# changelog

author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.876-7.gitf3c8e90.0.1
changelog:
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0030-Use-sd_notify-to-tell-systemd-when-iscsid-is-ready.patch
    Add 0031-Update-systemd-unit-files-for-iscsid.patch
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]


author: Fred Herard <fred.herard@oracle.com> - 6.2.0.876-7.gitf3c8e90.0.2
changelog:
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]


author: Livy Ge <livy.ge@oracle.com> - 6.2.0.877-1.gitf71581b.0.1
changelog:
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]


author: Chris Leech <cleech@redhat.com> - 6.2.0.878-0.gitd791ce0
changelog:
  - 1761940 iSCSI CHAP authentication not function with FIPS enabled
  - Service file improvements forward ported from RHEL 7.8
  - various static analysis fixes from upstream


author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.878-4.gitd791ce0.0.1.el8
changelog:
  - Tune TimeoutSec of iscsid service to 10 minutes
    [Orabug: 29869817]
  - Modify patches 0007 and 0032-0035 to apply cleanly.
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]
  - iSCSI CHAP authentication not function with FIPS enabled [Orabug: 1761940]


author: Chris Leech - 6.2.0.878-5.gitd791ce0
changelog:
  - 1849931, 1869438 go back to MD5 CHAP only by default
    new CHAP modes can cause issue with some targets,
    so SHA1/SHA256/SHA3-256 modes must be configured to enable now


author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.878-5.gitd791ce0.0.1
changelog:
  - iscsid - Proper disconnect of TCP connection. [Orabug: 31503159]
  - Tune TimeoutSec of iscsid service to 10 minutes
    [Orabug: 29869817]
  - Modify patches 0007 and 0032-0035 to apply cleanly.
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [Orabug: 18791695]
  - iSCSI CHAP authentication not function with FIPS enabled [Orabug: 1761940]


author: David Kubat <david.kubat@oracle.com> - 6.2.1.2-1.gita8fcb37.0.1
changelog:
  - Tune TimeoutSec of iscsid service to 10 minutes
    [Orabug: 29869817]
  - Modify patches 0007 and 0032-0035 to apply cleanly.
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [Orabug: 18791695]
  - iSCSI CHAP authentication not function with FIPS enabled [Orabug: 1761940]


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 6.2.1.4-4.git095f59c.0.1
changelog:
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Darren Archibald <darren.archibald@oracle.com> - 6.2.1.4-8.git095f59c.0.1
changelog:
  - Remove 0039-idbm-Change-mkdir-permissions-to-0770.patch
  - Change mkdir permissions to 0770 [Orabug: 35480395]
  - Log error when auth debug status is set [Orabug: 32831167]
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Akshata Konala <akshata.konala@oracle.com> - 6.2.1.4-8.git095f59c.0.1
changelog:
  - 2131090 fix idbm patch to not overwrite upstream changes in file mode
  - Remove 0039-idbm-Change-mkdir-permissions-to-0770.patch


author: Gulam Mohamed <gulam.mohamed@oracle.com> - 6.2.1.4-8.git095f59c.0.2
changelog:
  - Rate limit session reopen and initial connect log messages [Orabug: 37176222]
  - Change the log_level of log_debug message in actor_delete()


author: EL Errata <el-errata_ww@oracle.com> - 6.2.1.4-9.git095f59c.0.1
changelog:
  - Delay reconnect until interface has a valid IP. [Orabug: 38320021]
  - Rate limit session reopen and initial connect log messages [Orabug: 37176222]
  - Change the log_level of log_debug message in actor_delete()
  - Remove 0039-idbm-Change-mkdir-permissions-to-0770.patch
  - Change mkdir permissions to 0770 [Orabug: 35480395]
  - Log error when auth debug status is set [Orabug: 32831167]
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Chris Leech <cleech@redhat.com> - 0.94-1
changelog:
  - new upstream location, update to 0.94
  - new devel package, upstream open-iscsi is dropping it's internal copy


author: Herton R. Krzesinski <herton@redhat.com> - 20180524-84.git2a9b2cf5
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update Intel Omni-Path Architecture (OPA) Firmware (rhbz 1483737)
  - Drop separate microcode_amd_fam17h.bin, same file is now included in linux-firmware
    upstream


author: Herton R. Krzesinski <herton@redhat.com> - 20180524-85.git2a9b2cf5
changelog:
  - Add Obsoletes for conflicting ivtv-firmware versions (rhbz 1589055)
  - Add Obsoletes for iwl7265-firmware which is shipped with RHEL 7 (rhbz 1589056)


author: Herton R. Krzesinski <herton@redhat.com> - 20180706-86.gitd1147327
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - qed: Add firmware 8.37.2.0 (rhbz 1584853)


author: Herton R. Krzesinski <herton@redhat.com> - 20180717-87.git8d69bab7
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - cxgb4: update firmware to revision 1.20.8.0 (rhbz 1503622)


author: Herton R. Krzesinski <herton@redhat.com> - 20181011-88.gitc6b6265d
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include latest firmware for Nvidia Graphics (rhbz 1504667)


author: Herton R. Krzesinski <herton@redhat.com> - 20181015-89.gitc6b6265d
changelog:
  - Remove liquidio/lio_23xx_vsw.bin from linux-firmware until GPL violation is
    fully resolved (rhbz 1637694)


author: Herton R. Krzesinski <herton@redhat.com> - 20181109-90.git1baa3486
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include BPF version of Netronome firmware (rhbz 1637558)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20200124-999.4.git1eb2408c.el8
changelog:
  - Rebase to latest upstream firmware (Orabug: 30762405).
  - Create symlinks from WHENCE file (Orabug: 30762405).


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20201217-999.7.git7455a360.el8
changelog:
  - Sync to latest to get fix for CVE-2020-12321 linux-firmware: hardware: buffer overflow in bluetooth firmware (bz# 62321)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20211203-999.9.gitb0e898fb.el8
changelog:
  - Move the build env to latest OL chroot.
  - Split Intel wireless AX2xx series to a separate package
  - Rebase to latest upstream linux-firmware


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20220304-999.12.gitf011ccb4.el8
changelog:
  - Make iwl7260-firmware to depend on iwlax2xx-firmware (Orabug: 33861186)
  - Rebase to upstream (Orabug: 33850583)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230227-999.16.git60971a64.el8
changelog:
  - Fix rpm install issue due to directory replaced by symlink (Orabug: 35112753)
  - Rebase to upstream


author: Ethan Zhao <ethan.zhao@oracle.com> - 20171027-56.gitbf042913.0.3.el7
changelog:
  - Update linux-firmware-base.list with ls_fw.sh and UEK5 dev build (Orabug 27026301)
  - For UEK5 kernel-uek-base-4.14.0-1.el7uek.x86_64.rpm and later build.


author: Ethan Zhao <ethan.zhao@oracle.com> - 20171128-58.git17e62881.0.1.el7
changelog:
  - Update ql2600_fw.bin ql2700_fw.bin ql8300_fw.bin to 8.07.00 (Orabug: 27160935)
  - Merge latest upstream change (Orabug: 27210871)
  - Fix cxgb4 symlinks (Orabug: 27223984)
  - Pack iwl* FW files as separate packages (Orabug: 27174930)
  - Bump release number to avoid conflict with existing product build (Orabug: 27256604)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20180507-63.git0df406af.0.1.el7
changelog:
  - Rebase to latest upstream linux-firmware.
  - Don't add linux-nano-firmware.list to rpm.
  - Remove the temporary files at the cleanup
  - Bump release number.


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20180906-999.git85c5d90f.el7
changelog:
  - Rebase to latest upstream linux-firmware.
  - Sync with RHEL linux-firmware-20180529-66.git7518922.el7


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20181031-999.git1baa3486.el7
changelog:
  - Rebase to latest upstream linux-firmware.
  - Sync with RHEL linux-firmware-20180911-69.git85c5d90.el7


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.20.git6c9e0ed5.el8
changelog:
  - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode
  - 92624e57af69 linux-firmware: Update AMD cpu microcode


author: Jack Vogel <jack.vogel@oracle.com> - 20230516-999.22.git6c9e0ed5.el8
changelog:
  - remove amd-ucode/README (Orabug: 35645306)
  - Resolves "Zenbleed" (Orabug: 35650345) {CVE-2023-20593}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.25.git6c9e0ed5.el8
changelog:
  - Add missing amd-ucode/ files to nano and core rpm (Orabug: 35642190)
  - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951)
  - Recreate initramfs for AMD systems (Orabug: 35636951)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.26.git6c9e0ed5.el8
changelog:
  - Run dracut -f in %posttrans instead of %post (Orabug: 35661938)
  - Drop latest AMD microcode commits to family 19 file to include Milan microcode but not Genoa (Orabug: 35708511)


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20231025-999.28.git4ee01756.el8
changelog:
  - Rebase to upstream and contains AMD fix (Orabug: 35933859)
  - Add some iwlwifi-gl* files to be included to rpm package (Orabug: 35933859)


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20231102-999.29.git2b304bfe.el8
changelog:
  - Rebase to latest upstream (Orabug: 35978299)
  - Update AMD Genoa microcode from upstream commit (Orabug: 35965948)


author: Jack Vogel <jack.vogel@oracle.com> - 20230516-999.22.git6c9e0ed5.el8
changelog:
  - remove amd-ucode/README [Orabug: 35645306]
  - Resolves "Zenbleed" [Orabug: 35650345] {CVE-2023-20593}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.25.git6c9e0ed5.el8
changelog:
  - Add missing amd-ucode/ files to nano and core rpm [Orabug: 35642190]
  - Add posttrans scriptlet to reload microcode on AMD [Orabug: 35636951]
  - Recreate initramfs for AMD systems [Orabug: 35636951]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.26.git6c9e0ed5.el8
changelog:
  - Run dracut -f in %posttrans instead of %post [Orabug: 35661938]
  - Drop latest AMD microcode commits to family 19 file to include Milan microcode but not Genoa [Orabug: 35708511]


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20231025-999.28.git4ee01756.el8
changelog:
  - Rebase to upstream and contains AMD fix [Orabug: 35933859]
  - Add some iwlwifi-gl* files to be included to rpm package [Orabug: 35933859]


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20231102-999.29.git2b304bfe.el8
changelog:
  - Rebase to latest upstream [Orabug: 35978299]
  - Update AMD Genoa microcode from upstream commit [Orabug: 35965948]


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20240122-999.31.gitbf0987d3.el8
changelog:
  - Rebase to latest upstream [Orabug: 36174455]
  - Remove python3 dependency for linux-firmware [Orabug: 36067969]
  - Ignore duplicates as we don't have rdfind installed [Orabug: 36242384]
  - Avoid conflicts when upgrading from OL7 to OL8 [Orabug: 36077380]


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20241003-999.35.git95bfe086.el8
changelog:
  - Rebase to latest upstream [Orabug: 37132142]
  - Fix build error in ol7 due to linking in copy-firmware.sh [Orabug: 37132515]
  - Bring back drirectory structure qcom/sc8280xp [Orabug: 37132142]


author: Yifei Liu <yifei.l.liu@oracle.com> - 20250423-999.40.git32f3227b.el8
changelog:
  - Rebase to latest upstream [Orabug: 37868435]
  - Avoid showing microcode reload error if it's up to date [Orabug: 37891376]


author: Yifei Liu <yifei.l.liu@oracle.com> - 20250828-999.43.git260ff424.el8
changelog:
  - Rebase to latest upstream [Orabug: 38200684]
  - Solve conflicts caused by symbolic link changes [Orabug: 38206139]


author: Yifei Liu <yifei.l.liu@oracle.com> - 20251110-999.45.gitc0af6c70.el8
changelog:
  - Rebase to latest upstream [Orabug: 38523856]
  - Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20201016-999.6.git58d41d0f.el8
changelog:
  - BUILDINFO: commit=35dfe8d14ecd8d2488be7528619672227a57cb08
  - Rebase to latest upstream linux-firmware


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20201217-999.7.git7455a360.el8
changelog:
  - BUILDINFO: commit=b23c4760f2ebe58829ad905dc3bf471df0128066
  - Sync to latest to get fix for CVE-2020-12321 linux-firmware: hardware: buffer overflow in bluetooth firmware (bz# 62321)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20211203-999.9.1.gitb0e898fb.el8
changelog:
  - Make iwl7260-firmware to depend on iwlax2xx-firmware
  - Update AMD family 19h microcode for SPAMD-8000-24 and SPAMD-8001-MP CPU faults (Orabug: 33850583)


author: Jie Kang <jkang@redhat.com> - 1.2.1-3
changelog:
  - Remove osgiversion-maven-plugin build requirement
  - Remove javadoc plugin not needed in Fedora builds


author: Xin Long <lxin@redhat.com> - 2.11-3
changelog:
  - Deal with warnings under gcc 8
  - Call va_end after va_copy in json_vsprintf
  - Fix bogus date in jansson.spec


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Anna Khaitovich <akhaitov@redhat.com> - 0.13.1-0.3
changelog:
  - Don't package empty /usr/share/doc/json-c
  - Resolves: rhbz#1741076
  - Do not use --enable-rdrand
  - Resolves: rhbz#1806532


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.2.1.el8uek]
changelog:
  - x86/mce: Restart the system when LMCE UE error occurs (Thomas Tai)  [Orabug: 31218859]  
  - media: xirlink_cit: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31213764]  {CVE-2020-11668} 
  - media: ov519: add missing endpoint sanity checks (Johan Hovold)  [Orabug: 31213755]  {CVE-2020-11608} 
  - x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE (John Allen)  [Orabug: 31213533]  
  - media: stv06xx: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31200576]  {CVE-2020-11609} 
  - rds: Fix use-after-free in rds_ib_free_caches (Hans Westgaard Ry)  [Orabug: 31200768]  
  - net/rds: Fix MR reference counting problem (Ka-Cheong Poon)  [Orabug: 31130194]  
  - net/rds: Replace struct rds_mr's r_refcount with struct kref (Ka-Cheong Poon)  [Orabug: 31130194]  
  - ctf: discard CTF from the vDSO (Nick Alcock)  [Orabug: 31194036]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.2.2.el8uek]
changelog:
  - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio)  [Orabug: 31225231]  
  - xfs: move inode flush to the sync workqueue (Darrick J. Wong)  [Orabug: 31132665]  
  - arm64: Kconfig: Enable NODES_SPAN_OTHER_NODES config for NUMA (Hoan Tran)  [Orabug: 31049202]  
  - scsi: bnx2fc: timeout calculation invalid for bnx2fc_eh_abort() (Laurence Oberman)  [Orabug: 31207643]  
  - jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi)  [Orabug: 31264694]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.3.0.el8uek]
changelog:
  - NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (Robert Milkowski)  [Orabug: 31304406]  
  - NFSv4: try lease recovery on NFS4ERR_EXPIRED (Robert Milkowski)  [Orabug: 31304406]  
  - btrfs: Don't submit any btree write bio if the fs has errors (Qu Wenruo)  [Orabug: 31265336]  {CVE-2019-19377} {CVE-2019-19377}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.3.1.el8uek]
changelog:
  - intel_idle: Use ACPI _CST for processor models without C-state tables (Rafael J. Wysocki)  [Orabug: 31332120]  
  - ACPI: processor: Export acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120]  
  - ACPI: processor: Clean up acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120]  
  - ACPI: processor: Introduce acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120]  
  - ACPI: processor: Export function to claim _CST control (Rafael J. Wysocki)  [Orabug: 31332120]  
  - rds: ib: Fix dysfunctional long address resolve timeout (Håkon Bugge)  [Orabug: 31302704]  
  - KVM: x86: Revert "KVM: X86: Fix fpu state crash in kvm guest" (Sean Christopherson)  [Orabug: 31333676]  
  - KVM: x86: Ensure guest's FPU state is loaded when accessing for emulation (Sean Christopherson)  [Orabug: 31333676]  
  - KVM: x86: Handle TIF_NEED_FPU_LOAD in kvm_{load,put}_guest_fpu() (Sean Christopherson)  [Orabug: 31333676]  
  - net: dsa: Do not leave DSA master with NULL netdev_ops (Florian Fainelli)  [Orabug: 30456791]  
  - Revert "dsa: disable module unloading for ARM64" (Allen Pais)  [Orabug: 30456791]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.3.2.el8uek]
changelog:
  - USB: core: Fix free-while-in-use bug in the USB S-Glibrary (Alan Stern)  [Orabug: 31350962]  {CVE-2020-12464} 
  - mt76: fix array overflow on receiving too many fragments for a packet (Felix Fietkau)  [Orabug: 31350952]  {CVE-2020-12465} 
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu)  [Orabug: 31350929]  {CVE-2020-12653} 
  - block, bfq: fix use-after-free in bfq_idle_slice_timer_body (Zhiqiang Liu)  [Orabug: 31350910]  {CVE-2020-12657} 
  - xsk: Add missing check on user supplied headroom size (Magnus Karlsson)  [Orabug: 31350732]  {CVE-2020-12659} 
  - mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Qing Xu)  [Orabug: 31350513]  {CVE-2020-12654} 
  - xen/manage: enable C_A_D to force reboot (Dongli Zhang)  [Orabug: 31387411]  
  - KVM: x86: Fixes posted interrupt check for IRQs delivery modes (Suravee Suthikulpanit)  [Orabug: 31316437]  
  - Revert "Revert "nvme_fc: add module to ops template to allow module references"" (James Smart)  [Orabug: 31377552]  
  - uek-rpm: Move grub boot menu update to posttrans stage. (Somasundaram Krishnasamy)  [Orabug: 31358097]  
  - KVM: SVM: Fix potential memory leak in svm_cpu_init() (Miaohe Lin)  [Orabug: 31350455]  {CVE-2020-12768}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.0.el8uek]
changelog:
  - bnxt_en: Fix accumulation of bp->net_stats_prev. (Vijayendra Suman)  [Orabug: 31390687]  
  - xfs: add agf freeblocks verify in xfs_agf_verify (Zheng Bin)  [Orabug: 31350920]  {CVE-2020-12655} 
  - scsi: sg: add sg_remove_request in sg_write (Wu Bo)  [Orabug: 31350695]  {CVE-2020-12770} 
  - PCI/AER: Enable reporting for ports enumerated after AER driver registration (Thomas Tai)  [Orabug: 31401801]  
  - A/A Bonding: No need to call flush rdmaip_wq in rdmaip_cleanup() (Ka-Cheong Poon)  [Orabug: 31378706]  
  - net/rds: suppress memory allocation failure reports (Manjunath Patil)  [Orabug: 31398437]  
  - locks: reinstate locks_delete_block optimization (Linus Torvalds)  [Orabug: 31356246]  {CVE-2019-19769} 
  - locks: fix a potential use-after-free problem when wakeup a waiter (yangerkun)  [Orabug: 31356246]  {CVE-2019-19769} {CVE-2019-19769}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.1.el8uek]
changelog:
  - uek-rpm: disable CONFIG_IP_PNP (Anjali Kulkarni)  [Orabug: 31454844]  
  - netfilter: ipset: Fix forceadd evaluation path (Jozsef Kadlecsik)  [Orabug: 31104176]  
  - scsi: megaraid_sas: Update driver version to 07.714.04.00-rc1 (Chandrakanth Patil)  [Orabug: 31481642]  
  - scsi: megaraid_sas: TM command refire leads to controller firmware crash (Sumit Saxena)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Replace undefined MFI_BIG_ENDIAN macro with __BIG_ENDIAN_BITFIELD macro (Shivasharan S)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Remove IO buffer hole detection logic (Sumit Saxena)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Limit device queue depth to controller queue depth (Kashyap Desai)  [Orabug: 31481642]  
  - scsi: megaraid: make two symbols static in megaraid_sas_base.c (Jason Yan)  [Orabug: 31481642]  
  - scsi: megaraid: make some symbols static in megaraid_sas_fusion.c (Jason Yan)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31481642]  
  - scsi: megaraid_sas: fix indentation issue (Colin Ian King)  [Orabug: 31481642]  
  - scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Hannes Reinecke)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Update driver version to 07.713.01.00-rc1 (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Limit the number of retries for the IOCTLs causing firmware fault (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Re-Define enum DCMD_RETURN_STATUS (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Do not set HBA Operational if FW is not in operational state (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Do not kill HBA if JBOD Seqence map or RAID map is disabled (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Do not kill host bus adapter, if adapter is already dead (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Update optimal queue depth for SAS and NVMe devices (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Set no_write_same only for Virtual Disk (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Reset adapter if FW is not in READY state after device resume (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Make poll_aen_lock static (YueHaibing)  [Orabug: 31481642]  
  - scsi: megaraid_sas: remove unused variables 'debugBlk','fusion' (zhengbin)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Unique names for MSI-X vectors (Chandrakanth Patil)  [Orabug: 31481642]  
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31352779]  {CVE-2020-0543} 
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543} 
  - x86/speculation/spectre_v2: Exclude Zhaoxin CPUs from SPECTRE_V2 (Tony W Wang-oc)  [Orabug: 31352779]  {CVE-2020-0543} 
  - netlabel: cope with NULL catmap (Paolo Abeni)  [Orabug: 31350489]  {CVE-2020-10711} 
  - xfs: fix freeze hung (Junxiao Bi)  [Orabug: 31430850]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.2.el8uek]
changelog:
  - UEK6 compiler warning for /net/rds/ib.c (Sharath Srinivasan)  [Orabug: 31489529]  
  - UEK6 compiler warning for /net/rds/send.c (Sharath Srinivasan)  [Orabug: 31489529]  
  - Fix up two build warnings in the UEK6 GA tree (Jack Vogel)  [Orabug: 31489333]  
  - drivers/scsi/scsi_scan.c Fix the compiler warning. (Sudhakar Panneerselvam)  [Orabug: 31489322]  
  - x86/retpoline: Fix retpoline unwind (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - x86: Change {JMP,CALL}_NOSPEC argument (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - x86: Simplify retpoline declaration (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - x86/speculation: Change STUFF_RSB to work with objtool (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - x86/unwind: Introduce UNWIND_HINT_EMPTY_ASM (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Add support for intra-function calls (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Remove INSN_STACK (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Make handle_insn_ops() unconditional (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Rework allocating stack_ops on decode (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: UNWIND_HINT_RET_OFFSET should not check registers (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: is_fentry_call() crashes if call has no destination (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Uniquely identify alternative instruction groups (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Remove check preventing branches within alternative (Julien Thierry)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Introduce HINT_RET_OFFSET (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Support multiple stack_op per instruction (Julien Thierry)  [Orabug: 31077463] [Orabug: 31489320]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.3.el8uek]
changelog:
  - NFS: replace cross device check in copy_file_range (Olga Kornievskaia)  [Orabug: 31507615]  
  - rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry)  [Orabug: 31504052]  
  - perf/smmuv3: Allow sharing MMIO registers with the SMMU driver (Jean-Philippe Brucker)  [Orabug: 31422283]  
  - perf/smmuv3: use devm_platform_ioremap_resource() to simplify code (YueHaibing)  [Orabug: 31422283]  
  - ACPI/IORT: Fix PMCG node single ID mapping handling (Tuan Phan)  [Orabug: 31422283]  
  - uek-rpm: Increase CONFIG_NODES_SHIFT from 2 to 3 (Dave Kleikamp)  [Orabug: 31422283]  
  - perf: avoid breaking KABI by reusing enum (Dave Kleikamp)  [Orabug: 31422283]  
  - uek-rpm: update aarch64 configs for Ampere eMAG2 (Dave Kleikamp)  [Orabug: 31422283]  
  - perf: arm_dmc620: Update ACPI ID. (Tuan Phan)  [Orabug: 31422283]  
  - perf: arm_dsu: Support ACPI mode. (Tuan Phan)  [Orabug: 31422283]  
  - perf: arm_dsu: Allow IRQ to be shared among devices. (Tuan Phan)  [Orabug: 31422283]  
  - perf: arm_cmn: improve and make it work on 2P. (Tuan Phan)  [Orabug: 31422283]  
  - Perf: arm-cmn: Allow irq to be shared. (Tuan Phan)  [Orabug: 31422283]  
  - BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work (James Morse)  [Orabug: 31422283]  
  - BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 31422283]  
  - BACKPORT: mm/memory-failure: Add memory_failure_queue_kick() (James Morse)  [Orabug: 31422283]  
  - perf: Add ARM DMC-620 PMU driver. (Tuan Phan)  [Orabug: 31422283]  
  - BACKPORT: WIP: perf/arm-cmn: Add ACPI support (Robin Murphy)  [Orabug: 31422283]  
  - BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 31422283]  
  - BACKPORT: perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 31422283]  
  - net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon)  [Orabug: 30984983]  
  - mm: Fix mremap not considering huge pmd devmap (Fan Yang)  [Orabug: 31452396]  {CVE-2020-10757} {CVE-2020-10757}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.4.el8uek]
changelog:
  - KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (Sean Christopherson)  [Orabug: 31536904]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.5.el8uek]
changelog:
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31631527]  
  - certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31555595]  
  - acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld)  [Orabug: 31642981]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.6.el8uek]
changelog:
  - Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy)  [Orabug: 31358097]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.5.0.el8uek]
changelog:
  - ctf: support ld --ctf-variables, if available (Nick Alcock)  [Orabug: 31535069]  
  - ctf: adjust to upcoming binutils ctf_link_add_ctf API change (Nick Alcock)  [Orabug: 31535069]  
  - bpf: Fix up bpf_skb_adjust_room helper's skb csum setting (Daniel Borkmann)  [Orabug: 31519461]  
  - aarch64: Enable thermal config for RPi4 (Vijay Kumar)  [Orabug: 31518062]  
  - thermal: Add BCM2711 thermal driver (Stefan Wahren)  [Orabug: 31518062]  
  - x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31515046]  
  - x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31515046]  
  - x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31515046]  
  - acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld)  [Orabug: 31493185]  
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351669]  {CVE-2019-19054}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.5.1.el8uek]
changelog:
  - x86/microcode: do not modify sibling mask during late update (Mihai Carabas)  [Orabug: 31605044]  
  - x86/speculation: Prevent rogue cross-process SSBD shutdown (Anthony Steinhauser)  [Orabug: 31557900]  {CVE-2020-10768} 
  - x86/kvm/hyper-v: move VMX controls sanitization out of nested_enable_evmcs() (Vitaly Kuznetsov)  [Orabug: 31553477]  
  - x86/kvm/hyper-v: remove stale evmcs_already_enabled check from nested_enable_evmcs() (Vitaly Kuznetsov)  [Orabug: 31553477]  
  - USB: pci-quirks: Add Raspberry Pi 4 quirk (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - PCI: brcmstb: Wait for Raspberry Pi's firmware when present (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - firmware: raspberrypi: Introduce vl805 init routine (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - soc: bcm2835: Add notify xHCI reset property (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - PCI: brcmstb: Disable L0s component of ASPM if requested (Jim Quinlan)  [Orabug: 31527659]  
  - PCI: brcmstb: Fix window register offset from 4 to 8 (Jim Quinlan)  [Orabug: 31527659]  
  - PCI: brcmstb: Don't clk_put() a managed clock (Jim Quinlan)  [Orabug: 31527659]  
  - PCI: brcmstb: Assert fundamental reset on initialization (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - i2c: brcmstb: Fix handling of optional interrupt (Dave Stevenson)  [Orabug: 31527659]  
  - ARM: dts: bcm283x: Disable dsi0 node (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - pwm: bcm2835: Dynamically allocate base (Florian Fainelli)  [Orabug: 31527659]  
  - ARM: bcm2835_defconfig: Enable fixed-regulator (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - ARM: dts: bcm2711: Add vmmc regulator in emmc2 (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - ARM: dts: bcm2711: Update expgpio's GPIO labels (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - i2c: drivers: Use generic definitions for bus frequencies (Andy Shevchenko)  [Orabug: 31527659]  
  - i2c: core: Provide generic definitions for bus frequencies (Andy Shevchenko)  [Orabug: 31527659]  
  - mmc: sdhci: iproc: Add custom set_power() callback for bcm2711 (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - mmc: sdhci: am654: Use sdhci_set_power_and_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - mmc: sdhci: at91: Use sdhci_set_power_and_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - mmc: sdhci: arasan: Use sdhci_set_power_and_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - mmc: sdhci: Introduce sdhci_set_power_and_bus_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (Lukas Wunner)  [Orabug: 31527659]  
  - usb: xhci: Enable LPM for VIA LABS VL805 (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - arm64: bcm2835: Drop select of nonexistent HAVE_ARM_ARCH_TIMER (Geert Uytterhoeven)  [Orabug: 31527659]  
  - ARM: dts: bcm2711: Move emmc2 into its own bus (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - ARM: dts: bcm2711-rpi-4-b: Add SoC GPIO labels (Stefan Wahren)  [Orabug: 31527659]  
  - ARM: bcm2835_defconfig: add support for Raspberry Pi4 (Marek Szyprowski)  [Orabug: 31527659]  
  - ARM: bcm2835_defconfig: Explicitly restore CONFIG_DEBUG_FS (Stefan Wahren)  [Orabug: 31527659]  
  - ARM: dts: bcm2711: Add pcie0 alias (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - ARM: dts: bcm283x: Add missing properties to the PWR LED (Stefan Wahren)  [Orabug: 31527659]  
  - PCI: brcmstb: Fix build on 32bit ARM platforms with older compilers (Marek Szyprowski)  [Orabug: 31527659]  
  - net: bcmgenet: Clear ID_MODE_DIS in EXT_RGMII_OOB_CTRL when not needed (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - net: bcmgenet: reduce severity of missing clock warnings (Jeremy Linton)  [Orabug: 31527659]  
  - pinctrl: bcm2835: Add support for all GPIOs on BCM2711 (Stefan Wahren)  [Orabug: 31527659]  
  - pinctrl: bcm2835: Refactor platform data (Stefan Wahren)  [Orabug: 31527659]  
  - pinctrl: bcm2835: Drop unused define (Stefan Wahren)  [Orabug: 31527659]  
  - dma-contiguous: CMA: give precedence to cmdline (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - dt-bindings: brcm,avs-ro-thermal: Fix binding check issues (Stefan Wahren)  [Orabug: 31527659]  
  - dt-bindings: Add Broadcom AVS RO thermal (Stefan Wahren)  [Orabug: 31527659]  
  - serial: 8250_bcm2835aux: Document struct bcm2835aux_data (Lukas Wunner)  [Orabug: 31527659]  
  - serial: 8250_bcm2835aux: Use generic remapping code (Lukas Wunner)  [Orabug: 31527659]  
  - serial: 8250_bcm2835aux: Allocate uart_8250_port on stack (Lukas Wunner)  [Orabug: 31527659]  
  - serial: 8250_bcm2835aux: Suppress register_port error on -EPROBE_DEFER (Lukas Wunner)  [Orabug: 31527659]  
  - serial: 8250_bcm2835aux: Suppress clk_get error on -EPROBE_DEFER (Phil Elwell)  [Orabug: 31527659]  
  - spi: bcm2835: Raise maximum number of slaves to 4 (Lukas Wunner)  [Orabug: 31527659]  
  - Bluetooth: hci_bcm: Drive RTS only for BCM43438 (Stefan Wahren)  [Orabug: 31527659]  
  - Bluetooth: hci_bcm: Add device-tree compatible for BCM4329 (Dmitry Osipenko)  [Orabug: 31527659]  
  - iommu/dma: Rationalise types for DMA masks (Robin Murphy)  [Orabug: 31527659]  
  - hwrng: iproc-rng200 - Add support for BCM2711 (Stefan Wahren)  [Orabug: 31527659]  
  - dt-bindings: rng: add BCM2711 RNG compatible (Stefan Wahren)  [Orabug: 31527659]  
  - Bluetooth: hci_bcm: Support pcm params in dts (Abhishek Pandit-Subedi)  [Orabug: 31527659]  
  - Bluetooth: btbcm: Support pcm configuration (Abhishek Pandit-Subedi)  [Orabug: 31527659]  
  - Bluetooth: hci_bcm: Disallow set_baudrate for BCM4354 (Abhishek Pandit-Subedi)  [Orabug: 31527659]  
  - Bluetooth: btbcm: Add entry for BCM4335A0 UART bluetooth (Mohammad Rasim)  [Orabug: 31527659]  
  - Bluetooth: hci_bcm: Add compatible string for BCM43540 (Abhishek Pandit-Subedi)  [Orabug: 31527659]  
  - iommu/dma-iommu: Use the dev->coherent_dma_mask (Tom Murphy)  [Orabug: 31527659]  
  - KEYS: Increase system_extra_certificate size to 8192 bytes (Stephen Brennan)  [Orabug: 31512725]  
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888} 
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888} {CVE-2020-12888} 
  - vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888} 
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888} 
  - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Sean Christopherson)  [Orabug: 31439668]  {CVE-2020-12888} 
  - scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31595670]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.5.2.el8uek]
changelog:
  - drm/i915/gt: Correct mistake in cherry-pick (Jack Vogel)  [Orabug: 31211659]  
  - efi/x86: Add TPM related EFI tables to unencrypted mapping checks (Tom Lendacky)  [Orabug: 31627285]  
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31480603]  
  - ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31480603]  
  - ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31480603]  
  - ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31480603]  
  - ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31480603]  
  - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (Dan Carpenter)  [Orabug: 31610239]  
  - scsi: qla2xxx: Keep initiator ports after RSCN (Roman Bolshakov)  [Orabug: 31610239]  
  - scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (Daniel Wagner)  [Orabug: 31610239]  
  - scsi: qla2xxx: Remove return value from qla_nvme_ls() (Daniel Wagner)  [Orabug: 31610239]  
  - scsi: qla2xxx: Remove an unused function (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix endianness annotations in source files (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix endianness annotations in header files (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use make_handle() instead of open-coding it (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix the code that reads from mailbox registers (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use register names instead of register offsets (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add more BUILD_BUG_ON() statements (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Simplify the functions for dumping firmware (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix spelling of a variable name (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Make qlafx00_process_aen() return void (Jason Yan)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use true, false for ha->fw_dumped (Jason Yan)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use true, false for need_mpi_reset (Jason Yan)  [Orabug: 31610239]  
  - scsi: qla2xxx: Make qla_set_ini_mode() return void (Jason Yan)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix failure message in qlt_disable_vha() (Viacheslav Dubeyko)  [Orabug: 31610239]  
  - scsi: qla2xxx: make 1-bit bit-fields unsigned int (Colin Ian King)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix MPI failure AEN (8200) handling (Arun Easi)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Split qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix regression warnings (Nilesh Javali)  [Orabug: 31610239]  
  - scsi: qla2xxx: Remove non functional code (Daniel Wagner)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (Arun Easi)  [Orabug: 31610239]  
  - scsi: qla2xxx: add ring buffer for tracing debug logs (Rajan Shanmugavelu)  [Orabug: 31610239]  
  - scsi: qla2xxx: Update driver version to 10.01.00.25-k (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Set Nport ID for N2N (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Handle NVME status iocb correctly (Arun Easi)  [Orabug: 31610239]  
  - scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Serialize fc_port alloc in N2N (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix NPIV instantiation after FW dump (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix RDP respond data format (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Force semaphore on flash validation failure (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: add more FW debug information (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Update BPM enablement semantics. (Andrew Vasquez)  [Orabug: 31610239]  
  - scsi: qla2xxx: fix FW resource count values (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (Andrew Vasquez)  [Orabug: 31610239]  
  - scsi: qla2xxx: Return appropriate failure through BSG Interface (Michael Hernandez)  [Orabug: 31610239]  
  - scsi: qla2xxx: Improved secure flash support messages (Michael Hernandez)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (Giridhar Malavali)  [Orabug: 31610239]  
  - scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options. (Giridhar Malavali)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add 16.0GT for PCI String (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Simplify the code for aborting SCSI commands (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix sparse warning reported by kbuild bot (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Update driver version to 10.01.00.24-k (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add fixes for mailbox command (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix control flags for login/logout IOCB (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Save rscn_gen for new fcport (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use correct ISP28xx active FW region (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Correction to selection of loopback/echo test (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix RDP response size (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Handle cases for limiting RDP response payload length (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Show correct port speed capabilities for RDP command (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Display message for FCE enabled (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add vendor extended FDMI commands (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add vendor extended RDP additions and amendments (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add endianizer macro calls to fc host stats (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add beacon LED config sysfs interface (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix a NULL pointer dereference in an error path (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix warning after FC target reset (Viacheslav Dubeyko)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix issue with adapter's stopping state (Viacheslav Dubeyko)  [Orabug: 31610239]  
  - scsi: qla2xxx: Do not log message when reading port speed via sysfs (Ewan D. Milne)  [Orabug: 31610239]  
  - scsi: qla2xxx: Delete all sessions before unregister local nvme port (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: check UNLOADING before posting async work (Martin Wilck)  [Orabug: 31610239]  
  - scsi: qla2xxx: set UNLOADING before waiting for session deletion (Martin Wilck)  [Orabug: 31610239]  
  - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (Tony Luck)  [Orabug: 31601130]  
  - uek-rpm: aarch64: Streamline building 4K pages size kernel (Dave Kleikamp)  [Orabug: 31500678]  
  - kernel/relay.c: handle alloc_percpu returning NULL in relay_open (Daniel Axtens)  [Orabug: 31183397]  {CVE-2019-19462}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.5.3.el8uek]
changelog:
  - misc: pvpanic: add crash loaded event (zhenwei pi)  [Orabug: 31677096]  
  - misc: pvpanic: move bit definition to uapi header file (zhenwei pi)  [Orabug: 31677096]  
  - RDMA/netlink: Do not always generate an ACK for some netlink operations (Håkon Bugge)  [Orabug: 31666971]  
  - bnxt_en: Fix statistics counters issue during ifdown with older firmware. (Michael Chan)  [Orabug: 31660919]  
  - bnxt_en: Do not enable legacy TX push on older firmware. (Michael Chan)  [Orabug: 31660919]  
  - bnxt_en: Store the running firmware version code. (Michael Chan)  [Orabug: 31660919]  
  - uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy)  [Orabug: 31645596]  
  - PCI: pciehp: Fix indefinite wait on sysfs requests (Lukas Wunner)  [Orabug: 31580249]  
  - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (Anthony Steinhauser)  [Orabug: 31557802]  {CVE-2020-10767} 
  - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)  [Orabug: 31350635]  {CVE-2020-10732} 
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 31648239]  
  - uek-rpm: disable CONFIG_CRYPTO_DEV_CAVIUM_ZIP (Dave Kleikamp)  [Orabug: 31667368]  
  - vfio-pci: protect remap_pfn_range() from simultaneous calls (Ankur Arora)  [Orabug: 31663628]  {CVE-2020-12888} {CVE-2020-12888} 
  - uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling)  [Orabug: 31636283]  
  - Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy)  [Orabug: 31689621]  
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31689703]  
  - certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31689566]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.6.0.el8uek]
changelog:
  - RDMA/mlx5: Set MR cache limit for both PF and VF (Nikhil Krishna)  [Orabug: 31358080]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648138]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648138]  
  - RDMA/cm: Spurious WARNING triggered in cm_destroy_id() (Ka-Cheong Poon)  [Orabug: 31483278]  
  - RDMA/cm: Make sure the cm_id is in the IB_CM_IDLE state in destroy (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Allow ib_send_cm_sidr_rep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Allow ib_send_cm_rej() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Allow ib_send_cm_drep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Allow ib_send_cm_dreq() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Add some lockdep assertions for cm_id_priv->lock (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Make the destroy_id flow more robust (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Remove a race freeing timewait_info (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Use refcount_t type for refcount variable (Danit Goldberg)  [Orabug: 31483278]  
  - bnxt_en: allow firmware to disable VLAN offloads (Michael Chan)   
  - bnxt_en: clean up VLAN feature bit handling (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features(). (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Implement ethtool -X to set indirection table. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Return correct RSS indirection table entries to ethtool -x. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Fill HW RSS table from the RSS logical indirection table. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Add helper function to return the number of RSS contexts. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Add logical RSS indirection table structure. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Fix up bnxt_get_rxfh_indir_size(). (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Set up the chip specific RSS table size. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: fix firmware message length endianness (Michael Chan)  [Orabug: 31663185]  
  - net: bnxt: Remove Comparison to bool in bnxt_ethtool.c (Jason Yan)  [Orabug: 31663185]  
  - bnxt_en: show only relevant ethtool stats for a TX or RX ring (Rajesh Ravi)  [Orabug: 31663185]  
  - bnxt_en: Split HW ring statistics strings into RX and TX parts. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Refactor the software ring counters. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Do not include ETH_FCS_LEN in the max packet length sent to fw. (Vasundhara Volam)  [Orabug: 31663185]  
  - bnxt_en: Improve TQM ring context memory sizing formulas. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Allocate TQM ring context memory according to fw specification. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Update firmware spec. to 1.10.1.33. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Return error when allocating zero size context memory. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Reset rings if ring reservation fails during open() (Vasundhara Volam)  [Orabug: 31663185]  
  - bnxt_en: Return error if bnxt_alloc_ctx_mem() fails. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Process the NQ under NAPI continuous polling. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Simplify __bnxt_poll_cqs_done(). (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Handle all NQ notifications in bnxt_poll_p5(). (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Disable workaround for lost interrupts on 575XX B0 and newer chips. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Periodically check and remove aged-out ntuple filters (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Do not accept fragments for aRFS flow steering. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Remove the setting of dev_port. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Improve link up detection. (Michael Chan)  [Orabug: 31663185]  
  - RDMA/nldev: Provide MR statistics (Erez Alfasi)  [Orabug: 31079901]  
  - RDMA/mlx5: Return ODP type per MR (Erez Alfasi)  [Orabug: 31079901]  
  - RDMA/nldev: Allow different fill function per resource (Erez Alfasi)  [Orabug: 31079901]  
  - IB/mlx5: Introduce ODP diagnostic counters (Erez Alfasi)  [Orabug: 31079901]  
  - x86/reboot: Move up iommu_shutdown() before stop_other_cpus() (Saeed Mirzamohammadi)  [Orabug: 31542630]  
  - bcache: fix potential deadlock problem in btree_gc_coalesce (Zhiqiang Liu)  [Orabug: 31350643]  {CVE-2020-12771} 
  - selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore)  [Orabug: 31439365]  {CVE-2020-10751} 
  - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" (Wade Mealing)  [Orabug: 31510722]  {CVE-2020-10781} 
  - Enable config option CONFIG_NFSD_V4_2_INTER_SSC (Dai Ngo)  [Orabug: 31535947]  
  - NFSD: Fix NFS server build errors (Chuck Lever)  [Orabug: 31535947]  
  - nfsd4: fix double free in nfsd4_do_async_copy() (Dan Carpenter)  [Orabug: 31535947]  
  - NFSD fixing possible null pointer derefering in copy offload (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD fix nfserro errno mismatch (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD: fix seqid in copy stateid (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSv4.2 fix memory leak in nfs42_ssc_open (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSv4: Make _nfs42_proc_copy_notify() static (YueHaibing)  [Orabug: 31535947]  
  - nfsv4: Move NFSPROC4_CLNT_COPY_NOTIFY to end of list (Trond Myklebust)  [Orabug: 31535947]  
  - NFSD: allow inter server COPY to have a STALE source server fh (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD add nfs4 inter ssc to nfsd4_copy (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD check stateids against copy stateids (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD fix mismatching type in nfsd4_set_netaddr (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD fill-in netloc4 structure (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD add COPY_NOTIFY operation (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD add ca_source_server<> to COPY (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD COPY_NOTIFY xdr (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSv4.2 fix kfree in __nfs42_copy_file_range (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS based on file size issue sync copy or fallback to generic copy offload (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS: handle source server reboot (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS: skip recovery of copy open on dest server (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS: inter ssc open (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS: add ca_source_server<> to COPY (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS: add COPY_NOTIFY operation (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS NFSD: defining nl4_servers structure needed by both (Olga Kornievskaia)  [Orabug: 31535947]  
  - kvm: svm: Introduce GA Log tracepoint for AVIC (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - KVM: SVM: Inhibit APIC virtualization for X2APIC guest (Oliver Upton)  [Orabug: 31631367]  
  - KVM: SVM: allocate AVIC data structures based on kvm_amd module parameter (Paolo Bonzini)  [Orabug: 31631367]  
  - kvm: x86: svm: Fix NULL pointer dereference when AVIC not enabled (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - KVM: SVM: allow AVIC without split irqchip (Paolo Bonzini)  [Orabug: 31631367]  
  - kvm: ioapic: Lazy update IOAPIC EOI (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: ioapic: Refactor kvm_ioapic_update_eoi() (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: i8254: Deactivate APICv when using in-kernel PIT re-injection mode. (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - svm: Temporarily deactivate AVIC during ExtINT handling (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - svm: Deactivate AVIC when launching guest with nested SVM support (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: hyperv: Use APICv update request interface (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - svm: Add support for dynamic APICv (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: Introduce x86 ops hook for pre-update APICv (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: Introduce APICv x86 ops for checking APIC inhibit reasons (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - KVM: svm: avic: Add support for dynamic setup/teardown of virtual APIC backing page (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: svm: Add support to (de)activate posted interrupts (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: Add APICv (de)activate request trace points (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: Add support for dynamic APICv activation (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - KVM: x86: remove get_enable_apicv from kvm_x86_ops (Paolo Bonzini)  [Orabug: 31631367]  
  - kvm: x86: Introduce APICv inhibit reason bits (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: lapic: Introduce APICv update helper function (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - KVM: X86: Drop KVM_APIC_SHORT_MASK and KVM_APIC_DEST_MASK (Peter Xu)  [Orabug: 31631367]  
  - KVM: SVM: Remove check if APICv enabled in SVM update_cr8_intercept() handler (Liran Alon)  [Orabug: 31631367]  
  - kvm: x86: Modify kvm_x86_ops.get_enable_apicv() to use struct kvm parameter (Suthikulpanit, Suravee)  [Orabug: 31631367]  
  - kvm: Increase KVM_USER_MEM_SLOTS for dense memory hotplug (Eric DeVolder)  [Orabug: 31694365]  
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698078]  {CVE-2020-16166} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705117]  {CVE-2020-14331} {CVE-2020-14331} 
  - net/rds: Incorrect WARN_ON() (Ka-Cheong Poon)  [Orabug: 31718014]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.6.1.el8uek]
changelog:
  - nfsd: apply umask on fs without ACL support (J. Bruce Fields)  [Orabug: 31779884]  {CVE-2020-24394} 
  - arm64/elf: Disable automatic READ_IMPLIES_EXEC for 64-bit address spaces (Kees Cook)  [Orabug: 31776626]  
  - arm32/64/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776626]  
  - arm32/64/elf: Add tables to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776626]  
  - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit (Kees Cook)  [Orabug: 31776626]  
  - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776626]  
  - x86/elf: Add table to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776626]  
  - x86/mm: use max memory block size on bare metal (Daniel Jordan)  [Orabug: 31771277]  
  - drivers/base/memory.c: cache memory blocks in xarray to accelerate lookup (Scott Cheloha)  [Orabug: 31771277]  
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755752]  
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688620]  
  - arm64/dts: Serial console fix for RPi4 (Vijay Kumar)  [Orabug: 31562971]  
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31682033]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31682033]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.6.2.el8uek]
changelog:
  - Revert "aarch64/BM: config failed, hub doesn't have any ports" (Thomas Tai)  [Orabug: 31838351] [Orabug: 31844671]  
  - kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini)  [Orabug: 31839185] [Orabug: 31844556]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.7.0.el8uek]
changelog:
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31543029]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31543029]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31543029]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Divya Indi)  [Orabug: 31543029]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31543029]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31543029]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31543029]  
  - RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784656]  
  - RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784889]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783146]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.7.1.el8uek]
changelog:
  - IB/mlx5: Expose RoCE accelerator counters (Avihai Horon)  [Orabug: 31621895]  
  - net/mlx5: Add RoCE accelerator counters (Leon Romanovsky)  [Orabug: 31621895]  
  - cgroup: Fix sock_cgroup_data on big-endian. (Cong Wang)  [Orabug: 31779795]  {CVE-2020-14356} 
  - cgroup: fix cgroup_sk_alloc() for sk_clone_lock() (Cong Wang)  [Orabug: 31779795]  {CVE-2020-14356} 
  - Revert "aarch64/BM: config failed, hub doesn't have any ports" (Thomas Tai)  [Orabug: 31838351]  
  - kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini)  [Orabug: 31839185]  
  - iavf: use generic power management (Vaibhav Gupta)  [Orabug: 31700015]  
  - iavf: Fix updating statistics (Tony Nguyen)  [Orabug: 31700015]  
  - iavf: fix error return code in iavf_init_get_resources() (Wei Yongjun)  [Orabug: 31700015]  
  - iavf: increase reset complete wait time (Paul Greenwalt)  [Orabug: 31700015]  
  - iavf: Fix reporting 2.5 Gb and 5Gb speeds (Brett Creeley)  [Orabug: 31700015]  
  - iavf: use appropriate enum for comparison (Aleksandr Loktionov)  [Orabug: 31700015]  
  - iavf: Enable support for up to 16 queues (Mitch Williams)  [Orabug: 31700015]  
  - iavf: fix speed reporting over virtchnl (Brett Creeley)  [Orabug: 31700015]  
  - iavf: remove current MAC address filter on VF reset (Stefan Assmann)  [Orabug: 31700015]  
  - i40e: Fix crash during removing i40e driver (Grzegorz Szczurek)  [Orabug: 31700015]  
  - i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Przemyslaw Patynowski)  [Orabug: 31700015]  
  - i40e: introduce new dump desc XDP command (Ciara Loftus)  [Orabug: 31700015]  
  - i40e: add XDP ring statistics to dump VSI debug output (Ciara Loftus)  [Orabug: 31700015]  
  - i40e: add XDP ring statistics to VSI stats (Ciara Loftus)  [Orabug: 31700015]  
  - i40e: move check of full Tx ring to outside of send loop (Magnus Karlsson)  [Orabug: 31700015]  
  - i40e: eliminate division in napi_poll data path (Magnus Karlsson)  [Orabug: 31700015]  
  - i40e: optimize AF_XDP Tx completion path (Magnus Karlsson)  [Orabug: 31700015]  
  - i40e: Add support for a new feature Total Port Shutdown (Arkadiusz Kubalewski)  [Orabug: 31700015]  
  - i40e: Remove scheduling while atomic possibility (Aleksandr Loktionov)  [Orabug: 31700015]  
  - i40e: Add support for 5Gbps cards (Aleksandr Loktionov)  [Orabug: 31700015]  
  - i40e: Add a check to see if MFS is set (Todd Fujinaka)  [Orabug: 31700015]  
  - i40e: detect and log info about pre-recovery mode (Piotr Kwapulinski)  [Orabug: 31700015]  
  - i40e: make PF wait reset loop reliable (Piotr Kwapulinski)  [Orabug: 31700015]  
  - i40e: remove unused defines (Jesse Brandeburg)  [Orabug: 31700015]  
  - i40e: Move client header location (Shiraz Saleem)  [Orabug: 31700015]  
  - i40e: fix crash when Rx descriptor count is changed (Björn Töpel)  [Orabug: 31700015]  
  - i40e: Make i40e_shutdown_adminq() return void (Jason Yan)  [Orabug: 31700015]  
  - i40e: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31700015]  
  - i40e: Separate kernel allocated rx_bi rings from AF_XDP rings (Björn Töpel)  [Orabug: 31700015]  
  - i40e: Refactor rx_bi accesses (Björn Töpel)  [Orabug: 31700015]  
  - i40e: Remove unneeded conversion to bool (Jason Yan)  [Orabug: 31700015]  
  - i40e: fix spelling mistake "to" -> "too" (Colin Ian King)  [Orabug: 31700015]  
  - i40e: Set PHY Access flag on X722 (Adam Ludkiewicz)  [Orabug: 31700015]  
  - i40e: implement VF stats NDO (Jesse Brandeburg)  [Orabug: 31700015]  
  - i40e: enable X710 support (Alice Michael)  [Orabug: 31700015]  
  - i40e: Add UDP segmentation offload support (Josh Hunt)  [Orabug: 31700015]  
  - i40e: Refactoring VF MAC filters counting to make more reliable (Aleksandr Loktionov)  [Orabug: 31700015]  
  - i40e: Fix LED blinking flow for X710T*L devices (Damian Milosek)  [Orabug: 31700015]  
  - i40e: allow ethtool to report SW and FW versions in recovery mode (Piotr Kwapulinski)  [Orabug: 31700015]  
  - i40e: Extend PHY access with page change flag (Piotr Azarewicz)  [Orabug: 31700015]  
  - i40e: Extract detection of HW flags into a function (Piotr Azarewicz)  [Orabug: 31700015]  
  - i40e: Fix for persistent lldp support (Sylwia Wnuczko)  [Orabug: 31700015]  
  - i40e: protect ring accesses with READ- and WRITE_ONCE (Ciara Loftus)  [Orabug: 31700015]  
  - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Brett Creeley)  [Orabug: 31700015]  
  - i40e: Relax i40e_xsk_wakeup's return value when PF is busy (Maciej Fijalkowski)  [Orabug: 31700015]  
  - i40e: Fix virtchnl_queue_select bitmap validation (Brett Creeley)  [Orabug: 31700015]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.7.2.el8uek]
changelog:
  - net/packet: fix overflow in tpacket_rcv (Or Cohen)  [Orabug: 31866487]  {CVE-2020-14386} {CVE-2020-14386} 
  - block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava)  [Orabug: 31850341]  
  - block: Return blk_status_t instead of errno codes (Ritika Srivastava)  [Orabug: 31850341]  
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)  [Orabug: 31849530]  
  - uek-rpm: ol8: config-aarch64: add *_MEMORY_HOTPLUG (Mihai Carabas)  [Orabug: 31848696]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.7.3.el8uek]
changelog:
  - xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895365]  {CVE-2020-14385} 
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)  [Orabug: 31895327]  {CVE-2020-14314} 
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884234]  {CVE-2020-25285} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884154]  {CVE-2020-25284} 
  - nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)  [Orabug: 31872895]  {CVE-2020-25212} 
  - libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (Jane Chu)  [Orabug: 31861296]  
  - libnvdimm/security: the 'security' attr never (Jane Chu)  [Orabug: 31861296]  
  - libnvdimm/security: fix a typo (Jane Chu)  [Orabug: 31861296]  
  - mmc: sdhci: Silence MMC warnings (Maxime Ripard)  [Orabug: 31746382]  
  - bcm2835-dma: Add support for per-channel flags (Phil Elwell)  [Orabug: 31746382]  
  - mmc: sdhci-iproc: Fix vmmc regulators on iProc (Phil Elwell)  [Orabug: 31746382]  
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31722763]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31722763]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31722763]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [5.4.17-2011.7.4.el8uek]
changelog:
  - iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (Suravee Suthikulpanit)  [Orabug: 31931369]  
  - iommu/amd: Fix potential @entry null deref (Joao Martins)  [Orabug: 31931369]  
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931369]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2033.el8uek]
changelog:
  - iavf: use generic power management (Vaibhav Gupta)  [Orabug: 31700007]  
  - iavf: Fix updating statistics (Tony Nguyen)  [Orabug: 31700007]  
  - iavf: fix error return code in iavf_init_get_resources() (Wei Yongjun)  [Orabug: 31700007]  
  - iavf: increase reset complete wait time (Paul Greenwalt)  [Orabug: 31700007]  
  - iavf: Fix reporting 2.5 Gb and 5Gb speeds (Brett Creeley)  [Orabug: 31700007]  
  - iavf: use appropriate enum for comparison (Aleksandr Loktionov)  [Orabug: 31700007]  
  - iavf: Enable support for up to 16 queues (Mitch Williams)  [Orabug: 31700007]  
  - i40e: introduce new dump desc XDP command (Ciara Loftus)  [Orabug: 31700007]  
  - i40e: add XDP ring statistics to dump VSI debug output (Ciara Loftus)  [Orabug: 31700007]  
  - i40e: add XDP ring statistics to VSI stats (Ciara Loftus)  [Orabug: 31700007]  
  - i40e: move check of full Tx ring to outside of send loop (Magnus Karlsson)  [Orabug: 31700007]  
  - i40e: eliminate division in napi_poll data path (Magnus Karlsson)  [Orabug: 31700007]  
  - i40e: optimize AF_XDP Tx completion path (Magnus Karlsson)  [Orabug: 31700007]  
  - i40e: Add support for a new feature Total Port Shutdown (Arkadiusz Kubalewski)  [Orabug: 31700007]  
  - i40e: Remove scheduling while atomic possibility (Aleksandr Loktionov)  [Orabug: 31700007]  
  - i40e: Add support for 5Gbps cards (Aleksandr Loktionov)  [Orabug: 31700007]  
  - i40e: Add a check to see if MFS is set (Todd Fujinaka)  [Orabug: 31700007]  
  - i40e: detect and log info about pre-recovery mode (Piotr Kwapulinski)  [Orabug: 31700007]  
  - i40e: make PF wait reset loop reliable (Piotr Kwapulinski)  [Orabug: 31700007]  
  - i40e: remove unused defines (Jesse Brandeburg)  [Orabug: 31700007]  
  - i40e: Move client header location (Shiraz Saleem)  [Orabug: 31700007]  
  - i40e: fix crash when Rx descriptor count is changed (Björn Töpel)  [Orabug: 31700007]  
  - i40e: Make i40e_shutdown_adminq() return void (Jason Yan)  [Orabug: 31700007]  
  - i40e: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31700007]  
  - i40e: Separate kernel allocated rx_bi rings from AF_XDP rings (Björn Töpel)  [Orabug: 31700007]  
  - i40e: Refactor rx_bi accesses (Björn Töpel)  [Orabug: 31700007]  
  - i40e: Remove unneeded conversion to bool (Jason Yan)  [Orabug: 31700007]  
  - i40e: fix spelling mistake "to" -> "too" (Colin Ian King)  [Orabug: 31700007]  
  - i40e: Set PHY Access flag on X722 (Adam Ludkiewicz)  [Orabug: 31700007]  
  - i40e: implement VF stats NDO (Jesse Brandeburg)  [Orabug: 31700007]  
  - i40e: enable X710 support (Alice Michael)  [Orabug: 31700007]  
  - i40e: Add UDP segmentation offload support (Josh Hunt)  [Orabug: 31700007]  
  - i40e: Refactoring VF MAC filters counting to make more reliable (Aleksandr Loktionov)  [Orabug: 31700007]  
  - i40e: Fix LED blinking flow for X710T*L devices (Damian Milosek)  [Orabug: 31700007]  
  - i40e: allow ethtool to report SW and FW versions in recovery mode (Piotr Kwapulinski)  [Orabug: 31700007]  
  - i40e: Extend PHY access with page change flag (Piotr Azarewicz)  [Orabug: 31700007]  
  - i40e: Extract detection of HW flags into a function (Piotr Azarewicz)  [Orabug: 31700007]  
  - i40e: Fix for persistent lldp support (Sylwia Wnuczko)  [Orabug: 31700007]  
  - Revert "net/mlx4_core: Add masking for a few queries on HCA caps" (Sharath Srinivasan)  [Orabug: 31716965]  
  - net/rds: Incorrect WARN_ON() (Ka-Cheong Poon)  [Orabug: 31718013]  
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698077]  {CVE-2020-16166} 
  - perf script report: Fix SEGFAULT when using DWARF mode (Andreas Gerstmayr)  [Orabug: 31687958]  
  - perf vendor events amd: Update Zen1 events to V2 (Vijay Thakkar)  [Orabug: 31687958]  
  - perf vendor events amd: Add Zen2 events (Vijay Thakkar)  [Orabug: 31687958]  
  - perf vendor events amd: Restrict model detection for zen1 based processors (Vijay Thakkar)  [Orabug: 31687958]  
  - perf/amd/uncore: Add support for Family 19h L3 PMU (Kim Phillips)  [Orabug: 31687958]  
  - perf/amd/uncore: Make L3 thread mask code more readable (Kim Phillips)  [Orabug: 31687958]  
  - perf/amd/uncore: Prepare L3 thread mask code for Family 19h (Kim Phillips)  [Orabug: 31687958]  
  - perf symbols: Don't try to find a vmlinux file when looking for kernel modules (Arnaldo Carvalho de Melo)  [Orabug: 31687958]  
  - perf symbols: Convert symbol__is_idle() to use strlist (Kim Phillips)  [Orabug: 31687958]  
  - perf symbols: Update the list of kernel idle symbols (Kim Phillips)  [Orabug: 31687958]  
  - perf/x86/amd: Remove set but not used variable 'active' (Zheng Yongjun)  [Orabug: 31687958]  
  - hwmon: (k10temp) Swap Tdie and Tctl on Family 17h CPUs (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Display up to eight sets of CCD temperatures (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Add debugfs support (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Don't show temperature limits on Ryzen (Zen) CPUs (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Show core and SoC current and voltages on Ryzen CPUs (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Report temperatures per CPU die (Guenter Roeck)  [Orabug: 31687958]  
  - hmon: (k10temp) Convert to use devm_hwmon_device_register_with_info (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Use bitops (Guenter Roeck)  [Orabug: 31687958]  
  - cpupower: mperf_monitor: Update cpupower to use the RDPRU instruction (Janakarajan Natarajan)  [Orabug: 31687958]  
  - cpupower: mperf_monitor: Introduce per_cpu_schedule flag (Janakarajan Natarajan)  [Orabug: 31687958]  
  - cpupower: Move needs_root variable into a sub-struct (Janakarajan Natarajan)  [Orabug: 31687958]  
  - cpupower: ToDo: Update ToDo with ideas for per_cpu_schedule handling (Janakarajan Natarajan)  [Orabug: 31687958]  
  - uek-rpm: Enable AMD TEE driver (Dave Kleikamp)  [Orabug: 31687958]  
  - crypto: ccp - use file mode for sev ioctl permissions (Connor Kuehl)  [Orabug: 31687958]  
  - crypto: ccp - Cleanup sp_dev_master in psp_dev_destroy() (John Allen)  [Orabug: 31687958]  
  - crypto: ccp - Cleanup misc_dev on sev_exit() (John Allen)  [Orabug: 31687958]  
  - tee: amdtee: check TEE status during driver initialization (Rijo Thomas)  [Orabug: 31687958]  
  - Documentation: tee: add AMD-TEE driver details (Rijo Thomas)  [Orabug: 31687958]  
  - tee: add AMD-TEE driver (Rijo Thomas)  [Orabug: 31687958]  
  - tee: allow compilation of tee subsystem for AMD CPUs (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - provide in-kernel API to submit TEE commands (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - add TEE support for Raven Ridge (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - check whether PSP supports SEV or TEE before initialization (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - move SEV vdata to a dedicated data structure (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - create a generic psp-dev file (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - rename psp-dev files to sev-dev (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - add SEV command privilege separation (Brijesh Singh)  [Orabug: 31687958]  
  - crypto: ccp - switch from ablkcipher to skcipher (Ard Biesheuvel)  [Orabug: 31687958]  
  - crypto: ccp - Retry SEV INIT command in case of integrity check failure. (Ashish Kalra)  [Orabug: 31687958]  
  - crypto: ccp - Change a message to reflect status instead of failure (Hook, Gary)  [Orabug: 31687958]  
  - crypto: ccp - Verify access to device registers before initializing (Hook, Gary)  [Orabug: 31687958]  
  - iommu/amd: Remove the unnecessary assignment (Adrian Huang)  [Orabug: 31687958]  
  - iommu/amd: Replace two consecutive readl calls with one readq (Adrian Huang)  [Orabug: 31687958]  
  - iommu/amd: Remove local variables (Adrian Huang)  [Orabug: 31687958]  
  - iommu/amd: Fix typos for PPR macros (Adrian Huang)  [Orabug: 31687958]  
  - iommu/amd: Remove unused variable (Joerg Roedel)  [Orabug: 31687958]  
  - iommu/amd: Treat per-device exclusion ranges as r/w unity-mapped regions (Adrian Huang)  [Orabug: 31687958]  
  - iommu/amd: Do not re-fetch iommu->cmd_buf_tail (Denys Vlasenko)  [Orabug: 31687958]  
  - iommu/amd: Switch to use acpi_dev_hid_uid_match() (Andy Shevchenko)  [Orabug: 31687958]  
  - iommu/amd: Simpify decoding logic for INVALID_PPR_REQUEST event (Suthikulpanit, Suravee)  [Orabug: 31687958]  
  - iommu/amd: Remove unnecessary locking from AMD iommu driver (Tom Murphy)  [Orabug: 31687958]  
  - KVM: SVM: Issue WBINVD after deactivating an SEV guest (Tom Lendacky)  [Orabug: 31687958]  
  - KVM: SVM: document KVM_MEM_ENCRYPT_OP, let userspace detect if SEV is available (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: nSVM: check for EFER.SVME=1 before entering guest (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: nSVM: Remove an obsolete comment. (Miaohe Lin)  [Orabug: 31687958]  
  - KVM: nSVM: avoid loss of pending IRQ/NMI before entering L2 (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: nSVM: implement check_nested_events for interrupts (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: nSVM: ignore L1 interrupt window while running L2 with V_INTR_MASKING=1 (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: nSVM: do not change host intercepts while nested VM is running (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: x86: Explicitly pass an exception struct to check_intercept (Sean Christopherson)  [Orabug: 31687958]  
  - KVM: x86: Consolidate VM allocation and free for VMX and SVM (Sean Christopherson)  [Orabug: 31687958]  
  - KVM: x86: Directly return __vmalloc() result in ->vm_alloc() (Sean Christopherson)  [Orabug: 31687958]  
  - KVM: SVM: Fix the svm vmexit code for WRMSR (Haiwei Li)  [Orabug: 31687958]  
  - KVM: x86: allow compiling as non-module with W=1 (Valdis Kletnieks)  [Orabug: 31687958]  
  - KVM: nVMX: Emulate MTF when performing instruction emulation (Oliver Upton)  [Orabug: 31687958]  
  - KVM: fix error handling in svm_hardware_setup (Li RongQing)  [Orabug: 31687958]  
  - KVM: x86: do not reset microcode version on INIT or RESET (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: SVM: relax conditions for allowing MSR_IA32_SPEC_CTRL accesses (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: SVM: Use direct vcpu pointer during vCPU create/free (Sean Christopherson)  [Orabug: 31687958]  
  - KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: VMX: FIXED+PHYSICAL mode single target IPI fastpath (Wanpeng Li)  [Orabug: 31687958]  
  - KVM: x86: Move IA32_XSS-swapping on VM-entry/VM-exit to common x86 code (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: VMX: Use wrmsr for switching between guest and host IA32_XSS on Intel (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: x86: Remove unneeded kvm_vcpu variable, guest_xcr0_loaded (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: VMX: Fix conditions for guest IA32_XSS support (Aaron Lewis)  [Orabug: 31687958]  
  - KVM x86: Move kvm cpuid support out of svm (Peter Gonda)  [Orabug: 31687958]  
  - kvm: svm: Update svm_xsaves_supported (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: SVM: Reduce WBINVD/DF_FLUSH invocations (Tom Lendacky)  [Orabug: 31687958]  
  - KVM: SVM: Use wrmsr for switching between guest and host IA32_XSS on AMD (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: x86: Introduce vcpu->arch.xsaves_enabled (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: SVM: Remove unneeded WBINVD and DF_FLUSH when starting SEV guests (Tom Lendacky)  [Orabug: 31687958]  
  - x86/mce/amd: Add PPIN support for AMD MCE (Wei Huang)  [Orabug: 31687958]  
  - x86/amd_nb, char/amd64-agp: Use amd_nb_num() accessor (Borislav Petkov)  [Orabug: 31687958]  
  - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (Kim Phillips)  [Orabug: 31687958]  
  - x86/CPU/AMD: Remove amd_get_topology_early() (Borislav Petkov)  [Orabug: 31687958]  
  - docs/zh_CN: add Chinese version of embargoed hardware issues (Alex Shi)  [Orabug: 31687958]  
  - tools arch x86: Sync asm/cpufeatures.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 31687958]  
  - x86/kdump: Remove the backup region handling (Lianbo Jiang)  [Orabug: 31687958]  
  - x86/kdump: Always reserve the low 1M when the crashkernel option is specified (Lianbo Jiang)  [Orabug: 31687958]  
  - Documentation/process: Add AMD contact for embargoed hardware issues (Tom Lendacky)  [Orabug: 31687958]  
  - EDAC/amd64: Get rid of the ECC disabled long message (Borislav Petkov)  [Orabug: 31687958]  
  - x86/Kconfig: Rename UMIP config parameter (Babu Moger)  [Orabug: 31687958]  
  - x86/umip: Make the comments vendor-agnostic (Babu Moger)  [Orabug: 31687958]  
  - x86/vmlinux: Move EXCEPTION_TABLE to RO_DATA segment (Kees Cook)  [Orabug: 31687958]  
  - x86/mm: Report actual image regions in /proc/iomem (Kees Cook)  [Orabug: 31687958]  
  - x86/vmlinux: Use INT3 instead of NOP for linker fill bytes (Kees Cook)  [Orabug: 31687958]  
  - x86/vmlinux: Actually use _etext for the end of the text segment (Kees Cook)  [Orabug: 31687958]  
  - x86/kdump: Remove the unused crash_copy_backup_region() (Lianbo Jiang)  [Orabug: 31687958]  
  - ACPI / utils: Introduce acpi_dev_hid_uid_match() helper (Andy Shevchenko)  [Orabug: 31687958]  
  - x86/mce/amd: Make disable_err_thresholding() static (Borislav Petkov)  [Orabug: 31687958]  
  - x86/cpufeatures: Add feature bit RDPRU on AMD (Babu Moger)  [Orabug: 31687958]  
  - x86/rdrand: Sanity-check RDRAND output (Borislav Petkov)  [Orabug: 31687958]  
  - Add WireGuard support to UEK6 kernel (William Kucharski)  [Orabug: 31678138]  
  - IB/mlx5: Do reverse sequence during device removal (Parav Pandit)  [Orabug: 31644707]  
  - Enable config option CONFIG_NFSD_V4_2_INTER_SSC (Dai Ngo)  [Orabug: 31535968]  
  - NFSD: Fix NFS server build errors (Chuck Lever)  [Orabug: 31535968]  
  - nfsd4: fix double free in nfsd4_do_async_copy() (Dan Carpenter)  [Orabug: 31535968]  
  - NFSD fixing possible null pointer derefering in copy offload (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD fix nfserro errno mismatch (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD: fix seqid in copy stateid (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSv4.2 fix memory leak in nfs42_ssc_open (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSv4: Make _nfs42_proc_copy_notify() static (YueHaibing)  [Orabug: 31535968]  
  - nfsv4: Move NFSPROC4_CLNT_COPY_NOTIFY to end of list (Trond Myklebust)  [Orabug: 31535968]  
  - NFSD: allow inter server COPY to have a STALE source server fh (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD add nfs4 inter ssc to nfsd4_copy (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD check stateids against copy stateids (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD fix mismatching type in nfsd4_set_netaddr (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD fill-in netloc4 structure (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD add COPY_NOTIFY operation (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD add ca_source_server<> to COPY (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD COPY_NOTIFY xdr (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSv4.2 fix kfree in __nfs42_copy_file_range (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS based on file size issue sync copy or fallback to generic copy offload (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS: handle source server reboot (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS: skip recovery of copy open on dest server (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS: inter ssc open (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS: add ca_source_server<> to COPY (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS: add COPY_NOTIFY operation (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS NFSD: defining nl4_servers structure needed by both (Olga Kornievskaia)  [Orabug: 31535968]  
  - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351566]  {CVE-2019-19073} 
  - x86/reboot: Move up iommu_shutdown() before stop_other_cpus() (Saeed Mirzamohammadi)  [Orabug: 31710873]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648137]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648137]  
  - rds: Deregister all FRWR mr with free_mr (Hans Westgaard Ry)  [Orabug: 31472999]  
  - RDMA/nldev: Provide MR statistics (Erez Alfasi)  [Orabug: 30729403]  
  - RDMA/mlx5: Return ODP type per MR (Erez Alfasi)  [Orabug: 30729403]  
  - RDMA/nldev: Allow different fill function per resource (Erez Alfasi)  [Orabug: 30729403]  
  - IB/mlx5: Introduce ODP diagnostic counters (Erez Alfasi)  [Orabug: 30729403]  
  - Linux 5.4.55 (Greg Kroah-Hartman)   
  - Revert "dpaa_eth: fix usage as DSA master, try 3" (Vladimir Oltean)   
  - PM: wakeup: Show statistics for deleted wakeup sources again (zhuguangqing)   
  - regmap: debugfs: check count when read regmap file (Peng Fan)   
  - udp: Improve load balancing for SO_REUSEPORT. (Kuniyuki Iwashima)   
  - udp: Copy has_conns in reuseport_grow(). (Kuniyuki Iwashima)   
  - sctp: shrink stream outq when fails to do addstream reconf (Xin Long)   
  - sctp: shrink stream outq only when new outcnt < old outcnt (Xin Long)   
  - AX.25: Prevent integer overflows in connect and sendmsg (Dan Carpenter)   
  - tcp: allow at most one TLP probe per flight (Yuchung Cheng)   
  - rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA (David Howells)   
  - rtnetlink: Fix memory(net_device) leak when ->newlink fails (Weilong Chen)   
  - qrtr: orphan socket in qrtr_release() (Cong Wang)   
  - net: udp: Fix wrong clean up for IS_UDPLITE macro (Miaohe Lin)   
  - net-sysfs: add a newline when printing 'tx_timeout' by sysfs (Xiongfeng Wang)   
  - ip6_gre: fix null-ptr-deref in ip6gre_init_net() (Wei Yongjun)   
  - drivers/net/wan/x25_asy: Fix to make it work (Xie He)   
  - dev: Defer free of skbs in flush_backlog (Subash Abhinov Kasiviswanathan)   
  - AX.25: Prevent out-of-bounds read in ax25_sendmsg() (Peilin Ye)   
  - AX.25: Fix out-of-bounds read in ax25_connect() (Peilin Ye)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2033.1.el8uek]
changelog:
  - rds: Test parameter in rds_ib_recv_cache_put (Hans Westgaard Ry)  [Orabug: 31737036]  
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688619]  
  - RDMA/cm: Spurious WARNING triggered in cm_destroy_id() (Ka-Cheong Poon)  [Orabug: 31483277]  
  - RDMA/cm: Make sure the cm_id is in the IB_CM_IDLE state in destroy (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Allow ib_send_cm_sidr_rep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Allow ib_send_cm_rej() to be done under lock (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Allow ib_send_cm_drep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Allow ib_send_cm_dreq() to be done under lock (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Add some lockdep assertions for cm_id_priv->lock (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Make the destroy_id flow more robust (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Remove a race freeing timewait_info (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Use refcount_t type for refcount variable (Danit Goldberg)  [Orabug: 31483277]  
  - Revert "aarch64/BM: config failed, hub doesn't have any ports" (Thomas Tai)  [Orabug: 31678684]  
  - RDMA/mlx5: Set MR cache limit for both PF and VF (Nikhil Krishna)  [Orabug: 31358079]  
  - Linux 5.4.58 (Greg Kroah-Hartman)   
  - nfsd: Fix NFSv4 READ on RDMA when using readv (Chuck Lever)   
  - ima: move APPRAISE_BOOTPARAM dependency on ARCH_POLICY to runtime (Bruno Meneguele)   
  - tcp: apply a floor of 1 for RTT samples from TCP timestamps (Jianfeng Wang)   
  - selftests/net: relax cpu affinity requirement in msg_zerocopy test (Willem de Bruijn)   
  - Revert "vxlan: fix tos value before xmit" (Hangbin Liu)   
  - openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() (Peilin Ye)   
  - net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task() (Xin Long)   
  - net: gre: recompute gre csum for sctp over gre tunnels (Lorenzo Bianconi)   
  - hv_netvsc: do not use VF device if link is down (Stephen Hemminger)   
  - dpaa2-eth: Fix passing zero to 'PTR_ERR' warning (YueHaibing)   
  - appletalk: Fix atalk_proc_init() return path (Vincent Duvert)   
  - net: lan78xx: replace bogus endpoint lookup (Johan Hovold)   
  - vxlan: Ensure FDB dump is performed under RCU (Ido Schimmel)   
  - rxrpc: Fix race between recvmsg and sendmsg on immediate call failure (David Howells)   
  - net: ethernet: mtk_eth_soc: fix MTU warnings (Landen Chao)   
  - ipv6: Fix nexthop refcnt leak when creating ipv6 route info (Xiyu Yang)   
  - ipv6: fix memory leaks on IPV6_ADDRFORM path (Cong Wang)   
  - ipv4: Silence suspicious RCU usage warning (Ido Schimmel)   
  - PCI: tegra: Revert tegra124 raw_violation_fixup (Nicolas Chauvet)   
  - Revert "powerpc/kasan: Fix shadow pages allocation failure" (Christophe Leroy)   
  - xattr: break delegations in {set,remove}xattr (Frank van der Linden)   
  - Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23) (Dexuan Cui)   
  - tools lib traceevent: Fix memory leak in process_dynamic_array_len (Philippe Duplessis-Guindon)   
  - atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent (Xin Xiong)   
  - igb: reinit_locked() should be called with rtnl_lock (Francesco Ruggeri)   
  - cfg80211: check vendor command doit pointer before use (Julian Squires)   
  - firmware: Fix a reference count leak. (Qiushi Wu)   
  - ALSA: hda: fix NULL pointer dereference during suspend (Ranjani Sridharan)   
  - net: ethernet: mtk_eth_soc: Always call mtk_gmac0_rgmii_adjust() for mt7623 (René van Dorst)   
  - usb: hso: check for return value in hso_serial_common_create() (Rustam Kovhaev)   
  - i2c: slave: add sanity check when unregistering (Wolfram Sang)   
  - i2c: slave: improve sanity check when registering (Wolfram Sang)   
  - drm/drm_fb_helper: fix fbdev with sparc64 (Sam Ravnborg)   
  - nvme-pci: prevent SK hynix PC400 from using Write Zeroes command (Kai-Heng Feng)   
  - drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure (Ben Skeggs)   
  - drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason (Ben Skeggs)   
  - net/9p: validate fds in p9_fd_open (Christoph Hellwig)   
  - leds: 88pm860x: fix use-after-free on unbind (Johan Hovold)   
  - leds: lm3533: fix use-after-free on unbind (Johan Hovold)   
  - leds: da903x: fix use-after-free on unbind (Johan Hovold)   
  - leds: lm36274: fix use-after-free on unbind (Johan Hovold)   
  - leds: wm831x-status: fix use-after-free on unbind (Johan Hovold)   
  - mtd: properly check all write ioctls for permissions (Greg Kroah-Hartman)   
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)   {CVE-2020-14331} 
  - scripts: add dummy report mode to add_namespace.cocci (Matthias Maennich)   
  - Smack: fix use-after-free in smk_write_relabel_self() (Eric Biggers)   
  - binder: Prevent context manager from incrementing ref 0 (Jann Horn)   
  - omapfb: dss: Fix max fclk divider for omap36xx (Adam Ford)   
  - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() (Peilin Ye)   
  - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() (Peilin Ye)   
  - Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (Peilin Ye)   
  - Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (Dinghao Liu)   
  - staging: rtl8712: handle firmware load failure (Rustam Kovhaev)   
  - staging: android: ashmem: Fix lockdep warning for write operation (Suren Baghdasaryan)   
  - ALSA: seq: oss: Serialize ioctls (Takashi Iwai)   
  - ALSA: hda/ca0132 - Fix AE-5 microphone selection commands. (Connor McAdams)   
  - ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value. (Connor McAdams)   
  - ALSA: hda/ca0132 - Add new quirk ID for Recon3D. (Connor McAdams)   
  - ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (Huacai Chen)   
  - Revert "ALSA: hda: call runtime_allow() for all hda controllers" (Hui Wang)   
  - io_uring: Fix use-after-free in io_sq_wq_submit_work() (Guoyu Huang)   
  - io_uring: prevent re-read of sqe->opcode (Jens Axboe)   
  - usb: xhci: Fix ASMedia ASM1142 DMA addressing (Forest Crossman)   
  - usb: xhci: define IDs for various ASMedia host controllers (Forest Crossman)   
  - USB: iowarrior: fix up report size handling for some devices (Greg Kroah-Hartman)   
  - perf/core: Fix endless multiplex timer (Peter Zijlstra)   
  - USB: serial: qcserial: add EM7305 QDL product ID (Erik Ekman)   
  - Linux 5.4.57 (Greg Kroah-Hartman)   
  - bpf: sockmap: Require attach_bpf_fd when detaching a program (Lorenz Bauer)   
  - selftests: bpf: Fix detach from sockmap tests (Lorenz Bauer)   
  - ext4: fix direct I/O read error (Jiang Ying)   
  - arm64: Workaround circular dependency in pointer_auth.h (Marc Zyngier)   
  - random32: move the pseudo-random 32-bit definitions to prandom.h (Linus Torvalds)   
  - random32: remove net_rand_state from the latent entropy gcc plugin (Linus Torvalds)   
  - random: fix circular include dependency on arm64 after addition of percpu.h (Willy Tarreau)   
  - ARM: percpu.h: fix build error (Grygorii Strashko)   
  - random32: update the net random state on interrupt and activity (Willy Tarreau)   
  - Linux 5.4.56 (Greg Kroah-Hartman)   
  - perf bench: Share some global variables to fix build with gcc 10 (Arnaldo Carvalho de Melo)   
  - perf env: Do not return pointers to local variables (Arnaldo Carvalho de Melo)   
  - perf tests bp_account: Make global variable static (Arnaldo Carvalho de Melo)   
  - x86/i8259: Use printk_deferred() to prevent deadlock (Thomas Gleixner)   
  - KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled (Wanpeng Li)   
  - KVM: arm64: Don't inherit exec permission across page-table levels (Will Deacon)   
  - drivers/net/wan: lapb: Corrected the usage of skb_cow (Xie He)   
  - RISC-V: Set maximum number of mapped pages correctly (Atish Patra)   
  - xen-netfront: fix potential deadlock in xennet_remove() (Andrea Righi)   
  - cxgb4: add missing release on skb in uld_send() (Navid Emamdoost)   
  - x86/stacktrace: Fix reliable check for empty user task stacks (Josh Poimboeuf)   
  - x86/unwind/orc: Fix ORC for newly forked tasks (Josh Poimboeuf)   
  - Revert "i2c: cadence: Fix the hold bit setting" (Raviteja Narayanam)   
  - net: ethernet: ravb: exit if re-initialization fails in tx timeout (Yoshihiro Shimoda)   
  - parisc: add support for cmpxchg on u8 pointers (Liam Beguin)   
  - scsi: core: Run queue in case of I/O resource contention failure (Ming Lei)   
  - nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame (Navid Emamdoost)   
  - selftests: net: ip_defrag: modprobe missing nf_defrag_ipv6 support (Paolo Pisati)   
  - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Laurence Oberman)   
  - selftests: fib_nexthop_multiprefix: fix cleanup() netns deletion (Paolo Pisati)   
  - usb: hso: Fix debug compile warning on sparc32 (Geert Uytterhoeven)   
  - vxlan: fix memleak of fdb (Taehee Yoo)   
  - perf tools: Fix record failure when mixed with ARM SPE event (Wei Li)   
  - net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq (Xin Xiong)   
  - net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (Wang Hai)   
  - net: nixge: fix potential memory leak in nixge_probe() (Lu Wei)   
  - Bluetooth: fix kernel oops in store_pending_adv_report (Alain Michaud)   
  - arm64: csum: Fix handling of bad packets (Robin Murphy)   
  - arm64/alternatives: move length validation inside the subsection (Sami Tolvanen)   
  - mac80211: mesh: Free pending skb when destroying a mpath (Remi Pommarel)   
  - mac80211: mesh: Free ie data when leaving mesh (Remi Pommarel)   
  - bpf: Fix map leak in HASH_OF_MAPS map (Andrii Nakryiko)   
  - ibmvnic: Fix IRQ mapping disposal in error path (Thomas Falcon)   
  - mlxsw: core: Free EMAD transactions using kfree_rcu() (Ido Schimmel)   
  - mlxsw: core: Increase scope of RCU read-side critical section (Ido Schimmel)   
  - mlx4: disable device on shutdown (Jakub Kicinski)   
  - rhashtable: Fix unprotected RCU dereference in __rht_ptr (Herbert Xu)   
  - net: lan78xx: fix transfer-buffer memory leak (Johan Hovold)   
  - net: lan78xx: add missing endpoint sanity check (Johan Hovold)   
  - net/mlx5e: Fix kernel crash when setting vf VLANID on a VF dev (Alaa Hleihel)   
  - net/mlx5e: Modify uplink state on interface up/down (Ron Diskin)   
  - net/mlx5: Verify Hardware supports requested ptp function on a given pin (Eran Ben Elisha)   
  - net/mlx5e: Fix error path of device attach (Aya Levin)   
  - net/mlx5: E-switch, Destroy TSAR when fail to enable the mode (Parav Pandit)   
  - net: hns3: fix aRFS FD rules leftover after add a user FD rule (Guojia Liao)   
  - net: hns3: fix a TX timeout issue (Yonglong Liu)   
  - sh: Fix validation of system call number (Michael Karcher)   
  - sh/tlb: Fix PGTABLE_LEVELS > 2 (Peter Zijlstra)   
  - selftests/net: so_txtime: fix clang issues for target arch PowerPC (Tanner Love)   
  - selftests/net: psock_fanout: fix clang issues for target arch PowerPC (Tanner Love)   
  - selftests/net: rxtimestamp: fix clang issues for target arch PowerPC (Tanner Love)   
  - nvme-tcp: fix possible hang waiting for icresp response (Sagi Grimberg)   
  - ARM: dts: armada-38x: fix NETA lockup when repeatedly switching speeds (Russell King)   
  - xfrm: Fix crash when the hold queue is used. (Steffen Klassert)   
  - ARM: dts sunxi: Relax a bit the CMA pool allocation range (Maxime Ripard)   
  - xfrm: policy: match with both mark and mask on user interfaces (Xin Long)   
  - net/x25: Fix null-ptr-deref in x25_disconnect (YueHaibing)   
  - net/x25: Fix x25_neigh refcnt leak when x25 disconnect (Xiyu Yang)   
  - libtraceevent: Fix build with binutils 2.35 (Ben Hutchings)   
  - rds: Prevent kernel-infoleak in rds_notify_queue_get() (Peilin Ye)   
  - drm: hold gem reference until object is no longer accessed (Steve Cohen)   
  - drm/dbi: Fix SPI Type 1 (9-bit) transfer (Paul Cercueil)   
  - drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (Peilin Ye)   
  - drm/amd/display: Clear dm_state for fast updates (Mazin Rezk)   
  - Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers" (Alex Deucher)   
  - virtio_balloon: fix up endian-ness for free cmd id (Michael S. Tsirkin)   
  - ARM: dts: imx6qdl-icore: Fix OTG_ID pin and sdcard detect (Michael Trimarchi)   
  - ARM: dts: imx6sx-sdb: Fix the phy-mode on fec2 (Fabio Estevam)   
  - ARM: dts: imx6sx-sabreauto: Fix the phy-mode on fec2 (Fabio Estevam)   
  - ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints (Will Deacon)   
  - wireless: Use offsetof instead of custom macro. (Pi-Hsun Shih)   
  - 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work (Wang Hai)   
  - vhost/scsi: fix up req type endian-ness (Michael S. Tsirkin)   
  - IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Mike Marciniszyn)   
  - ALSA: hda/hdmi: Fix keep_power assignment for non-component devices (Takashi Iwai)   
  - ALSA: hda/realtek - Fixed HP right speaker no sound (Kailang Yang)   
  - ALSA: hda/realtek: Fix add a "ultra_low_power" function for intel reference board (alc256) (PeiSen Hou)   
  - ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (Armas Spann)   
  - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (Armas Spann)   
  - ALSA: usb-audio: Add implicit feedback quirk for SSL2 (Laurence Tratt)   
  - mm/filemap.c: don't bother dropping mmap_sem for zero size readahead (Jan Kara)   
  - PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge (Robert Hancock)   
  - ath10k: enable transmit data ack RSSI for QCA9884 (Abhishek Ambure)   
  - sunrpc: check that domain table is empty at module unload. (Sasha Levin)   
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)   
  - crypto: ccp - Release all allocated memory if sha type is invalid (Navid Emamdoost)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2035.el8uek]
changelog:
  - arm64/elf: Disable automatic READ_IMPLIES_EXEC for 64-bit address spaces (Kees Cook)  [Orabug: 31776976]  
  - arm32/64/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776976]  
  - arm32/64/elf: Add tables to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776976]  
  - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit (Kees Cook)  [Orabug: 31776976]  
  - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776976]  
  - x86/elf: Add table to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776976]  
  - Linux 5.4.60 (Greg Kroah-Hartman)   
  - drm/amd/display: dchubbub p-state warning during surface planes switch (hersen wu)   
  - drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume (Sandeep Raghuraman)   
  - drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (Xin Xiong)   
  - drm: Added orientation quirk for ASUS tablet model T103HAF (Marius Iacob)   
  - drm/panfrost: Use kvfree() to free bo->sgts (Denis Efremov)   
  - arm64: dts: marvell: espressobin: add ethernet alias (Tomasz Maciej Nowak)   
  - khugepaged: retract_page_tables() remember to test exit (Hugh Dickins)   
  - sh: landisk: Add missing initialization of sh_io_port_base (Geert Uytterhoeven)   
  - perf/x86/rapl: Fix missing psys sysfs attributes (Zhang Rui)   
  - tools build feature: Quote CC and CXX for their arguments (Daniel Díaz)   
  - perf bench mem: Always memset source before memcpy (Vincent Whitchurch)   
  - ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (Dinghao Liu)   
  - crypto: algif_aead - fix uninitialized ctx->init (Ondrej Mosnacek)   
  - mfd: dln2: Run event handler loop under spinlock (Andy Shevchenko)   
  - i2c: iproc: fix race between client unreg and isr (Dhananjay Phadke)   
  - test_kmod: avoid potential double free in trigger_config_run_type() (Tiezhu Yang)   
  - fs/ufs: avoid potential u32 multiplication overflow (Colin Ian King)   
  - fs/minix: remove expected error message in block_to_path() (Eric Biggers)   
  - fs/minix: fix block limit check for V1 filesystems (Eric Biggers)   
  - fs/minix: set s_maxbytes correctly (Eric Biggers)   
  - nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)   
  - net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init (Wang Hai)   
  - drm/vmwgfx: Fix two list_for_each loop exit tests (Dan Carpenter)   
  - drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (Dan Carpenter)   
  - recordmcount: Fix build failure on non arm64 (Christophe Leroy)   
  - Input: sentelic - fix error return when fsp_reg_write fails (Colin Ian King)   
  - x86/tsr: Fix tsc frequency enumeration bug on Lightning Mountain SoC (Dilip Kota)   
  - md-cluster: Fix potential error pointer dereference in resize_bitmaps() (Dan Carpenter)   
  - watchdog: initialize device before misc_register (Krzysztof Sobota)   
  - nfs: nfs_file_write() should check for writeback errors (Scott Mayhew)   
  - scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (Ewan D. Milne)   
  - openrisc: Fix oops caused when dumping stack (Stafford Horne)   
  - libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (Jane Chu)   
  - libnvdimm/security: fix a typo (Jane Chu)   
  - clk: bcm2835: Do not use prediv with bcm2711's PLLs (Nicolas Saenz Julienne)   
  - ubifs: Fix wrong orphan node deletion in ubifs_jnl_update|rename (Zhihao Cheng)   
  - nfs: ensure correct writeback errors are returned on close() (Scott Mayhew)   
  - i2c: rcar: avoid race when unregistering slave (Wolfram Sang)   
  - tools build feature: Use CC and CXX from parent (Thomas Hebb)   
  - pwm: bcm-iproc: handle clk_get_rate() return (Rayagonda Kokatanur)   
  - clk: clk-atlas6: fix return value check in atlas6_clk_init() (Xu Wang)   
  - clk: qcom: gcc-sdm660: Fix up gcc_mss_mnoc_bimc_axi_clk (Konrad Dybcio)   
  - i2c: rcar: slave: only send STOP event when we have been addressed (Wolfram Sang)   
  - iommu/vt-d: Enforce PASID devTLB field mask (Liu Yi L)   
  - clk: qcom: clk-alpha-pll: remove unused/incorrect PLL_CAL_VAL (Jonathan Marek)   
  - clk: qcom: gcc: fix sm8150 GPU and NPU clocks (Jonathan Marek)   
  - iommu/omap: Check for failure of a call to omap_iommu_dump_ctx (Colin Ian King)   
  - selftests/powerpc: ptrace-pkey: Don't update expected UAMOR value (Aneesh Kumar K.V)   
  - selftests/powerpc: ptrace-pkey: Update the test to mark an invalid pkey correctly (Aneesh Kumar K.V)   
  - selftests/powerpc: ptrace-pkey: Rename variables to make it easier to follow code (Aneesh Kumar K.V)   
  - clk: actions: Fix h_clk for Actions S500 SoC (Cristian Ciocaltea)   
  - dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Ming Lei)   
  - gpu: ipu-v3: image-convert: Wait for all EOFs before completing a tile (Steve Longerbeam)   
  - gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers (Steve Longerbeam)   
  - crypto: caam - Remove broken arc4 support (Herbert Xu)   
  - mmc: renesas_sdhi_internal_dmac: clean up the code for dma complete (Yoshihiro Shimoda)   
  - RDMA/counter: Allow manually bind QPs with different pids to same counter (Mark Zhang)   
  - RDMA/counter: Only bind user QPs in auto mode (Mark Zhang)   
  - devres: keep both device name and resource name in pretty name (Vladimir Oltean)   
  - crypto: af_alg - Fix regression on empty requests (Herbert Xu)   
  - USB: serial: ftdi_sio: clean up receive processing (Johan Hovold)   
  - USB: serial: ftdi_sio: make process-packet buffer unsigned (Johan Hovold)   
  - selftests/bpf: test_progs use another shell exit on non-actions (Jesper Dangaard Brouer)   
  - selftests/bpf: Test_progs indicate to shell on non-actions (Jesper Dangaard Brouer)   
  - IB/uverbs: Set IOVA on IB MR in uverbs layer (Yishai Hadas)   
  - media: rockchip: rga: Only set output CSC mode for RGB input (Paul Kocialkowski)   
  - media: rockchip: rga: Introduce color fmt macros and refactor CSC mode logic (Paul Kocialkowski)   
  - RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Jason Gunthorpe)   
  - RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib)   
  - platform/chrome: cros_ec_ishtp: Fix a double-unlock issue (Qiushi Wu)   
  - mtd: rawnand: fsl_upm: Remove unused mtd var (Boris Brezillon)   
  - octeontx2-af: change (struct qmem)->entry_sz from u8 to u16 (Eric Dumazet)   
  - mfd: arizona: Ensure 32k clock is put on driver unbind and error (Charles Keepax)   
  - crypto: algif_aead - Only wake up when ctx->more is zero (Herbert Xu)   
  - pinctrl: ingenic: Properly detect GPIO direction when configured for IRQ (Paul Cercueil)   
  - orangefs: get rid of knob code... (Mike Marshall)   
  - drm/imx: imx-ldb: Disable both channels for split mode in enc->disable() (Liu Ying)   
  - remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load (Sibi Sankar)   
  - remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load (Sibi Sankar)   
  - remoteproc: qcom: q6v5: Update running state before requesting stop (Sibi Sankar)   
  - perf intel-pt: Fix duplicate branch after CBR (Adrian Hunter)   
  - perf intel-pt: Fix FUP packet state (Adrian Hunter)   
  - module: Correctly truncate sysfs sections output (Kees Cook)   
  - pseries: Fix 64 bit logical memory block panic (Anton Blanchard)   
  - ceph: handle zero-length feature mask in session messages (Jeff Layton)   
  - ceph: set sec_context xattr on symlink creation (Jeff Layton)   
  - watchdog: f71808e_wdt: clear watchdog timeout occurred flag (Ahmad Fatoum)   
  - watchdog: f71808e_wdt: remove use of wrong watchdog_info option (Ahmad Fatoum)   
  - watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options (Ahmad Fatoum)   
  - tracing: Move pipe reference to trace array instead of current_tracer (Steven Rostedt (VMware))   
  - tracing: Use trace_sched_process_free() instead of exit() for pid tracing (Steven Rostedt (VMware))   
  - tracing/hwlat: Honor the tracing_cpumask (Kevin Hao)   
  - kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler (Muchun Song)   
  - ftrace: Setup correct FTRACE_FL_REGS flags for module (Chengming Zhou)   
  - mm/memory_hotplug: fix unpaired mem_hotplug_begin/done (Jia He)   
  - mm/page_counter.c: fix protection usage propagation (Michal Koutný)   
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)   
  - khugepaged: collapse_pte_mapped_thp() protect the pmd lock (Hugh Dickins)   
  - khugepaged: collapse_pte_mapped_thp() flush the right range (Hugh Dickins)   
  - ext2: fix missing percpu_counter_inc (Mikulas Patocka)   
  - MIPS: qi_lb60: Fix routing to audio amplifier (Paul Cercueil)   
  - MIPS: CPU#0 is not hotpluggable (Huacai Chen)   
  - driver core: Avoid binding drivers to dead devices (Lukas Wunner)   
  - mac80211: fix misplaced while instead of if (Johannes Berg)   
  - bcache: fix overflow in offset_to_stripe() (Coly Li)   
  - bcache: allocate meta data pages as compound pages (Coly Li)   
  - md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (ChangSyun Peng)   
  - net/compat: Add missing sock updates for SCM_RIGHTS (Kees Cook)   
  - net: stmmac: dwmac1000: provide multicast filter fallback (Jonathan McDowell)   
  - net: ethernet: stmmac: Disable hardware multicast filter (Jonathan McDowell)   
  - media: vsp1: dl: Fix NULL pointer dereference on unbind (Eugeniu Rosca)   
  - pinctrl: ingenic: Enhance support for IRQ_TYPE_EDGE_BOTH (Paul Cercueil)   
  - powerpc: Fix circular dependency between percpu.h and mmu.h (Michael Ellerman)   
  - powerpc: Allow 4224 bytes of stack expansion for the signal frame (Michael Ellerman)   
  - powerpc/ptdump: Fix build failure in hashpagetable.c (Christophe Leroy)   
  - cifs: Fix leak when handling lease break for cached root fid (Paul Aurich)   
  - xtensa: fix xtensa_pmu_setup prototype (Max Filippov)   
  - xtensa: add missing exclusive access state management (Max Filippov)   
  - iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() (Alexandru Ardelean)   
  - dt-bindings: iio: io-channel-mux: Fix compatible string in example code (Christian Eggers)   
  - arm64: perf: Correct the event index in sysfs (Shaokun Zhang)   
  - btrfs: fix return value mixup in btrfs_get_extent (Pavel Machek)   
  - btrfs: make sure SB_I_VERSION doesn't get unset by remount (Josef Bacik)   
  - btrfs: fix memory leaks after failure to lookup checksums during inode logging (Filipe Manana)   
  - btrfs: inode: fix NULL pointer dereference if inode doesn't need compression (Qu Wenruo)   
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)   {CVE-2019-19448} 
  - btrfs: fix messages after changing compression level by remount (David Sterba)   
  - btrfs: fix race between page release and a fast fsync (Filipe Manana)   
  - btrfs: don't WARN if we abort a transaction with EROFS (Josef Bacik)   
  - btrfs: sysfs: use NOFS for device creation (Josef Bacik)   
  - btrfs: avoid possible signal interruption of btrfs_drop_snapshot() on relocation tree (Qu Wenruo)   
  - btrfs: add missing check for nocow and compression inode flags (David Sterba)   
  - btrfs: relocation: review the call sites which can be interrupted by signal (Qu Wenruo)   
  - btrfs: move the chunk_mutex in btrfs_read_chunk_tree (Josef Bacik)   
  - btrfs: open device without device_list_mutex (Josef Bacik)   
  - btrfs: don't traverse into the seed devices in show_devname (Anand Jain)   
  - btrfs: remove no longer needed use of log_writers for the log root tree (Filipe Manana)   
  - btrfs: stop incremening log_batch for the log root tree when syncing log (Filipe Manana)   
  - btrfs: ref-verify: fix memory leak in add_block_entry (Tom Rix)   
  - btrfs: don't allocate anonymous block device for user invisible roots (Qu Wenruo)   
  - btrfs: free anon block device right after subvolume deletion (Qu Wenruo)   
  - btrfs: allow use of global block reserve for balance item deletion (David Sterba)   
  - PCI: qcom: Add support for tx term offset for rev 2.1.0 (Ansuel Smith)   
  - PCI: qcom: Define some PARF params needed for ipq8064 SoC (Ansuel Smith)   
  - PCI: Add device even if driver attach failed (Rajat Jain)   
  - PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken (Kai-Heng Feng)   
  - PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() (Rafael J. Wysocki)   
  - genirq/PM: Always unlock IRQ descriptor in rearm_wake_irq() (Guenter Roeck)   
  - genirq/affinity: Make affinity setting if activated opt-in (Thomas Gleixner)   
  - smb3: warn on confusing error scenario with sec=krb5 (Steve French)   
  - scsi: mpt3sas: Fix memset() in non-RDPQ mode (Suganath Prabu S)  [Orabug: 31741029]  
  - scsi: mpt3sas: Fix reply queue count in non RDPQ mode (Suganath Prabu S)  [Orabug: 31741029]  
  - scsi: mpt3sas: Remove unused including <linux/version.h> (Samuel Zou)  [Orabug: 31741029]  
  - scsi: mpt3sas: Disable DIF when prot_mask set to zero (Sreekanth Reddy)  [Orabug: 31741029]  
  - scsi: mpt3sas: Capture IOC data for debugging purposes (Suganath Prabu)  [Orabug: 31741029]  
  - scsi: mpt3sas: Use true, false for ioc->use_32bit_dma (Jason Yan)  [Orabug: 31741029]  
  - scsi: mpt3sas: Remove NULL check before freeing function (Jason Yan)  [Orabug: 31741029]  
  - scsi: mpt3sas: Update mpt3sas version to 33.101.00.00 (Suganath Prabu)  [Orabug: 31741029]  
  - scsi: mpt3sas: Handle RDPQ DMA allocation in same 4G region (Suganath Prabu)  [Orabug: 31741029]  
  - scsi: mpt3sas: Separate out RDPQ allocation to new function (Suganath Prabu)  [Orabug: 31741029]  
  - scsi: mpt3sas: Rename function name is_MSB_are_same (Suganath Prabu)  [Orabug: 31741029]  
  - scsi: mpt3sas: Don't change the DMA coherent mask after allocations (Christoph Hellwig)  [Orabug: 31741029]  
  - scsi: mpt3sas: use true,false for bool variables (Jason Yan)  [Orabug: 31741029]  
  - x86/mm: use max memory block size on bare metal (Daniel Jordan)  [Orabug: 31765311]  
  - drivers/base/memory.c: cache memory blocks in xarray to accelerate lookup (Scott Cheloha)  [Orabug: 31765311]  
  - sched/core: remove undesired trace_printk from core scheduling backport (chris hyser)  [Orabug: 31757863]  
  - libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (Jane Chu)  [Orabug: 30501507]  
  - libnvdimm/security: the 'security' attr never (Jane Chu)  [Orabug: 30501507]  
  - libnvdimm/security: fix a typo (Jane Chu)  [Orabug: 30501507]  
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755710]  
  - Linux 5.4.59 (Greg Kroah-Hartman)   
  - io_uring: Fix NULL pointer dereference in loop_rw_iter() (Guoyu Huang)   
  - s390/gmap: improve THP splitting (Gerald Schaefer)   
  - s390/dasd: fix inability to use DASD with DIAG driver (Stefan Haberland)   
  - xen/gntdev: Fix dmabuf import with non-zero sgt offset (Oleksandr Andrushchenko)   
  - xen/balloon: make the balloon wait interruptible (Roger Pau Monne)   
  - xen/balloon: fix accounting in alloc_xenballooned_pages error path (Roger Pau Monne)   
  - fs/minix: reject too-large maximum file size (Eric Biggers)   
  - fs/minix: don't allow getting deleted inodes (Eric Biggers)   
  - fs/minix: check return value of sb_getblk() (Eric Biggers)   
  - bitfield.h: don't compile-time validate _val in FIELD_FIT (Jakub Kicinski)   
  - crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (Mikulas Patocka)   
  - crypto: ccp - Fix use of merged scatterlists (John Allen)   
  - crypto: qat - fix double free in qat_uclo_create_batch_init_list (Tom Rix)   
  - crypto: hisilicon - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (Mikulas Patocka)   
  - pstore: Fix linking when crypto API disabled (Matteo Croce)   
  - tpm: Unify the mismatching TPM space buffer sizes (Jarkko Sakkinen)   
  - ALSA: usb-audio: add quirk for Pioneer DDJ-RB (Hector Martin)   
  - irqdomain/treewide: Free firmware node after domain removal (Jon Derrick)   
  - ARM: 8992/1: Fix unwind_frame for clang-built kernels (Nathan Huckleberry)   
  - parisc: mask out enable and reserved bits from sba imask (Sven Schnelle)   
  - parisc: Implement __smp_store_release and __smp_load_acquire barriers (John David Anglin)   
  - parisc: Do not use an ordered store in pa_tlb_lock() (John David Anglin)   
  - Revert "parisc: Revert "Release spinlocks using ordered store"" (Helge Deller)   
  - Revert "parisc: Use ldcw instruction for SMP spinlock release barrier" (Helge Deller)   
  - Revert "parisc: Drop LDCW barrier in CAS code when running UP" (Helge Deller)   
  - erofs: fix extended inode could cross boundary (Gao Xiang)   
  - mtd: rawnand: qcom: avoid write to unavailable register (Sivaprakash Murugesan)   
  - spi: spidev: Align buffers for DMA (Christian Eggers)   
  - include/asm-generic/vmlinux.lds.h: align ro_after_init (Romain Naour)   
  - cpufreq: dt: fix oops on armada37xx (Ivan Kokshaysky)   
  - cpufreq: Fix locking issues with governors (Viresh Kumar)   
  - NFS: Don't return layout segments that are in use (Trond Myklebust)   
  - NFS: Don't move layouts to plh_return_segs list while in use (Trond Myklebust)   
  - io_uring: set ctx sq/cq entry count earlier (Jens Axboe)   
  - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. (Dave Airlie)   
  - media: media-request: Fix crash if memory allocation fails (Tuomas Tynkkynen)   
  - 9p: Fix memory leak in v9fs_mount (Zheng Bin)   
  - ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (Hector Martin)   
  - ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (Hector Martin)   
  - ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (Mirko Dietrich)   
  - ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (Hui Wang)   
  - USB: serial: cp210x: enable usb generic throttle/unthrottle (Brant Merryman)   
  - USB: serial: cp210x: re-enable auto-RTS on open (Brant Merryman)   
  - net: initialize fastreuse on inet_inherit_port (Tim Froidcoeur)   
  - net: refactor bind_bucket fastreuse into helper (Tim Froidcoeur)   
  - vmxnet3: use correct tcp hdr length when packet is encapsulated (Ronak Doshi)   
  - tcp: correct read of TFO keys on big endian systems (Jason Baron)   
  - net/tls: Fix kmap usage (Ira Weiny)   
  - net: Set fput_needed iff FDPUT_FPUT is set (Miaohe Lin)   
  - net: phy: fix memory leak in device-create error path (Johan Hovold)   
  - net/nfc/rawsock.c: add CAP_NET_RAW check. (Qingyu Li)   
  - net: Fix potential memory leak in proto_register() (Miaohe Lin)   
  - drivers/net/wan/lapbether: Added needed_headroom and a skb->len check (Xie He)   
  - af_packet: TPACKET_V3: fix fill status rwlock imbalance (John Ogness)   
  - crypto: aesni - add compatibility with IAS (Jian Cai)   
  - x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (Eric Dumazet)   
  - SUNRPC: Fix ("SUNRPC: Add "@len" parameter to gss_unwrap()") (Chuck Lever)   
  - svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (Chuck Lever)   
  - pinctrl-single: fix pcs_parse_pinconf() return value (Drew Fustini)   
  - ocfs2: fix unbalanced locking (Pavel Machek)   
  - dlm: Fix kobject memleak (Wang Hai)   
  - net: thunderx: initialize VF's mailbox mutex before first usage (Dean Nelson)   
  - fsl/fman: fix eth hash table allocation (Florinel Iordache)   
  - fsl/fman: check dereferencing null pointer (Florinel Iordache)   
  - fsl/fman: fix unreachable code (Florinel Iordache)   
  - fsl/fman: fix dereference null return value (Florinel Iordache)   
  - fsl/fman: use 32-bit unsigned integer (Florinel Iordache)   
  - net: spider_net: Fix the size used in a 'dma_free_coherent()' call (Christophe JAILLET)   
  - liquidio: Fix wrong return value in cn23xx_get_pf_num() (Tianjia Zhang)   
  - net: ethernet: aquantia: Fix wrong return value (Tianjia Zhang)   
  - net/mlx5: Delete extra dump stack that gives nothing (Leon Romanovsky)   
  - net/mlx5: DR, Change push vlan action sequence (Alex Vesker)   
  - tools, bpftool: Fix wrong return value in do_dump() (Tianjia Zhang)   
  - tools, build: Propagate build failures from tools/build/Makefile.build (Andrii Nakryiko)   
  - wl1251: fix always return 0 error (Wang Hai)   
  - rtw88: coex: only skip coex triggered by BT info (Yan-Hsuan Chuang)   
  - rtw88: fix short GI capability based on current bandwidth (Tsang-Shian Lin)   
  - rtw88: fix LDPC field for RA info (Tsang-Shian Lin)   
  - ice: Graceful error handling in HW table calloc failure (Surabhi Boob)   
  - s390/qeth: don't process empty bridge port events (Julian Wiedmann)   
  - ASoC: fsl_sai: Fix value of FSL_SAI_CR1_RFW_MASK (Shengjiu Wang)   
  - ASoC: meson: axg-tdm-formatters: fix sclk inversion (Jerome Brunet)   
  - ASoC: meson: axg-tdmin: fix g12a skew (Jerome Brunet)   
  - ASoC: meson: axg-tdm-interface: fix link fmt setup (Jerome Brunet)   
  - selftests/powerpc: Fix online CPU selection (Sandipan Das)   
  - cpufreq: ap806: fix cpufreq driver needs ap cpu clk (Sven Auhagen)   
  - PCI: Release IVRS table in AMD ACS quirk (Hanjun Guo)   
  - RDMA/netlink: Remove CAP_NET_RAW check when dump a raw QP (Mark Zhang)   
  - selftests/powerpc: Fix CPU affinity for child process (Harish)   
  - powerpc/boot: Fix CONFIG_PPC_MPC52XX references (Michael Ellerman)   
  - powerpc/32s: Fix CONFIG_BOOK3S_601 uses (Michael Ellerman)   
  - selftests/powerpc: Squash spurious errors due to device removal (Oliver O'Halloran)   
  - xfs: fix inode allocation block res calculation precedence (Brian Foster)   
  - net: dsa: rtl8366: Fix VLAN set-up (Linus Walleij)   
  - net: dsa: rtl8366: Fix VLAN semantics (Linus Walleij)   
  - Bluetooth: hci_serdev: Only unregister device if it was registered (Nicolas Boichat)   
  - Bluetooth: hci_h5: Set HCI_UART_RESET_ON_INIT to correct flags (Nicolas Boichat)   
  - power: supply: check if calc_soc succeeded in pm860x_init_battery (Tom Rix)   
  - Smack: prevent underflow in smk_set_cipso() (Dan Carpenter)   
  - Smack: fix another vsscanf out of bounds (Dan Carpenter)   
  - RDMA/core: Fix return error value in _ib_modify_qp() to negative (Li Heng)   
  - PCI: cadence: Fix updating Vendor ID and Subsystem Vendor ID register (Kishon Vijay Abraham I)   
  - macintosh/via-macii: Access autopoll_devs when inside lock (Finn Thain)   
  - net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration (Chris Packham)   
  - scsi: mesh: Fix panic after host or bus reset (Finn Thain)   
  - scsi: megaraid_sas: Clear affinity hint (Tomas Henzl)   
  - usb: gadget: f_uac2: fix AC Interface Header Descriptor wTotalLength (Ruslan Bilovol)   
  - usb: dwc2: Fix error path in gadget registration (Marek Szyprowski)   
  - MIPS: OCTEON: add missing put_device() call in dwc3_octeon_device_init() (Yu Kuai)   
  - phy: armada-38x: fix NETA lockup when repeatedly switching speeds (Russell King)   
  - mt76: mt7615: fix potential memory leak in mcu message handler (Sean Wang)   
  - powerpc/perf: Fix missing is_sier_aviable() during build (Madhavan Srinivasan)   
  - coresight: tmc: Fix TMC mode read in tmc_read_unprepare_etb() (Sai Prakash Ranjan)   
  - thermal: ti-soc-thermal: Fix reversed condition in ti_thermal_expose_sensor() (Dan Carpenter)   
  - usb: core: fix quirks_param_set() writing to a const pointer (Kars Mulder)   
  - USB: serial: iuu_phoenix: fix led-activity helpers (Johan Hovold)   
  - spi: lantiq-ssc: Fix warning by using WQ_MEM_RECLAIM (Hauke Mehrtens)   
  - gpu: ipu-v3: Restore RGB32, BGR32 (Steve Longerbeam)   
  - drm/imx: tve: fix regulator_disable error path (Marco Felsch)   
  - drm/imx: fix use after free (Philipp Zabel)   
  - powerpc/book3s64/pkeys: Use PVR check instead of cpu feature (Aneesh Kumar K.V)   
  - phy: renesas: rcar-gen3-usb2: move irq registration to init (Yoshihiro Shimoda)   
  - PCI/ASPM: Add missing newline in sysfs 'policy' (Xiongfeng Wang)   
  - ASoC: meson: fixes the missed kfree() for axg_card_add_tdm_loopback (Jing Xiangfeng)   
  - staging: rtl8192u: fix a dubious looking mask before a shift (Colin Ian King)   
  - ima: Have the LSM free its audit rule (Tyler Hicks)   
  - RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue (Mikhail Malygin)   
  - RDMA/qedr: SRQ's bug fixes (Yuval Basson)   
  - powerpc/vdso: Fix vdso cpu truncation (Milton Miller)   
  - powerpc/rtas: don't online CPUs for partition suspend (Nathan Lynch)   
  - kernfs: do not call fsnotify() with name without a parent (Amir Goldstein)   
  - mwifiex: Prevent memory corruption handling keys (Dan Carpenter)   
  - scsi: scsi_debug: Add check for sdebug_max_queue during module init (John Garry)   
  - drm/bridge: sil_sii8620: initialize return of sii8620_readb (Tom Rix)   
  - phy: exynos5-usbdrd: Calibrating makes sense only for USB2.0 PHY (Marek Szyprowski)   
  - drm: panel: simple: Fix bpc for LG LB070WV8 panel (Laurent Pinchart)   
  - leds: core: Flush scheduled work for system suspend (Kai-Heng Feng)   
  - kobject: Avoid premature parent object freeing in kobject_cleanup() (Heikki Krogerus)   
  - drm/stm: repair runtime power management (Marek Vasut)   
  - PCI: Fix pci_cfg_wait queue locking problem (Bjorn Helgaas)   
  - RDMA/rxe: Skip dgid check in loopback mode (Zhu Yanjun)   
  - xfs: fix reflink quota reservation accounting error (Darrick J. Wong)   
  - xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork (Darrick J. Wong)   
  - media: cros-ec-cec: do not bail on device_init_wakeup failure (Dariusz Marcinkiewicz)   
  - media: exynos4-is: Add missed check for pinctrl_lookup_state() (Chuhong Yuan)   
  - media: firewire: Using uninitialized values in node_probe() (Dan Carpenter)   
  - ipvs: allow connection reuse for unconfirmed conntrack (Julian Anastasov)   
  - scsi: eesox: Fix different dev_id between request_irq() and free_irq() (Christophe JAILLET)   
  - scsi: powertec: Fix different dev_id between request_irq() and free_irq() (Christophe JAILLET)   
  - RDMA/core: Fix bogus WARN_ON during ib_unregister_device_queued() (Jason Gunthorpe)   
  - iavf: Fix updating statistics (Tony Nguyen)   
  - iavf: fix error return code in iavf_init_get_resources() (Wei Yongjun)   
  - staging: vchiq_arm: Add a matching unregister call (Phil Elwell)   
  - drm/radeon: fix array out-of-bounds read and write issues (Colin Ian King)   
  - cxl: Fix kobject memleak (Wang Hai)   
  - drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (Emil Velikov)   
  - scsi: cumana_2: Fix different dev_id between request_irq() and free_irq() (Christophe JAILLET)   
  - ASoC: Intel: bxt_rt298: add missing .owner field (Pierre-Louis Bossart)   
  - ASoC: SOF: nocodec: add missing .owner field (Pierre-Louis Bossart)   
  - media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() (Chuhong Yuan)   
  - media: marvell-ccic: Add missed v4l2_async_notifier_cleanup() (Chuhong Yuan)   
  - media: cxusb-analog: fix V4L2 dependency (Arnd Bergmann)   
  - Bluetooth: btmtksdio: fix up firmware download sequence (Sean Wang)   
  - Bluetooth: btusb: fix up firmware download sequence (Sean Wang)   
  - leds: lm355x: avoid enum conversion warning (Arnd Bergmann)   
  - clk: bcm63xx-gate: fix last clock availability (Álvaro Fernández Rojas)   
  - drm/arm: fix unintentional integer overflow on left shift (Colin Ian King)   
  - drm/etnaviv: Fix error path on failure to enable bus clk (Lubomir Rintel)   
  - iio: improve IIO_CONCENTRATION channel type description (Tomasz Duszynski)   
  - ath10k: Acquire tx_lock in tx error paths (Evan Green)   
  - video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call (Christophe JAILLET)   
  - console: newport_con: fix an issue about leak related system resources (Dejin Zheng)   
  - video: fbdev: sm712fb: fix an issue about iounmap for a wrong address (Dejin Zheng)   
  - btmrvl: Fix firmware filename for sd8997 chipset (Pali Rohár)   
  - btmrvl: Fix firmware filename for sd8977 chipset (Pali Rohár)   
  - mwifiex: Fix firmware filename for sd8997 chipset (Pali Rohár)   
  - mwifiex: Fix firmware filename for sd8977 chipset (Pali Rohár)   
  - agp/intel: Fix a memory leak on module initialisation failure (Qiushi Wu)   
  - drm/bridge: ti-sn65dsi86: Clear old error bits before AUX transfers (Douglas Anderson)   
  - drm/gem: Fix a leak in drm_gem_objects_lookup() (Dan Carpenter)   
  - drm/msm: ratelimit crtc event overflow error (Rob Clark)   
  - ACPICA: Do not increment operation_region reference counts for field units (Erik Kaneda)   
  - bcache: fix super block seq numbers comparision in register_cache_set() (Coly Li)   
  - dyndbg: fix a BUG_ON in ddebug_describe_flags (Jim Cromie)   
  - usb: bdc: Halt controller on suspend (Danesh Petigara)   
  - bdc: Fix bug causing crash after multiple disconnects (Sasi Kumar)   
  - usb: gadget: net2280: fix memory leak on probe error handling paths (Evgeny Novikov)   
  - mmc: sdhci-pci-o2micro: Bug fix for O2 host controller Seabird1 (shirley her)   
  - ionic: update eid test for overflow (Shannon Nelson)   
  - gpu: host1x: debug: Fix multiple channels emitting messages simultaneously (Dmitry Osipenko)   
  - iwlegacy: Check the return value of pcie_capability_read_*() (Bolarinwa Olayemi Saheed)   
  - platform/x86: asus-nb-wmi: add support for ASUS ROG Zephyrus G14 and G15 (Armas Spann)   
  - brcmfmac: set state of hanger slot to FREE when flushing PSQ (Wright Feng)   
  - brcmfmac: To fix Bss Info flag definition Bug (Prasanna Kerekoppa)   
  - brcmfmac: keep SDIO watchdog running when console_interval is non-zero (Wright Feng)   
  - bpf: Fix fds_example SIGSEGV error (Wenbo Zhang)   
  - drm/amd/powerplay: fix compile error with ARCH=arc (Evan Quan)   
  - drm/amdgpu/display bail early in dm_pp_get_static_clocks (Alex Deucher)   
  - mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls (Paul E. McKenney)   
  - irqchip/irq-mtk-sysirq: Replace spinlock with raw_spinlock (Bartosz Golaszewski)   
  - drm/radeon: disable AGP by default (Christian König)   
  - drm/debugfs: fix plain echo to connector "force" attribute (Michael Tretter)   
  - drm/msm: Fix a null pointer access in msm_gem_shrinker_count() (Akhil P Oommen)   
  - drm: msm: a6xx: fix gpu failure after system resume (Akhil P Oommen)   
  - usb: mtu3: clear dual mode of u3port when disable device (Chunfeng Yun)   
  - btrfs: fix lockdep splat from btrfs_dump_space_info (Josef Bacik)   
  - mmc: sdhci-cadence: do not use hardware tuning for SD mode (Masahiro Yamada)   
  - drm/nouveau: fix multiple instances of reference count leaks (Aditya Pakki)   
  - drm/nouveau: fix reference count leak in nouveau_debugfs_strap_peek (Aditya Pakki)   
  - drm/etnaviv: fix ref count leak via pm_runtime_get_sync (Navid Emamdoost)   
  - arm64: dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT binding (Ricardo Cañuelo)   
  - drm/nouveau/kms/nv50-: Fix disabling dithering (Lyude Paul)   
  - md-cluster: fix wild pointer of unlock_all_bitmaps() (Zhao Heming)   
  - bus: ti-sysc: Add missing quirk flags for usb_host_hs (Tony Lindgren)   
  - video: fbdev: neofb: fix memory leak in neo_scan_monitor() (Evgeny Novikov)   
  - video: fbdev: savage: fix memory leak on error handling path in probe (Evgeny Novikov)   
  - crypto: aesni - Fix build with LLVM_IAS=1 (Sedat Dilek)   
  - drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync (Aditya Pakki)   
  - drm/amdgpu: avoid dereferencing a NULL pointer (Jack Xiao)   
  - fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls (Paul E. McKenney)   
  - loop: be paranoid on exit and prevent new additions / removals (Luis Chamberlain)   
  - Bluetooth: add a mutex lock to avoid UAF in do_enale_set (Lihong Kou)   
  - soc: qcom: rpmh-rsc: Set suppress_bind_attrs flag (Maulik Shah)   
  - drm/tilcdc: fix leak & null ref in panel_connector_get_modes (Tomi Valkeinen)   
  - nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths (Hannes Reinecke)   
  - nvme-multipath: fix logic for non-optimized paths (Martin Wilck)   
  - nvme-rdma: fix controller reset hang during traffic (Sagi Grimberg)   
  - nvme-tcp: fix controller reset hang during traffic (Sagi Grimberg)   
  - md: raid0/linear: fix dereference before null check on pointer mddev (Colin Ian King)   
  - seccomp: Fix ioctl number for SECCOMP_IOCTL_NOTIF_ID_VALID (Kees Cook)   
  - irqchip/ti-sci-inta: Fix return value about devm_ioremap_resource() (Tiezhu Yang)   
  - iocost: Fix check condition of iocg abs_vdebt (Chengming Zhou)   
  - ARM: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh() (Yu Kuai)   
  - spi: rockchip: Fix error in SPI slave pio read (Jon Lin)   
  - io_uring: fix sq array offset calculation (Dmitry Vyukov)   
  - regulator: fix memory leak on error path of regulator_register() (Vladimir Zapolskiy)   
  - recordmcount: only record relocation of type R_AARCH64_CALL26 on arm64. (Gregory Herrero)   
  - tpm: Require that all digests are present in TCG_PCR_EVENT2 structures (Tyler Hicks)   
  - spi: lantiq: fix: Rx overflow error in full duplex mode (Dilip Kota)   
  - ARM: dts: sunxi: bananapi-m2-plus-v1.2: Fix CPU supply voltages (Chen-Yu Tsai)   
  - ARM: dts: sunxi: bananapi-m2-plus-v1.2: Add regulator supply to all CPU cores (Chen-Yu Tsai)   
  - ARM: at91: pm: add missing put_device() call in at91_pm_sram_init() (yu kuai)   
  - ARM: dts: gose: Fix ports node name for adv7612 (Niklas Söderlund)   
  - ARM: dts: gose: Fix ports node name for adv7180 (Niklas Söderlund)   
  - platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() (Lu Wei)   
  - platform/x86: intel-hid: Fix return value check in check_acpi_dev() (Lu Wei)   
  - m68k: mac: Fix IOP status/control register writes (Finn Thain)   
  - m68k: mac: Don't send IOP message until channel is idle (Finn Thain)   
  - clk: scmi: Fix min and max rate when registering clocks with discrete rates (Sudeep Holla)   
  - sched/uclamp: Fix initialization of struct uclamp_rq (Qais Yousef)   
  - arm64: dts: exynos: Fix silent hang after boot on Espresso (Alim Akhtar)   
  - firmware: arm_scmi: Fix SCMI genpd domain probing (Cristian Marussi)   
  - ARM: exynos: MCPM: Restore big.LITTLE cpuidle support (Marek Szyprowski)   
  - crypto: ccree - fix resource leak on error path (Gilad Ben-Yossef)   
  - blktrace: fix debugfs use after free (Luis Chamberlain)   {CVE-2019-19770} 
  - arm64: dts: qcom: msm8916: Replace invalid bias-pull-none property (Stephan Gerhold)   
  - crc-t10dif: Fix potential crypto notify dead-lock (Herbert Xu)   
  - EDAC: Fix reference count leaks (Qiushi Wu)   
  - arm64: dts: rockchip: fix rk3399-puma gmac reset gpio (Heiko Stuebner)   
  - arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio (Heiko Stuebner)   
  - arm64: dts: rockchip: fix rk3368-lion gmac reset gpio (Heiko Stuebner)   
  - sched: correct SD_flags returned by tl->sd_flags() (Peng Liu)   
  - sched/fair: Fix NOHZ next idle balance (Vincent Guittot)   
  - x86/mce/inject: Fix a wrong assignment of i_mce.status (Zhenzhong Duan)   
  - clk: qcom: clk-rpmh: Wait for completion when enabling clocks (Mike Tipton)   
  - fs/io_uring.c: Fix uninitialized variable is referenced in io_submit_sqe (Liu Yong)   
  - nvme: add a Identify Namespace Identification Descriptor list quirk (Christoph Hellwig)   
  - HID: input: Fix devices that return multiple bytes in battery report (Grant Likely)   
  - tracepoint: Mark __tracepoint_string's __used (Nick Desaulniers)   
  - uek-rpm: Enable CONFIG_EDAC_I10NM (Thomas Tai)  [Orabug: 31644938]  
  - EDAC/i10nm: Update driver to support different bus number config register offsets (Qiuxu Zhuo)  [Orabug: 31644938]  
  - EDAC, {skx,i10nm}: Make some configurations CPU model specific (Qiuxu Zhuo)  [Orabug: 31644938]  
  - EDAC: Convert to new X86 CPU match macros (Thomas Gleixner)  [Orabug: 31644938]  
  - arm64/dts: Serial console fix for RPi4 (Vijay Kumar)  [Orabug: 31747726]  
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31682031]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31682031]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.el8uek]
changelog:
  - RDMA/bnxt_re: Do not add user qps to flushlist (Selvin Xavier)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Update maintainers for Broadcom rdma driver (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Change wr posting logic to accommodate variable wqes (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Add helper data structures (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Pull psn buffer dynamically based on prod (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: introduce a function to allocate swq (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: introduce wqe mode to select execution path (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784883]  
  - RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784651]  
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31712849]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31712849]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31712849]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Aruna Ramakrishna)  [Orabug: 31712849]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31712849]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31712849]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31712849]  
  - sched/core: cleanup kABI for struct rq (chris hyser)  [Orabug: 31776423]  
  - Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe" (Quinn Tran)  [Orabug: 31798223]  
  - Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Saurav Kashyap)  [Orabug: 31798223]  
  - scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Check if FW supports MQ before enabling (Saurav Kashyap)  [Orabug: 31798223]  
  - scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (Arun Easi)  [Orabug: 31798223]  
  - scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (Arun Easi)  [Orabug: 31798223]  
  - scsi: qla2xxx: Reduce noisy debug message (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Fix login timeout (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Indicate correct supported speeds for Mezz card (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Flush I/O on zone disable (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Flush all sessions on zone disable (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (Enzo Matsumiya)  [Orabug: 31798223]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783145]  
  - x86/vmlinux: Restore "text" Program Header with dummy section (Kees Cook)  [Orabug: 31781680]  
  - bnxt: don't enable NAPI until rings are ready (Jakub Kicinski)  [Orabug: 31541567]  
  - bnxt_en: Setup default RSS map in all scenarios. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: init RSS table for Minimal-Static VF reservation (Edwin Peer)  [Orabug: 31541567]  
  - bnxt_en: fix HWRM error when querying VF temperature (Edwin Peer)  [Orabug: 31541567]  
  - bnxt_en: Fix possible crash in bnxt_fw_reset_task(). (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Fix PCI AER error recovery flow (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Check for zero dir entries in NVRAM. (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Don't query FW when netif_running() is false. (Pavan Chebbi)  [Orabug: 31541567]  
  - bnxt_en: Remove superfluous memset() (Li Heng)  [Orabug: 31541567]  
  - bnxt_en: Add support for 'ethtool -d' (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Switch over to use the 64-bit software accumulated counters. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Accumulate all counters. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Retrieve hardware masks for port counters. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Retrieve hardware counter masks from firmware if available. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Allocate additional memory for all statistics blocks. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Refactor statistics code and structures. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Use macros to define port statistics size and offset. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Update firmware interface to 1.10.1.54. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Remove PCIe non-counters from ethtool statistics (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Init ethtool link settings after reading updated PHY configuration. (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Fix AER reset logic on 57500 chips. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Re-enable SRIOV during resume. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Simplify bnxt_resume(). (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Fix return code to "flash_device". (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Call devlink_port_type_clear() in remove() (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Return -EAGAIN if fw command returns BUSY (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Register devlink irrespective of firmware spec version (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Refactor bnxt_dl_register() (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Improve bnxt_probe_phy(). (Michael Chan)  [Orabug: 31541567]  
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() (Paul E. McKenney)  [Orabug: 31474973]  
  - nvme: explicitly update mpath disk capacity on revalidation (Anthony Iliopoulos)  [Orabug: 31474973]  
  - nvme: fix possible deadlock when I/O is blocked (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet: fail outstanding host posted AEN req (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvmet: cleanups the loop in nvmet_async_events_process (David Milburn)  [Orabug: 31474973]  
  - nvme-fc: don't call nvme_cleanup_cmd() for AENs (Daniel Wagner)  [Orabug: 31474973]  
  - nvmet: fix memory leak when removing namespaces and controllers concurrently (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-pci: make sure write/poll_queues less or equal then cpu count (Weiping Zhang)  [Orabug: 31474973]  
  - nvme-fc: avoid gcc-10 zero-length-bounds warning (Arnd Bergmann)  [Orabug: 31474973]  
  - nvme-pci: avoid race between nvme_reap_pending_cqes() and nvme_poll() (Dongli Zhang)  [Orabug: 31474973]  
  - nvme-pci: dma read memory barrier for completions (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: fix "slimmer CQ head update" (Alexey Dobriyan)  [Orabug: 31474973]  
  - nvmet-rdma: fix double free of rdma queue (Israel Rukshin)  [Orabug: 31474973]  
  - nvmet-rdma: fix bonding failover possible NULL deref (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet: fix NULL dereference when removing a referral (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme: inherit stable pages constraint in the mpath stack device (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: fix possible crash in recv error flow (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: don't poll a non-live queue (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet-fc: fix typo in comment (James Smart)  [Orabug: 31474973]  
  - nvme-rdma: Replace comma with a semicolon (Israel Rukshin)  [Orabug: 31474973]  
  - nvme-fcloop: fix deallocation of working context (James Smart)  [Orabug: 31474973]  
  - nvme: cleanup namespace identifier reporting in nvme_init_ns_head (Christoph Hellwig)  [Orabug: 31474973]  
  - nvme: rename __nvme_find_ns_head to nvme_find_ns_head (Christoph Hellwig)  [Orabug: 31474973]  
  - nvme-tcp: Add warning on state change failure at nvme_tcp_setup_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme-rdma: Add warning on state change failure at nvme_rdma_setup_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Fix controller creation races with teardown flow (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Make nvme_uninit_ctrl symmetric to nvme_init_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Fix ctrl use-after-free during sysfs deletion (Israel Rukshin)  [Orabug: 31474973]  
  - nvme-pci: Re-order nvme_pci_free_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Remove unused return code from nvme_delete_ctrl_sync (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Use nvme_state_terminal helper (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: release ida resources (Max Gurtovoy)  [Orabug: 31474973]  
  - nvme: Add compat_ioctl handler for NVME_IOCTL_SUBMIT_IO (masahiro31.yamada@kioxia.com)  [Orabug: 31474973]  
  - nvmet-tcp: optimize tcp stack TX when data digest is used (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-fabrics: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31474973]  
  - nvme-multipath: do not reset on unknown status (John Meneghini)  [Orabug: 31474973]  
  - nvmet-rdma: allocate RW ctxs according to mdts (Max Gurtovoy)  [Orabug: 31474973]  
  - nvmet-rdma: Implement get_mdts controller op (Max Gurtovoy)  [Orabug: 31474973]  
  - nvmet: Add get_mdts op for controllers (Max Gurtovoy)  [Orabug: 31474973]  
  - nvme-pci: properly print controller address (Max Gurtovoy)  [Orabug: 31474973]  
  - nvme-tcp: break from io_work loop if recv failed (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: move send failure to nvme_tcp_try_send (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: optimize queue io_cpu assignment for multiple queue maps (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-pci: Simplify nvme_poll_irqdisable (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: Remove two-pass completions (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: Remove tag from process cq (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: slimmer CQ head update (Alexey Dobriyan)  [Orabug: 31474973]  
  - nvmet: check ncqr & nsqr for set-features cmd (Amit Engel)  [Orabug: 31474973]  
  - nvme: Check for readiness more quickly, to speed up boot time (Josh Triplett)  [Orabug: 31474973]  
  - nvme: log additional message for controller status (Rupesh Girase)  [Orabug: 31474973]  
  - nvme: code cleanup nvme_identify_ns_desc() (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvme: Don't deter users from enabling hwmon support (Jean Delvare)  [Orabug: 31474973]  
  - nvme: expose hostid via sysfs for fabrics controllers (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme: expose hostnqn via sysfs for fabrics controllers (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet-tcp: set SO_PRIORITY for accepted sockets (Wunderlich, Mark)  [Orabug: 31474973]  
  - nvme-tcp: Set SO_PRIORITY for all host sockets (Wunderlich, Mark)  [Orabug: 31474973]  
  - nvmet: check sscanf value for subsys serial attr (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvmet: make ctrl model configurable (Mark Ruijter)  [Orabug: 31474973]  
  - nvmet: make ctrl-id configurable (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvmet: configfs code cleanup (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvme: remove unused return code from nvme_alloc_ns (Edmund Nadolski)  [Orabug: 31474973]  
  - scsi: lpfc: Update lpfc version to 12.8.0.3 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix LUN loss after cable pull (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix validation of bsg reply lengths (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix oops when unloading driver while running mds diags (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Add missing misc_deregister() for lpfc_init() (Jing Xiangfeng)  [Orabug: 31793335]  
  - scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix FCoE speed reporting (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix typo in comment for ULP (Ferruh Yigit)  [Orabug: 31793335]  
  - scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix some function parameter descriptions (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Ensure variable has the same stipulations as code using it (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix-up formatting/docrot where appropriate (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Remove unused variable 'pg_addr' (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: NVMe remote port devloss_tmo from lldd (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Quieten some printks (Anton Blanchard)  [Orabug: 31793335]  
  - scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix inconsistent indenting (Colin Ian King)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.8.0.2 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Add blk_io_poll support for latency improvment (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Add support to display if adapter dumps are available (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Allow applications to issue Common Set Features mailbox command (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix language in 0373 message to reflect non-error message (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix kdump hang on PPC (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix shost refcount mismatch when deleting vport (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix stack trace seen while setting rrq active (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix oops due to overrun when reading SLI3 data (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix missing MDS functionality (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (Dick Kennedy)  [Orabug: 31793335]  
  - lpfc_debugfs: get rid of pointless access_ok() (Al Viro)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.8.0.1 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix MDS Diagnostic Enablement definition (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix noderef and address space warnings (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Remove unnecessary lockdep_assert_held calls (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Change default queue allocation for reduced memory consumption (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Remove re-binding of nvme rport during registration (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Maintain atomic consistency of queue_claimed flag (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: remove duplicate unloading checks (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Change default SCSI LUN QD to 64 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.8.0.0 (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix update of wq consumer index in lpfc_sli4_wq_release (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix scsi host template for SLI3 vports (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix lpfc overwrite of sg_cnt field in nvmefc_tgt_fcp_req (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix lockdep error - register non-static key (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: fix spelling mistake "Notication" -> "Notification" (Colin Ian King)  [Orabug: 31793335]  
  - scsi: lpfc: add RDF registration and Link Integrity FPIN logging (James Smart)  [Orabug: 31793335]  
  - scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Copyright updates for 12.6.0.4 patches (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.6.0.4 (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Clean up hba max_lun_queue_depth checks (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix coverity errors in fmdi attribute handling (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix compiler warning on frame size (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix release of hwq to clear the eq relationship (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix registration of ELS type support in fdmi (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Make lpfc_defer_acc_rsp static (YueHaibing)  [Orabug: 31793335]  
  - Linux 5.4.61 (Greg Kroah-Hartman)   
  - KVM: arm64: Only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is not set (Will Deacon)   
  - KVM: Pass MMU notifier range flags to kvm_unmap_hva_range() (Will Deacon)   
  - xen: don't reschedule in preemption off sections (Juergen Gross)   
  - mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible (Peter Xu)   
  - do_epoll_ctl(): clean the failure exits up a bit (Al Viro)   
  - epoll: Keep a reference on files added to the check list (Marc Zyngier)   
  - efi: add missed destroy_workqueue when efisubsys_init fails (Li Heng)   
  - powerpc/pseries: Do not initiate shutdown when system is running on UPS (Vasant Hegde)   
  - net: dsa: b53: check for timeout (Tom Rix)   
  - hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() (Haiyang Zhang)   
  - net: gemini: Fix missing free_netdev() in error path of gemini_ethernet_port_probe() (Wang Hai)   
  - net: ena: Prevent reset after device destruction (Shay Agroskin)   
  - bonding: fix active-backup failover for current ARP slave (Jiri Wiesner)   
  - ARM64: vdso32: Install vdso32 from vdso_install (Stephen Boyd)   
  - afs: Fix NULL deref in afs_dynroot_depopulate() (David Howells)   
  - RDMA/bnxt_re: Do not add user qps to flushlist (Selvin Xavier)   
  - Fix build error when CONFIG_ACPI is not set/enabled: (Randy Dunlap)   
  - efi: avoid error message when booting under Xen (Juergen Gross)   
  - kconfig: qconf: fix signal connection to invalid slots (Masahiro Yamada)   
  - kconfig: qconf: do not limit the pop-up menu to the first row (Masahiro Yamada)   
  - Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe" (Quinn Tran)   
  - kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode (Jim Mattson)   
  - kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode (Jim Mattson)   
  - vfio/type1: Add proper error unwind for vfio_iommu_replay() (Alex Williamson)   
  - ASoC: intel: Fix memleak in sst_media_open (Dinghao Liu)   
  - ASoC: msm8916-wcd-analog: fix register Interrupt offset (Srinivas Kandagatla)   
  - s390/ptrace: fix storage key handling (Heiko Carstens)   
  - s390/runtime_instrumentation: fix storage key handling (Heiko Carstens)   
  - bonding: fix a potential double-unregister (Cong Wang)   
  - can: j1939: add rxtimer for multipacket broadcast session (Zhang Changzhong)   
  - can: j1939: abort multipacket broadcast session when timeout occurs (Zhang Changzhong)   
  - can: j1939: cancel rxtimer on multipacket broadcast session complete (Zhang Changzhong)   
  - can: j1939: fix support for multipacket broadcast message (Zhang Changzhong)   
  - bonding: show saner speed for broadcast mode (Jarod Wilson)   
  - net: fec: correct the error path for regulator disable in probe (Fugang Duan)   
  - i40e: Fix crash during removing i40e driver (Grzegorz Szczurek)   
  - i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Przemyslaw Patynowski)   
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel)   
  - can: j1939: transport: j1939_simple_recv(): ignore local J1939 messages send not by J1939 stack (Oleksij Rempel)   
  - can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can() (Eric Dumazet)   
  - bpf: sock_ops sk access may stomp registers when dst_reg = src_reg (John Fastabend)   
  - ASoC: q6routing: add dummy register read/write function (Srinivas Kandagatla)   
  - ASoC: q6afe-dai: mark all widgets registers as SND_SOC_NOPM (Srinivas Kandagatla)   
  - spi: stm32: fixes suspend/resume management (Amelie Delaunay)   
  - netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra)   
  - ext4: don't allow overlapping system zones (Jan Kara)   
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)   
  - fs/signalfd.c: fix inconsistent return codes for signalfd4 (Helge Deller)   
  - alpha: fix annotation of io{read,write}{16,32}be() (Luc Van Oostenryck)   
  - xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init (Eiichi Tsukata)   
  - tools/testing/selftests/cgroup/cgroup_util.c: cg_read_strcmp: fix null pointer dereference (Gaurav Singh)   
  - media: camss: fix memory leaks on error handling paths in probe (Evgeny Novikov)   
  - virtio_ring: Avoid loop when vq is broken in virtqueue_poll (Mao Wenan)   
  - scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (Javed Hasan)   
  - cpufreq: intel_pstate: Fix cpuinfo_max_freq when MSR_TURBO_RATIO_LIMIT is 0 (Srinivas Pandruvada)   
  - swiotlb-xen: use vmalloc_to_page on vmalloc virt addresses (Boris Ostrovsky)   
  - ceph: fix use-after-free for fsc->mdsc (Xiubo Li)   
  - jffs2: fix UAF problem (Zhe Li)   
  - drm/ttm: fix offset in VMAs with a pg_offs in ttm_bo_vm_access (Felix Kuehling)   
  - xfs: fix inode quota reservation checks (Darrick J. Wong)   
  - svcrdma: Fix another Receive buffer leak (Chuck Lever)   
  - m68knommu: fix overwriting of bits in ColdFire V3 cache control (Greg Ungerer)   
  - MIPS: Fix unable to reserve memory for Crash kernel (Jinyang He)   
  - Input: psmouse - add a newline when printing 'proto' by sysfs (Xiongfeng Wang)   
  - media: vpss: clean up resources in init (Evgeny Novikov)   
  - rtc: goldfish: Enable interrupt in set_alarm() when necessary (Huacai Chen)   
  - media: budget-core: Improve exception handling in budget_register() (Chuhong Yuan)   
  - scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM (Bodo Stroesser)   
  - scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices (Stanley Chu)   
  - opp: Enable resources again if they were disabled earlier (Rajendra Nayak)   
  - kthread: Do not preempt current task if it is going to call schedule() (Liang Chen)   
  - drm/amd/display: fix pow() crashing when given base 0 (Krunoslav Kovac)   
  - drm/amd/display: Fix EDID parsing after resume from suspend (Stylon Wang)   
  - drm/amdgpu/display: use GFP_ATOMIC in dcn20_validate_bandwidth_internal (Daniel Kolesa)   
  - scsi: zfcp: Fix use-after-free in request timeout handlers (Steffen Maier)   
  - jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (zhangyi (F))   
  - ext4: fix checking of directory entry validity for inline directories (Jan Kara)   
  - RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request (Kaike Wan)   
  - mm, page_alloc: fix core hung in free_pcppages_bulk() (Charan Teja Reddy)   
  - mm: include CMA pages in lowmem_reserve at boot (Doug Berger)   
  - uprobes: __replace_page() avoid BUG in munlock_vma_page() (Hugh Dickins)   
  - kernel/relay.c: fix memleak on destroy relay channel (Wei Yongjun)   
  - romfs: fix uninitialized memory leak in romfs_dev_read() (Jann Horn)   
  - spi: Prevent adding devices below an unregistering controller (Lukas Wunner)   
  - can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated (Oleksij Rempel)   
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() (Oleksij Rempel)   
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (Mike Pozulp)   
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (Mike Pozulp)   
  - btrfs: add wrapper for transaction abort predicate (David Sterba)   
  - btrfs: return EROFS for BTRFS_FS_STATE_ERROR cases (Josef Bacik)   
  - btrfs: don't show full path of bind mounts in subvol= (Josef Bacik)   
  - btrfs: export helpers for subvolume name/id resolution (Marcos Paulo de Souza)   
  - bcache: avoid nr_stripes overflow in bcache_device_init() (Coly Li)   
  - khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter() (Hugh Dickins)   
  - khugepaged: khugepaged_test_exit() check mmget_still_valid() (Hugh Dickins)   
  - perf probe: Fix memory leakage when the probe point is not found (Masami Hiramatsu)   
  - gfs2: Never call gfs2_block_zero_range with an open transaction (Bob Peterson)   
  - gfs2: Improve mmap write vs. punch_hole consistency (Andreas Gruenbacher)   
  - drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (Chris Wilson)   
  - kbuild: support LLVM=1 to switch the default tools to Clang/LLVM (Masahiro Yamada)   
  - kbuild: replace AS=clang with LLVM_IAS=1 (Masahiro Yamada)   
  - kbuild: remove AS variable (Masahiro Yamada)   
  - kbuild: remove PYTHON2 variable (Masahiro Yamada)   
  - x86/boot: kbuild: allow readelf executable to be specified (Dmitry Golovin)   
  - net: wan: wanxl: use $(M68KCC) instead of $(M68KAS) for rebuilding firmware (Masahiro Yamada)   
  - net: wan: wanxl: use allow to pass CROSS_COMPILE_M68k for rebuilding firmware (Masahiro Yamada)   
  - Documentation/llvm: fix the name of llvm-size (Fangrui Song)   
  - Documentation/llvm: add documentation on building w/ Clang/LLVM (Nick Desaulniers)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.1.el8uek]
changelog:
  - nvme: multipath: round-robin: eliminate "fallback" variable (Martin Wilck)  [Orabug: 31821390]  
  - nvme: multipath: round-robin: fix single non-optimized path case (Martin Wilck)  [Orabug: 31821390]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.2.el8uek]
changelog:
  - net/packet: fix overflow in tpacket_rcv (Or Cohen)  [Orabug: 31866486]  {CVE-2020-14386} {CVE-2020-14386} 
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)  [Orabug: 31849529]  
  - uek-rpm: ol8: config-aarch64: add *_MEMORY_HOTPLUG (Mihai Carabas)  [Orabug: 31848212]  
  - block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava)  [Orabug: 31850340]  
  - block: Return blk_status_t instead of errno codes (Ritika Srivastava)  [Orabug: 31850340]  
  - kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini)  [Orabug: 31839184]  
  - virtio_vsock: Fix race condition in virtio_transport_recv_pkt (Jia He)  [Orabug: 31837274]  
  - net: virtio_vsock: Enhance connection semantics (Sebastien Boeuf)  [Orabug: 31837274]  
  - IB/mlx5: Expose RoCE accelerator counters (Avihai Horon)  [Orabug: 31840631]  
  - net/mlx5: Add RoCE accelerator counters (Leon Romanovsky)  [Orabug: 31840631]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.3.el8uek]
changelog:
  - xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895364]  {CVE-2020-14385} 
  - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation (Qu Wenruo)  [Orabug: 31899351]  
  - btrfs: fix RWF_NOWAIT write not failling when we need to cow (Filipe Manana)  [Orabug: 31899351]  
  - btrfs: Ensure we trim ranges across block group boundary (Qu Wenruo)  [Orabug: 31899340]  
  - btrfs: volumes: Use more straightforward way to calculate map length (Qu Wenruo)  [Orabug: 31899340]  
  - Btrfs: send, fix emission of invalid clone operations within the same file (Filipe Manana)  [Orabug: 31899298]  
  - Btrfs: send, allow clone operations within the same file (Filipe Manana)  [Orabug: 31899298]  
  - mmc: sdhci: Silence MMC warnings (Maxime Ripard)  [Orabug: 31898202]  
  - bcm2835-dma: Add support for per-channel flags (Phil Elwell)  [Orabug: 31898202]  
  - mmc: sdhci-iproc: Fix vmmc regulators on iProc (Phil Elwell)  [Orabug: 31898202]  
  - scsi: core: Register sysfs for SCSI workqueue (Bob Liu)  [Orabug: 31894419]  
  - scsi: iscsi: Change iSCSI workqueue max_active back to 1 (Bob Liu)  [Orabug: 31894419]  
  - scsi: iscsi: Register sysfs for iscsi workqueue (Bob Liu)  [Orabug: 31894419]  
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884231]  {CVE-2020-25285} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884150]  {CVE-2020-25284} 
  - padata: fix possible padata_works_lock deadlock (Daniel Jordan)  [Orabug: 31891481]  
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31845163]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31845163]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31845163]  
  - scsi: mpt3sas: A small correction in _base_process_reply_queue (Tomas Henzl)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix sync irqs (Tomas Henzl)  [Orabug: 31902837]  
  - scsi: mpt3sas: Detect tampered Aero and Sea adapters (Sreekanth Reddy)  [Orabug: 31902837]  
  - scsi: mpt3sas: Don't call disable_irq from IRQ poll handler (Tomas Henzl)  [Orabug: 31902837]  
  - scsi: mpt3sas: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 31902837]  
  - scsi: mpt3sas: Remove superfluous memset() (Li Heng)  [Orabug: 31902837]  
  - scsi: mpt3sas: Update driver version to 35.100.00.00 (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Postprocessing of target and LUN reset (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Add functions to check if any cmd is outstanding on Target and LUN (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Rename and export interrupt mask/unmask functions (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Cancel the running work during host reset (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Dump system registers for debugging (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Memset config_cmds.reply buffer with zeros (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix kdoc comments format (Damien Le Moal)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix set but unused variable (Damien Le Moal)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix spelling mistake (Flavio Suligoi)  [Orabug: 31902837]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [5.4.17-2036.100.4.el8uek]
changelog:
  - xfs: force writes to delalloc regions to unwritten (Darrick J. Wong)  [Orabug: 30787888]  
  - xfs: properly serialise fallocate against AIO+DIO (Dave Chinner)  [Orabug: 31366104]  
  - perf/x86/rapl: Add Ice Lake RAPL support (Thomas Tai)  [Orabug: 31766610]  
  - xfs: attach dquots and reserve quota blocks during unwritten conversion (Darrick J. Wong)  [Orabug: 31785972]  
  - netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872853]  {CVE-2020-25211} 
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880140]  
  - uek-rpm: streamline 4konly build (Dave Kleikamp)  [Orabug: 31891770]  
  - bnxt: correct warning: unused variable: 'rc' (John Donnelly)  [Orabug: 31907548]  
  - i40e: Correct warning: 'aq_ret' may be used uninitialized, (John Donnelly)  [Orabug: 31907631]  
  - uek-rpm: Add ovmapi.ko to uek6 nano_modules (Joe Jin)  [Orabug: 31908852]  
  - uek-rpm: config: Enable OVM API (Joe Jin)  [Orabug: 31908852]  
  - uek-rpm: Fix kernel-ueknano depmod warnings vhost_iotlb regmap-i2c (Vijayendra Suman)  [Orabug: 31916879]  
  - kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE (Muchun Song)  [Orabug: 31920526]  
  - scsi: page warning: 'page' may be used uninitialized. (John Donnelly)  [Orabug: 31920671]  
  - x86/speculation/taa: Add TAA_MITIGATION_IDLE mode (Patrick Colp)  [Orabug: 31921884]  
  - oracleasm: Access d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31927355]  
  - iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (Suravee Suthikulpanit)  [Orabug: 31931368]  
  - iommu/amd: Fix potential @entry null deref (Joao Martins)  [Orabug: 31931368]  
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931368]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.5.el8uek]
changelog:
  - uek-rpm: Fix integer test for 4k page size module signing (Dave Kleikamp)  [Orabug: 32021114]  
  - uek-rpm/kernel-uek.spec: Sign modules for 4k kernel (Vijay Kumar)  [Orabug: 32021114]  
  - hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989185]  {CVE-2020-25643} 
  - dm crypt: add flags to optionally bypass kcryptd workqueues (Ignat Korchagin)  [Orabug: 31998688]  
  - uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 32010302]  
  - geneve: add transport ports in route lookup for geneve (Mark Gray)  [Orabug: 32013938]  {CVE-2020-25645} 
  - nvmet: Disable keep-alive timer when kato is cleared to 0h (Amit Engel)  [Orabug: 31997181]  
  - KVM: nVMX: stop abusing need_vmcs12_to_shadow_sync for eVMCS mapping (Vitaly Kuznetsov)  [Orabug: 31986433]  
  - cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug (Daniel Jordan)  [Orabug: 31985221]  
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31979626]  
  - uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961115]  
  - certs: Add ability to preload revocation certs (Eric Snowberg)  [Orabug: 31961115]  
  - certs: Move load_system_certificate_list to a common function (Eric Snowberg)  [Orabug: 31961115]  
  - certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg)  [Orabug: 31961115]  {CVE-2020-26541} 
  - bcache: stop setting ->queuedata (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: pr_info() format clean up in bcache_device_init() (Coly Li)  [Orabug: 30210051]  
  - bcache: use delayed kworker fo asynchronous devices registration (Coly Li)  [Orabug: 30210051]  
  - bcache: check and adjust logical block size for backing devices (Mauricio Faria de Oliveira)  [Orabug: 30210051]  
  - bcache: configure the asynchronous registertion to be experimental (Coly Li)  [Orabug: 30210051]  
  - bcache: asynchronous devices registration (Coly Li)  [Orabug: 30210051]  
  - bcache: Convert pr_<level> uses to a more typical style (Joe Perches)  [Orabug: 30210051]  
  - bcache: remove redundant variables i and n (Colin Ian King)  [Orabug: 30210051]  
  - bcache: remove a duplicate ->make_request_fn assignment (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: pass the make_request methods to blk_queue_make_request (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: remove dupplicated declaration from btree.h (Coly Li)  [Orabug: 30210051]  
  - bcache: optimize barrier usage for atomic operations (Coly Li)  [Orabug: 30210051]  
  - bcache: optimize barrier usage for Rmw atomic bitops (Davidlohr Bueso)  [Orabug: 30210051]  
  - bcache: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 30210051]  
  - bcache: make bch_sectors_dirty_init() to be multithreaded (Coly Li)  [Orabug: 30210051]  
  - bcache: make bch_btree_check() to be multithreaded (Coly Li)  [Orabug: 30210051]  
  - bcache: add bcache_ prefix to btree_root() and btree() macros (Coly Li)  [Orabug: 30210051]  
  - bcache: move macro btree() and btree_root() into btree.h (Coly Li)  [Orabug: 30210051]  
  - bcache: remove macro nr_to_fifo_front() (Coly Li)  [Orabug: 30210051]  
  - bcache: Revert "bcache: shrink btree node cache after bch_btree_check()" (Coly Li)  [Orabug: 30210051]  
  - bcache: check return value of prio_read() (Coly Li)  [Orabug: 30210051]  
  - bcache: reap from tail of c->btree_cache in bch_mca_scan() (Coly Li)  [Orabug: 30210051]  
  - bcache: reap c->btree_cache_freeable from the tail in bch_mca_scan() (Coly Li)  [Orabug: 30210051]  
  - bcache: remove member accessed from struct btree (Coly Li)  [Orabug: 30210051]  
  - bcache: add code comments for state->pool in __btree_sort() (Coly Li)  [Orabug: 30210051]  
  - bcache: use read_cache_page_gfp to read the superblock (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: store a pointer to the on-disk sb in the cache and cached_dev structures (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: return a pointer to the on-disk sb from read_super (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: transfer the sb_page reference to register_{bdev,cache} (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: use a separate data structure for the on-disk super block (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: don't export symbols (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: remove the extra cflags for request.o (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: add idle_max_writeback_rate sysfs interface (Coly Li)  [Orabug: 30210051]  
  - bcache: add code comments in bch_btree_leaf_dirty() (Coly Li)  [Orabug: 30210051]  
  - bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (Coly Li)  [Orabug: 30210051]  
  - bcache: deleted code comments for dead code in bch_data_insert_keys() (Coly Li)  [Orabug: 30210051]  
  - bcache: add more accurate error messages in read_super() (Coly Li)  [Orabug: 30210051]  
  - bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (Guoju Fang)  [Orabug: 30210051]  
  - mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31965669]  
  - rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31933715]  
  - panic: move disabling iommu to after dump_stack() (John Donnelly)  [Orabug: 31916337]  
  - nbd_genl_status: null check for nla_nest_start (Navid Emamdoost)  [Orabug: 31972480]  {CVE-2019-16089} 
  - vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390} 
  - fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390} 
  - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Shung-Hsi Yu)  [Orabug: 31907969]  
  - PCI: pciehp: Reduce noisiness on hot removal (Lukas Wunner)  [Orabug: 30512596]  
  - kdump: update Documentation about crashkernel (Chen Zhou)  [Orabug: 31554906]  
  - arm64: kdump: add memory for devices by DT property linux, usable-memory-range (Chen Zhou)  [Orabug: 31554906]  
  - kdump: add threshold for the required memory (Chen Zhou)  [Orabug: 31554906]  
  - arm64: kdump: reimplement crashkernel=X (Chen Zhou)  [Orabug: 31554906]  
  - arm64: kdump: introduce some macroes for crash kernel reservation (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: move reserve_crashkernel[_low]() into crash_core.c (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: use macro CRASH_ADDR_LOW_MAX in functions reserve_crashkernel[_low]() (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: make the lower bound of crash kernel reservation consistent (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: move CRASH_ALIGN to 2M (Chen Zhou)  [Orabug: 31554906]  
  - block: allow 'chunk_sectors' to be non-power-of-2 (Mike Snitzer)  [Orabug: 31827023]  
  - block: use lcm_not_zero() when stacking chunk_sectors (Mike Snitzer)  [Orabug: 31827023]  
  - dm: fix comment in dm_process_bio() (Mike Snitzer)  [Orabug: 31827023]  
  - dm: fix bio splitting and its bio completion order for regular IO (Mike Snitzer)  [Orabug: 31827023]  
  - block: allow for_each_bvec to support zero len bvec (Ming Lei)  [Orabug: 31955136]  {CVE-2020-25641}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.6.1.el8uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040802]  {CVE-2020-8694} {CVE-2020-8695} 
  - KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov)  [Orabug: 32066585]  {CVE-2020-27152} {CVE-2020-27152} 
  - x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999339]  
  - x86/jump_label: Patch one site at a time (Boris Ostrovsky)  [Orabug: 31999339]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.6.el8uek]
changelog:
  - KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov)  [Orabug: 32066585]  {CVE-2020-27152} {CVE-2020-27152} 
  - x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999339]  
  - x86/jump_label: Patch one site at a time (Boris Ostrovsky)  [Orabug: 31999339]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.101.0.el8uek]
changelog:
  - hv_utils: drain the timesync packets on onchannelcallback (Vineeth Pillai)  [Orabug: 32152142]  
  - hv_utils: return error if host timesysnc update is stale (Vineeth Pillai)  [Orabug: 32152142]  
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Icelakex (Ankur Arora)  [Orabug: 32143850]  
  - x86/cpu/amd: enable X86_FEATURE_NT_GOOD on AMD Zen (Ankur Arora)  [Orabug: 32143850]  
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Broadwellx (Ankur Arora)  [Orabug: 32143850]  
  - mm, clear_huge_page: use clear_page_uncached() for gigantic pages (Ankur Arora)  [Orabug: 32143850]  
  - x86/clear_page: add clear_page_uncached() (Ankur Arora)  [Orabug: 32143850]  
  - x86/asm: add clear_page_nt() (Ankur Arora)  [Orabug: 32143850]  
  - perf bench: add memset_movnti() (Ankur Arora)  [Orabug: 32143850]  
  - x86/asm: add memset_movnti() (Ankur Arora)  [Orabug: 32143850]  
  - x86/cpuid: add X86_FEATURE_NT_GOOD (Ankur Arora)  [Orabug: 32143850]  
  - kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32137996]  
  - cifs: handle empty list of targets in cifs_reconnect() (Paulo Alcantara)  [Orabug: 32124750]  
  - cifs: get rid of unused parameter in reconn_setup_dfs_targets() (Paulo Alcantara)  [Orabug: 32124750]  
  - rds/ib: Fix: (rds: Deregister all FRWR mr with free_mr) (Manjunath Patil)  [Orabug: 32113472]  
  - net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32095959]  
  - uek-rpm: aarch64: increase CONFIG_NODES_SHIFT from 3 to 6 (Dave Kleikamp)  [Orabug: 32075923]  
  - rds: Restore MR use-once semantics (Håkon Bugge)  [Orabug: 31990092] [Orabug: 32072247]  
  - rds: Fix incorrect cmsg status and use-after-free (Håkon Bugge)  [Orabug: 32003078] [Orabug: 32072245]  
  - rds: Force ordering of {set,clear}_bit operating on m_flags (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - rds: Do not send canceled operations to the transport layer (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - rds: Introduce rds_conn_to_path helper (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "RDS: Drop the connection as part of cancel to avoid hangs" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: fix warning in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: Use correct conn when dropping connections due to cancel" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: prevent use-after-free of rds conn in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: Use bitmap to designate dropped connections" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "UEK6 compiler warning for /net/rds/send.c" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Thomas Gleixner)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Do not access uninitialized therm_work (Chuansheng Liu)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Arnd Bergmann)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Srinivas Pandruvada)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Optimize notifications of thermal throttle (Srinivas Pandruvada)  [Orabug: 32048971]  
  - ocfs2: fix remounting needed after setfacl command (Gang He)  [Orabug: 32042684]  
  - IB/mlx4: disable CQ time stamping (aru kolappan)  [Orabug: 32042517]  
  - net/rds: Refactor sendmsg ancillary data processing (Ka-Cheong Poon)  [Orabug: 32027845]  
  - Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021285]  {CVE-2020-12352} 
  - ima: Use ima_hash_algo for collision detection in the measurement list (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Calculate and extend PCR with digests in ima_template_entry (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Allocate and initialize tfm for each PCR bank (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Switch to dynamically allocated buffer for template digests (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Store template digest directly in ima_template_entry (Roberto Sassu)  [Orabug: 31973040]  
  - scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (James Smart)  [Orabug: 31598148]  
  - net/rds: Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32113840]  
  - A/A Bonding: Increase number and interval of GARPs sent by rdmaip (Sharath Srinivasan)  [Orabug: 32095766]  
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040802]  {CVE-2020-8694} {CVE-2020-8695}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.101.1.el8uek]
changelog:
  - uek-rpm: Enable Intel Speed Select Technology interface support (Somasundaram Krishnasamy)  [Orabug: 32161425]  
  - platform/x86: ISST: Increase timeout (Srinivas Pandruvada)  [Orabug: 32161425]  
  - platform/x86: ISST: Fix wrong unregister type (Srinivas Pandruvada)  [Orabug: 32161425]  
  - platform/x86: ISST: Allow additional core-power mailbox commands (Srinivas Pandruvada)  [Orabug: 32161425]  
  - IB/mlx4: Convert rej_tmout radix-tree to XArray (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Adjust delayed work when a dup is observed (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Add support for REJ due to timeout (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Fix starvation in paravirt mux/demux (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Separate tunnel and wire bufs parameters (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Add support for MRA (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Add and improve logging (Håkon Bugge)  [Orabug: 32136895]  
  - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (kiyin(尹亮))  [Orabug: 32131172]  {CVE-2020-25704} 
  - vt: keyboard, extend func_buf_lock to readers (Jiri Slaby)  [Orabug: 32122948]  {CVE-2020-25656} {CVE-2020-25656} 
  - vt: keyboard, simplify vt_kdgkbsent (Jiri Slaby)  [Orabug: 32122948]  {CVE-2020-25656} 
  - tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122725]  {CVE-2020-25668} 
  - NFSv4.2: Fix NFS4ERR_STALE error when doing inter server copy (Dai Ngo)  [Orabug: 31879682]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.101.2.el8uek]
changelog:
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187738]  {CVE-2020-28974} 
  - page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32177966]  
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176254]  {CVE-2020-28915} 
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176254]  {CVE-2020-28915} 
  - ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 32159053]  
  - net/rds: rds_ib_remove_one() accesses freed memory (Ka-Cheong Poon)  [Orabug: 32213896]  
  - hv_netvsc: make recording RSS hash depend on feature flag (Stephen Hemminger)  [Orabug: 32159973]  
  - hv_netvsc: record hardware hash in skb (Stephen Hemminger)  [Orabug: 32159973]  
  - RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 32005752]  
  - lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 32005752]  
  - arm64:uek/config: Enable ZONE_DMA config (Vijay Kumar)  [Orabug: 31970521]  
  - Revert "arm64/dts: Serial console fix for RPi4" (Vijay Kumar)  [Orabug: 31970521]  
  - uek-rpm: aarch64: enable CONFIG_ACPI_APEI_EINJ (Dave Kleikamp)  [Orabug: 32182237]  
  - NFSD: fix missing refcount in nfsd4_copy by nfsd4_do_async_copy (Dai Ngo)  [Orabug: 32177992]  
  - NFSD: Fix use-after-free warning when doing inter-server copy (Dai Ngo)  [Orabug: 32177992]  
  - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/pvcallsback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: add a new "late EOI" evtchn framework (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 32177543]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.102.0.el8uek]
changelog:
  - futex: Fix inode life-time issue (Peter Zijlstra)  [Orabug: 32233515]  {CVE-2020-14381} 
  - perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233352]  {CVE-2020-14351} 
  - intel_idle: Customize IceLake server support (Chen Yu)  [Orabug: 32218858]  
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210418]  
  - vhost scsi: fix lun reset completion handling (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: Add support for LUN resets. (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: add lun parser helper (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: fix cmd completion race (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: alloc cmds per vq instead of session (Mike Christie)  [Orabug: 32167069]  
  - vhost: Create accessors for virtqueues private_data (Eugenio Pérez)  [Orabug: 32167069]  
  - vhost: add helper to check if a vq has been setup (Mike Christie)  [Orabug: 32167069]  
  - scsi: sd: Allow user to configure command retries (Mike Christie)  [Orabug: 32167069]  
  - scsi: core: Add limitless cmd retry support (Mike Christie)  [Orabug: 32167069]  
  - scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Get sas_device objects using device's rphy (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Get device objects using sas_address & portID (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Update hba_port's sas_address & phy_mask (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  [Orabug: 32242279]  
  - icmp: randomize the global rate limiter (Eric Dumazet)  [Orabug: 32227958]  {CVE-2020-25705} 
  - perf/x86/intel/uncore: Add box_offsets for free-running counters (Kan Liang)  [Orabug: 32020885]  
  - perf/x86/intel/uncore: Factor out __snr_uncore_mmio_init_box (Kan Liang)  [Orabug: 32020885]  
  - perf/x86/intel/uncore: Add Ice Lake server uncore support (Kan Liang)  [Orabug: 32020885]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.102.0.2.el8uek]
changelog:
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569} 
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.0.el8uek]
changelog:
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337715]  
  - tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32321484]  
  - perf: Fix a kABI breakage in perf_event.h (Thomas Tai)  [Orabug: 32321484]  
  - perf/x86: Fix n_metric for cancelled txn (Peter Zijlstra)  [Orabug: 32321484]  
  - perf/x86: Fix n_pair for cancelled txn (Peter Zijlstra)  [Orabug: 32321484]  
  - perf/x86/intel: Check perf metrics feature for each CPU (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Support per-thread RDPMC TopDown metrics (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Support TopDown metrics on Ice Lake (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Use event_base_rdpmc for the RDPMC userspace support (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Add a macro for RDPMC offset of fixed counters (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Generic support for hardware TopDown metrics (Kan Liang)  [Orabug: 32321484]  
  - perf/core: Add a new PERF_EV_CAP_SIBLING event capability (Kan Liang)  [Orabug: 32321484]  
  - perf/core: Unify {pinned,flexible}_sched_in() (Peter Zijlstra)  [Orabug: 32321484]  
  - perf/x86/intel: Use switch in intel_pmu_disable/enable_event (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Keep LBR records unchanged in host context for guest usage (Like Xu)  [Orabug: 32321484]  
  - perf/x86/intel: Fix the name of perf METRICS (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Move BTS index to 47 (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Introduce the fourth fixed counter (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Name the global status bit in NMI handler (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Add constraint to create guest LBR event without hw counter (Like Xu)  [Orabug: 32321484]  
  - perf/x86/lbr: Add interface to get LBR information (Like Xu)  [Orabug: 32321484]  
  - perf/x86/core: Refactor hw->idx checks and cleanup (Like Xu)  [Orabug: 32321484]  
  - perf/x86/intel: Avoid unnecessary PEBS_ENABLE MSR access in PMI (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Provide stubs of KVM helpers for non-Intel CPUs (Sean Christopherson)  [Orabug: 32321484]  
  - partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302136]  
  - Revert "cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug" (Daniel Jordan)  [Orabug: 32295229]  
  - cpuset: fix race between hotplug work and later CPU offline (Daniel Jordan)  [Orabug: 32295229]  
  - uek-rpm: aarch64: update PMU configs for Altra (Dave Kleikamp)  [Orabug: 32290034]  
  - driver/perf: Add PMU driver for the ARM DMC-620 memory controller (Tuan Phan)  [Orabug: 32290034]  
  - perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon)  [Orabug: 32290034]  
  - perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon)  [Orabug: 32290034]  
  - perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 32290034]  
  - perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 32290034]  
  - perf: arm_dsu: Support DSU ACPI devices (Tuan Phan)  [Orabug: 32290034]  
  - arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work (James Morse)  [Orabug: 32290034]  
  - ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 32290034]  
  - iommu/arm-smmu-v3: Don't reserve implementation defined register space (Jean-Philippe Brucker)  [Orabug: 32290034]  
  - Revert "BACKPORT: perf: Add Arm CMN-600 DT binding" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: WIP: perf/arm-cmn: Add ACPI support" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: Add ARM DMC-620 PMU driver." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "Perf: arm-cmn: Allow irq to be shared." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_cmn: improve and make it work on 2P." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_dsu: Allow IRQ to be shared among devices." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_dsu: Support ACPI mode." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_dmc620: Update ACPI ID." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: avoid breaking KABI by reusing enum" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf/smmuv3: Allow sharing MMIO registers with the SMMU driver" (Dave Kleikamp)  [Orabug: 32290034]  
  - tty: Fix ->session locking (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660} 
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660} 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569} 
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251910]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.1.el8uek]
changelog:
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349203]  {CVE-2020-36158} 
  - x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32234812]  
  - add license checking to kABI checker (Dan Duval)  [Orabug: 32355206]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.2.el8uek]
changelog:
  - A/A Bonding: Fix a one-byte-off kmalloc (Håkon Bugge)  [Orabug: 32380824]  
  - netfilter: add and use nf_hook_slow_list() (Florian Westphal)  [Orabug: 32372530]  {CVE-2021-20177} 
  - net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372158]  
  - uek-rpm: Report removed symbols also during kabi check (Somasundaram Krishnasamy)  [Orabug: 32380061]  
  - uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32378206]  
  - A/A Bonding: Introduce selective interface name inclusion (Håkon Bugge)  [Orabug: 32350974]  
  - uek-rpm: add nfs_ssc to nano_modules (Calum Mackay)  [Orabug: 32346419]  
  - target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248035]  {CVE-2020-28374}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.3.1.el8uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.0.el8uek]
changelog:
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426610]  
  - thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424705]  
  - thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424705]  
  - thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424705]  
  - nfs: Fix security label length not being reset (Jeffrey Mitchell)  [Orabug: 32350989]  
  - ovl: check permission to open real file (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120} 
  - ovl: verify permissions in ovl_path_open() (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120} 
  - ovl: switch to mounter creds in readdir (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120} 
  - ovl: pass correct flags for opening real directory (Miklos Szeredi)  [Orabug: 32046372]  
  - A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381883]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.1.el8uek]
changelog:
  - vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471677]  
  - HID: hid-input: fix stylus battery reporting (Dmitry Torokhov)  [Orabug: 32464784]  {CVE-2020-0431} 
  - nbd: freeze the queue while we're adding connections (Josef Bacik)  [Orabug: 32447285]  {CVE-2021-3348} 
  - futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Don't enable IRQs unconditionally in put_pi_state() (Dan Carpenter)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422662]  
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422662]  
  - arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32301026]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.2.el8uek]
changelog:
  - tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)  [Orabug: 32498822]  
  - selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492277]  
  - selinux: allow labeling before policy is loaded (Jonathan Lebon)  [Orabug: 32492277]  
  - KVM: SVM: Initialize prev_ga_tag before use (Suravee Suthikulpanit)  [Orabug: 32478549]  
  - tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422451]  
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32422451]  
  - x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32422451]  
  - tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422451]  
  - uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353851]  
  - arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353851]  
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32171445]  
  - net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32492969]  
  - net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32492969]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.3.el8uek]
changelog:
  - config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32249042]  
  - net: Fix bridge enslavement failure (Ido Schimmel)  [Orabug: 32503298]  
  - inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32512814]  
  - KVM: arm64: pmu: Don't mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32499188]  
  - random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522087]  
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller)  [Orabug: 32522087]  
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller)  [Orabug: 32522087]  
  - crypto: jitter - SP800-90B compliance (Stephan Müller)  [Orabug: 32522087]  
  - crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522087]  
  - crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522087]  
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.5.el8uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.4.el8uek]
changelog:
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426609]  
  - thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424704]  
  - thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424704]  
  - thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424704]  
  - KVM: x86: Expose AVX512_FP16 for supported CPUID (Cathy Zhang)  [Orabug: 32424461]  
  - x86/kvm: Expose TSX Suspend Load Tracking feature (Cathy Zhang)  [Orabug: 32424461]  
  - x86: Expose SERIALIZE for supported cpuid (Paolo Bonzini)  [Orabug: 32424461]  
  - KVM: x86: Expose fast short REP MOV for supported cpuid (Zhenyu Wang)  [Orabug: 32424461]  
  - KVM: x86: Expose AVX512 VP2INTERSECT in cpuid for TGL (Zhenyu Wang)  [Orabug: 32424461]  
  - tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32424461]  
  - x86: Enumerate AVX512 FP16 CPUID feature flag (Kyung Min Park)  [Orabug: 32424461]  
  - EDAC/i10nm: Add Intel Sapphire Rapids server support (Qiuxu Zhuo)  [Orabug: 32424461]  
  - EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)  [Orabug: 32424461]  
  - EDAC: Add DDR5 new memory type (Qiuxu Zhuo)  [Orabug: 32424461]  
  - EDAC: Add three new memory types (Qiuxu Zhuo)  [Orabug: 32424461]  
  - x86/cpufeatures: Enumerate ENQCMD and ENQCMDS instructions (Fenghua Yu)  [Orabug: 32424461]  
  - x86/cpufeatures: Enumerate TSX suspend load address tracking instructions (Kyung Min Park)  [Orabug: 32424461]  
  - x86/cpufeatures: Add enumeration for SERIALIZE instruction (Ricardo Neri)  [Orabug: 32424461]  
  - x86/split_lock: Enable the split lock feature on Sapphire Rapids and Alder Lake CPUs (Fenghua Yu)  [Orabug: 32424461]  
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32424461]  
  - x86/cpufeatures: Add Architectural LBRs feature bit (Kan Liang)  [Orabug: 32424461]  
  - powercap: intel_rapl: add support for Sapphire Rapids (Zhang Rui)  [Orabug: 32424461]  
  - x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32424461]  
  - EDAC, {skx,i10nm}: Use CPU stepping macro to pass configurations (Qiuxu Zhuo)  [Orabug: 32424461]  
  - x86/cpu: Add a X86_MATCH_INTEL_FAM6_MODEL_STEPPINGS() macro (Borislav Petkov)  [Orabug: 32424461]  
  - powercap/intel_rapl: Convert to new X86 CPU match macros (Thomas Gleixner)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for TigerLake Mobile (Zhang Rui)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for JasperLake (Zhang Rui)  [Orabug: 32424461]  
  - x86/cpufeatures: Add support for fast short REP; MOVSB (Tony Luck)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for Cometlake desktop (Zhang Rui)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for CometLake Mobile (Zhang Rui)  [Orabug: 32424461]  
  - crypto: lib/chacha20poly1305 - define empty module exit function (Jason A. Donenfeld)  [Orabug: 32417868]  
  - A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381881]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.5.el8uek]
changelog:
  - vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471659]  
  - arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32454711]  
  - nbd: freeze the queue while we're adding connections (Josef Bacik)  [Orabug: 32447284]  {CVE-2021-3348} 
  - futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422661]  
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422661]  
  - rds: avoid crash on IB conn path shutdown prepare (Alan Maguire)  [Orabug: 32466763]  
  - mm/memcontrol: Increase threshold for draining per-cpu stocked bytes (Imran Khan)  [Orabug: 32314559]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.6.el8uek]
changelog:
  - selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492276]  
  - rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire)  [Orabug: 32490004]  
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32488537]  
  - uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353873]  
  - arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353873]  
  - rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire)  [Orabug: 32490030]  
  - inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32422895]  
  - net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32485133]  
  - net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32485133]  
  - vdpa/mlx5: allow Jumbo MTU config other than standard sized MTU (Si-Wei Liu)  [Orabug: 32480078]  
  - vdpa/mlx5: should exclude header length and fcs from mtu (Si-Wei Liu)  [Orabug: 32480078]  
  - vdpa/mlx5: Fix memory key MTT population (Eli Cohen)  [Orabug: 32480078]  
  - vdpa: Use simpler version of ida allocation (Parav Pandit)  [Orabug: 32480078]  
  - vdpa: Add missing comment for virtqueue count (Parav Pandit)  [Orabug: 32480078]  
  - vdpa/mlx5: Use write memory barrier after updating CQ index (Eli Cohen)  [Orabug: 32480078]  
  - vdpa: remove unnecessary 'default n' in Kconfig entries (Stefano Garzarella)  [Orabug: 32480078]  
  - vhost_vdpa: switch to vmemdup_user() (Tian Tao)  [Orabug: 32480078]  
  - vhost_vdpa: return -EFAULT if copy_to_user() fails (Dan Carpenter)  [Orabug: 32480078]  
  - vdpa: mlx5: fix vdpa/vhost dependencies (Randy Dunlap)  [Orabug: 32480078]  
  - vdpa/mlx5: Setup driver only if VIRTIO_CONFIG_S_DRIVER_OK (Eli Cohen)  [Orabug: 32480078]  
  - vdpa/mlx5: Fix failure to bring link up (Eli Cohen)  [Orabug: 32480078]  
  - vdpa/mlx5: Make use of a specific 16 bit endianness API (Eli Cohen)  [Orabug: 32480078]  
  - vdpasim: fix "mac_pton" undefined error (Laurent Vivier)  [Orabug: 32480078]  
  - vdpasim: allow to assign a MAC address (Laurent Vivier)  [Orabug: 32480078]  
  - vdpasim: fix MAC address configuration (Laurent Vivier)  [Orabug: 32480078]  
  - vdpa: handle irq bypass register failure case (Zhu Lingshan)  [Orabug: 32480078]  
  - vdpa_sim: Fix DMA mask (Laurent Vivier)  [Orabug: 32480078]  
  - vdpa/mlx5: Fix error return in map_direct_mr() (Jing Xiangfeng)  [Orabug: 32480078]  
  - vhost_vdpa: Return -EFAULT if copy_from_user() fails (Dan Carpenter)  [Orabug: 32480078]  
  - vdpa_sim: implement get_iova_range() (Jason Wang)  [Orabug: 32480078]  
  - vhost: vdpa: report iova range (Jason Wang)  [Orabug: 32480078]  
  - vdpa: introduce config op to get valid iova range (Jason Wang)  [Orabug: 32480078]  
  - vhost_vdpa: remove unnecessary spin_lock in vhost_vring_call (Zhu Lingshan)  [Orabug: 32480078]  
  - vhost_vdpa: Fix duplicate included kernel.h (Tian Tao)  [Orabug: 32480078]  
  - rds: CONFIG_RDS_DEBUG + tracepoints breaks rds build (Alan Maguire)  [Orabug: 32442487]  
  - tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422450]  
  - tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422450]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.7.el8uek]
changelog:
  - KVM: arm64: pmu: Don't mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32504832]  
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492108]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.8.el8uek]
changelog:
  - config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32522477]  
  - random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522086]  
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller)  [Orabug: 32522086]  
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller)  [Orabug: 32522086]  
  - crypto: jitter - SP800-90B compliance (Stephan Müller)  [Orabug: 32522086]  
  - crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522086]  
  - crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522086]  
  - Revert "RDMA/umem: Move to allocate SG table from pages" (John Donnelly)  [Orabug: 32481224]  
  - Revert "lib/scatterlist: Add support in dynamic allocation of SG table from pages" (John Donnelly)  [Orabug: 32481224]  
  - Revert "Maintainer: Fix build warning introduced in commit 99b99d76e6732" (John Donnelly)  [Orabug: 32481224]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.10.el8uek]
changelog:
  - scsi: target: core: Make completion affinity configurable (Mike Christie)  [Orabug: 32403502]  
  - target: flush submission work during TMR processing (Mike Christie)  [Orabug: 32403502]  
  - target iblock: add backend plug/unplug callouts (Mike Christie)  [Orabug: 32403502]  
  - target: fix backend plugging (Mike Christie)  [Orabug: 32403502]  
  - target: cleanup cmd flag bits (Mike Christie)  [Orabug: 32403502]  
  - tcm loop: use lio wq cmd submission helper (Mike Christie)  [Orabug: 32403502]  
  - tcm loop: use blk cmd allocator for se_cmds (Mike Christie)  [Orabug: 32403502]  
  - vhost scsi: use lio wq cmd submission helper (Mike Christie)  [Orabug: 32403502]  
  - target: add workqueue based cmd submission (Mike Christie)  [Orabug: 32403502]  
  - target: add gfp_t arg to target_cmd_init_cdb (Mike Christie)  [Orabug: 32403502]  
  - target: remove target_submit_cmd_map_sgls (Mike Christie)  [Orabug: 32403502]  
  - tcm_fc: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - xen-scsiback: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - vhost-scsi: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - usb gadget: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - sbp_target: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - tcm_loop: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - qla2xxx: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - ibmvscsi_tgt: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - srpt: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - target: break up target_submit_cmd_map_sgls (Mike Christie)  [Orabug: 32403502]  
  - target: rename transport_init_se_cmd (Mike Christie)  [Orabug: 32403502]  
  - target: drop kref_get_unless_zero in target_get_sess_cmd (Mike Christie)  [Orabug: 32403502]  
  - target: move t_task_cdb initialization (Mike Christie)  [Orabug: 32403502]  
  - scsi: tcm_loop: Allow queues, can_queue and cmd_per_lun to be settable (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Make state_list per CPU (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Drop sess_cmd_lock from I/O path (Mike Christie)  [Orabug: 32403502]  
  - scsi: qla2xxx: Move sess cmd list/lock to driver (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Remove TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie)  [Orabug: 32403502]  
  - scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Fix cmd_count ref leak (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Fix LUN ref count handling (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG case (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Rename target_setup_cmd_from_cdb() to target_cmd_parse_cdb() (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Fix NULL pointer dereference (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Initialize LUN in transport_init_se_cmd() (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Factor out a new helper, target_cmd_init_cdb() (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - mm: memcontrol: decouple reference counting from page accounting (Johannes Weiner)   
  - uek-rpm: add opbmc to nano-kernel (Eric Snowberg)  [Orabug: 32555675]  
  - rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire)  [Orabug: 32587016]  
  - rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire)  [Orabug: 32587016]  
  - rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire)  [Orabug: 32580940]  
  - hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)  [Orabug: 32576070]  
  - PCI: hotplug: Add module parameter to allow user control of LEDs (Thomas Tai)  [Orabug: 32556980]  
  - net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)   
  - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov)  [Orabug: 32531556]  
  - arm64/crash_core: fix TCR_EL1.T1SZ in vmcoreinfo (John Donnelly)  [Orabug: 32559514]  
  - x86/platform/uv: Fix UV4 hub revision adjustment (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Fix copied UV5 output archtype (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Drop last traces of uv_flush_tlb_others (Jiri Slaby)  [Orabug: 32527680]  
  - x86/tlb/uv: Add a forward declaration for struct flush_tlb_info (Borislav Petkov)  [Orabug: 32527680]  
  - x86/platform/uv: Recognize UV5 hubless system identifier (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Remove spaces from OEM IDs (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Fix missing OEM_TABLE_ID (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update Copyrights to conform to HPE standards (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update for UV5 NMI MMR changes (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update UV5 TSC checking (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update node present counting (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update UV5 MMR references in UV GRU (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Adjust GAM MMR references affected by UV5 updates (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update MMIOH references based on new UV5 MMRs (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Add and decode Arch Type in UVsystab (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Add UV5 direct references (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update UV MMRs for UV5 (Mike Travis)  [Orabug: 32527680]  
  - drivers/misc/sgi-xp: Adjust references in UV kernel modules (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Remove SCIR MMR references for UV systems (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Remove UV BAU TLB Shootdown Handler (Mike Travis)  [Orabug: 32527680]  
  - x86/apic/uv: Avoid unused variable warning (Arnd Bergmann)  [Orabug: 32527680]  
  - x86/platform/uv: Remove vestigial mention of UV1 platform from bios header (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for uv1 platform from uv_hub (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_bau (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_mmrs (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from x2apic_uv_x (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_tlb (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_time (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove the unused _uv_cpu_blade_processor_id() macro (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Unexport uv_apicid_hibits (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Remove _uv_hub_info_check() (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Simplify uv_send_IPI_one() (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Remove the UV*_HUB_IS_SUPPORTED macros (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Remove the uv_partition_coherence_id() macro (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/apic/uv: Remove code for unused distributed GRU mode (Steve Wahl)  [Orabug: 32527680]  
  - cper,edac,efi: Memory Error Record: bank group/address and chip id (Alex Kluver)  [Orabug: 32526741]  
  - edac,ghes,cper: Add Row Extension to Memory Error Record (Alex Kluver)  [Orabug: 32526741]  
  - perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info (Steve Wahl)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Store the logical die id instead of the physical die id. (Steve Wahl)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Generic support for the PCI sub driver (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister() (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_pmu_register() (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu() (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info() (Kan Liang)  [Orabug: 32526200]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.11.el8uek]
changelog:
  - mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang)  [Orabug: 32620155]  
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - drm/nouveau: bail out of nouveau_channel_new if channel init fails (Frantisek Hrbata)  [Orabug: 32591559]  {CVE-2020-25639} 
  - mm: support memblock alloc on the exact node for sparse_buffer_init() (Yunfeng Ye)  [Orabug: 32613823]  
  - mm/sparse.c: do not waste pre allocated memmap space (Michal Hocko)  [Orabug: 32613823]  
  - mm/sparse: consistently do not zero memmap (Vincent Whitchurch)  [Orabug: 32613823]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.12.el8uek]
changelog:
  - Revert "x86/platform/uv: Update UV MMRs for UV5" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Add UV5 direct references" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Add and decode Arch Type in UVsystab" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update MMIOH references based on new UV5 MMRs" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Adjust GAM MMR references affected by UV5 updates" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update UV5 MMR references in UV GRU" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update node present counting" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update UV5 TSC checking" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update for UV5 NMI MMR changes" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update Copyrights to conform to HPE standards" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Fix missing OEM_TABLE_ID" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Remove spaces from OEM IDs" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Recognize UV5 hubless system identifier" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/tlb/uv: Add a forward declaration for struct flush_tlb_info" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Drop last traces of uv_flush_tlb_others" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Fix copied UV5 output archtype" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Fix UV4 hub revision adjustment" (Jack Vogel)  [Orabug: 32651197]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.13.el8uek]
changelog:
  - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - selftests/bpf: Test access to bpf map pointer (Andrey Ignatov)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444} 
  - bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444}


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-24
changelog:
  - makedumpfile/arm64: Fix 'info->page_offset' calculation for both KASLR and non-KASLR cases
  - makedumpfile: Prepare paddr_to_vaddr() for arch-specific p2v conversion


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-26
changelog:
  - earlykdump: fix kexec fails to load the early kdump kernel
  - makedumpfile/x86_64: fix an unnecessary message with --mem-usage option


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-27
changelog:
  - Revert "kdumpctl, earlykdump: Don't use kexec_file_load when secure boot is enabled"
  - mkdumprd: refine regex on dropping mount options


author: EL Errata <el-errata_ww@oracle.com> - 2.0.17-28.0.1
changelog:
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-4
changelog:
  - kexec-kdump-howto.txt: Add document about encrypted targets
  - kexec-kdump-howto.txt: Add document about initramfs rebiuld
  - kexec-kdump-howto: Add note on setting correct value of kptr_restrict
  - doc: fix dead links in the file kexec-kdump-howto.txt
  - earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
  - Get rid of duplicated strip_comments when reading config
  - mkdumprd: Improve the config reading logic
  - kdumpctl: don't always rebuild when extra_modules is set
  - kdumpctl: follow symlink when checking for modified files
  - fadump: leverage kernel support to re-regisgter FADump


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-5
changelog:
  - kdumpctl: check for ssh path availability when rebuild
  - kdumpctl: Check kdump.conf for error when rebuild is called
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
  - aarch64/kdump.sysconfig: Make config options similar to x86_64


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-9
changelog:
  - kexec/arm64: Add support for handling zlib compressed (Image.gz) image
  - kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
  - kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
  - kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()


author: Edward Leung <edward.leung@oracle.com> - 2.0.19-12.0.1
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.1
changelog:
  - Don't execute final_action if failure_action terminates the system
  - dracut-module-setup.sh: Don't use squash module for fadump
  - Don't mount the dump target unless needed


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.2
changelog:
  - arm64: kdump: deal with a lot of resource entries in /proc/iomem
  - arm64: kexec: allocate memory space avoiding reserved regions
  - kexec: add variant helper functions for handling memory regions


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-6
changelog:
  -rhel-8.2.0, origin/rhel-8.2.0) Increase SECTION_MAP_LAST_BIT to 4
  - spec: move binaries from /sbin to /usr/sbin
  - As /etc/kdump.conf timestamp is updated do not compare it when doing rpm --verify
  - kdumpctl: make reload fail proof


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.20-14.0.1
changelog:
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - makedumpfile: update to 1.6.7, drop patches, now present in upstream code [Orabug: 30446702]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-28
changelog:
  - mkdumprd: Fix nfs detection in to_mount
  - Always wrap up call to dracut get_persistent_dev function
  - man: improve description about /etc/kdump/{pre.d,post.d}interface


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-30
changelog:
  - x86_64: enable the kexec file load by default
  - Revert "kdump-lib: switch to the kexec_file_load() syscall on x86_64 by default"


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-31
changelog:
  - ppc64/kdump: use kexec_file_load when secureboot is enabled
  - kdump_pre: make notes more precise
  - dracut-kdump.sh: exit shell when machine reboot
  - kdump.conf: fix a grammar issue
  - kdumpctl: detect modification of scripts by its directory's timestamp
  - module-setup.sh: suppress false alarm
  - kexec-tools.spec: make the existence of pre.d and post.d mandatory


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.0.20-34.0.1
changelog:
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-34.0.3
changelog:
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-34.2
changelog:
  - kdump-lib.sh: Remove is_atomic
  - Refactor kernel image and initrd detection code
  - early-kdump: Use consistent symbol link for kernel and initramfs
  - kdump-lib: strip grub device from kdump_bootdir
  - kdumpctl: fix driver change detection on latest Fedora


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.20-34.0.5.el8_u3.2
changelog:
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-38
changelog:
  - Don's try to restart dracut-initqueue if it's already failed
  - fadump-howto: update about 'nocma' and 'off' options for 'fadump=' parameter
  - dracut-module-setup.sh: use auto6 for ipv6
  - module-setup.sh: enable vlan on team interface
  - Fix rootfs detection in dump_fs
  - Remove RHEL-only patch: kexec-tools-2.0.18-makedumpfile-arm64-Add-support-for-ARMv8.2-LVA-52-bi.patch
  - Rebase to makedumpfile-1.6.8 (step1)


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-43
changelog:
  - Always include watchdog-modules
  - mkdumprd: Ensure kdumpbase is added
  - Move watchdog detect and install code to module-setup.sh
  - Add a helper to omit non-mandatory dracut module
  - Move some dracut module dependencies checks to module-setup.sh
  - Set watchdog's pretimeout to zero in kdump kernel
  - kdump-lib.sh: Use a more generic helper to detect omitted dracut module
  - Fix the watchdog drivers detection code
  - Add a helper for detecting watchdog drivers
  - Remove a redundant nfs check
  - kdumpctl: split the driver detection from fs dection function
  - kdump.service: use ConditionKernelCommandLine=crashkernel
  - Revert "Append both nofail and x-systemd.before to kdump mount target"
  - Revert "Don's try to restart dracut-initqueue if it's already failed"
  - Fix dump_fs mount point detection and fallback mount
  - kdump.conf: Update doc about core_collector for ssh target
  - Save the final failure information to log file if saving vmcore failed
  - Doc: Improve the kdump sysconfig document
  - kdumpctl: fix a variable expansion in check_fence_kdump_config()
  - Fedora 33 rhpkg build bug


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-44
changelog:
  - module-setup.sh: don't polute the namespace unnecessarily
  - module-setup.sh: don't source $dracutfunctions
  - logger: source the logger file individually
  - dracut-module-setup.sh: enable ForwardToConsole=yes in fadump mode


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-45
changelog:
  - origin/rhel-8.4.0) Revert "Revert "Append both nofail and x-systemd.before to kdump mount target""
  - kdump.conf: add ipv6 example for nfs and ssh dump
  - fix kdump failure of saving vmcore with the scp + ipv6 method


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-46.0.1
changelog:
  - Added the following patches from https://github.com/makedumpfile version 1.6.8++ [Orabug: 32851262]
  - Added Patch1009, orabug32851262-PATCH-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  - Added Patch1010, orabug32851262-PATCH-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch
  - Removed Patch701 which was in conflict with Patch1010
  - Remove -s setting for KEXEC_ARGS in kdump.sysconfig.aarch64 [Orabug: 3280449]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-46.0.1
changelog:
  - Added the following patches from https://github.com/makedumpfile version 1.6.8++ [Orabug: 32851262]
  - Added Patch1009, orabug32851262-PATCH-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  - Added Patch1010, orabug32851262-PATCH-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch
  - Removed Patch701 which was in conflict with Patch1010
  - Remove -s setting for KEXEC_ARGS in kdump.sysconfig.aarch64 [Orabug: 3280449]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-46.0.1
changelog:
  - Added the following patches from https://github.com/makedumpfile version 1.6.8++ [Orabug: 32851262]
  - Added Patch1009, orabug32851262-PATCH-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  - Added Patch1010, orabug32851262-PATCH-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch
  - Removed Patch701 which was in conflict with Patch1010
  - Remove -s setting for KEXEC_ARGS in kdump.sysconfig.aarch64 [Orabug: 3280449]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]
    (Sriharsha Yadagudde) [Orabug: 18905671]
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-51
changelog:
  - Stop reloading kdump service on CPU hotplug event for FADump
  - fadump: improve fadump-howto.txt about remote dump target setup


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-52
changelog:
  - Write to `/var/lib/kdump` if $KDUMP_BOOTDIR not writable
  - Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet
  - mkdumprd: display the absolute path of dump location in the check_user_configured_target()


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-53
changelog:
  - check for invalid physical address of /proc/kcore when making ELF dumpfile
  - check for invalid physical address of /proc/kcore when finding max_paddr
  - fix format issue in find_online_znet_device
  - check the existence of /sys/bus/ccwgroup/devices before trying to find online network device
  - kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-54
changelog:
  - kdump/ppc64: rebuild initramfs image after migration
  - Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
  - kdump.sysconfig.s390: Remove "prot_virt" from kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-50
changelog:
  - rd.route should use the name from kdump_setup_ifname
  - get kdump ifname once in kdump_install_netdev


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-57.0.3
changelog:
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - makedumpfile: Add support for newer kernels up to v5.12 [Orabug: 33250117]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-60
changelog:
  - fadump-init: clean up mount points properly
  - fadump: kdumpctl should check the modules used by the fadump initramfs
  - fadump: isolate fadump initramfs image within the default one
  - mkdumprd: Use xz for squash image compression


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-66
changelog:
  - kdump/ppc64: suppress the error message "Could not find a registered notification tool" from servicelog_notify
  - Enable zstd compression for makedumpfile in kexec-tools.spec


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.20-68.0.1
changelog:
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]


author: Brian Maly <brian.maly@oracle.com> - 2.0.20-68.0.2
changelog:
  - rebase makdumpfile to version 1.7.1 [Orabug: 34125577] [Orabug: 34105778]
  - add requires for virt-what [Orabug: 34015178]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-69
changelog:
  - s390: add support for --reuse-cmdline
  - use slurp_proc_file() in get_command_line()
  - add slurp_proc_file()
  - s390: use KEXEC_ALL_OPTIONS
  - s390: add variable command line size
  - util_lib/elf_info: harden parsing of printk buffer
  - print error when reading with unsupported compression
  - use cycle detection when parsing the prink log_buf
  - use pointer arithmetics for dump_dmesg
  - add generic cycle detection


author: Pingfan Liu <piliu@redhat.com> - 2.0.24-1
changelog:
  - kdumpctl: sync the $TARGET_INITRD after rebuild
  - Avoid false-positive mem_section validation with vmlinux
  - Rebase kexec-tools to 2.0.24
  - Rebase makedumpfile to 1.7.1


author: Pingfan Liu <piliu@redhat.com> - 2.0.24-6
changelog:
  - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
  - kdump-lib: attempt to fix BOOT_IMAGE detection
  - kdump-lib: change how ostree based systems are detected
  - kdump-lib: clear up references to Atomic/CoreOS


author: Brian Maly <brian.maly@oracle.com> - 2.0.24-6.0.1
changelog:
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-2
changelog:
  - mkdumprd: Improve error messages on non-existing NFS target directories
  - fadump: avoid non-debug kernel use for fadump case


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-3
changelog:
  - kdump.conf: use a simple generator script to maintain
  - Reduce kdump memory consumption by not letting NetworkManager manage unneeded network interfaces


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-4
changelog:
  - Don't check fs modified when dump target is lvm2 thinp
  - Add dependency of dracut lvmthinpool-monitor module
  - lvm.conf should be check modified if lvm2 thinp enabled
  - Add lvm2 thin provision dump target checker
  - Fix the sync issue for dump_fs


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-5
changelog:
  dracut-module-setup: Fix invalid rd.znet command line entry
   dracut-module-setup: Fix persistent nic name on s390


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-6
changelog:
  - dracut-module-setup.sh: skip installing driver for the loopback interface
  - Reduce kdump memory consumption by only installing needed NIC drivers


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-8
changelog:
  - mkdumprd: Use the correct syntax to redirect the stderr to null
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS
  - Add NICs that handle DNS queries to the allowlist


author: EL Errata <el-errata_ww@oracle.com> - 2.0.26-8.0.1
changelog:
  - Backport of upstream crash hotplug support [Orabug: 35884454]
  - Drop kexec-tools-2.0.25-makedumpfile-sadump-fix-failure-of-reading-memory-when-5-le.patch
  - Insert new udev rules for crash hotplug into 98-kexec.rules
  - sadump: fix failure of reading memory when 5-level paging is enabled
  - Update UEK reserved sizes [Orabug: 35224510]
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: Brian Maly <brian.maly@oracle.com> - 2.0.26-8.0.2
changelog:
  - Rebase makedumpfile to 1.7.4 [Orabug: 36157739]
  - kdumpctl check if FIPS is enabled [Orabug: 35982140]


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-11
changelog:
  - powerpc: update kdumpctl to load kernel signing key for fadump
  - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-13
changelog:
  - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking


author: Darren Archibald <darren.archibald@oracle.com> - 2.0.28-1.0.3
changelog:
  - Increase crashkernel reservation for aarch64 [Orabug: 35887460]
  - kdumpctl check if FIPS is enabled [Orabug: 35982140]
  - Backport of upstream crash hotplug support [Orabug: 35884454]
  - Drop kexec-tools-2.0.25-makedumpfile-sadump-fix-failure-of-reading-memory-when-5-le.patch
  - Insert new udev rules for crash hotplug into 98-kexec.rules
  - sadump: fix failure of reading memory when 5-level paging is enabled
  - Update UEK reserved sizes [Orabug: 35224510]
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: Darren Archibald <darren.archibald@oracle.com> - 2.0.28-1.0.5
changelog:
  - Fix KEXEC_KERNEL_CHECK IMA rule & valid PE signature regression [Orabug: 36560887]
  - Increase crashkernel reservation for aarch64 [Orabug: 35887460]
  - kdumpctl check if FIPS is enabled [Orabug: 35982140]
  - Backport of upstream crash hotplug support [Orabug: 35884454]
  - Drop kexec-tools-2.0.25-makedumpfile-sadump-fix-failure-of-reading-memory-when-5-le.patch
  - Insert new udev rules for crash hotplug into 98-kexec.rules
  - sadump: fix failure of reading memory when 5-level paging is enabled
  - Update UEK reserved sizes [Orabug: 35224510]
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: Darren Archibald <darren.archibald@oracle.com> - 2.0.28-1.0.6
changelog:
  - Add kdump-shutdown-sysctl.service to ensure shutdown is dumpable [Orabug: 36990863]
  - Fix KEXEC_KERNEL_CHECK IMA rule & valid PE signature regression [Orabug: 36560887]
  - Increase crashkernel reservation for aarch64 [Orabug: 35887460]
  - kdumpctl check if FIPS is enabled [Orabug: 35982140]
  - Backport of upstream crash hotplug support [Orabug: 35884454]
  - Drop kexec-tools-2.0.25-makedumpfile-sadump-fix-failure-of-reading-memory-when-5-le.patch
  - Insert new udev rules for crash hotplug into 98-kexec.rules
  - sadump: fix failure of reading memory when 5-level paging is enabled
  - Update UEK reserved sizes [Orabug: 35224510]
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: Darren Kenny <darren.kenny@oracle.com> - 2.0.31-1.0.2
changelog:
  - Fix failure to trigger kdump environment on panic [Orabug: 38537007]
  - Handle building for kernels without KEXEC_LOAD_DEBUG flag [Orabug: 38551849]


author: Harshvardhan Jha <harshvardhan.j.jha@oracle.com> - 2.0.31-1.0.5
changelog:
  - kdump: add iscsi driver injection, ipv6 network-legacy omission, and fix iscsi srcaddr parsing [Orabug: 37836073]


author: David Howells <dhowells@redhat.com> - 1.5.9-1
changelog:
  - Add manpages for get_persistent.
  - Fix memory leaks in keyctl_describe/read/get_security_alloc().
  - Use keyctl_describe_alloc in dump_key_tree_aux rather than open coding it.
  - Exit rather than returning from act_xxx() functions.
  - Fix memory leak in dump_key_tree_aux.
  - Only get the groups list if we need it.
  - Don't trust sscanf's %n argument.
  - Use the correct path macros in the specfile.
  - Avoid use realloc when the memory has no content.
  - Fix a bunch of issues in key.dns_resolver.
  - Fix command table searching in keyctl utility.
  - Fix a typo in the permissions mask constants.
  - Improve the keyctl_read manpage.
  - Add man7 pages describing various keyrings concepts.


author: David Howells <dhowells@redhat.com> - 1.5.10-1
changelog:
  - Include sys/types.h in keyutils.h.
  - The dns resolver needs limits.h.
  - Overhaul of all manual pages.
  - Some manual pages moved to Linux man-pages project.
  - Add Diffie-Helman keyctl function.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-5
changelog:
  - weak-modules: handle versions with + and other special regex symbols
  - weak-modules: fix misleading message when cannot find dracut.
    Resolves: rhbz#1609372.


author: Eugene Syromiatnikov <esyr@redhat.com> - 25-6
changelog:
  - weak-modules: check also for /lib/modules/$krel/symvers.gz as a possible
    symvers file path.
    Resolves: rhbz#1614119.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-7
changelog:
  - weak-modules: use is_kernel_installed wrapper in update_modules_for_krel.
  - weak-modules: more abstract symvers search implementation.
  - weak-modules: use additional paths for System.map file.
    Resolves: rhbz#1621306.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-8
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1622990.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-10
changelog:
  - weak-modules: group modules on add-kernel
  - weak-modules: do not make groups if there are no extra modules
    Resolves: rhbz#1649211


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: EL Errata <el-errata_ww@oracle.com> - 25-20.0.1
changelog:
  - weak-modules: Fix add_kernel to handle suffix [Orabug: 34623248] (Todd Vierling)
  - add weak-modules patch for [Orabug: 26672773]


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.102-53
changelog:
  - Continued converting the VDO device to conform to the DM convention of
    not issuing I/O while suspended.
    - Resolves: rhbz#1659303
  - Added more rate limiting of error logging in both the kvdo and uds
    modules in order to avoid soft-lockups on newer kernels.
    - Resolves: rhbz#1703243
  - Eliminated the passing of addresses of unaligned fields in packed
    - Resolves: rhbz#1718058


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.134-56
changelog:
  - Finished converting the VDO device to conform to the DM convention of not
    issuing I/O while suspended.
  - Resolves: rhbz#1659303
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
  - Resolves: rhbz#1703621
  - Fixed a bug which could cause segfaults when running the vdostatus
    command.
  - Resolves: rhbz#1669960
  - Eliminated a backtrace from the error logged when creating a VDO device
    with an erroneous physical size in the table line.
  - Resolves: rhbz#1717435
  - Fixed a possible use-after-free of the UDSConfiguration.
  - Resolves: rhbz#1653802
  - Made VDO a singleton device because multi-segment devices containing a
    VDO have a number of issues.
  - Resolves: rhbz#1725077
  - Converted the VDO device to conform to the DM convention of not issuing
    writes from the constructor.
  - Resolves: rhbz#1669086


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.138-56
changelog:
  - Fixed a crash on allocation failure and a use-after-free race introduced by
    the changes to avoid issuing I/O while suspended.
  - Resolves: rhbz#1659303


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.117-63
changelog:
  - Fixed a bug which would cause the UDS index to be perceived as corrupt
    when a VDO volume is moved to a system with a different endianness.
  - Resolves: rhbz#1745211
  - Modified UDS index rebuild to be interruptible so that shutting down a
    VDO whose index is rebuilding need not wait for the index rebuild to
    complete.
  - Resolves: rhbz#1737639
  - Prevented two VDO devices from being started on the same storage.
  - Resolves: rhbz#1725052
  - Fixed rare races which could result in VDO issuing I/O while suspended.
  - Resolves: rhbz#1766358
  - Fixed crashes when re-suspending a VDO after it had been resumed.
  - Resolves: rhbz#1765253
  - Made async mode ACID. Added async-unsafe mode to preserve the performance of
    the old implementation.
  - Resolves: rhbz#1657301


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.91-73
changelog:
  - Removed unused UDS bio statistics.
  - Resolves: rhbz#1827762
  - Removed support for old kernels.
  - Resolves: rhbz#1827762
  - Fixed Coverity errors.
  - Resolves: rhbz#1827763
  - Improved the error message when slab journal locks overflow.
  - Resolves: rhbz#1827761
  - Fixed a bug which could result in VDO issuing I/O while suspended.
  - Resolves: rhbz#1824789
  - Fixed a rare double-enqueue bug in the recovery journal.
  - Resolves: rhbz#1824802
  - Modified VDO to not allocate an index if the VDO device is started
    with deduplication disabled.
  - Resolves: rhbz#1755448
  - Nodified VDO to not log spurious journal lock warnings when cleaning up
    write requests which failed due to the VDO going read-only.
  - Resolves: rhbz#1840455


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.107-73
changelog:
  - Fixed a bug which can cause a soft lockup if users interrupt processes
    waiting on dm-setup commands.
  - Resolves: rhbz#1844651
  - Fixed a rare race which could cause a suspend of a VDO device to fail.
  - Resolves: rhbz#1847747


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.107-74
changelog:
  - Updated dependencies to prevent installing kernel-rt incorrectly.
  - Resolves: rhbz#1811923
  - Bumped requirement for new 4.18 kernel
  - Relates: rhbz#1812069


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.114-74
changelog:
  - Fixed an index bug which can cause vdo stop to hang on systems with many
    cores.
  - Resolves: rhbz#1791056
  - Fixed a bug where VDO would ignore errors from empty flush bios.
  - Resolves: rhbz#1858363


author: - Andy Walsh <awalsh@redhat.com> - 6.2.4.14-74
changelog:
  - Fixed a bug which causes the UDS index to consume an excessive
    number of CPU cycles when the VDO device is idle.
  - Resolves: rhbz#1870660


author: - Andy Walsh <awalsh@redhat.com> - 6.2.4.26-74
changelog:
  - Modified physical growth to validate the new VDO size against the size of
    the underlying storage.
  - Resolves: rhbz#1732922
  - Fixed issues which prevented lvrename from working on lvm managed
    VDO devices.
  - Resolves: rhbz#1888419


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.41-78
changelog:
  - Fixed bugs in reading the UDS index of a VDO volume which was converted
    to LVM.
  - Resolves: rhbz#1928284


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.62-79
changelog:
  - Fixed chapter computation for a converted sparse index.
  - Resolves: rhbz#1965516
  - Fixed invalidation of converted chapters.
  - Resolves: rhbz#1966818
  - Removed extraneous fields from the super block of a converted index.
  - Resolves: rhbz#1965546
  - Fixed calculation of the number of expiring chapters in a converted
    index.
  - Resolves: rhbz#1975546
  - Fixed bugs rebuilding a converted index.
  - Resolves: rhbz#1966824


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.65-79
changelog:
  - Removed unneeded allocations from the previous fixes for rebuilding
    a converted index.
  - Resolves: rhbz#1966824


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.72-79
changelog:
  - Fixed a bug which could result in the UDS index issuing I/O while
    suspended.
  - Resolves: rhbz#1990180


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.3-83
changelog:
  - Adjusted kernel dependencies to grab the right packages.
  - Resolves: rhbz#2011426
  - Rebuilt for latest kernel.
  - Relates: rhbz#2000909


author: - Andy Walsh <awalsh@redhat.com> - 6.2.7.17-86
changelog:
  - Fixed bug which could result in empty flushes being issued to the storage
    below vdo while suspended.
  - Resolves: rhbz#2013056
  - Fixed syntax mismatch which prevented lvm from being able to configure a
    512MB UDS index.
  - Resolves: rhbz#2073203
  - Fixed a race handling timeouts of dedupe index queries.
  - Resolves: rhbz#2092075


author: - Andy Walsh <awalsh@redhat.com> - 6.2.8.1-87
changelog:
  - Fixed a bug which could produce a deadlock after multiple saves and resumes
    of a vdo.
  - Resolves: rhbz#2109047


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 6.2.8.7-88
changelog:
  - Fixed bug in read-only rebuild when the logical size of the volume is an
    exact multiple of 821 4K blocks.
  - Resolves: rhbz#2166131


author: Eugene Syromiatnikov <esyr@redhat.com> 1.10.0_dup8.1-1
changelog:
  - 9158390ccae759c2c0221de6e0c9541375a480f6
  - bnxt_en kernel module for Driver Update Program
  - Resolves: #bz1802054


author: Eugene Syromiatnikov <esyr@redhat.com> 0.8_4.18.0_80.23_dup8.0-3
changelog:
  - 1d6a0fb6a4ad99d22c0a6e537e3d408b683aa60d
  - btusb kernel module for Driver Update Program
  - Resolves: #bz1755922


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - cfg80211 kernel module for Driver Update Program
  - Resolves: #bz2051885, #bz2051886


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-2
changelog:
  - Bump release due to "Package build kmod-redhat-cfg80211-4.18.0_348_dup8.5-1.el8_5
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 0.8.2_k_dup8.2-1
changelog:
  - afe1694503958c189ab98273de137c65bc3909f8
  - ice kernel module for Driver Update Program
  - Resolves: #bz1875784


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0.210_dup8.2-1
changelog:
  - 2f22e260c6b75f2acb86bd91292dc8c66f56c481
  - ionic kernel module for Driver Update Program
  - Resolves: #bz1851940


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0.210_dup8.2-2
changelog:
  - Bump release due to "Package build kmod-redhat-ionic-4.18.0.210_dup8.2-1.el8_2
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_107_dup8.0-5
changelog:
  - e67217ec68636d7570e69bab9e3b1ed1728b8292
  - iwlwifi kernel module for Driver Update Program
  - Resolves: #bz1755919


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - mac80211 kernel module for Driver Update Program
  - Resolves: #bz2051885, #bz2051886


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-2
changelog:
  - Bump release due to "Package build kmod-redhat-mac80211-4.18.0_348_dup8.5-1.el8_5
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 5.0_0_dup8.2-1
changelog:
  - 86de78c2e6f431762836a4ea5891f891bc0fdcb4
  - mlx5_core kernel module for Driver Update Program
  - Resolves: #bz1889733


author: Eugene Syromiatnikov <esyr@redhat.com> 5.0_0_dup8.2-2
changelog:
  - Bump release due to "Package build kmod-redhat-mlx5_core-5.0_0_dup8.2-1.el8_2
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 35.101.00.00_dup8.3-1
changelog:
  - bfcc924fa05e36abe7a039ac5ec2be581e20c288
  - mpt3sas kernel module for Driver Update Program
  - Resolves: #bz1915214


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_363_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - mt7921 kernel module for Driver Update Program
  - Resolves: #bz2051885


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_363_dup8.5-2
changelog:
  - Bump release due to "Package build kmod-redhat-mt7921-4.18.0_363_dup8.5-1.el8_5
    kept gated because not onboarded to gating".


author: EL Errata <el-errata_ww@oracle.com> - 2.0.8-1.3.0.1
changelog:
  * Mon Mar 01 2021 Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-1.3
  - Replace "and" with "with" in pre-4.18.0-240.14.1.el8_3 kernel dependency
    to match it more precisely (it passes when both post-4.18.0-240.14.1.el8_3
    and pre-4.18.0-240.el8 kernels installed otherwise).


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-3
changelog:
  - Add "Provides: oracleasm" and "Provides: oracleasm-kmod".
  - Dropping "0001-oracleasm-driver-replace-fs_context-with-mount_pseud.patch".


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-18.2
changelog:
  - Add Obsoletes: tags for 8.4.z kernel-specific sub-packages (RHEL-76082).
  - Rebuild against kernel-4.18.0-553.el8_10.


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_363_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - rtw89 kernel module for Driver Update Program
  - Resolves: #bz2051886


author: Nishant Nayan <nishant.nayan@oracle.com> - 1.18.2-14.0.1
changelog:
  - Try harder to avoid password change replay errors [Orabug: 33609767]
  - Reverting the initial fix as this fix is MIT approved.
  - Initial fix was to toggle between udp and tcp using change_pw_no_udp option.


author: Julien Rische <jrische@redhat.com> - 1.18.2-21
changelog:
  - Backport fix of memory use after free during libkrad cleanup
  - Backport support for larger RADIUS attributes in libkrad
  - Resolves: rhbz#2103125


author: Julien Rische <jrische@redhat.com> - 1.18.2-27
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27250
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27244
  - Make TCP waiting time configurable
    Resolves: RHEL-17131


author: Julien Rische <jrische@redhat.com> - 1.18.2-29
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45398 RHEL-45386


author: Julien Rische <jrische@redhat.com> - 1.18.2-30
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-50253
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-17616


author: Julien Rische <jrische@redhat.com> - 1.18.2-31
changelog:
  - Prevent overflow when calculating ulog block size (CVE-2025-24528)
    Resolves: RHEL-78248
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56060


author: Julien Rische <jrische@redhat.com> - 1.18.2-32
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-86786
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88049
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82648


author: Julien Rische <jrische@redhat.com> - 1.18.2-33
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-109220
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-93333


author: Julien Rische <jrische@redhat.com> - 1.18.2-34
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171589 RHEL-171594


author: Robbie Harwood <rharwood@redhat.com> - 1.18-1
changelog:
  - New upstream version (1.18)
  - Resolves: #1802334
  - Resolves: #1820311
  - Resolves: #1791062
  - Resolves: #1784655


author: Robbie Harwood <rharwood@redhat.com> - 1.18.2-3
changelog:
  - Match Heimdal behavior for channel bindings
  - Code hygiene + test stability fix included
  - Resolves: #1840518


author: Cestmir Kalina <ckalina@redhat.com> - 1.1-1
changelog:
  - Replace the Python interpreter path to RHEL8 compliant path.
  - Related: #1633691
  - Resolves: #1637594


author: Cestmir Kalina <ckalina@redhat.com> - 1.3-1
changelog:
  - Resolves: #1642134 Error restrict bugs to groups without permission while
    trying to submit RHEL8 symbols
  - New ksc reports will no longer be submitted under redhat bugzilla group.
  - At least one bugzilla group must be specified by a ksc user, otherwise ksc
    will terminate with an error.
  - Version bump to 1.3


author: Cestmir Kalina <ckalina@redhat.com> - 1.4-1
changelog:
  - Resolves: #1643187 ksc manpage lies -k can only be specified once
  - Resolves: #1645335 FILE is shown in ksc man page but no explain or effect
  - Support for multiple -k arguments added
  - Man page reworded to match ksc behaviour


author: Čestmír Kalina <ckalina@redhat.com> - 1.5-1
changelog:
  - Resolves: #1647528 ksc add feature to copy justifications between ksc...
  - Resolves: #1648026 ksc add a non-processed .ko file
  - Resolves: #1647974 piped input causes ksc to fail when asking for user input
  - Add support for justification carry over.
  - Add support for symbol filtering using -K.
  - Fix input problems when piping through to ksc.
  - Extend manpage with EXAMPLES section.
  - Version bump fo 1.5.


author: Čestmír Kalina <ckalina@redhat.com> - 1.6-1
changelog:
  - Resolves: #1729039 Extend ksc output to include environment metadata
  - Add modinfo vermagic field to the output.
  - Add kmod (provides modinfo) to requires.


author: Čestmír Kalina <ckalina@redhat.com> - 1.6-2
changelog:
  - Resolves: #1729039 Extend ksc output to include environment metadata
  - (OSCI) Add kmod to Makefile-generated Requires


author: Lukas Lemes <lukas.lemes@oracle.com> - 1.6-2.0.1
changelog:
  - Added bug30319244-remove-upstream-references.patch [Orabug: 30319244]
  - Added bug30285084-remove-upstream-references.patch [Orabug: 30285084]
  - Add oracle-remove-unfit-option.patch [Orabug: 23634996]


author: Čestmír Kalina <ckalina@redhat.com> - 1.7-1
changelog:
  - Resolves: #1886901 Avoid divisive language
  - Resolves: #1912506 File bugs with Tracking keyword by default


author: Čestmír Kalina <ckalina@redhat.com> - 1.9-1
changelog:
  - Resolves: #2043450 ksc: Support Authorization header in bugzilla API
  - Rebase to latest ksc release


author: Čestmír Kalina <ckalina@redhat.com> - 1.9-2
changelog:
  - Resolves: #2043450 ksc: Support Authorization header in bugzilla API
  - Use platform-python in place of python3


author: EL Errata <el-errata_ww@oracle.com> - 1.9-2.0.1
changelog:
  - Add oracle-remove-unfit-option.patch [Orabug: 23634996]
  - Added bug30285084-remove-upstream-references.patch [Orabug: 30285084]
  - Added bug30319244-remove-upstream-references.patch [Orabug: 30319244]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1
changelog:
  - New upstream release 1.3.3
  - Resolves: rhbz#1574267 - libldb-1.3.3 is available
  - Backport a patch from samba upstream to not require rpc.h


author: Petr Viktorin <pviktori@redhat.com> - 1.4.0-3
changelog:
  - Use %{__python2}, not "python", as the Python2 interpreter
  - Add workaround to allow building with Python 2
  - Remove the lmdb dependency in RHEL


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1
changelog:
  - Resolves: rhbz#1684582 - Rebase libldb to version 1.5.4 for Samba
  - Resolves: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8
  - Resolves: rhbz#1597243 - libldb uses Python 2 to build.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-2
changelog:
  - Fix some python2-related upgrade issues
  - Related: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 2.0.7-3
changelog:
  - Resolves: rhbz#1754423 - Rebase libldb to 2.0.7 version for samba
  - Related: rhbz#1754423 - Fix sssd tests (ldb)


author: Isaac Boukris <iboukris@redhat.com> - 2.2.0-1
changelog:
  - Resolves: rhbz#1878114 - Rebase libldb to the version required by Samba
  - Resolves: rhbz#1794349 - Build libldb with lmdb support


author: Andreas Schneider <asn@redhat.com> - 2.3.0-1
changelog:
  - resolves: rhbz#1945021 - Update to version 2.3.0
  - resolves: rhbz#1897082 - Fix libldb tests on aarch64


author: Jan Macku <jamacku@redhat.com> - 0.97-1
changelog:
  - update to 0.97 (#2159588)
  - drop downstream patch - ipmi: avoid error messages on non-dell platforms


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-12.el8
changelog:
  - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer)
  - Get rid of -nostartfiles -nostdlib (Jeff Moyer)
  - Resolves: rhbz#1630578


author: Richard Hughes <richard@hughsie.com> 0.7.8-1
changelog:
  - New upstream release
  - Add as_version_string() for fwupd
  - Add support for component agreements
  - Correctly compare version numbers like '1.2.3' and '1.2.3a'
  - Don't include the path component in the name when parsing the package filename
  - If the launchable is specified don't guess it when composing
  - Never add more than one component to the AppStream store when composing


author: Richard Hughes <richard@hughsie.com> 0.7.9-1
changelog:
  - New upstream release
  - Convert local icons found in metainfo files
  - Follow the Debian tilde usage when ordering versions
  - Use the launchable to find the desktop filename


author: Richard Hughes <richard@hughsie.com> 0.7.10-1
changelog:
  - New upstream release
  - Do not parse firmware files anymore
  - Do not require a release transaction when validating in relaxed mode
  - Extract release descriptions and agreement sections for translation


author: Richard Hughes <richard@hughsie.com> 0.7.11-1
changelog:
  - New upstream release
  - Add AS_APP_QUIRK_DEVELOPER_VERIFIED
  - Escape quotes in attributes
  - Provide async variants of store load functions


author: Richard Hughes <richard@hughsie.com> 0.7.13-1
changelog:
  - New upstream release
  - Do not restrict the maximum number of releases allowed
  - Throw an error when a launchable desktop-id is invalid


author: Richard Hughes <richard@hughsie.com> 0.7.14-1
changelog:
  - New upstream release
  - Add new API for gnome-software
  - Set the AppStream ID from the X-Flatpak desktop key


author: Karel Zak <kzak@redhat.com> 2.32.1-10
changelog:
  - fix #1699310 - rpm -V setup fail on /var/log/lastlog
  - fix #1702712 - pam_env bypassed for root user when using su


author: Karel Zak <kzak@redhat.com> 2.32.1-13
changelog:
  - fix #1734553 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1719069 - findmnt warning "recommended root FS passno is 1" for XFS


author: Karel Zak <kzak@redhat.com> 2.32.1-18
changelog:
  - fix #1739443 - lscpu reports wrong hypervisor in nested virt on s390x
  - fix #1743555 - command chfn adds some useless commas with GECOS information into /etc/password


author: Karel Zak <kzak@redhat.com> 2.32.1-23
changelog:
  - fix #1826251 - remove MD metadata 0.90 based tests from util-linux CI
  - fix #1812576 - RFE: Bitlocker detection for RHEL 8.3
  - fix #1817726 - add libblkid BLOCK_SIZE
  - fix #1803753 - RHEL-8: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
  - fix #1812118 - mount -a always tries to mount smb3 share subdir despite being already mounted
  - fix #1824727 - util-linux: Include python3-libmount package in the release
  - fix #1829245 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir


author: Karel Zak <kzak@redhat.com> 2.32.1-25
changelog:
  - fix #1884194 - RHEL-8: chrt command does not support the -R option
  - fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
  - fix #1861670 - lsblk can not show serial information for virtio disk
  - fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
  - fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
  - fix #1883056 - lscpu support for Fujitsu A64FX
  - fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM


author: Karel Zak <kzak@redhat.com> 2.32.1-28
changelog:
  - fix #1906157 - after su from root to a normal user mesg is unable to show current status
  - fix #1917852 - findmnt: add option to list all fs-independent flags
  - fix #1922299 - throws error using /sbin/nologin: invalid option -- 'c'
  - fix #1940607 - lsblk sometimes returns block devices in wrong order with --pairs
  - fix #1919529 - [RFE] RHEL-8: Support option flags with mount(8) --bind
  - fix #1946921 - RHEL8: mount --rbind -o rprivate doesn't do recursive bind mount


author: Karel Zak <kzak@redhat.com> 2.32.1-29
changelog:
  - fix #1988955 - script command continues without stopping.
  - fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
  - fix #2011602 - logger from util-linux incorrectly handles long messages
  - fix #1916151 - [RFE] spread fstrim.timer across time
  - fix #1894192 - Update or backport setpriv --pdeathsig
  - fix #2026511 - blkid fails to complete when targeting  non-block devices


author: Karel Zak <kzak@redhat.com> 2.32.1-31
changelog:
  - improve #2026511 fix - blkid fails to complete when targeting non-block devices
  - fix #1950187 - Ambient capabilities failed to applied to non-root user


author: Karel Zak <kzak@redhat.com> 2.32.1-36
changelog:
  - fix #2060030 - Please backport patches for atari partition detection to RHEL 8
  - fix #2069187 - Internal testsuite for lscpu failed on aarch64
  - fix #2093166 - lslogins reports incorrect "Password is locked" status
  - fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
  - fix #2044592 - Move /var/log/lastlog ownership to systemd


author: Karel Zak <kzak@redhat.com> 2.32.1-40
changelog:
  - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos 
  - fix #2142496 - update upstream tests
  - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - fix #2160321 - [last] ut->ut_user is not null terminated


author: Karel Zak <kzak@redhat.com> 2.32.1-43
changelog:
  - fix #2117355 - Add additional documentation for fstab
  - fix #2184728 - libuuid - downport cache related patch
  - fix #2188894 - The swapon man page of -p(priority) option shows incorrect.
  - fix #2227097 - wall(1) fail when trying to use seat0


author: Karel Zak <kzak@redhat.com> 2.32.1-46
changelog:
  - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq
  - fix RHEL-18451 - logger: initialize socket credentials control union
  - fix RHEL-16070 - util-linux: issues in libblkid
  - fix RHEL-6274 - lslogins incorrect account expiration field


author: Karel Zak <kzak@redhat.com> 2.32.1-48
changelog:
  - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf()
  - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]


author: Karel Zak <kzak@redhat.com> - 2.32-3
changelog:
  - sync spec file with Fedora
  - move /etc/adjtime config from initscripts to util-linux
  - fix #1560642 - uuidd.service does not start
  - remove unused build option --enable-libmount-force-mountinfo (it's default now)
  - disable assert code


author: Karel Zak <kzak@redhat.com> 2.32.1-4
changelog:
  - fix #1614364 - losetup: /dev/loop1: failed to set up loop device
  - fix #1614852 - mount man page says sync option has no effect for ext4
  - fix #1614843 - Man page of logger is missing -S option


author: Karel Zak <kzak@redhat.com> 2.32.1-7
changelog:
  - fix #1656437 - Failing tests from testsuite
  - fix #1653781 - unable to umount by loop backing file
  - fix #1655650 - RHEL8.0 - fdisk -l shows the conflicting partitions name for the mpath
  - fix #1653413 - blkid: add --no-part-details to not return metadata from empty partitions


author: Zoltan Fridrich <zfridric@redhat.com> - 2.26-5
changelog:
  - added CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE capabilities
    resolves: rhbz#1946982 rhbz#1921576


author: Zoltan Fridrich <zfridric@redhat.com> - 2.48-2
changelog:
  - rebase to 2.48
    resolves: rhbz#2032813
  - fix ambient capabilities for non-root users
    resolves: rhbz#1950187


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-5
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210637
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2210644


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.8-6
changelog:
  - Python 2 binary package renamed to python2-libcap-ng
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - backport several upstream fixes
  - set Delegate property for cgconfig service to make sure complete
    cgroup hierarchy is always created by systemd


author: Tom Hromatka <tom.hromatka@oracle.com> - 2.0
changelog:
  - Add cgroup v2 support to all libcgroup tools -
    cgclassify, cgclear, cgconfigparser, cgcreate, cgdelete, cgexec, cgget,
    cgrulesengd, cgset, cgsnapshot, lscgroup, lssubsys. See github issue #12.
  - Fix an issue with parallel builds
  - Add extensive functional tests
  - Remove .libs from Makefile.am files
  - Major refactor of cgget to make it more closely align with the other tools
  - Fix many string truncation and possible buffer overflow warnings


author: Tom Hromatka <tom.hromatka@oracle.com> - 2.0.1
changelog:
  - Allow reading/writing from cgroup.* files in cgroup v2
  - Add support for cgroup v2's cgroup.threads file
  - Fix issue where libcgroup/pam wasn't working properly when
  - cgrulesengd is disabled
  - Fix a bug where the cgroup version wasn't initialized in a
  - named cgroup v1 hierarchy
  - Various automake bug fixes
  - Build PAM module as unversioned DSO
  - Fix build issues with musl libc
  - Fix potential TOCTOU race in cgroup_get_procs()


author: Tom Hromatka <tom.hromatka@oracle.com> - 2.0.2-1.0.1
changelog:
  - Fix extra spaces in configure.ac's --enable-bindings
  - Fix potential segfault if there are more than 100 cgroup mount points


author: Tom Hromatka <tom.hromatka@oracle.com> - 3.0.0-1.0.1
changelog:
  - Introduce cgxget and cgxset - tools to abstract cgroup v1 and v2 systems
  - Introduce new C APIs that abstract the cgroup v1 and v2 interfaces for the user
    Remove the cgclear tool
  - Introduce modern Cython-based Python bindings, replacing the old bindings
  - Add spdx license tags across the files
  - Introduce a process for handling security-related vulnerabilities
  - Fix many warnings and errors reported by coverity
  - Add full cgroup v2 support to continuous integration
  - Add code quality analysis to continuous integration
  - Add Linux kernel syntax style and add checking to continuous integration


author: Tom Hromatka <tom.hromatka@oracle.com>- 3.1.0-1.0.1
changelog:
  - Add systemd C APIs
  - Add systemd support to all command line tools, including cgcreate,
    cgconfigparser, cgexec, and cgclassify. Note the usage of the -b flag in many
    tools to ignore the default systemd hierarchy and operate from the root of
    the cgroup hierarchy
  - Add python systemd APIs
  - Improved handling of legacy (cgroup v1), hybrid (v1/v2), and unified (v2)
    cgroup hierarchies
  - Add several new C APIs, including:
    cg_setup_mode_t() - A function that returns the current cgroup setup mode
    (legacy, hybrid, or unified)
    Various functions for better traversal through a struct cgroup
    cgroup_create_scope() and cgroup_create_scope2() for creating systemd scopes
    cgconfigparser now supports a systemd section
  - Libcgroup python bindings have matured greatly but are still considered
    experimental and subject to change. Community feedback here would be greatly
    appreciated
    Add rudimentary logging support
    Add systemd support
    Add setup mode (legacy, hybrid, unified) support
    Add several APIs for operating on struct cgroup in a Pythonic manner
    Add methods for moving processes within cgroups
    Rename blacklist to denylist
    Rename whitelist to allowlist
    Add many functional tests
  - Remove ExecStop from extras-3.1.0/cgconfig.service unit
  - Add dependency of selinux-policy package for libcgroup-tools


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Make inline function __comps_objmrtree_all also static (RhBug:1793424)
  - Fix memory leaks and resource leaks
  - Fix: Check result "comps_parse_parsed_init()"


author: Kalev Lember <klember@redhat.com> - 0.6.9-1
changelog:
  - Update to 0.6.9
  - Use make_install macro
  - Mark COPYING and COPYING.LIB as %license
  - Tighten -devel subpackage deps


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Sam Booth <sam.booth@oracle.com> - 5.3.28-42.0.1
changelog:
  - Update URL in rpm description [Orabug: 35986894]
  - Change http links in spec to https [Orabug: 35986894]
  - Buildrequire java-devel 1:1.8.0


author: Jaroslav Mracek <jmracek@redhat.com> - 0.20.0-1
changelog:
  - [module] Report module solver errors
  - [module] Enhance module commands and errors
  - [transaction] Fixed several problems with SWDB
  - Remove unneeded regex URL tests (RhBug:1598336)
  - Allow quoted values in ini files (RhBug:1624056)
  - Filter out not unique set of solver problems (RhBug:1564369)
  - Resolves: rhbz#1614531 - dnf 3.2 does not depsolve correctly
  - Resolves: rhbz#1614346 - dnf rollback doesn't work after install/downgrade/upgrade
  - bug 1605274 - DNF crashes on * in installation repository URL
  - Resolves: rhbz#1623383 - dnf.exceptions.ConfigError: Error parsing ...


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.0-1
changelog:
  - Fix segfault in repo_internalize_trigger (RhBug:1375895)
  - Change sorting of installonly packages (RhBug:1627685)
  - [swdb] Fixed pattern searching in history db (RhBug:1635542)
  - Check correctly gpg for repomd when refresh is used (RhBug:1636743)
  - [conf] Provide additional VectorString methods for compatibility with Python list.
  - [plugins] add plugin loading and hooks into libdnf


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.0-2
changelog:
  - Add patch Modify-solver_describe_decision-to-report-cleaned-RhBug1486749
  - Add patch swdb-create-persistent-WAL-files-RhBug1640235
  - Add patch Relocate-ModuleContainer-save-hook-RhBug1632518
  - Add patch Test-if-sack-is-present-and-run-save-module-persistor-RhBug1632518


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.3-1
changelog:
  - Permanently disable Python2 build for Fedora 30+
  - Update to 0.22.3
  - Modify solver_describe_decision to report cleaned (RhBug:1486749)
  - [swdb] create persistent WAL files (RhBug:1640235)
  - Relocate ModuleContainer save hook (RhBug:1632518)
  - [transaction] Fix transaction item lookup for obsoleted packages (RhBug: 1642796)
  - Fix memory leaks and memory allocations
  - [repo] Possibility to extend downloaded repository metadata


author: Daniel Mach <dmach@redhat.com> - 0.22.4-1
changelog:
  - Enhance LIBDNF plugins support
  - [repo] Check whether metadata cache is expired (RhBug:1539620,1648274)
  - [sack] Implement dnf_sack_get_rpmdb_version()


author: Jingdong Lu <jingdong.lu@oracle.com> - 0.22.5-5.0.1
changelog:
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]


author: Frank Deng <frank.deng@oracle.com> - 0.22.5-5.0.2
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.33.0-1
changelog:
  - Update to 0.33.0
  - Enhance sorting for module list (RhBug:1590358)
  - [DnfRepo] Add methods for alternative repository metadata type and download (RhBug:1656314)
  - Remove installed profile on module enable or disable (RhBug:1653623)
  - Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839)
  - Add support of wild cards for modules (RhBug:1644588)
  - Exclude module pkgs that have conflict
  - Enhance config parser to preserve order of data, and keep comments and format
  - Improve ARM detection
  - Add support for SHA-384
  - Return empty query if incorrect reldep (RhBug:1687135)
  - ConfigParser: Improve compatibility with Python ConfigParser and dnf-plugin-spacewalk (RhBug:1692044)
  - ConfigParser: Unify default set of string represenation of boolean values
  - Fix segfault when interrupting dnf process (RhBug:1610456)
  - Installroot now requires absolute path
  - Support "_none_" value for repo option "proxy" (RhBug:1680272)
  - Add support for Module advisories
  - Add support for xml:base attribute from primary.xml (RhBug:1691315)
  - Improve detection of Platform ID (RhBug:1688462)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Skip invalid key files in "/etc/pki/rpm-gpg" with warning (RhBug:1644040)
  - Enable timestamp preserving for downloaded data (RhBug:1688537)
  - Fix 'database is locked' error (RhBug:1631533)
  - Replace the 'Failed to synchronize cache' message (RhBug:1712055)
  - Fix 'no such table: main.trans_cmdline' error (RhBug:1596540)
  - Fix: skip_if_unavailable=true for local repositories (RhBug:1716313)
  - Add support of modular FailSafe (RhBug:1623128)
  - Add support of DNF main config file in context; used by PackageKit and
    microdnf (RhBug:1689331)
  - Exit gpg-agent after repokey import (RhBug:1650266)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.35.1-4
changelog:
  - Fix typo in error message (RhBug:1726661)
  - Update localizations from zanata (RhBug:1689991)
  - Don't disable nonexistent but required repositories (RhBug:1689331)
  - Ignore trailing blank lines of multiline value (RhBug:1722493)
  - Re-size includes map before re-computation (RhBug:1725213)


author: Edward Leung <edward.leung@oracle.com> - 0.35.1-8.0.1
changelog:
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)


author: Ales Matej <amatej@redhat.com> - 0.35.5-1
changelog:
  - Update to 0.35.5
  - Make libdnf own its plugin directory (RhBug:1714265)
  - Set priority of dnf.conf.d drop-ins
  - Fix toString() to not insert [] (RhBug:1584442)
  - Fix handling large number of filenames on input (RhBug:1690915)
  - Detect armv7 with crypto extension only on arm version >= 8
  - A new standardized User-Agent field consisting of the libdnf and OS version
    (including the variant) (RhBug:1156007)
  - Add basic countme support (RhBug:1647454)
  - Fix crash in PackageKit (RhBug:1636803)
  - Do not create @System.solv files (RhBug:1707995)
  - Set LRO_CACHEDIR so zchunk works again (RhBug:1739867)
  - Improve detection of extras packages by comparing (name, arch) pair instead
    of full NEVRA (RhBuh:1684517)
  - Improve handling multilib packages in the history command (RhBug:1728637)
  - Repo download: use full error description into the exception text (RhBug:1741442)
  - Properly close hawkey.log (RhBug:1594016)
  - Fix dnf updateinfo --update to not list advisories for packages updatable
    only from non-enabled modules
  - Apply modular filtering by package name (RhBug:1702729)


author: Ales Matej <amatej@redhat.com> - 0.38.1-1
changelog:
  - Update to 0.38.1
  - Change the best option default to false
  - Use more descriptive message when failed to retrieve GPG key (RhBug:1605117)
  - Add removeMetadataTypeFromDownload function to the API
  - Context part of libdnf can now read vars (urlvars) from dirs and environment
  - Throw exception immediately if file cannot be opened
  - Add test when there is no primary metadata in compatible format (RhBug:1744960)
  - Various improvements to countme features
  - Don't abort on rpmdb checksum calculation failure
  - Enable module dependency trees when using set_modules_enabled_by_pkgset() (RhBug:1762314)
  - Resolve problem with --best and search in provides (RhBug:1737469)
  - New method "Query::filterSubject()", replaces Solution::getBestSolution()
  - The Solution class was removed
  - Add query argument into get_best_query and get_best_solution
  - Add module reset function into dnf_context
  - Add method to get all repository metadata locations
  - Catch NoModuleException in case of not existent value was used in persistor (RhBug:1761773)


author: Ales Matej <amatej@redhat.com> - 0.39.1-1
changelog:
  - Update to 0.39.1
  - Report reason how package was excluded (RhBug:1649754)
  - Additional Arm detection improvements (RhBug:1691430)
  - Set skip_if_unavailable for media repos to skip their update (RhBug:1716067)
  - Add support of xml:base for remote and local url in context (RhBug:1734350,1717865)


author: Ales Matej <amatej@redhat.com> - 0.39.1-3
changelog:
  - Add two new query filters: obsoletes_by_priority, upgrades_by_priority (RhBug:1769466)
  - [context] Add wildcard support in dnf_context_repo_set_data (RhBug:1781420)
  - Remove killGpgAgent function (RhBug:1781601)


author: EL Errata <el-errata_ww@oracle.com> - 0.39.1-5.0.1.el8
changelog:
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)


author: Ales Matej <amatej@redhat.com> - 0.47.0-1
changelog:
  - Update to 0.47.0
  - Allow excluding packages with "excludepkgs" and globs
  - Make parsing of reldeps more strict (RhBug:1788107)
  - Add expanding solvable provides for dependency matching (RhBug:1534123)
  - DnfRepo: fix module_hotfixes keyfile priority level
  - Add custom exceptions to libdnf interface
  - Port to libmodulemd-2 API (RhBug:1693683)
  - Add prereq_ignoreinst & regular_requires properties for pkg (RhBug:1543449)
  - Reset active modules when no module enabled or default (RhBug:1767351)
  - Add comment option to transaction (RhBug:1773679)
  - Baseurl is not exclusive with mirrorlist/metalink (RhBug:1775184)
  - Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  - Handle situation when an unprivileged user cannot create history database (RhBug:1634385)
  - Add query filter: latest by priority
  - Add setter for running kernel protection setting
  - Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  - Config options: only first empty value clears existing (RhBug:1788154)
  - [conf] Set useful default colors when color is enabled
  - [context] Use installonly_limit from global config (RhBug:1256108)
  - [context] Add API to get/set "install_weak_deps"
  - [context] Adds support for includepkgs in repository configuration.
  - [context] Adds support for excludepkgs, exclude, includepkgs, and disable_excludes in main configuration.
  - [context] Added function dnf_transaction_set_dont_solve_goal
  - [context] Added functions dnf_context_get/set_config_file_path
  - [context] Respect "plugins" global conf value
  - [context] Add API to disable/enable plugins
  - [context] Create new repo instead of reusing old one (RhBug:1795004)
  - [context] Error when main config file can't be opened (RhBug:1794864)
  - [context] Add function function dnf_context_is_set_config_file_path
  - [context] Support repositories defined in main configuration file


author: Nicola Sella <nsella@redhat.com> - 0.48.0-1
changelog:
  - Update to 0.48.0
  - swdb: Catch only SQLite3 exceptions and simplify the messages
  - MergedTransaction list multiple comments (RhBug:1773679)
  - Modify CMake to pull *.po files from weblate
  - Optimize DependencyContainer creation from an existing queue
  - fix a memory leak in dnf_package_get_requires()
  - Fix memory leaks on g_build_filename()
  - Fix memory leak in dnf_context_setup()
  - Add `hy_goal_favor` and `hy_goal_disfavor`
  - Define a cleanup function for `DnfPackageSet`
  - dnf-repo: fix dnf_repo_get_public_keys double-free
  - Do not cache RPMDB
  - Use single-quotes around string literals used in SQL statements
  - SQLite3: Do not close the database if it wasn't opened (RhBug:1761976)
  - Don't create a new history DB connection for in-memory DB
  - transaction/Swdb: Use a single logger variable in constructor
  - utils: Add a safe version of pathExists()
  - swdb: Handle the case when pathExists() fails on e.g. permission
  - Repo: prepend "file://" if a local path is used as baseurl
  - Move urlEncode() to utils
  - utils: Add 'exclude' argument to urlEncode()
  - Encode package URL for downloading through librepo (RhBug:1817130)
  - Replace std::runtime_error with libdnf::RepoError
  - Fixes and error handling improvements of the File class
  - [context] Use ConfigRepo for gpgkey and baseurl (RhBug:1807864)
  - [context] support "priority" option in .repo config file (RhBug:1797265)


author: Nicola Sella <nsella@redhat.com> - 0.48.0-3
changelog:
  - Add log file level main config option (RhBug:1802074)
  - Accept '==' as an operator in reldeps (RhBug:1847946)


author: EL Errata <el-errata_ww@oracle.com> - 0.48.0-5.0.1
changelog:
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]


author: Alan Steinberg <alan.steinberg@oracle.com> - 0.48.0-5.0.2
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-1
changelog:
  - Add vendor to dnf API (RhBug:1876561)
  - Add formatting function for solver error
  - Add error types in ModulePackageContainer
  - Implement module enable for context part
  - Improve string formatting for translation
  - Remove redundant printf and change logging info to notice (RhBug:1827424)
  - Add allow_vendor_change option (RhBug:1788371) (RhBug:1788371)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-3
changelog:
  - Avoid multilib file conflict in config.h (RhBug:1918818)
  - [modules] Add special handling for src artifacts (RhBug:1809314)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-4
changelog:
  - [context] improve retrieving repository configuration
  - Allow loading incomplete cache and loading ext solv files without its repodata


author: EL Errata <el-errata_ww@oracle.com> - 0.55.0-7.0.1
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-8
changelog:
  - Substitute all repository config options (fixes substitution of baseurl)
  - Use solvfile userdata to store and check checksums and solv versions
  - Fix handling transaction id in resolveTransactionItemReason
  - Set short action for Reason Change


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-10
changelog:
  - Do not print errors on failovermethod repo option
  - the dnf_context_remove() function accepts `<package-spec>`, doc updates
  - advisory upgrade: filter out advPkgs with different arch


author: EL Errata <el-errata_ww@oracle.com> - 0.63.0-11.1.0.1
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Update OL8 dnf to recognise UEK7 as installonlypkgs package [Orabug: 33861658]


author: Jaroslav Rohel <jrohel@redhat.com> - 0.63.0-18
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253)


author: EL Errata <el-errata_ww@oracle.com> - 0.63.0-19.0.1
changelog:
  - Recognise new kernel-uek RPMs as multiversion and installonlypkg [Orabug: 36053872]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Update OL8 dnf to recognise UEK7 as installonlypkgs package [Orabug: 33861658]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Update to 0.62.0
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Support allow_vendor_change setting in dnf context API
  - Add a new option module_obsoletes
  - Add new API applyObsoletes() function to apply modular obsoletes
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - Swdb: Add a method to get the current transaction
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Fix modular queries with the new solver
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file options "installonlypkgs" and "protected_packages". Changes behaviour of microdnf and PackageKit.
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
  - Add new dnf_context_module_install() C API


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-2
changelog:
  - Fix: dnf_context_module_install: memory leaks
  - covscan: remove unused vars, mark private func static, return values
  - DNF does not fail on non UTF-8 file names in a package


author: Lans Hung <lans.hung@oracle.com> - 0.63.0-3.0.2
changelog:
  - Update OL8 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861658]


author: Jerry James <loganjerry@gmail.com> - 3.1-23.20170329cvs
changelog:
  - Add gcc BR
  - Build verbosely
  - Drop obsolete --enable-widec configure option
  - Fix "unused direct shared library dependency" warning from rpmlint again
  - Fix man page error due to BSD nroff macro that is not available on Linux
  - Drop explicit R on pkgconfig from the -devel package, autogenerated


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 1:1.07.4-10
changelog:
  - Resolves:rh#1526510 - USE_TYPO_METRICS set in Fedora 2X but not set in RHEL7 or in ttf binary release
  - some spec cleanups


author: Vishal Vijayraghavan <vishalvijayraghavan AT gmail DOT com> - 1:2.00.3-1
changelog:
  - Resolves: rhbz#1614529
  - Updated the BuildRequires to python3 and using latest build
  - Changed the upstream URL


author: Vishal vijayraghavan <vishalvijayraghavan AT gmail DOT com> - 1:2.00.3-4
changelog:
  - Resolves: rhbz#1643920: Removed Obsoletes: liberation-narrow-fonts and Provides: liberation-narrow-fonts macro


author: Vishal Vijayraghavan <vvijayra@redhat.com> - 1:2.00.3-6
changelog:
  - Resolves: #1664501 - liberation-fonts-common contains fonts.dir
  - Splitted the font family(mono, sans and serif) into diferrent root font directories


author: Honggang Li <honli@redhat.com> - 1.11.1-1
changelog:
  - Rebase to upstream release v1.11.1
  - EFA Support requires libfabric
  - Resolves: bz1831145, bz1852636


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040450


author: Jens Petersen <petersen@redhat.com> - 3.1-12
changelog:
  - protect install-info in the rpm scriptlets
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Texinfo


author: DJ Delorie <dj@redhat.com> - 3.1-24
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2014228)


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
changelog:
  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-3
changelog:
  - add CMAC selftest for FIPS POST
  - add continuous FIPS entropy test
  - disable non-approved FIPS hashes in the enforced FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.8.5-3
changelog:
  - new upstream version 1.8.5
  - AES performance improvements backported from master branch
  - FIPS module is implicit with kernel FIPS flag
  - always run the FIPS selftests if FIPS module is installed


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-33560 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-40528 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Rafael Aquini <aquini@redhat.com> - 2.20-10
changelog:
  - Fix up annocheck distro flag failures (1624131)
  - Convert libhugetlbfs run_tests.py to Python3 (1620250)


author: Rafael Aquini <aquini@redhat.com> - 2.21-4
changelog:
  - Fix: task-size-overrun hung over 8 hours on ppc64le (1737370)
  - Introduce libhugetlbfs-tests subpkg for CI tests (1688930)


author: Rafael Aquini <aquini@redhat.com> - 2.21-12
changelog:
  - Fix: Introduce libhugetlbfs-tests subpkg for CI tests (1688930)
  - trim repetitive changelogs for interim debug builds


author: Rafael Aquini <aquini@redhat.com> - 2.21-13
changelog:
  - Fix: huge_page_setup_helper.py: SyntaxError: Missing parentheses in call to 'print' (1821938)
  - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296)


author: Michal Židek <mzidek@redhat.com> - 2.0.0-33
changelog:
  - Resolves: rhbz#1646113 - Missing concise documentation about valid options
                             for sssd-files-provider


author: Michal Židek <mzidek@redhat.com> - 2.0.0-34
changelog:
  - Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                             kdestroy caused by KCM returning a wrong error
                             code during the delete operation


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.1
changelog:
  - Resolves: rhbz#1691750 - pam_sss failing for external users not configured
                             via sssd


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.2
changelog:
  - Resolves: rhbz#1696596 - AD user not found after establishing trust and
                             restarting sssd [ZStream Clone]


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.3
changelog:
  - Resolves: rhbz#1701135 - Include libsss_nss_idmap-devel in the Builder
                             repository


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.0-19.1
changelog:
  - Resolves: rhbz#1816591 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module does not
                             implement it properly [rhel-8.1.0.z]


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: EL Errata <el-errata_ww@oracle.com> - 2.2.3-20.0.1.el8
changelog:
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-1
changelog:
  - Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
  - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
  - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-2
changelog:
  - Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-3
changelog:
  - Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package
  - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
  - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache
  - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                             inotify events, and no updates are triggered
  - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card"
                             on GDM login with smart-card
  - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
  - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
  - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                             if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                             in SSSD-AD direct integration.
  - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
  - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-4
changelog:
  - Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
  - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
  - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-5
changelog:
  - Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
  - Fixed "requires/provides" rpmdiff warning


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-7
changelog:
  - Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.
  - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-8
changelog:
  - Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
  - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
  - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
  - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-9
changelog:
  - Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
  - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
  - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
  - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
  - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
  - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
  - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
  - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
  - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
  - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
  - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
  - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
  - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
  - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
  - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
  - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
  - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-3
changelog:
  - Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
  - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: EL Errata <el-errata_ww@oracle.com> - 2.4.0-9.0.1
changelog:
  - Restore default debug level for sss_cache [Orabug: 32810448]
  - Restore default debug level for shadow-utils tools [Orabug: 32810448]
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-9.1
changelog:
  - Resolves: rhbz#1949170 - pam_sss_gss.so doesn't work with large kerberos tickets [rhel-8.4.0.z]
  - Resolves: rhbz#1945656 - No gpo found and ad_gpo_implicit_deny set to True still permits user login [rhel-8.4.0.z]
  - Resolves: rhbz#1945655 - SSSD not detecting subdomain from AD forest (RHEL 8.3) [rhel-8.4.0.z]
  - Resolves: rhbz#1945654 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-8.4.0.z]
  - Resolves: rhbz#1942438 - Wrong default debug level of sssd tools [rhel-8.4.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-9.2
changelog:
  - Resolves: rhbz#1985456 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8.4.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.1
changelog:
  - Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.2
changelog:
  - Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
  - Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
  - Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
  - Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.3
changelog:
  - Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.4
changelog:
  - Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
  - Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
  - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
  - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
  - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
  - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
  - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
  - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3
changelog:
  - Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4
changelog:
  - Resolves: rhbz#2074648 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-8.6.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4.1
changelog:
  - Resolves: rhbz#2072958 - Use right sdap_domain in ad_domain_info_send [rhel-8.6.0.z]
  - Resolves: rhbz#2089244 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-8.6.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2087745 - 2FA prompting setting ineffective
  - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
  - Resolves: rhbz#2098617 - Harden kerberos ticket validation
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
  - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
  - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.1
changelog:
  - Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.2
changelog:
  - Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
  - Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
  - Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.3
changelog:
  - Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-5
changelog:
  - Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
    Rebuild against Samba rebase.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
  - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
  - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"


author: Craig Guiller <craig.guiller@oracle.com> - 2.8.2-3.0.2
changelog:
  - [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'. (BZ#2196838)
  - SSSD enters failed state after heavy load in the system. (BZ#2219351)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
  - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
  - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")
  - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
  - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
  - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
  - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
  - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
  - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
  - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
  - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237302 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Darren Archibald <darren.archibald@oracle.com> - 2.9.1-4.0.1.5
changelog:
  - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest (JIRA:RHEL-19212)
  - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users (JIRA:RHEL-19994)
  - SSSD GPO lacks group resolution on hosts (JIRA:RHEL-21085)
  - Make sure 8.9.z/9.3.z doesn't build 'passkey' code (JIRA:RHEL-21164)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-5.1
changelog:
  - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z]
  - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z]
  - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z]
  - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z]
  - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z]
  - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-5.2
changelog:
  - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z]
  - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z]
  - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z]


author: EL Errata <el-errata_ww@oracle.com> - 2.9.4-5.0.2.2
changelog:
  - Missing ntohs to service port [Orabug: 37389651]
  - Restore default debug level for sss_cache [Orabug: 32810448]


author: Alejandro López <allopez@redhat.com> - 2.9.4-5.3
changelog:
  - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z]
  - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-5.4
changelog:
  - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
  - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
  - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
  - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-14_2
changelog:
  - [RHEL] Re-enable AEAD tests and ignore test result
  - [RHEL] Drop the ppc64 ignore-failures workaround


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-16_1
changelog:
  - [RHEL] Apply 'Add missing dependencies to the tests package'
  - [RHEL] Apply 'Update patch from upstream'


author: Sahana Prasad <sahana@redhat.com> - 1.1.5-3
changelog:
  - Enables building on old kernels [sync fix in Fedora from omosnance].
  - This is required for covscans as they run on RHEL7 machines.


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5366
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2406
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15290
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15300


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15300
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2406


author: Phil Sutter <psutter@redhat.com> - 0.3-2
changelog:
  - Add missing build requirement: gcc.
  - Add source code patches to facilitate following changes.
  - Patches managed in git, so add git as another build requirement.
  - Respect build system compiler flags.
  - Use %make_build instead of plain make in %build.
  - Add %check target which performs unattended runtime test.
  - Use -D install flag instead of manual mkdir.


author: Phil Sutter <psutter@redhat.com> - 0.3-3
changelog:
  - Use %autosetup flag '-p1' instead of '-S git' to get rid of git dependency.
  - Use %license macro in %files section.
  - Added comment about included patches' upstream status.


author: Ana Cabral <acabral@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved
    from the main package to the utils sub package causing a file
    conflict on multilib systems between the old 32 bit main
    package and the new 64 bit utils sub package.


author: Martin Gansser <martinkg@fedoraproject.org> - 1:0.9.57-1
changelog:
  - Update to 0.9.57
  - Dropped dependency on libgcrypt
  - Dropped dependency on openssl
  - Update tarball link to "https:"
  - Add examples from doc/examples


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Update to 1.6.2
  - Make buildorder a signed integer to match modulemd specification
  - Obsolete unsupported pythonX-modulemd packages


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-0.beta2
changelog:
  - Update to 2.0.0beta2
  - Better validation of stored content during read and write operations
  - ModuleIndex now returns FALSE if any subdocument fails
  - Fix tests on 32-bit platforms
  - Make unknown keys in YAML maps non-fatal for libmodulemd1
  - Make unknown keys in YAML maps optionally fatal for libmodulemd 2.x
  - Fix RPM version requirements for libmodulemd1


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 final
  - Assorted fixes for validation
  - Add modulemd-validator tool based on v2 code
  - Fix a crash when merging defaults
  - Add missing BuildRequires


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Jiri Pirko <jiri@mellanox.com> - 1.6-1
changelog:
  - Update to 1.6
  - libndb: reject redirect and router advertisements from non-link-local
  - libndp: validate the IPv6 hop limit
  - libndp: revert API change for ndp_msg_send() and add ndp_msg_send_with_flags()
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - ndptool: add option to send messages types
  - libndp: add option flags to send messages
  - Add SubmittingPatches howto


author: Hangbin Liu <haliu@redhat.com> - 1.7-1
changelog:
  - Update to 1.7
  - libndp: apply filter to raw socket to only accept ND messages
  - libndp: move ndp_sock_{open,close}() after msg parsing functions
  - ndptool: Fix compilation on musl libc


author: Hangbin Liu <haliu@redhat.com> - 1.7-2
changelog:
  - ndptool: add -T target support (rhbz 1666194)
  - ndptool: fix target parameter typo (rhbz 1666194)
  - libndp: close sockfd after using to avoid handle leak (rhbz 1666194)
  - libndp: fix nd_msg typo when setting target address (rhbz 1666194)


author: Hangbin Liu <haliu@redhat.com> - 1.7-3
changelog:
  - ndptool: add -D dest support (rhbz 1697595)
  - ndptool: fix potential memory leak caused by strdup (rhbz 1697595)


author: Steve Dickson <steved@redhat.com> 2.3.3-6
changelog:
  - Changed /var/lib/nfs/rpc_pipefs to have 555 permissions (bz 1583489)
  - Removed tcp wrappers support from man pages (bz 1642596) 
  - Reload not restart gssproxy in nfs-server.service (bz 1592660)


author: Steve Dickson <steved@redhat.com> 2.3.3-8
changelog:
  - Update junction code with latest upstream code (1543126)
  - Make sure /etc/sysconfig/nfs is immutabl (1639432)


author: Steve Dickson <steved@redhat.com> 2.3.3-12
changelog:
  - Change nfsconvert.sh not to set the immutable bit (bz 1673685)
  - Change nfsconvert.py not to create the new dummy /etc/sysconfig/nfs (bz 1673685)


author: Steve Dickson <steved@redhat.com> 2.3.3-14_0
changelog:
  - Add nfs.conf equivalent for the statd --no-notify cmdline option (1690280)
  - Correct the modes on /etc/nfs.conf after a conversion (bz 1690266)


author: Steve Dickson <steved@redhat.com> 2.3.3-17
changelog:
  - Moved the gating tests out of a patch and into the top dir (bz 1653927)
  - Move the mode corrections on /etc/nfs.conf to nfsconvert.py (bz 1655880)
  - gssd: add verbosity options to the rpc.gssd man page (bz 1668026)


author: Steve Dickson <steved@redhat.com> 2.3.3-24
changelog:
  - nfs.man: Fixed small typo in man page (bz 1732877)
  - mount: Report correct error in the fall_back cases (bz 1709963)
  - rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1712202)
  - spec: Remove redundant manpage files (bz 1718738)


author: Steve Dickson <steved@redhat.com> 2.3.3-27
changelog:
  - More coverity scans updates (bz 1746572)
  - nfsd: Adjust nfs.conf setting/parsing of rdma port (bz 1710532)
  - Add plain --rdma option to nfs.conf convertor (bz 1747295)
  - mountstats: Add per-op error counts to iostat command (bz 1719983)
  - gssd: add configure options verbosity to man page (bz 1749642)


author: Steve Dickson <steved@redhat.com> 2.3.3-32
changelog:
  - junction: Fixed debug statement (bz 1831829)
  - Userspace support for the latest nfsdcld daemon (bz 1817756)


author: Steve Dickson <steved@redhat.com> 2.3.3-33
changelog:
  - manpage: Add a description of the 'nconnect' mount option (bz 1761352)
  - nfsdclddb: Redname clddb-tool to nfsdclddb (bz 1836924)


author: Steve Dickson <steved@redhat.com> 2.3.3-38
changelog:
  - exports man page: warn about subdirectory exports (bz 1652437)
  - Don't modify /etc/group on upgrades (bz 1856881)
  - nfs-iostat: divide by zero with fresh mount (bz 1861823)
  - nfsiostat: Drop autofs entries before calling compare_iostats() (bz 1859130)
  - nfsdclddb: clddb-tool was recently renamed to nfsdclddb (bz 1893599)


author: Steve Dickson <steved@redhat.com> 2.3.3-39
changelog:
  - systemd: Ingnore export failures in nfs-server.serivce unit (bz 1894873)
  - exports.man: Remove some outdated verbiage (bz 1769688)


author: Steve Dickson <steved@redhat.com> 2.3.3-42
changelog:
  - gssd: Add options to allow for the use of ~/.k5identity file (bz 1868087)
  - man: Correct gssd(8) description of rpc-timeout and context-timeout (bz 1908232)
  - exportfs: fix unexporting of '/' (bz 1944119)


author: Steve Dickson <steved@redhat.com> 2.3.3-44
changelog:
  - gssd: Deal with failed thread creation (bz 1981400)
  - gssd: Add timeout for upcall threads (bz 1981403)
  - gssd: Cleaned up debug messages (bz 1961056)
  - spec: Updated description of the nfs-utils rpm (bz 1981419)


author: Steve Dickson <steved@redhat.com> 2.3.3-59
changelog:
  - Covscan Scan: Wrong Check of Return Value (bz 2151966)
  - Covscan Scan: Clang (experimental) (bz 2151971)


author: Scott Mayhew <smayhew@redhat.com> 2.3.3-61
changelog:
  - gssd: unconditionally use krb5_get_init_creds_opt_alloc (RHEL-62422)
  - gssd: do not use krb5_cc_initialize (RHEL-62422)


author: EL Errata <el-errata_ww@oracle.com> - 2.3.3-64.0.1
changelog:
  - nfsd: allow more than 64 backlogged connections
  - spec: remove multiple warnings when upgrading nfs-utils with gssproxy [Orabug: 35173372]


author: Scott Mayhew <smayhew@redhat.com> 2.3.3-67
changelog:
  - mountd: Minor refactor of get_rootfh() (RHEL-127095)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127095)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127095)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127095)
    Resolves: CVE-2025-12801


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el8]
changelog:
  - Rebase onto upstream version 1.1.1
  - Sync spec file with RHEL7
  - Disable JSON parsing, deprecated by upstream
  - Make use of builtin testsuite


author: Phil Sutter <psutter@redhat.com> [1.1.1-2.el8]
changelog:
  - chain: Hash chain list by name (Phil Sutter) [1658533]
  - chain: Add lookup functions for chain list and rules in chain (Phil Sutter) [1658533]
  - chain: Support per chain rules list (Phil Sutter) [1658533]
  - src: remove nftnl_rule_cmp() and nftnl_expr_cmp() (Phil Sutter) [1658533]


author: Phil Sutter <psutter@redhat.com> [1.1.1-3.el8]
changelog:
  - src: chain: Fix nftnl_chain_rule_insert_at() (Phil Sutter) [1666495]
  - src: chain: Add missing nftnl_chain_rule_del() (Phil Sutter) [1666495]
  - flowtable: Fix for reading garbage (Phil Sutter) [1661327]
  - flowtable: Fix memleak in nftnl_flowtable_parse_devs() (Phil Sutter) [1661327]
  - flowtable: Fix use after free in two spots (Phil Sutter) [1661327]
  - flowtable: Add missing break (Phil Sutter) [1661327]
  - object: Avoid obj_ops array overrun (Phil Sutter) [1661327]


author: Phil Sutter <psutter@redhat.com> [1.1.4-2.el8]
changelog:
  - obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser (Phil Sutter) [1758673]
  - set_elem: Validate nftnl_set_elem_set() parameters (Phil Sutter) [1758673]
  - obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() (Phil Sutter) [1758673]
  - set: Don't bypass checks in nftnl_set_set_u{32,64}() (Phil Sutter) [1758673]
  - obj/tunnel: Fix for undefined behaviour (Phil Sutter) [1758673]
  - set_elem: Fix return code of nftnl_set_elem_set() (Phil Sutter) [1758673]
  - obj: ct_timeout: Check return code of mnl_attr_parse_nested() (Phil Sutter) [1758673]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el8]
changelog:
  - chain: Correctly check realloc() call (Phil Sutter) [1778952]
  - flowtable: Correctly check realloc() call (Phil Sutter) [1778952]
  - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952]
  - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el8]
changelog:
  - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223]
  - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795223]


author: Phil Sutter <psutter@redhat.com> [1.1.5-5.el8]
changelog:
  - set: expose nftnl_set_elem_nlmsg_build() (Phil Sutter) [2040754]
  - expr: dynset: release stateful expression from .free path (Phil Sutter) [2040478]
  - set_elem: missing set and build for NFTNL_SET_ELEM_EXPR (Phil Sutter) [2040478]


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3.0-4
changelog:
  - Python 2 binary package renamed to python2-libnl3
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Michal Ruprich <michalruprich@gmail.com> - 14:1.9.1-1
changelog:
  - Resolves: #1806422 - rebase libpcap to version 1.9.1
  - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump
  - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning
  - Resolves: #1792208 - Resource exhaustion while PHB header length validation


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x, and obsolete libpeas-loader-python
  - Resolves: #1559090


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.34-9
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131452)
  - CVE-2025-65018: heap buffer overflow (RHEL-131465)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133226)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.34-10
changelog:
  - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148338)
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148852)
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146659)


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: Honggang Li <honli@redhat.com> - 10.2.103_1-1
changelog:
  - Rebase to latest upstream master branch.
  - Fix build failures caught by gcc 7.x.
  - Resolves: bz1423872


author: - 10.3.8-5
changelog:
  - Fix partial injection of Fedora build flags.
  - Double the sizeof array fdesc to fix a gcc compiling issue.
  - Resolves: bz1556062


author: Tomáš Mráz <tmraz@redhat.com> 1.4.0-1
changelog:
  - Do not try to check presence of too short username in password
  - Make the user name check optional (via usercheck option)
  - Add an 'enforcing' option to make the checks to be warning-only
    in PAM
  - The difok = 0 setting will disable all old password similarity
    checks except new and old passwords being identical
  - Updated translations from Zanata


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary package renamed to python2-pwquality
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomáš Mráz <tmraz@redhat.com> 1.4.4-1
changelog:
  - Translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer
  - pam_pwquality: Abort the retry loop if user requests it
  - Allow setting retry, enforce_for_root, and local_users_only options
    in the pwquality.conf config file


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement [updated]


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.3-1
changelog:
  - Update to libqb-1.0.3, for list of changes see:
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0.3


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.3-11
changelog:
  Correctly set socket directory permissions when
    qb_ipcs_connection_auth_set() is called
    Resolves: rhbz#1836146


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-14
changelog:
  - Evolution of the previous (rhbz#1478089)
  - Make -devel package dependency on the main package arch-qualified


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.10.1-1
changelog:
  - Update to 1.10.1
  - Reduce download delays
  - Add an option to preserve timestamps of the downloaded files (RhBug:1688537)
  - Append the '?' part of repo URL after the path
  - Fix memory leaks


author: Ales Matej <amatej@redhat.com> - 1.10.6-1
changelog:
  - Update to 1.10.6
  - Imporove handling of xattr to re-download damadged files (RhBug:1690894)
  - Rephrase repository GPG check error message (RhBug:1741442)
  - Add sleep before next try when all mirrors were tried (RhBug:1741931)
  - Raise logging level of error messages (RhBug:1737709)
  - Handle webservers that don't support ranges when downloading zck
  - Define LRO_SUPPORTS_CACHEDIR only with zchunk (RhBug:1726141)
  - Allow to use mirrors multiple times for a target (RhBug:1678588)
  - Allow to try baseurl multiple times (RhBug:1678588)


author: Ales Matej <amatej@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
   - Retry mirrorlist/metalink downloads several times (RhBug:1741931)
   - Improve variable substitutions in URLs and add ${variable} support


author: Ales Matej <amatej@redhat.com> - 1.11.3-1
changelog:
  - Update to 1.11.3
   - Prefer mirrorlist/metalink over baseurl (RhBug:1775184)
   - Fix calling Python API without holding GIL (RhBug:1788918) 
   - Do not unref LrErr_Exception on exit (RhBug:1778854)


author: Nicola Sella <nsella@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Decode package URL when using for local filename (RhBug:1817130)
  - Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  - Download sources work when at least one of specified is working (RhBug:1775184)
  - Enable building on OSX


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix the key string parsing in url_substitution
  - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706)
  - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383)
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for working with certificates used with proxy
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.2-1
changelog:
  - Update to 1.14.2
  - Reduce time to load metadata
  - Fix resource leaks and memory leaks
  - Remove build dependency on python3-flask


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.2-4
changelog:
  - Fix termination of va_list in lr_metadatatarget_append_error()
  - Detailed error message when using non-existing TMPDIR


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-6
changelog:
  - replace all Fedora URLs by corresponding values for RHEL
  - fix coverity issues
  - Resolves: #1602590, #1623406


author: Michal Fabik <mfabik@redhat.com> 2.9.5-7
changelog:
  - bugzilla: change the default bugzilla group
  - tests: Disable strcpm'ing a freed pointer
  - Add autogen.sh
  - Resolves #1660449


author: Martin Kutlak <mkutlak@redhat.com> - 2.9.5-10
changelog:
  - reportclient: Search for required packages recursively
  - reportclient: Find and download required debuginfo packages
  - report-client: Find debuginfos in own method
  - Resolves: rhbz#1783897


author: EL Errata <el-errata_ww@oracle.com> - 2.9.5-10.0.1.el8
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]
  - libreport: unresolved deps python3-subscription-manager-rhsm [Orabug: 29386049]
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla


author: Michal Židek <mzidek@redhat.com> - 2.9.5-12
changelog:
  - Resolves: rhbz#1835388 - abrt-addon-ccpp causes failures during openscap scans on CCE-27119-7
  - This is just libreport side (abrt also needs to be patched)


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.1-1
changelog:
  - build: create tarball in release-* target
  - problem_data: fix double const
  - wizard: fix error found by -Werror=format-security
  - run_event: fix cmp between pointer and zero character
  - build: do not upload tarball to fedorahosted.org
  - spec: do not use fedorahosted.org as source
  - build: fix generating list of dependences in autogen.sh
  - build: generate new release entries with date
  - report-newt: free allocated variables, don't close dd twice
  - build: fix scratch-build target
  - changelog: reflect the PR
  - lib: several bug fixes in parsing of mountinfo
  - lib: correctly recognize chroot in container
  - lib: declare CONTAINER_ROOTS element name
  - lib: add more log wrappers for perror
  - reporter-bugzilla: use /etc/os-release for default url
  - configure.ac: Remove nss dependency
  - spec: include testsuite headers in the devel package
  - tests: include testsuite.h in the dist archive
  - maint: check pulled .po files for errors
  - build: fix bug in changelog generating in release target
  - changelog: fix typos


author: Julius Milan <jmilan@redhat.com> 2.9.3-1
changelog:
  - Translation updates
  - commit to delete
  - workflows: fix description in workflow_RHELJavaScript.xml.in
  - workflows: add workflow for adding data to existing case
  - client-python,report-python: Allow python to be optional at build time
  - ignored words: add SYSTEMD_NSS_BYPASS_BUS
  - reporter-ureport: add 'ProcessUnpackaged' option
  - spec: add workflow for adding data to existing case
  - rep-sys-journal: fix in finding executable basename
  - remove old obsolete
  - Group is not used any more
  - remove old changelogs
  - requires pythonX-dnf instead of dnf
  - doc: fix obsolete doxygen tags & complains
  - lib: Introduce pid_for_children element from ns
  - client-python: Do not try to unlink None
  - spec: rename Python binary packages


author: Martin Kutlak <mkutlak@redhat.com> 2.9.4-1
changelog:
  - Translation updates
  - Revert "use /usr/sbin/"
  - ureport: remove json-c is_error() usage
  - ldconfig and gtk-update-icon-cache is not needed in rawhide
  - reporter-rhtsupport: Remove dependency on redhat-access-insights
  - do not expand macro in changelog
  - move defattr which match the defaults
  - use /usr/sbin/
  - macro python_sitearch is always defined on rhel7+
  - remove rhel6 specific items and accomodate to rhel7+
  - This package uses names with ambiguous `python-` prefix in requirements.
  - reporter-{bugzilla,mantisbt,rhtsupport}: fix free
  - reporter-mailx: rely on configured email
  - spec: fix unowned directories
  - augeas: include local config path
  - doc: update to contain newly added user's local config
  - reporter-mantisbt: read configuration from user's home
  - reporter-rhtsupport: read configuration from user's home
  - reporter-bugzilla: read configuration from user's home
  - reporter-bugzilla: ask concrete bz when requiring login
  - makefile: fix make release


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-1
changelog:
  - spec: actualize according to downstream
  - spec: Conditionalize the Python2 and Python3
  - report-python: fix tests if configure --without-python2
  - autogen: correctly parse buildrequires from spec file


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-6
changelog:
  - Describe fcontext regular expressions (#1904059)
  - Strip spaces before values in config (#2012145)


author: Petr Lautrbach <lautrbach@redhat.com> - 2.9-10
changelog:
  - Close old selabel handle when setting a new one (RHEL-73348)
  - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252)


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-5
changelog:
  - Revert "genhomedircon: check usepasswd" (rhbz#1871786)
  - semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
  - semanage.conf - expand list of ignoredirs (rhbz#1871786)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-7
changelog:
  - Trivial style fixes
  - Free contents of modkey in semanage_direct_remove
  - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext()
  - add missing include to boolean_record.c
  - move module hashing into libsemanage
  - move compressed file handling into a separate object
  - clean up semanage_direct_commit() a bit
  - optionally rebuild policy when modules are changed externally
  - add command-line option to detect module changes (#2049186)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-9
changelog:
  - allow spaces in user/group names (#2042408)
  - always write kernel policy when check_ext_changes is specified (#2089802)


author: Petr Lautrbach <lautrbach@redhat.com> - 2.9-11
changelog:
  - Set new restorecon handle before doing restorecon (RHEL-73348)
  - Mute error messages from selinux_restorecon


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-2
changelog:
  - reset pointer after free in cil_strpool_destroy()
  - cil: Add ability to redeclare types[attributes]
  - cil: Keep attributes used by generated attributes in neverallow rules
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - fix memory leak in sepol_bool_query()
  - cil: drop wrong unused attribute
  - cil: fix -Wwrite-strings warning
  - cil: __cil_post_db_neverallow_attr_helper() does not use extra_args


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-3
changelog:
  - cil: Fix out-of-bound read of file context pattern ending with "\"
  - cil: Destroy classperms list when resetting classpermission (#1983517)
  - cil: Destroy classperm list when resetting map perms (#1983521)
  - cil: cil_reset_classperms_set() should not reset classpermission (#1983525)
  - cil: Set class field to NULL when resetting struct cil_classperms
  - cil: More strict verification of constraint leaf expressions
  - cil: Exit with an error if declaration name is a reserved word
  - cil: Allow permission expressions when using map classes
  - cil: Reorder checks for invalid rules when building AST
  - cil: Cleanup build AST helper functions
  - cil: Create new first child helper function for building AST
  - cil: Remove unused field from struct cil_args_resolve
  - cil: Destroy disabled optional blocks after pass is complete
  - cil: Check if name is a macro parameter first
  - cil: fix NULL pointer dereference in __cil_insert_name
  - cil: Report disabling an optional block only at high verbose levels
  - cil: Use AST to track blocks and optionals when resolving
  - cil: Reorder checks for invalid rules when resolving AST
  - cil: Sync checks for invalid rules in booleanifs
  - cil: Check for statements not allowed in optional blocks (#1983530)


author: Peter Jones <pjones@redhat.com> - 2.3.0-2
changelog:
  - Once again, don't complain about compilers newer than tested with in the
    public headers.
  - Fix up bad %global vs %define directives
  - Fix up bad old changelog dates
  - Note there's a missing changelog here from the 2.3.0 rebase


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.4-1
changelog:
  - soname bump to "1"
  - incompatible API changes:
    * bindings: Selection.flags is now an attribute
    * repodata_lookup_num now works like the other lookup_num functions
  - new functions:
    * selection_make_matchsolvable
    * selection_make_matchsolvablelist
    * pool_whatmatchessolvable
    * repodata_search_arrayelement
    * repodata_lookup_kv_uninternalized
    * repodata_search_uninternalized
    * repodata_translate_dir
  - new repowriter interface to write solv files allowing better
    control over what gets written
  - support for filtered file lists with a custom filter
  - dropped support of (since a long time unused) REPOKEY_TYPE_U32
  - selected bug fixes:
    * fix nasty off-by-one error in repo_write
    * do not autouninstall packages because of forcebest updates
    * fixed a couple of null pointer derefs and potential memory
      leaks
    * made disfavoring recommended packages work if strong recommends
      is enabled
    * no longer disable infarch rules when they don't conflict with
      the job
    * repo_add_rpmdb: do not copy bad solvables from the old solv file
    * fix cleandeps updates not updating all packages
  - new features:
    * support rpm's new '^' version separator
    * support set/get_considered_list in bindings
    * new experimental SOLVER_FLAG_ONLY_NAMESPACE_RECOMMENDED flag
    * do favor evaluation before pruning allowing to (dis)favor
      specific package versions
    * bindings: support pool.matchsolvable(), pool.whatmatchessolvable()
      pool.best_solvables() and selection.matchsolvable()
    * experimental DISTTYPE_CONDA and REL_CONDA support


author: Ales Matej <amatej@redhat.org> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - selected bug fixes:
    * fix updating of too many packages in focusbest mode
    * fix handling of disabled installed packages in distupgrade
    * fix repository priority handling for multiversion packages
    * better support of inverval deps in pool_match_dep()
    * support src rpms that have non-empty provides
    * fix favorq leaking between solver runs if the solver is reused
    * fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason
    * be more correct with multiversion packages that obsolete their
      own name
    * allow building with swig-4.0.0
    * lock jobs now take precedence over dup and forcebest jobs
  - new features
    * new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag 
    * bindings: add get_disabled_list() and set_disabled_list()
    * bindings: add whatcontainsdep()
    * bindings: make the selection filters return the self object
    * MSVC compilation support


author: Ales Matej <amatej@redhat.org> - 0.7.11-1
changelog:
  - Update to 0.7.11
  - selected bug fixes:
    * support arch<->noarch package changes when creating patch
      conflicts from the updateinfo data
    * also support other rpm database types
    * fixed solv_zchunk decoding error if large chunks are used
    * treat retracted pathes as irrelevant
    * made add_update_target work with multiversion installs
  - new features
    * support for SOLVER_BLACKLIST jobs that block the installation of matched
      packages unless they are directly selected by an SOLVER_INSTALL job
    * libsolv now also parses the patch status in the updateinfo parser
    * new solvable_matchessolvable() function
    * support conda constrains dependencies
    * new rpm_stat_database() function
    * new rpm_hash_database_state() function


author: Nicola Sella <nsella@redhat.com> - 0.7.16-1
changelog:
  - Update to 0.7.16
  - selected bug fixes:
    * make testcase_mangle_repo_names deal correctly with freed repos
    [bnc#1177238]
    * fix add_complex_recommends() selecting conflicted packages in
      rare cases leading to crashes
    * improve choicerule generation so that package updates are
      prefered in more cases
    * fix deduceq2addedmap clearing bits outside of the map
    * conda: feature depriorization and fix startswith implementation
    * Fix solvable swapping messing up idarrays
    * fix ruleinfo of complex dependencies returning the wrong origin
    * fix solv_zchunk decoding error if large chunks are used
      [bnc#1159314]
  - new features
    * new testcase_mangle_repo_names() function
    * new solv_fmemopen() function
    * Enable zstd compression support for sle15 and sle15-sp2
    * Support blacklisted packages in solver_findproblemrule()
      [bnc#1172135]
    * Support rules with multiple negative literals in choice rule
      generation
    * build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
      multiple rpm database backends
    * added two new function to make libzypp independent of the rpm
      database format
    * support conda constrains dependencies


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.17-1
changelog:
  - Update to 0.7.17
  - selected bug fixes:
    * repo_write: fix handling of nested flexarray
    * improve choicerule generation a bit more to cover more cases
    * harden testcase parser against repos being added too late
    * support python-3.10
    * check /var/lib/rpm macro in rpmdb code
  - new features:
    * handle default/visible/langonly attributes in comps parser
    * support multiple collections in updateinfo parser
    * add '-D' option in rpmdb2solv to set the dbpath


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix error handling in solv_xfopen_fd()
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.20-5
changelog:
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Milan Crha <mcrha@redhat.com> - 2.62.2-1
changelog:
  - Update to 2.62.2
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames


author: Tomas Popela <tpopela@redhat.com> - 2.62.3-6
changelog:
  - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names
  - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data
  - Resolves: RHEL-67076
  - Resolves: RHEL-67067


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-7
changelog:
  - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict
    Resolves: RHEL-76376


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-8
changelog:
  - Backport patches for various CVEs, plus test improvements
    Resolves: RHEL-85887
    Resolves: RHEL-85900
    Resolves: RHEL-85901
    Resolves: RHEL-87039
    Resolves: RHEL-87094
    Resolves: RHEL-87114
    Resolves: RHEL-88348
    Resolves: RHEL-88351


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.62.3-9
changelog:
  - Add patches to improve test reliability
  - Backport patches for various CVEs
    Resolves: RHEL-85879
    Resolves: RHEL-92280
    Resolves: RHEL-93031
    Resolves: RHEL-93032


