - Resolves: rhbz#1596292 - home dir disappear in sssd cache on the IPA master for AD users [rhel-7.5.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.0-19.8
changelog:
  - Resolves: rhbz#1601360 - SSSD bails out saving desktop profiles in case an invalid profile is found [rhel-7.5.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-10
changelog:
  - Resolves: rhbz#1421194 - SSSD doesn't use AD global catalog for
                             gidnumber lookup, resulting in unacceptable
                             delay for large forests


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-11
changelog:
  - Related: rhbz#1507614 - Improve Smartcard integration if multiple
                            certificates or multiple mapped identities are
                            available
  - Resolves: rhbz#1523010 - IPA user able to authenticate with revoked
                             cert on smart card
  - Resolves: rhbz#1520984 - getent output is not showing home directory
                             for IPA AD trusted user
  - Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                            threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-12
changelog:
  - Resolves: rhbz#1512027 - NSS by-id requests are not checked against
                             max_id/min_id ranges before triggering the
                             backend


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-13
changelog:
  - Resolves: rhbz#1523010 - IPA user able to authenticate with revoked cert
                             on smart card


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-15
changelog:
  - Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                             subdomain initialization - IPA AD Trust
  - Related: rhbz#1482555 - sysdb index improvements - missing ghost
                            attribute indexing, unneeded objectclass index
                            etc..
  - Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                            on RHEL clients joined to AD via sssd [RHEL 7]
  - Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                             gidNumber = 0
  - Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                            a primed cache
  - Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                            threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-16
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
  - Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                            on RHEL clients joined to AD via sssd [RHEL 7]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-17
changelog:
  - Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                             server


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-18
changelog:
  - Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
  - Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-4
changelog:
  - Resolves: rhbz#1590603 - EMBARGOED CVE-2018-10852 sssd: information leak from the sssd-sudo responder [rhel-7]
  - Resolves: rhbz#1450778 - Full information regarding priority of lookup of principal in keytab not in man page


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-5
changelog:
  - Resolves: rhbz#1583725 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries
  - Resolves: rhbz#1416528 - sssd in cross realm trust configuration should be able to use AD KDCs from a client site defined in sssd.conf or a snippet
  - Resolves: rhbz#1592964 - Groups go missing with PAC enabled in sssd


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-6
changelog:
  - Resolves: rhbz#1582975 - The search filter for detecting POSIX attributes in global catalog is too broad and can cause a high load on the servers


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-7
changelog:
  - Resolves: rhbz#1600822 - SSSD bails out saving desktop profiles in case an invalid profile is found


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-8
changelog:
  - Resolves: rhbz#1607313 - When sssd is running as non-root user, the sudo pipe is created as sssd:sssd but then the private pipe ownership fails


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-10
changelog:
  - Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-12
changelog:
  - Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
  - Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-13
changelog:
  - Resolves: rhbz#1593756 - sssd needs to require a newer version of
                             libtalloc and libtevent to avoid an issue
                             in GPO processing


author: Michal Židek <mzidek@redhat.com> - 1.16.3-1
changelog:
  - Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                             differs from the default [rhel-7.6.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.3-2
changelog:
  - Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                            AD [rhel-7.6.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.3-4
changelog:
  - Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
              order to retrieve AD users through IPA Trust [rhel-7.6.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.3-5
changelog:
  - Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI [rhel-7.6.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.2-13.6
changelog:
  - Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                             cifs.upcall krb5 calls [rhel-7.6.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.2-13.8
changelog:
  - Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                           - Part 2.


author: Michal Židek <mzidek@redhat.com> - 1.16.4-14
changelog:
  - Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                             and fails otherwise


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-15
changelog:
  - Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                             /trusts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-17
changelog:
  - Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                             properly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-18
changelog:
  - Resolves: rhbz#1710286 - The server error message is not returned if
                             password change fails


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21
changelog:
  - Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
  - Rebuild japanese gmo file explicitly


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21.1
changelog:
  - Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                             config option for known domains [rhel-7.7.z]


author: EL Errata <el-errata_ww@oracle.com> - 1.16.4-21.0.1
changelog:
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21.2
changelog:
  - Resolves: rhbz#1801207 - id command taking 1+ minute for returning user
                             information [rhel-7.7.z] (


author: Alexey Tikhonov <atikhono@redhat.com> - 1.16.4-21.3
changelog:
  - Resolves: rhbz#1807934 - sssd failover leads to delayed and failed logins
                             [rhel-7.7.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.4-12
changelog:
  - Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                           - This was partially fixed by the rebase, but one
                             spec file change was missing.


author: Michal Židek <mzidek@redhat.com> - 1.16.4-29
changelog:
  - Resolves: rhbz#1713352 - Implicit files domain gets activated when no
                             sssd.conf present and sssd is started


author: Michal Židek <mzidek@redhat.com> - 1.16.4-30
changelog:
  - Resolves: rhbz#1530741 - Trusted domain user logins succeed after using
                             ipa trustdomain-disable


author: Michal Židek <mzidek@redhat.com> - 1.16.4-31
changelog:
  - Resolves: rhbz#1746878 - Let IPA client read IPA objects via LDAP and not
                             a extdom plugin when resolving trusted users and
                             groups


author: Michal Židek <mzidek@redhat.com> - 1.16.4-32
changelog:
  - Resolves: rhbz#1530741 - Trusted domain user logins succeed after using ipa
                             trustdomain-disable


author: Michal Židek <mzidek@redhat.com> - 1.16.4-34
changelog:
  - Resolves: rhbz#1768404 - automount on RHEL7 gives the message
                             'lookup(sss): setautomntent: No such file or
                             directory'


author: Michal Židek <mzidek@redhat.com> - 1.16.4-37
changelog:
  - Resolves: rhbz#1784620 - Force LDAPS over 636 with AD Access Provider
  - just bumping the version to fix generated dates in man pages


author: Michal Židek <mzidek@redhat.com> - 1.16.4-37.1
changelog:
  - Resolves: rhbz#1801208 - id command taking 1+ minute for returning user
                             information [rhel-7.8.z]
                           - Also updates spec file to not replace
                             /pam.d/sssd-shadowutils on update


author: Alexey Tikhonov <atikhono@redhat.com> - 1.16.4-37.2
changelog:
  - Resolves: rhbz#1816031 - SSSD is crashing: dbus_watch_handle() is invoked
                             with corrupted 'watch' value [rhel-7.8.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.16.4-37.3
changelog:
  - Resolves: rhbz#1817380 - Removing an IPA sub-group should NOT remove the members
                             from indirect parent that also belong to other subgroups
                             [rhel-7.8.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.16.4-37.4
changelog:
  - Resolves: rhbz#1842861 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing [rhel-7.8.z]
  - Resolves: rhbz#1845009 - [Bug] Reduce logging about flat names [rhel-7.8.z]


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-2
changelog:
  - Resolves: rhbz#1513371 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_be[PROXY] killed by 6
  - Resolves: rhbz#1568083 - subdomain lookup fails when certmaprule contains DN
  - Resolves: rhbz#1781539 - PKINIT with KCM does not work
  - Resolves: rhbz#1786341 - SSSD doesn't honour the customized ID view created in IPA
  - Resolves: rhbz#1709818 - override_gid did not work for subdomain.
  - Resolves: rhbz#1719718 - Validator warning issue : Attribute 'dns_resolver_op_timeout' is not allowed in section 'domain/REMOVED'. Check for typos
  - Resolves: rhbz#1787067 - sssd (sssd_be) is consuming 100 CPU, partially due to failing mem-cache
  - Resolves: rhbz#1822461 - background refresh task does not refresh updated netgroup entries
  - Added missing 'Requires' to resolves some of rpmdiff tool warnings


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-3
changelog:
  - Resolves: rhbz#1683946 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working setup


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-4
changelog:
  - Resolves: rhbz#1829806 - [Bug] Reduce logging about flat names
  - Resolves: rhbz#1800564 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6
changelog:
  - Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
  - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7
changelog:
  - Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
  - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8
changelog:
  - Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
  - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                             It is done in two steps (two different nsupdate messages).


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10
changelog:
  - Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False


author: Todd Vierling <todd.vierling@oracle.com> - 1.16.5-10.0.1
changelog:
  - sssd_be crash when refresh_expired_interval is set [orabug 31220112]
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2
changelog:
  - Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  - just bumping the version to build for proper target


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3
changelog:
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
    (Previous attempt to fix this issue was incomplete)


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4
changelog:
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
    (Previous attempt to fix this issue was incomplete (again))


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5
changelog:
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
    (Previous attempt to fix this issue was incomplete (again))
  - just bumping the version to build for proper target


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6
changelog:
  - Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
  - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
  - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
  - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
  - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
  - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
  - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
  - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7
changelog:
  - Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
  - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
  - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8
changelog:
  - Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
  - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
  - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
  - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
  - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]


