# changelog

author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.6
changelog:
  - Upgrade to 1.35.6 release (development)
  - Move ifup/ifdown scripts to new NetworkManager-initscripts-updown package (rh #2022418)
  - wwan: fix assertion failure in modem/ppp code (rh #2028385)
  - core: fix performance regression with 500vlans test (rh #2028849)
  - core: drop defective BPF filter for netlink sockets that caused hangs (rh #2037411)
  - initrd: add support for rd.znet_ifnames (rh #1980387)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.7
changelog:
  - Upgrade to 1.35.7 release (development)
  - core: fix crash related to DHCPv6 leases (rh #2028849)
  - wifi: fix stale ActiveAccessPoint in D-Bus (rh #1983735)
  - libnm: fix dangling pointer in NMObject (rh #2039331)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.8
changelog:
  - Upgrade to 1.35.90 release (release candidate)
  - ovs: remove ovsdb entry on interface removal (rh #2047302)
  - ovs: properly clean up devices on daemon shutdown (rh #2029937)
  - core: avoid losing addresses on handover from initrd to ral root (rh #2047302)
  - core: fix a possibe assertion failure in ACD (rh #2047788)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.9
changelog:
  - Upgrade to 1.35.91 release (release candidate)
  - bond: fix duplicate IPv4 address detection (rh #2028751)
  - core: add support for blackhole routes (rh #1937823) (rh #2013587)
  - core: re-assess IP configuration if one IP family times out (rh #2051904)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.10
changelog:
  - Upgrade to 1.35.92 (release candidate)
  - ppp: increase disconnect timeout (rh #2049596)
  - core: finish activation after all objects are committed (rh #2043133)
  - ipv6: add support for multipath routes (rh #1837254)
  - keyfile: do not write empty string list properties (rh #2022623)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-1
changelog:
  - Upgrade to 1.36.0 release
  - core: avoid losing L3 configuration the second time it's applied (rh #2043514)
  - ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
  - nmcli: fix defaults for some properties on interactive add (rh #2053603)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-3
changelog:
  - core: preserve external bridge ports during checkpoint rollback (rh #2061711)
  - ovs-port: fix removal of ovsdb entry if the interface goes away (rh #2061709)


author: EL Errata <el-errata_ww@oracle.com> - 1.36.0-4.0.1
changelog:
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Disable the build of NetworkManager-config-connectivity-* subpackage for 9.0


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.36.0-5
changelog:
  - Fix DHCP loses lease when restarting (rh #2094715)
  - core: set "src" attribute for routes from DHCPv4 (rh #2094778)
  - platform: workaround for preserving IPv6 address order (rh #2094715)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.7-1
changelog:
  - Update to 1.39.7 release (development)
  - core: cancel the IP check on deactivation (rh #2080928)
  - core: ensure DHCP is restarted every time the link goes up (rh #2079406)
  - core: fix a leak of L3 configuration memory (rh #2083453)
  - ppp: fix a race with pppd when removing addresses (rh #2085382)
  - wifi: fix a crash when checking WEP supplicant capability (rh #2092782)


author: Thomas Haller <thaller@redhat.com> - 1:1.39.7-2
changelog:
  - fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097293)
  - reverse order of priority for static IPv6 addresses in "ipv6.addresses" (rh #2097293)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.8-1
changelog:
  - Update to 1.39.8 release (development)
  - core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
  - dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
  - core: add connection.wait-activation-delay property (rh #2008337)


author: Vojtech Bubela <vbubela@redhat.com> - 1:1.39.10-1
changelog:
  - Update to 1.39.10 release (development)
  - add support for {rto_min,quickack,advmss} route attributes (rh #2068525)
  - fix empty hostname for "SaveHostname" and make setting hostname async (rh #2090946)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.11-1
changelog:
  - Update to 1.39.11 release (development)
  - core: support nm.debug kernel command line option (rh #2102313)
  - ovs: don't ever move unactivated devices to failed state (rh #2077950)
  - dhclient: fix EXTENDED DHCP event handling (rh #2109285)
  - core: make "nmcli net off/on" more robust (rh #2093175)
  - bridge: add reapply support (rh #2092762)
  - bridge: don't reset vlan filtering on external connections (rh #2107647)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.90-1
changelog:
  - Update to 1.39.90 release (release candidate)
  - Add support for MPTCP (rh #2029636)
  - nmcli: fix assertion failure (rh #2092323)
  - bond: fix arp_ip_target option (rh #2117202)
  - nmci: fix test restart_L2_only_lacp (rh #2092361)


author: EL Errata <el-errata_ww@oracle.com> - 1.40.0-2.0.1
changelog:
  - disable MPTCP handling by default [Orabug: 34801142]
  - add connectivity check via Oracle servers [Orabug: 32051972]
  - Disable the build of NetworkManager-config-connectivity-* subpackage for 9.0


author: Thomas Haller <thaller@redhat.com> - 1:1.41.6-1
changelog:
  - Update to 1.41.6 release (development)
  - add support for loopback interfaces (rh #2073512)
  - ovs: support VLAN trunks for OVS port (rh #2111959)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.41.7-1
changelog:
  - Update to 1.41.7 release (development)
  - macsec: fix tracking of parent ifindex (rh #2122564)
  - cloud-setup: set preserve-external-ip flag during reapply (rh #2132754)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.41.8-1
changelog:
  - Update to 1.41.8 release (development)
  - core: add support for equal-cost multi-path (ECMP) routes (rh #2081302)
  - device: preserve the DHCP lease during reapply (rh #2117352)
  - ovs: add support for 'other_config' settings (rh #2151455)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.41.90-1
changelog:
  - Update to 1.41.90 release (release candidate)
  - l3cfg: schedule an update after every commit-type/config-data register/unregister (rh #2158394)
  - all: add support for ovs-dpdk n-rxq-desc and n-txq-desc (rh #2156385)
  - core: fix consistency for internal cache for IPv6 routes (rh #2060684)


author: Lubomir Rintel <lkundrak@v3.sk> - - 1:1.41.91-1
changelog:
  - Update to 1.41.91 release (release candidate)
  - core: retry if a rtnetlink socket runs out of buffer space (rh #2154350)
  - dns: allow changing resolv.conf options alone via global-dns (rh #2019306)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.42.2-1
changelog:
  - Update to 1.42.2 release
  - fix hostname lookup from IPv6 address (rh #2167816)
  - add new connection property to remove the autogenerated local route rule (rh #2167805)
  - fix race condition while setting the MAC of a OVS interface (rh #2168477)
  - expose the DHCP IAID in the lease information (rh #2169869)


author: Tomas Orsava <torsava@redhat.com> - 5.4.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: David Sloboda <david.x.sloboda@oracle.com> - 5.4.1-6.0.1
changelog:
  - Rebuild with python-rpm-generators-12-8.el9 to automatically
    obsolete python39-foo packages [Orabug: 34704236]


author: Yunying Sun <yunying.sun@intel.com> - 3.0.1-1
changelog:
  - Updated to 3.0.1 release
  - Removed ix86 support as so far it supports x86_64 only
  - Updated licenses following upstream


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Al Stone <ahs3@redhat.com> - 20200326-1
changelog:
  - Update to 20200326 source tree, including patch refreshes
  - Removed a couple of patches that got included upstream


author: Al Stone <ahs3@redhat.com> - 20200925-1
changelog:
  - Update to 20200925 source tree
  - Completely revamp the old big-endian patches (maintainability was the goal).
    This results in a much larger patch set, but each patch is more clearly used
    for a specific purpose.
  - The acpinames command has been deprecated upstream; acpiexec provides 
    replacement functionality.


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Dean Nelson <dnelson@redhat.com> - 20210604-4
changelog:
  - Add in big-endian patches for PRMT, RGRT and SVKL tables.
  - Fix big-endian related prmt.asl compiler errors.


author: Dean Nelson <dnelson@redhat.com> - 20210604-5
changelog:
  - Backport 19b11f91660b ("Add the subtable CFMWS to the CEDT table").
  - Backport d9798f5275bb ("Fix Compile issue with CEDT and add template").
  - Backport 0914618b553d ("Automated cleanup; No functional changes").
  - Backport 7021087eedb0 ("Remove a duplicate of ACPI_SIG_CEDT").
  - Add in big-endian patch for CEDT tble.


author: Sumit Bose <sbose@redhat.com> - 0.9.0-6
changelog:
  - Include the latest upstream patches with use-ldaps fixes, man page
    improvements and a new sub-command to create managed service accounts


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101.1
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2061731 - auparse missing information when used with --format-text (rhel-9.0)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101.2
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2070706 - Default systemd service config blocks audit watch rules in some directories (rhel 9.0)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-20
changelog:
  - bz1938682 - review of important potential issues detected by static analyzers
    in autofs-5.1.7-2.el9
    - fix concat_options() error handling.
  - Resolves: rhbz#1938682


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-21
changelog:
  - bz1938682 - review of important potential issues detected by static analyzers
    in autofs-5.1.7-2.el9
    - correct patch, fix concat_options() error handling.
  - Related: rhbz#1938682


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-22
changelog:
  - bz1984813 - autofs: FTBFS due to dynamic PTHREAD_STACK_MIN (glibc 2.34 related)
    - eliminate some more alloca usage.
    - use default stack size for threads.
  - Resolves: rhbz#1984813


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-23
changelog:
  - bz1984813 - autofs: FTBFS due to dynamic PTHREAD_STACK_MIN (glibc 2.34 related)
    - fix potential memory leak in "eliminate some more alloca usage" patch.
    - remove unused parameter from add_path() in "eliminate some more alloca usage" patch.
  - Related: rhbz#1984813


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-25
changelog:
  - bz2028301 - autofs: send FAIL cmd/ioctl mess when encountering problems with
    mount trigger
    - fix kernel mount status notification.
  - Resolves: rhbz#2028301


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-26
changelog:
  - bz2028301 - autofs: send FAIL cmd/ioctl mess when encountering problems with
    mount trigger
    - fix fedfs build flags.
  - Related: rhbz#2028301


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-27
changelog:
  - bz2028746 - autofs service has not proper limits set to be able to handle
    many mounts
    - fix set open file limit.
    - improve descriptor open error reporting.
  - Resolves: rhbz#2028746


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-28
changelog:
  - bz2056320 - Using -hosts option does not work in RHEL 9
    - fix root offset error handling.
    - fix nonstrict fail handling of last offset mount.
    - dont fail on duplicate offset entry tree add.
    - fix loop under run in cache_get_offset_parent().
    - simplify cache_add() a little.
    - fix use after free in tree_mapent_delete_offset_tree().
    - fix memory leak in xdr_exports().
    - avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
    - fix sysconf(3) return handling.
    - remove rpcgen dependedncy, it hasn't been needed since rev 10.
  - Related: rhbz#2056320


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-29
changelog:
  - bz2056321 - autofs attempts unmount on directory in use
    - remove nonstrict parameter from tree_mapent_umount_offsets().
    - fix handling of incorrect return from umount_ent().
  - Resolves: rhbz#2056321


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-30
changelog:
  - bz2084108 - autofs is slow to mount when doing lookups returns multiple entries
    - make NFS version check flags consistent.
    - refactor get_nfs_info().
    - also require TCP_REQUESTED when setting NFS port.
    - bailout on rpc systemerror.
    - fix nfsv4 only mounts should not use rpcbind.


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-31
changelog:
  - bz2087535 - libnss_sss: threads stuck at sss_nss_lock from initgroups
    - dont use initgroups() at spawn.
    - comment out Patch1 and Patch2 since they have been merged into
      the distribution tar (and so are not applied).
  - Resolves: rhbz#2087535


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-32.el9_1
changelog:
  - bz2166144 - automount -m crashes with Segmentation fault (core dumped)
    - fix invalid tsv access.
  - Resolves: rhbz#2166144


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-32.el9_1.1
changelog:
  - bz2166144 - automount -m crashes with Segmentation fault (core dumped)
    - fix incorrect changelog date.
  - Related: rhbz#2166144


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-32
changelog:
  - bz2122565 - automount -m crashes with Segmentation fault (core dumped)
    - fix invalid tsv access.
  - bz2126176 - autofs: %changelog entries are out of order
    - fix changelog date of out of order entry.
  - Resolves: rhbz#2122565 rhbz#2126176


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-33
changelog:
  - bz2131907 - autofs: missing unlock in sasl_do_kinit_ext_cc()
    - fix missing unlock in sasl_do_kinit_ext_cc().
  - Resolves: rhbz#2131907


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-34
changelog:
  - bz2147491 - segfault due to lookup_mod->context address being freed
    and reused while multiple threads were using it
    - fix parse module instance mutex naming.
    - serialise lookup module open and reinit.
    - coverity fix for invalid access.
    - fix hosts map deadlock on restart.
    - fix deadlock with hosts map reload.
    - fix memory leak in update_hosts_mounts().
  - Resolves: rhbz#2147491


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-35
changelog:
  - bz2145251 - RHEL9: automount does not handle null option string after
    "-" anymore
    - fix minus only option handling in concat_options().
  - Resolves: rhbz#2145251


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-36
changelog:
  - bz2149013 - autofs: errors in autofs-5.1.4-83.el8.x86_64 when restarting
    autofs with busy directories
    - fix incorrect path for is_mounted() in try_remount().
  - Resolves: rhbz#2149013


author: David Faust <david.faust@oracle.com> - 2.35.2-9.0.1
changelog:
  - Enable libctf
  - Backport all CTF improvements since 2.35.2 release, upstream commits:
    6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
    e695879142a libctf, testsuite: fix various warnings in tests
    b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
    ea9c2009115 libctf: try several possibilities for linker versioning flags
    bef9ef8ca0f libtool.m4: fix nm BSD flag detection
    bc4b1401129 libtool.m4: augment symcode for Solaris 11
    7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
    ae064303efe libctf, ld: fix test results for upstream GCC
    49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
    8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
    8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
    15131809c23 libctf: fix memory leak in a test
    0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
    5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
    86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
    24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
    485170cdb1b libctf, dump: do not emit size or alignment if it would error
    e93388417c1 Provide an inline startswith function in bfd.h
    69a284867c7 libctf: support encodings for enums
    e4c78f303df libctf: a couple of small error-handling fixes
    d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
    08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
    77d724a7ecd libctf: eliminate dtd_u, part 4: enums
    986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
    2a05d50e90c libctf: don't lose track of all valid types upon serialization
    755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
    81982d20fac libctf: eliminate dtd_u, part 3: functions
    534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
    7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
    eefe721eadf libctf: fix GNU style for do {} while
    b9a964318a7 libctf: split up ctf_serialize
    01cbfcba4bc libctf: fix comment above ctf_dict_t
    bf4c3185a5a libctf: split serialization and file writeout into its own file
    087945261c7 libctf: fix some tabdamage and move some code around
    211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
    8e7e446446b libctf: free ctf_dynsyms properly
    cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
    4659554b280 libctf: minor error-handling fixes
    f5060e56338 libctf: add a deduplicator-specific type mapping table
    478c04a55ee libctf: remove reference to "unconflicted link mode".
    8915c559d40 libctf, include: remove the nondeduplicating CTF linker
    fd12633780a libctf: fix ChangeLog date
    ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
    eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
    93993f67849 libctf AC_CANONICAL_TARGET
    f4f60336dae libctf, include: find types of symbols by name
    758f590744b libctf: add missing header in BFD ELF check
    cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
    95148614026 bfd, opcodes, libctf: support --with-included-gettext
    ee87f50b8d2 libctf: always name nameless types "", never NULL
    5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
    caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
    78f28b89e8c libctf: rip out dead code handling typedefs with no name
    35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
    f04ce15e831 ld: depend on libctf
    26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
    e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
    0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
    70d3120f322 libctf, testsuite: don't run without a suitable compiler
    b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
    abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
    8769046e5a9 libctf: remove outdated comment about parent dict importing
    6c3a38777b3 libctf, include: support unnamed structure members better
    abed0b0718a libctf: warn about information loss because of unreleased format changes
    9bc769718db libctf: new test of enum lookups with the _next iterator
    c59e30ed172 libctf: new testsuite
    1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
    37002871ac2 libctf, ld: dump enums: generally improve dump formatting
    ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
    91e7ce2fd7b libctf, ld: more dumper improvements
    57f97d0e6dd libctf, ld: CTF dumper changes for consistency
    b09ad6eae98 libctf: do not print array declarators backwards
    a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
    e8cda209052 libctf: Pass format argument to asprintf
    96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
    53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
    ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
    8f235c90a28 libctf: error-handling fixes
    97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
    2c78e92523a libctf, include: CTF-archive-wide symbol lookup
    0e28ade476e libctf, ld: properly deduplicate function types
    0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
    4665e895c37 libctf: adjust dumper for symtypetab changes
    1136c379718 libctf: symbol type linking support
    3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
    83d59285d54 objdump, readelf: Report errors from CTF archive iteration
    ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
    139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
    0d01fbe64f6 Remove libctf/mkerrors.sed
    5e9b84f7a2e binutils, ld: dequote libctf error messages
    926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
    555adca2e3b libctf: compilation failure on MinGW due to missing errno values
    50500ecfefd libctf: compilation failure on MinGW due to missing errno values
    8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
    734c894234e libctf: fix isspace casts
    4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
    62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
    fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
    7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
    b1b33524ad3 ld: new CTF testsuite
    0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
    5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
    f320bba50ff ld: Reformat CTF errors into warnings.
    3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
    662df3c3f14 libctf, link: tie in the deduplicating linker
    e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
    0f0c11f7fc9 libctf, dedup: add deduplicator
    a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
    1f2e8b5b87d libctf: add SHA-1 support for libctf
    6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
    19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
    5f54462c6ab libctf, link: redo cu-mapping handling
    e3f17159e26 libctf, link: fix ctf_link_write fd leak
    8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
    e148b730131 libctf: drop error-prone ctf_strerror
    1fa7a0c24e7 libctf: sort out potential refcount loops
    3166467b00a libctf: rename the type_mapping_key to type_key
    43a61d7d3e6 libctf: check for vasprintf
    ac2ff760303 libctf, archive: fix bad error message
    d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
    70447401740 libctf, dump: fix slice dumping
    8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
    b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
    c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
    8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
    b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
    ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
    67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
    e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
    688d28f6214 libctf, next: introduce new class of easier-to-use iterators
    2399827bfa1 libctf: add ctf_ref
    9850ce4d7bb libctf: add ctf_forwardable_kind
    2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
    77648241384 libctf, hash: introduce the ctf_dynset
    a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
    5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
    809f6eb3321 libctf: add new dynhash functions
    469e75b621f libctf: fix __extension__ with non-GNU C compilers
    9c23dfa5aa4 libctf: add ctf_archive_count
    e0325e2cede libctf: add ctf_member_count
    9b15cbb7891 libctf: add ctf_type_kind_forwarded
    01d9317436c libctf: add ctf_type_name_raw
    5ec7465fec8 libctf: having debugging enabled is unlikely
    601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
    96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
    502e838ed96 libctf, types: support slices of anything terminating in an int
    dd987f00430 libctf, create: empty dicts are dirty to start with
    f47ca311356 libctf, create: fix addition of anonymous struct/union members
    ab769488e75 libctf, create: member names of "" and NULL should be the same
    2484ca436ac libctf, open: drop unnecessary historical wart around forwards
    437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
    9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
    afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
    2361f1c8591 libctf, create: support addition of references to the unimplemented type
    7eea9d3bdb0 libctf: restructure error handling to reduce relocations
    b64751cf0bc include, libctf: typo fixes
    df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.35.2-17.0.1
changelog:
  - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.35.2-24.0.1
changelog:
  - Forward-port Oracle patches from 2.35.2-17.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
changelog:
  - Forward-port Oracle patches from 2.35.2-24.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Kaylin Devchand <kaylin.devchand@oracle.com> - 0.7.3-9.0.2
changelog:
  - Add buffer read helper using read explicitly [Orabug: 35436301]
  - Read DMI entries from /sys/firmware/dmi/tables/DMI [Orabug: 35436301]
  - Add SMBIOS 3.x support [Orabug: 35436301]


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.4.1.el9]
changelog:
  - iwlwifi: limit fw version for AC9560 to avoid fw crash (Íñigo Huguet) [2096128]
  - configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2126153]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.5.1.el9_1]
changelog:
  - redhat: change default dist suffix for RHEL 9.1 (Patrick Talbert)
  - netfilter: nf_tables: clean up hook list when offload flags check fails (Florian Westphal) [2121393]
  - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (Florian Westphal) [2121393]
  - netfilter: nf_conntrack_irc: Fix forged IP logic (Florian Westphal) [2121393]
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message (Florian Westphal) [2121393]
  - netfilter: br_netfilter: Drop dst references before setting. (Florian Westphal) [2121393]
  - netfilter: flowtable: fix stuck flows on cleanup due to pending work (Florian Westphal) [2121393]
  - netfilter: flowtable: add function to invoke garbage collection immediately (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow binding to already bound chain (Florian Westphal) [2121393]
  - netfilter: nft_tunnel: restrict it to netdev family (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow updates of implicit chain (Florian Westphal) [2121393]
  - netfilter: nft_tproxy: restrict to prerouting hook (Florian Westphal) [2121393]
  - netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal) [2121393]
  - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END (Florian Westphal) [2121393]
  - netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags (Florian Westphal) [2121393]
  - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Florian Westphal) [2121393]
  - netfilter: nf_tables: possible module reference underflow in error path (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag (Florian Westphal) [2121393]
  - netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access (Florian Westphal) [2121393]
  - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal) [2121393]
  - netfilter: nf_tables: disallow jump to implicit chain from set element (Florian Westphal) [2121393]
  - netfilter: nfnetlink: re-enable conntrack expectation events (Florian Westphal) [2121393]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.6.1.el9_1]
changelog:
  - kabi: add symbol yield to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol x86_spec_ctrl_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vprintk to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vmalloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vm_zone_stat to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vm_event_states to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_nmi_handler to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_netdevice_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol try_wait_for_completion to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol this_cpu_off to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tasklet_unlock_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol system_freezing_cnt to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strlcpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol sme_me_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_strtoull to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol set_freezable to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol set_current_groups to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol security_sb_eat_lsm_opts to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol security_free_mnt_opts to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol scsi_command_size_tbl to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rtnl_is_locked to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol revert_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol register_netdevice_notifier to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol recalc_sigpending to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rcu_read_unlock_strict to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol radix_tree_delete to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol put_unused_fd to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol printk to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_to_wait_exclusive to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol prepare_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_valid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_to_xattr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_from_xattr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol posix_acl_alloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol percpu_ref_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol percpu_ref_exit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol override_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_create_node to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_create to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mempool_alloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memparse to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol lookup_bdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get_coarse_real_ts64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kmalloc_order_trace to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kernel_fpu_end to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol kernel_fpu_begin_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol jiffies_64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in_group_p to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in_aton to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in6_pton to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol in4_pton to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol groups_alloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol get_zeroed_page to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol get_unused_fd_flags to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol fortify_panic to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol flush_workqueue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol efi to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol dev_base_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol del_timer_sync to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpumask_next to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_number to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol congestion_wait to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol complete_and_exit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol commit_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol clear_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol call_rcu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol bitmap_release_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol bitmap_find_free_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol avenrun to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol atomic_notifier_chain_unregister to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol atomic_notifier_chain_register to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol async_synchronize_full_domain to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol async_synchronize_full to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol abort_creds to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _totalram_pages to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_unlock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_write_lock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_trylock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_unlock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _raw_read_lock_bh to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __vmalloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __register_nmi_handler to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __put_cred to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __preempt_count to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __list_del_entry_valid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __list_add_valid to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __kmalloc to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __get_free_pages to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __cond_resched to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __alloc_percpu to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [2120286]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [2120286]
  - kabi: re-enable build-time kabi-checks (Čestmír Kalina) [2120321]
  - sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet) [2129287]
  - sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet) [2129287]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.7.1.el9_1]
changelog:
  - i2c: ismt: prevent memory corruption in ismt_access() (David Arcari) [2127532 2125582] {CVE-2022-3077}
  - x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134588 2131667]
  - iavf: Fix reset error handling (Petr Oros) [2127884 2119712]
  - iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (Petr Oros) [2127884 2119712]
  - iavf: Fix missing state logs (Petr Oros) [2127884 2119712]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.8.1.el9_1]
changelog:
  - redhat: fix the branch we pull from the documentation tree (Herton R. Krzesinski)
  - nvme-tcp: handle number of queue changes (John Meneghini) [2131359 2112025]
  - nvmet: expose max queues to configfs (John Meneghini) [2131359 2112025]
  - nvme-fabrics: parse nvme connect Linux error codes (John Meneghini) [2131359 2112025]
  - vfio/type1: Unpin zero pages (Alex Williamson) [2128514 2121855]
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Oleg Nesterov) [2127881 2121271] {CVE-2022-30594}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.9.1.el9_1]
changelog:
  - CI: Remove deprecated variable (Veronika Kabatova)
  - drm: fix duplicated code in drm_connector_register (Karol Herbst) [2134619 2132575]
  - drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 (Jocelyn Falempe) [2140153 1960467]
  - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139213 2136223]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.10.1.el9_1]
changelog:
  - ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2132070 2131953]
  - ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2132070 2131953]
  - ice: handle E822 generic device ID in PLDM header (Petr Oros) [2132070 2131953]
  - ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2132070 2131953]
  - ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2132070 2131953]
  - ice: Fix switchdev rules book keeping (Petr Oros) [2132070 2131953]
  - ice: fix access-beyond-end in the switch code (Petr Oros) [2132070 2131953]
  - eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2132070 2131953]
  - ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2132070 2131953]
  - Revert "ice: Hide bus-info in ethtool for PRs in switchdev mode" (Petr Oros) [2132070 2131953]
  - ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2132070 2131953]
  - ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2132070 2131953]
  - ice: fix wording in comment for ice_reset_vf (Petr Oros) [2132070 2131953]
  - ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2132070 2131953]
  - ice: always check VF VSI pointer values (Petr Oros) [2132070 2131953]
  - ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2132070 2131953]
  - ice: get switch id on switchdev devices (Petr Oros) [2132070 2131953]
  - ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2132070 2131953]
  - ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2132070 2131953]
  - ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2132070 2131953]
  - ice, xsk: Avoid refilling single Rx descriptors (Petr Oros) [2132070 2131953]
  - ice, xsk: Diversify return values from xsk_wakeup call paths (Petr Oros) [2132070 2131953]
  - ice, xsk: Terminate Rx side of NAPI when XSK Rx queue gets full (Petr Oros) [2132070 2131953]
  - ice, xsk: Decorate ICE_XDP_REDIR with likely() (Petr Oros) [2132070 2131953]
  - ice: Add mpls+tso support (Petr Oros) [2132070 2131953]
  - ice: switch: convert packet template match code to rodata (Petr Oros) [2132070 2131953]
  - ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2132070 2131953]
  - ice: switch: use a struct to pass packet template params (Petr Oros) [2132070 2131953]
  - ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2132070 2131953]
  - ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2132070 2131953]
  - ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2132070 2131953]
  - Documentation/admin-guide: Document nomodeset kernel parameter (Karol Herbst) [2145217 2143841]
  - drm: Move nomodeset kernel parameter to the DRM subsystem (Karol Herbst) [2145217 2143841]
  - selftests/bpf: Limit unroll_count for pyperf600 test (Frantisek Hrbata) [2144902 2139836]
  - nvme-fc: fix the fc_appid_store return value (Ewan D. Milne) [2136914 2113035]
  - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Wei Huang) [2142168 2130652]
  - CI: Drop c9s CI parts (Veronika Kabatova)
  - CI: Use GA builder container (Veronika Kabatova)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.11.1.el9_1]
changelog:
  - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148152 2148153] {CVE-2022-4139}
  - memcg: prohibit unconditional exceeding the limit of dying tasks (Chris von Recklinghausen) [2143976 2120352]
  - mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2143976 2139747]
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Chris von Recklinghausen) [2143976 2120352]
  - pipe: Fix missing lock in pipe_resize_ring() (Ian Kent) [2141631 2141632] {CVE-2022-2959}
  - net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142722 2142723] {CVE-2022-2964}
  - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142722 2142723] {CVE-2022-2964}
  - NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}
  - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2141769 2141770] {CVE-2022-43945}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.12.1.el9_1]
changelog:
  - x86/fpu: Drop fpregs lock before inheriting FPU permissions (Valentin Schneider) [2154407 2153181]
  - hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2151605 2149277]
  - PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150910 2092794]


author: John Mcwalters <john.mcwalters@oracle.com> [5.14.0-162.12.1.el9_1.OL9]
changelog:
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
  - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.13.1.el9_1]
changelog:
  - scsi: qla2xxx: Fix crash when I/O abort times out (Nilesh Javali) [2152178 2115892]
  - net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155145 2153431]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.14.1.el9_1]
changelog:
  - NFSD: fix use-after-free in __nfs42_ssc_open() (Benjamin Coddington) [2152815 2152816] {CVE-2022-4379}
  - PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155930 2155277]
  - PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155930 2155277]
  - PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155930 2155277]
  - sched/core: Always flush pending blk_plug (Phil Auld) [2153792 2115520]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.15.1.el9_1]
changelog:
  - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158815 2140899]
  - x86/fpu: Do not leak fpstate pointer on fork (Rafael Aquini) [2133083 2120448]
  - Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" (Torez Smith) [2153277 2113003]
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (David Arcari) [2154859 2119067] {CVE-2022-2873}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.16.1.el9_1]
changelog:
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Ricardo Robaina) [2152929 2152931] {CVE-2022-3564}
  - gitlab-ci: use CI templates from production branch (Michael Hofmann)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.17.1.el9_1]
changelog:
  - PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404]
  - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155459 2100404]
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152580 2152581] {CVE-2022-4378}
  - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152580 2152581] {CVE-2022-4378}
  - blk-mq: run queue no matter whether the request is the last request (Ming Lei) [2162535 2118511]
  - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Florian Westphal) [2161724 2161725] {CVE-2023-0179}
  - nvme-tcp: fix regression that causes sporadic requests to time out (Gopal Tiwari) [2161344 2124526]
  - netfs: Fix dodgy maths (Xiubo Li) [2161418 2138981]
  - netfs: Fix missing xas_retry() calls in xarray iteration (Xiubo Li) [2161418 2138981]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.18.1.el9_1]
changelog:
  - powerpc/pseries: Use lparcfg to reconfig VAS windows for DLPAR CPU (Steve Best) [2154305 2133101]
  - redhat/configs: Change the amd-pstate driver from builtin to loadable (David Arcari) [2151274 2143793]
  - powerpc/pseries/mobility: set NMI watchdog factor during an LPM (Steve Best) [2140085 2122830]
  - powerpc/watchdog: introduce a NMI watchdog's factor (Steve Best) [2140085 2122830]
  - watchdog: export lockup_detector_reconfigure (Steve Best) [2140085 2122830]
  - powerpc/mobility: wait for memory transfer to complete (Steve Best) [2140085 2122830]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.19.1.el9_1]
changelog:
  - sched/core: Use kfree_rcu() in do_set_cpus_allowed() (Waiman Long) [2160614 2143847]
  - sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (Waiman Long) [2160614 2143847]
  - sched: Always clear user_cpus_ptr in do_set_cpus_allowed() (Waiman Long) [2143766 2107354]
  - sched: Enforce user requested affinity (Waiman Long) [2143766 2107354]
  - sched: Always preserve the user requested cpumask (Waiman Long) [2143766 2107354]
  - sched: Introduce affinity_context (Waiman Long) [2143766 2107354]
  - sched: Add __releases annotations to affine_move_task() (Waiman Long) [2143766 2107354]
  - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168382 2122851]
  - x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168382 2122851]
  - x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168382 2122851]
  - x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168382 2122851]
  - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168382 2122851]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.20.1.el9_1]
changelog:
  - cgroup/cpuset: remove unreachable code (Waiman Long) [2161105 1946801]
  - kselftest/cgroup: Add cpuset v2 partition root state test (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Update description of cpuset.cpus.partition in cgroup-v2.rst (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Make partition invalid if cpumask change violates exclusivity rule (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Relocate a code block in validate_change() (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Show invalid partition reason string (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Add a new isolated cpus.partition type (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Relax constraints to partition & cpus changes (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Allow no-task partition to have empty cpuset.cpus.effective (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Miscellaneous cleanups & add helper functions (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long) [2161105 1946801]
  - cpuset: convert 'allowed' in __cpuset_node_allowed() to be boolean (Waiman Long) [2161105 1946801]
  - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long) [2161105 1946801]
  - cgroup: cleanup comments (Waiman Long) [2161105 1946801]
  - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164655 2150278] {CVE-2022-4269}
  - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164655 2150278] {CVE-2022-4269}
  - scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170227 2150660]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.21.1.el9_1]
changelog:
  - s390/boot: add secure boot trailer (Tobias Huschle) [2151528 2141966]
  - s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166903 2161327]
  - s390/qeth: cache link_info for ethtool (Tobias Huschle) [2166304 2110436]
  - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127880 2121088]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.22.1.el9_1]
changelog:
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163390 2125540] {CVE-2023-0266}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.23.1.el9_1]
changelog:
  - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165344 2165345] {CVE-2023-0386}
  - intel_idle: make SPR C1 and C1E be independent (David Arcari) [2168361 2125352]
  - intel_idle: Add a new flag to initialize the AMX state (David Arcari) [2168361 2117766]
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (David Arcari) [2168361 2117766]
  - x86/insn: Add AMX instructions to the x86 instruction decoder (Michael Petlan) [2168361 2140492]
  - futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2168836 2161817]
  - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156373 2156374] {CVE-2022-4744}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-160.el9]
changelog:
  - iavf: Fix VLAN_V2 addition/rejection (Ivan Vecera) [2119701]
  - gve: Recording rx queue before sending to napi (Jordan Kimbrough) [2022916]
  - gve: fix the wrong AdminQ buffer queue index check (Jordan Kimbrough) [2022916]
  - gve: Fix GFP flags when allocing pages (Jordan Kimbrough) [2022916]
  - gve: Add tx|rx-coalesce-usec for DQO (Jordan Kimbrough) [2022916]
  - gve: Add consumed counts to ethtool stats (Jordan Kimbrough) [2022916]
  - gve: Implement suspend/resume/shutdown (Jordan Kimbrough) [2022916]
  - gve: Add optional metadata descriptor type GVE_TXD_MTD (Jordan Kimbrough) [2022916]
  - gve: remove memory barrier around seqno (Jordan Kimbrough) [2022916]
  - gve: Update gve_free_queue_page_list signature (Jordan Kimbrough) [2022916]
  - gve: Move the irq db indexes out of the ntfy block struct (Jordan Kimbrough) [2022916]
  - gve: Correct order of processing device options (Jordan Kimbrough) [2022916]
  - gve: fix for null pointer dereference. (Jordan Kimbrough) [2022916]
  - gve: fix unmatched u64_stats_update_end() (Jordan Kimbrough) [2022916]
  - gve: Fix off by one in gve_tx_timeout() (Jordan Kimbrough) [2022916]
  - gve: Add a jumbo-frame device option. (Jordan Kimbrough) [2022916]
  - gve: Implement packet continuation for RX. (Jordan Kimbrough) [2022916]
  - gve: Add RX context. (Jordan Kimbrough) [2022916]
  - gve: Track RX buffer allocation failures (Jordan Kimbrough) [2022916]
  - gve: Allow pageflips on larger pages (Jordan Kimbrough) [2022916]
  - gve: Add netif_set_xps_queue call (Jordan Kimbrough) [2022916]
  - gve: Recover from queue stall due to missed IRQ (Jordan Kimbrough) [2022916]
  - gve: Do lazy cleanup in TX path (Jordan Kimbrough) [2022916]
  - gve: Add rx buffer pagecnt bias (Jordan Kimbrough) [2022916]
  - gve: Switch to use napi_complete_done (Jordan Kimbrough) [2022916]
  - gve: report 64bit tx_bytes counter from gve_handle_report_stats() (Jordan Kimbrough) [2022916]
  - gve: fix gve_get_stats() (Jordan Kimbrough) [2022916]
  - gve: Properly handle errors in gve_assign_qpl (Jordan Kimbrough) [2022916]
  - gve: Avoid freeing NULL pointer (Jordan Kimbrough) [2022916]
  - gve: Correct available tx qpl check (Jordan Kimbrough) [2022916]
  - gve: Use kvcalloc() instead of kvzalloc() (Jordan Kimbrough) [2022916]
  - gve: DQO: avoid unused variable warnings (Jordan Kimbrough) [2022916]
  - gve: fix the wrong AdminQ buffer overflow check (Jordan Kimbrough) [2022916]
  - ath9k: htc: clean up statistics macros (Jose Ignacio Tornos Martinez) [2084600] {CVE-2022-1679}
  - ath9k: hif_usb: simplify if-if to if-else (Jose Ignacio Tornos Martinez) [2084600] {CVE-2022-1679}
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Jose Ignacio Tornos Martinez) [2084600] {CVE-2022-1679}
  - net: qcom/emac: Fix improper merge resolution in device_get_mac_address (Patrick Talbert) [2108539]
  - x86/speculation: Add LFENCE to RSB fill sequence (Waiman Long) [2115086] {CVE-2022-26373}
  - x86/speculation: Add RSB VM Exit protections (Waiman Long) [2115086] {CVE-2022-26373}
  - tools headers cpufeatures: Sync with the kernel sources (Waiman Long) [2115086]
  - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (Waiman Long) [2115086]
  - lkdtm: Disable return thunks in rodata.c (Waiman Long) [2115086]
  - x86/amd: Use IBPB for firmware calls (Waiman Long) [2115086]
  - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts (Waiman Long) [2115086]
  - x86/alternative: Report missing return thunk details (Waiman Long) [2115086]
  - nvme-fc: restart admin queue if the caller needs to restart queue (Ewan D. Milne) [2104461]
  - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (Rahul Lakkireddy) [2109526]
  - scsi: csiostor: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Rahul Lakkireddy) [2109526]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-161.el9]
changelog:
  - x86/ftrace: Use alternative RET encoding (Joe Lawrence) [2121368]
  - x86/ibt,ftrace: Make function-graph play nice (Joe Lawrence) [2121368]
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() (Joe Lawrence) [2121368]
  - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR (Joe Lawrence) [2121368]
  - redhat: remove GL_DISTGIT_USER, RHDISTGIT and unify dist-git cloning (Frantisek Hrbata)
  - random: allow reseeding DRBG with getrandom (Daiki Ueno) [2114854]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.el9]
changelog:
  - Revert "ixgbevf: Mailbox improvements" (Ken Cox) [2120548]
  - Revert "ixgbevf: Add support for new mailbox communication between PF and VF" (Ken Cox) [2120548]
  - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Wander Lairson Costa) [2116968] {CVE-2022-2585}
  - fix race between exit_itimers() and /proc/pid/timers (Wander Lairson Costa) [2116968] {CVE-2022-2585}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.1.1.el9]
changelog:
  - drm/amdgpu: Only disable prefer_shadow on hawaii (Lyude Paul) [2120670]
  - i40e: Fix kernel crash during module removal (Ivan Vecera) [2070375]
  - Revert "net: macsec: update SCI upon MAC address change." (Sabrina Dubroca) [2118139]
  - redhat: enable zstream release numbering for rhel 9.1 (Patrick Talbert)
  - redhat: add missing CVE reference to latest changelog entries (Patrick Talbert)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.2.1.el9]
changelog:
  - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (Ken Cox) [2109871]
  - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (Vitaly Kuznetsov) [2030922]
  - drm/nouveau/kms/nv140-: Disable interlacing (Lyude Paul) [2122068]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-162.3.1.el9]
changelog:
  - scsi: restore setting of scmd->scsi_done() in EH and reset ioctl paths (Ewan D. Milne) [2120469]
  - x86/boot: Don't propagate uninitialized boot_params->cc_blob_address (Terry Bowman) [2124644]
  - ice: Allow operation with reduced device MSI-X (Petr Oros) [2107719]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.9.1.el9_0]
changelog:
  - NFS: Don't loop forever in nfs_do_recoalesce() (Steve Dickson) [2069274]
  - perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Michael Petlan) [2069686]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.10.1.el9_0]
changelog:
  - CI: Remove deprecated option (Veronika Kabatova)
  - scsi: iscsi: Fix nop handling during conn recovery (Chris Leech) [2069973]
  - scsi: iscsi: Merge suspend fields (Chris Leech) [2069973]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2069973]
  - scsi: iscsi: Move iscsi_ep_disconnect (Chris Leech) [2069973]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.11.1.el9_0]
changelog:
  - myri10ge: mark as unmaintained (Michal Schmidt) [2054208]
  - benet: mark device 0xe220 (Lancer) as unmaintained (Michal Schmidt) [2054208]
  - bnx2: mark as unmaintained (Michal Schmidt) [2054208]
  - ice: Fix race condition during interface enslave (Petr Oros) [1988953]
  - ice: Fix error with handling of bonding MTU (Petr Oros) [1988953]
  - ice: Avoid RTNL lock when re-creating auxiliary device (Petr Oros) [1988953]
  - ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler (Petr Oros) [1988953]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.12.1.el9_0]
changelog:
  - redhat/configs: Enable WDT devices used by qemu VMs (Prarit Bhargava) [2074160]
  - redhat/configs: disable CONFIG_CAN_SOFTING (Brian Masney) [2073521]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.13.1.el9_0]
changelog:
  - redhat: disable uncommon media device infrastructure (Jarod Wilson) [2074598]
  - netfilter: nf_tables: unregister flowtable hooks on netns exit (Florian Westphal) [2056869]
  - netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056869] {CVE-2022-25636}
  - netfilter: nf_tables: validate registers coming from userspace. (Phil Sutter) [2065350] {CVE-2022-1015}
  - scsi: qedi: Fix failed disconnect handling (Chris Leech) [2071524]
  - scsi: iscsi: Fix unbound endpoint error handling (Chris Leech) [2071524]
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Chris Leech) [2071524]
  - scsi: iscsi: Fix endpoint reuse regression (Chris Leech) [2071524]
  - scsi: iscsi: Release endpoint ID when its freed (Chris Leech) [2071524]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2071524]
  - Revert "scsi: iscsi: Fix offload conn cleanup when iscsid restarts" (Chris Leech) [2071524]
  - scsi: iscsi: Speed up session unblocking and removal (Chris Leech) [2071524]
  - scsi: iscsi: Fix recovery and unblocking race (Chris Leech) [2071524]
  - scsi: qedi: Fix cmd_cleanup_cmpl counter mismatch issue (Chris Leech) [2071524]
  - scsi: iscsi: Unblock session then wake up error handler (Chris Leech) [2071524]
  - scsi: iscsi: Fix set_param() handling (Chris Leech) [2071524]
  - scsi: iscsi: Fix iscsi_task use after free (Chris Leech) [2071524]
  - scsi: iscsi: Adjust iface sysfs attr detection (Chris Leech) [2071524]
  - scsi: qedi: Add support for fastpath doorbell recovery (Chris Leech) [2071524]


author: Natalya Naumova <natalya.naumova@oracle.com> [5.14.0-70.13.1.el9_0.OL9]
changelog:
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 < 15.3-1.0.4.el9


author: Mridula Shastry <mridula.c.shastry@oracle.com> [5.14.0-70.13.1.0.3.el9_0.OL9]
changelog:
  - Remove nmap references from kernel [Orabug: 34313944]
  - Revert mei: me: disable driver on the ign firmware [Orabug: 34315755]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.14.1.el9_0]
changelog:
  - PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2074830 2068432]
  - Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2074830 2068432]
  - redhat: rpminspect: disable 'patches' check for known empty patch files (Herton R. Krzesinski)
  - redhat/configs: make SHA512_arch algos and CRYPTO_USER built-ins (Vladis Dronov) [2072643 2070624]
  - CI: Drop baseline runs (Veronika Kabatova)


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.15.1.el9_0]
changelog:
  - CI: Use zstream builder image (Veronika Kabatova)
  - tcp: drop the hash_32() part from the index calculation (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - tcp: increase source port perturb table to 2^16 (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - tcp: dynamically allocate the perturb table used by source ports (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - tcp: add small random increments to the source port (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - tcp: resalt the secret every 10 seconds (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - tcp: use different parts of the port_offset for index and offset (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - secure_seq: use the 64 bits of the siphash for port offset calculation (Guillaume Nault) [2087128 2064868] {CVE-2022-1012}
  - Revert "netfilter: conntrack: tag conntracks picked up in local out hook" (Florian Westphal) [2085480 2061850]
  - Revert "netfilter: nat: force port remap to prevent shadowing well-known ports" (Florian Westphal) [2085480 2061850]
  - redhat/koji/Makefile: Decouple koji Makefile from Makefile.common (Andrea Claudi)
  - redhat: fix make {distg-brew,distg-koji} (Andrea Claudi)
  - esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) [2082950 2082951] {CVE-2022-27666}
  - esp: Fix possible buffer overflow in ESP transformation (Sabrina Dubroca) [2082950 2082951] {CVE-2022-27666}
  - sctp: use the correct skb for security_sctp_assoc_request (Ondrej Mosnacek) [2084044 2078856]
  - security: implement sctp_assoc_established hook in selinux (Ondrej Mosnacek) [2084044 2078856]
  - security: add sctp_assoc_established hook (Ondrej Mosnacek) [2084044 2078856]
  - security: call security_sctp_assoc_request in sctp_sf_do_5_1D_ce (Ondrej Mosnacek) [2084044 2078856]
  - security: pass asoc to sctp_assoc_request and sctp_sk_clone (Ondrej Mosnacek) [2084044 2078856]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.16.1.el9_0]
changelog:
  - dm integrity: fix memory corruption when tag_size is less than digest size (Benjamin Marzinski) [2082187 2081778]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.17.1.el9_0]
changelog:
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2092994 2092995] {CVE-2022-1966}
  - thunderx nic: mark device as unmaintained (Íñigo Huguet) [2092638 2060285]
  - pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init (Steve Best) [2092255 2067770]
  - perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087963 2087964] {CVE-2022-1729}
  - spec: Fix separate tools build (Jiri Olsa) [2090852 2054579]
  - mm: lru_cache_disable: replace work queue synchronization with synchronize_rcu (Marcelo Tosatti) [2086963 2033500]


author: Natalya Naumova <natalya.naumova@oracle.com> [5.14.0-70.17.1.el9_0.OL9]
changelog:
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 < 15.3-1.0.4.el9
  - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.18.1.el9_0]
changelog:
  - NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington) [2101858 2086367]
  - NFSv4 only print the label when its queried (Benjamin Coddington) [2101854 2057327]
  - crypto: fips - make proc files report fips module name and version (Simo Sorce) [2093384 2080499]
  - net: sched: fix use-after-free in tc_new_tfilter() (Ivan Vecera) [2071707 2090410] {CVE-2022-1055}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.19.1.el9_0]
changelog:
  - KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2100903 2074832]
  - powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092248 2055566]
  - powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092248 2055566]
  - powerpc/64s/hash: Make hash faults work in NMI context (Desnes A. Nunes do Rosario) [2092253 2062762]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.20.1.el9_0]
changelog:
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Ming Lei) [2106024 2066297] {CVE-2022-0494}
  - ahci: Add a generic 'controller2' RAID id (Tomas Henzl) [2099740 2078880]
  - ahci: remove duplicated PCI device IDs (Tomas Henzl) [2099740 2042790]
  - gfs2: Stop using glock holder auto-demotion for now (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: buffered write prefaulting (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Align read and write chunks to the page cache (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Pull return value test out of should_fault_in_pages (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Clean up use of fault_in_iov_iter_{read,write}able (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Variable rename (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) [2097306 2082193]
  - iomap: iomap_write_end cleanup (Andreas Gruenbacher) [2097306 2082193]
  - iomap: iomap_write_failed fix (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Don't re-check for write past EOF unnecessarily (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) [2097306 2082193]
  - fs/iomap: Fix buffered write page prefaulting (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Remove dead code in gfs2_file_read_iter (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Minor retry logic cleanup (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Fix should_fault_in_pages() logic (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Make use of list_is_first (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2097306 2082193]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.21.1.el9_0]
changelog:
  - ibmvnic: fix race between xmit and reset (Gustavo Walbon) [2103085 2061556]
  - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Chris Leech) [2098251 2095440]
  - scsi: core: sysfs: Fix hang when device state is set via sysfs (Chris Leech) [2098251 2095440]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.22.1.el9_0]
changelog:
  - PCI: vmd: Revert 2565e5b69c44 ("PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled by IOMMU.") (Myron Stowe) [2109974 2084146]
  - PCI: vmd: Assign VMD IRQ domain before enumeration (Myron Stowe) [2109974 2084146]
  - rhel config: Set DMAR_UNITS_SUPPORTED (Jerry Snitselaar) [2105326 2094984]
  - iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2105326 2094984]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.23.1.el9_0]
changelog:
  - block: limit request dispatch loop duration (Ming Lei) [2111395 2066297]
  - block: ensure plug merging checks the correct queue at least once (Ming Lei) [2111395 2066297]
  - net/mlx5e: Don't block routes with nexthop objects in SW (Mohammad Kabat) [2092535 2061799]
  - net/mlx5e: Fix wrong usage of fib_info_nh when routes with nexthop objects are used (Mohammad Kabat) [2092535 2049450]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.24.1.el9_0]
changelog:
  - nvme: fix RCU hole that allowed for endless looping in multipath round robin (Gopal Tiwari) [2117756 2108624]
  - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (Gopal Tiwari) [2117756 2066146]
  - nvme: only call synchronize_srcu when clearing current path (Gopal Tiwari) [2117756 2066146]
  - nvme-multipath: revalidate paths during rescan (Gopal Tiwari) [2117756 2066146]
  - block: fix surprise removal for drivers calling blk_set_queue_dying (Gopal Tiwari) [2117755 2066146]
  - nvme-tcp: fix bogus request completion when failing to send AER (Gopal Tiwari) [2117755 2066146]
  - nvme: fix use after free when disconnecting a reconnecting ctrl (Gopal Tiwari) [2117755 2066146]
  - kvm: x86: Add CPUID support for Intel AMX (David Arcari) [2108203 1924149]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.25.1.el9_0]
changelog:
  - powerpc/smp: Update cpu_core_map on all PowerPc systems (Diego Domingos) [2121719 2063682]
  - iavf: Fix deadlock in initialization (Ivan Vecera) [2119477 2037976]
  - iavf: Fix reset error handling (Ivan Vecera) [2119477 2037976]
  - iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (Ivan Vecera) [2119477 2037976]
  - iavf: Fix adminq error handling (Ivan Vecera) [2119477 2037976]
  - iavf: Fix missing state logs (Ivan Vecera) [2119477 2037976]
  - iavf: Fix VLAN_V2 addition/rejection (Ivan Vecera) [2119477 2037976]
  - ethernet: use eth_hw_addr_set() instead of ether_addr_copy() (Ivan Vecera) [2119477 2037976]
  - iavf: Fix issue with MAC address of VF shown as zero (Ivan Vecera) [2119477 2037976]
  - Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Ivan Vecera) [2119477 2037976]
  - iavf: Fix hang during reboot/shutdown (Ivan Vecera) [2119477 2037976]
  - iavf: Fix double free in iavf_reset_task (Ivan Vecera) [2119477 2037976]
  - iavf: Fix adopting new combined setting (Ivan Vecera) [2119477 2037976]
  - iavf: Fix handling of vlan strip virtual channel messages (Ivan Vecera) [2119477 2037976]
  - iavf: Fix __IAVF_RESETTING state usage (Ivan Vecera) [2119477 2037976]
  - iavf: Fix missing check for running netdev (Ivan Vecera) [2119477 2037976]
  - iavf: Fix deadlock in iavf_reset_task (Ivan Vecera) [2119477 2037976]
  - iavf: Fix race in init state (Ivan Vecera) [2119477 2037976]
  - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (Ivan Vecera) [2119477 2037976]
  - iavf: Fix init state closure on remove (Ivan Vecera) [2119477 2037976]
  - iavf: Add waiting so the port is initialized in remove (Ivan Vecera) [2119477 2037976]
  - iavf: Rework mutexes for better synchronisation (Ivan Vecera) [2119477 2037976]
  - iavf: Remove non-inclusive language (Ivan Vecera) [2119477 2037976]
  - iavf: Fix incorrect use of assigning iavf_status to int (Ivan Vecera) [2119477 2037976]
  - iavf: stop leaking iavf_status as "errno" values (Ivan Vecera) [2119477 2037976]
  - iavf: remove redundant ret variable (Ivan Vecera) [2119477 2037976]
  - iavf: Add usage of new virtchnl format to set default MAC (Ivan Vecera) [2119477 2037976]
  - iavf: refactor processing of VLAN V2 capability message (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for 50G/100G in AIM algorithm (Ivan Vecera) [2119477 2037976]
  - iavf: Remove useless DMA-32 fallback configuration (Ivan Vecera) [2119477 2037976]
  - iavf: remove an unneeded variable (Ivan Vecera) [2119477 2037976]
  - iavf: Fix limit of total number of queues to active queues of VF (Ivan Vecera) [2119477 2037976]
  - iavf: switch to napi_build_skb() (Ivan Vecera) [2119477 2037976]
  - iavf: Restrict maximum VLAN filters for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 offload enable/disable (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 hotpath (Ivan Vecera) [2119477 2037976]
  - iavf: Add support VIRTCHNL_VF_OFFLOAD_VLAN_V2 during netdev config (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 negotiation (Ivan Vecera) [2119477 2037976]
  - virtchnl: Add support for new VLAN capabilities (Ivan Vecera) [2119477 2037976]
  - virtchnl: Use the BIT() macro for capability/offload flags (Ivan Vecera) [2119477 2037976]
  - virtchnl: Remove unused VIRTCHNL_VF_OFFLOAD_RSVD define (Ivan Vecera) [2119477 2037976]
  - iavf: do not override the adapter state in the watchdog task (again) (Ivan Vecera) [2119477 2037976]
  - iavf: missing unlocks in iavf_watchdog_task() (Ivan Vecera) [2119477 2037976]
  - iavf: Fix reporting when setting descriptor count (Ivan Vecera) [2119477 2037976]
  - iavf: restore MSI state on reset (Ivan Vecera) [2119477 2037976]
  - iavf: Fix displaying queue statistics shown by ethtool (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor string format to avoid static analysis warnings (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor text of informational message (Ivan Vecera) [2119477 2037976]
  - iavf: Fix static code analysis warning (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor iavf_mac_filter struct memory usage (Ivan Vecera) [2119477 2037976]
  - iavf: Enable setting RSS hash key (Ivan Vecera) [2119477 2037976]
  - iavf: Add trace while removing device (Ivan Vecera) [2119477 2037976]
  - iavf: return errno code instead of status code (Ivan Vecera) [2119477 2037976]
  - iavf: Log info when VF is entering and leaving Allmulti mode (Ivan Vecera) [2119477 2037976]
  - iavf: Add change MTU message (Ivan Vecera) [2119477 2037976]
  - iavf: Fix VLAN feature flags after VFR (Ivan Vecera) [2119477 2037976]
  - iavf: Fix refreshing iavf adapter stats on ethtool request (Ivan Vecera) [2119477 2037976]
  - iavf: Fix deadlock occurrence during resetting VF interface (Ivan Vecera) [2119477 2037976]
  - iavf: Prevent changing static ITR values if adaptive moderation is on (Ivan Vecera) [2119477 2037976]
  - iavf: Restore VLAN filters after link down (Ivan Vecera) [2119477 2037976]
  - iavf: Fix for setting queues to 0 (Ivan Vecera) [2119477 2037976]
  - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (Ivan Vecera) [2119477 2037976]
  - iavf: validate pointers (Ivan Vecera) [2119477 2037976]
  - iavf: prevent accidental free of filter structure (Ivan Vecera) [2119477 2037976]
  - iavf: Fix failure to exit out from last all-multicast mode (Ivan Vecera) [2119477 2037976]
  - iavf: don't clear a lock we don't hold (Ivan Vecera) [2119477 2037976]
  - iavf: free q_vectors before queues in iavf_disable_vf (Ivan Vecera) [2119477 2037976]
  - iavf: check for null in iavf_fix_features (Ivan Vecera) [2119477 2037976]
  - iavf: Fix return of set the new channel count (Ivan Vecera) [2119477 2037976]
  - iavf: Fix kernel BUG in free_msi_irqs (Ivan Vecera) [2119477 2037976]
  - iavf: Add helper function to go from pci_dev to adapter (Ivan Vecera) [2119477 2037976]
  - iavf: Combine init and watchdog state machines (Ivan Vecera) [2119477 2037976]
  - iavf: Add __IAVF_INIT_FAILED state (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor iavf state machine tracking (Ivan Vecera) [2119477 2037976]
  - iavf: fix double unlock of crit_lock (Ivan Vecera) [2119477 2037976]
  - iavf: use mutexes for locking of critical sections (Ivan Vecera) [2119477 2037976]
  - iavf: fix locking of critical sections (Ivan Vecera) [2119477 2037976]
  - iavf: do not override the adapter state in the watchdog task (Ivan Vecera) [2119477 2037976]
  - redhat: nvme/tcp mistakenly uses blk_mq_tag_to_rq(nvme_tcp_tagset(queue)) (John Meneghini) [2118698 2112031]
  - x86/platform/uv: Log gap hole end size (Frank Ramsay) [2107732 2074097]
  - x86/platform/uv: Update TSC sync state for UV5 (Frank Ramsay) [2107732 2074097]
  - x86/platform/uv: Update NMI Handler for UV5 (Frank Ramsay) [2107732 2074097]
  - cpufreq: intel_pstate: Add Ice Lake server to out-of-band IDs (Steve Best) [2099417 2072886]
  - [s390] RDMA/mlx5: Fix number of allocated XLT entries (Mete Durlu) [2092270 2088360]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.26.1.el9_0]
changelog:
  - redhat/configs enable CONFIG_ICE_HWTS (Petr Oros) [2108204 2037974]
  - redhat/configs enable CONFIG_ICE_SWITCHDEV (Petr Oros) [2108204 2037974]
  - ice: Fix VF not able to send tagged traffic with no VLAN filters (Petr Oros) [2119290 2116964]
  - ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2119290 2116964]
  - ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2119290 2116964]
  - ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2119290 2116964]
  - ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2119290 2116964]
  - ice: Fix promiscuous mode not turning off (Petr Oros) [2119290 2116964]
  - ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2119290 2116964]
  - ice: do not setup vlan for loopback VSI (Petr Oros) [2119290 2116964]
  - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2119290 2116964]
  - ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2119290 2116964]
  - ice: Fix max VLANs available for VF (Petr Oros) [2119290 2116964]
  - ice: change devlink code to read NVM in blocks (Petr Oros) [2119290 2116964]
  - ice: Fix memory corruption in VF driver (Petr Oros) [2108204 2037974]
  - ice: Fix queue config fail handling (Petr Oros) [2108204 2037974]
  - ice: Sync VLAN filtering features for DVM (Petr Oros) [2108204 2037974]
  - ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2108204 2037974]
  - ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2108204 2037974]
  - ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2108204 2037974]
  - ice: fix crash when writing timestamp on RX rings (Petr Oros) [2108204 2037974]
  - ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2108204 2037974]
  - ice: clear stale Tx queue settings before configuring (Petr Oros) [2108204 2037974]
  - ice: Fix race during aux device (un)plugging (Petr Oros) [2108204 2037974]
  - ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2108204 2037974]
  - ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2108204 2037974]
  - ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2108204 2037974]
  - ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2108204 2037974]
  - ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2108204 2037974]
  - ice: fix crash in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2108204 2037974]
  - ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2108204 2037974]
  - ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2108204 2037974]
  - ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2108204 2037974]
  - ice: synchronize_rcu() when terminating rings (Petr Oros) [2108204 2037974]
  - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2108204 2037974]
  - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2108204 2037974]
  - ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2108204 2037974]
  - ice: Fix MAC address setting (Petr Oros) [2108204 2037974]
  - ice: Clear default forwarding VSI during VSI release (Petr Oros) [2108204 2037974]
  - ice: xsk: Fix indexing in ice_tx_xsk_pool() (Petr Oros) [2108204 2037974]
  - ice: xsk: Stop Rx processing when ntc catches ntu (Petr Oros) [2108204 2037974]
  - ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Petr Oros) [2108204 2037974]
  - ice: fix 'scheduling while atomic' on aux critical err interrupt (Petr Oros) [2108204 2037974]
  - ice: add trace events for tx timestamps (Petr Oros) [2108204 2037974]
  - ice: fix return value check in ice_gnss.c (Petr Oros) [2108204 2037974]
  - ice: destroy flow director filter mutex after releasing VSIs (Petr Oros) [2108204 2037974]
  - ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (Petr Oros) [2108204 2037974]
  - ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2108204 2037974]
  - ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2108204 2037974]
  - ice: cleanup long lines in ice_sriov.c (Petr Oros) [2108204 2037974]
  - ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2108204 2037974]
  - ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2108204 2037974]
  - ice: convert ice_reset_vf to take flags (Petr Oros) [2108204 2037974]
  - ice: convert ice_reset_vf to standard error codes (Petr Oros) [2108204 2037974]
  - ice: make ice_reset_all_vfs void (Petr Oros) [2108204 2037974]
  - ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2108204 2037974]
  - ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2108204 2037974]
  - ice: fix a long line warning in ice_reset_vf (Petr Oros) [2108204 2037974]
  - ice: introduce VF operations structure for reset flows (Petr Oros) [2108204 2037974]
  - ice: fix incorrect dev_dbg print mistaking 'i' for vf->vf_id (Petr Oros) [2108204 2037974]
  - ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2108204 2037974]
  - ice: use ice_is_vf_trusted helper function (Petr Oros) [2108204 2037974]
  - ice: log an error message when eswitch fails to configure (Petr Oros) [2108204 2037974]
  - ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2108204 2037974]
  - ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2108204 2037974]
  - ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2108204 2037974]
  - ice: rename ICE_MAX_VF_COUNT to avoid confusion (Petr Oros) [2108204 2037974]
  - ice: remove unused definitions from ice_sriov.h (Petr Oros) [2108204 2037974]
  - ice: convert vf->vc_ops to a const pointer (Petr Oros) [2108204 2037974]
  - ice: remove circular header dependencies on ice.h (Petr Oros) [2108204 2037974]
  - ice: rename ice_virtchnl_pf.c to ice_sriov.c (Petr Oros) [2108204 2037974]
  - ice: rename ice_sriov.c to ice_vf_mbx.c (Petr Oros) [2108204 2037974]
  - ice: Fix FV offset searching (Petr Oros) [2108204 2037974]
  - ice: Add support for outer dest MAC for ADQ tunnels (Petr Oros) [2108204 2037974]
  - ice: avoid XDP checks in ice_clean_tx_irq() (Petr Oros) [2108204 2037974]
  - ice: change "can't set link" message to dbg level (Petr Oros) [2108204 2037974]
  - ice: Add slow path offload stats on port representor in switchdev (Petr Oros) [2108204 2037974]
  - ice: Add support for inner etype in switchdev (Petr Oros) [2108204 2037974]
  - ice: Fix curr_link_speed advertised speed (Petr Oros) [2108204 2037974]
  - ice: Don't use GFP_KERNEL in atomic context (Petr Oros) [2108204 2037974]
  - ice: stop disabling VFs due to PF error responses (Petr Oros) [2108204 2037974]
  - ice: convert VF storage to hash table with krefs and RCU (Petr Oros) [2108204 2037974]
  - ice: introduce VF accessor functions (Petr Oros) [2108204 2037974]
  - ice: factor VF variables to separate structure (Petr Oros) [2108204 2037974]
  - ice: convert ice_for_each_vf to include VF entry iterator (Petr Oros) [2108204 2037974]
  - ice: use ice_for_each_vf for iteration during removal (Petr Oros) [2108204 2037974]
  - ice: remove checks in ice_vc_send_msg_to_vf (Petr Oros) [2108204 2037974]
  - ice: move VFLR acknowledge during ice_free_vfs (Petr Oros) [2108204 2037974]
  - ice: move clear_malvf call in ice_free_vfs (Petr Oros) [2108204 2037974]
  - ice: pass num_vfs to ice_set_per_vf_res() (Petr Oros) [2108204 2037974]
  - ice: store VF pointer instead of VF ID (Petr Oros) [2108204 2037974]
  - ice: refactor unwind cleanup in eswitch mode (Petr Oros) [2108204 2037974]
  - ice: add TTY for GNSS module for E810T device (Petr Oros) [2108204 2037974]
  - ice: initialize local variable 'tlv' (Petr Oros) [2108204 2037974]
  - ice: check the return of ice_ptp_gettimex64 (Petr Oros) [2108204 2037974]
  - ice: fix concurrent reset and removal of VFs (Petr Oros) [2108204 2037974]
  - ice: fix setting l4 port flag when adding filter (Petr Oros) [2108204 2037974]
  - ice: Match on all profiles in slow-path (Petr Oros) [2108204 2037974]
  - ice: enable parsing IPSEC SPI headers for RSS (Petr Oros) [2108204 2037974]
  - ice: Simplify tracking status of RDMA support (Petr Oros) [2108204 2037974]
  - ice: fix IPIP and SIT TSO offload (Petr Oros) [2108204 2037974]
  - ice: fix an error code in ice_cfg_phy_fec() (Petr Oros) [2108204 2037974]
  - ice: Add ability for PF admin to enable VF VLAN pruning (Petr Oros) [2108204 2037974]
  - ice: Add support for 802.1ad port VLANs VF (Petr Oros) [2108204 2037974]
  - ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Petr Oros) [2108204 2037974]
  - ice: Support configuring the device to Double VLAN Mode (Petr Oros) [2108204 2037974]
  - ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2108204 2037974]
  - ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Petr Oros) [2108204 2037974]
  - ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Petr Oros) [2108204 2037974]
  - ice: Adjust naming for inner VLAN operations (Petr Oros) [2108204 2037974]
  - ice: Use the proto argument for VLAN ops (Petr Oros) [2108204 2037974]
  - ice: Refactor vf->port_vlan_info to use ice_vlan (Petr Oros) [2108204 2037974]
  - ice: Introduce ice_vlan struct (Petr Oros) [2108204 2037974]
  - ice: Add new VSI VLAN ops (Petr Oros) [2108204 2037974]
  - ice: Add helper function for adding VLAN 0 (Petr Oros) [2108204 2037974]
  - ice: Refactor spoofcheck configuration functions (Petr Oros) [2108204 2037974]
  - ice: Remove likely for napi_complete_done (Petr Oros) [2108204 2037974]
  - ice: add support for DSCP QoS for IDC (Petr Oros) [2108204 2037974]
  - ice: respect metadata on XSK Rx to skb (Petr Oros) [2108204 2037974]
  - ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Petr Oros) [2108204 2037974]
  - ice: respect metadata in legacy-rx/ice_construct_skb() (Petr Oros) [2108204 2037974]
  - ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2108204 2037974]
  - ice: Use bitmap_free() to free bitmap (Petr Oros) [2108204 2037974]
  - ice: Optimize a few bitmap operations (Petr Oros) [2108204 2037974]
  - ice: Slightly simply ice_find_free_recp_res_idx (Petr Oros) [2108204 2037974]
  - ice: improve switchdev's slow-path (Petr Oros) [2108204 2037974]
  - ice: replay advanced rules after reset (Petr Oros) [2108204 2037974]
  - net: fixup build after bpf header changes (Petr Oros) [2108204 2037974]
  - net: Don't include filter.h from net/sock.h (Petr Oros) [2108204 2037974]
  - ice: Add flow director support for channel mode (Petr Oros) [2108204 2037974]
  - ice: switch to napi_build_skb() (Petr Oros) [2108204 2037974]
  - ice: xsk: fix cleaned_count setting (Petr Oros) [2108204 2037974]
  - ice: xsk: allow empty Rx descriptors on XSK ZC data path (Petr Oros) [2108204 2037974]
  - ice: xsk: allocate separate memory for XDP SW ring (Petr Oros) [2108204 2037974]
  - ice: xsk: return xsk buffers back to pool when cleaning the ring (Petr Oros) [2108204 2037974]
  - ice: trivial: fix odd indenting (Petr Oros) [2108204 2037974]
  - ice: support crosstimestamping on E822 devices if supported (Petr Oros) [2108204 2037974]
  - ice: exit bypass mode once hardware finishes timestamp calibration (Petr Oros) [2108204 2037974]
  - ice: ensure the hardware Clock Generation Unit is configured (Petr Oros) [2108204 2037974]
  - ice: implement basic E822 PTP support (Petr Oros) [2108204 2037974]
  - ice: convert clk_freq capability into time_ref (Petr Oros) [2108204 2037974]
  - ice: introduce ice_ptp_init_phc function (Petr Oros) [2108204 2037974]
  - ice: use 'int err' instead of 'int status' in ice_ptp_hw.c (Petr Oros) [2108204 2037974]
  - ice: PTP: move setting of tstamp_config (Petr Oros) [2108204 2037974]
  - ice: introduce ice_base_incval function (Petr Oros) [2108204 2037974]
  - ice: Fix E810 PTP reset flow (Petr Oros) [2108204 2037974]
  - ice: Don't put stale timestamps in the skb (Petr Oros) [2108204 2037974]
  - ice: Use div64_u64 instead of div_u64 in adjfine (Petr Oros) [2108204 2037974]
  - ice: use modern kernel API for kick (Petr Oros) [2108204 2037974]
  - ice: tighter control over VSI_DOWN state (Petr Oros) [2108204 2037974]
  - ice: use prefetch methods (Petr Oros) [2108204 2037974]
  - ice: update to newer kernel API (Petr Oros) [2108204 2037974]
  - ice: support immediate firmware activation via devlink reload (Petr Oros) [2108204 2037974]
  - ice: reduce time to read Option ROM CIVD data (Petr Oros) [2108204 2037974]
  - ice: move ice_devlink_flash_update and merge with ice_flash_pldm_image (Petr Oros) [2108204 2037974]
  - ice: move and rename ice_check_for_pending_update (Petr Oros) [2108204 2037974]
  - ice: devlink: add shadow-ram region to snapshot Shadow RAM (Petr Oros) [2108204 2037974]
  - ice: Remove unused ICE_FLOW_SEG_HDRS_L2_MASK (Petr Oros) [2108204 2037974]
  - ice: Remove unnecessary casts (Petr Oros) [2108204 2037974]
  - ice: Propagate error codes (Petr Oros) [2108204 2037974]
  - ice: Remove excess error variables (Petr Oros) [2108204 2037974]
  - ice: Cleanup after ice_status removal (Petr Oros) [2108204 2037974]
  - ice: Remove enum ice_status (Petr Oros) [2108204 2037974]
  - ice: Use int for ice_status (Petr Oros) [2108204 2037974]
  - ice: Remove string printing for ice_status (Petr Oros) [2108204 2037974]
  - ice: Refactor status flow for DDP load (Petr Oros) [2108204 2037974]
  - ice: Refactor promiscuous functions (Petr Oros) [2108204 2037974]
  - ice: refactor PTYPE validating (Petr Oros) [2108204 2037974]
  - ice: Add package PTYPE enable information (Petr Oros) [2108204 2037974]
  - ice: safer stats processing (Petr Oros) [2108204 2037974]
  - ice: fix adding different tunnels (Petr Oros) [2108204 2037974]
  - ice: fix choosing UDP header type (Petr Oros) [2108204 2037974]
  - ice: ignore dropped packets during init (Petr Oros) [2108204 2037974]
  - ice: rearm other interrupt cause register after enabling VFs (Petr Oros) [2108204 2037974]
  - ice: fix FDIR init missing when reset VF (Petr Oros) [2108204 2037974]
  - net/ice: Remove unused enum (Petr Oros) [2108204 2037974]
  - net/ice: Fix boolean assignment (Petr Oros) [2108204 2037974]
  - ice: avoid bpf_prog refcount underflow (Petr Oros) [2108204 2037974]
  - ice: fix vsi->txq_map sizing (Petr Oros) [2108204 2037974]
  - net/ice: Add support for enable_iwarp and enable_roce devlink param (Petr Oros) [2108204 2037974]
  - ice: Hide bus-info in ethtool for PRs in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: Clear synchronized addrs when adding VFs in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: fix error return code in ice_get_recp_frm_fw() (Petr Oros) [2108204 2037974]
  - ice: Fix clang -Wimplicit-fallthrough in ice_pull_qvec_from_rc() (Petr Oros) [2108204 2037974]
  - ice: Add support to print error on PHY FW load failure (Petr Oros) [2108204 2037974]
  - ice: Add support for changing MTU on PR in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: send correct vc status in switchdev (Petr Oros) [2108204 2037974]
  - ice: support for GRE in eswitch (Petr Oros) [2108204 2037974]
  - ice: low level support for tunnels (Petr Oros) [2108204 2037974]
  - ice: VXLAN and Geneve TC support (Petr Oros) [2108204 2037974]
  - ice: support for indirect notification (Petr Oros) [2108204 2037974]
  - ice: Add tc-flower filter support for channel (Petr Oros) [2108204 2037974]
  - ice: enable ndo_setup_tc support for mqprio_qdisc (Petr Oros) [2108204 2037974]
  - ice: Add infrastructure for mqprio support via ndo_setup_tc (Petr Oros) [2108204 2037974]
  - ice: fix an error code in ice_ena_vfs() (Petr Oros) [2108204 2037974]
  - ice: Refactor PR ethtool ops (Petr Oros) [2108204 2037974]
  - ice: Manage act flags for switchdev offloads (Petr Oros) [2108204 2037974]
  - ice: Forbid trusted VFs in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: introduce XDP_TX fallback path (Petr Oros) [2108204 2037974]
  - ice: optimize XDP_TX workloads (Petr Oros) [2108204 2037974]
  - ice: propagate xdp_ring onto rx_ring (Petr Oros) [2108204 2037974]
  - ice: do not create xdp_frame on XDP_TX (Petr Oros) [2108204 2037974]
  - ice: unify xdp_rings accesses (Petr Oros) [2108204 2037974]
  - ice: ndo_setup_tc implementation for PR (Petr Oros) [2108204 2037974]
  - ice: ndo_setup_tc implementation for PF (Petr Oros) [2108204 2037974]
  - ice: Allow changing lan_en and lb_en on all kinds of filters (Petr Oros) [2108204 2037974]
  - ice: cleanup rules info (Petr Oros) [2108204 2037974]
  - ice: allow deleting advanced rules (Petr Oros) [2108204 2037974]
  - ice: allow adding advanced rules (Petr Oros) [2108204 2037974]
  - ice: create advanced switch recipe (Petr Oros) [2108204 2037974]
  - ice: manage profiles and field vectors (Petr Oros) [2108204 2037974]
  - ice: implement low level recipes functions (Petr Oros) [2108204 2037974]
  - ice: add port representor ethtool ops and stats (Petr Oros) [2108204 2037974]
  - ice: switchdev slow path (Petr Oros) [2108204 2037974]
  - ice: rebuild switchdev when resetting all VFs (Petr Oros) [2108204 2037974]
  - ice: enable/disable switchdev when managing VFs (Petr Oros) [2108204 2037974]
  - ice: introduce new type of VSI for switchdev (Petr Oros) [2108204 2037974]
  - ice: set and release switchdev environment (Petr Oros) [2108204 2037974]
  - ice: allow changing lan_en and lb_en on dflt rules (Petr Oros) [2108204 2037974]
  - ice: manage VSI antispoof and destination override (Petr Oros) [2108204 2037974]
  - ice: allow process VF opcodes in different ways (Petr Oros) [2108204 2037974]
  - ice: introduce VF port representor (Petr Oros) [2108204 2037974]
  - ice: Move devlink port to PF/VF struct (Petr Oros) [2108204 2037974]
  - ice: support basic E-Switch mode control (Petr Oros) [2108204 2037974]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (Petr Oros) [2108204 2037974]
  - ethernet: use eth_hw_addr_set() instead of ether_addr_copy() (Petr Oros) [2108204 2037974]
  - ice: Use xdp_buf instead of rx_buf for xsk zero-copy (Petr Oros) [2108204 2037974]
  - ice: Only lock to update netdev dev_addr (Petr Oros) [2108204 2037974]
  - ice: restart periodic outputs around time changes (Petr Oros) [2108204 2037974]
  - ice: fix Tx queue iteration for Tx timestamp enablement (Petr Oros) [2108204 2037974]
  - devlink: Add 'enable_iwarp' generic device param (Petr Oros) [2108204 2037974]
  - i40e: Fix tunnel checksum offload with fragmented traffic (Ivan Vecera) [2119479 2037980]
  - i40e: Fix call trace in setup_tx_descriptors (Ivan Vecera) [2119479 2037980]
  - i40e: Fix calculating the number of queue pairs (Ivan Vecera) [2119479 2037980]
  - i40e: Fix adding ADQ filter to TC0 (Ivan Vecera) [2119479 2037980]
  - i40e: i40e_main: fix a missing check on list iterator (Ivan Vecera) [2119479 2037980]
  - i40e, xsk: Get rid of redundant 'fallthrough' (Ivan Vecera) [2119479 2037980]
  - i40e, xsk: Diversify return values from xsk_wakeup call paths (Ivan Vecera) [2119479 2037980]
  - i40e, xsk: Terminate Rx side of NAPI when XSK Rx queue gets full (Ivan Vecera) [2119479 2037980]
  - i40e: Add Ethernet Connection X722 for 10GbE SFP+ support (Ivan Vecera) [2119479 2037980]
  - i40e: Add vsi.tx_restart to i40e ethtool stats (Ivan Vecera) [2119479 2037980]
  - i40e: Add tx_stopped stat (Ivan Vecera) [2119479 2037980]
  - i40e: Add support for MPLS + TSO (Ivan Vecera) [2119479 2037980]
  - i40e: little endian only valid checksums (Ivan Vecera) [2119479 2037980]
  - i40e: stop disabling VFs due to PF error responses (Ivan Vecera) [2119479 2037980]
  - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" (Ivan Vecera) [2119479 2037980]
  - i40e: Add a stat for tracking busy rx pages (Ivan Vecera) [2119479 2037980]
  - i40e: Add a stat for tracking pages waived (Ivan Vecera) [2119479 2037980]
  - i40e: Add a stat tracking new RX page allocations (Ivan Vecera) [2119479 2037980]
  - i40e: Aggregate and export RX page reuse stat (Ivan Vecera) [2119479 2037980]
  - i40e: Remove rx page reuse double count (Ivan Vecera) [2119479 2037980]
  - i40e: Fix race condition while adding/deleting MAC/VLAN filters (Ivan Vecera) [2119479 2037980]
  - i40e: Add new version of i40e_aq_add_macvlan function (Ivan Vecera) [2119479 2037980]
  - i40e: Add new versions of send ASQ command functions (Ivan Vecera) [2119479 2037980]
  - i40e: Add sending commands in atomic context (Ivan Vecera) [2119479 2037980]
  - i40e: Remove unused RX realloc stat (Ivan Vecera) [2119479 2037980]
  - i40e: Disable hw-tc-offload feature on driver load (Ivan Vecera) [2119479 2037980]
  - i40e: Fix reset path while removing the driver (Ivan Vecera) [2119479 2037980]
  - i40e: Fix reset bw limit when DCB enabled with 1 TC (Ivan Vecera) [2119479 2037980]
  - i40e: respect metadata on XSK Rx to skb (Ivan Vecera) [2119479 2037980]
  - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Ivan Vecera) [2119479 2037980]
  - i40e: Remove useless DMA-32 fallback configuration (Ivan Vecera) [2119479 2037980]
  - i40e: fix unsigned stat widths (Ivan Vecera) [2119479 2037980]
  - i40e: Fix for failed to init adminq while VF reset (Ivan Vecera) [2119479 2037980]
  - i40e: Fix queues reservation for XDP (Ivan Vecera) [2119479 2037980]
  - i40e: Fix issue when maximum queues is exceeded (Ivan Vecera) [2119479 2037980]
  - i40e: Increase delay to 1 s after global EMP reset (Ivan Vecera) [2119479 2037980]
  - i40e: remove variables set but not used (Ivan Vecera) [2119479 2037980]
  - i40e: Remove non-inclusive language (Ivan Vecera) [2119479 2037980]
  - i40e: Update FW API version (Ivan Vecera) [2119479 2037980]
  - i40e: Minimize amount of busy-waiting during AQ send (Ivan Vecera) [2119479 2037980]
  - i40e: Add ensurance of MacVlan resources for every trusted VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix incorrect netdev's real number of RX/TX queues (Ivan Vecera) [2119479 2037980]
  - i40e: Fix for displaying message regarding NVM version (Ivan Vecera) [2119479 2037980]
  - i40e: fix use-after-free in i40e_sync_filters_subtask() (Ivan Vecera) [2119479 2037980]
  - i40e: Fix to not show opcode msg on unsuccessful VF MAC change (Ivan Vecera) [2119479 2037980]
  - i40e: switch to napi_build_skb() (Ivan Vecera) [2119479 2037980]
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Ivan Vecera) [2119479 2037980]
  - i40e: Fix pre-set max number of queues for VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix failed opcode appearing if handling messages from VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix display error code in dmesg (Ivan Vecera) [2119479 2037980]
  - i40e: Fix creation of first queue by omitting it if is not power of two (Ivan Vecera) [2119479 2037980]
  - i40e: Fix warning message and call stack during rmmod i40e driver (Ivan Vecera) [2119479 2037980]
  - i40e: Fix ping is lost after configuring ADq on VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix changing previously set num_queue_pairs for PFs (Ivan Vecera) [2119479 2037980]
  - i40e: Fix NULL ptr dereference on VSI filter sync (Ivan Vecera) [2119479 2037980]
  - i40e: Fix correct max_pkt_size on VF RX queue (Ivan Vecera) [2119479 2037980]
  - i40e: Fix freeing of uninitialized misc IRQ vector (Ivan Vecera) [2119479 2037980]
  - i40e: Fix spelling mistake "dissable" -> "disable" (Ivan Vecera) [2119479 2037980]
  - i40e: add support for PTP external synchronization clock (Ivan Vecera) [2119479 2037980]
  - i40e: improve locking of mac_filter_hash (Ivan Vecera) [2119479 2037980]
  - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() (Florian Westphal) [2108199 2096401] {CVE-2022-1972}
  - netfilter: nf_tables: stricter validation of element data (Florian Westphal) [2104591 2104592] {CVE-2022-34918}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.27.1.el9_0]
changelog:
  - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Wander Lairson Costa) [2116967 2116968] {CVE-2022-2585}
  - fix race between exit_itimers() and /proc/pid/timers (Wander Lairson Costa) [2116967 2116968] {CVE-2022-2585}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.29.1.el9_0]
changelog:
  - configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2129453 2126153]
  - KVM: x86/mmu: Don't advance iterator after restart due to yielding (Nico Pache) [2127859 2055725]
  - scsi: csiostor: Add module softdep on cxgb4 (Rahul Lakkireddy) [2127857 1977553]
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Oleg Nesterov) [2127875 2121271] {CVE-2022-30594}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.30.1.el9_0]
changelog:
  - random: trigger reseeding DRBG on more occasions (Daiki Ueno) [2128970 2125257]
  - random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121129 2114854]
  - nvme-tcp: handle number of queue changes (John Meneghini) [2131360 2112025]
  - nvmet: expose max queues to configfs (John Meneghini) [2131360 2112025]
  - nvme-fabrics: parse nvme connect Linux error codes (John Meneghini) [2131360 2112025]
  - nvmet: revert "nvmet: make discovery NQN configurable" (Gopal Tiwari) [2131360 2066146]
  - vfio/type1: Unpin zero pages (Alex Williamson) [2128791 2121855]
  - cifs: fix bad fids sent over wire (Ronnie Sahlberg) [2127858 2088775]
  - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op (Ronnie Sahlberg) [2127858 2088775]
  - cifs: verify that tcon is valid before dereference in cifs_kill_sb (Ronnie Sahlberg) [2127858 2048823]
  - cifs: release cached dentries only if mount is complete (Ronnie Sahlberg) [2127858 2048823]
  - cifs: we do not need a spinlock around the tree access during umount (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix handlecache and multiuser (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix workstation_name for multiuser mounts (Ronnie Sahlberg) [2127858 2048823]
  - cifs: free ntlmsspblob allocated in negotiate (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix ntlmssp auth when there is no key exchange (Ronnie Sahlberg) [2127858 2048823]
  - cifs: send workstation name during ntlmssp session setup (Ronnie Sahlberg) [2127858 2048823]
  - cifs: Fix crash on unload of cifs_arc4.ko (Ronnie Sahlberg) [2127858 2048823]
  - Documentation, arch: Remove leftovers from CIFS_WEAK_PW_HASH (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix the cifs_reconnect path for DFS (Ronnie Sahlberg) [2127858 2048823]
  - cifs: sanitize multiple delimiters in prepath (Ronnie Sahlberg) [2127858 2048823]
  - cifs: ignore resource_id while getting fscache super cookie (Ronnie Sahlberg) [2127858 2048823]
  - cifs: avoid use of dstaddr as key for fscache client cookie (Ronnie Sahlberg) [2127858 2048823]
  - cifs: add server conn_id to fscache client cookie (Ronnie Sahlberg) [2127858 2048823]
  - cifs: wait for tcon resource_id before getting fscache super (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix missed refcounting of ipc tcon (Ronnie Sahlberg) [2127858 2048823]
  - cifs: update internal version number (Ronnie Sahlberg) [2127858 2048823]
  - smb2: clarify rc initialization in smb2_reconnect (Ronnie Sahlberg) [2127858 2048823]
  - cifs: populate server_hostname for extra channels (Ronnie Sahlberg) [2127858 2048823]
  - cifs: nosharesock should be set on new server (Ronnie Sahlberg) [2127858 2048823]
  - cifs: introduce cifs_ses_mark_for_reconnect() helper (Ronnie Sahlberg) [2127858 2048823]
  - cifs: protect srv_count with cifs_tcp_ses_lock (Ronnie Sahlberg) [2127858 2048823]
  - cifs: move debug print out of spinlock (Ronnie Sahlberg) [2127858 2048823]
  - cifs: do not duplicate fscache cookie for secondary channels (Ronnie Sahlberg) [2127858 2048823]
  - cifs: connect individual channel servers to primary channel server (Ronnie Sahlberg) [2127858 2048823]
  - cifs: protect session channel fields with chan_lock (Ronnie Sahlberg) [2127858 2048823]
  - cifs: do not negotiate session if session already exists (Ronnie Sahlberg) [2127858 2048823]
  - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix potential use-after-free bugs (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix memory leak of smb3_fs_context_dup::server_hostname (Ronnie Sahlberg) [2127858 2048823]
  - smb3: add additional null check in SMB311_posix_mkdir (Ronnie Sahlberg) [2127858 2048823]
  - cifs: release lock earlier in dequeue_mid error case (Ronnie Sahlberg) [2127858 2048823]
  - smb3: add additional null check in SMB2_tcon (Ronnie Sahlberg) [2127858 2048823]
  - smb3: add additional null check in SMB2_open (Ronnie Sahlberg) [2127858 2048823]
  - smb3: add additional null check in SMB2_ioctl (Ronnie Sahlberg) [2127858 2048823]
  - smb3: remove trivial dfs compile warning (Ronnie Sahlberg) [2127858 2048823]
  - cifs: support nested dfs links over reconnect (Ronnie Sahlberg) [2127858 2048823]
  - smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2127858 2048823]
  - cifs: for compound requests, use open handle if possible (Ronnie Sahlberg) [2127858 2048823]
  - cifs: set a minimum of 120s for next dns resolution (Ronnie Sahlberg) [2127858 2048823]
  - cifs: split out dfs code from cifs_reconnect() (Ronnie Sahlberg) [2127858 2048823]
  - cifs: convert list_for_each to entry variant (Ronnie Sahlberg) [2127858 2048823]
  - cifs: introduce new helper for cifs_reconnect() (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix print of hdr_flags in dfscache_proc_show() (Ronnie Sahlberg) [2127858 2048823]
  - cifs: nosharesock should not share socket with future sessions (Ronnie Sahlberg) [2127858 2048823]
  - smb3: add dynamic trace points for socket connection (Ronnie Sahlberg) [2127858 2048823]
  - cifs: Move SMB2_Create definitions to the shared area (Ronnie Sahlberg) [2127858 2048823]
  - cifs: Move more definitions into the shared area (Ronnie Sahlberg) [2127858 2048823]
  - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Ronnie Sahlberg) [2127858 2048823]
  - cifs: Create a new shared file holding smb2 pdu definitions (Ronnie Sahlberg) [2127858 2048823]
  - cifs: add mount parameter tcpnodelay (Ronnie Sahlberg) [2127858 2048823]
  - cifs: To match file servers, make sure the server hostname matches (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix incorrect check for null pointer in header_assemble (Ronnie Sahlberg) [2127858 2048823]
  - smb3: correct server pointer dereferencing check to be more consistent (Ronnie Sahlberg) [2127858 2048823]
  - smb3: correct smb3 ACL security descriptor (Ronnie Sahlberg) [2127858 2048823]
  - cifs: Clear modified attribute bit from inode flags (Ronnie Sahlberg) [2127858 2048823]
  - cifs: Deal with some warnings from W=1 (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix a sign extension bug (Ronnie Sahlberg) [2127858 2048823]
  - cifs: Not to defer close on file when lock is set (Ronnie Sahlberg) [2127858 2048823]
  - cifs: Fix soft lockup during fsstress (Ronnie Sahlberg) [2127858 2048823]
  - cifs: Deferred close performance improvements (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix incorrect kernel doc comments (Ronnie Sahlberg) [2127858 2048823]
  - cifs: remove pathname for file from SPDX header (Ronnie Sahlberg) [2127858 2048823]
  - cifs: properly invalidate cached root handle when closing it (Ronnie Sahlberg) [2127858 2048823]
  - cifs: move SMB FSCTL definitions to common code (Ronnie Sahlberg) [2127858 2048823]
  - cifs: rename cifs_common to smbfs_common (Ronnie Sahlberg) [2127858 2048823]
  - cifs: cifs_md4 convert to SPDX identifier (Ronnie Sahlberg) [2127858 2048823]
  - cifs: create a MD4 module and switch cifs.ko to use it (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fork arc4 and create a separate module for it for cifs and other users (Ronnie Sahlberg) [2127858 2048823]
  - cifs: remove support for NTLM and weaker authentication algorithms (Ronnie Sahlberg) [2127858 2048823]
  - cifs: update FSCTL definitions (Ronnie Sahlberg) [2127858 2048823]
  - cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED (Ronnie Sahlberg) [2127858 2048823]
  - cifs: enable fscache usage even for files opened as rw (Ronnie Sahlberg) [2127858 2048823]
  - smb3: fix posix extensions mount option (Ronnie Sahlberg) [2127858 2048823]
  - cifs: fix wrong release in sess_alloc_buffer() failed path (Ronnie Sahlberg) [2127858 2048823]
  - CIFS: Fix a potencially linear read overflow (Ronnie Sahlberg) [2127858 2048823]
  - drm/mgag200: Select clock in PLL update functions (Herton R. Krzesinski) [2112017 2043115]
  - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (Íñigo Huguet) [2095653 2096777]
  - mt76: mt7921e: fix possible probe failure after reboot (Íñigo Huguet) [2095653 2065633]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.3.1.el9_2]
changelog:
  - cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online' and 'ret' (Mark Langsdorf) [2170475]
  - cpufreq: ACPI: Only set boost MSRs on supported CPUs (Mark Langsdorf) [2170475]
  - Drivers: vmbus: Check for channel allocation before looking up relids (Mohammed Gamal) [2156126]
  - NFSD: copy the whole verifier in nfsd_copy_write_verifier (Jeffrey Layton) [2166658]
  - nfsd: don't fsync nfsd_files on last close (Jeffrey Layton) [2166658]
  - NFSD: fix problems with cleanup on errors in nfsd4_copy (Jeffrey Layton) [2166658]
  - nfsd: fix race to check ls_layouts (Jeffrey Layton) [2166658]
  - nfsd: don't hand out delegation on setuid files being opened for write (Jeffrey Layton) [2127406]
  - nfsd: remove fs/nfsd/fault_inject.c (Jeffrey Layton) [2166658]
  - NFSD: fix leaked reference count of nfsd4_ssc_umount_item (Jeffrey Layton) [2166658]
  - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath (Jeffrey Layton) [2166658]
  - nfsd: zero out pointers after putting nfsd_files on COPY setup error (Jeffrey Layton) [2166658]
  - nfsd: eliminate __nfs4_get_fd (Jeffrey Layton) [2166658]
  - nfsd: add some kerneldoc comments for stateid preprocessing functions (Jeffrey Layton) [2166658]
  - nfsd: eliminate find_deleg_file_locked (Jeffrey Layton) [2166658]
  - nfsd: don't take nfsd4_copy ref for OP_OFFLOAD_STATUS (Jeffrey Layton) [2166658]
  - nfsd: move reply cache initialization into nfsd startup (Jeffrey Layton) [2166658]
  - nfsd: fix potential race in nfs4_find_file (Jeffrey Layton) [1997177]
  - nfsd: allow nfsd_file_get to sanely handle a NULL pointer (Jeffrey Layton) [2166658]
  - NFSD: enhance inter-server copy cleanup (Jeffrey Layton) [2166658]
  - NFSD: Rename the fields in copy_stateid_t (Jeffrey Layton) [2166658]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.4.1.el9_2]
changelog:
  - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [2109548]
  - Revert "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2109548]
  - gfs2: Evict inodes cooperatively (Andreas Gruenbacher) [2109548]
  - gfs2: Flush delete work before shrinking inode cache (Andreas Gruenbacher) [2109548]
  - gfs2: Cease delete work during unmount (Bob Peterson) [2109548]
  - gfs2: Add SDF_DEACTIVATING super block flag (Bob Peterson) [2109548]
  - gfs2: check gl_object in rgrp glops (Bob Peterson) [2109548]
  - gfs2: Split the two kinds of glock "delete" work (Andreas Gruenbacher) [2109548]
  - gfs2: Move delete workqueue into super block (Andreas Gruenbacher) [2109548]
  - gfs2: Get rid of GLF_PENDING_DELETE flag (Andreas Gruenbacher) [2109548]
  - gfs2: Make glock lru list scanning safer (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up gfs2_scan_glock_lru (Andreas Gruenbacher) [2109548]
  - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [2109548]
  - gfs2: gl_object races fix (Andreas Gruenbacher) [2109548]
  - iomap/gfs2: Unlock and put folio in page_done handler (Andreas Gruenbacher) [2109548]
  - iomap: Add __iomap_put_folio helper (Andreas Gruenbacher) [2109548]
  - Revert "gfs2: stop using generic_writepages in gfs2_ail1_start_one" (Andreas Gruenbacher) [2109548]
  - gfs2: Remove support for glock holder auto-demotion (2) (Andreas Gruenbacher) [2109548]
  - gfs2: Remove support for glock holder auto-demotion (Andreas Gruenbacher) [2109548]
  - gfs2: Minor gfs2_try_evict cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Partially revert gfs2_inode_lookup change (Andreas Gruenbacher) [2109548]
  - gfs2: Add gfs2_inode_lookup comment (Andreas Gruenbacher) [2109548]
  - gfs2: Uninline and improve glock_{set,clear}_object (Andreas Gruenbacher) [2109548]
  - gfs2: Simply dequeue iopen glock in gfs2_evict_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up after gfs2_create_inode rework (Andreas Gruenbacher) [2109548]
  - gfs2: Avoid dequeuing GL_ASYNC glock holders twice (Andreas Gruenbacher) [2109548]
  - gfs2: Make gfs2_glock_hold return its glock argument (Andreas Gruenbacher) [2109548]
  - gfs2: Always check inode size of inline inodes (Andreas Gruenbacher) [2109548]
  - gfs2: Cosmetic gfs2_dinode_{in,out} cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Handle -EBUSY result of insert_inode_locked4 (Andreas Gruenbacher) [2109548]
  - gfs2: Fix and clean up create / evict interaction (Andreas Gruenbacher) [2109548]
  - gfs2: Clean up initialization of "ip" in gfs2_create_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Get rid of ghs[] in gfs2_create_inode (Andreas Gruenbacher) [2109548]
  - gfs2: Add extra error check in alloc_dinode (Andreas Gruenbacher) [2109548]
  - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) [2109548]
  - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) [2109548]
  - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [2109548]
  - gfs2: Dequeue waiters when withdrawn (Bob Peterson) [2109548]
  - gfs2: Prevent double iput for journal on error (Bob Peterson) [2109548]
  - gfs2: Convert gfs2_jhead_process_page() to use a folio (Andreas Gruenbacher) [2109548]
  - gfs2: remove ->writepage (Andreas Gruenbacher) [2109548]
  - gfs2: stop using generic_writepages in gfs2_ail1_start_one (Andreas Gruenbacher) [2109548]
  - gfs2: List traversal in do_promote is safe (Andreas Gruenbacher) [2109548]
  - gfs2: do_promote glock holder stealing fix (Bob Peterson) [2109548]
  - gfs2: Use better variable name (Andreas Gruenbacher) [2109548]
  - gfs2: Make go_instantiate take a glock (Andreas Gruenbacher) [2109548]
  - gfs2: Add new go_held glock operation (Andreas Gruenbacher) [2109548]
  - gfs2: Revert 'Fix "truncate in progress" hang' (Andreas Gruenbacher) [2109548]
  - gfs2: Instantiate glocks ouside of glock state engine (Andreas Gruenbacher) [2109548]
  - gfs2: Fix up gfs2_glock_async_wait (Andreas Gruenbacher) [2109548]
  - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [2109548]
  - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [2109548]
  - gfs2: Add GL_NOPID flag for process-independent glock holders (Andreas Gruenbacher) [2109548]
  - gfs2: Add flocks to glockfd debugfs file (Andreas Gruenbacher) [2109548]
  - gfs2: Add glockfd debugfs file (Andreas Gruenbacher) [2109548]
  - gfs2: Minor gfs2_glock_nq_m cleanup (Andreas Gruenbacher) [2109548]
  - gfs2: Fix spelling mistake in comment (Andreas Gruenbacher) [2109548]
  - gfs2: Rewrap overlong comment in do_promote (Bob Peterson) [2109548]
  - gfs2: Remove redundant NULL check before kfree (Andreas Gruenbacher) [2109548]
  - gfs2: Use container_of() for gfs2_glock(aspace) (Andreas Gruenbacher) [2109548]
  - gfs2: dump inode object for iopen glocks (Bob Peterson) [2109548]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.5.1.el9_2]
changelog:
  - redhat: fix trivial syntax error in 64k-debug modules signing (Herton R. Krzesinski)
  - redhat/configs: Revert "enable DAMON configs" (Vladis Dronov)
  - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (Ming Lei) [2164903]
  - afs: remove afs_cache_netfs and afs_zap_permits() declarations (Marc Dionne) [2166628]
  - afs: remove variable nr_servers (Marc Dionne) [2166628]
  - afs: Fix lost servers_outstanding count (Marc Dionne) [2166628]
  - afs: Fix server->active leak in afs_put_server (Marc Dionne) [2166628]
  - afs: Fix fileserver probe RTT handling (Marc Dionne) [2166628]
  - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (Marc Dionne) [2166628]
  - afs: Use the operation issue time instead of the reply time for callbacks (Marc Dionne) [2166628]
  - afs: Enable multipage folio support (Marc Dionne) [2166628]
  - afs: Fix access after dec in put functions (Marc Dionne) [2166628]
  - afs: Use refcount_t rather than atomic_t (Marc Dionne) [2166628]
  - afs: Fix dynamic root getattr (Marc Dionne) [2166628]
  - afs: Remove check of PageError (Marc Dionne) [2166628]
  - afs: Fix some checker issues (Marc Dionne) [2166628]
  - afs: Fix infinite loop found by xfstest generic/676 (Marc Dionne) [2166628]
  - afs: Adjust ACK interpretation to try and cope with NAT (Marc Dionne) [2166628]
  - afs: Prefer struct_size over open coded arithmetic (Marc Dionne) [2166628]
  - afs: Convert invalidatepage to invalidate_folio (Marc Dionne) [2166628]
  - afs: Convert directory aops to invalidate_folio (Marc Dionne) [2166628]
  - blk-mq: fix "bad unlock balance detected" on q->srcu in __blk_mq_run_dispatch_ops (Chris Leech) [2170101]
  - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jon Maloy) [2160029] {CVE-2022-2196}
  - ice: fix lost multicast packets in promisc mode (Petr Oros) [2170694]
  - net: use indirect calls helpers for sk_exit_memory_pressure() (Florian Westphal) [2155182]
  - bpf: pull before calling skb_postpull_rcsum() (Felix Maurer) [2164806]
  - bpf, sockmap: fix race in sock_map_free() (Felix Maurer) [2164806]
  - bpf, sock_map: Move cancel_work_sync() out of sock lock (Felix Maurer) [2164806]
  - xsk: Inherit need_wakeup flag for shared sockets (Felix Maurer) [2164806]
  - xsk: Fix backpressure mechanism on Tx (Felix Maurer) [2164806]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.6.1.el9_2]
changelog:
  - NFS: Correct timing for assigning access cache timestamp (Benjamin Coddington) [2180882]
  - nfsd: don't replace page in rq_pages if it's a continuation of last page (Jeffrey Layton) [2179342]
  - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156374] {CVE-2022-4744}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.7.1.el9_2]
changelog:
  - rxrpc: Fix wrong error return in rxrpc_connect_call() (Marc Dionne) [2170099]
  - rxrpc: Fix incoming call setup race (Marc Dionne) [2170099]
  - rxrpc: Move client call connection to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move the client conn cache management to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Remove call->state_lock (Marc Dionne) [2170099]
  - rxrpc: Move call state changes from recvmsg to I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move call state changes from sendmsg to I/O thread (Marc Dionne) [2170099]
  - rxrpc: Wrap accesses to get call state to put the barrier in one place (Marc Dionne) [2170099]
  - rxrpc: Split out the call state changing functions into their own file (Marc Dionne) [2170099]
  - rxrpc: Set up a connection bundle from a call, not rxrpc_conn_parameters (Marc Dionne) [2170099]
  - rxrpc: Offload the completion of service conn security to the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Make the set of connection IDs per local endpoint (Marc Dionne) [2170099]
  - rxrpc: Tidy up abort generation infrastructure (Marc Dionne) [2170099]
  - rxrpc: Clean up connection abort (Marc Dionne) [2170099]
  - rxrpc: Implement a mechanism to send an event notification to a connection (Marc Dionne) [2170099]
  - rxrpc: Only disconnect calls in the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Only set/transmit aborts in the I/O thread (Marc Dionne) [2170099]
  - rxrpc: Separate call retransmission from other conn events (Marc Dionne) [2170099]
  - rxrpc: Make the local endpoint hold a ref on a connected call (Marc Dionne) [2170099]
  - rxrpc: Stash the network namespace pointer in rxrpc_local (Marc Dionne) [2170099]
  - rxrpc: Fix a couple of potential use-after-frees (Marc Dionne) [2170099]
  - rxrpc: Fix the return value of rxrpc_new_incoming_call() (Marc Dionne) [2170099]
  - rxrpc: rxperf: Fix uninitialised variable (Marc Dionne) [2170099]
  - rxrpc: Fix I/O thread stop (Marc Dionne) [2170099]
  - rxrpc: Fix switched parameters in peer tracing (Marc Dionne) [2170099]
  - rxrpc: Fix locking issues in rxrpc_put_peer_locked() (Marc Dionne) [2170099]
  - rxrpc: Fix I/O thread startup getting skipped (Marc Dionne) [2170099]
  - rxrpc: Fix NULL deref in rxrpc_unuse_local() (Marc Dionne) [2170099]
  - rxrpc: Fix security setting propagation (Marc Dionne) [2170099]
  - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (Marc Dionne) [2170099]
  - rxrpc: Transmit ACKs at the point of generation (Marc Dionne) [2170099]
  - rxrpc: Fold __rxrpc_unuse_local() into rxrpc_unuse_local() (Marc Dionne) [2170099]
  - rxrpc: Move the cwnd degradation after transmitting packets (Marc Dionne) [2170099]
  - rxrpc: Trace/count transmission underflows and cwnd resets (Marc Dionne) [2170099]
  - rxrpc: Remove the _bh annotation from all the spinlocks (Marc Dionne) [2170099]
  - rxrpc: Make the I/O thread take over the call and local processor work (Marc Dionne) [2170099]
  - rxrpc: Extract the peer address from an incoming packet earlier (Marc Dionne) [2170099]
  - rxrpc: Reduce the use of RCU in packet input (Marc Dionne) [2170099]
  - rxrpc: Simplify skbuff accounting in receive path (Marc Dionne) [2170099]
  - rxrpc: Remove RCU from peer->error_targets list (Marc Dionne) [2170099]
  - rxrpc: Move DATA transmission into call processor work item (Marc Dionne) [2170099]
  - rxrpc: Copy client call parameters into rxrpc_call earlier (Marc Dionne) [2170099]
  - rxrpc: Implement a mechanism to send an event notification to a call (Marc Dionne) [2170099]
  - rxrpc: Don't use sk->sk_receive_queue.lock to guard socket state changes (Marc Dionne) [2170099]
  - rxrpc: Remove call->input_lock (Marc Dionne) [2170099]
  - rxrpc: Move error processing into the local endpoint I/O thread (Marc Dionne) [2170099]
  - rxrpc: Move packet reception processing into I/O thread (Marc Dionne) [2170099]
  - rxrpc: Create a per-local endpoint receive queue and I/O thread (Marc Dionne) [2170099]
  - rxrpc: Split the receive code (Marc Dionne) [2170099]
  - rxrpc: Don't hold a ref for connection workqueue (Marc Dionne) [2170099]
  - rxrpc: Don't hold a ref for call timer or workqueue (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for sk_buff tracing (Marc Dionne) [2170099]
  - rxrpc: Trace rxrpc_bundle refcount (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_call tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_conn tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_peer tracing (Marc Dionne) [2170099]
  - rxrpc: trace: Don't use __builtin_return_address for rxrpc_local tracing (Marc Dionne) [2170099]
  - rxrpc: Extract the code from a received ABORT packet much earlier (Marc Dionne) [2170099]
  - rxrpc: Drop rxrpc_conn_parameters from rxrpc_connection and rxrpc_bundle (Marc Dionne) [2170099]
  - rxrpc: Remove the [_k]net() debugging macros (Marc Dionne) [2170099]
  - rxrpc: Remove the [k_]proto() debugging macros (Marc Dionne) [2170099]
  - rxrpc: Remove handling of duplicate packets in recvmsg_queue (Marc Dionne) [2170099]
  - rxrpc: Fix call leak (Marc Dionne) [2170099]
  - rxrpc: Enable rxperf test module (Marc Dionne) [2170099]
  - rxrpc: Implement an in-kernel rxperf server for testing purposes (Marc Dionne) [2170099]
  - rxrpc: Fix checker warning (Marc Dionne) [2170099]
  - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] (Marc Dionne) [2170099]
  - rxrpc: uninitialized variable in rxrpc_send_ack_packet() (Marc Dionne) [2170099]
  - rxrpc: fix rxkad_verify_response() (Marc Dionne) [2170099]
  - rxrpc: Fix network address validation (Marc Dionne) [2170099]
  - rxrpc: Fix oops from calling udpv6_sendmsg() on AF_INET socket (Marc Dionne) [2170099]
  - rxrpc: Allocate an skcipher each time needed rather than reusing (Marc Dionne) [2170099]
  - rxrpc: Fix congestion management (Marc Dionne) [2170099]
  - rxrpc: Remove the rxtx ring (Marc Dionne) [2170099]
  - rxrpc: Save last ACK's SACK table rather than marking txbufs (Marc Dionne) [2170099]
  - rxrpc: Remove call->lock (Marc Dionne) [2170099]
  - rxrpc: Don't use a ring buffer for call Tx queue (Marc Dionne) [2170099]
  - rxrpc: Get rid of the Rx ring (Marc Dionne) [2170099]
  - rxrpc: Clone received jumbo subpackets and queue separately (Marc Dionne) [2170099]
  - rxrpc: Split the rxrpc_recvmsg tracepoint (Marc Dionne) [2170099]
  - rxrpc: Clean up ACK handling (Marc Dionne) [2170099]
  - rxrpc: Allocate ACK records at proposal and queue for transmission (Marc Dionne) [2170099]
  - rxrpc: Define rxrpc_txbuf struct to carry data to be transmitted (Marc Dionne) [2170099]
  - rxrpc: Remove call->tx_phase (Marc Dionne) [2170099]
  - rxrpc: Remove the flags from the rxrpc_skb tracepoint (Marc Dionne) [2170099]
  - rxrpc: Remove unnecessary header inclusions (Marc Dionne) [2170099]
  - rxrpc: Call udp_sendmsg() directly (Marc Dionne) [2170099]
  - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (Marc Dionne) [2170099]
  - rxrpc: Record stats for why the REQUEST-ACK flag is being set (Marc Dionne) [2170099]
  - rxrpc: Record statistics about ACK types (Marc Dionne) [2170099]
  - rxrpc: Add stats procfile and DATA packet stats (Marc Dionne) [2170099]
  - rxrpc: Track highest acked serial (Marc Dionne) [2170099]
  - rxrpc: Split call timer-expiration from call timer-set tracepoint (Marc Dionne) [2170099]
  - rxrpc: Trace setting of the request-ack flag (Marc Dionne) [2170099]
  - rxrpc: Automatically generate trace tag enums (Marc Dionne) [2170099]
  - rxrpc: remove rxrpc_max_call_lifetime declaration (Marc Dionne) [2170099]
  - rxrpc: Remove rxrpc_get_reply_time() which is no longer used (Marc Dionne) [2170099]
  - rxrpc: Fix calc of resend age (Marc Dionne) [2170099]
  - rxrpc: Fix local destruction being repeated (Marc Dionne) [2170099]
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (Marc Dionne) [2170099]
  - rxrpc: Fix locking in rxrpc's sendmsg (Marc Dionne) [2170099]
  - net: rxrpc: fix clang -Wformat warning (Marc Dionne) [2170099]
  - rxrpc: Fix decision on when to generate an IDLE ACK (Marc Dionne) [2170099]
  - rxrpc: Don't let ack.previousPacket regress (Marc Dionne) [2170099]
  - rxrpc: Fix overlapping ACK accounting (Marc Dionne) [2170099]
  - rxrpc: Don't try to resend the request if we're receiving the reply (Marc Dionne) [2170099]
  - rxrpc: Fix listen() setting the bar too high for the prealloc rings (Marc Dionne) [2170099]
  - rxrpc, afs: Fix selection of abort codes (Marc Dionne) [2170099]
  - rxrpc: Return an error to sendmsg if call failed (Marc Dionne) [2170099]
  - rxrpc: Fix locking issue (Marc Dionne) [2170099]
  - rxrpc: Use refcount_t rather than atomic_t (Marc Dionne) [2170099]
  - rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc (Marc Dionne) [2170099]
  - rxrpc: Enable IPv6 checksums on transport socket (Marc Dionne) [2170099]
  - rxrpc: Restore removed timer deletion (Marc Dionne) [2170099]
  - rxrpc: fix a race in rxrpc_exit_net() (Marc Dionne) [2170099]
  - rxrpc: fix some null-ptr-deref bugs in server_key.c (Marc Dionne) [2170099]
  - rxrpc: Fix call timer start racing with call destruction (Marc Dionne) [2170099]
  - rxrpc: Adjust retransmission backoff (Marc Dionne) [2170099]
  - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (Marc Dionne) [2170099]
  - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (Marc Dionne) [2170099]
  - rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Marc Dionne) [2170099]
  - net: RxRPC: make dependent Kconfig symbols be shown indented (Marc Dionne) [2170099]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.8.1.el9_2]
changelog:
  - Reinstate "GFS2: free disk inode which is deleted by remote node -V2" (Bob Peterson) [2181344]
  - iavf: fix hang on reboot with ice (Stefan Assmann) [2175775]
  - xfs: fix off-by-one-block in xfs_discard_folio() (Carlos Maiolino) [2178173]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.10.1.el9_2]
changelog:
  - dm: fix __send_duplicate_bios() to always allow for splitting IO (Benjamin Marzinski) [2184420]
  - dm: fix improper splitting for abnormal bios (Benjamin Marzinski) [2184420]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-284.11.1.el9_2]
changelog:
  - vfio: Make the group FD disassociate from the iommu_group (Alex Williamson) [2180649]
  - vfio: Hold a reference to the iommu_group in kvm for SPAPR (Alex Williamson) [2180649]
  - vfio: Add vfio_file_is_group() (Alex Williamson) [2180649]
  - vfio: Change vfio_group->group_rwsem to a mutex (Alex Williamson) [2180649]
  - vfio: Remove the vfio_group->users and users_comp (Alex Williamson) [2180649]
  - vfio: Follow a strict lifetime for struct iommu_group (Alex Williamson) [2180649]


author: Mridula Shastry <mridula.c.shastry@oracle.com> - [5.14.0-284.18.1.el9_2.OL9]
changelog:
  - cifs: fix wrong unlock before return from cifs_tree_connect()
  - docs: Remove the unnecessary unicode character
  - perf vendor events intel: Refresh ivytown metrics and events
  - perf vendor events: Update Intel ivytown
  - perf vendor events intel: Refresh jaketown metrics and events
  - perf vendor events: Update Intel jaketown
  - NFSD: RHEL-only bug introduced in fix for COMMIT and NFS4ERR_DELAY loop
  - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop
  - workqueue: Fix isolated CPUs interference problem
  - sched/core: Fix arch_scale_freq_tick() on tickless systems
  - ice: no busy waiting in GNSS thread and for SQ commands
  - wdat_wdt: avoid watchdog timeout during reboot
  - hugetlbfs: don't delete error page from pagecache
  - mm/filemap: fix page end in filemap_get_read_batch
  - isched/deadline: Add more reschedule cases to prio_changed_dl()
  - sched/rt: Fix bad task migration for rt tasks
  - blk-mq: directly poll requests
  - KVM: VMX: Fix crash due to uninitialized current_vmcs
  - wifi: iwlwifi: mvm: protect TXQ list manipulation
  - crypto: jitter - permanent and intermittent health errors
  - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores
  - cpufreq: intel_pstate: Read all MSRs on the target CPU
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers
  - crypto: qat: Update QAT drivers upto v6.2
  - info/owners.yaml: Adjust intel_qat subsystem entry
  - net: tls: fix possible race condition between do_tls_getsockopt_conf and do_tls_setsockopt_conf() {CVE-2023-28466}
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() {CVE-2023-2194}
  - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} 
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() {CVE-2023-2002}
  - netfilter: nf_tables: deactivate anonymous set from preparation phase {CVE-2023-32233}
  - perf: Fix check before add_event_to_groups() in perf_group_detach() {CVE-2023-2235}


author:
  Nagappan Ramasamy Palaniappan <nagappan.ramasamy.palaniappan@oracle.com> - [5.14.0-284.25.1.el9_2.OL9]

changelog:
  - KVM: x86/mmu: Fix race condition in direct_page_fault
  - prlimit: do_prlimit needs to have a speculation check {CVE-2023-0458}
  - x86/speculation: Allow enabling STIBP with legacy IBRS {CVE-2023-1998}
  - ipvlan: Fix out of bounds caused by unclear skb->cb {CVE-2023-3090}
  - net/sched: flower: fix possible OOB write in fl_set_geneve_opt {CVE-2023-35788}


author:
  Nagappan Ramasamy Palaniappan <nagappan.ramasamy.palaniappan@oracle.com> - [5.14.0-284.25.1.el9_2.OL9]

changelog:
  - KVM x86 mmuFix race condition in direct_page_fault
  - prlimit do_prlimit needs to have a speculation check
  - x86 speculation Allow enabling STIBP with legacy IBR
  - ipvlan Fix out of bounds caused by unclear skb cb
  - net sched flower fix possible OOB write in fl_set_geneve_opt


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5.1
changelog:
  - Resolves: rhbz#2209519 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.2.0.z]


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation: Action required on updates
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: EL Errata <el-errata_ww@oracle.com> - 264.1-1.0.1
changelog:
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Replace Oracle URLs
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: EL Errata <el-errata_ww@oracle.com> - 264.2-1.0.1
changelog:
  - Replace upstream references [Orabug: 34398512]
  - Fix "virtual" network device detection code [Orabug: 33865214]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Replace Oracle URLs
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Packit <hello@packit.dev> - 272-1
changelog:
  - Firewall: Edit custom services
  - Services: Pin services as favorites
  - Login: Dark mode
  - Unprivileged cockpit/ws container mode


author: Packit <hello@packit.dev> - 273-1
changelog:
  - Metrics: Display CPU temperature
  - Networking: Suggest netmask and gateway addresses
  - Software Updates: Optionally reboot after updating
  - cockpit/ws container: Support modern SSH keys


author: Packit <hello@packit.dev> - 274-1
changelog:
  - ws: Fix segfault with channel closing (#17492)
  - Services: Fix time picker behaviour in Timer creation dialog
  - Metrics: Improve CPU temperature sensors detection


author: EL Errata <el-errata_ww@oracle.com> - 276.1-1.0.1
changelog:
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]


author: Packit <hello@packit.dev> - 286.1-1
changelog:
  - Users: Fix broken alignment of the first column in groups table
  - Translation updates (rhbz#2139644)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210628-1.gitdd7d273
changelog:
  - implement scoped policies, e.g., cipher@SSH = ...
  - implement algorithm globbing, e.g., cipher@SSH = -*-CBC
  - deprecate derived properties:
    tls_cipher, ssh_cipher, ssh_group, ike_protocol, sha1_in_dnssec
  - deprecate unscoped form of protocol property
  - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS
  - openssh: use PubkeyAcceptedAlgorithms instead of PubkeyAcceptedKeyTypes
  - libssh: respect ssh_certs
  - restrict FIPS:OSPP further
  - improve Python 3.10 compatibility
  - update documentation
  - expand upstream test coverage
  - FUTURE: disable CBC ciphers for all backends but krb5
  - openssl: LEGACY must have SECLEVEL=1, enabling SHA1
  - disable DHE-DSS in LEGACY
  - bump LEGACY key size requirements from 1023 to 1024
  - add javasystem backend
  - *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  - set %verify(not mode) for backend sometimes-symlinks-sometimes-not
  - gnutls: use allowlisting


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210707-1.git29f6c0b
changelog:
  - gnutls: explicitly enable ECDSA-SECPNNNR1-SHANNN
  - packaging: adapt to the RHEL-9 %check-time testing tools availability


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210914-1.git97d08ef
changelog:
  - gnutls: reorder ECDSA-SECPMMMR1-SHANNN together with ECDSA-SHANNN
  - fix several issues with update-crypto-policies --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20211115-1.git70de135
changelog:
  - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
changelog:
  - gnutls: enable SHAKE, needed for Ed448
  - fips-mode-setup: improve handling FIPS plus subpolicies
  - FIPS: disable SHA-1 HMAC
  - FIPS: disable CBC ciphers except in Kerberos


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
changelog:
  - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
  - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
  - fips-mode-setup: catch more inconsistencies, clarify --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
changelog:
  - DEFAULT: drop DNSSEC SHA-1 exception
  - openssh: add support for sntrup761x25519-sha512@openssh.com


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.4.3-5.1
changelog:
  - patch: Run PBKDF benchmark with 8 bytes long well-known passphrase.
  - patch: Change tests to use passphrases with minimal 8 chars length.
  - patch: Add FIPS related error message in keyslot add code.
  - Resolves: #2151576


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-9
changelog:
  - 2018948 - Unauthenticated users can't move print jobs in Web UI
  - 1999955 - Printing of banner before PCL file only prints banner
  - 2006713 - Trying to restart and hold a job doesn't work


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-8
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-14.el9_0.1
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-14.el9_0.5
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Alan Steinberg <alan.steinberg@oracle.com> - 7.76.1-23.el9_2.2
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jakub Martisko <jamartis@redhat.com> - 28-5.1
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  - Add gating.yaml
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-1
changelog:
  - Fix mpath filtering of NVMe devices.
  - Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
  - Limit pool metadata spare to 16GiB.
  - Improves conversion and allocation of pool metadata.
  - Fix different limits used for metadata by lvm2 and thin-tools.
  - Fix interrupting lvconvert --splitcache command with striped origin volumes.
  - Fix problem with wiping of converted LVs.
  - Fix memleak in scanning.
  - Fix corner case allocation for thin-pools.
  - Fix pvck handling MDA at offset different from 4096.
  - Partial or degraded activation of writecache is not allowed.
  - Enhance error handling in fsadm and handle correct fsck result.
  - Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
  - Support using BLKZEROOUT for clearing devices.
  - Fixed interrup handling.
  - Fix block cache when device has too many failing writes.
  - Fix block cache waiting for IO completion with failing disks.
  - Add configure --enable-editline support as an alternative to readline.
  - Enhance reporting and error handling when creating thin volumes.
  - Enable vgsplit for VDO volumes.
  - Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
  - Restore lost signal blocking while VG lock is held.
  - Improve estimation of needed extents when creating thin-pool.
  - Use extra 1% when resizing thin-pool metadata LV with --use-policy.
  - Enhance --use-policy percentage rounding.
  - Allow pvmove of writecache origin.
  - Report integrity fields.
  - Integrity volumes defaults to journal mode.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.13-1
changelog:
  - Update to upstream version 2.03.13.
  - Change in obtain_devices_list_from_udev default.
  - See WHATS_NEW and WHATS_NEW_DM for more information.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-4
changelog:
  - Remove service based autoactivation.
  - New lvmautoactivation(7) man page.
  - Fix missing PVIDs for multipath devices in system.devices file.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-2
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Restore --reportformat option in pvdisplay.
  - Improve multipath backlist option handling.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-3
changelog:
  - Fix effect of setting multipath_component_detection to 0.
  - Fix lvmdbusd using lvm shell with editline.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-3
changelog:
  - Add 0024-libmultipath-use-typedef-for-keyword-handler-functio.patch
  - Add 0025-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0026-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0027-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0028-libmultipath-improve-checks-for-set_str.patch
  - Add 0029-libmultipath-deprecate-file-and-directory-config-opt.patch
  - Add 0030-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0031-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0032-libmultipath-don-t-return-error-on-invalid-values.patch
    * The above 9 patches fix bz #2017969
  - Add 0033-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2017979
  - Add 0034-multipath-fix-exit-status-of-multipath-T.patch
  - Resolves: bz #2017969, #2017979


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-4
changelog:
  - Add 0035-RH-mpathconf-fix-setting-property_blacklist.patch
  - Add 0036-libmultipath-fix-disassemble-status-for-historical-s.patch
    * Fixes bz #2042032
  - Add 0037-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0038-multipathd-trigger-udev-change-on-path-addition.patch
    * Fixes bz #2028835
  - Resolves: bz #2028835, #2042032


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-5
changelog:
  - Add 0039-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
    * Fixes bz #2050421
  - Add 0040-RH-add-support-to-mpathconf-for-setting-recheck_wwid.patch
    * Fixes bz #2039749
  - Resolves: bz #2039749, #2050421


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-6
changelog:
  - Add 0041-multipathd-handle-fpin-events.patch
  - Add 0042-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
    * Add "marginal_pathgroups fpin" for responding to PFIN-Li events
    * Fixes bz #2053642
  - Modify tests/restate_module
    * Always offline the path with the lowest priority
    * Fixes bz #2052633
  - Resolves: bz #2052633, #2053642


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-9
changelog:
  - Add 0045-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2084356
  - Add 0046-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2084358
  - Add 0047-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0048-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0049-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0050-libmultipath-make-protocol_name-global.patch
  - Add 0051-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0052-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0053-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0054-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0055-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0056-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement the feature from bz #2084365
  - Add 0057-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2084357
  Resolves: bz #2084365, #2084357, #2084358, #2084365


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-11
changelog:
  - Add 0059-multipathd-Add-missing-ctype-include.patch
  - Add 0060-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119896


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-13
changelog:
  - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2125357


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-14
changelog:
  - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133999
  - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133989
  - Resolves: bz #2133989, #2133999


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-15
changelog:
  - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2141860
  - Add 0068-libmultipath-cleanup-remove_feature.patch
  - Add 0069-libmultipath-cleanup-add_feature.patch
  - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2033080
  - Resolves: bz #2033080, #2141860


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-17
changelog:
  - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2145225


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-5
changelog:
  - Add 0018-multipath.conf-fix-typo-in-ghost_delay-description.patch
  - Add 0019-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1982613
  - Add 0020-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1982615
  - Add 0021-libmultipath-deal-with-dynamic-PTHREAD_STACK_MIN.patch
    * Fixes bz #1984921
  - Resolves: bz #1982613, #1982615, #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-6
changelog:
  - Add 0022-multipathd-cli_handlers-cleanup-setting-reply-length.patch
    * Found by corosync
  - Related: bz #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-1
changelog:
  - Update Source to upstream version 0.8.7 plus upstream staged commits
    * Previous patches 0011-0016 & 0018-0022 are included in the source tarball
    * Fixes bz#2017592
  - Rename files
    * Previous patches 0001-0010 are now patches 0013-0022
  - Modify 0018-RH-add-mpathconf.patch
    * merged with previous patch 0017
  - Add 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch
    * Fixes bz#1984303
  - Fix multipath_conf_syntax test to work with bz #1984303
  - Resolves: bz #1984303, #2017592


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-2
changelog:
  - Modify 0017-RH-use-rpm-optflags-if-present.patch
    * use RPM_LF_FLAGS
  - Modify 0018-RH-add-mpathconf.patch
    * update default config to match multipath changes
  - Modify 0022-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
    * fix cmocka vpd tests
  - Rename 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch to
           0023-libmultipath-add-section-name-to-invalid-keyword-out.patch
  - Resolves: bz#2017592


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0
  - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
  - Keep reason when package is removed (RhBug:1921063)
  - Improve mechanism for application of security filters (RhBug:1918475)
  - [doc] Add description for new API
  - [API] Add new method for reset of security filters
  - [doc] Improve documentation for Hotfix repositories
  - [doc] fix: "makecache" command downloads only enabled repositories
  - Use libdnf.utils.checksum_{check,value}
  - [doc] Add info that maximum parallel downloads is 20
  - Increase loglevel in case of invalid config options
  - [doc] installonly_limit documentation follows behavior
  - Prevent traceback (catch ValueError) if pkg is from cmdline
  - Add documentation for config option sslverifystatus (RhBug:1814383)
  - Check for specific key string when verifing signatures (RhBug:1915990)
  - Use rpmkeys binary to verify package signature (RhBug:1915990)
  - Bugs fixed (RhBug:1916783)
  - Preserve file mode during log rotation (RhBug:1910084)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-1
changelog:
  - Update to 4.10.0
  - Do not assume that a remote rpm is complete if present
  - Use positive percentage for "Failed delta RPMs" message
  - Remove redundant new line in Groups output
  - Format empty group names outputs to <name-unset>
  - [doc] Document default colors
  - Use rpmkeys alone to verify signature
  - Add dnf.error message to explain rpm.error traceback when package not found after resolving a transaction (RhBug:1815327,1887293,1909845)
  - [API] Add method "set_or_append_opt_value" to BaseConfig (RhBug:1967925)
  - Add aliases for commands: info, updateinfo, provides (RhBug:1938333)
  - Add report about demodularized rpms into module info (RhBug:1805260)
  - Remove DNSSEC errors on COPR group email keys
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies (RhBug:1699672)
  - Add support for excluding packages to be installed as weak dependencies (RhBug:1699672)
  - Add fail_fast parameter to download_payloads methods for use in reposync
  - Acquire all relevant locks during "dnf clean"
  - API: Raise CompsError when group/env not found in install_group and install_environment (RhBug:1947958)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-2
changelog:
  - Respect cacheonly in python dnf API (RhBug:2026849)
  - [doc] Improve description of multilib_policy=all (RhBug:1996681,1995630)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-3
changelog:
  - Don't recommend python3-unbound (RhBug:1947925)
  - Recommend rpm-plugin-systemd-inhibit only if systemd (RhBug:1947924)
  - Don't recommend /usr/bin/sqlite3 for bash-completion (RhBug:1947924)


author: EL Errata <el-errata_ww@oracle.com> - 4.10.0-5.0.1
changelog:
  - Fixed python stack trace with updateinfo list cves command [Orabug: 32749660]
  - Replaced upstream bugzilla reporting reference. [Orabug: 32829849]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.12.0-1
changelog:
  - Allow destdir option with modulesync command
  - Add documentation for query api flags (RhBug:2035577)
  - Fix swap command to work with local rpm files correctly (RhBug:2036434)
  - Fix regression in verifying signatures using rpmkeys
  - Fix decompression of groups.xml (RhBug:2030255)
  - Fix history undo on a Reason Change (RhBug:2010259,2053014)
  - Remove /usr/bin from sys.path to avoid accidentally importing garbage
  - Fix python3.11 build: remove deprecated, update traceback regex
  - fix dnf mark error when history sqlite missing
  - [doc] clarify effect of --enablerepo and --disablerepo options (RhBug:2031414)
  - [doc] default values for module_obsoletes and module_stream_switch (RhBug: 2051846)
  - dnf.conf: hint users where to find more info about defaults and other options
  - Fix unittests that relied on checksum being at the end of solvfiles
  - completion: remove unnecessary echo
  - Fix remove when no repos are enabled (RhBug:2064341)
  - Add loongarch support for dnf
  - Add spaces between words to fix typos (RhBug:2077296)
  - [doc] Improve "proxy" configuration option documentation (RhBug:2072332)
  - Fix download errors handling in non-english locales (RhBug:2024527)


author: EL Errata <el-errata_ww@oracle.com> - 4.12.0-4.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Fixed python stack trace with updateinfo list cves command [Orabug: 32749660]
  - Replaced upstream bugzilla reporting reference. [Orabug: 32829849]


author: Lukas Hrazky <lhrazky@redhat.com> - 4.14.0-1
changelog:
  - Update to 4.14.0
  - Add doc related to --destdir and --downloadonly options (RhBug:2100811)
  - Fix broken dependencies error reporting (RhBug:2088422)
  - Add support for group upgrade rollback (RhBug:2016070)
  - Expose plugin unload method to API (RhBug:2047251)
  - Fix upgrade from file to noarch pkg (RhBug:2006018)
  - Allow passing plugin parameters with dashes in names (RhBug:1980712)
  - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421)
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)
  - doc: Describe how gpg keys are stored for `repo_ggpcheck` (RhBug:2020678)
  - bash-completion: use sqlite cache when available


author: Nicola Sella <nsella@redhat.com> - 4.14.0-3
changelog:
  - Move system-upgrade plugin to core (RhBug:2131288)
  - offline-upgrade: add support for security filters (RhBug:1939975,2139326)
  - Fix plugins unit tests + unload plugins upon their deletion


author: Nicola Sella <nsella@redhat.com> - 4.0.19-1
changelog:
  - Update to 4.0.19
  - copr: allow only 2 arguments with copr enable command
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - Add --gpgcheck option to reposync (RhBug:1856818) (RhBug:1856818)
  - Re-introduce yum-groups-manager functionality (RhBug:1826016)
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1
changelog:
  - Update to 4.0.21
  - Removed dependency on dnf.yum.misc.Checksum class (RhBug:1935465)
  - Add missing command line option to documentation
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Bugs fixed (RhBug:1914827,1916782)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-1
changelog:
  - Update to 4.0.24
  - [repomanage] Allow running only with metadata
  - [repomanage] Enhance documentation (RhBug:1898293)
  - [versionlock] Locking obsoleted package does not make the obsoleter unavailable (RhBug:1957280)
  - [versionlock] Work correctly with packages with minorbump part of release (RhBug:1961217)
  - [leaves] Show strongly connected components
  - [needs-restarting] Fix wrong boot time (RhBug:1960437)
  - [playground] Disable playground command, since it doesn't work
  - [copr] on CentOS Stream, enable centos stream chroot instead of not epel 8 (RhBug:1994154)
  - [copr] Avoid using deprecated function distro.linux_distribution() (RhBug:2011550)
  - [copr] don't traceback on empty lines in /etc/os-release


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-2
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2029864)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2029871)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.1.0-1
changelog:
  - Add a new subpackage with modulesync command. The command downloads packages from modules and/or creates a repository with modular data. (RhBug:1868047)
  - [repoclosure] Print counts of missing dependencies
  - [reposync] Do not stop downloading packages on the first error (RhBug:2009894)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - [config-manager] Update documentation (RhBug:2075366)
  - [builddep] Warning when using macros with source rpms (RhBug:2077820)
  - [repomanage] Use modules only from repo they are handling (RhBug:2072441)
  - Skip all non rpm transaction items for transaction_action plugins (rhbug:2023652)
  - feat(repomanage): Add new option --oldonly


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 4.3.0-5.0.1
changelog:
  - Update upstream references [Orabug: 35378252]
  - Update upstream references [Orabug: 35366472]
  - repoclosure - raise exception for typos in repository name [Orabug: 33074226]


author: Lukas Nykryn <lnykryn@redhat.com> - 055-6.git20210709
changelog:
  - fix(network-manager): don't pull in systemd-udev-settle
  - fix(dracut.sh): handle '-i' option to include files beginning with '.'
  - fix(dracut.sh): handle symlinks appropriately while using '-i' option
  - fix(squash): create relative symlinks
  - feat(squash): install umount util


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 055-38.git20220322
changelog:
  - revert(lvm): remove snapshot feature
  - revert(lvm): remove lvmetad config changes
  - revert(lvm): remove 69-dm-lvm-metad.rules
  - fix(lvm): replace --partial option
  - feat(lvm): update lvm command options
  - feat(lvm): use generated filter when none is set
  - feat(lvm): only run lvchange for LV that is seen on devices
  - fix(lvm): restore setting LVM_MD_PV_ACTIVATED


author: Pavel Valena <pvalena@redhat.com> - 055-40.git20220404
changelog:
  - fix(kernel-modules): detect block device's hardware driver
  - fix(dracut-initramfs-restore.sh): check if SELINUXTYPE is set


author: Pavel Valena <pvalena@redhat.com> - 055-45.git20220404
changelog:
  - fix(bluetooth): nullglob should not be needed
  - fix(dracut-install): do not fail when SOURCE is optional and
  - fix(test): nullglob should not be needed
  - fix(10i18n): stop leaking shell options
  - docs: do not mention nullglob in cases where it's not needed


author: EL Errata <el-errata_ww@oracle.com> - 055-45.git20220404.0.1
changelog:
  - network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Alex Burmashev <alexander.burmashev@oracle.com> - 057-21.git20230214.0.2
changelog:
  - fix(systemd): add missing modprobe@.service [Orabug: 35267570]
  - Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.183-1
changelog:
  - Upgrade to upstream 0.183
    - debuginfod: New thread-busy metric and more detailed error metrics.
      New --fdcache-mintmp and tracking of filesystem freespace.
    - debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h can
      be used to dlopen the libdebuginfod.so library.
      New function debuginfod_set_verbose_fd and DEBUGINFOD_VERBOSE
      environment variable.
    - config: profile.sh and profile.csh won't export DEBUGINFOD_URLS
      unless configured --enable-debuginfod-urls[=URLS]
    - elflint, readelf: Recognize SHF_GNU_RETAIN.
      Handle SHT_X86_64_UNWIND as valid relocation target type.


author: Mark Wielaard <mjw@redhat.com> - 0.185-1
changelog:
  - Upgrade to upstream 0.185
    - debuginfod-client: Simplify curl handle reuse so downloads which
                         return an error are retried.
    - elfcompress: Always exit with code 0 when the operation succeeds
                   (even when nothing was done). On error the exit code
                   is now always 1.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.9-1.1
changelog:
  - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
  - Resolves: CVE-2022-43680


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: EL Errata <el-errata_ww@oracle.com> - 1.0.0-4.0.1
changelog:
  - Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI
    [Orabug: 30257573]
  - discard empty RH-Satellite-6.xml [Orabug: 30328734]
  - Remove capsule file as well, since it references removed config [Orabug: 33513329]


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: EL Errata <el-errata_ww@oracle.com> - 1.7.4-2.0.1
changelog:
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)
  - Update SBAT data to include Oracle [Oracle: 33072886]


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: EL Errata <el-errata_ww@oracle.com> - 1.7.9-1.0.1
changelog:
  - Update signing certificate [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)
  - Update SBAT data to include Oracle [Oracle: 33072886]


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 1.8.10-2.0.1
changelog:
  - Drop pesign.service restart in postun [Orabug: 34760075]
  - Update signing certificate [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)
  - Update SBAT data to include Oracle [Oracle: 33072886]


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - add support for relocation of the PCH data (pch/71934, #2044917)
  - remove 30_threads/future/members/poll.cc (#2050090)
  - avoid overly-greedy match in dejagnu regexp (#2050089)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: Qing Zhao <qing.zhao@oracle.com> 11.2.1-9.4.0.1
changelog:
  - Merge all Oracle patches:
  - Add complex divide improvement (11.2.1-2.2.0.1)
    backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
  - Add CTF/BTF support (11.2.1-2.2.0.1)
  - Add -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.1)
  - Add more fixes for -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.2)
  - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
    PR104550 and PR102276. (11.2.1-2.2.0.3)
  - NOTE: adjust gcc12-ctf-pre-1-write_symbols-to-support-bitmasks.patch
    for c-family/c-pch.c for 11.2.1-9.4
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 11.2.1-9.4.0.2
changelog:
  - Add support for -mharden-sls on X86 from GCC11
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Indu Bhagat <indu.bhagat@oracle.com> 11.3.1-2.1.0.2
changelog:
  - Fix Orabug - 35137216 Backport fix for upstream PR debug/105089 to OL9 GCC
    - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
      using the following upstream commits:
      613a6fca75156aadc2e79d78a23e547d39762c1e,
      d0b00e74bf59c73b79471bbe9de19373b8661e20, and
      d634c5d7c78c6ec0fa39d96984460475564519c8
    Reviewed-by: Qing Zhao <qing.zhao@oracle.com>
  - Fix Orabug ENH 35135720 - Add support for ampere1 and ampere1a processors from GCC11
    to OL9 gcc
    - Add support for ampere1 and ampere1a processors from GCC11 (Qing Zhao)
      cb7b6c721e319e562480c2ee9fa04fc4b1c25a2d
      f6daf95983de84132302e0b6182633e135b14b67
      531731c449d175c19a5c5a6e264a1bfe36f6c57e
      a692e3837ab4fb800f1b41b3a7e1f407689eeb7e (aarch64: Define __ARM_FEATURE_RCPC)
    Reviewed-by: Indu Bhagat <indu.bhagat@oracle.com>


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Qing Zhao <qing.zhao@oracle.com> 11.3.1-4.3.0.1
changelog:
  - Merge all Oracle patches:
  - Add complex divide improvement (11.2.1-2.2.0.1)
    backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
  - Add CTF/BTF support (11.2.1-2.2.0.1)
  - Add -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.1)
  - Add more fixes for -ftrivial-auto-var-init support from GCC12 (11.2.1-2.2.0.2)
  - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
    PR104550 and PR102276. (11.2.1-2.2.0.3)
  - NOTE: adjust gcc12-ctf-pre-1-write_symbols-to-support-bitmasks.patch
    for c-family/c-pch.c for 11.2.1-9.4
  - Fix Orabug - 35137216 Backport fix for upstream PR debug/105089 to OL9 GCC
    (11.3.1-2.1.0.2)
    - Backport PR debug/105089 CTF for a defined extern variable is ambiguous
      using the following upstream commits:
      613a6fca75156aadc2e79d78a23e547d39762c1e,
      d0b00e74bf59c73b79471bbe9de19373b8661e20, and
      d634c5d7c78c6ec0fa39d96984460475564519c8
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Florian Weimer <fweimer@redhat.com> - 2.34-24
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 008003dc6e83439c5e04a744b7fd8197df19096e:
  - tst-socket-timestamp-compat.c: Check __TIMESIZE [BZ #28837]
  - Linux: Only generate 64 bit timestamps for 64 bit time_t recvmsg/recvmmsg
  - linux: Fix ancillary 64-bit time timestamp conversion (BZ #28349, BZ#28350)
  - support: Add support_socket_so_timestamp_time64


author: Florian Weimer <fweimer@redhat.com> - 2.34-25
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6eaf10cbb78d22eae7999d9de55f6b93999e0860:
  - socket: Do not use AF_NETLINK in __opensock
  - hurd if_index: Explicitly use AF_INET for if index discovery
  - Linux: Simplify __opensock and fix race condition [BZ #28353]
  - linux: __get_nprocs_sched: do not feed CPU_COUNT_S with garbage [BZ #28850]


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1.2
changelog:
  - Merge Oracle patches with errata patches
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Florian Weimer <fweimer@redhat.com> - 2.34-21
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 3438bbca90895d32825a52e31a77dc44d273c1c1:
  - Linux: Detect user namespace support in io/tst-getcwd-smallbuff
  - realpath: Avoid overwriting preexisting error
  - CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1
  - tst-realpath-toolong: Fix hurd build
  - CVE-2021-3998: realpath: ENAMETOOLONG for result larger than PATH_MAX
  - stdlib: Fix formatting of tests list in Makefile
  - stdlib: Sort tests in Makefile
  - support: Add helpers to create paths longer than PATH_MAX
  - powerpc: Fix unrecognized instruction errors with recent binutils
  - x86: use default cache size if it cannot be determined [BZ #28784]
  - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)
  - sunrpc: Test case for clnt_create "unix" buffer overflow (bug 22542)
  - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix" (bug 22542)
  - socket: Add the __sockaddr_un_set function
  - Disable debuginfod in printer tests [BZ #28757]
  - Update syscall lists for Linux 5.16


author: Florian Weimer <fweimer@redhat.com> - 2.34-22
changelog:
  - Sync with upstream branch release/2.34/master,
    commit aa601d024424c40ae9a69b0c4e394a70ea0570c8:
  - x86: Use CHECK_FEATURE_PRESENT to check HLE [BZ #27398]
  - x86: Filter out more Intel CPUs for TSX [BZ #27398]
  - Fix glibc 2.34 ABI omission (missing GLIBC_2.34 in dynamic loader)
  - x86: Fix __wcsncmp_evex in strcmp-evex.S [BZ# 28755]
  - x86: Fix __wcsncmp_avx2 in strcmp-avx2.S [BZ# 28755]


author: Carlos O'Donell <carlos@redhat.com> - 2.34-32
changelog:
  - Sync with upstream branch release/2.34/master,
    commit c66c92181ddbd82306537a608e8c0282587131de:
  - posix/glob.c: update from gnulib (BZ#25659)
  - linux: Fix fchmodat with AT_SYMLINK_NOFOLLOW for 64 bit time_t (BZ#29097)


author: Florian Weimer <fweimer@redhat.com> - 2.34-33
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 91c2e6c3db44297bf4cb3a2e3c40236c5b6a0b23:
  - dlfcn: Implement the RTLD_DI_PHDR request type for dlinfo
  - manual: Document the dlinfo function
  - x86: Fix fallback for wcsncmp_avx2 in strcmp-avx2.S [BZ #28896]
  - x86: Fix bug in strncmp-evex and strncmp-avx2 [BZ #28895]
  - x86: Set .text section in memset-vec-unaligned-erms
  - x86-64: Optimize bzero
  - x86: Remove SSSE3 instruction for broadcast in memset.S (SSE2 Only)
  - x86: Improve vec generation in memset-vec-unaligned-erms.S
  - x86-64: Fix strcmp-evex.S
  - x86-64: Fix strcmp-avx2.S
  - x86: Optimize strcmp-evex.S
  - x86: Optimize strcmp-avx2.S
  - manual: Clarify that abbreviations of long options are allowed
  - Add HWCAP2_AFP, HWCAP2_RPRES from Linux 5.17 to AArch64 bits/hwcap.h
  - aarch64: Add HWCAP2_ECV from Linux 5.16
  - Add SOL_MPTCP, SOL_MCTP from Linux 5.16 to bits/socket.h
  - Update kernel version to 5.17 in tst-mman-consts.py
  - Update kernel version to 5.16 in tst-mman-consts.py
  - Update syscall lists for Linux 5.17
  - Add ARPHRD_CAN, ARPHRD_MCTP to net/if_arp.h
  - Update kernel version to 5.15 in tst-mman-consts.py
  - Add PF_MCTP, AF_MCTP from Linux 5.15 to bits/socket.h


author: Florian Weimer <fweimer@redhat.com> - 2.34-34
changelog:
  - Sync with upstream branch release/2.34/master,
    commit ede8d94d154157d269b18f3601440ac576c1f96a:
  - csu: Implement and use _dl_early_allocate during static startup
  - Linux: Introduce __brk_call for invoking the brk system call
  - Linux: Implement a useful version of _startup_fatal
  - ia64: Always define IA64_USE_NEW_STUB as a flag macro
  - Linux: Define MMAP_CALL_INTERNAL
  - i386: Honor I386_USE_SYSENTER for 6-argument Linux system calls
  - i386: Remove OPTIMIZE_FOR_GCC_5 from Linux libc-do-syscall.S
  - elf: Remove __libc_init_secure
  - Linux: Consolidate auxiliary vector parsing (redo)
  - Linux: Include <dl-auxv.h> in dl-sysdep.c only for SHARED
  - Revert "Linux: Consolidate auxiliary vector parsing"
  - Linux: Consolidate auxiliary vector parsing
  - Linux: Assume that NEED_DL_SYSINFO_DSO is always defined
  - Linux: Remove DL_FIND_ARG_COMPONENTS
  - Linux: Remove HAVE_AUX_SECURE, HAVE_AUX_XID, HAVE_AUX_PAGESIZE
  - elf: Merge dl-sysdep.c into the Linux version
  - elf: Remove unused NEED_DL_BASE_ADDR and _dl_base_addr
  - x86: Optimize {str|wcs}rchr-evex
  - x86: Optimize {str|wcs}rchr-avx2
  - x86: Optimize {str|wcs}rchr-sse2
  - x86: Cleanup page cross code in memcmp-avx2-movbe.S
  - x86: Remove memcmp-sse4.S
  - x86: Small improvements for wcslen
  - x86: Remove AVX str{n}casecmp
  - x86: Add EVEX optimized str{n}casecmp
  - x86: Add AVX2 optimized str{n}casecmp
  - x86: Optimize str{n}casecmp TOLOWER logic in strcmp-sse42.S
  - x86: Optimize str{n}casecmp TOLOWER logic in strcmp.S
  - x86: Remove strspn-sse2.S and use the generic implementation
  - x86: Remove strpbrk-sse2.S and use the generic implementation
  - x86: Remove strcspn-sse2.S and use the generic implementation
  - x86: Optimize strspn in strspn-c.c
  - x86: Optimize strcspn and strpbrk in strcspn-c.c
  - x86: Code cleanup in strchr-evex and comment justifying branch
  - x86: Code cleanup in strchr-avx2 and comment justifying branch
  - x86_64: Remove bcopy optimizations
  - x86-64: Remove bzero weak alias in SS2 memset
  - x86_64/multiarch: Sort sysdep_routines and put one entry per line
  - x86: Improve L to support L(XXX_SYMBOL (YYY, ZZZ))
  - fortify: Ensure that __glibc_fortify condition is a constant [BZ #29141]


author: Arjun Shankar <arjun@redhat.com> - 2.34-35
changelog:
  - Sync with upstream branch release/2.34/master,
    commit ff450cdbdee0b8cb6b9d653d6d2fa892de29be31:
  - Fix deadlock when pthread_atfork handler calls pthread_atfork or dlclose
  - x86: Fallback {str|wcs}cmp RTM in the ncmp overflow case [BZ #29127]
  - string.h: fix __fortified_attr_access macro call [BZ #29162]
  - linux: Add a getauxval test [BZ #23293]
  - rtld: Use generic argv adjustment in ld.so [BZ #23293]
  - S390: Enable static PIE


author: Florian Weimer <fweimer@redhat.com> - 2.34-36
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 4c92a1041257c0155c6aa7a182fe5f78e477b0e6:
  - powerpc: Fix VSX register number on __strncpy_power9 [BZ #29197]
  - socket: Fix mistyped define statement in socket/sys/socket.h (BZ #29225)
  - iconv: Use 64 bit stat for gconv_parseconfdir (BZ# 29213)
  - catgets: Use 64 bit stat for __open_catalog (BZ# 29211)
  - inet: Use 64 bit stat for ruserpass (BZ# 29210)
  - socket: Use 64 bit stat for isfdtype (BZ# 29209)
  - posix: Use 64 bit stat for fpathconf (_PC_ASYNC_IO) (BZ# 29208)
  - posix: Use 64 bit stat for posix_fallocate fallback (BZ# 29207)
  - misc: Use 64 bit stat for getusershell (BZ# 29204)
  - misc: Use 64 bit stat for daemon (BZ# 29203)


author: Arjun Shankar <arjun@redhat.com> - 2.34-38
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 94ab2088c37d8e4285354af120b7ed6b887b9e53:
  - nss: handle stat failure in check_reload_and_get (BZ #28752)
  - nss: add assert to DB_LOOKUP_FCT (BZ #28752)
  - nios2: Remove _dl_skip_args usage (BZ# 29187)
  - hppa: Remove _dl_skip_args usage (BZ# 29165)
  - nptl: Fix __libc_cleanup_pop_restore asynchronous restore (BZ#29214)


author: Arjun Shankar <arjun@redhat.com> - 2.34-40
changelog:
  - Sync with upstream branch release/2.34/master,
    commit b2f32e746492615a6eb3e66fac1e766e32e8deb1:
  - malloc: Simplify implementation of __malloc_assert
  - Update syscall-names.list for Linux 5.18
  - x86: Add missing IS_IN (libc) check to strncmp-sse4_2.S
  - x86: Move mem{p}{mov|cpy}_{chk_}erms to its own file
  - x86: Move and slightly improve memset_erms
  - x86: Add definition for __wmemset_chk AVX2 RTM in ifunc impl list
  - x86: Put wcs{n}len-sse4.1 in the sse4.1 text section
  - x86: Align entry for memrchr to 64-bytes.
  - x86: Add BMI1/BMI2 checks for ISA_V3 check
  - x86: Cleanup bounds checking in large memcpy case
  - x86: Add bounds `x86_non_temporal_threshold`
  - x86: Add sse42 implementation to strcmp's ifunc
  - x86: Fix misordered logic for setting `rep_movsb_stop_threshold`
  - x86: Align varshift table to 32-bytes
  - x86: ZERO_UPPER_VEC_REGISTERS_RETURN_XTEST expect no transactions
  - x86: Shrink code size of memchr-evex.S
  - x86: Shrink code size of memchr-avx2.S
  - x86: Optimize memrchr-avx2.S
  - x86: Optimize memrchr-evex.S
  - x86: Optimize memrchr-sse2.S
  - x86: Add COND_VZEROUPPER that can replace vzeroupper if no `ret`
  - x86: Create header for VEC classes in x86 strings library
  - x86_64: Add strstr function with 512-bit EVEX
  - x86-64: Ignore r_addend for R_X86_64_GLOB_DAT/R_X86_64_JUMP_SLOT
  - x86_64: Implement evex512 version of strlen, strnlen, wcslen and wcsnlen
  - x86_64: Remove bzero optimization
  - x86_64: Remove end of line trailing spaces
  - nptl: Fix ___pthread_unregister_cancel_restore asynchronous restore
  - linux: Fix mq_timereceive check for 32 bit fallback code (BZ 29304)


author: Arjun Shankar <arjun@redhat.com> - 2.34-53
changelog:
  - Sync with upstream branch release/2.34/master,
    commit a4217408a3d6050a7f42ac23adb6ac7218dca85f:
  - Apply asm redirections in syslog.h before first use [BZ #27087]
  - _Static_assert needs two arguments for compatibility with GCC before 9


author: Florian Weimer <fweimer@redhat.com> - 2.34-57
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6484ae5b8c4d4314f748e4d3c9a9baa5385e57c5
  - malloc: Fix -Wuse-after-free warning in tst-mallocalign1 [BZ #26779]
  - s_sincosf.h: Change pio4 type to float [BZ #28713]
  - math: Properly cast X_TLOSS to float [BZ #28713]
  - Regenerate ulps on x86_64 with GCC 12
  - Avoid -Wuse-after-free in tests [BZ #26779].
  - Fix build of nptl/tst-thread_local1.cc with GCC 12
  - Fix stdio-common tests for GCC 12 -Waddress
  - Fix stdlib/tst-setcontext.c for GCC 12 -Warray-compare
  - resolv: Avoid GCC 12 false positive warning [BZ #28439].
  - intl: Avoid -Wuse-after-free [BZ #26779]
  - elf: Drop elf/tls-macros.h in favor of __thread and tls_model attributes [BZ #28152] [BZ #28205]
  - time: Set daylight to 1 for matching DST/offset change (RHBZ#2155352)
  - elf/tst-tlsopt-powerpc fails when compiled with -mcpu=power10 (BZ# 29776)
  - time: Use 64 bit time on tzfile
  - nscd: Use 64 bit time_t on libc nscd routines (BZ# 29402)
  - nis: Build libnsl with 64 bit time_t
  - Use LFS and 64 bit time for installed programs (BZ #15333)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
changelog:
  - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
  - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
    can be used for stack allocation.
  - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
    0, glibc will madvise the kernel not to use allow hugepages for stack
    allocations.
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-4
changelog:
  - Specify FIPS140-3 module name and version
  - fips: allow a few more primes in RSA key generation
  - fips: tighten PKCS#12 algorithm checks
  - Correct return value of KTLS stub API


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-7
changelog:
  - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
  - Ensure allowlisting API is called before priority string is constructed (#2042532)
  - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-9
changelog:
  - Stop using typeof keyword for tss2 function prototypes (#2057490)
  - Ensure allowlist API is called before priority string construction (#1975421)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-5
changelog:
  - Block DES-CBC usage in decrypting PKCS#12 bag under FIPS (#2115314)
  - sysrng: reseed source DRBG for prediction resistance


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-6
changelog:
  - Mark RSA SigVer operation approved for known modulus sizes (#2119770)
  - accelerated: clear AVX bits if it cannot be queried through XSAVE


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-12
changelog:
  - fips: mark PBKDF2 with short key and output sizes non-approved
  - fips: only mark HMAC as approved in PBKDF2
  - fips: mark gnutls_key_generate with short key sizes non-approved
  - fips: fix checking on hash algorithm used in ECDSA
  - fips: preserve operation context around FIPS selftests API


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-3
changelog:
  - Limit input size for AES-GCM according to SP800-38D (#2108635)
  - Do not treat GPG verification errors as fatal
  - Remove gnutls-3.7.6-libgnutlsxx-const.patch


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-13
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2144535)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2144537)


author: Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-14
changelog:
  - fips: remove library path checking from FIPS integrity check (#2149638)
  - fips: rename hmac file to its previous name (#2149640)


author: Zoltan Fridrich <zfridric@redhat.com> - 3.7.6-13
changelog:
  - fips: make XTS key check failure not fatal (#2130971)
  - enable source archive verification again (#2127094)
  - clear server's session ticket indication at rehandshake (#2136072)
  - crypto-api: add block cipher API with automatic padding (#2084161)
  - fips: remove library path checking from FIPS integrity check (#2140908)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.06-27.0.1
changelog:
  - Update signing certificate [JIRA: OLDIS-16371]
  - fix SBAT data [JIRA: OLDIS-16371]
  - Update requires [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.06-27.0.2
changelog:
  - Update bug url [Orabug: 34202300]
  - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.06-27.0.3
changelog:
  - Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697,
         CVE-2022-28733, CVE-2022-28734, CVE-2022-28735 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation


author: Robbie Harwood <rharwood@redhat.com> - 2.06-27.el9_0.7
changelog:
  - CVE fixes for 2022-06-07
  - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  - Resolves: #2089810


author: EL Errata <el-errata_ww@oracle.com> - 2.06-27.0.5.el9_0.7
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation
  - Update bug url [Orabug: 34202300]
  - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
  - Update signing certificate [JIRA: OLDIS-16371]
  - fix SBAT data [JIRA: OLDIS-16371]
  - Update requires [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Alex Burmashev <alexander.burmashev@oracle.com> 2.06-46.0.1
changelog:
  - Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation
  - Update bug url [Orabug: 34202300]
  - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
  - Update signing certificate [JIRA: OLDIS-16371]
  - fix SBAT data [JIRA: OLDIS-16371]
  - Update requires [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: EL Errata <el-errata_ww@oracle.com> - 2.06-46.0.4.el9_1.3
changelog:
  - Bump SBAT metadata for grub to 3 [Orabug: 34872719]
  - Fix CVE-2022-3775 [Orabug: 34871953]
  - Enable signing for aarch64 EFI
  - Fix signing certificate names
  - Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986]
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update provided certificate version to 202204 [JIRA: OLDIS-16371]
  - Various coverity fixes [JIRA: OLDIS-16371]
  - bump SBAT generation
  - Update bug url [Orabug: 34202300]
  - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
  - Update signing certificate [JIRA: OLDIS-16371]
  - fix SBAT data [JIRA: OLDIS-16371]
  - Update requires [JIRA: OLDIS-16371]
  - Rebuild for SecureBoot signatures [Orabug: 33801813]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Tom Stellard <tstellar@redhat.com> - 8.40-50
changelog:
  - Use make_build macro instead of plain make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: EL Errata <el-errata_ww@oracle.com> - 8.40-55.0.1
changelog:
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)


author: Mark Will <mark.will@oracle.com> - 8.40-63.0.1
changelog:
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)
  - Do not add /boot twice for btrfs subvolumes [Orabug: 34380742]


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-2.1.el9
changelog:
  - vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2059427]
  - vdpa: Support reading device features (Andrea Claudi) [2059427]
  - vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2059427]
  - vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2059427]
  - vdpa: Remove unsupported command line option (Andrea Claudi) [2059427]
  - vdpa: Enable user to set mtu of the vdpa device (Andrea Claudi) [2059427]
  - vdpa: Enable user to set mac address of vdpa device (Andrea Claudi) [2059427]
  - vdpa: Enable user to query vdpa device config layout (Andrea Claudi) [2059427]
  - uapi: update vdpa.h (Andrea Claudi) [2059427]
  - vdpa: align uapi headers (Andrea Claudi) [2059427]
  - Update kernel headers and import virtio_net (Andrea Claudi) [2059427]


author: EL Errata <el-errata_ww@oracle.com> - 5.15.0-2.2.0.1
changelog:
  - Backport selected rdma patches needed for vDPA support [Orabug: 32719473]
  - rdma: Add SRQ resource tracking information [Orabug: 32719473]
  - rdma: Add context resource tracking information [Orabug: 32719473]
  - rdma: Update uapi headers [Orabug: 32719473]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.7-19
changelog:
  - Build iptables-services on C9S only
  - Use systemd_ordering in nft-services, too
  - Drop compat package, nft-services serves well for that purpose
  - Make legacy unconditionally provide iptables, it's not built on RHEL


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Tao Liu <ltao@redhat.com> - 2:1.8.0-5
changelog:
  - Document migrateval. Resolves: rhbz2071959
  - Confine irqbalance to systems where it is useful. Resolves: rhbz2063930
  - Wrong EnvironmentFile in irqbalance.service. Resolves: rhbz2058509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Darren Archibald <darren.archibald@oracle.com> - 6.2.1.4-2.git2a8f9d8.0.1
changelog:
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: EL Errata <el-errata_ww@oracle.com> - 6.2.1.4-3.git2a8f9d8.0.1
changelog:
  - Allow systemd-remount-fs complete before iscsi-init.service [Orabug: 34325406]
  - Allow iscsi-init.service to start after local-fs.target [Orabug: 33930979]
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.20.git6c9e0ed5.el9
changelog:
  - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode
  - 92624e57af69 linux-firmware: Update AMD cpu microcode


author: Jack Vogel <jack.vogel@oracle.com> - 20230516-999.22.git6c9e0ed5.el9
changelog:
  - Move the README removal, it needs to happen during build (Orabug: 35650021)
  - Resolves "Zenbleed" (Orabug: 35650345) {CVE-2023-20593}


author: Jack Vogel <jack.vogel@oracle.com> - 20230516-999.23.git6c9e0ed5.el9
changelog:
  - Firmware files need to be uncompressed for early kernel load to work
  - Resolves "Zenbleed" (Orabug: 35650345) {CVE-2023-20593}


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Tao Liu <ltao@redhat.com> - 2.0.23-3
changelog:
  - Update eppic to latest upstream snapshot
  - Update crashkernel-howto.txt
  - Remove references to systemd-sysv-convert
  - kdump/ppc64: suppress the error message "Could not find a registered notification tool" from servicelog_notify
  - fadump: improve fadump-howto.txt about remote dump target setup
  - Don't exit 1 from 92-crashkernel.install if zipl is absent (#1993505)
  - Document/kexec-kdump-howto.txt: improve notes for kdump_pre and kdump_post scripts


author: Tao Liu <ltao@redhat.com> - 2.0.23-4
changelog:
  - Set zstd as the default compression method for kdump initrd
  - kdump-lib.sh: Escape '|' for 'failure_action|default' in is_dump_to_rootfs
  - dracut-early-kdump-module-setup.sh: install xargs and kdump-lib-initramfs.sh
  - update crashkernel-howto
  - set up kernel crashkernel for osbuild in kernel hook
  - reset kernel crashkernel for the special case where the kernel is updated right after kexec-tools
  - try to reset kernel crashkernel when kexec-tools updates the default crashkernel value
  - introduce the auto_reset_crashkernel option to kdump.conf
  - rewrite reset_crashkernel to support fadump and to used by RPM scriptlet
  - fix incorrect usage of rpm-ostree to update kernel command line parameters
  - add helper functions to get kernel path by kernel release and the path of current running kernel
  - add helper functions to get dump mode
  - add a helper function to read kernel cmdline parameter from grubby --info
  - provide kdumpctl get-default-crashkernel for kdump_anaconda_addon and RPM scriptlet
  - factor out kdump_get_arch_recommend_crashkernel
  - update default crashkernel value
  - ppc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs


author: Tao Liu <ltao@redhat.com> - 2.0.23-5
changelog:
  - Set zstd as recommented for kexec-tools
  - fix "kdump: Invalid kdump config option auto_reset_crashkernel" error
  - use grep -s to suppress error messages about nonexistent or unreadable files


author: Tao Liu <ltao@redhat.com> - 2.0.23-6
changelog:
  - Revert "Remove trace_buf_size and trace_event from the kernel bootparameters of the kdump kernel"
  - fix broken kdump_get_arch_recommend_size
  - remove the upper bound of 102400T for the range in default crashkernel
  - fix the error of parsing the container environ variable for osbuild
  - mkdumprd (RHEL-only): add nvme module by force
  - Remove dropped patches
  - s390: handle R_390_PLT32DBL reloc entries in machine_apply_elf_rel()
  - spec: add hostname.rpm into Recommends list
  - move variable FENCE_KDUMP_SEND from kdump-lib.sh to kdump-lib-initramfs.sh


author: Tao Liu <ltao@redhat.com> - 2.0.23-7
changelog:
  - fix incorrect usage of _get_all_kernels_from_grubby
  - fix the mistake of swapping function parameters of read_proc_environ_var


author: Tao Liu <ltao@redhat.com> - 2.0.23-9_1
changelog:
  - try to update the crashkernel in GRUB_ETC_DEFAULT after kexec-tools updates the default crashkernel value
  - address the case where there are multiple values for the same kernel arg


author: EL Errata <el-errata_ww@oracle.com> - 2.0.23-9_1.0.1
changelog:
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Added orabug32404661-Avoid-duplicate-ip-single-dhcp-option.patch [Orabug: 32404661]


author: Brian Maly <brian.maly@oracle.com> - 2.0.23-9_1.0.2
changelog:
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.1 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]


author: Tao Liu <ltao@redhat.com> - 2.0.23-10
changelog:
  - try to update the crashkernel in GRUB_ETC_DEFAULT after kexec-tools updates the default crashkernel value
  - address the case where there are multiple values for the same kernel arg
  - s390: add support for --reuse-cmdline
  - use slurp_proc_file() in get_command_line()
  - add slurp_proc_file()
  - s390: use KEXEC_ALL_OPTIONS
  - s390: add variable command line size
  - util_lib/elf_info: harden parsing of printk buffer
  - print error when reading with unsupported compression
  - use cycle detection when parsing the prink log_buf
  - use pointer arithmetics for dump_dmesg
  - add generic cycle detection


author: Tao Liu <ltao@redhat.com> - 2.0.24-1
changelog:
  - Rebase kexec-tools to v2.0.24
  - Rebase makedumpfile to 1.7.1
  - Avoid false-positive mem_section validation with vmlinux


author: Tao Liu <ltao@redhat.com> - 2.0.24-2
changelog:
  - remove the upper bound of default crashkernel value example
  - update fadump-howto
  - update kexec-kdump-howto
  - update crashkernel-howto
  - add man documentation for kdumpctl get-default-crashkernel
  - improve get_recommend_size
  - fix a calculation error in get_system_size


author: Tao Liu <ltao@redhat.com> - 2.0.24-4
changelog:
  - crashkernel: optimize arm64 reserved size if PAGE_SIZE=4k
  - kdump-lib.sh: Check the output of blkid with sed instead of eval


author: John Mcwalters <john.mcwalters@oracle.com> - 2.0.24-5.0.1
changelog:
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.1 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Added orabug32404661-Avoid-duplicate-ip-single-dhcp-option.patch [Orabug: 32404661]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34240246-Update-UEK-reserved-sizes.patch [Orabug: 34240246]
  - Add back kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 22780125]
  - Add back kexec-tools-2.0.17-dracut-module-setup-ip_dhcp-avoid-dup-config.patch [Orabug: 29518713]


author: David Sloboda <david.x.sloboda@oracle.com> - 2.0.25-11.0.1
changelog:
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]


author: Tao Liu <ltao@redhat.com> - 2.0.25-6
changelog:
  - Simplify setup_znet by copying connection profile to initrd
  - Wait for the network to be truly ready before dumping vmcore
  - Address the cases where a NIC has a different name in kdump kernel
  - Reduce kdump memory consumption by only installing needed NIC drivers
  - Reduce kdump memory consumption by not letting NetworkManager manage unneeded network interfaces
  - Set up kdump network by directly copying NM connection profile to initrd
  - Stop dracut 35network-manager from running nm-initrd-generator
  - Apply the timeout configuration of nm-initrd-generator
  - Determine whether IPv4 or IPv6 is needed
  - Add functions to copy NetworkManage connection profiles to the initramfs
  - Fix error for vlan over team network interface


author: Tao Liu <ltao@redhat.com> - 2.0.25-8
changelog:
  - kexec-tools: ppc64: remove rma_top limit
  - kdumpctl: Optimize _find_kernel_path_by_release regex string
  - kdump.conf: use a simple generator script to maintain


author: Tao Liu <ltao@redhat.com> - 2.0.25-9
changelog:
  - Add virtiofs to kdump supported-kdump-targets.txt
  - dracut-module-setup.sh: stop overwriting dracut's trap handler


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-10
changelog:
  - Update supported-kdump-targets.txt
  - dracut-module-setup.sh: skip installing driver for the loopback interface
  - Don't try to update crashkernel when bootloader is not installed
  - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking
  - fadump: use 'zstd' as the default compression method
  - fadump: fix default initrd backup and restore logic
  - fadump: add a kernel install hook to clean up fadump initramfs
  - fadump: avoid status check while starting in fadump mode
  - spec: only install mkfadumprd for ppc
  - fadump: preserve file modification time to help with hardlinking
  - fadump: do not use squash to reduce image size


author: Tao Liu <ltao@redhat.com> - 2.0.25-12
changelog:
  - Reset crashkernel to default value if newly installed kernel has crashkernel=auto
  - Use the correct command to get architecture


author: Tao Liu <ltao@redhat.com> - 2.0.25-13
changelog:
  - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
  - kdump-lib: attempt to fix BOOT_IMAGE detection
  - kdump-lib: change how ostree based systems are detected
  - kdump-lib: clear up references to Atomic/CoreOS


author: EL Errata <el-errata_ww@oracle.com> - 2.0.25-13.0.1
changelog:
  - Update UEK aarch64 reserved sizes for UEK7 kernels [Orabug: 34663083]
  - Correct UEK reserved size for x86_64 [Orabug: 34391412]
  - Update UEK reserved sizes [Orabug: 34240246]
  - fix virt-what related warning with kdumpctl script execution [Orabug: 33790973]
  - fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 34003037]
  - include OL8 patch for sysconfig, its needed on OL9 [Orabug: 33512440]
  - Update makedumpfile to 1.7.2 [Orabug: 34219368]
  - kdump: skip lvm private devices [Orabug: 33822070] [Orabug: 33574003]
  - Added dracut module setup patches [Orabug: 29518713] [Orabug: 22780125]
  - Added orabug30352094-makedumpfile-Mark-mem-usage-option-unsupported-for-a.patch [Orabug: 30352094]
  - Added orabug30822387.kdumpctl-arm64-fast-boot.patch [Orabug: 30822387]
  - Added orabug30832988.kdump.sysconfig.iommu_off.x86_64.aarch64.patch [Orabug: 30832988]
  - Added orabug30928441.kdumpctl.no_timer_check.patch [Orabug: 30928441]
  - Added orabug32127375-kdump.sysconfig.no.double.s.patch [Orabug: 32127375]
  - Added orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug32258986-arm64-support-more-than-one-crash-kernel-regions.patch [Orabug: 32258986]
  - Removed orabug34003037-arm64-crashdump-deduce-paddr-of-_text-based-on-kerne.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-make-phys_offset-signed.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-crashdump-unify-routine-to-get-page_offset.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-read-VA_BITS-from-kcore-for-52-bits-VA-kernel.patch [Orabug: 34003037]
  - Removed orabug34003037-arm64-fix-PAGE_OFFSET-calc-for-flipped-mm.patch [Orabug: 34003037]
  - Removed orabug34003037-kdump-kexec-fix-saving-vmcore-dmesg.txt-failed-on-aa.patch [Orabug: 34003037]
  - Fix formatting for orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Rework orabug34663083-Update-UEK-reserved-sizes.patch [Orabug: 34240246]


author: Tao Liu <ltao@redhat.com> - 2.0.25-5
changelog:
  - Don't check fs modified when dump target is lvm2 thinp
  - Add dependency of dracut lvmthinpool-monitor module
  - lvm.conf should be check modified if lvm2 thinp enabled
  - Add lvm2 thin provision dump target checker
  - Fix the sync issue for dump_fs


author: - Andy Walsh <awalsh@redhat.com> - 8.2.0.18-46
changelog:
  - Temporarily dropped a check that validates the logical size specified from
    the table line.
  - Related: rhbz#2071648


author: - Andy Walsh <awalsh@redhat.com> - 8.2.0.21-46
changelog:
  - Fixed a bug where I/O errors on data reads from below a vdo were ignored.
  - Resolves: rhbz#2125708


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 8.2.1.6-72.el9
changelog:
  - Fixed bug in read-only rebuild when the logical size of the volume is an
    exact multiple of 821 4K blocks.
  - Resolves: rhbz#2166132


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
  - Resolves: rhbz#2209715
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
  - Resolves: rhbz#2209717
  - Allow to set PAC ticket signature as optional
  - Resolves: rhbz#2211388


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: EL Errata <el-errata_ww@oracle.com> - 0.65.0-5.0.1
changelog:
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Lukas Hrazky <lhrazky@redhat.com> - 0.65.0-5.1
changelog:
  - advisory upgrade: filter out advPkgs with different arch
  - Add obsoletes to filtering for advisory candidates


author: EL Errata <el-errata_ww@oracle.com> - 0.65.0-5.1.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Update OL9 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861607]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.67.0-1
changelog:
  - Fix handling transaction id in resolveTransactionItemReason (RhBug:2010259,2053014)
  - Remove deprecated assertions (RhBug:2027383)
  - Skip rich deps for autodetection of unmet dependencies (RhBug:2033130, 2048394)
  - Increase required rpm version since we use `rpmdbCookie()`
  - Add 'loongarch' support
  - Use dnf solv userdata to check versions and checksum (RhBug:2027445)
  - context: Substitute all repository config options (RhBug:2076853)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2
changelog:
  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4
changelog:
  - Resolves: rhbz#2075539 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-9.0.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4.1
changelog:
  - Resolves: rhbz#2072959 - Use right sdap_domain in ad_domain_info_send [rhel-9.0.0.z]
  - Resolves: rhbz#2089251 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-9.0.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#2072640 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2070189 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2070138 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2065098 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2062716 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2056482 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#1937895 - SSSD update prompts for smartcard pin twice - After update to 7.9
  - Resolves: rhbz#1925559 - [RFE] Implement time logging for the LDAP queries and warning of high queries time
  - Resolves: rhbz#1915564 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#1859751 - [RFE] Allow SSSD to use anonymous pkinit for FAST
  - Resolves: rhbz#1749279 - 2FA prompting setting ineffective
  - Resolves: rhbz#1661055 - sssd fails GPO-based access if AD have setup with Japanese language
  - Resolves: rhbz#1245367 - [RFE] Implement memory cache for SID requests to improve performance


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.1
changelog:
  - Resolves: rhbz#2128902 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.2
changelog:
  - Resolves: rhbz#2141830 - SSS_CLIENT: fix thread unsafe access to get*ent structs. [rhel-9.1.0.z]
  - Resolves: rhbz#2139870 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-9.1.0.z]
  - Resolves: rhbz#2142960 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-9.1.0.z]
  - Resolves: rhbz#2148988 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.3
changelog:
  - Resolves: rhbz#2152884 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Andreas Schneider <asn@redhat.com> - 4.17.2-102
changelog:
  - Fix CVE-2022-1615 GnuTLS gnutls_rnd() can fail and give predictable random values
  - resolves: rhbz#2126175


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-103
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2131993


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.4-100
changelog:
  - related: rhbz#2131993 - Update to version 4.17.4
  - resolves: rhbz#2154373 - Fix CVE-2022-38023
  - resolves: rhbz#2143196 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2114884 - Fix id command to return new groups after successful user login
  - resolves: rhbz#2154885 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-102
changelog:
  - resolves: rhbz#2169980 - Fix winbind memory leak
  - resolves: rhbz#2156056 - Fix Samba shares not accessible issue


author: Darren Archibald <darren.archibald@oracle.com> - 4.17.5-103
changelog:
  - resolves: rhbz#2223600 - Fix trust relationship between workstation and DC
  - resolves: rhbz#2222895 - Fix CVE-2023-3347


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-3
changelog:
  - mount.nfs: insert 'sloppy' at beginning of the options (bz 1987070)
  - spec: Fix dependency problems with nfsdclnts (bz 1924708)
  - nfsdcltrack: Fix printf format (bz 1995316)


author: Alice Mitchell <ajmitchell@redhat.com> 2.5.4-5
changelog:
  - triggerun doesn't work correctly unless the epoch is given (bz 1937811)
  - Restored the nfs-utils-2.5.4-mount-sloppy.patch (bz 1987070)
  - General memory fixes (bz 1938822)


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: EL Errata <el-errata_ww@oracle.com> - 2.15.2-6.0.1
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla
  - Remove options interacting with Bugzilla [Orabug: 32895080]


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-3
changelog:
  - selinux_check_passwd_access_internal(): respect deny_unknown
  - Silence -Wstringop-overflow warning from gcc 10.3.1
  - Fixed misc compiler and static analyzer findings


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013578 - Rebase to Samba 4.15.3
  - resolves: rhbz#2028026 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#2033317 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-100
changelog:
  - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
  - resolves: #2039154 - Fix CVE-2021-20316
  - resolves: #2044238 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7x
  - resolves: #2044239 - [smb] Segmentation fault when joining the domain
  - resolves: #2044241 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED
  - resolves: #2044255 - Fix CVE-2021-43566


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-100
changelog:
  - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
  - resolves: #2046129 - Fix CVE-2021-44141
  - resolves: #2046154 - Fix CVE-2021-44142
  - resolves: #2044405 - Fix printing no longer works on Windows 7
  - resolves: #2049485 - Fix systemd notifications
  - resolves: #2049604 - Disable NTLMSSP for ldap client connections


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-101
changelog:
  - resolves: #2050111 - [RFE] Change change password change prompt phrasing
  - resolves: #2054110 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Andreas Schneider <asn@redhat.com> - 4.15.5-105
changelog:
  - resolves: rhbz#2064765 - Fix 'create krb5 conf = yes` when a KDC has a single
                            IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-108
changelog:
  - resolves: rhbz#2079302 - Fix username map for unix groups
  - resolves: rhbz#2079301 - PAM Kerberos authentication fails with a clock skew error
  - resolves: rhbz#2079305 - Fix UPNs handling in lookup_name*() calls


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-106
changelog:
  - resolves: rhbz#2065376 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.
  - resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.2-101
changelog:
  - resolves: rhbz#2093833 - Fix weak dependency on logrotate
  - resolves: rhbz#2096813 - Fix printer displays only after 300 seconds timeout


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-101
changelog:
  - related: rhbz#2077487 - Rebase Samba to 4.16.3
  - resolves: rhbz#2097655 - The pcap background queue process should not be stopped
  - resolves: rhbz#2100105 - Fix net ads info LDAP server and LDAP server name


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Fix static analyzer issues in rhbz#1938795
  - Rebase to version 0.9.6
  - Resolves: rhbz#1994607, rhbz#1938795, rhbz#2009669


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Tom Stellard <tstellar@redhat.com> - 1.2.6-2
changelog:
  - Add BuildRequires: gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: EL Errata <el-errata_ww@oracle.com> - 179-2.0.1
changelog:
  - Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]


author: Lans Hung <lans.hung@oracle.com> - 179-2.0.2
changelog:
  - Fix in the case for unsupported (AMD) cpu, remove the unnecessary require statement which causes runtime dependency issue and change the exit status to EX_UNAVAILABLE (69) [Orabug: 33797836]


author: EL Errata <el-errata_ww@oracle.com> - 182-3.0.1
changelog:
  - Fix in the case for unsupported (AMD) cpu, remove the unnecessary require statement which causes runtime dependency issue and change the exit status to EX_UNAVAILABLE (69) [Orabug: 33797836]
  - Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-2
changelog:
  - Do not use "grep -q" in a pipe in check_caveats (#1902021).
  - Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
    (#1902884).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1
changelog:
  - Update Intel CPU microcode to microcode-20210216 release (#1902884):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
      to 0x2006a0a;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
      up to 0x4003006;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003003 up to 0x5003006.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-1
changelog:
  - Update Intel CPU microcode to microcode-20210525 release, addresses
    CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
    (#1962664, #1962714, #1962734, #1962680):
    - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
      to 0xb00003e;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
      to 0x2006b06;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
      to 0xea;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xde up to 0xea;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
      to 0xea;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x44 up to 0x46;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
      to 0x19;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
      up to 0x100015b;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
      up to 0x4003102;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003006 up to 0x5003102;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
      up to 0x7002302;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x7000019 up to 0x700001b;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
      up to 0xf000019;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe00000f up to 0xe000012;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
      to 0x44;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
      to 0x34;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
      to 0x1a;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
      up to 0xa6;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
      to 0xea;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
      up to 0xea;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
      up to 0xec;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
      up to 0xe8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
      0xe0 up to 0xea.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-2
changelog:
  - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
    intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
    and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
  - Enable 06-8c-01 microcode update by default (#1970611).
  - Enable 06-5e-03 microcode update by default (#1897673).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210608-1
changelog:
  - Update Intel CPU microcode to microcode-20210608 release (#1921773):
    - Fixes in releasenote.md file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220207-1
changelog:
  - Update Intel CPU microcode to microcode-20220207 release, addresses
    CVE-2021-0127, CVE-2021-0145, and CVE-2021-33120 (#2053253):
    - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
      to 0xb000040;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
      to 0x2006c0a;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xea up to 0xec;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xea up
      to 0xec;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x46 up to 0x49;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
      up to 0x100015c;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
      up to 0x400320a;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003102 up to 0x500320a;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
      up to 0x7002402;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x700001b up to 0x700001c;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
      up to 0xf00001a;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000012 up to 0xe000014;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
      to 0x24;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
      up to 0xd000331;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
      up to 0xa8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
      to 0x2d;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
      to 0x22;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
      to 0x3c;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
      to 0x15;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
      to 0x2400001f;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
      to 0xec;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
      up to 0xec;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
      up to 0xee;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
      up to 0xea;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xea up to 0xec;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
      to 0x50.


author: Todd Vierling <todd.vierling@oracle.com> - 4:20220207-1.0.1
changelog:
  - add support for UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK
  - roll back 06-6a-06 to 0xd0002a0 due to PCIe issues on reset


author: Todd Vierling <todd.vierling@oracle.com> - 4:20220207-1.0.2
changelog:
  - ensure UEK also rebuilds initramfs [Orabug: 34280058]
  - update 06-55-04 to 0x2006d05
  - update 06-55-07 to 0x5003302
  - update 06-6a-04 to 0xb000280
  - update 06-6a-06 to 0xd000375


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220207-1.20220510.1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2086750):
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-97-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
      revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) at revision 0x41c;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) at revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
      to 0x2006d05;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xec up to 0xf0;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
      to 0xf0;
    - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
      to 0x90d;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
      up to 0x100015d;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
      up to 0x4003302;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x500320a up to 0x5003302;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
      up to 0x7002501;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
      to 0x48;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
      to 0x28;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
      up to 0xd000363;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
      to 0x1e;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
      up to 0xb0;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
      to 0x31;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
      to 0x26;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
      to 0x16;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
      up to 0x24000023;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
      to 0xf0;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
      up to 0xf0;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
      up to 0xf0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
      up to 0xf0;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xec up to 0xf0;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
      to 0x53.


author: Todd Vierling <todd.vierling@oracle.com> - 4:20220207-1.20220510.1.0.1
changelog:
  - ensure UEK also rebuilds initramfs [Orabug: 34280058]
  - update 06-6a-04 to 0xb000280
  - update 06-6a-06 to 0xd000375
  - add support for UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220207-1.20220809.1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-21233 (#2115662):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
      to 0x2006e05;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
      up to 0x100015e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
      up to 0xd000375;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
      to 0x3c;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
      up to 0xb2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
      to 0x28;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
      to 0x40;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
      0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
      up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
      up to 0x421;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
      to 0x54;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220510-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090248,
      - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-97-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
      revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) at revision 0x41c;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) at revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
      to 0x2006d05;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xec up to 0xf0;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
      to 0xf0;
    - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
      to 0x90d;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
      up to 0x100015d;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
      up to 0x4003302;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x500320a up to 0x5003302;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
      up to 0x7002501;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
      to 0x48;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
      to 0x28;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
      up to 0xd000363;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
      to 0x1e;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
      up to 0xb0;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
      to 0x31;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
      to 0x26;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
      to 0x16;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
      up to 0x24000023;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
      to 0xf0;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
      up to 0xf0;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
      up to 0xf0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
      up to 0xf0;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xec up to 0xf0;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
      to 0x53.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220809-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-21233 (#2115663):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
      to 0x2006e05;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
      up to 0x100015e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
      up to 0xd000375;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
      to 0x3c;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
      up to 0xb2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
      to 0x28;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
      to 0x40;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
      0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
      up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
      up to 0x421;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
      to 0x54;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22.


author: Todd Vierling <todd.vierling@oracle.com> - 4:20220809-2.0.1
changelog:
  - ensure UEK also rebuilds initramfs [Orabug: 34280058]
  - update 06-6a-04 to 0xb000280
  - update 06-6a-06 to 0xd000389
  - add support for UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220809-2.20230214.1
changelog:
  - Update Intel CPU microcode to microcode-20230214 release, addresses
    CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171236,
      - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b000181;
    - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
      0x2c000170;
    - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
    - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
      revision 0x410e;
    - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
      revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf0 up to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
      to 0xf4;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
      up to 0x1000161;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
      up to 0x4003303;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003302 up to 0x5003303;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
      up to 0x7002503;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
      up to 0xd000389;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
      to 0x22;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
      up to 0xb8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
      to 0x32;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
      to 0x42;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
      up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
      up to 0x429;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
      up to 0x24000024;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
      to 0xf4;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf0 up to 0xf4;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
      to 0x57;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3).

  >>>>>>> 762178550d1d (Import microcode_ctl-20220809-2.20230214.1.el9_2 for 9.2)


author: Todd Vierling <todd.vierling@oracle.com> - 4:20220809-2.20230214.1.0.1
changelog:
  - ensure UEK also rebuilds initramfs [Orabug: 34280058]
  - add support for UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Ilya Okomin <ilya.okomin@oracle.com> - 2:0.4.0-9.0.1
changelog:
  - mokutil: Read the SbatLevelRT variable to get the SBAT [Orabug: 34889741]
  - SBAT revocation update support [Orabug: 34889741]


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-4
changelog:
  - Install an improved sample config
  - Fix permissions of osf-related configs
  - rule: Fix for potential off-by-one in cmd_add_loc()
  - netlink_delinearize: Fix suspicious calloc() call
  - netlink: Avoid memleak in error path of netlink_delinearize_obj()
  - netlink: Avoid memleak in error path of netlink_delinearize_table()
  - netlink: Avoid memleak in error path of netlink_delinearize_chain()
  - netlink: Avoid memleak in error path of netlink_delinearize_set()
  - json: Drop pointless assignment in exthdr_expr_json()
  - evaluate: Mark fall through case in str2hooknum()
  - parser_json: Fix for memleak in tcp option error path
  - parser_bison: Fix for implicit declaration of isalnum
  - main: fix nft --help output fallout from 719e4427
  - tests: add icmp/6 test where dependency should be left alone
  - payload: check icmp dependency before removing previous icmp expression


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-8
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set")
  - segtree: Fix segfault when restoring a huge interval set


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-10
changelog:
  - tests: shell: better parameters for the interval stack overflow test
  - tests: shell: $NFT needs to be invoked unquoted


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-11
changelog:
  - tests: py: add dnat to port without defining destination address
  - evaluate: fix inet nat with no layer 3 info
  - include: missing sctp_chunk.h in Makefile.am
  - exthdr: Implement SCTP Chunk matching
  - scanner: sctp: Move to own scope
  - scanner: introduce start condition stack
  - json: Simplify non-tcpopt exthdr printing a bit


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Ashish Samant <ashish.samant@oracle.com> - 1.8.6-11
changelog:
  - tunefs.ocfs2: read journal superblock even for online operations (Ashish
    Samant)  [Orabug: 28804934]


author: Than Ngo <than@redhat.com> - 3.16.0-10
changelog:
  - Resolves: #1987186, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Than Ngo <than@redhat.com> - 3.17.0-8
changelog:
  - Resolves: #2127873, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.18.0-5
changelog:
  - opencryptoki C_GenerateKeyPair() fails after generating > 500 RSA keys with CEX7 crypto cards
  Resolves: #2128611


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-4
changelog:
  - Backport Channel Binding support. Related: rhbz#1967853
  - Fix coverity issues. Related: rhbz#1938829


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
    The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Change STRIP to STRIP_OPTS
    Add export symbols related to LDAP_CONNECTIONLESS
    Related: rhbz#2117752


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-1 + 0.10.4-4
changelog:
  - New upstream release
  - Switch to SFTP protocol in scp utility by default
  - Enable SCP protocol kill switch
    Related: rhbz#2001002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-7
changelog:
  - Switch to SFTP protocol in scp utility by default - upstream fixes
    Related: rhbz#2001002
  - Workaround for RHEL 8 incompatibility in scp utility in SFTP mode
    Related: rhbz#2038854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-26
changelog:
  - Fix one-byte overflow in SSH banner processing
    Resolves: rhbz#2138345
  - Fix double free() in error path
    Resolves: rhbz#2138347


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-28
changelog:
  - Do not try to use SHA1 for host key ownership proof when we don't support it server-side
    Resolves: rhbz#2088750


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-13
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-15.1
changelog:
  - Fix invocation of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before
    setting an allowed digest with EVP_PKEY_CTX_set_signature_md()
  - Resolves: rhbz#2061607


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-19
changelog:
  - Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes
  - Resolves: rhbz#2063306


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-20
changelog:
  - Fix acceptance of SHA-1 certificates with rh-allow-sha1-signatures = yes when
    no OpenSSL library context is set
  - Resolves: rhbz#2063306


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-33
changelog:
  - CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory
  - Resolves: rhbz#2089443
  - CVE-2022-1343 openssl: Signer certificate verification returned
    inaccurate response when using OCSP_NOCHECKS
  - Resolves: rhbz#2089439
  - CVE-2022-1292 openssl: c_rehash script allows command injection
  - Resolves: rhbz#2090361
  - Revert "Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode"
    Related: rhbz#2087234
  - Use KAT for ECDSA signature tests, s390 arch
  - Resolves: rhbz#2086866


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-35
changelog:
  - Add explicit indicators for signatures in FIPS mode and mark signature
    primitives as unapproved.
    Resolves: rhbz#2087234


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-36
changelog:
  - Ciphersuites with RSAPSK KX should be filterd in FIPS mode
  - Related: rhbz#2091994
  - FIPS provider should block RSA encryption for key transport.
  - Other RSA encryption options should still be available if key length is enough
  - Related: rhbz#2091977
  - Improve diagnostics when passing unsupported groups in TLS
  - Related: rhbz#2086554
  - Fix PPC64 Montgomery multiplication bug
  - Related: rhbz#2101346
  - Strict certificates validation shouldn't allow explicit EC parameters
  - Related: rhbz#2085521
  - CVE-2022-2068: the c_rehash script allows command injection
  - Related: rhbz#2098276


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-38
changelog:
  - Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously
    initialized.
    Resolves: rhbz#2107530
  - Improve AES-GCM performance on Power9 and Power10 ppc64le
    Resolves: rhbz#2103044
  - Improve ChaCha20 performance on Power10 ppc64le
    Resolves: rhbz#2103044


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-39
changelog:
  - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
  - Use Use digest_sign & digest_verify in FIPS signature self test
  - Use FFDHE2048 in Diffie-Hellman FIPS self-test
    Resolves: rhbz#2112978


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40
changelog:
  - Deal with DH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115856
  - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115857
  - Use signature for RSA pairwise test according FIPS-140-3 requirements
    Related: rhbz#2115858
  - Reseed all the parent DRBGs in chain on reseeding a DRBG
    Related: rhbz#2115859
  - Zeroization according to FIPS-140-3 requirements
    Related: rhbz#2115861


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Resolves: rhbz#2115861
  - Add FIPS indicator for HKDF
    Resolves: rhbz#2118388


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-39
changelog:
  - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
  - Use Use digest_sign & digest_verify in FIPS signature self test
  - Use FFDHE2048 in Diffie-Hellman FIPS self-test
    Resolves: rhbz#2102535


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40
changelog:
  - Deal with DH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2102536
  - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2102537
  - Use signature for RSA pairwise test according FIPS-140-3 requirements
    Related: rhbz#2102540
  - Reseed all the parent DRBGs in chain on reseeding a DRBG
    Related: rhbz#2102541


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Related: rhbz#2102542
  - Add FIPS indicator for HKDF
    Related: rhbz#2114772


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-43
changelog:
  - CVE-2022-3602: X.509 Email Address Buffer Overflow
  - CVE-2022-3786: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-44
changelog:
  - SHAKE-128/256 are not allowed with RSA in FIPS mode
    Resolves: rhbz#2144010
  - Avoid memory leaks in TLS
    Resolves: rhbz#2144008
  - FIPS RSA CRT tests must use correct parameters
    Resolves: rhbz#2144006
  - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC
    Resolves: rhbz#2144017
  - Remove support for X9.31 signature padding in FIPS mode
    Resolves: rhbz#2144015
  - Add explicit indicator for SP 800-108 KDFs with short key lengths
    Resolves: rhbz#2144019
  - Add explicit indicator for HMAC with short key lengths
    Resolves: rhbz#2144000
  - Set minimum password length for PBKDF2 in FIPS mode
    Resolves: rhbz#2144003
  - Add explicit indicator for PSS salt length in FIPS mode
    Resolves: rhbz#2144012
  - Clamp default PSS salt length to digest size for FIPS 186-4 compliance
    Related: rhbz#2144012
  - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode
    Resolves: rhbz#2145170


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-45
changelog:
  - Add support of X25519 and X448 "group" parameter in EVP_PKEY_CTX objects
    Resolves: rhbz#2149010
  - Fix explicit indicator for PSS salt length in FIPS mode when used with
    negative magic values
    Resolves: rhbz#2144012
  - Update change to default PSS salt length with patch state from upstream 
    Related: rhbz#2144012


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-46
changelog:
  - Refactor OpenSSL fips module MAC verification
    Resolves: rhbz#2158412
  - Disallow SHAKE in RSA-OAEP decryption in FIPS mode
    Resolves: rhbz#2144010


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-47
changelog:
  - Fixed X.509 Name Constraints Read Buffer Overflow
    Resolves: CVE-2022-4203
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed Invalid pointer dereference in d2i_PKCS7 functions
    Resolves: CVE-2023-0216
  - Fixed NULL dereference validating DSA public key
    Resolves: CVE-2023-0217
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286
  - Fixed NULL dereference during PKCS7 data verification
    Resolves: CVE-2023-0401


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-9
changelog:
  - Fix explicit FIPS indicator for X9.42 KDF when used with output lengths < 14 bytes
    Resolves: rhbz#2175864


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-11
changelog:
  - Add missing reference to patchfile to add explicit FIPS indicator to RSA
    encryption and RSASVE and fix the gettable parameter list for the RSA
    asymmetric cipher implementation.
    Resolves: rhbz#2179379


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-13
changelog:
  - Enforce using EMS in FIPS mode
    Resolves: rhbz#2157951
  - Fix excessive resource usage in verifying X509 policy constraints
    Resolves: rhbz#2186661
  - Fix invalid certificate policies in leaf certificates check
    Resolves: rhbz#2187429
  - Certificate policy check not enabled
    Resolves: rhbz#2187431
  - OpenSSL rsa_verify_recover key length checks in FIPS mode
    Resolves: rhbz#2186819


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-15.1
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2178030


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-16
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211396


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-2
changelog:
  - Various provider-related imrovements necessary for PKCS#11 provider correct operations
    Resolves: rhbz#2142517
  - We should export 2 versions of OPENSSL_str[n]casecmp to be compatible with upstream
    Resolves: rhbz#2133809
  - Removed recommended package for openssl-libs
    Resolves: rhbz#2093804
  - Adjusting include for the FIPS_mode macro
    Resolves: rhbz#2083879
  - Backport of ppc64le Montgomery multiply enhancement
    Resolves: rhbz#2130708
  - Fix explicit indicator for PSS salt length in FIPS mode when used with
    negative magic values
    Resolves: rhbz#2142087
  - Update change to default PSS salt length with patch state from upstream 
    Related: rhbz#2142087


author: Ray Strode <rstrode@redhat.com> - 90.2-1
changelog:
  - Strip RHEL 8 branding and use graytones until until RHEL 9 branding is available
    Resolves: #1975387


author: Darren Archibald <darren.archibald@oracle.com> - 9-2.0.1
changelog:
  - Add redhat-indexhtml to Obsoletes and Provides [Orabug: 34124784]
  - Replaced upstream references [Orabug: 34032132]


author: Ilya Okomin <ilya.okomin@oracle.com> - 9.0-1.0.6
changelog:
  - Provide oraclelinux-sb-certs and system-sb-certs with Oracle 
    SecureBoot certificates [Orabug: 34132247]


author: Alan Steinberg <alan.steinberg@oracle.com> - 9.0-1.0.13
changelog:
  - Updated Release Notes for 9.0 GA.
  - Updated SecureBoot certificates to version 202204 [Orabug: 34290581]


author: Edgar Aguilar <edgar.aguilar@oracle.com> - 9.0-1.0.16
changelog:
  - Introduce SWID tags for OL 9.0 [Orabug: 34420300]
  - Modified release name value for OL9. [Orabug: 34448769]


author: Keshav Sharma <keshav.sharma@oracle.com> 1.0-8
changelog:
  - Added Oracle Linux 9.1 Repositories [ OraBug: 34662258 ]
  - Removed Oracle Linux 9 developer preview repositories [ OraBug: 34662258 ]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 1.0-9
changelog:
  - Update post scripts to support new self-service DNS hostnames [JIRA: OLDIS-22726]
  - Modified repositories for developer preview [Orabug: 35260780]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 1.0-10
changelog:
  - Added Oracle Linux 9.2 Repositories [Orabug: 35264224]
  - Removed Oracle Linux 9 developer preview repositories [OraBug: 35264224]


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


