# changelog

author: Brian Maly <brian.maly@oracle.com> [5.15.0-204.147.3.el9uek]
changelog:
  - Revert "tcp: fix excessive TLP and RACK timeouts from HZ rounding" (Sherry Yang)  [Orabug: 36241828]  
  - mm: avoid heavy swap lock contention when unmapping with padata (Anthony Yznaga)  [Orabug: 36073084]  
  - mm: use less threads when unmapping some large VMAs (Anthony Yznaga)  [Orabug: 36073084]  
  - crypto: qat - add NULL pointer check (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - fix mutex ordering in adf_rl (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - fix error path in add_update_sla() (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - add sysfs_added flag for rate limiting (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - add sysfs_added flag for ras (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - prevent underflow in rp2srv_store() (Dan Carpenter)  [Orabug: 36156923]  
  - Documentation: ABI: debugfs-driver-qat: fix fw_counters path (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - move adf_cfg_services (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - add num_rps sysfs attribute (Ciunas Bennett)  [Orabug: 36156923]  
  - crypto: qat - add rp2svc sysfs attribute (Ciunas Bennett)  [Orabug: 36156923]  
  - crypto: qat - add rate limiting sysfs interface (Ciunas Bennett)  [Orabug: 36156923]  
  - crypto: qat - add rate limiting feature to qat_4xxx (Damian Muszynski)  [Orabug: 36156923]  
  - units: add missing header (Andy Shevchenko)  [Orabug: 36156923]  
  - units: Add BYTES_PER_*BIT (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - add retrieval of fw capabilities (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - add bits.h to icp_qat_hw.h (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - move admin api (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - fix ring to service map for QAT GEN4 (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - use masks for AE groups (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - refactor fw config related functions (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - count QAT GEN4 errors (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - add error counters (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - add handling of errors from ERRSOU3 for QAT GEN4 (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - add adf_get_aram_base() helper function (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - add handling of compression related errors for QAT GEN4 (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - add handling of errors from ERRSOU2 for QAT GEN4 (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - add reporting of errors from ERRSOU1 for QAT GEN4 (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - add reporting of correctable errors for QAT GEN4 (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - add infrastructure for error reporting (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov)  [Orabug: 36156923]  
  - crypto: qat - add cnv_errors debugfs file (Lucas Segarra Fernandez)  [Orabug: 36156923]  
  - crypto: qat - add pm_status debugfs file (Lucas Segarra Fernandez)  [Orabug: 36156923]  
  - crypto: qat - refactor included headers (Lucas Segarra Fernandez)  [Orabug: 36156923]  
  - crypto: qat - add namespace to driver (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - Remove zlib-deflate (Herbert Xu)  [Orabug: 36156923]  
  - crypto: qat - enable dc chaining service (Adam Guerin)  [Orabug: 36156923]  
  - crypto: qat - consolidate services structure (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - fix unregistration of compression algorithms (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - fix unregistration of crypto algorithms (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - ignore subsequent state up commands (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - do not shadow error code (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - fix state machines cleanup paths (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - refactor deprecated strncpy (Justin Stitt)  [Orabug: 36156923]  
  - crypto: qat - Use list_for_each_entry() helper (Jinjie Ruan)  [Orabug: 36156923]  
  - crypto: qat - fix crypto capability detection for 4xxx (Adam Guerin)  [Orabug: 36156923]  
  - crypto: qat - Remove unused function declarations (Yue Haibing)  [Orabug: 36156923]  
  - crypto: qat - use kfree_sensitive instead of memset/kfree() (Yang Yingliang)  [Orabug: 36156923]  
  - crypto: qat - replace the if statement with min() (You Kangren)  [Orabug: 36156923]  
  - crypto: qat - add heartbeat counters check (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - add heartbeat feature (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - add measure clock frequency (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - drop obsolete heartbeat interface (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - add internal timer for qat 4xxx (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - add fw_counters debugfs file (Lucas Segarra Fernandez)  [Orabug: 36156923]  
  - crypto: qat - change value of default idle filter (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - do not export adf_init_admin_pm() (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - expose pm_idle_enabled through sysfs (Lucas Segarra Fernandez)  [Orabug: 36156923]  
  - crypto: qat - extend configuration for 4xxx (Adam Guerin)  [Orabug: 36156923]  
  - Documentation: qat: change kernel version (Meadhbh)  [Orabug: 36156923]  
  - Documentation: qat: rewrite description (Bagas Sanjaya)  [Orabug: 36156923]  
  - Documentation: qat: Use code block for qat sysfs example (Bagas Sanjaya)  [Orabug: 36156923]  
  - crypto: qat - refactor fw config logic for 4xxx (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - make fw images name constant (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - move returns to default case (Adam Guerin)  [Orabug: 36156923]  
  - crypto: qat - update slice mask for 4xxx devices (Karthikeyan Gopal)  [Orabug: 36156923]  
  - crypto: qat - set deprecated capabilities as reserved (Karthikeyan Gopal)  [Orabug: 36156923]  
  - crypto: qat - add missing function declaration in adf_dbgfs.h (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - move dbgfs init to separate file (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - Move driver to drivers/crypto/intel/qat (Tom Zanussi)  [Orabug: 36156923]  
  - crypto: qat - drop redundant adf_enable_aer() (Bjorn Helgaas)  [Orabug: 36156923]  
  - crypto: qat - simplify adf_enable_aer() (Uwe Kleine-König)  [Orabug: 36156923]  
  - crypto: qat - fix apply custom thread-service mapping for dc service (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - add support for 402xx devices (Damian Muszynski)  [Orabug: 36156923]  
  - crypto: qat - make state machine functions static (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - refactor device restart logic (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - replace state machine calls (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - fix concurrency issue when device state changes (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - expose device config through sysfs for 4xxx (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - delay sysfs initialization (Shashank Gupta)  [Orabug: 36156923]  
  - crypto: qat - Include algapi.h for low-level Crypto API (Herbert Xu)  [Orabug: 36156923]  
  - crypto: qat - Use request_complete helpers (Herbert Xu)  [Orabug: 36156923]  
  - crypto: qat - add qat_zlib_deflate (Lucas Segarra Fernandez)  [Orabug: 36156923]  
  - crypto: qat - extend buffer list logic interface (Lucas Segarra Fernandez)  [Orabug: 36156923]  
  - crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (Meadhbh Fitzpatrick)  [Orabug: 36156923]  
  - crypto: qat - add limit to linked list parsing (Adam Guerin)  [Orabug: 36156923]  
  - crypto: qat - add check to validate firmware images (Srinivas Kerekare)  [Orabug: 36156923]  
  - crypto: qat - relocate and rename adf_sriov_prepare_restart() (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - change behaviour of adf_cfg_add_key_value_param() (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - Removes the x86 dependency on the QAT drivers (Yoan Picchi)  [Orabug: 36156923]  
  - crypto: qat - Fix unsigned function returning negative constant (Haowen Bai)  [Orabug: 36156923]  
  - crypto: qat - remove line wrapping for pfvf_ops functions (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - use u32 variables in all GEN4 pfvf_ops (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - replace disable_vf2pf_interrupts() (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - leverage the GEN2 VF mask definiton (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - rework the VF2PF interrupt handling logic (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - fix off-by-one error in PFVF debug print (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - fix wording and formatting in code comment (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - test PFVF registers for spurious interrupts on GEN4 (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - add check for invalid PFVF protocol version 0 (Wojciech Ziemba)  [Orabug: 36156923]  
  - crypto: qat - add missing restarting event notification in VFs (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - remove unnecessary tests to detect PFVF support (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - remove unused PFVF stubs (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - remove unneeded braces (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - fix ETR sources enabled by default on GEN2 devices (Marco Chiappero)  [Orabug: 36156923]  
  - crypto: qat - stop using iommu_present() (Robin Murphy)  [Orabug: 36156923]  
  - crypto: qat - remove unneeded assignment (Giovanni Cabiddu)  [Orabug: 36156923]  
  - crypto: qat - don't cast parameter in bit operations (Andy Shevchenko)  [Orabug: 36156923]  
  - Revert "selftests/bpf: Test tail call counting with bpf2bpf and data on stack" (Samasth Norway Ananda)  [Orabug: 36204961]  
  - netfilter: nf_tables: check if catch-all set element is active in next generation (Pablo Neira Ayuso)  [Orabug: 36250951]  {CVE-2024-1085}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-204.147.4.el9uek]
changelog:
  - uek-rpm: Disable MCORE2 in container kernel configs (Harshit Mogalapalli)  [Orabug: 36267828]  
  - md: fix regression for null-ptr-deference in __md_stop() (Yu Kuai)  [Orabug: 36230125]  
  - md: Free resources in __md_stop (Xiao Ni)  [Orabug: 36230125]  
  - md: Change active_io to percpu (Xiao Ni)  [Orabug: 36230125]  
  - md: Factor out is_md_suspended helper (Xiao Ni)  [Orabug: 36230125]  
  - hwmon: (opbmc) E6/AST2600 platform enabled (Jan Zdarek)  [Orabug: 36222931]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-204.147.5.el9uek]
changelog:
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell)  [Orabug: 36289786]  
  - uek-rpm: Make few builtin options to modules back -- hardening (Harshit Mogalapalli)  [Orabug: 36196579]  
  - iommufd/iova_bitmap: Consider page offset for the pages to be pinned (Joao Martins)  [Orabug: 36197723]  
  - iommufd/iova_bitmap: Handle recording beyond the mapped pages (Joao Martins)  [Orabug: 36197723]  
  - iommufd/iova_bitmap: Switch iova_bitmap::bitmap to an u8 array (Joao Martins)  [Orabug: 36197723]  
  - iommufd/iova_bitmap: Bounds check mapped::pages access (Joao Martins)  [Orabug: 36197723]  
  - Revert "iommu/amd: Improve dirty read io-pgtable walker" (Joao Martins)  [Orabug: 36197723]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-204.147.6.el9uek]
changelog:
  - keys, dns: Fix size check of V1 server-list header (David Howells)   
  - net/rds: Supporting SIOCOUTQ to read pending sends (Devesh Sharma)  [Orabug: 34460809]  
  - KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky)  [Orabug: 36171472]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-205.147.1.el9uek]
changelog:
  - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334308]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-205.149.2.el9uek]
changelog:
  - LTS version: v5.15.149 (Vijayendra Suman)   
  - usb: dwc3: gadget: Ignore End Transfer delay on teardown (Thinh Nguyen)   
  - media: Revert "media: rkisp1: Drop IRQF_SHARED" (Tomi Valkeinen)   
  - usb: dwc3: gadget: Execute gadget stop after halting the controller (Wesley Cheng)   
  - usb: dwc3: gadget: Don't delay End Transfer on delayed_status (Thinh Nguyen)   
  - staging: fbtft: core: set smem_len before fb_deferred_io_init call (Peter Suti)   
  - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Kees Cook)   
  - fs/ntfs3: Add null pointer checks (Konstantin Komarov)   
  - net: bcmgenet: Fix EEE implementation (Florian Fainelli)   
  - drm/msm/dsi: Enable runtime PM (Konrad Dybcio)   
  - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Douglas Anderson)   
  - dm: limit the number of targets and parameter size area (Mikulas Patocka)   
  - nilfs2: replace WARN_ONs for invalid DAT metadata block requests (Ryusuke Konishi)   
  - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi)   
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds)   
  - netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik)   
  - net: prevent mss overflow in skb_segment() (Eric Dumazet)   
  - hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range() (Davidlohr Bueso)   
  - netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik)   
  - scripts/decode_stacktrace.sh: optionally use LLVM utilities (Carlos Llamas)   
  - scripts: decode_stacktrace: demangle Rust symbols (Miguel Ojeda)   
  - scripts/decode_stacktrace.sh: support old bash version (Schspa Shi)   
  - fbdev: flush deferred IO before closing (Nam Cao)   
  - fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release() (Takashi Iwai)   
  - fbdev: Fix invalid page access after closing deferred I/O devices (Takashi Iwai)   
  - fbdev: Rename pagelist to pagereflist for deferred I/O (Thomas Zimmermann)   
  - fbdev: Track deferred-I/O pages in pageref struct (Thomas Zimmermann)   
  - fbdev: defio: fix the pagelist corruption (Chuansheng Liu)   
  - fbdev: Don't sort deferred-I/O pages by default (Thomas Zimmermann)   
  - fbdev/defio: Early-out if page is already enlisted (Thomas Zimmermann)   
  - serial: 8250_exar: Set missing rs485_supported flag (Lino Sanfilippo)   
  - serial: 8250_exar: Fill in rs485_supported (Ilpo Järvinen)   
  - usb: dwc3: gadget: Queue PM runtime idle on disconnect event (Wesley Cheng)   
  - usb: dwc3: gadget: Handle EP0 request dequeuing properly (Wesley Cheng)   
  - usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API (Wesley Cheng)   
  - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (Wesley Cheng)   
  - usb: dwc3: gadget: Submit endxfer command if delayed during disconnect (Wesley Cheng)   
  - usb: dwc3: gadget: Force sending delayed status during soft disconnect (Wesley Cheng)   
  - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (Mayank Rana)   
  - usb: dwc3: gadget: Delay issuing End Transfer (Thinh Nguyen)   
  - usb: dwc3: gadget: Only End Transfer for ep0 data phase (Thinh Nguyen)   
  - usb: dwc3: ep0: Don't prepare beyond Setup stage (Thinh Nguyen)   
  - usb: dwc3: gadget: Wait for ep0 xfers to complete during dequeue (Thinh Nguyen)   
  - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init (Tianjia Zhang)   
  - bus: moxtet: Add spi device table (Sjoerd Simons)   
  - dma-buf: add dma_fence_timestamp helper (Christian König)   
  - af_unix: Fix task hung while purging oob_skb in GC. (Kuniyuki Iwashima)   
  - tracing: Inform kmemleak of saved_cmdlines allocation (Steven Rostedt (Google))   
  - pmdomain: core: Move the unused cleanup to a _sync initcall (Konrad Dybcio)   
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel)   
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Ziqi Zhao)   
  - of: property: fix typo in io-channels (Nuno Sa)   
  - mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE (Prakash Sangappa)   
  - ceph: prevent use-after-free in encode_cap_msg() (Rishabh Dave)   
  - net: ethernet: ti: cpsw_new: enable mac_managed_pm to fix mdio (Sinthu Raja)   
  - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Alexandra Winter)   
  - net: ethernet: ti: cpsw: enable mac_managed_pm to fix mdio (Sinthu Raja)   
  - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update (Marc Zyngier)   
  - irqchip/irq-brcmstb-l2: Add write memory barrier before exit (Doug Berger)   
  - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue() (Johannes Berg)   
  - nfp: flower: prevent re-adding mac index for bonded port (Daniel de Villiers)   
  - nfp: use correct macro for LengthSelect in BAR config (Daniel Basilio)   
  - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked (Kim Phillips)   
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi)   
  - ALSA: hda/conexant: Add quirk for SWS JS201D (bo liu)   
  - mmc: slot-gpio: Allow non-sleeping GPIO ro (Alexander Stein)   
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl)   
  - x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (Aleksander Mazur)   
  - powerpc/64: Set task pt_regs->link to the LR value on scv entry (Naveen N Rao)   
  - serial: max310x: fail probe if clock crystal is unstable (Hugo Villeneuve)   
  - serial: max310x: improve crystal stable clock detection (Hugo Villeneuve)   
  - serial: max310x: set default value when reading clock ready bit (Hugo Villeneuve)   
  - ring-buffer: Clean ring_buffer_poll_wait() error return (Vincent Donnefort)   
  - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Souradeep Chakrabarti)   
  - drm/prime: Support page array >= 4GB (Philip Yang)   
  - media: rc: bpf attach/detach requires write permission (Sean Young)   
  - iio: accel: bma400: Fix a compilation problem (Mario Limonciello)   
  - iio: core: fix memleak in iio_device_register_sysfs (Dinghao Liu)   
  - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (zhili.liu)   
  - staging: iio: ad5933: fix type mismatch regression (David Schiller)   
  - tracing: Fix wasted memory in saved_cmdlines logic (Steven Rostedt (Google))   
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li)   
  - misc: fastrpc: Mark all sessions as invalid in cb_remove (Ekansh Gupta)   
  - binder: signal epoll threads of self-work (Carlos Llamas)   
  - ALSA: hda/cs8409: Suppress vmaster control for Dolphin models (Vitaly Rodionov)   
  - ASoC: codecs: wcd938x: handle deferred probe (Krzysztof Kozlowski)   
  - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL (Edson Juliano Drosdeck)   
  - xen-netback: properly sync TX responses (Jan Beulich)   
  - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() (Nikita Zhandarovich)   
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin)   
  - kbuild: Fix changing ELF file type for output of gen_btf for big endian (Nathan Chancellor)   
  - firewire: core: correct documentation of fw_csr_string() kernel API (Takashi Sakamoto)   
  - lsm: fix the logic in security_inode_getsecctx() (Ondrej Mosnacek)   
  - Revert "drm/amd: flush any delayed gfxoff on suspend entry" (Mario Limonciello)   
  - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" (Lee Duncan)   
  - mptcp: fix data re-injection from stale subflow (Paolo Abeni)   
  - modpost: trim leading spaces when processing source files list (Radek Krejci)   
  - i2c: i801: Fix block process call transactions (Jean Delvare)   
  - i2c: i801: Remove i801_set_block_buffer_mode (Heiner Kallweit)   
  - powerpc/kasan: Fix addr error caused by page alignment (Jiangfeng Xiao)   
  - media: ir_toy: fix a memleak in irtoy_tx (Zhipeng Lu)   
  - usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend (Uttkarsh Aggarwal)   
  - usb: f_mass_storage: forbid async queue when shutdown happen (yuan linyu)   
  - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (Oliver Neukum)   
  - usb: ucsi_acpi: Fix command completion handling (Christian A. Ehrhardt)   
  - iio: hid-sensor-als: Return 0 for HID_USAGE_SENSOR_TIME_TIMESTAMP (Srinivas Pandruvada)   
  - HID: wacom: Do not register input devices until after hid_hw_start (Jason Gerecke)   
  - HID: wacom: generic: Avoid reporting a serial of '0' to userspace (Tatsunosuke Tobita)   
  - HID: i2c-hid-of: fix NULL-deref on failed power up (Johan Hovold)   
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx (Luka Guzenko)   
  - ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32 (David Senoner)   
  - scsi: storvsc: Fix ring buffer size calculation (Michael Kelley)   
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe)   
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google))   
  - scs: add CONFIG_MMU dependency for vfree_atomic() (Samuel Holland)   
  - i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera)   
  - MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler (Guenter Roeck)   
  - net: sysfs: Fix /sys/class/net/<iface> path for statistics (Breno Leitao)   
  - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (Alexey Khoroshilov)   
  - spi: ppc4xx: Drop write-only variable (Uwe Kleine-König)   
  - net: openvswitch: limit the number of recursions from action sets (Aaron Conole)   
  - wifi: iwlwifi: Fix some error codes (Dan Carpenter)   
  - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt)   
  - btrfs: send: return EOPNOTSUPP on unknown flags (David Sterba)   
  - btrfs: forbid deleting live subvol qgroup (Boris Burkov)   
  - btrfs: do not ASSERT() if the newly created subvolume already got read (Qu Wenruo)   
  - btrfs: forbid creating subvol qgroups (Boris Burkov)   
  - netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso)   
  - net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Furong Xu)   
  - net: stmmac: xgmac: use #define for string constants (Simon Horman)   
  - clocksource: Skip watchdog check for large watchdog intervals (Jiri Wiesner)   
  - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Hans de Goede)   
  - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (Werner Sembach)   
  - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK (Prashanth K)   
  - usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK (Prashanth K)   
  - USB: serial: cp210x: add ID for IMST iM871A-USB (Leonard Dallmayr)   
  - USB: serial: option: add Fibocom FM101-GL variant (Puliang Lu)   
  - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e (JackBB Wu)   
  - ALSA: usb-audio: Add a quirk for Yamaha YIT-W12TX transmitter (Julian Sikorski)   
  - drivers: lkdtm: fix clang -Wformat warning (Justin Stitt)   
  - blk-iocost: Fix an UBSAN shift-out-of-bounds warning (Tejun Heo)   
  - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei)   
  - fs/ntfs3: Fix an NULL dereference bug (Dan Carpenter)   
  - netfilter: nft_set_pipapo: remove scratch_aligned pointer (Florian Westphal)   
  - netfilter: nft_set_pipapo: add helper to release pcpu scratch area (Florian Westphal)   
  - netfilter: nft_set_pipapo: store index in scratch maps (Florian Westphal)   
  - netfilter: nft_ct: reject direction for ct id (Pablo Neira Ayuso)   
  - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Srinivasan Shanmugam)   
  - drm/amd/display: Fix multiple memory leaks reported by coverity (Anson Jacob)   
  - netfilter: nft_compat: restrict match/target protocol to u16 (Pablo Neira Ayuso)   
  - netfilter: nft_compat: reject unused compat flag (Pablo Neira Ayuso)   
  - ppp_async: limit MRU to 64K (Eric Dumazet)   
  - af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. (Kuniyuki Iwashima)   
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida)   
  - rxrpc: Fix response to PING RESPONSE ACKs to a dead call (David Howells)   
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet)   
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping (Zhang Rui)   
  - hwmon: (coretemp) Fix out-of-bounds memory access (Zhang Rui)   
  - hwmon: (aspeed-pwm-tacho) mutex for tach reading (Loic Prylli)   
  - octeontx2-pf: Fix a memleak otx2_sq_init (Zhipeng Lu)   
  - atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu)   
  - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart)   
  - selftests: net: avoid just another constant wait (Paolo Abeni)   
  - selftests: net: cut more slack for gro fwd tests. (Paolo Abeni)   
  - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Furong Xu)   
  - drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case (Kuogee Hsieh)   
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren)   
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Frank Li)   
  - phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (Yoshihiro Shimoda)   
  - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (Christophe JAILLET)   
  - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA (Christophe JAILLET)   
  - dmaengine: ti: k3-udma: Report short packet errors (Jai Luthra)   
  - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools (Guanhua Gao)   
  - ASoC: codecs: lpass-wsa-macro: fix compander volume hack (Johan Hovold)   
  - bonding: remove print in bond_verify_device_path (Zhengchao Shao)   
  - HID: apple: Add 2021 magic keyboard FN key mapping (Benjamin Berg)   
  - HID: apple: Add support for the 2021 Magic Keyboard (Alex Henrie)   
  - gve: Fix use-after-free vulnerability (Praveen Kaligineedi)   
  - arm64: irq: set the correct node for shadow call stack (Huang Shijie)   
  - net: sysfs: Fix /sys/class/net/<iface> path (Breno Leitao)   
  - selftests: net: fix available tunnels detection (Paolo Abeni)   
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet)   
  - net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu)   
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Pablo Neira Ayuso)   
  - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger (Pablo Neira Ayuso)   
  - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV (Pablo Neira Ayuso)   
  - bridge: mcast: fix disabled snooping after long uptime (Linus Lüssing)   
  - llc: call sock_orphan() at release time (Eric Dumazet)   
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Helge Deller)   
  - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() (Christophe JAILLET)   
  - ixgbe: Refactor overtemp event handling (Jedrzej Jagielski)   
  - ixgbe: Refactor returning internal error codes (Jedrzej Jagielski)   
  - ixgbe: Remove non-inclusive language (Piotr Skajewski)   
  - tcp: add sanity checks to rx zerocopy (Eric Dumazet)   
  - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (Eric Dumazet)   
  - ip6_tunnel: use dev_sw_netstats_rx_add() (Eric Dumazet)   
  - selftests: net: give more time for GRO aggregation (Paolo Abeni)   
  - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei)   
  - scsi: isci: Fix an error code problem in isci_io_request_build() (Su Hui)   
  - drm: using mul_u32_u32() requires linux/math64.h (Stephen Rothwell)   
  - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis)   
  - perf: Fix the nr_addr_filters fix (Peter Zijlstra)   
  - drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' (Srinivasan Shanmugam)   
  - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' (Srinivasan Shanmugam)   
  - drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' (Srinivasan Shanmugam)   
  - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li)   
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)   
  - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings (Zhu Yanjun)   
  - drm/amdkfd: Fix lock dependency warning (Felix Kuehling)   
  - libsubcmd: Fix memory leak in uniq() (Ian Rogers)   
  - PCI/AER: Decode Requester ID when no error info found (Bjorn Helgaas)   
  - PCI: Fix 64GT/s effective data rate calculation (Ilpo Järvinen)   
  - fs/kernfs/dir: obey S_ISGID (Max Kellermann)   
  - tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE (Adrian Reber)   
  - selftests/sgx: Fix linker script asserts (Jo Van Bulck)   
  - usb: hub: Replace hardcoded quirk value with BIT() macro (Hardik Gajjar)   
  - perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present (James Clark)   
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden)   
  - PCI: Only override AMD USB controller if required (Guilherme G. Piccoli)   
  - mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt (Xiaowu.ding)   
  - mfd: ti_am335x_tscadc: Fix TI SoC dependencies (Peter Robinson)   
  - xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import (Oleksandr Tyshchenko)   
  - i3c: master: cdns: Update maximum prescaler value for i2c clock (Harshit Shah)   
  - um: time-travel: fix time corruption (Johannes Berg)   
  - um: net: Fix return type of uml_net_start_xmit() (Nathan Chancellor)   
  - um: Don't use vfprintf() for os_info() (Benjamin Berg)   
  - um: Fix naming clash between UML and scheduler (Anton Ivanov)   
  - leds: trigger: panic: Don't register panic notifier if creating the trigger failed (Heiner Kallweit)   
  - ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 (bo liu)   
  - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (Srinivasan Shanmugam)   
  - drm/amdgpu: Let KFD sync with VM fences (Felix Kuehling)   
  - clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks (Alexander Stein)   
  - clk: imx: scu: Fix memory leak in __imx_clk_gpr_scu() (Kuan-Wei Chiu)   
  - watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 (Werner Fischer)   
  - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu)   
  - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu)   
  - drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap (Wang, Beyond)   
  - drm/msm/dpu: Ratelimit framedone timeout msgs (Rob Clark)   
  - media: i2c: imx335: Fix hblank min/max values (Kieran Bingham)   
  - media: ddbridge: fix an error code problem in ddb_probe (Su Hui)   
  - IB/ipoib: Fix mcast list locking (Daniel Vacek)   
  - drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (Douglas Anderson)   
  - f2fs: fix to tag gcing flag on page during block migration (Chao Yu)   
  - media: rkisp1: Drop IRQF_SHARED (Tomi Valkeinen)   
  - ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL (Pierre-Louis Bossart)   
  - ALSA: hda: Intel: add HDA_ARL PCI ID support (Pierre-Louis Bossart)   
  - PCI: add INTEL_HDA_ARL to pci_ids.h (Pierre-Louis Bossart)   
  - media: rockchip: rga: fix swizzling for RGB formats (Michael Tretter)   
  - media: stk1160: Fixed high volume of stk1160_dbg messages (Ghanshyam Agrawal)   
  - drm/mipi-dsi: Fix detach call without attach (Tomi Valkeinen)   
  - drm/framebuffer: Fix use of uninitialized variable (Tomi Valkeinen)   
  - drm/drm_file: fix use of uninitialized variable (Tomi Valkeinen)   
  - f2fs: fix write pointers on zoned device after roll forward (Jaegeuk Kim)   
  - drm/amd/display: Fix tiled display misalignment (Meenakshikumar Somasundaram)   
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang)   
  - fast_dput(): handle underflows gracefully (Al Viro)   
  - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument (Cristian Ciocaltea)   
  - ALSA: hda: Refer to correct stream index at loops (Takashi Iwai)   
  - f2fs: fix to check return value of f2fs_reserve_new_block() (Chao Yu)   
  - octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry (Suman Ghosh)   
  - i40e: Fix VF disable behavior to block all traffic (Andrii Staikov)   
  - bridge: cfm: fix enum typo in br_cc_ccm_tx_parse (Lin Ma)   
  - Bluetooth: L2CAP: Fix possible multiple reject send (Frédéric Danis)   
  - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 (Zijun Hu)   
  - wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg)   
  - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (Su Hui)   
  - ALSA: usb-audio: Add delay quirk for MOTU M Series 2nd revision (Alexander Tsoy)   
  - libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos (Mingyi Zhang)   
  - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (Zenm Chen)   
  - arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property (Mao Jinlong)   
  - arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property (Mao Jinlong)   
  - md: Whenassemble the array, consult the superblock of the freshest device (Alex Lyakas)   
  - block: prevent an integer overflow in bvec_try_merge_hw_page (Christoph Hellwig)   
  - net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path (Tobias Waldekranz)   
  - ARM: dts: imx23/28: Fix the DMA controller node name (Fabio Estevam)   
  - ARM: dts: imx23-sansa: Use preferred i2c-gpios properties (Fabio Estevam)   
  - ARM: dts: imx27-apf27dev: Fix LED name (Fabio Estevam)   
  - ARM: dts: imx25/27: Pass timing0 (Fabio Estevam)   
  - ARM: dts: imx25: Fix the iim compatible string (Fabio Estevam)   
  - block/rnbd-srv: Check for unlikely string overflow (Kees Cook)   
  - ionic: pass opcode to devcmd_wait (Shannon Nelson)   
  - ARM: dts: imx1: Fix sram node (Fabio Estevam)   
  - ARM: dts: imx27: Fix sram node (Fabio Estevam)   
  - ARM: dts: imx: Use flash@0,0 pattern (Fabio Estevam)   
  - ARM: dts: imx25/27-eukrea: Fix RTC node name (Fabio Estevam)   
  - ARM: dts: rockchip: fix rk3036 hdmi ports node (Johan Jonker)   
  - bpf: Set uattr->batch.count as zero before batched update or deletion (Hou Tao)   
  - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (Hannes Reinecke)   
  - scsi: libfc: Don't schedule abort twice (Hannes Reinecke)   
  - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Hou Tao)   
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang)   
  - ARM: dts: imx7s: Fix nand-controller #size-cells (Alexander Stein)   
  - ARM: dts: imx7s: Fix lcdif compatible (Alexander Stein)   
  - ARM: dts: imx7d: Fix coresight funnel ports (Alexander Stein)   
  - scsi: arcmsr: Support new PCI device IDs 1883 and 1886 (ching Huang)   
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk (Zhengchao Shao)   
  - PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ido Schimmel)   
  - scsi: lpfc: Fix possible file string name overflow when updating firmware (Justin Tee)   
  - selftests/bpf: Fix issues in setup_classid_environment() (Yafang Shao)   
  - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Yonghong Song)   
  - selftests/bpf: satisfy compiler by having explicit return in btf test (Andrii Nakryiko)   
  - wifi: rt2x00: restart beacon queue when hardware reset (Shiji Yang)   
  - ext4: avoid online resizing failures due to oversized flex bg (Baokun Li)   
  - ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li)   
  - ext4: unify the type of flexbg_size to unsigned int (Baokun Li)   
  - ext4: fix inconsistent between segment fstrim and full fstrim (Ye Bin)   
  - ecryptfs: Reject casefold directory inodes (Gabriel Krisman Bertazi)   
  - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker)   
  - KVM: s390: fix setting of fpc register (Heiko Carstens)   
  - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens)   
  - arch: consolidate arch_irq_work_raise prototypes (Arnd Bergmann)   
  - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis)   
  - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() (Oleg Nesterov)   
  - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (Oleg Nesterov)   
  - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() (Oleg Nesterov)   
  - crypto: stm32/crc32 - fix parsing list of devices (Thomas Bourgoin)   
  - crypto: octeontx2 - Fix cptvf driver cleanup (Bharat Bhushan)   
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen)   
  - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis)   
  - jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat)   
  - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat)   
  - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad)   
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad)   
  - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events (Shuai Xue)   
  - PM / devfreq: Synchronize devfreq_monitor_[start/stop] (Mukesh Ojha)   
  - ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava)   
  - PNP: ACPI: fix fortify warning (Dmitry Antipov)   
  - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (Yuluo Qiu)   
  - audit: Send netlink ACK before setting connection in auditd_set (Chris Riches)   
  - regulator: core: Only increment use_count when enable_count changes (Rui Zhang)   
  - debugobjects: Stop accessing objects after releasing hash bucket lock (Andrzej Hajda)   
  - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file (Greg KH)   
  - x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (Zhiquan Li)   
  - powerpc/lib: Validate size for vector operations (Naveen N Rao)   
  - powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE (Stephen Rothwell)   
  - x86/boot: Ignore NMIs during very early boot (Jun'ichi Nomura)   
  - powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping() (Michael Ellerman)   
  - powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() (Michael Ellerman)   
  - powerpc: Fix build error due to is_valid_bugaddr() (Michael Ellerman)   
  - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs (Mark Rutland)   
  - arm64: irq: set the correct node for VMAP stack (Huang Shijie)   
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan)   
  - x86/entry/ia32: Ensure s32 is sign extended to s64 (Richard Palethorpe)   
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events (Tim Chen)   
  - mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan (Xi Ruoyao)   
  - mtd: cfi: allow building spi-intel standalone (Arnd Bergmann)   
  - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read (Kamal Dasu)   
  - block: Move checking GENHD_FL_NO_PART to bdev_add_partition() (Li Lingfeng)   
  - gpio: eic-sprd: Clear interrupt after set the interrupt type (Wenhua Lin)   
  - drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (Fedor Pchelkin)   
  - drm/exynos: fix accidental on-stack copy of exynos_drm_plane (Arnd Bergmann)   
  - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] (Markus Niebel)   
  - cpufreq: intel_pstate: Refine computation of P-state for given frequency (Rafael J. Wysocki)   
  - cpufreq: intel_pstate: Drop redundant intel_pstate_get_hwp_cap() call (Rafael J. Wysocki)   
  - ksmbd: fix global oob in ksmbd_nl_policy (Lin Ma)   
  - btrfs: add definition for EXTENT_TREE_V2 (Josef Bacik)   
  - PM / devfreq: Fix buffer overflow in trans_stat_show (Christian Marangi)   
  - mm/sparsemem: fix race in accessing memory_section->usage (Charan Teja Kalla)   
  - mm: use __pfn_to_section() instead of open coding it (Rolf Eike Beer)   
  - media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run (Zheng Wang)   
  - ARM: dts: qcom: sdx55: fix USB SS wakeup (Johan Hovold)   
  - ARM: dts: qcom: sdx55: fix USB DP/DM HS PHY interrupts (Johan Hovold)   
  - ARM: dts: qcom: sdx55: fix pdc '#interrupt-cells' (Johan Hovold)   
  - ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12 (Paul Cercueil)   
  - ARM: dts: qcom: sdx55: fix USB wakeup interrupt types (Johan Hovold)   
  - pipe: wakeup wr_wait after setting max_usage (Lukas Schauer)   
  - fs/pipe: move check to pipe_has_watch_queue() (Max Kellermann)   
  - bus: mhi: host: Add alignment check for event ring read pointer (Krishna chaitanya chundru)   
  - bus: mhi: host: Rename "struct mhi_tre" to "struct mhi_ring_element" (Manivannan Sadhasivam)   
  - PM: sleep: Fix possible deadlocks in core system-wide PM code (Rafael J. Wysocki)   
  - PM: core: Remove unnecessary (void *) conversions (Li zeming)   
  - drm/bridge: nxp-ptn3460: simplify some error checking (Dan Carpenter)   
  - drm/tidss: Fix atomic_flush check (Tomi Valkeinen)   
  - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (Dan Carpenter)   
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä)   
  - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 (Mario Limonciello)   
  - xfs: read only mounts with fsopen mount API are busted (Dave Chinner)   
  - firmware: arm_scmi: Check mailbox/SMT channel for consistency (Cristian Marussi)   
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)   
  - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (Pablo Neira Ayuso)   
  - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Michael Kelley)   
  - wifi: iwlwifi: fix a memory corruption (Emmanuel Grumbach)   
  - exec: Fix error handling in begin_new_exec() (Bernd Edlinger)   
  - rbd: don't move requests to the running list on errors (Ilya Dryomov)   
  - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume (Omar Sandoval)   
  - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (Qu Wenruo)   
  - btrfs: don't warn if discard range is not aligned to sector (David Sterba)   
  - btrfs: tree-checker: fix inline ref size in error messages (Chung-Chiang Cheng)   
  - btrfs: ref-verify: free ref cache before clearing mount opt (Fedor Pchelkin)   
  - btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted (Omar Sandoval)   
  - btrfs: fix race between reading a directory and adding entries to it (Filipe Manana)   
  - btrfs: refresh dir last index during a rewinddir(3) call (Filipe Manana)   
  - btrfs: set last dir index to the current last index when opening dir (Filipe Manana)   
  - btrfs: fix infinite directory reads (Filipe Manana)   
  - net: fec: fix the unhandled context fault from smmu (Shenwei Wang)   
  - fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu)   
  - selftests: netdevsim: fix the udp_tunnel_nic test (Jakub Kicinski)   
  - net: mvpp2: clear BM pool before initialization (Jenishkumar Maheshbhai Patel)   
  - net: stmmac: Wait a bit for the reset to take effect (Bernd Edlinger)   
  - netfilter: nf_tables: validate NFPROTO_* family (Pablo Neira Ayuso)   
  - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes (Florian Westphal)   
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal)   
  - overflow: Allow mixed type arguments (Kees Cook)   
  - net/mlx5e: fix a potential double-free in fs_any_create_groups (Dinghao Liu)   
  - net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu)   
  - net/mlx5: DR, Can't go to uplink vport on RX rule (Yevgeny Kliteynik)   
  - net/mlx5: DR, Use the right GVMI number for drop action (Yevgeny Kliteynik)   
  - ipv6: init the accept_queue's spinlocks in inet6_create (Zhengchao Shao)   
  - netlink: fix potential sleeping issue in mqueue_flush_file (Zhengchao Shao)   
  - tcp: Add memory barrier to tcp_push() (Salvatore Dipietro)   
  - afs: Hide silly-rename files from userspace (David Howells)   
  - tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu)   
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan)   
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima)   
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet)   
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Lin Ma)   
  - bnxt_en: Wait for FLR to complete during probe (Michael Chan)   
  - tcp: make sure init the accept_queue's spinlocks once (Zhengchao Shao)   
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu)   
  - ksmbd: Add missing set_freezable() for freezable kthread (Namjae Jeon)   
  - ksmbd: send lease break notification on FILE_RENAME_INFORMATION (Namjae Jeon)   
  - ksmbd: don't increment epoch if current state and request state are same (Namjae Jeon)   
  - ksmbd: fix potential circular locking issue in smb2_set_ea() (Namjae Jeon)   
  - ksmbd: set v2 lease version on lease upgrade (Namjae Jeon)   
  - rename(): fix the locking of subdirectories (Al Viro)   
  - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (Zhihao Cheng)   
  - nouveau/vmm: don't set addr on the fail path to avoid warning (Dave Airlie)   
  - rtc: Adjust failure return code for cmos_set_alarm() (Mario Limonciello)   
  - mmc: mmc_spi: remove custom DMA mapped buffers (Andy Shevchenko)   
  - mmc: core: Use mrq.sbc in close-ended ffu (Avri Altman)   
  - scripts/get_abi: fix source path leak (Vegard Nossum)   
  - lsm: new security_file_ioctl_compat() hook (Alfred Piccioni)   
  - arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts (Johan Hovold)   
  - arm64: dts: qcom: sm8150: fix USB wakeup interrupt types (Johan Hovold)   
  - arm64: dts: qcom: sdm845: fix USB wakeup interrupt types (Johan Hovold)   
  - arm64: dts: qcom: sc7180: fix USB wakeup interrupt types (Johan Hovold)   
  - async: Introduce async_schedule_dev_nocall() (Rafael J. Wysocki)   
  - async: Split async_schedule_node_domain() (Rafael J. Wysocki)   
  - parisc/firmware: Fix F-extend for PDC addresses (Helge Deller)   
  - bus: mhi: host: Add spinlock to protect WP access when queueing TREs (Bhaumik Bhatt)   
  - bus: mhi: host: Drop chan lock before queuing buffers (Qiang Yu)   
  - mips: Fix max_mapnr being uninitialized on early stages (Serge Semin)   
  - media: ov9734: Enable runtime PM before registering async sub-device (Bingbu Cao)   
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang)   
  - media: imx355: Enable runtime PM before registering async sub-device (Bingbu Cao)   
  - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu)   
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu)   
  - PM: hibernate: Enforce ordering during image compression/decompression (Hongchen Zhang)   
  - crypto: api - Disallow identical driver names (Herbert Xu)   
  - btrfs: sysfs: validate scrub_speed_max value (David Disseldorp)   
  - ext4: allow for the last group to be marked as trimmed (Suraj Jitindar Singh)   
  - iio:adc:ad7091r: Move exports into IIO_AD7091R namespace. (Jonathan Cameron)   
  - scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() (Bart Van Assche)   
  - scsi: ufs: core: Simplify power management during async scan (Bart Van Assche)   
  - dmaengine: fix NULL pointer in channel unregistration function (Amelie Delaunay)   
  - iio: adc: ad7091r: Enable internal vref if external vref is not supplied (Marcelo Schmitt)   
  - iio: adc: ad7091r: Allow users to configure device events (Marcelo Schmitt)   
  - iio: adc: ad7091r: Set alert bit in config register (Marcelo Schmitt)   
  - ksmbd: only v2 leases handle the directory (Namjae Jeon)   
  - ksmbd: fix UAF issue in ksmbd_tcp_new_connection() (Namjae Jeon)   
  - ksmbd: validate mech token in session setup (Namjae Jeon)   
  - ksmbd: don't allow O_TRUNC open on read-only share (Namjae Jeon)   
  - ksmbd: free ppace array on error in parse_dacl (Fedor Pchelkin)   
  - LTS version: v5.15.148 (Vijayendra Suman)   
  - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" (Song Liu)   
  - arm64: dts: armada-3720-turris-mox: set irq type for RTC (Sjoerd Simons)   
  - netfilter: nft_quota: copy content when cloning expression (Pablo Neira Ayuso)   
  - netfilter: nft_last: copy content when cloning expression (Pablo Neira Ayuso)   
  - netfilter: nft_limit: Clone packet limits' cost value (Phil Sutter)   
  - netfilter: nft_limit: fix stateful object memory leak (Florian Westphal)   
  - netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails (Pablo Neira Ayuso)   
  - netfilter: nf_tables: typo NULL check in _clone() function (Pablo Neira Ayuso)   
  - block: Remove special-casing of compound pages (Matthew Wilcox (Oracle))   
  - i2c: s3c24xx: fix transferring more than one message in polling mode (Marek Szyprowski)   
  - i2c: s3c24xx: fix read transfers in polling mode (Marek Szyprowski)   
  - ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (Nikita Zhandarovich)   
  - selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes (Amit Cohen)   
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ido Schimmel)   
  - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure (Amit Cohen)   
  - ethtool: netlink: Add missing ethnl_ops_begin/complete (Ludvig Pärsson)   
  - kdb: Fix a potential buffer overflow in kdb_local() (Christophe JAILLET)   
  - ipvs: avoid stat macros calls from preemptible context (Fedor Pchelkin)   
  - netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description (Pablo Neira Ayuso)   
  - netfilter: nf_tables: skip dead set elements in netlink dump (Pablo Neira Ayuso)   
  - netfilter: nf_tables: do not allow mismatch field size and set key length (Pablo Neira Ayuso)   
  - netfilter: nft_limit: do not ignore unsupported flags (Pablo Neira Ayuso)   
  - netfilter: nf_tables: memcg accounting for dynamically allocated objects (Vasily Averin)   
  - netfilter: nft_limit: move stateful fields out of expression data (Pablo Neira Ayuso)   
  - netfilter: nft_limit: rename stateful structure (Pablo Neira Ayuso)   
  - netfilter: nft_quota: move stateful fields out of expression data (Pablo Neira Ayuso)   
  - netfilter: nft_last: move stateful fields out of expression data (Pablo Neira Ayuso)   
  - netfilter: nft_connlimit: move stateful fields out of expression data (Pablo Neira Ayuso)   
  - netfilter: nf_tables: reject invalid set policy (Pablo Neira Ayuso)   
  - net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe (Kunwu Chan)   
  - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (Hao Sun)   
  - net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls (Qiang Ma)   
  - net: ravb: Fix dma_addr_t truncation in error case (Nikita Yushchenko)   
  - mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() (Eric Dumazet)   
  - mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (Eric Dumazet)   
  - mptcp: strict validation before using mp_opt->hmac (Eric Dumazet)   
  - mptcp: drop unused sk in mptcp_get_options (Geliang Tang)   
  - mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN (Eric Dumazet)   
  - net: phy: micrel: populate .soft_reset for KSZ9131 (Claudiu Beznea)   
  - net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames (Sanjuán García, Jorge)   
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma)   
  - s390/pci: fix max size calculation in zpci_memcpy_toio() (Niklas Schnelle)   
  - PCI: keystone: Fix race condition when initializing PHYs (Siddharth Vadapalli)   
  - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi)   
  - nvmet: re-fix tracing strncpy() warning (Arnd Bergmann)   
  - serial: imx: Correct clock error message in function probe() (Christoph Niedermaier)   
  - usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer (Chunfeng Yun)   
  - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin)   
  - perf env: Avoid recursively taking env->bpf_progs.lock (Ian Rogers)   
  - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi)   
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi)   
  - usb: cdc-acm: return correct error code on unsupported break (Oliver Neukum)   
  - tty: use 'if' in send_break() instead of 'goto' (Jiri Slaby (SUSE))   
  - tty: don't check for signal_pending() in send_break() (Jiri Slaby (SUSE))   
  - tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK (Jiri Slaby (SUSE))   
  - tty: change tty_write_lock()'s ndelay parameter to bool (Jiri Slaby (SUSE))   
  - perf genelf: Set ELF program header addresses properly (Namhyung Kim)   
  - iio: adc: ad9467: fix scale setting (Nuno Sa)   
  - iio: adc: ad9467: don't ignore error codes (Nuno Sa)   
  - iio: adc: ad9467: fix reset gpio handling (Nuno Sa)   
  - iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify (Uwe Kleine-König)   
  - selftests/sgx: Skip non X86_64 platform (Zhao Mengmeng)   
  - selftests/sgx: Fix uninitialized pointer dereference in error path (Jo Van Bulck)   
  - serial: imx: fix tx statemachine deadlock (Paul Geurts)   
  - software node: Let args be NULL in software_node_get_reference_args (Sakari Ailus)   
  - libapi: Add missing linux/types.h header to get the __u64 type on io.h (Arnaldo Carvalho de Melo)   
  - serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed (Uwe Kleine-König)   
  - power: supply: bq256xx: fix some problem in bq256xx_hw_init (Su Hui)   
  - power: supply: cw2015: correct time_to_empty units in sysfs (Jan Palus)   
  - MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() (Christophe JAILLET)   
  - MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() (Christophe JAILLET)   
  - riscv: Fix module_alloc() that did not reset the linear mapping permissions (Alexandre Ghiti)   
  - riscv: Check if the code to patch lies in the exit section (Alexandre Ghiti)   
  - mips: Fix incorrect max_low_pfn adjustment (Serge Semin)   
  - mips: dmi: Fix early remap on MIPS32 (Serge Semin)   
  - mfd: intel-lpss: Fix the fractional clock divider flags (Andy Shevchenko)   
  - leds: aw2013: Select missing dependency REGMAP_I2C (Dang Huynh)   
  - mfd: syscon: Fix null pointer dereference in of_syscon_register() (Kunwu Chan)   
  - ARM: 9330/1: davinci: also select PINCTRL (Randy Dunlap)   
  - iommu/dma: Trace bounce buffer usage when mapping buffers (Isaac J. Manjarres)   
  - serial: sc16is7xx: set safe default SPI clock frequency (Hugo Villeneuve)   
  - serial: sc16is7xx: add check for unsupported SPI modes during probe (Hugo Villeneuve)   
  - HID: wacom: Correct behavior when processing some confidence == false touches (Jason Gerecke)   
  - iio: adc: ad7091r: Pass iio_dev to event handler (Marcelo Schmitt)   
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton)   
  - KVM: arm64: vgic-v4: Restore pending state on host userspace write (Marc Zyngier)   
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov)   
  - PCI: mediatek: Clear interrupt status before dispatching handler (qizhong cheng)   
  - PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support (Niklas Cassel)   
  - wifi: mwifiex: configure BSSID consistently when starting AP (David Lin)   
  - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (Ilpo Järvinen)   
  - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (Ilpo Järvinen)   
  - wifi: mt76: fix broken precal loading from MTD for mt7915 (Christian Marangi)   
  - iommu/arm-smmu-qcom: Add missing GMU entry to match table (Rob Clark)   
  - bpf: Fix re-attachment branch in bpf_tracing_prog_attach (Jiri Olsa)   
  - Bluetooth: Fix atomicity violation in {min,max}_key_size_set (Gui-Dong Han)   
  - rootfs: Fix support for rootfstype= when root= is given (Stefan Berger)   
  - io_uring/rw: ensure io->bytes_done is always initialized (Jens Axboe)   
  - pwm: jz4740: Don't use dev_err_probe() in .request() (Uwe Kleine-König)   
  - block: add check that partition length needs to be aligned with block size (Min Li)   
  - scsi: mpi3mr: Refresh sdev queue depth after controller reset (Chandrakanth patil)   
  - fbdev: flush deferred work in fb_deferred_io_fsync() (Nam Cao)   
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx (Çağhan Demir)   
  - ALSA: oxygen: Fix right channel of capture volume mixer (Takashi Iwai)   
  - serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock (Christoph Niedermaier)   
  - usb: mon: Fix atomicity violation in mon_bin_vma_fault (Gui-Dong Han)   
  - usb: typec: class: fix typec_altmode_put_partner to put plugs (RD Babiera)   
  - Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" (Heikki Krogerus)   
  - usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled (Frank Li)   
  - usb: cdns3: fix iso transfer error when mult is not zero (Frank Li)   
  - usb: cdns3: fix uvc failure work since sg support enabled (Frank Li)   
  - usb: chipidea: wait controller resume finished for wakeup irq (Xu Yang)   
  - Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" (Thinh Nguyen)   
  - Revert "usb: dwc3: Soft reset phy on probe for host" (Thinh Nguyen)   
  - usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (Uttkarsh Aggarwal)   
  - usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (Xu Yang)   
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug (Heiko Carstens)   
  - binder: fix race between mmput() and do_exit() (Carlos Llamas)   
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich)   
  - virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() (Wei Yongjun)   
  - dma-mapping: Fix build error unused-value (Ren Zhijie)   
  - Input: atkbd - use ab83 as id when skipping the getid command (Hans de Goede)   
  - binder: fix unused alloc->free_async_space (Carlos Llamas)   
  - binder: fix async space check for 0-sized buffers (Carlos Llamas)   
  - selftests/bpf: Add assert for user stacks in test_task_stack (Jordan Rome)   
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven)   
  - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt)   
  - ksmbd: validate the zero field of packet header (Li Nan)   
  - drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init (Zhipeng Lu)   
  - IB/iser: Prevent invalidating wrong MR (Sergey Gorenko)   
  - mmc: sdhci_omap: Fix TI SoC dependencies (Peter Robinson)   
  - mmc: sdhci_am654: Fix TI SoC dependencies (Peter Robinson)   
  - ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() (Geoffrey D. Bennett)   
  - ALSA: scarlett2: Add missing error checks to *_ctl_get() (Geoffrey D. Bennett)   
  - ALSA: scarlett2: Allow passing any output to line_out_remap() (Geoffrey D. Bennett)   
  - ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() (Geoffrey D. Bennett)   
  - ALSA: scarlett2: Add missing error check to scarlett2_config_save() (Geoffrey D. Bennett)   
  - ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] (Hans de Goede)   
  - pwm: stm32: Fix enable count for clk in .probe() (Philipp Zabel)   
  - pwm: stm32: Use hweight32 in stm32_pwm_detect_channels (Philipp Zabel)   
  - pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable (Uwe Kleine-König)   
  - clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw (Théo Lebrun)   
  - clk: fixed-rate: add devm_clk_hw_register_fixed_rate (Dmitry Baryshkov)   
  - clk: asm9260: use parent index to link the reference clock (Dmitry Baryshkov)   
  - clk: si5341: fix an error code problem in si5341_output_clk_set_rate (Su Hui)   
  - watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused (Vignesh Raghavendra)   
  - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (Stefan Wahren)   
  - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (Jerry Hoemann)   
  - watchdog: set cdev owner before adding (Curtis Klein)   
  - drivers: clk: zynqmp: update divider round rate logic (Jay Buddhabhatti)   
  - clk: zynqmp: Add a check for NULL pointer (Shubhrajyoti Datta)   
  - clk: zynqmp: make bestdiv unsigned (Shubhrajyoti Datta)   
  - drivers: clk: zynqmp: calculate closest mux rate (Jay Buddhabhatti)   
  - clk: qcom: videocc-sm8150: Add missing PLL config property (Satya Priya Kakitapalli)   
  - clk: qcom: videocc-sm8150: Update the videocc resets (Satya Priya Kakitapalli)   
  - dt-bindings: clock: Update the videocc resets for sm8150 (Satya Priya Kakitapalli)   
  - gpu/drm/radeon: fix two memleaks in radeon_vm_init (Zhipeng Lu)   
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu)   
  - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu)   
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher)   
  - media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() (Christophe JAILLET)   
  - media: dvbdev: drop refcount on error path in dvb_device_open() (Dan Carpenter)   
  - f2fs: fix the f2fs_file_write_iter tracepoint (Eric Biggers)   
  - f2fs: fix to update iostat correctly in f2fs_filemap_fault() (Chao Yu)   
  - f2fs: fix to check compress file in f2fs_move_file_range() (Chao Yu)   
  - media: rkisp1: Disable runtime PM in probe error path (Laurent Pinchart)   
  - clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config (Satya Priya Kakitapalli)   
  - media: cx231xx: fix a memleak in cx231xx_init_isoc (Zhipeng Lu)   
  - drm/bridge: tc358767: Fix return value on error case (Tomi Valkeinen)   
  - drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable (Tomi Valkeinen)   
  - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (Zhipeng Lu)   
  - drm/radeon/dpm: fix a memleak in sumo_parse_power_table (Zhipeng Lu)   
  - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Yang Yingliang)   
  - drm/drv: propagate errors from drm_modeset_register_all() (Dmitry Baryshkov)   
  - drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks (Konrad Dybcio)   
  - drm/msm/mdp4: flush vblank event on disable (Dmitry Baryshkov)   
  - ASoC: cs35l34: Fix GPIO name and drop legacy include (Linus Walleij)   
  - ASoC: cs35l33: Fix GPIO name and drop legacy include (Linus Walleij)   
  - drm/radeon: check return value of radeon_ring_lock() (Nikita Zhandarovich)   
  - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (Nikita Zhandarovich)   
  - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (Nikita Zhandarovich)   
  - f2fs: fix to avoid dirent corruption (Chao Yu)   
  - drm/bridge: Fix typo in post_disable() description (Dario Binacchi)   
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere)   
  - drm/tilcdc: Fix irq free on unload (Tomi Valkeinen)   
  - drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function (Uwe Kleine-König)   
  - drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer (Abhinav Singh)   
  - drm/panel-elida-kd35t133: hold panel in reset for unprepare (Chris Morgan)   
  - RDMA/hns: Fix inappropriate err code for unsupported operations (Junxian Huang)   
  - RDMA/usnic: Silence uninitialized symbol smatch warnings (Leon Romanovsky)   
  - Revert "drm/omapdrm: Annotate dma-fence critical section in commit path" (Tomi Valkeinen)   
  - Revert "drm/tidss: Annotate dma-fence critical section in commit path" (Tomi Valkeinen)   
  - ARM: davinci: always select CONFIG_CPU_ARM926T (Arnd Bergmann)   
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet)   
  - mlxbf_gige: Enable the GigE port in mlxbf_gige_open (Asmaa Mnebhi)   
  - mlxbf_gige: Fix intermittent no ip issue (Asmaa Mnebhi)   
  - net/sched: act_ct: fix skb leak and crash on ooo frags (Tao Liu)   
  - null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS (Christoph Hellwig)   
  - block: make BLK_DEF_MAX_SECTORS unsigned (Keith Busch)   
  - Bluetooth: btmtkuart: fix recv_buf() return value (Francesco Dolcini)   
  - Bluetooth: Fix bogus check for re-auth no supported with non-ssp (Luiz Augusto von Dentz)   
  - netfilter: nf_tables: mark newset as dead on transaction abort (Florian Westphal)   
  - wifi: iwlwifi: mvm: send TX path flush in rfkill (Johannes Berg)   
  - wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request (Johannes Berg)   
  - wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: add calculate_bit_shift() (Su Hui)   
  - arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent (Konrad Dybcio)   
  - block: add check of 'minors' and 'first_minor' in device_add_disk() (Li Nan)   
  - arm64: dts: qcom: sm8150-hdk: fix SS USB regulators (Dmitry Baryshkov)   
  - soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration (Atul Dhudase)   
  - dma-mapping: clear dev->dma_mem to NULL after freeing it (Joakim Zhang)   
  - dma-mapping: Add dma_release_coherent_memory to DMA API (Mark-PK Tsai)   
  - virtio/vsock: fix logic which reduces credit update messages (Arseniy Krasnov)   
  - selftests/net: fix grep checking for fib_nexthop_multiprefix (Hangbin Liu)   
  - scsi: hisi_sas: Correct the number of global debugfs registers (Yihang Li)   
  - scsi: hisi_sas: Rollback some operations if FLR failed (Yihang Li)   
  - scsi: hisi_sas: Replace with standard error code return value (Yihang Li)   
  - scsi: hisi_sas: Prevent parallel FLR and controller reset (Qi Liu)   
  - scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT (Luo Jiaxing)   
  - block: Set memalloc_noio to false on device_add_disk() error path (Li Nan)   
  - bpf: Fix verification of indirect var-off stack access (Andrei Matei)   
  - arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types (Johan Hovold)   
  - arm64: dts: qcom: sdm845-db845c: correct LED panic indicator (Krzysztof Kozlowski)   
  - arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator (Krzysztof Kozlowski)   
  - scsi: fnic: Return error if vmalloc() failed (Artem Chernyshev)   
  - bpf: fix check for attempt to corrupt spilled pointer (Andrii Nakryiko)   
  - arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered (Douglas Anderson)   
  - arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered (Douglas Anderson)   
  - arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered (Douglas Anderson)   
  - arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered (Douglas Anderson)   
  - arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered (Douglas Anderson)   
  - ARM: dts: qcom: sdx65: correct SPMI node name (Krzysztof Kozlowski)   
  - bpf: enforce precision of R0 on callback return (Andrii Nakryiko)   
  - arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type (Tomi Valkeinen)   
  - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (Su Hui)   
  - firmware: meson_sm: populate platform devices from sm device tree data (Dmitry Rokosov)   
  - firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (Christophe JAILLET)   
  - net/ncsi: Fix netlink major/minor version numbers (Peter Delevoryas)   
  - ARM: dts: qcom: apq8064: correct XOADC register address (Dmitry Baryshkov)   
  - wifi: libertas: stop selecting wext (Arnd Bergmann)   
  - wifi: ath11k: Defer on rproc_get failure (Luca Weiss)   
  - bpf: Add crosstask check to __bpf_get_stack (Jordan Rome)   
  - bpf, lpm: Fix check prefixlen before walking trie (Florian Lehner)   
  - wifi: rtw88: fix RX filter in FIF_ALLMULTI flag (Chih-Kang Chang)   
  - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (Trond Myklebust)   
  - blocklayoutdriver: Fix reference leak of pnfs_device_node (Benjamin Coddington)   
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou)   
  - crypto: sahara - do not resize req->src when doing hash operations (Ovidiu Panait)   
  - crypto: sahara - fix processing hash requests with req->nbytes < sg->length (Ovidiu Panait)   
  - crypto: sahara - improve error handling in sahara_sha_process() (Ovidiu Panait)   
  - crypto: sahara - fix wait_for_completion_timeout() error handling (Ovidiu Panait)   
  - crypto: sahara - fix ahash reqsize (Ovidiu Panait)   
  - crypto: sahara - handle zero-length aes requests (Ovidiu Panait)   
  - crypto: sahara - avoid skcipher fallback code duplication (Ovidiu Panait)   
  - crypto: virtio - Wait for tasklet to complete on device remove (wangyangxin)   
  - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Osama Muhammad)   
  - fs: indicate request originates from old mount API (Christian Brauner)   
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov)   
  - crypto: sahara - fix error handling in sahara_hw_descriptor_create() (Ovidiu Panait)   
  - crypto: sahara - fix processing requests with cryptlen < sg->length (Ovidiu Panait)   
  - crypto: sahara - fix ahash selftest failure (Ovidiu Panait)   
  - crypto: sahara - fix cbc selftest failure (Ovidiu Panait)   
  - crypto: sahara - remove FLAGS_NEW_KEY logic (Ovidiu Panait)   
  - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu)   
  - crypto: ccp - fix memleak in ccp_init_dm_workarea (Dinghao Liu)   
  - crypto: sa2ul - Return crypto_aead_setkey to transfer the error (Chen Ni)   
  - crypto: virtio - Handle dataq logic with tasklet (Gonglei (Arei))   
  - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Mickaël Salaün)   
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang)   
  - kunit: debugfs: Fix unchecked dereference in debugfs_print_results() (Richard Fitzgerald)   
  - ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error (Tony Luck)   
  - ACPI: LPSS: Fix the fractional clock divider flags (Andy Shevchenko)   
  - spi: sh-msiof: Enforce fixed DTDL for R-Car H3 (Wolfram Sang)   
  - efivarfs: force RO when remounting if SetVariable is not supported (Ilias Apalodimas)   
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia)   
  - cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() (Alexandra Diupina)   
  - cpufreq: Use of_property_present() for testing DT property presence (Rob Herring)   
  - of: Add of_property_present() helper (Rob Herring)   
  - of: property: define of_property_read_u{8,16,32,64}_array() unconditionally (Michael Walle)   
  - ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin)   
  - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin)   
  - mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (Ronald Monthero)   
  - spi: spi-zynqmp-gqspi: fix driver kconfig dependencies (Amit Kumar Mahapatra)   
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check in opal_powercap_init() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check to scom_debug_init_one() (Kunwu Chan)   
  - selftests/powerpc: Fix error handling in FPU/VMX preemption tests (Michael Ellerman)   
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch)   
  - powerpc/44x: select I2C for CURRITUCK (Randy Dunlap)   
  - powerpc: add crtsavres.o to always-y instead of extra-y (Masahiro Yamada)   
  - powerpc: remove checks for binutils older than 2.25 (Masahiro Yamada)   
  - powerpc/toc: Future proof kernel toc (Alan Modra)   
  - powerpc: Mark .opd section read-only (Christophe Leroy)   
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann)   
  - x86/lib: Fix overflow when counting digits (Colin Ian King)   
  - coresight: etm4x: Fix width of CCITMIN field (James Clark)   
  - PCI: Add ACS quirk for more Zhaoxin Root Ports (LeoLiuoc)   
  - leds: ledtrig-tty: Free allocated ttyname buffer on deactivate (Florian Eckert)   
  - parport: parport_serial: Add Brainboxes device IDs and geometry (Cameron Williams)   
  - parport: parport_serial: Add Brainboxes BAR details (Cameron Williams)   
  - uio: Fix use-after-free in uio_open (Guanghui Feng)   
  - binder: fix comment on binder_alloc_new_buf() return value (Carlos Llamas)   
  - binder: fix trivial typo of binder_free_buf_locked() (Carlos Llamas)   
  - binder: fix use-after-free in shinker's callback (Carlos Llamas)   
  - binder: use EPOLLERR from eventpoll.h (Carlos Llamas)   
  - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (Masami Hiramatsu (Google))   
  - bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 (Alan Maguire)   
  - Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek" (Greg Kroah-Hartman)   
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Hans de Goede)   
  - drm/crtc: fix uninitialized variable use (Jani Nikula)   
  - ARM: sun9i: smp: fix return code check of of_property_match_string (Stefan Wahren)   
  - net: qrtr: ns: Return 0 if server port is not present (Sarannya S)   
  - ida: Fix crash in ida_free when the bitmap is empty (Matthew Wilcox (Oracle))   
  - i2c: rk3x: fix potential spinlock recursion on poll (Jensen Huang)   
  - ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 (Hans de Goede)   
  - Input: xpad - add Razer Wolverine V2 support (Luca Weiss)   
  - wifi: iwlwifi: pcie: avoid a NULL pointer dereference (Avraham Stern)   
  - ARC: fix spare error (Vineet Gupta)   
  - s390/scm: fix virtual vs physical address confusion (Vineeth Vijayan)   
  - Input: i8042 - add nomux quirk for Acer P459-G2-M (Esther Shimanovich)   
  - Input: atkbd - skip ATKBD_CMD_GETID in translated mode (Hans de Goede)   
  - reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (Krzysztof Kozlowski)   
  - ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (Steven Rostedt (Google))   
  - tracing: Fix uaf issue when open the hist or hist_debug file (Zheng Yejian)   
  - MIPS: dts: loongson: drop incorrect dwmac fallback compatible (Krzysztof Kozlowski)   
  - stmmac: dwmac-loongson: drop useless check for compatible fallback (Krzysztof Kozlowski)   
  - tracing: Add size check when printing trace_marker output (Steven Rostedt (Google))   
  - tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (Steven Rostedt (Google))   
  - jbd2: fix soft lockup in journal_finish_inode_data_buffers() (Ye Bin)   
  - platform/x86: intel-vbtn: Fix missing tablet-mode-switch events (Hans de Goede)   
  - neighbour: Don't let neigh_forced_gc() disable preemption for long (Judy Hsiao)   
  - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (Ziqi Zhao)   
  - jbd2: correct the printing of write_flags in jbd2_write_superblock() (Zhang Yi)   
  - clk: rockchip: rk3128: Fix HCLK_OTG gate register (Weihao Li)   
  - hwmon: (corsair-psu) Fix probe when built-in (Armin Wolf)   
  - drm/exynos: fix a wrong error checking (Inki Dae)   
  - drm/exynos: fix a potential error pointer dereference (Xiang Yang)   
  - drm/amdgpu: Add NULL checks for function pointers (Lijo Lazar)   
  - nvme: introduce helper function to get ctrl state (Keith Busch)   
  - ASoC: ops: add correct range check for limiting volume (Srinivas Kandagatla)   
  - ASoC: da7219: Support low DC impedance headset (David Rau)   
  - net/tg3: fix race condition in tg3_reset_task() (Thinh Tran)   
  - nouveau/tu102: flush all pdbs on vmm flush (Dave Airlie)   
  - ASoC: rt5650: add mutex to avoid the jack detection failure (Shuming Fan)   
  - ASoC: cs43130: Fix incorrect frame delay configuration (Maciej Strozek)   
  - ASoC: cs43130: Fix the position of const qualifier (Maciej Strozek)   
  - ASoC: Intel: Skylake: mem leak in skl register function (Kamil Duljas)   
  - ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 (David Lin)   
  - ASoC: Intel: Skylake: Fix mem leak in few functions (Kamil Duljas)   
  - ASoC: wm8974: Correct boost mixer inputs (Charles Keepax)   
  - nvme-core: check for too small lba shift (Keith Busch)   
  - drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer (Lu Yao)   
  - debugfs: fix automount d_fsdata usage (Johannes Berg)   
  - wifi: cfg80211: lock wiphy mutex for rfkill poll (Johannes Berg)   
  - mptcp: fix uninit-value in mptcp_incoming_options (Edward Adam Davis)   
  - ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro (Vasiliy Kovalev)   
  - pinctrl: lochnagar: Don't build on MIPS (Charles Keepax)   
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-205.149.3.el9uek]
changelog:
  - net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248460]  
  - platform/mellanox: mlxbf-pmc: Fix offset calculation for crspace events (Shravan Kumar Ramani)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-tmfifo: Drop Tx network packet when Tx TmFIFO is full (Liming Sun)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-tmfifo: Remove unnecessary bool conversion (Jules Irenge)  [Orabug: 36299543]  
  - power: reset: pwr-mlxbf: support graceful reboot instead of emergency reset (Asmaa Mnebhi)  [Orabug: 36299543]  
  - platform/mellanox: tmfifo: fix kernel-doc warnings (Randy Dunlap)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-tmfifo: Convert to platform remove callback returning void (Uwe Kleine-König)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-pmc: Add support for BlueField-3 (Shravan Kumar Ramani)  [Orabug: 36299543]  
  - pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency (David Thompson)  [Orabug: 36299543]  
  - pinctrl: mlxbf3: Remove gpio_disable_free() (Asmaa Mnebhi)  [Orabug: 36299543]  
  - gpio: mlxbf3: use capital "OR" for multiple licenses in SPDX (Krzysztof Kozlowski)  [Orabug: 36299543]  
  - pinctrl: use capital "OR" for multiple licenses in SPDX (Krzysztof Kozlowski)  [Orabug: 36299543]  
  - gpio: mlxbf3: Support add_pin_ranges() (Asmaa Mnebhi)  [Orabug: 36299543]  
  - uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36303821]  
  - uek-rpm: Update the aarch64 kABI files for new symbol (Yifei Liu)  [Orabug: 36323808]  
  - arm64: Minimize tlb flush due to vttbr writes on AmpereOne (Ganapatrao Kulkarni)  [Orabug: 36349790]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-205.149.4.el9uek]
changelog:
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)   
  - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)   
  - ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails (Fedor Pchelkin)   
  - afs: Fix endless loop in directory parsing (David Howells)   
  - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() (Dan Carpenter)   
  - Revert "drm/bridge: lt8912b: Register and attach our DSI device at probe" (Max Krummenacher)   
  - net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)   
  - usb: dwc3: gadget: Don't disconnect if not started (Thinh Nguyen)   
  - platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler (Hans de Goede)   
  - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587408]  
  - cifs: fix mid leak during reconnection after timeout threshold (Shyam Prasad N)  [Orabug: 36123597]  
  - vfio/mlx5: Activate the chunk mode functionality (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Add support for READING in chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Add support for SAVING in chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Pre-allocate chunks for the STOP_COPY phase (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Rename some stuff to match chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Enable querying state size which is > 4GB (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Refactor the SAVE callback to activate a work only upon an error (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Wake up the reader post of disabling the SAVING migration file (Yishai Hadas)  [Orabug: 36298327]  
  - net/mlx5: Introduce ifc bits for migration in a chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - af_unix: Drop oob_skb ref before purging queue in GC. (Kuniyuki Iwashima)  [Orabug: 36375407]  
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta)  [Orabug: 36379479]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-205.149.5.el9uek]
changelog:
  - uek-rpm: Bluefield 3: enable lockdown mode for secure boot (Dave Kleikamp)  [Orabug: 36318788]  
  - Documentation/x86: Update split lock documentation (Tony Luck)  [Orabug: 36298291]  
  - x86/split_lock: Add sysctl to control the misery mode (Guilherme G. Piccoli)  [Orabug: 36298291]  
  - x86/split-lock: Remove unused TIF_SLD bit (Tony Luck)  [Orabug: 36298291]  
  - x86/split_lock: Make life miserable for split lockers (Tony Luck)  [Orabug: 36298291]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-205.149.5.1.el9uek]
changelog:
  - KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201} 
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36384802]  {CVE-2024-2201} 
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36384802]  {CVE-2024-2201} 
  - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/cpu: Support AMD Automatic IBRS (Kim Phillips)  [Orabug: 36384802]  {CVE-2024-2201} 
  - Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36384802]  {CVE-2024-2201}


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Dodji Seketeli <dodji@redhat.com> - 1.8-1
changelog:
  - Update to upstream 1.8
  - Add 'make check-self-compare' to the regression tests run.
  - BuildRequires python3-koji


author: Dodji Seketeli <dodji@seketeli.org> - 1.8.1-1
changelog:
  - Update to upstream fixes up to libabigail-1.8.1
    This encompasses this fixes, compared to the last 1.8 release:
        ir: Add better comments to types_have_similar_structure
        mainpage: Update web page for 1.8 release
        Bug 26992 - Try harder to resolve declaration-only classes
        Bug 27204 -  potential loss of some aliased ELF function symbols
        Ignore duplicated functions and those not associated with ELF symbols
        Bug 27236 - Pointer comparison wrongly fails because of typedef change
        Bug 27233 - fedabipkgdiff fails on package gnupg2 from Fedora 33
        Bug 27232 - fedabipkgdiff fails on gawk from Fedora 33
        dwarf-reader: Support fast DW_FORM_line_strp string comparison
        gen-changelog.py: Update call to subprocess.Popen & cleanup
        Bug 27255 - fedabipkgdiff fails on nfs-utils on Fedora 33
        abidiff: support --dump-diff-tree with --leaf-changes-only
        ir: Arrays are indirect types for type structure similarity purposes
        Add qualifier / typedef / array / pointer test
        abg-ir: Optimize calls to std::string::find() for a single char.
        abipkgdiff: Address operator precedence warning


author: Dodji Seketeli <dodji@redhat.com> - 2.0-1
changelog:
  - Update to upstream 2.0 tarball
  - Change License to ASL 2.0 to comply with the upstream license change.


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-4
changelog:
  - Memory leaks fixes backport
    Resolves: rhbz#1938757
  - Fix default key size for non XTS ciphers
    Resolves: rhbz#1954005


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-6
changelog:
  - Add workarounds for some LVM test issues
    Resolves: rhbz#1976174
  - Adapt tests to xfsprogs 5.12 changes
    Resolves: rhbz#1976176


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-10
changelog:
  - Fix reading statistics for VDO pools with VDO 8
    Resolves: rhbz#1994220
  - vdo_stats: Default to 100 % savings for invalid savings values
    Resolves: rhbz#2025880
  - Add support for creating and unlocking standalone integrity devices
    Resolves: rhbz#2011365


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * https://gitlab.com/cwrap/pam_wrapper/-/blob/master/CHANGELOG
    * resolves: #1816943


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2
changelog:
  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#2072640 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2070189 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2070138 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2065098 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2062716 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2056482 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#1937895 - SSSD update prompts for smartcard pin twice - After update to 7.9
  - Resolves: rhbz#1925559 - [RFE] Implement time logging for the LDAP queries and warning of high queries time
  - Resolves: rhbz#1915564 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#1859751 - [RFE] Allow SSSD to use anonymous pkinit for FAST
  - Resolves: rhbz#1749279 - 2FA prompting setting ineffective
  - Resolves: rhbz#1661055 - sssd fails GPO-based access if AD have setup with Japanese language
  - Resolves: rhbz#1245367 - [RFE] Implement memory cache for SID requests to improve performance


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237301 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Darren Archibald <darren.archibald@oracle.com> - 2.9.1-4.0.1.5
changelog:
  - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [RHEL-19213]
  - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [RHEL-19993]
  - SSSD GPO lacks group resolution on hosts [RHEL-21089]
  - Make sure 8.9.z/9.3.z doesn't build 'passkey' code [RHEL-21165]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.78.0-1
changelog:
  - Bump glib2 version 2.78.0
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS
  - Resolves: RHEL-5019
  - Resolves: RHEL-5020
  - Resolves: RHEL-5092
  - Resolves: RHEL-5093
  - Resolves: RHEL-5094


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.10.0-1
changelog:
  - Rebase to 16.10.0, add corepack, fix PowerShell dependency
  - Resolves: RHBZ#2000539, #2000548, #2000549, #2002177


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-1
changelog:
  - Update to latest version
  - Use jinja and jq
  - Don't fix python3
  - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533
  - Resolves CVE-2020-15095
  - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960
  - Resolves: CVE-2021-3807, CVE-2021-27290


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Darren Archibald <darren.archibald@oracle.com> - 28-10.0.1
changelog:
  - Renamed the package to oracle-bookmarks [Orabug: 33802033]
  - Updated Summary and description to be production neutral in spec file
  - Replaced default-bookmarks.html with Oracle's default-bookmarks.html [Orabug: 30069264]


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-1
changelog:
  - Unable to show metadata for "service" agents with "@" and "." in the name
  - Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
  - Pacemaker does not convert & to &amp; when generating metadata for non-ocf agents
  - Rebase pacemaker on upstream 2.1.3 release
  - Resolves: rhbz2045110
  - Resolves: rhbz2049720
  - Resolves: rhbz2050259
  - Resolves: rhbz2072108


author: Chris Lumens <clumens@redhat.com> - 2.1.4-5.1
changelog:
  - Fix regression where reordered resources do not get moved
  - Execute resource metadata actions asynchronously
  - Resolves: rhbz2128035
  - Resolves: rhbz2128036


author: Alan Steinberg <alan.steinberg@oracle.com> - 2.1.4-5.0.1.2
changelog:
  - Replace bug url [Orabug: 34202300]
  - Upstream reference in pacemaker crm_report binary [Orabug: 32825154]


author: Chris Lumens <clumens@redhat.com> - 2.1.5-1
changelog:
  - Rebase on upstream 2.1.5-rc2 release
  - Resolves: rhbz2123727
  - Resolves: rhbz2125337
  - Resolves: rhbz2125344
  - Resolves: rhbz2133546
  - Resolves: rhbz2142683


author: Chris Lumens <clumens@redhat.com> - 2.1.5-4
changelog:
  - Rebase pacemaker on upstream 2.1.5 final release
  - Add support for sync points to attribute daemon
  - Resolves: rhbz2122353


author: Chris Lumens <clumens@redhat.com> - 2.1.5-6
changelog:
  - Backport fix for migration history cleanup causing resource recovery
  - Backport fix for SIGABRT during pacemaker-fenced shutdown
  - Resolves: rhbz2166393
  - Resolves: rhbz2166967


author: Chris Lumens <clumens@redhat.com> - 2.1.5-7
changelog:
  - Additional fixes for SIGABRT during pacemaker-fenced shutdown
  - Backport fix for attrd_updater -QA not displaying all nodes
  - Related: rhbz2166967
  - Resolves: rhbz2169829


author: Chris Lumens <clumens@redhat.com> - 2.1.6-4
changelog:
  - Fix moving groups when there's a constraint for a single group member
  - Resolves: rhbz2218218
  - Resolves: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.6-5
changelog:
  - Clone instances should not shuffle unnecessarily
  - Fix a bug in clone resource description display
  - Resolves: rhbz2222055
  - Related: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.6-6
changelog:
  - Apply dampening when creating attributes with attrd_updater -U
  - Resolves: rhbz2224051
  - Related: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Jens Petersen <petersen@redhat.com> - 2.9.2.1-5
changelog:
  - https://hackage.haskell.org/package/pandoc-2.9.2.1/changelog
  - subpackage base-noprelude
  - bitarray and unicode-transforms were packaged


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Paul Howarth <paul@city-fan.org> - 0.400002-13
changelog:
  - Avoid optional test dependency perl(Moo) for EPEL builds
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.16-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify builds by usage
    - Drop redundant buildroot cleaning in %install section
    - Don't need to delete empty directories from the buildroot
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.22-1
changelog:
  - Update to 1.22
    - Removed embedded copy of Config::AutoConf from distro.; instead, this is
      now a configure phase prereq. (GH#19)
    - Moved list of constants in libmagic that we care about to one module (GH#20)
    - Add support for setting libmagic processing limits (GH#15, GH#22)
    - Add two class methods that provide introspection on the available limit
      processing parameters, max_param_constant() and limit_key_is_supported()
      (GH#24)
    - Check all libmagic function return values properly and croak on failure
      (GH#21)
    - Switched to using GitHub issues
  - Package CONTRIBUTING.md


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Fixed a bug with the Makefile.PL that caused every call to "make" to
      recompile the object file for the package's XS code (GH#28)


author: Emmanuel Seyman <emmanuel@seyman.fr> - 2.003006-1
changelog:
  - Update to 2.003006
  - Replace calls to %{__perl} with /usr/bin/perl
  - Replace calls to "make pure_install" with %{make_install}
  - Replace calls to make with %{make_build}
  - Pass NO_PERLLOCAL=1 to Makefile.PL


author: Tom Stellard <tstellar@redhat.com> - 1.8-3
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 2.100-1
changelog:
  - Update to 2.100
    - Declare vars with our instead of use vars (GH#7)
    - Quote $VERSION to preserve formatting (GH#6)
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.25-24
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.16-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.05-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
    - Noted that the module is now deprecated
    - Added a list of alternatives to SEE ALSO


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Upgrade to version 2.1.0
  - Removed patch:
    * 0001-Port-to-current-qdox.patch
      + integrated upstream
  - Added patch:
    * plexus-containers-asm6.patch
      + allow building against asm6
  - Specify maven.compiler.release to fix build with jdk9+ and newer
    maven-javadoc-plugin


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Filip Januš <fjanus@redhat.com> - 13.7-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 13.7
  - Release notes: https://www.postgresql.org/docs/release/13.7/


author: Jan Rybar <jrybar@redhat.com> - 3.3.16-2
changelog:
  - ps: new exe format option to show real path to exe
  - pidof: new -w option to show kernel worker threads
  - pkill: manpage to document -e option
  - Resolves: bz#1629413
  - Resolves: bz#1399206


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Miro Hrončok <mhroncok@redhat.com> - 1.4-7
changelog:
  - Subpackage python2-blinker has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1.2-9
changelog:
  - Resolves: rhbz#1960905 : License corrected to ASL 2.0
  - See upstream commit 4bdf076 and release 1.0.7
  - Added CI tests


author: Miro Hrončok <mhroncok@redhat.com> - 4.0-8
changelog:
  - Subpackage python2-pytest-runner has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Colin Walters <walters@verbum.org> - 2022.8-2
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2022.8
    Resolves: rhbz#2077062
    Resolves: rhbz#2023325


author: Luca BRUNO <lucab@redhat.com> - 2022.13-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2022.12
    Resolves: rhbz#2126108


author: Colin Walters <walters@verbum.org> - 2023.8-2
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2023.8
    https://issues.redhat.com/browse/RHEL-11294


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2024.3-1
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2024.3
    Backport https://github.com/coreos/rpm-ostree/commit/fe586621e5014d14f92b913338171a02ed29e6cc
    Resolves: #RHEL-26186


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.2.1-8
changelog:
  - Wrap rexml depedency with fedora release
  - Add upstream patch for rouge change
  - Add upstream patch to silence warnings from minitest


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Switch to https://github.com/apjanke/ronn-ng/ upstream fork (#1817168)
  - Regenerate spec file with gem2rpm.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Add BRs for tests, enable tests in %check.
  - Require /usr/bin/groff, not the package in case the file is moved.
  - Keep the license file in the original location.
  - Adjust various macros and invocations.


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.22-1
changelog:
  - Allow sshd read filesystem sysctl files
  Resolves: rhbz#2036585
  - Revert "Allow sshd read sysctl files"
  Resolves: rhbz#2036585


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.23-1
changelog:
  - Allow systemd nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Label /var/run/user/%{USERID}/dbus with session_dbusd_tmp_t
  Resolves: rhbz#2000039
  - Change /run/user/[0-9]+ to /run/user/%{USERID} for proper labeling
  Resolves: rhbz#2000039
  - Allow scripts to enter LUKS password
  Resolves: rhbz#2048521
  - Allow system_mail_t read inherited apache system content rw files
  Resolves: rhbz#2049372
  - Add apache_read_inherited_sys_content_rw_files() interface
  Related: rhbz#2049372
  - Allow sanlock get attributes of filesystems with extended attributes
  Resolves: rhbz#2047811
  - Associate stratisd_data_t with device filesystem
  Resolves: rhbz#2039974
  - Allow init read stratis data symlinks
  Resolves: rhbz#2039974
  - Label /run/stratisd with stratisd_var_run_t
  Resolves: rhbz#2039974
  - Allow domtrans to sssd_t and role access to sssd
  Resolves: rhbz#2039757
  - Creating interface sssd_run_sssd()
  Resolves: rhbz#2039757
  - Fix badly indented used interfaces
  Resolves: rhbz#2039757
  - Allow domain transition to sssd_t
  Resolves: rhbz#2039757
  - Label /dev/nvme-fabrics with fixed_disk_device_t
  Resolves: rhbz#2039759
  - Allow local_login_t nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Allow xdm_t nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Make cupsd_lpd_t a daemon
  Resolves: rhbz#2039449
  - Label utilities for exFAT filesystems with fsadm_exec_t
  Resolves: rhbz#1972225
  - Dontaudit sfcbd sys_ptrace cap_userns
  Resolves: rhbz#2040311


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.24-1
changelog:
  - Allow tumblerd write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow login_userdomain write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow login_userdomain create session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow gkeyringd_domain write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow systemd-logind delete session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow gdm-x-session write to session dbus tmp sock files
  Resolves: rhbz#2000039
  - Allow sysadm_t nnp_domtrans to systemd_tmpfiles_t
  Resolves: rhbz#2039453
  - Label exFAT utilities at /usr/sbin
  Resolves: rhbz#1972225


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.25-1
changelog:
  - Allow systemd watch unallocated ttys
  Resolves: rhbz#2054150
  - Allow alsa bind mixer controls to led triggers
  Resolves: rhbz#2049732
  - Allow alsactl set group Process ID of a process
  Resolves: rhbz#2049732
  - Allow unconfined to run virtd bpf
  Resolves: rhbz#2033504


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.26-1
changelog:
  - Remove permissive domain for insights_client_t
  Resolves: rhbz#2055823
  - New policy for insight-client
  Resolves: rhbz#2055823
  - Allow confined sysadmin to use tool vipw
  Resolves: rhbz#2053458
  - Allow chage domtrans to sssd
  Resolves: rhbz#2054657
  - Remove label for /usr/sbin/bgpd
  Resolves: rhbz#2055578
  - Dontaudit pkcsslotd sys_admin capability
  Resolves: rhbz#2055639
  - Do not change selinuxuser_execmod and selinuxuser_execstack
  Resolves: rhbz#2055822
  - Allow tuned to read rhsmcertd config files
  Resolves: rhbz#2055823


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.27-1
changelog:
  - Allow ModemManager connect to the unconfined user domain
  Resolves: rhbz#2000196
  - Label /dev/wwan.+ with modem_manager_t
  Resolves: rhbz#2000196
  - Allow systemd-coredump userns capabilities and root mounton
  Resolves: rhbz#2057435
  - Allow systemd-coredump read and write usermodehelper state
  Resolves: rhbz#2057435
  - Allow sysadm_passwd_t to relabel passwd and group files
  Resolves: rhbz#2053458
  - Allow systemd-sysctl read the security state information
  Resolves: rhbz#2056999
  - Remove unnecessary /etc file transitions for insights-client
  Resolves: rhbz#2055823
  - Label all content in /var/lib/insights with insights_client_var_lib_t
  Resolves: rhbz#2055823
  - Update insights-client policy
  Resolves: rhbz#2055823
  - Update insights-client: fc pattern, motd, writing to etc
  Resolves: rhbz#2055823
  - Update specfile to buildrequire policycoreutils-devel >= 3.3-5
  - Add modules_checksum to %files


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.28-1
changelog:
  - Allow logrotate a domain transition to cluster administrative domain
  Resolves: rhbz#2061277
  - Change the selinuxuser_execstack boolean value to true
  Resolves: rhbz#2064274


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.29-1
changelog:
  - Allow qemu-kvm create and use netlink rdma sockets
  Resolves: rhbz#2063612
  - Label corosync-cfgtool with cluster_exec_t
  Resolves: rhbz#2061277


author: EL Errata <el-errata_ww@oracle.com> - 34.1.29-1.0.1
changelog:
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow administrative users the bpf capability [Orabug: 33803450]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.29-1.1
changelog:
  - Update insights_client_filetrans_named_content()
  Resolves: rhbz#2106147
  - Allow transition to insights_client named content
  Resolves: rhbz#2106147
  - Add the insights_client_filetrans_named_content() interface
  Resolves: rhbz#2106147
  - Update policy for insights-client to run additional commands 3
  Resolves: rhbz#2106147
  - Allow insights-client execute its private memfd: objects
  Resolves: rhbz#2106147
  - Update policy for insights-client to run additional commands 2
  Resolves: rhbz#2106147
  - Use insights_client_tmp_t instead of insights_client_var_tmp_t
  Resolves: rhbz#2106147
  - Change space indentation to tab in insights-client
  Resolves: rhbz#2106147
  - Use socket permissions sets in insights-client
  Resolves: rhbz#2106147
  - Update policy for insights-client to run additional commands
  Resolves: rhbz#2106147
  - Allow init_t to rw insights_client unnamed pipe
  Resolves: rhbz#2106147
  - Change rpm_setattr_db_files() to use a pattern
  Resolves: rhbz#2106147
  - Add rpm setattr db files macro
  Resolves: rhbz#2106147
  - Fix insights client
  Resolves: rhbz#2106147
  - Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
  Resolves: rhbz#2106147
  - Label /var/cache/insights with insights_client_cache_t
  Resolves: rhbz#2106147
  - Allow insights-client manage gpg admin home content
  Resolves: rhbz#2106147
  - Add the gpg_manage_admin_home_content() interface
  Resolves: rhbz#2106147
  - Allow insights-client create and use unix_dgram_socket
  Resolves: rhbz#2106147
  - Allow insights-client search gconf homedir
  Resolves: rhbz#2106147
  - Allow insights-client create_socket_perms for tcp/udp sockets
  Resolves: rhbz#2106147
  - Allow insights-client read rhnsd config files
  Resolves: rhbz#2106147


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.29-1.2
changelog:
  - Allow insights-client rpm named file transitions
  Resolves: rhbz#2106147
  - Add /var/tmp/insights-archive to insights_client_filetrans_named_content
  Resolves: rhbz#2106147
  - Use insights_client_filetrans_named_content
  Resolves: rhbz#2106147
  - Make default file context match with named transitions
  Resolves: rhbz#2106147
  - Allow rhsmcertd to read insights config files
  Resolves: rhbz#2106147
  - Label /etc/insights-client/machine-id
  Resolves: rhbz#2106147
  - Use insights_client_etc_t in insights_search_config()
  Resolves: rhbz#2106147
  - Add the insights_search_config() interface
  Resolves: rhbz#2106147


author: EL Errata <el-errata_ww@oracle.com> - 34.1.29-1.0.4
changelog:
  - Add the corecmd_watch_bin_dirs() interface [Orabug: 34322059]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Revert "Dontaudit domain the fowner capability" [Orabug: 33952489]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow administrative users the bpf capability [Orabug: 33803450]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.35-1
changelog:
  -Add the corecmd_watch_bin_dirs() interface
  Resolves: rhbz#1965013
  - Update rhcd policy
  Resolves: rhbz#1965013
  - Allow rhcd search insights configuration directories
  Resolves: rhbz#1965013
  - Add the kernel_read_proc_files() interface
  Resolves: rhbz#1965013
  - Update insights_client_filetrans_named_content()
  Resolves: rhbz#2081425
  - Allow transition to insights_client named content
  Resolves: rhbz#2081425
  - Add the insights_client_filetrans_named_content() interface
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands 3
  Resolves: rhbz#2081425
  - Allow insights-client execute its private memfd: objects
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands 2
  Resolves: rhbz#2081425
  - Use insights_client_tmp_t instead of insights_client_var_tmp_t
  Resolves: rhbz#2081425
  - Change space indentation to tab in insights-client
  Resolves: rhbz#2081425
  - Use socket permissions sets in insights-client
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands
  Resolves: rhbz#2081425
  - Allow init_t to rw insights_client unnamed pipe
  Resolves: rhbz#2081425
  - Fix insights client
  Resolves: rhbz#2081425
  - Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
  Resolves: rhbz#2081425
  - Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
  Resolves: rhbz#2081425
  - Allow stalld get scheduling policy of kernel threads
  Resolves: rhbz#2096776
  - Update samba-dcerpcd policy for kerberos usage
  Resolves: rhbz#2096521
  - Allow winbind_rpcd_t connect to self over a unix_stream_socket
  Resolves: rhbz#2096255
  - Allow dlm_controld send a null signal to a cluster daemon
  Resolves: rhbz#2095884
  - Allow dhclient manage pid files used by chronyd
  The chronyd_manage_pid_files() interface was added.
  - Resolves: rhbz#2094155
  Allow install_t nnp_domtrans to setfiles_mac_t
  - Resolves: rhbz#2073010
  - Allow rabbitmq to use systemd notify
  Resolves: rhbz#2056565
  - Allow ksmctl create hardware state information files
  Resolves: rhbz#2021131
  - Label /var/target with targetd_var_t
  Resolves: rhbz#2020169
  - Allow targetclid read generic SSL certificates
  Resolves: rhbz#2020169


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.36-1
changelog:
  - Allow targetclid read generic SSL certificates (fixed)
  Resolves: rhbz#2020169
  - Fix file context pattern for /var/target
  Resolves: rhbz#2020169
  - Use insights_client_etc_t in insights_search_config()
  Resolves: rhbz#1965013


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.37-1
changelog:
  - Allow targetclid read /var/target files
  Resolves: rhbz#2020169
  - Update samba-dcerpcd policy for kerberos usage 2
  Resolves: rhbz#2096521
  - Allow samba-dcerpcd work with sssd
  Resolves: rhbz#2096521
  - Allow stalld set scheduling policy of kernel threads
  Resolves: rhbz#2102224


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.38-1
changelog:
  - Allow some domains use sd_notify()
  Resolves: rhbz#2056565
  - Revert "Allow rabbitmq to use systemd notify"
  Resolves: rhbz#2056565
  - Update winbind_rpcd_t
  Resolves: rhbz#2102084
  - Update chronyd_pid_filetrans() to allow create dirs
  Resolves: rhbz#2101910
  - Allow keepalived read the contents of the sysfs filesystem
  Resolves: rhbz#2098130
  - Define LIBSEPOL version 3.4-1
  Resolves: rhbz#2095688


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.39-1
changelog:
  - Add support for systemd-network-generator
  Resolves: RHBZ#2111069
  - Allow systemd work with install_t unix stream sockets
  Resolves: rhbz#2111206
  - Allow sa-update to get init status and start systemd files
  Resolves: RHBZ#2061844


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.40-1
changelog:
  - Allow systemd-modules-load write to /dev/kmsg and send a message to syslogd
  Resolves: RHBZ#2088257
  - Allow systemd_hostnamed label /run/systemd/* as hostnamed_etc_t
  Resolves: RHBZ#1976684
  - Allow samba-bgqd get a printer list
  Resolves: rhbz#2112395
  - Allow networkmanager to signal unconfined process
  Resolves: RHBZ#2074414
  - Update NetworkManager-dispatcher policy
  Resolves: RHBZ#2101910
  - Allow openvswitch search tracefs dirs
  Resolves: rhbz#1988164
  - Allow openvswitch use its private tmpfs files and dirs
  Resolves: rhbz#1988164
  - Allow openvswitch fsetid capability
  Resolves: rhbz#1988164


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.41-1
changelog:
  - Allow unconfined domains to bpf all other domains
  Resolves: RHBZ#2112014
  - Allow stalld get and set scheduling policy of all domains.
  Resolves: rhbz#2105038
  - Allow unconfined_t transition to targetclid_home_t
  Resolves: RHBZ#2106360
  - Allow samba-bgqd to read a printer list
  Resolves: rhbz#2118977
  - Allow system_dbusd ioctl kernel with a unix stream sockets
  Resolves: rhbz#2085392
  - Allow chronyd bind UDP sockets to ptp_event ports.
  Resolves: RHBZ#2118631
  - Update tor_bind_all_unreserved_ports interface
  Resolves: RHBZ#2089486
  - Remove permissive domain for rhcd_t
  Resolves: rhbz#2119351
  - Allow unconfined and sysadm users transition for /root/.gnupg
  Resolves: rhbz#2121125
  - Add gpg_filetrans_admin_home_content() interface
  Resolves: rhbz#2121125
  - Update rhcd policy for executing additional commands
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution
  Resolves: rhbz#2119507
  - Add rpm setattr db files macro
  Resolves: rhbz#2119507
  - Add userdom_view_all_users_keys() interface
  Resolves: rhbz#2119507
  - Allow gpg read and write generic pty type
  Resolves: rhbz#2119507
  - Allow chronyc read and write generic pty type
  Resolves: rhbz#2119507


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.42-1
changelog:
  - Label /var/log/rhc-worker-playbook with rhcd_var_log_t
  Resolves: rhbz#2119351
  - Update insights-client policy (auditctl, gpg, journal)
  Resolves: rhbz#2107363


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.43-1
changelog:
  - Update rhcd policy for executing additional commands 5
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 4
  Resolves: rhbz#2119351
  - Allow rhcd create rpm hawkey logs with correct label
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 3
  Resolves: rhbz#2119351
  - Allow sssd to set samba setting
  Resolves: rhbz#2121125
  - Allow journalctl read rhcd fifo files
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution 5
  Resolves: rhbz#2121125
  - Confine insights-client systemd unit
  Resolves: rhbz#2121125
  - Update insights-client policy for additional commands execution 4
  Resolves: rhbz#2121125
  - Update insights-client policy for additional commands execution 3
  Resolves: rhbz#2121125
  - Allow rhcd execute all executables
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 2
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution 2
  Resolves: rhbz#2121125


author: EL Errata <el-errata_ww@oracle.com> - 34.1.43-1.0.1
changelog:
  - Allow system dbus daemon to watch generic /var/lib directory [Orabug: 34375044]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Revert "Dontaudit domain the fowner capability" [Orabug: 33952489]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.43-1.1
changelog:
  - Add domain_unix_read_all_semaphores() interface
  Resolves: rhbz#2136760
  - Allow rhcd compute selinux access vector
  Resolves: rhbz#2136760
  - Add file context entries for insights-client and rhc
  Resolves: rhbz#2136760
  - Revert "Allow insights-client run lpr and allow the proper role"
  Resolves: rhbz#2136760
  - Allow insights-client dbus chat with various services
  Resolves: rhbz#2136760
  - Allow insights-client tcp connect to various ports
  Resolves: rhbz#2136760
  - Allow insights-client run lpr and allow the proper role
  Resolves: rhbz#2136760
  - Allow insights-client work with pcp and manage user config files
  Resolves: rhbz#2136760
  - Allow insights-client dbus chat with abrt
  Resolves: rhbz#2136760
  - Allow insights client communicate with cupsd, mysqld, openvswitch, redis
  Resolves: rhbz#2136760
  - Allow insights client read raw memory devices
  Resolves: rhbz#2136760
  - Allow insights-client domain transition on semanage execution
  Resolves: rhbz#2136760
  - Allow insights-client create gluster log dir with a transition
  Resolves: rhbz#2136760
  - Allow insights-client manage generic locks
  Resolves: rhbz#2136760
  - Allow insights-client unix_read all domain semaphores
  Resolves: rhbz#2136760
  - Allow insights-client manage samba var dirs
  Resolves: rhbz#2136760
  - Allow insights-client send null signal to rpm and system cronjob
  Resolves: rhbz#2136760
  - Allow insights-client connect to postgresql with a unix socket
  Resolves: rhbz#2136760
  - Allow insights-client domtrans on unix_chkpwd execution
  Resolves: rhbz#2136760


author: EL Errata <el-errata_ww@oracle.com> - 34.1.43-1.0.3
changelog:
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow svirt_t domain to mmap svirt_image_t character files [Orabug: 34908824]
  - Allow system dbus daemon to watch generic /var/lib directory [Orabug: 34375044]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Revert "Dontaudit domain the fowner capability" [Orabug: 33952489]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.5-1
changelog:
  - Reuse tmpfs_t also for the ramfs filesystem
  Resolves: rhbz#2160391
  - Allow systemd-resolved watch tmpfs directories
  Resolves: rhbz#2160391
  - Allow hostname_t to read network sysctls.
  Resolves: rhbz#2161958
  - Allow ModemManager all permissions for netlink route socket
  Resolves: rhbz#2149560
  - Allow unconfined user filetransition for sudo log files
  Resolves: rhbz#2160388
  - Allow sudodomain use sudo.log as a logfile
  Resolves: rhbz#2160388
  - Allow nm-cloud-setup dispatcher plugin restart nm services
  Resolves: rhbz#2154414
  - Allow wg to send msg to kernel, write to syslog and dbus connections
  Resolves: rhbz#2149452
  - Allow rshim bpf cap2 and read sssd public files
  Resolves: rhbz#2080439
  - Allow svirt request the kernel to load a module
  Resolves: rhbz#2144735
  - Rebase selinux-policy to the latest one in rawhide
  Resolves: rhbz#2014606


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.6-1
changelog:
  - Allow modemmanager create hardware state information files
  Resolves: rhbz#2149560
  - Dontaudit ftpd the execmem permission
  Resolves: rhbz#2164434
  - Allow nm-dispatcher plugins read generic files in /proc
  Resolves: rhbz#2164845
  - Label systemd-journald feature LogNamespace
  Resolves: rhbz#2124797
  - Boolean: allow qemu-ga read ssh home directory
  Resolves: rhbz#1917024


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.7-1
changelog:
  - Allow staff_t getattr init pid chr & blk files and read krb5
  Resolves: rhbz#2112729
  - Allow firewalld to rw z90crypt device
  Resolves: rhbz#2166877
  - Allow httpd work with tokens in /dev/shm
  Resolves: rhbz#2166283


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.8-1
changelog:
  - Allow svirt to map svirt_image_t char files
  Resolves: rhbz#2170482
  - Fix opencryptoki file names in /dev/shm
  Resolves: rhbz#2166283


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.9-1
changelog:
  - Boolean: allow qemu-ga manage ssh home directory
  Resolves: rhbz#2178612
  - Allow wg load kernel modules, search debugfs dir
  Resolves: rhbz#2176487


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.10-1
changelog:
  - Add support for the passt_t domain
  Resolves: rhbz#2172268
  - Allow virtd_t and svirt_t work with passt
  Resolves: rhbz#2172268
  - Add new interfaces in the virt module
  Resolves: rhbz#2172268
  - Add passt interfaces defined conditionally
  Resolves: rhbz#2172268


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1
changelog:
  - Allow passt manage qemu pid sock files
  Resolves: rhbz#2172268
  - Exclude passt.if from selinux-policy-devel
  Resolves: rhbz#2172268


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1.1
changelog:
  - Allow dmidecode write to cloud-init tmp files
  Resolves: rhbz#2188391
  - Allow chronyd send a message to cloud-init over a datagram socket
  Resolves: rhbz#2188391
  - Allow cloud-init domain transition to insights-client domain
  Resolves: rhbz#2188391


author: Darren Archibald <darren.archibald@oracle.com> - 38.1.11-2.0.1.2
changelog:
  - Allow kdumpctl_t to execmem [Orabug: 35381156]
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition [Orabug: 35091334]
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files [Orabug: 35122619]
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Darren Archibald <darren.archibald@oracle.com> - 38.1.11-2.0.1.3
changelog:
  - Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t
  Resolves: rhbz#2203797
  - Allow cloud-init manage gpg admin home content
  Resolves: rhbz#2203797


author: Darren Archibald <darren.archibald@oracle.com> - 38.1.11-2.0.1.3
changelog:
  - Oracle changes are now applied on top of new upstream patchset
  - Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t
  Resolves: rhbz#2203797
  - Allow cloud-init manage gpg admin home content
  Resolves: rhbz#2203797


author: David Sloboda <david.x.sloboda@oracle.com> - 38.1.11-2.0.1.4
changelog:
  - Oracle changes are now applied on top of new upstream patchset
  - Boolean: Allow virt_qemu_ga create ssh directory
  Resolves: rhbz#2226685
  - Allow virt_qemu_ga_t create .ssh dir with correct label
  Resolves: rhbz#2226685
  - Label only /usr/sbin/ripd and ripngd with zebra_exec_t
  Resolves: rhbz#2229992
  - Allow firewalld rw ica_tmpfs_t files
  Resolves: rhbz#2233535
  - Allow systemd-timedated watch init runtime dir
  Resolves: rhbz#2232637


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.4-1
changelog:
  - Add lpr_roles  to system_r roles
  Resolves: rhbz#2152150
  - Allow insights client work with gluster and pcp
  Resolves: rhbz#2152150
  - Add interfaces in domain, files, and unconfined modules
  Resolves: rhbz#2152150
  - Label fwupdoffline and fwupd-detect-cet with fwupd_exec_t
  Resolves: rhbz#2152150
  - Add insights additional capabilities
  Resolves: rhbz#2152150
  - Revert "Allow insights-client run lpr and allow the proper role"
  Resolves: rhbz#2152150
  - Allow prosody manage its runtime socket files
  Resolves: rhbz#2157891
  - Allow syslogd read network sysctls
  Resolves: rhbz#2156068
  - Allow NetworkManager and wpa_supplicant the bpf capability
  Resolves: rhbz#2137085
  - Allow sysadm_t read/write ipmi devices
  Resolves: rhbz#2158419
  - Allow wireguard to create udp sockets and read net_conf
  Resolves: rhbz#2149452
  - Allow systemd-rfkill the bpf capability
  Resolves: rhbz#2149390
  - Allow load_policy_t write to unallocated ttys
  Resolves: rhbz#2145181
  - Allow winbind-rpcd manage samba_share_t files and dirs
  Resolves: rhbz#2150680


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 38.1.11-2.0.1
changelog:
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition [Orabug: 35091334]
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files [Orabug: 35122619]
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.15-1
changelog:
  - Add fs_delete_pstore_files() interface
  Resolves: rhbz#2181565
  - Add fs_read_pstore_files() interface
  Resolves: rhbz#2181565
  - Allow insights-client getsession process permission
  Resolves: rhbz#2214581
  - Allow insights-client work with pipe and socket tmp files
  Resolves: rhbz#2214581
  - Allow insights-client map generic log files
  Resolves: rhbz#2214581
  - Allow insights-client read unconfined service semaphores
  Resolves: rhbz#2214581
  - Allow insights-client get quotas of all filesystems
  Resolves: rhbz#2214581
  - Allow haproxy read hardware state information
  Resolves: rhbz#2164691
  - Allow cupsd dbus chat with xdm
  Resolves: rhbz#2143641
  - Allow dovecot_deliver_t create/map dovecot_spool_t dir/file
  Resolves: rhbz#2165863
  - Add none file context for polyinstantiated tmp dirs
  Resolves: rhbz#2099194
  - Add support for the systemd-pstore service
  Resolves: rhbz#2181565
  - Label /dev/userfaultfd with userfaultfd_t
  Resolves: rhbz#2175290
  - Allow collectd_t read proc_net link files
  Resolves: rhbz#2209650
  - Label smtpd with sendmail_exec_t
  Resolves: rhbz#2213573
  - Label msmtp and msmtpd with sendmail_exec_t
  Resolves: rhbz#2213573
  - Allow dovecot-deliver write to the main process runtime fifo files
  Resolves: rhbz#2211787
  - Allow subscription-manager execute ip
  Resolves: rhbz#2211566
  - Allow ftpd read network sysctls
  Resolves: rhbz#2175856


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.16-1
changelog:
  - Remove permissive from fdo
  Resolves: rhbz#2026795
  - Add the qatlib  module
  Resolves: rhbz#2080443
  - Add the fdo module
  Resolves: rhbz#2026795
  - Add the booth module to modules.conf
  Resolves: rhbz#2128833
  - Add policy for FIDO Device Onboard
  Resolves: rhbz#2026795
  - Create policy for qatlib
  Resolves: rhbz#2080443
  - Add policy for boothd
  Resolves: rhbz#2128833
  - Add list_dir_perms to kerberos_read_keytab
  Resolves: rhbz#2112729
  - Allow nsd_crond_t write nsd_var_run_t & connectto nsd_t
  Resolves: rhbz#2209973
  - Allow collectd_t read network state symlinks
  Resolves: rhbz#2209650
  - Revert "Allow collectd_t read proc_net link files"
  Resolves: rhbz#2209650
  - Allow insights-client execmem
  Resolves: rhbz#2207894
  - Label udf tools with fsadm_exec_t
  Resolves: rhbz#2039774


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.17-1
changelog:
  - Add the qatlib  module
  Resolves: rhbz#2080443
  - Add the fdo module
  Resolves: rhbz#2026795
  - Add the booth module to modules.conf
  Resolves: rhbz#2128833


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.18-1
changelog:
  - Boolean: Allow virt_qemu_ga create ssh directory
  Resolves: rhbz#2181402
  - Allow virt_qemu_ga_t create .ssh dir with correct label
  Resolves: rhbz#2181402
  - Set default ports for keylime policy
  Resolves: RHEL-594
  - Allow unconfined service inherit signal state from init
  Resolves: rhbz#2186233
  - Allow sa-update connect to systemlog services
  Resolves: rhbz#2220643
  - Allow sa-update manage spamc home files
  Resolves: rhbz#2220643
  - Label only /usr/sbin/ripd and ripngd with zebra_exec_t
  Resolves: rhbz#2213605
  - Add the files_getattr_non_auth_dirs() interface
  Resolves: rhbz#2076933
  - Update policy for the sblim-sfcb service
  Resolves: rhbz#2076933
  - Define equivalency for /run/systemd/generator.early
  Resolves: rhbz#2213516


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.19-1
changelog:
  - Allow qatlib to read sssd public files
  Resolves: rhbz#2080443
  - Fix location for /run/nsd
  Resolves: rhbz#2181600
  - Allow samba-rpcd work with passwords
  Resolves: rhbz#2107092
  - Allow rpcd_lsad setcap and use generic ptys
  Resolves: rhbz#2107092
  - Allow gpsd,oddjob,oddjob_mkhomedir rw user domain pty
  Resolves: rhbz#2223305
  - Allow keepalived to manage its tmp files
  Resolves: rhbz#2179212
  - Allow nscd watch system db dirs
  Resolves: rhbz#2152124


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.20-1
changelog:
  - Allow user_u and staff_u get attributes of non-security dirs
  Resolves: rhbz#2215507
  - Allow cloud_init create dhclient var files and init_t manage net_conf_t
  Resolves: rhbz#2225418
  - Allow samba-dcerpc service manage samba tmp files
  Resolves: rhbz#2230365
  - Update samba-dcerpc policy for printing
  Resolves: rhbz#2230365
  - Allow sysadm_t run kernel bpf programs
  Resolves: rhbz#2229936
  - allow mon_procd_t self:cap_userns sys_ptrace
  Resolves: rhbz#2221986
  - Remove nsplugin_role from mozilla.if
  Resolves: rhbz#2221251
  - Allow unconfined user filetrans chrome_sandbox_home_t
  Resolves: rhbz#2187893
  - Allow pdns name_bind and name_connect all ports
  Resolves: rhbz#2047945
  - Allow insights-client read and write cluster tmpfs files
  Resolves: rhbz#2221631
  - Allow ipsec read nsfs files
  Resolves: rhbz#2230277
  - Allow upsmon execute upsmon via a helper script
  Resolves: rhbz#2228403
  - Fix labeling for no-stub-resolv.conf
  Resolves: rhbz#2148390
  - Add use_nfs_home_dirs boolean for mozilla_plugin
  Resolves: rhbz#2214298
  - Change wording in /etc/selinux/config
  Resolves: rhbz#2143153


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.21-1
changelog:
  - Allow logrotate_t to map generic files in /etc
  Resolves: rhbz#2231257
  - Allow insights-client manage user temporary files
  Resolves: rhbz#2224737
  - Make insights_client_t an unconfined domain
  Resolves: rhbz#2225526


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.22-1
changelog:
  - Allow qatlib  to modify hardware state information.
  Resolves: rhbz#2080443
  - Update policy for fdo
  Resolves: rhbz#2229722
  - Allow gpsd, oddjob and oddjob_mkhomedir_t write user_tty_device_t chr_file
  Resolves: rhbz#2223305
  - Allow svirt to rw /dev/udmabuf
  Resolves: rhbz#2223727
  - Allow keepalived watch var_run dirs
  Resolves: rhbz#2186759


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.23-1
changelog:
  - Allow cups-pdf connect to the system log service
  Resolves: rhbz#2234765
  - Update policy for qatlib
  Resolves: rhbz#2080443


author: Naoki Tanaka <naoki.tanaka@oracle.com> - 38.1.23-1.0.1
changelog:
  - Allow kdumpctl_t to execmem [Orabug: 35381156]
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition [Orabug: 35091334]
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files [Orabug: 35122619]
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]
  - Add boolean qemu-ga to run unconfined script
  Resolves: rhbz#2093355
  - Allow cloud-init manage gpg admin home content
  Resolves: rhbz#2203797


author: systemd maintenance team <systemd-maint@redhat.com> - 252-2
changelog:
  - test: check if we can use SHA1 MD for signing before using it (#2141979)
  - boot: cleanups for efivar_get() and friends (#2141979)
  - boot: fix false maybe-uninitialized warning (#2141979)
  - tree-wide: modernizations with RET_NERRNO() (#2137584)
  - sd-bus: handle -EINTR return from bus_poll() (#2137584)
  - stdio-bridge: don't be bothered with EINTR (#2137584)
  - varlink: also handle EINTR gracefully when waiting for EIO via ppoll() (#2137584)
  - sd-netlink: handle EINTR from poll() gracefully, as success (#2137584)
  - resolved: handle -EINTR returned from fd_wait_for_event() better (#2137584)
  - homed: handle EINTR gracefully when waiting for device node (#2137584)
  - utmp-wtmp: fix error in case isatty() fails (#2137584)
  - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2137584)
  - io-util: document EINTR situation a bit (#2137584)
  - terminal-util: Set OPOST when setting ONLCR (#2138081)
  - cgtop: Do not rewrite -P or -k options (#2138081)
  - test: Add tests for systemd-cgtop args parsing (#2138081)
  - resolved: remove inappropriate assert() (#2138081)
  - boot: Add xstrn8_to_16 (#2138081)
  - boot: Use xstr8_to_16 (#2138081)
  - boot: Use xstr8_to_16 for path conversion (#2138081)
  -  stub: Fix cmdline handling (#2138081)
  - stub: Detect empty LoadOptions when run from EFI shell (#2138081)
  - boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices (#2138081)
  - boot: Make sure all partitions drivers are connected (#2138081)
  - boot: improve support for qemu (#2138081)
  - systemd-boot man page: add section for virtual machines (#2138081)
  - boot: Only do full driver initialization in VMs (#2138081)
  - dissect: rework DISSECT_IMAGE_ADD_PARTITION_DEVICES + DISSECT_IMAGE_OPEN_PARTITION_DEVICES (#2138081)
  - ci(Mergify): v252 configuration update (#2138081)
  - ci: Run GitHub workflows on rhel branches (#2138081)
  - ci: Drop scorecards workflow, not relevant (#2138081)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-3
changelog:
  - swap: tell swapon to reinitialize swap if needed (#2151993)
  - coredump: adjust whitespace (#2155517)
  - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155517)
  - Revert "basic: add fallback in chase_symlinks_and_opendir() for cases when /proc is not mounted" (#2138081)
  - glyph-util: add warning sign special glyph (#2138081)
  - chase-symlink: when converting directory O_PATH fd to real fd, don't bother with /proc/ (#2138081)
  - systemctl: print a clear warning if people invoke systemctl without /proc/ (#2138081)
  - TEST-65: check cat-config operation in chroot (#2138081)
  - TEST-65: use [[ -v ]] more (#2138081)
  - systemctl: warn if trying to disable a unit with no install info (#2141979)
  - systemctl: allow suppress the warning of no install info using --no-warn (#2141979)
  - rpm/systemd-update-helper: use --no-warn when disabling units (#2141979)
  - systemctl: suppress warning about missing /proc/ when --no-warn (#2141979)
  - shell-completion: systemctl: add --no-warn (#2141979)
  - core/unit: drop doubled empty line (#2160477)
  - core/unit: drop dependency to the unit being merged (#2160477)
  - core/unit: fix logic of dropping self-referencing dependencies (#2160477)
  - core/unit: merge two loops into one (#2160477)
  - test: add test case for sysv-generator and invalid dependency (#2160477)
  - core/unit: merge unit names after merging deps (#2160477)
  - core/unit: fix log message (#2160477)
  - test: explicitly create the /etc/init.d directory (#2160477)
  - test: support a non-default SysV directory (#2160477)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-4
changelog:
  - udev: make get_virtfn_info() provide physical PCI device (#2159448)
  - test: make helper_check_device_units() log unit name (#2138081)
  - test: add a testcase for lvextend (#2138081)
  - pid1: fix segv triggered by status query (#26279) (#2138081)
  - test: create config under /run (#2138081)
  - test: add tests for mDNS and LLMNR settings (#2138081)
  - resolved: introduce the _localdnsstub and _localdnsproxy special hostnames for 127.0.0.54 + 127.0.0.53 (#2138081)
  - test: wait for the monitoring service to become active (#2138081)
  - test: suppress echo in monitor_check_rr() (#2138081)
  - Revert "test: wait for the monitoring service to become active" (#2138081)
  - test: show and check almost all journal entries since the relevant command being invoked (#2138081)
  - test: cover IPv6 in the resolved test suite (#2138081)
  - test: add a couple of SRV records to check service resolution (#2138081)
  - test: add a test for the OPENPGPKEY RR (#2138081)
  - test: don't hang indefinitely on no match (#2138081)
  - test-ndisc: fix memleak and fd leak (#2138081)
  - test-unit-name: fix fd leak (#2138081)
  - test: bump D-Bus service start timeout if we run without accel (#2138081)
  - test: bump the client-side timeout in sd-bus as well (#2138081)
  - test: bump the container spawn timeout to 60s (#2138081)
  - network: fix memleak (#2138081)
  - busctl: fix introspecting DBus properties (#2138081)
  - busctl: simplify peeking the type (#2138081)
  - resolve: drop redundant call of socket_ipv6_is_supported() (#2138081)
  - resolve: introduce link_get_llmnr_support() and link_get_mdns_support() (#2138081)
  - resolve: provide effective supporting levels of mDNS and LLMNR (#2138081)
  - resolvectl: warn if the global mDNS or LLMNR support level is lower than the requested one (#2138081)
  - resolve: enable per-link mDNS setting by default (#2138081)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-5
changelog:
  - nss-myhostname: fix inverted condition in (#2167468)
  - nss-myhostname: do not return empty result with NSS_STATUS_SUCCESS (#2167468)
  - sleep: rename hibernate_delay_sec -> _usec (#2151612)
  - sleep: fetch_batteries_capacity_by_name() does not return -ENOENT (#2151612)
  - sleep: drop unnecessary temporal vaiable and initialization (#2151612)
  - sleep: introduce SuspendEstimationSec= (#2151612)
  - sleep: coding style fixlets (#2151612)
  - sleep: simplify code a bit (#2151612)
  - sleep: fix indentation (#2151612)
  - sleep: enumerate only existing and non-device batteries (#2151612)
  - core: when isolating to a unit, also keep units running that are triggered by units we keep running (#1952378)
  - udev/net_id: introduce naming scheme for RHEL-9.2 (#2170500)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-6
changelog:
  - journalctl: actually run the static destructors (#2122500)
  - efi: drop executable-stack bit from .elf file (#2140646)
  - install: fail early if specifier expansion failed (#2138081)
  - test: add coverage for #26467 (#2138081)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-7
changelog:
  - test: add coverage for #24177 (#1985288)
  - logind-session: make stopping of idle session visible to admins (#2172401)


author: Tony Rodriguez <tony.rodriguez@oracle.com> - 252-8.0.1
changelog:
  - Backport upstream pstore dmesg fix [Orabug: 34868110]
  - Remove upstream references  [Orabug: 33995357]
  - Disable unprivileged BPF by default [Orabug: 32870980]
  - udev rules: fix memory hot add and remove [Orabug: 31310273]
  - set "RemoveIPC=no" in logind.conf as default for OL7.2 [Orabug: 22224874]
  - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
  - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792]
  - shutdown: get only active md arrays. [Orabug: 34467234]
  - Removed unneeded patches from the systemd.spec file [Orabug: 34272490]
  - A) 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch
  - B) 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-2
changelog:
  - Modernize spec file
  - License corrected to
    ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1))


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Tomas Popela <tpopela@redhat.com> - 1.8.1-3
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1929237


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Merlin Mathesius <mmathesi@redhat.com> - 0:2.7.0-6
changelog:
  - Fix FTBFS by patching ValueAssertTest to adjust for changed format of
    mismatched string exception


author: Neal Gompa <ngompa13@gmail.com> - 1:7.5-49
changelog:
  - Add OrderWithRequires for freetype to ensure freetype is installed first
  - Move license files to license tag on file list


author: Adam Jackson <ajax@redhat.com> - 1.20.11-5
changelog:
  - Disable non-platform video driver probe, it should never be needed and the
    PCI probe code interferes with the (default) platform path.
    Resolves: #2000921


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-7
changelog:
  - CVE fix for: CVE-2021-4008 (#2030160), CVE-2021-4009 (#2030170),
    CVE-2021-4010 (#2030174), CVE-2021-4011 (#2030179)


author: Adam Jackson <ajax@redhat.com> - 1.20.11-8
changelog:
  - Only disable the PCI-specific driver probe, since we do still want fallback
    to fbdev to work.
    Resolves: #2029769


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-11
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108157, rhbz#2108162


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038067), CVE-2021-4009 (#2038070),
    CVE-2021-4010 (#2038072), CVE-2021-4011 (#2038074)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-3
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110440, rhbz#2110433


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


