# changelog

author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.338.3.el7uek]
changelog:
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli)   
  - rds: Add rds stuck shutdown timeout (Rohit Nair)  [Orabug: 37180926]  
  - ACPI: ioremap: avoid redundant rounding to OS page size (Ard Biesheuvel)  [Orabug: 37243611]  
  - blk-mq: fix missing blk_account_io_done() in error path (Yu Kuai)  [Orabug: 37280096]  
  - Revert "net/mlx5: disable the 'fast unload' feature on Exadata systems" (Qing Huang)  [Orabug: 37285309]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.338.4.el7uek]
changelog:
  - devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev)  [Orabug: 37284641]  {CVE-2024-26734} 
  - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds)  [Orabug: 37174200]  {CVE-2024-47674} 
  - mm: add remap_pfn_range_notrack (Christoph Hellwig)  [Orabug: 37174200]  {CVE-2024-47674} 
  - mm/memory.c: make remap_pfn_range() reject unaligned addr (Alex Zhang)  [Orabug: 37174200]  {CVE-2024-47674} 
  - mm: fix ambiguous comments for better code readability (chenqiwu)  [Orabug: 37174200]  {CVE-2024-47674} 
  - mm: clarify a confusing comment for remap_pfn_range() (WANG Wenhu)  [Orabug: 37174200]  {CVE-2024-47674}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.338.2.el7uek]
changelog:
  - LTS tag: v5.4.285 (Sherry Yang)   
  - mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin) [Orabug: 37331939] {CVE-2024-53097}
  - mac80211: always have ieee80211_sta_restart() (Johannes Berg)   
  - vt: prevent kernel-infoleak in con_font_get() (Jeongjun Park)   
  - Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" (Jason-JH.Lin)   
  - mm: shmem: fix data-race in shmem_getattr() (Jeongjun Park) [Orabug: 37268581] {CVE-2024-50228}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [Orabug: 37268589] {CVE-2024-50230}
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [Orabug: 37268564] {CVE-2024-50218}
  - riscv: Remove unused GENERATING_ASM_OFFSETS (Chunyan Zhang)   
  - nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [Orabug: 37268585] {CVE-2024-50229}
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [Orabug: 37268598] {CVE-2024-50233}
  - wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjälä) [Orabug: 37268603] {CVE-2024-50234}
  - wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [Orabug: 37268611] {CVE-2024-50236}
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [Orabug: 37268614] {CVE-2024-50237}
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman)   
  - xhci: Fix Link TRB DMA in command ring stopped completion event (Faisal Hassan)   
  - usb: phy: Fix API devm_usb_put_phy() can not release the phy (Zijun Hu)   
  - usbip: tools: Fix detach_port() invalid port error path (Zongmin Zhou)   
  - misc: sgi-gru: Don't disable preemption in GRU driver (Dimitri Sivanich)   
  - net: amd: mvme147: Fix probe banner message (Daniel Palmer)   
  - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (Xiongfeng Wang)   
  - drivers/misc: ti-st: Remove unneeded variable in st_tty_open (zhong jiang)   
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [Orabug: 37268671] {CVE-2024-50251}
  - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension (Benoît Monin)   
  - net: support ip generic csum processing in skb_csum_hwoffload_help (Xin Long)   
  - bpf: Fix out-of-bounds write in trie_get_next_key() (Byeonguk Jeong) [Orabug: 37268703] {CVE-2024-50262}
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [Orabug: 37304741] {CVE-2024-53057}
  - gtp: allow -1 to be specified as file description from userspace (Pablo Neira Ayuso)   
  - gtp: simplify error handling code in 'gtp_encap_enable()' (Christophe JAILLET)   
  - dt-bindings: gpu: Convert Samsung Image Rotator to dt-schema (Maciej Falkowski)   
  - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (Christophe JAILLET)   
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Daniel Gabay) [Orabug: 37304750] {CVE-2024-53059}
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (Emmanuel Grumbach)   
  - mac80211: Add support to trigger sta disconnect on hardware restart (Youghandhar Chintala)   
  - mac80211: do drv_reconfig_complete() before restarting all (Johannes Berg)   
  - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (Felix Fietkau)   
  - cgroup: Fix potential overflow issue when checking max_depth (Xiu Jianfeng)   
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [Orabug: 37264076] {CVE-2024-50142}
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning (junhua huang)   
  - selinux: improve error checking in sel_write_load() (Paul Moore)   
  - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (Haiyang Zhang)   
  - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (José Relvas)   
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [Orabug: 37252378] {CVE-2024-50116}
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Shubham Panwar)   
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Christian Heusel)   
  - drm/amd: Guard against bad data for ATIF ACPI method (Mario Limonciello) [Orabug: 37252384] {CVE-2024-50117}
  - ALSA: hda/realtek: Update default depop procedure (Kailang Yang)   
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (Andrey Shumilin) [Orabug: 37264275] {CVE-2024-50205}
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Jinjie Ruan) [Orabug: 37304479] {CVE-2024-50210}
  - r8169: avoid unsolicited interrupts (Heiner Kallweit)   
  - net: sched: fix use-after-free in taprio_change() (Dmitry Antipov) [Orabug: 37252408] {CVE-2024-50127}
  - net: usb: usbnet: fix name regression (Oliver Neukum)   
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [Orabug: 37264144] {CVE-2024-50167}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [Orabug: 37264150] {CVE-2024-50168}
  - tracing: Consider the NULL character when validating the event length (Leo Yan) [Orabug: 37252416] {CVE-2024-50131}
  - jfs: Fix sanity check in dbMount (Dave Kleikamp)   
  - udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [Orabug: 37264081] {CVE-2024-50143}
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [Orabug: 37252421] {CVE-2024-50134}
  - KVM: s390: gaccess: Check if guest address is in memslot (Nico Boehr)   
  - KVM: s390: gaccess: Cleanup access to guest pages (Janis Schoetterl-Glausch)   
  - KVM: s390: gaccess: Refactor access address range check (Janis Schoetterl-Glausch)   
  - KVM: s390: gaccess: Refactor gpa and length calculation (Janis Schoetterl-Glausch)   
  - arm64: probes: Fix uprobes for big-endian kernels (Mark Rutland) [Orabug: 37264237] {CVE-2024-50194}
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian (junhua huang)   
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [Orabug: 37264097] {CVE-2024-50148}
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [Orabug: 37264103] {CVE-2024-50150}
  - smb: client: fix OOBs when building SMB2_IOCTL request (Paulo Alcantara) [Orabug: 37264108] {CVE-2024-50151}
  - genetlink: hold RCU in genlmsg_mcast() (Eric Dumazet)   
  - net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [Orabug: 37264157] {CVE-2024-50171}
  - net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() (Wang Hai)   
  - macsec: don't increment counters for an unrelated SA (Sabrina Dubroca)   
  - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (Jonathan Marek)   
  - RDMA/bnxt_re: Return more meaningful error (Kalesh AP)   
  - ipv4: give an IPv4 dev to blackhole_netdev (Xin Long)   
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Anumula Murali Mohan Reddy)   
  - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin (Florian Klink)   
  - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Saravanan Vajravel)   
  - mac80211: Fix NULL ptr deref for injected rate info (Mathy Vanhoef)   
  - erofs: fix lz4 inplace decompression (Gao Xiang)   
  - nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37264267] {CVE-2024-50202}
  - x86/apic: Always explicitly disarm TSC-deadline timer (Zhang Rui)   
  - x86/resctrl: Annotate get_mem_config() functions as __init (Nathan Chancellor)   
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [Orabug: 37227436] {CVE-2024-50074}
  - USB: serial: option: add Telit FN920C04 MBIM compositions (Daniele Palmas)   
  - USB: serial: option: add support for Quectel EG916Q-GL (Benjamin B. Frost)   
  - xhci: Fix incorrect stream context type macro (Mathias Nyman)   
  - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Luiz Augusto von Dentz)   
  - Bluetooth: Remove debugfs directory on module init failure (Aaron Thompson)   
  - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)   
  - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)   
  - iio: light: opt3001: add missing full-scale range value (Emil Gedenryd)   
  - iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (Christophe JAILLET)   
  - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)   
  - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (Javier Carrasco)   
  - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)   
  - drm/vmwgfx: Handle surface check failure correctly (Nikolay Kuratov)   
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [Orabug: 37227404] {CVE-2024-50082}
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Jim Mattson)   
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Michael Mueller)   
  - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (Thomas Weißschuh)   
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [Orabug: 36835837] {CVE-2024-40953}
  - wifi: mac80211: fix potential key use-after-free (Johannes Berg)   
  - mm/swapfile: skip HugeTLB pages for unuse_vma (Liu Shixin) [Orabug: 37264257] {CVE-2024-50199}
  - fat: fix uninitialized variable (OGAWA Hirofumi)   
  - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (WangYuli)   
  - tracing/kprobes: Fix symbol counting logic by looking at modules as well (Andrii Nakryiko)   
  - tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols (Francis Laniel)   
  - arm64: probes: Fix simulate_ldr*_literal() (Mark Rutland)   
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [Orabug: 37252317] {CVE-2024-50099}
  - posix-clock: Fix missing timespec64 check in pc_clock_settime() (Jinjie Ruan) [Orabug: 37264242] {CVE-2024-50195}
  - nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (Yonatan Maman) [Orabug: 37252308] {CVE-2024-50096}
  - net: Fix an unsafe loop on the list (Anastasia Kovaleva) [Orabug: 37206409] {CVE-2024-50024}
  - hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (SurajSonawane2415)   
  - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (Icenowy Zheng)   
  - usb: xhci: Fix problem with xhci resume from suspend (Jose Alberto Reguero)   
  - usb: dwc3: core: Stop processing of pending events if controller is halted (Selvarasu Ganesan)   
  - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant" (Oliver Neukum)   
  - HID: plantronics: Workaround for an unexcepted opposite volume key (Wade Wang)   
  - CDC-NCM: avoid overflow in sanity checking (Oliver Neukum)   
  - resource: fix region_intersects() vs add_memory_driver_managed() (Huang Ying) [Orabug: 37200931] {CVE-2024-49878}
  - lockdep: fix deadlock issue between lockdep and rcu (Zhiguo Niu)   
  - locking/lockdep: Avoid potential access of invalid memory in lock_class (Waiman Long)   
  - locking/lockdep: Rework lockdep_lock (Peter Zijlstra)   
  - locking/lockdep: Fix bad recursion pattern (Peter Zijlstra)   
  - slip: make slhc_remember() more robust against malicious packets (Eric Dumazet) [Orabug: 37206429] {CVE-2024-50033}
  - ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [Orabug: 37206435] {CVE-2024-50035}
  - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start (Xin Long)   
  - net: annotate lockless accesses to sk->sk_max_ack_backlog (Eric Dumazet)   
  - net: annotate lockless accesses to sk->sk_ack_backlog (Eric Dumazet)   
  - net: ibm: emac: mal: fix wrong goto (Rosen Penev)   
  - net/sched: accept TCA_STAB only for root qdisc (Eric Dumazet) [Orabug: 37206457] {CVE-2024-50039}
  - igb: Do not bring the device up after non-fatal error (Mohamed Khalfella) [Orabug: 37206464] {CVE-2024-50040}
  - gpio: aspeed: Use devm_clk api to manage clock source (Billy Tsai)   
  - gpio: aspeed: Add the flush write to ensure the write complete. (Billy Tsai)   
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [Orabug: 37206474] {CVE-2024-50044}
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [Orabug: 37206482] {CVE-2024-50045}
  - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe (Neal Cardwell)   
  - tcp: fix to allow timestamp undo if no retransmits were sent (Neal Cardwell)   
  - SUNRPC: Fix integer overflow in decode_rc_list() (Dan Carpenter)   
  - ice: fix VLAN replay after reset (Dave Ertman)   
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Bob Pearson)   
  - fbdev: sisfb: Fix strbuf array overflow (Andrey Shumilin) [Orabug: 37264186] {CVE-2024-50180}
  - driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (Zijun Hu)   
  - tools/iio: Add memory allocation failure check for trigger_name (Zhu Jun)   
  - virtio_pmem: Check device status before requesting flush (Philip Chen) [Orabug: 37264205] {CVE-2024-50184}
  - usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (Shawn Shao)   
  - usb: chipidea: udc: enable suspend interrupt after usb reset (Xu Yang)   
  - media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (Yunke Cao)   
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [Orabug: 37206542] {CVE-2024-50059}
  - PCI: Mark Creative Labs EMU20k2 INTx masking as broken (Alex Williamson)   
  - i2c: i801: Use a different adapter-name for IDF adapters (Hans de Goede)   
  - PCI: Add ACS quirk for Qualcomm SA8775P (Subramanian Ananthanarayanan)   
  - clk: bcm: bcm53573: fix OF node leak in init (Krzysztof Kozlowski)   
  - ktest.pl: Avoid false positives with grub2 skip regex (Daniel Jordan)   
  - s390/cpum_sf: Remove WARN_ON_ONCE statements (Thomas Richter)   
  - ext4: nested locking for xattr inode (Wojciech Gładysz)   
  - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Gerald Schaefer)   
  - s390/facility: Disable compile time optimization for decompressor code (Heiko Carstens)   
  - bpf: Check percpu map value size first (Tao Chen)   
  - Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal (Mathias Krause)   
  - virtio_console: fix misc probe bugs (Michael S. Tsirkin)   
  - tracing: Have saved_cmdlines arrays all in one allocation (Steven Rostedt (Google))   
  - drm/crtc: fix uninitialized variable use even harder (Rob Clark)   
  - tracing: Remove precision vsnprintf() check from print event (Steven Rostedt (Google))   
  - net: ethernet: cortina: Drop TSO support (Linus Walleij)   
  - unicode: Don't special case ignorable code points (Gabriel Krisman Bertazi) [Orabug: 37252274] {CVE-2024-50089}
  - ext4: fix inode tree inconsistency caused by ENOMEM (zhanchengbin)   
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [Orabug: 37206092] {CVE-2024-49955}
  - ACPI: battery: Simplify battery hook locking (Armin Wolf)   
  - r8169: add tally counter fields added with RTL8125 (Heiner Kallweit) [Orabug: 37206183] {CVE-2024-49973}
  - r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" (Colin Ian King)   
  - clk: qcom: clk-rpmh: Fix overflow in BCM vote (Mike Tipton)   
  - clk: qcom: rpmh: Simplify clk_rpmh_bcm_send_cmd() (Stephen Boyd)   
  - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (NeilBrown)   
  - nfsd: use ktime_get_seconds() for timestamps (Arnd Bergmann)   
  - uprobes: fix kernel info leak via "[uprobes]" vma (Oleg Nesterov)   
  - arm64: errata: Expand speculative SSBS workaround once more (Mark Rutland)   
  - arm64: cputype: Add Neoverse-N3 definitions (Mark Rutland)   
  - arm64: Add Cortex-715 CPU part definition (Anshuman Khandual)   
  - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - i2c: qcom-geni: Grow a dev pointer to simplify code (Stephen Boyd)   
  - i2c: qcom-geni: Let firmware specify irq trigger flags (Stephen Boyd)   
  - gpio: davinci: fix lazy disable (Emanuele Ghidoli)   
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [Orabug: 37200897] {CVE-2024-49867}
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [Orabug: 37200903] {CVE-2024-49868}
  - ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (Hans de Goede)   
  - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (Hans de Goede)   
  - Input: adp5589-keys - fix adp5589_gpio_get_value() (Nuno Sa)   
  - rtc: at91sam9: fix OF node leak in probe() error path (Krzysztof Kozlowski)   
  - tomoyo: fallback to realpath if symlink's pathname does not exist (Tetsuo Handa)   
  - iio: magnetometer: ak8975: Fix reading for ak099xx sensors (Barnabás Czémán)   
  - media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [Orabug: 37206210] {CVE-2024-49981}
  - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags (Hans Verkuil)   
  - media: sun4i_csi: Implement link validate for sun4i_csi subdev (Laurent Pinchart)   
  - clk: rockchip: fix error for unknown clocks (Sebastian Reichel)   
  - aoe: fix the potential use-after-free problem in more places (Chun-Yi Lee) [Orabug: 37206642] {CVE-2024-49982}
  - riscv: define ILLEGAL_POINTER_VALUE for 64bit (Jisheng Zhang)   
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [Orabug: 37200926] {CVE-2024-49877}
  - ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [Orabug: 37206097] {CVE-2024-49957}
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [Orabug: 37206137] {CVE-2024-49965}
  - ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [Orabug: 37206141] {CVE-2024-49966}
  - ocfs2: fix uninit-value in ocfs2_get_block() (Joseph Qi)   
  - ocfs2: fix the la space leak when unmounting an ocfs2 volume (Heming Zhao)   
  - mm: krealloc: consider spare memory for __GFP_ZERO (Danilo Krummrich)   
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [Orabug: 37206109] {CVE-2024-49959}
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [Orabug: 37200935] {CVE-2024-49879}
  - of/irq: Support #msi-cells=<0> in of_msi_get_domain (Andrew Jones)   
  - parisc: Fix stack start for ADDR_NO_RANDOMIZE personality (Helge Deller)   
  - parisc: Fix 64-bit userspace syscall path (Helge Deller)   
  - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (Luis Henriques (SUSE))   
  - ext4: fix double brelse() the buffer of the extents path (Baokun Li) [Orabug: 37200948] {CVE-2024-49882}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [Orabug: 37200954] {CVE-2024-49883}
  - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (Luis Henriques (SUSE))   
  - ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (Baokun Li)   
  - ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [Orabug: 37206147] {CVE-2024-49967}
  - ALSA: core: add isascii() check to card ID generator (Jaroslav Kysela)   
  - drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (Thomas Zimmermann)   
  - parisc: Fix itlb miss handler for 64-bit programs (Helge Deller)   
  - perf/core: Fix small negative period being ignored (Luo Gengkun)   
  - spi: bcm63xx: Fix module autoloading (Jinjie Ruan)   
  - firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() (Krzysztof Kozlowski)   
  - i2c: xiic: Wait for TX empty to avoid missed TX NAKs (Robert Hancock)   
  - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (Marek Vasut) [Orabug: 37206220] {CVE-2024-49985}
  - selftests: vDSO: fix vDSO symbols lookup for powerpc64 (Christophe Leroy)   
  - selftests: breakpoints: use remaining time to check if suspend succeed (Yifei Liu)   
  - spi: s3c64xx: fix timeout counters in flush_fifo (Ben Dooks)   
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [Orabug: 37206323] {CVE-2024-50006}
  - ext4: ext4_search_dir should return a proper error (Thadeu Lima de Souza Cascardo)   
  - of/irq: Refer to actual buffer size in of_irq_parse_one() (Geert Uytterhoeven)   
  - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (Geert Uytterhoeven)   
  - scsi: aacraid: Rearrange order of struct aac_srb_unit (Kees Cook)   
  - drm/printer: Allow NULL data in devcoredump printer (Matthew Brost)   
  - drm/amd/display: Initialize get_bytes_per_element's default to 1 (Alex Hung) [Orabug: 37205727] {CVE-2024-49892}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [Orabug: 37205740] {CVE-2024-49894}
  - drm/amd/display: Check stream before comparing them (Alex Hung) [Orabug: 37205752] {CVE-2024-49896}
  - jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [Orabug: 37205778] {CVE-2024-49900}
  - jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [Orabug: 37205790] {CVE-2024-49902}
  - jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [Orabug: 37205795] {CVE-2024-49903}
  - jfs: UBSAN: shift-out-of-bounds in dbFindBits (Remington Brasga)   
  - ata: sata_sil: Rename sil_blacklist to sil_quirks (Damien Le Moal)   
  - power: reset: brcmstb: Do not go into infinite loop if reset fails (Andrew Davis)   
  - fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [Orabug: 37205936] {CVE-2024-49924}
  - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (Kees Cook)   
  - ALSA: hdsp: Break infinite MIDI input flush loop (Takashi Iwai)   
  - ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [Orabug: 37206328] {CVE-2024-50007}
  - signal: Replace BUG_ON()s (Thomas Gleixner)   
  - nfp: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [Orabug: 37206333] {CVE-2024-50008}
  - proc: add config & param to block forcing mem writes (Adrian Ratiu)   
  - ACPICA: iasl: handle empty connection_node (Aleksandrs Vinarskis)   
  - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process (Jason Xing)   
  - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family (Ido Schimmel)   
  - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). (Kuniyuki Iwashima)   
  - net: mvpp2: Increase size of queue_name buffer (Simon Horman)   
  - tipc: guard against string buffer overrun (Simon Horman) [Orabug: 37206278] {CVE-2024-49995}
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [Orabug: 37206124] {CVE-2024-49962}
  - ACPI: EC: Do not release locks during operation region accesses (Rafael J. Wysocki)   
  - wifi: rtw88: select WANT_DEV_COREDUMP (Zong-Zhe Yang)   
  - net: sched: consistently use rcu_replace_pointer() in taprio_change() (Dmitry Antipov)   
  - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (Armin Wolf)   
  - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (Armin Wolf)   
  - net: hisilicon: hns_mdio: fix OF node leak in probe() (Krzysztof Kozlowski)   
  - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() (Krzysztof Kozlowski)   
  - net: hisilicon: hip04: fix OF node leak in probe() (Krzysztof Kozlowski)   
  - ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() (Aleksandr Mishin)   
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Høiland-Jørgensen) [Orabug: 37206029] {CVE-2024-49938}
  - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (Dmitry Kandybka)   
  - f2fs: Require FMODE_WRITE for atomic write ioctls (Jann Horn) [Orabug: 37200794] {CVE-2024-47740}
  - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (Takashi Iwai)   
  - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (Takashi Iwai)   
  - ALSA: hda/realtek: Fix the push button function for the ALC257 (Oder Chiou)   
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [Orabug: 37206051] {CVE-2024-49944}
  - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit (Anton Danilov)   
  - net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [Orabug: 37206064] {CVE-2024-49948}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Eric Dumazet) [Orabug: 37206070] {CVE-2024-49949}
  - net: ethernet: lantiq_etop: fix memory disclosure (Aleksander Jan Bajkowski) [Orabug: 37206289] {CVE-2024-49997}
  - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - Bluetooth: btmrvl_sdio: Refactor irq wakeup (Abhishek Pandit-Subedi)   
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [Orabug: 37206081] {CVE-2024-49952}
  - net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED (Phil Sutter)   
  - net/mlx5: Added cond_resched() to crdump collection (Mohamed Khalfella)   
  - ieee802154: Fix build error (Jinjie Ruan)   
  - drivers: net: Fix Kconfig indentation, continued (Krzysztof Kozlowski)   
  - Minor fixes to the CAIF Transport drivers Kconfig file (rd.dunlab@gmail.com)   
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [Orabug: 37264181] {CVE-2024-50179}
  - mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [Orabug: 37206130] {CVE-2024-49963}
  - mailbox: rockchip: fix a typo in module autoloading (Liao Chen)   
  - usb: yurex: Fix inconsistent locking bug in yurex_read() (Harshit Mogalapalli)   
  - i2c: isch: Add missed 'else' (Andy Shevchenko)   
  - i2c: aspeed: Update the stop sw state when the bus recovery occurs (Tommy Huang)   
  - mm: only enforce minimum stack gap size if it's sensible (David Gow)   
  - pps: add an error check in parport_attach (Ma Ke)   
  - pps: remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)   
  - USB: misc: yurex: fix race between read and write (Oliver Neukum)   
  - usb: yurex: Replace snprintf() with the safer scnprintf() variant (Lee Jones)   
  - soc: versatile: realview: fix soc_dev leak during device remove (Krzysztof Kozlowski)   
  - soc: versatile: realview: fix memory leak during device remove (Krzysztof Kozlowski)   
  - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (Sean Anderson)   
  - PCI: xilinx-nwl: Use irq_data_get_irq_chip_data() (Thomas Gleixner)   
  - ASoC: meson: axg-card: fix 'use-after-free' (Arseniy Krasnov) [Orabug: 37116540] {CVE-2024-46849}
  - ASoC: meson: axg: extract sound card utils (Jerome Brunet)   
  - nfs: fix memory leak in error path of nfs4_do_reclaim (Li Lingfeng)   
  - fs: Fix file_set_fowner LSM hook inconsistencies (Mickaël Salaün)   
  - vfs: fix race between evice_inodes() and find_inode()&iput() (Julian Sun) [Orabug: 37200604] {CVE-2024-47679}
  - hwrng: mtk - Use devm_pm_runtime_enable (Guoqing Jiang)   
  - f2fs: avoid potential int overflow in sanity_check_area_boundary() (Nikita Zhandarovich)   
  - f2fs: prevent possible int overflow in dir_block_index() (Nikita Zhandarovich)   
  - debugobjects: Fix conditions in fill_pool() (Zhen Lei)   
  - wifi: rtw88: 8822c: Fix reported RX band width (Bitterblue Smith)   
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Werner Sembach)   
  - ACPI: sysfs: validate return type of _STR method (Thomas Weißschuh) [Orabug: 37200878] {CVE-2024-49860}
  - drbd: Add NULL check for net_conf to prevent dereference in state validation (Mikhail Lobanov)   
  - drbd: Fix atomicity violation in drbd_uuid_set_bm() (Qiu-ji Chen)   
  - tty: rp2: Fix reset with non forgiving PCIe host bridges (Florian Fainelli)   
  - firmware_loader: Block path traversal (Jann Horn) [Orabug: 37200802] {CVE-2024-47742}
  - USB: class: CDC-ACM: fix race between get_serial and set_serial (Oliver Neukum)   
  - USB: misc: cypress_cy7c63: check for short transfer (Oliver Neukum)   
  - USB: appledisplay: close race between probe and completion handler (Oliver Neukum)   
  - drm/amd/display: Round calculated vtotal (Robin Chen)   
  - soc: versatile: integrator: fix OF node leak in probe() error path (Krzysztof Kozlowski)   
  - Remove *.orig pattern from .gitignore (Laurent Pinchart)   
  - crypto: aead,cipher - zeroize key buffer after use (Hailey Mothershead) [Orabug: 36898014] {CVE-2024-42229}
  - netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS (Simon Horman)   
  - net: qrtr: Update packets cloning when broadcasting (Youssef Samir)   
  - tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [Orabug: 37200624] {CVE-2024-47684}
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (Kaixin Wang) [Orabug: 37200818] {CVE-2024-47747}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [Orabug: 37200630] {CVE-2024-47685}
  - coresight: tmc: sg: Do not leak sg_table (Suzuki K Poulose)   
  - iio: adc: ad7606: fix standby gpio state to match the documentation (Guillaume Stols)   
  - iio: adc: ad7606: fix oversampling gpio array (Guillaume Stols)   
  - f2fs: reduce expensive checkpoint trigger frequency (Chao Yu)   
  - f2fs: remove unneeded check condition in __f2fs_setxattr() (Chao Yu)   
  - f2fs: fix to update i_ctime in __f2fs_setxattr() (Chao Yu)   
  - f2fs: fix typo (Yonggil Song)   
  - f2fs: enhance to update i_mode and acl atomically in f2fs_setattr() (Chao Yu)   
  - nfsd: return -EINVAL when namelen is 0 (Li Lingfeng) [Orabug: 37200650] {CVE-2024-47692}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [Orabug: 37200783] {CVE-2024-47737}
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan)   
  - RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [Orabug: 37200824] {CVE-2024-47749}
  - riscv: Fix fp alignment bug in perf_callchain_user() (Jinjie Ruan)   
  - RDMA/hns: Optimize hem allocation performance (Junxian Huang)   
  - watchdog: imx_sc_wdt: Don't disable WDT in suspend (Jonas Blixt)   
  - pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function (Wang Jianzheng)   
  - clk: ti: dra7-atl: Fix leak of of_nodes (David Lechner)   
  - pinctrl: single: fix missing error code in pcs_probe() (Yang Yingliang)   
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [Orabug: 37205521] {CVE-2024-47696}
  - PCI: xilinx-nwl: Fix register misspelling (Sean Anderson)   
  - PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (Dan Carpenter) [Orabug: 37205560] {CVE-2024-47756}
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [Orabug: 37200662] {CVE-2024-47697}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [Orabug: 37200669] {CVE-2024-47698}
  - clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228 (Jonas Karlman)   
  - perf time-utils: Fix 32-bit nsec parsing (Ian Rogers)   
  - perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time (Yang Jihong)   
  - perf sched timehist: Fix missing free of session in perf_sched__timehist() (Yang Jihong)   
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (Daniel Borkmann)   
  - nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [Orabug: 37200843] {CVE-2024-47757}
  - nilfs2: determine empty node blocks as corrupted (Ryusuke Konishi)   
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [Orabug: 37200676] {CVE-2024-47699}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [Orabug: 37200682] {CVE-2024-47701}
  - ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo)   
  - ext4: avoid negative min_clusters in find_group_orlov() (Kemeng Shi)   
  - smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso (Jiawei Ye)   
  - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (yangerkun)   
  - jbd2: introduce/export functions jbd2_journal_submit|finish_inode_data_buffers() (Mauricio Faria de Oliveira)   
  - kthread: fix task state in kthread worker if being frozen (Chen Yu)   
  - kthread: add kthread_work tracepoints (Rob Clark)   
  - xz: cleanup CRC32 edits from 2018 (Lasse Collin)   
  - selftests/bpf: Fix error compiling test_lru_map.c (Tony Ambardar)   
  - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc (Tony Ambardar)   
  - selftests/bpf: Fix compiling flow_dissector.c with musl-libc (Tony Ambardar)   
  - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c (Tony Ambardar)   
  - tpm: Clean up TPM space after command failure (Jonathan McDowell) [Orabug: 37200851] {CVE-2024-49851}
  - xen/swiotlb: add alignment check for dma buffers (Juergen Gross)   
  - xen: use correct end address of kernel for conflict checking (Juergen Gross)   
  - drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() (Yuesong Li)   
  - drm/msm: fix %s null argument error (Sherry Yang)   
  - ipmi: docs: don't advertise deprecated sysfs entries (Wolfram Sang)   
  - drm/msm/a5xx: fix races in preemption evaluation stage (Vladimir Lypak)   
  - drm/msm/a5xx: properly clear preemption records on resume (Vladimir Lypak)   
  - drm/msm/a5xx: disable preemption in submits by default (Vladimir Lypak)   
  - drm/msm: Fix incorrect file name output in adreno_request_fw() (Aleksandr Mishin)   
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [Orabug: 37200741] {CVE-2024-47723}
  - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets (Nikita Zhandarovich)   
  - drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode (Jonas Karlman)   
  - drm/rockchip: vop: Allow 4096px width scaling (Alex Bee)   
  - drm/radeon: properly handle vbios fake edid sizing (Alex Deucher)   
  - drm/radeon: Replace one-element array with flexible-array member (Paulo Miguel Almeida)   
  - drm/amdgpu: properly handle vbios fake edid sizing (Alex Deucher)   
  - drm/amdgpu: Replace one-element array with flexible-array member (Paulo Miguel Almeida)   
  - drm/stm: Fix an error handling path in stm_drm_platform_probe() (Christophe JAILLET)   
  - mtd: powernv: Add check devm_kasprintf() returned value (Charles Han)   
  - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() (Christophe JAILLET)   
  - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense (Artur Weber)   
  - power: supply: axp20x_battery: Remove design from min and max voltage (Chris Morgan)   
  - power: supply: axp20x_battery: allow disabling battery charging (Hermann Lauer)   
  - hwmon: (ntc_thermistor) fix module autoloading (Yuntao Liu)   
  - mtd: slram: insert break after errors in parsing the map (Mirsad Todorovac)   
  - hwmon: (max16065) Fix overflows seen when writing limits (Guenter Roeck)   
  - clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() (Ankit Agrawal)   
  - reset: berlin: fix OF node leak in probe() error path (Krzysztof Kozlowski)   
  - ARM: versatile: fix OF node leak in CPUs prepare (Krzysztof Kozlowski)   
  - ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property (Krzysztof Kozlowski)   
  - spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ (Andy Shevchenko)   
  - spi: ppc4xx: handle irq_of_parse_and_map() errors (Ma Ke)   
  - block, bfq: don't break merge chain in bfq_split_bfqq() (Yu Kuai)   
  - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (Yu Kuai)   
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (Yu Kuai)   
  - net: tipc: avoid possible garbage value (Su Hui)   
  - Bluetooth: btusb: Fix not handling ZPL/short-transfer (Luiz Augusto von Dentz)   
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (Kuniyuki Iwashima) [Orabug: 37205476] {CVE-2024-47709}
  - sock_map: Add a cond_resched() in sock_hash_free() (Eric Dumazet) [Orabug: 37200715] {CVE-2024-47710}
  - wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (Jiawei Ye) [Orabug: 37205503] {CVE-2024-47712}
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Dmitry Antipov) [Orabug: 37200721] {CVE-2024-47713}
  - mac80211: parse radiotap header when selecting Tx queue (Mathy Vanhoef)   
  - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors (Dmitry Antipov)   
  - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() (Dmitry Antipov)   
  - netfilter: nf_tables: reject expiration higher than timeout (Pablo Neira Ayuso)   
  - netfilter: nf_tables: reject element expiration with no timeout (Pablo Neira Ayuso)   
  - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire (Pablo Neira Ayuso)   
  - can: j1939: use correct function name in comment (Zhang Changzhong)   
  - mount: handle OOM on mnt_warn_timestamp_expiry (Olaf Hering)   
  - fs/namespace: fnic: Switch to use %ptTd (Andy Shevchenko)   
  - mount: warn only once about timestamp range expiration (Anthony Iliopoulos)   
  - fs: explicitly unregister per-superblock BDIs (Christoph Hellwig)   
  - wifi: ath9k: Remove error checks when creating debugfs entries (Toke Høiland-Jørgensen)   
  - wifi: ath9k: fix parameter check in ath9k_init_debug() (Minjie Du)   
  - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (Aleksandr Mishin)   
  - USB: usbtmc: prevent kernel-usb-infoleak (Edward Adam Davis) [Orabug: 37159778] {CVE-2024-47671}
  - USB: serial: pl2303: add device id for Macrosilicon MS3020 (Junhao Xie)   
  - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches (Toke Høiland-Jørgensen) [Orabug: 36544917] {CVE-2024-26885}
  - inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [Orabug: 36545060] {CVE-2024-26921}
  - gpio: prevent potential speculation leaks in gpio_device_get_desc() (Hagar Hemdan) [Orabug: 36993135] {CVE-2024-44931}
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Ferry Meng) [Orabug: 36891661] {CVE-2024-41016}
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Ferry Meng) [Orabug: 37159773] {CVE-2024-47670}
  - x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (Michael Kelley)   
  - spi: bcm63xx: Enable module autoloading (Liao Chen)   
  - drm: komeda: Fix an issue related to normalized zpos (hongchi.peng)   
  - ASoC: tda7419: fix module autoloading (Liao Chen)   
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Emmanuel Grumbach) [Orabug: 37159781] {CVE-2024-47672}
  - wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room() (Daniel Gabay)   
  - net: ftgmac100: Ensure tx descriptor updates are visible (Jacky Chou)   
  - microblaze: don't treat zero reserved memory regions as error (Mike Rapoport)   
  - pinctrl: at91: make it work with current gpiolib (Thomas Blocher)   
  - ALSA: hda/realtek - FIxed ALC285 headphone no sound (Kailang Yang)   
  - ALSA: hda/realtek - Fixed ALC256 headphone no sound (Kailang Yang)   
  - ASoC: allow module autoloading for table db1200_pids (Hongbo Li)   
  - soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps" (Krzysztof Kozlowski)   
  - spi: nxp-fspi: fix the KASAN report out-of-bounds bug (Han Xu) [Orabug: 37116548] {CVE-2024-46853}
  - net: dpaa: Pad packets to ETH_ZLEN (Sean Anderson) [Orabug: 37116551] {CVE-2024-46854}
  - net: ftgmac100: Enable TX interrupt to avoid TX timeout (Jacky Chou)   
  - net/mlx5e: Add missing link modes to ptys2ethtool_map (Shahar Shitrit)   
  - ice: fix accounting for filters shared by multiple VSIs (Jacob Keller)   
  - arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma (Quentin Schulz)   
  - scripts: kconfig: merge_config: config files: add a trailing newline (Anders Roxell)   
  - net: phy: vitesse: repair vsc73xx autonegotiation (Pawel Dembicki)   
  - net: ethernet: use ip_hdrlen() instead of bit shift (Moon Yeounsu)   
  - usbnet: ipheth: fix carrier detection in modes 1 and 4 (Foster Snowhill)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.338.3.el7uek]
changelog:
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli) [Orabug: 37304754] {CVE-2024-53060}
  - rds: Add rds stuck shutdown timeout (Rohit Nair)  [Orabug: 37180926]  
  - ACPI: ioremap: avoid redundant rounding to OS page size (Ard Biesheuvel)  [Orabug: 37243611]  
  - blk-mq: fix missing blk_account_io_done() in error path (Yu Kuai)  [Orabug: 37280096]  
  - Revert "net/mlx5: disable the 'fast unload' feature on Exadata systems" (Qing Huang)  [Orabug: 37285309]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.339.1.el7uek]
changelog:
  - net/rds: report pending-messages count in RDS_INQ response (Devesh Sharma)  [Orabug: 35596047] [Orabug: 35316633]  
  - net/rds: Introduce RDS-INQ feature to RDS protocol (Devesh Sharma)  [Orabug: 35316632] [Orabug: 37109336]  
  - net/rds: Supporting SIOCOUTQ to read pending sends (Devesh Sharma)  [Orabug: 34460809] [Orabug: 37072814]  
  - mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle))  [Orabug: 37270264]  
  - KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson)  [Orabug: 37273706]  
  - KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson)  [Orabug: 37273706]  
  - objtool: Default ignore INT3 for unreachable (Peter Zijlstra)  [Orabug: 37273706] {CVE-2022-29901}
  - x86/spec_ctrl: AMD AutoIBRS cannot be dynamically enabled or disabled (Alexandre Chartre)  [Orabug: 37310552]  
  - x86/msr: Add functions to set/clear the bit of an MSR on all cpus (Alexandre Chartre)  [Orabug: 37310552]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.339.2.el7uek]
changelog:
  - arm64/cpu_errata: Spectre-BHB mitigation for AMPERE1 expects a loop of 11 iterations. (Miguel Luis)  [Orabug: 37027863]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.339.1.el7uek]
changelog:
  - net/rds: report pending-messages count in RDS_INQ response (Devesh Sharma)  [Orabug: 35596047] [Orabug: 35316633]
  - net/rds: Introduce RDS-INQ feature to RDS protocol (Devesh Sharma)  [Orabug: 35316632] [Orabug: 37109336]
  - net/rds: Supporting SIOCOUTQ to read pending sends (Devesh Sharma)  [Orabug: 34460809] [Orabug: 37072814]
  - mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle))  [Orabug: 37270264]
  - KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson)  [Orabug: 37273706]
  - KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson)  [Orabug: 37273706]
  - objtool: Default ignore INT3 for unreachable (Peter Zijlstra)  [Orabug: 37273706] {CVE-2022-29901}
  - x86/spec_ctrl: AMD AutoIBRS cannot be dynamically enabled or disabled (Alexandre Chartre)  [Orabug: 37310552]
  - x86/msr: Add functions to set/clear the bit of an MSR on all cpus (Alexandre Chartre)  [Orabug: 37310552]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.339.3.el7uek]
changelog:
  - Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" (Sherry Yang)  [Orabug: 37364531]  
  - rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 37265127]  
  - rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 37265125]  
  - rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 37265123]  
  - rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 37265121]  
  - rds: rds_inc_init() should initialize the inc->i_conn_path field (William Kucharski)  [Orabug: 37265117]  
  - rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 37265115]  
  - md/raid10: fix task hung in raid10d (Li Nan)  [Orabug: 37126683]  
  - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() (Yu Kuai)  [Orabug: 37126683]  
  - md/raid10: avoid deadlock on recovery. (Vitaly Mayatskikh)  [Orabug: 37126683]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.339.3.el7uek]
changelog:
  - Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" (Sherry Yang)  [Orabug: 37364531]
  - rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 37265127]
  - rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 37265125]
  - rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 37265123]
  - rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 37265121]
  - rds: rds_inc_init() should initialize the inc->i_conn_path field (William Kucharski)  [Orabug: 37265117]
  - rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 37265115]
  - md/raid10: fix task hung in raid10d (Li Nan)  [Orabug: 37126683]
  - md/raid10: factor out code from wait_barrier() to stop_waiting_barrier() (Yu Kuai)  [Orabug: 37126683]
  - md/raid10: avoid deadlock on recovery. (Vitaly Mayatskikh)  [Orabug: 37126683]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.339.4.el7uek]
changelog:
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)   
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Aurelien Jarno)   
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Andrew Morton)   
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner)   
  - Revert "unicode: Don't special case ignorable code points" (Linus Torvalds)   
  - powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)   
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.339.4.el7uek]
changelog:
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Aurelien Jarno)
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Andrew Morton)
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner) [Orabug: 37434173] {CVE-2024-56644}
  - Revert "unicode: Don't special case ignorable code points" (Linus Torvalds)
  - powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.339.5.el7uek]
changelog:
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
  - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393533]
  - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37393533]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.4.17-2136.339.5.1.el7uek]
changelog:
  - Revert "xen/swiotlb: add alignment check for dma buffers" (Harshvardhan Jha)  [Orabug: 37510955]  
  - vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  [Orabug: 37511007]  
  - Revert "vfio/iommu_type1: Fix some sanity checks in detach group" (Dongli Zhang)  [Orabug: 37511007]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.4.17-2136.339.5.1.el7uek]
changelog:
  - Revert "xen/swiotlb: add alignment check for dma buffers" (Harshvardhan Jha)  [Orabug: 37510955]
  - vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  [Orabug: 37511007]
  - Revert "vfio/iommu_type1: Fix some sanity checks in detach group" (Dongli Zhang)  [Orabug: 37511007]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.339.4.el7uek]
changelog:
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Aurelien Jarno)
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Andrew Morton)
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner)
  - Revert "unicode: Don't special case ignorable code points" (Linus Torvalds)
  - powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.339.5.el7uek]
changelog:
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)   
  - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393533]  
  - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37393533]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.340.1.el7uek]
changelog:
  - rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37092563]
  - RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger)  [Orabug: 37029739]
  - RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger)  [Orabug: 37029739]
  - IB/uverbs: Enable CQ ioctl commands by default (Yishai Hadas)  [Orabug: 37029739]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.340.2.el7uek]
changelog:
  - LTS tag: v5.4.288 (Alok Tiwari)
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
  - xen/netfront: fix crash when removing device (Juergen Gross) [Orabug: 37427542] {CVE-2024-53240}
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
  - blk-iocost: fix weight updates of inner active iocgs (Tejun Heo)
  - blk-iocost: clamp inuse and skip noops in __propagate_weights() (Tejun Heo)
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
  - qca_spi: Make driver probing reliable (Stefan Wahren)
  - qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
  - ACPI: resource: Fix memory resource type union access (Ilpo Järvinen)
  - net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) [Orabug: 37434237] {CVE-2024-56659}
  - tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [Orabug: 37506456] {CVE-2024-56661}
  - batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
  - batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
  - batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
  - bpf, sockmap: Fix update element with same (Michal Luczaj)
  - xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [Orabug: 37434264] {CVE-2024-56670}
  - usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (Stefan Wahren)
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
  - usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
  - LTS tag: v5.4.287 (Alok Tiwari)
  - bpf, xdp: Update devmap comments to reflect napi/rcu usage (John Fastabend)
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [Orabug: 37427489] {CVE-2024-53150}
  - PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
  - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" (Zhang Zekun)
  - modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
  - jffs2: Fix rtime decompressor (Richard Weinberger)
  - jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
  - perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434047] {CVE-2024-56615}
  - xdp: Simplify devmap cleanup (Björn Töpel)
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
  - powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han) [Orabug: 37433861] {CVE-2024-56586}
  - nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
  - pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabás Czémán)
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Mäkisara)
  - scsi: st: Don't modify unknown block number in MTIOCGET (Kai Mäkisara)
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha) [Orabug: 37433869] {CVE-2024-56587}
  - tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
  - netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
  - net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
  - rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
  - ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (Hilda Wu)
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis) [Orabug: 37433908] {CVE-2024-56593}
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang) [Orabug: 37433914] {CVE-2024-56594}
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) [Orabug: 37433920] {CVE-2024-56595}
  - jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) [Orabug: 37433928] {CVE-2024-56596}
  - jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) [Orabug: 37433934] {CVE-2024-56597}
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [Orabug: 37433941] {CVE-2024-56598}
  - wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
  - wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [Orabug: 37433955] {CVE-2024-56600}
  - net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [Orabug: 37433962] {CVE-2024-56601}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [Orabug: 37433970] {CVE-2024-56602}
  - net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [Orabug: 37433977] {CVE-2024-56603}
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [Orabug: 37433990] {CVE-2024-56605}
  - af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [Orabug: 37433996] {CVE-2024-56606}
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
  - net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
  - samples/bpf: Fix a resource leak (Zhu Jun)
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
  - drm/mcde: Enable module autoloading (Liao Chen)
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquín Ignacio Aramendía)
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
  - mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
  - dma-buf: fix dma_fence_array_signaled v4 (Christian König)
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37434065] {CVE-2024-56619}
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
  - HID: wacom: fix when get product name maybe null pointer (WangYuli) [Orabug: 37434108] {CVE-2024-56629}
  - bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
  - ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [Orabug: 37434113] {CVE-2024-56630}
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [Orabug: 37434127] {CVE-2024-56633}
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
  - gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) [Orabug: 37434131] {CVE-2024-56634}
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski)
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
  - x86/asm: Reorder early variables (Jiri Slaby)
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen) [Orabug: 37433540] {CVE-2024-53198}
  - xen/xenbus: fix locking (Juergen Gross)
  - xenbus/backend: Protect xenbus callback with lock (SeongJae Park)
  - xenbus/backend: Add memory pressure handler callback (SeongJae Park)
  - xen/xenbus: reference count registered modules (Paul Durrant)
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [Orabug: 37434143] {CVE-2024-56637}
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
  - net/qed: allow old cards not supporting "num_images" to work (Louis Leseur)
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [Orabug: 37434161] {CVE-2024-56642}
  - tipc: add new AEAD key structure for user API (Tuong Lien)
  - tipc: enable creating a "preliminary" node (Tuong Lien)
  - tipc: add reference counter to bearer (Tuong Lien)
  - dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [Orabug: 37434167] {CVE-2024-56643}
  - can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
  - net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
  - netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [Orabug: 37434200] {CVE-2024-56650}
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
  - drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
  - nfsd: make sure exp active before svc_export_show (Yang Erkun) [Orabug: 37433745] {CVE-2024-56558}
  - dm thin: Add missing destroy_work_on_stack() (Yuan Can)
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li) [Orabug: 37433756] {CVE-2024-56562}
  - util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
  - ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu) [Orabug: 37433772] {CVE-2024-56567}
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
  - ftrace: Fix regression with module command in stack_trace_filter (guoweikang) [Orabug: 37433784] {CVE-2024-56569}
  - ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [Orabug: 37433789] {CVE-2024-56570}
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui) [Orabug: 37433798] {CVE-2024-56572}
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [Orabug: 37433805] {CVE-2024-56574}
  - media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [Orabug: 37433817] {CVE-2024-56576}
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [Orabug: 37433832] {CVE-2024-56581}
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
  - ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
  - sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) [Orabug: 37433393] {CVE-2024-53165}
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [Orabug: 37434314] {CVE-2024-56688}
  - SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE (Trond Myklebust)
  - SUNRPC: correct error code comment in xs_tcp_setup_socket() (Calum Mackay)
  - modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
  - 9p/xen: fix release of IRQ (Alex Zenla) [Orabug: 37434374] {CVE-2024-56704}
  - 9p/xen: fix init sequence (Alex Zenla)
  - block: return unsigned int from bdev_io_min (Christoph Hellwig)
  - jffs2: fix use of uninitialized variable (Qingfang Deng)
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed) [Orabug: 37433414] {CVE-2024-53171}
  - ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [Orabug: 37433419] {CVE-2024-53172}
  - ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [Orabug: 37434456] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [Orabug: 37433426] {CVE-2024-53173}
  - um: Always dump trace for specified task in show_stack (Tiwei Bie)
  - um: Clean up stacktrace dump (Johannes Berg)
  - um: add show_stack_loglvl() (Dmitry Safonov)
  - um/sysrq: remove needless variable sp (Dmitry Safonov)
  - um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
  - um: Fix potential integer overflow during physmem setup (Tiwei Bie) [Orabug: 37427464] {CVE-2024-53145}
  - rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
  - SUNRPC: make sure cache entry active before cache_show (Yang Erkun) [Orabug: 37433433] {CVE-2024-53174}
  - NFSD: Prevent a potential integer overflow (Chuck Lever) [Orabug: 37427470] {CVE-2024-53146}
  - lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
  - usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
  - ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
  - media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen) [Orabug: 37434358] {CVE-2024-56700}
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
  - um: vector: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433467] {CVE-2024-53181}
  - serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
  - um: net: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433475] {CVE-2024-53183}
  - um: ubd: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433484] {CVE-2024-53184}
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
  - spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [Orabug: 37388867] {CVE-2024-53141}
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" (Greg Kroah-Hartman)
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
  - comedi: Flush partial mappings in error case (Jann Horn) [Orabug: 37427482] {CVE-2024-53148}
  - PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner) [Orabug: 37433516] {CVE-2024-53194}
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
  - jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
  - ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoît Sevens) [Orabug: 37433532] {CVE-2024-53197}
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
  - usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
  - apparmor: fix 'Do simple duplicate message elimination' (chao liu)
  - staging: greybus: uart: clean up TIOCGSERIAL (Johan Hovold)
  - misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
  - USB: chaoskey: fail open after removal (Oliver Neukum)
  - usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
  - ipmr: fix tables suspicious RCU usage (Paolo Abeni)
  - ipmr: convert /proc handlers to rcu_read_lock() (Eric Dumazet)
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines (Vitalii Mordan)
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
  - power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [Orabug: 37433578] {CVE-2024-53214}
  - NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [Orabug: 37433594] {CVE-2024-53217}
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
  - rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
  - rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
  - rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
  - perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
  - perf trace: Do not lose last events in a race (Benjamin Peterson)
  - m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Järvinen)
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
  - perf probe: Correct demangled symbols in C++ program (Leo Yan)
  - perf cs-etm: Don't flush when packet_queue fills up (James Clark)
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
  - clk: axi-clkgen: use devm_platform_ioremap_resource() short-hand (Alexandru Ardelean)
  - dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
  - dt-bindings: clock: adi,axi-clkgen: convert old binding to yaml format (Alexandru Ardelean)
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) [Orabug: 37434478] {CVE-2024-56746}
  - fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [Orabug: 37427503] {CVE-2024-53155}
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434484] {CVE-2024-56747}
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434489] {CVE-2024-56748}
  - scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [Orabug: 37433630] {CVE-2024-53227}
  - mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
  - mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
  - cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) [Orabug: 37434429] {CVE-2024-56723}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) [Orabug: 37434434] {CVE-2024-56724}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) [Orabug: 37434330] {CVE-2024-56691}
  - mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
  - mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
  - ALSA: 6fire: Release resources at card release (Takashi Iwai) [Orabug: 37433660] {CVE-2024-53239}
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433666] {CVE-2024-56531}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433672] {CVE-2024-56532}
  - net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
  - selftests: net: really check for bg process completion (Paolo Abeni)
  - bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
  - drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
  - drm/etnaviv: fix power register offset on GC300 (Doug Brown)
  - drm/etnaviv: dump: fix sparse warnings (Marc Kleine-Budde)
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [Orabug: 37433695] {CVE-2024-56539}
  - bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
  - ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
  - ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
  - ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [Orabug: 37427509] {CVE-2024-53156}
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [Orabug: 37427515] {CVE-2024-53157}
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
  - tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
  - efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar)
  - mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [Orabug: 37427524] {CVE-2024-53158}
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
  - crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [Orabug: 37434298] {CVE-2024-56681}
  - crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [Orabug: 37434323] {CVE-2024-56690}
  - EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
  - EDAC/bluefield: Fix potential integer overflow (David Thompson) [Orabug: 37427533] {CVE-2024-53161}
  - firmware: google: Unregister driver_info on failure (Yuan Can)
  - firmware: google: Unregister driver_info on failure and exit in gsmi (Arthur Heymans)
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [Orabug: 37433720] {CVE-2024-56548}
  - s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
  - m68k: mvme147: Reinstate early console (Daniel Palmer)
  - m68k: mvme16x: Add and use "mvme16x.h" (Geert Uytterhoeven)
  - m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
  - nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [Orabug: 37434510] {CVE-2024-56756}
  - initramfs: avoid filename buffer overrun (David Disseldorp) [Orabug: 37388874] {CVE-2024-53142}
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
  - x86/xen/pvh: Annotate indirect branch as safe (Josh Poimboeuf)
  - nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
  - cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohár) [Orabug: 37206284] {CVE-2024-49996}
  - ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
  - regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
  - soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
  - net: usb: qmi_wwan: add Quectel RG650V (Benoît Monin)
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
  - selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
  - mac80211: fix user-power when emulating chanctx (Ben Greear)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
  - kbuild: Use uname for LINUX_COMPILE_HOST detection (Chris Down)
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388819] {CVE-2024-53130}
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388825] {CVE-2024-53131}
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson) [Orabug: 37388846] {CVE-2024-53135}
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [Orabug: 37388753] {CVE-2024-53112}
  - net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
  - net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski) [Orabug: 37388861] {CVE-2024-53140}
  - LTS tag: v5.4.286 (Alok Tiwari)
  - 9p: fix slab cache name creation for real (Linus Torvalds)
  - md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [Orabug: 37331928] {CVE-2024-53101}
  - powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
  - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
  - bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
  - 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
  - ALSA: usb-audio: Add endianness annotations (Jan Schär)
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [Orabug: 37298681] {CVE-2024-50264}
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [Orabug: 37344480] {CVE-2024-53103}
  - ftrace: Fix possible use-after-free issue in ftrace_location() (Zheng Yejian) [Orabug: 36753574] {CVE-2024-38588}
  - NFSD: Fix NFSv4's PUTPUBFH operation (Chuck Lever)
  - ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schär)
  - ALSA: usb-audio: Support jack detection on Dell dock (Jan Schär)
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [Orabug: 37298685] {CVE-2024-50265}
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
  - USB: serial: option: add Quectel RG650V (Benoît Monin)
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [Orabug: 37298695] {CVE-2024-50267}
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [Orabug: 37298703] {CVE-2024-50269}
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [Orabug: 37344485] {CVE-2024-53104}
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [Orabug: 36753372] {CVE-2024-38538}
  - spi: fix use-after-free of the add_lock mutex (Michael Walle)
  - spi: Fix deadlock when adding SPI controllers on SPI buses (Mark Brown)
  - mtd: rawnand: protect access to rawnand devices while in suspend (Sean Nyekjaer)
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [Orabug: 37298715] {CVE-2024-50273}
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [Orabug: 37304779] {CVE-2024-53066}
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [Orabug: 37298732] {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [Orabug: 37298737] {CVE-2024-50279}
  - dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
  - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher) [Orabug: 37298751] {CVE-2024-50282}
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [Orabug: 37298782] {CVE-2024-50287}
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [Orabug: 37298797] {CVE-2024-50290}
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [Orabug: 37304763] {CVE-2024-53061}
  - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
  - media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
  - media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [Orabug: 37304769] {CVE-2024-53063}
  - media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) [Orabug: 37298811] {CVE-2024-50296}
  - can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [Orabug: 37298820] {CVE-2024-50299}
  - net: enetc: set MAC address to the VF net_device (Wei Fang)
  - enetc: simplify the return expression of enetc_vf_set_mac_addr() (Qinglang Miao)
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37298827] {CVE-2024-50301}
  - HID: core: zero-initialize the report buffer (Jiri Kosina) [Orabug: 37298834] {CVE-2024-50302}
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
  - ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
  - ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
  - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.4.17-2136.340.3.el7uek]
changelog:
  - Revert "xen/swiotlb: add alignment check for dma buffers" (Harshvardhan Jha)  [Orabug: 37475435]
  - vfio/iommu_type1: Fix some sanity checks in detach group (Keqian Zhu)  [Orabug: 37136890]
  - Revert "vfio/iommu_type1: Fix some sanity checks in detach group" (Dongli Zhang)  [Orabug: 37136890]
  - rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Håkon Bugge)  [Orabug: 36693622]
  - rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 36693622]
  - rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 36693622]
  - Revert "KVM: SVM: Add a module parameter to override iommu AVIC usage" (Alejandro Jimenez)  [Orabug: 35001679]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.340.4.el7uek]
changelog:
  - ftrace: use preempt_enable/disable notrace macros to avoid double fault (Koichiro Den)
  - nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
  - mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.340.4.el7uek]
changelog:
  - ftrace: use preempt_enable/disable notrace macros to avoid double fault (Koichiro Den)
  - nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
  - mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter) [Orabug: 37506347] {CVE-2024-56766}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.341.1.el7uek]
changelog:
  - kpcimgr: fix flush_icache_range arguments (Joe Dobosenski)  [Orabug: 37525298]
  - uek-rpm: Update network stress testing options for embedded2 (Joe Dobosenski)  [Orabug: 37530220]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.341.2.el7uek]
changelog:
  - LTS tag: v5.4.289 (Sherry Yang)
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)
  - drm: adv7511: Drop dsi single lane support (Biju Das)
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)
  - RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)
  - modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
  - ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
  - net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
  - bpf: fix potential error return (Anton Protopopov)
  - sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
  - wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
  - ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)
  - ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
  - net: llc: reset skb->transport_header (Antonio Pastor)
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
  - netfilter: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)
  - netrom: check buffer length before accessing it (Ilya Shchipletsov)
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
  - drm: bridge: adv7511: Enable SPDIF DAI (Bogdan Togorean)
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
  - net/mlx5: Make API mlx5_core_is_ecpf accept const pointer (Parav Pandit)
  - IB/mlx5: Introduce and use mlx5_core_is_vf() (Parav Pandit)
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)
  - selinux: ignore unknown extended permissions (Thiébaud Weksteen)
  - ipv6: prevent possible UAF in ip6_xmit() (Eric Dumazet)
  - skb_expand_head() adjust skb->truesize incorrectly (Vasily Averin)
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - tracing: Constify string literal data member in struct trace_event_call (Christian Göttsche)
  - bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen)
  - ipv6: fix possible UAF in ip6_finish_output2() (Eric Dumazet) [Orabug: 37029070] {CVE-2024-44986}
  - ipv6: use skb_expand_head in ip6_xmit (Vasily Averin)
  - ipv6: use skb_expand_head in ip6_finish_output2 (Vasily Averin)
  - skbuff: introduce skb_expand_head() (Vasily Averin)
  - MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
  - epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei)
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
  - regmap: Use correct format specifier for logging range errors (Mark Brown)
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) [Orabug: 37452681] {CVE-2024-56767}
  - dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
  - mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
  - bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [Orabug: 37452687] {CVE-2024-56769}
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
  - of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
  - nilfs2: prevent use of deleted inode (Edward Adam Davis)
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
  - btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
  - zram: refuse to use zero sized block device as backing device (Kairui Song)
  - sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
  - USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
  - USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
  - USB: serial: option: add TCL IK512 MBIM & ECM (Daniel Swanemar)
  - efivarfs: Fix error on non-existent file (James Bottomley)
  - i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
  - chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
  - net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
  - net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
  - ionic: use ee->offset when returning sprom data (Shannon Nelson)
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
  - erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
  - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size (Gao Xiang)
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
  - ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
  - PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
  - net: sched: fix ordering of qlen adjustment (Lion Ackermann) [Orabug: 37433383] {CVE-2024-53164}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.341.3.el7uek]
changelog:
  - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan)  [Orabug: 37565787]
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe)  [Orabug: 37565787]
  - io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)  [Orabug: 37565787]
  - fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)  [Orabug: 37565787]
  - io_uring: rename kiocb_end_write() local helper (Amir Goldstein)  [Orabug: 37565787]
  - io_uring/sqpoll: close race on waiting for sqring entries (Jens Axboe)  [Orabug: 37565787]
  - io_uring/sqpoll: do not put cpumask on stack (Felix Moessbauer)  [Orabug: 37565787]
  - io_uring/sqpoll: retain test for whether the CPU is valid (Jens Axboe)  [Orabug: 37565787]
  - io_uring/sqpoll: do not allow pinning outside of cpuset (Felix Moessbauer)  [Orabug: 37565787]
  - io_uring/io-wq: limit retrying worker initialisation (Pavel Begunkov)  [Orabug: 37565787]
  - vfs: check dentry is still valid in get_link() (Ian Kent)  [Orabug: 37536393]
  - RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju)  [Orabug: 37260584]
  - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever)  [Orabug: 37206187]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.341.3.1.el7uek]
changelog:
  - Revert "NFSD: Limit the number of concurrent async COPY operations" (Sherry Yang)  [Orabug: 37667080]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.341.3.2.el7uek]
changelog:
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam)  [Orabug: 37707634]  {CVE-2024-57892}
  - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)  [Orabug: 37707634]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.341.3.3.el7uek]
changelog:
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)  [Orabug: 37727037]  {CVE-2024-39494}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.342.1.el7uek]
changelog:
  - cgroup: Make operations on the cgroup root_list RCU safe (Yafang Shao)  [Orabug: 37621585]
  - uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi)  [Orabug: 37619102]
  - oracleasm: Fix PI when use_logical_block_size is set (Martin K. Petersen)  [Orabug: 37503280]
  - oracleasm: Add support for per-I/O block size selection (Martin K. Petersen)  [Orabug: 37503280]
  - perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (Alexander Antonov)  [Orabug: 36882938]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.342.2.el7uek]
changelog:
  - Revert "NFSD: Limit the number of concurrent async COPY operations" (Sherry Yang)  [Orabug: 37660195]
  - rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Håkon Bugge)  [Orabug: 37586090]
  - dm rq: don't queue request to blk-mq during DM suspend (Ming Lei)  [Orabug: 37010188]
  - dm: rearrange core declarations for extended use from dm-zone.c (Damien Le Moal)  [Orabug: 37010188]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.342.3.el7uek]
changelog:
  - LTS tag: v5.4.290 (Alok Tiwari)
  - Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos)
  - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann)
  - drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal)
  - Input: xpad - add support for wooting two he (arm) (Jack Greiner)
  - Input: xpad - add unofficial Xbox 360 wireless receiver clone (Nilton Perim Neto)
  - Input: atkbd - map F23 key to support default copilot shortcut (Mark Pearson)
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman)
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Qasim Ijaz)
  - ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li)
  - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path (Theodore Ts'o)
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
  - net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park)
  - net: xen-netback: hash.c: Use built-in RCU list checking (Madhuparna Bhowmik)
  - signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die (Eric W. Biederman)
  - m68k: Add missing mmap_read_lock() to sys_cacheflush() (Liam Howlett)
  - m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal (Al Viro)
  - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher)
  - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag (Philippe Simons)
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Xiang Zhang)
  - ASoC: wm8994: Add depends on MFD core (Charles Keepax)
  - net: fix data-races around sk->sk_forward_alloc (Wang Liang)
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Suraj Sonawane)
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet)
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal)
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Rik van Riel)
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit)
  - nvmet: propagate npwg topology (Luis Chamberlain)
  - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov)
  - kheaders: Ignore silly-rename files (David Howells)
  - hfs: Sanity check the root record (Leo Stone)
  - mac802154: check local interfaces before deleting sdata list (Lizhi Xu)
  - i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang)
  - drm/v3d: Ensure job pointer is set to NULL after job completion (Maíra Canal)
  - nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter)
  - gtp: Destroy device along with udp socket's netns dismantle. (Kuniyuki Iwashima)
  - gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). (Kuniyuki Iwashima)
  - gtp: use exit_batch_rtnl() method (Eric Dumazet)
  - net: add exit_batch_rtnl() method (Eric Dumazet)
  - net: net_namespace: Optimize the code (Yajun Deng)
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla)
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam)
  - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
  - phy: core: fix code style in devm_of_phy_provider_unregister (Vinod Koul)
  - arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis)
  - arm64: dts: rockchip: add #power-domain-cells to power domain nodes (Johan Jonker)
  - arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399 (Johan Jonker)
  - arm64: dts: rockchip: fix defines in pd_vio node for rk3399 (Johan Jonker)
  - iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori)
  - iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori)
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam)
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song)
  - iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco)
  - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco)
  - iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco)
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco)
  - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco)
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M)
  - usb: fix reference leak in usb_new_device() (Ma Ke)
  - USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng)
  - USB: usblp: return error when setting unsupported protocol (Jun Yan)
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu)
  - USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold)
  - usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel)
  - staging: iio: ad9832: Correct phase range check (Zicheng Qu)
  - staging: iio: ad9834: Correct phase range check (Zicheng Qu)
  - USB: serial: option: add Neoway N723-EA support (Michal Hrusecky)
  - USB: serial: option: add MeiG Smart SRM815 (Chukun Pan)
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen)
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede)
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede)
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li)
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen)
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington)
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet)
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan)
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog (Jason Xing)
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor)
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura)
  - dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai)
  - dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai)
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai)
  - jbd2: flush filesystem device before updating tail sequence (Zhang Yi)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.342.4.el7uek]
changelog:
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Høiland-Jørgensen)
  - udf: Fix use of check_add_overflow() with mixed type arguments (Ben Hutchings)
  - x86/xen: allow larger contiguous memory regions in PV guests (Juergen Gross)
  - xen: remove a confusing comment on auto-translated guest I/O (Petr Tesarik)
  - ALSA: hda/realtek: Fixup ALC225 depop procedure (Kailang Yang)
  - ALSA: hda/realtek - Add type for ALC287 (Kailang Yang)
  - net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel)
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang)
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao)
  - Revert "btrfs: avoid monopolizing a core when activating a swap file" (Koichiro Den)
  - gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). (Kuniyuki Iwashima)
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin)
  - rds: Make sure transmit path and connection tear-down does not run concurrently (Håkon Bugge)  [Orabug: 36308571]
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (Yanjun Zhang)  [Orabug: 37206487]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.342.5.el7uek]
changelog:
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)  [Orabug: 36835558]  {CVE-2024-39494}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.342.5.1.el7uek]
changelog:
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0))  [Orabug: 37838449]
  - Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy" (Magali Lemes)  [Orabug: 37838449]
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0))  [Orabug: 37846696]
  - Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy" (Magali Lemes)  [Orabug: 37846696]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.342.5.2.el7uek]
changelog:
  - uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda)  [Orabug: 37851062]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.1.el7uek]
changelog:
  - rds: ib: Make traffic_class visible to user-space (Håkon Bugge)  [Orabug: 37617866]
  - rds: ib: Remove incorrect update of the path record sl and qos_class fields (Håkon Bugge)  [Orabug: 37617866]
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Felix Fietkau)  [Orabug: 36683418]  {CVE-2024-36929}
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Antoine Tenart)  [Orabug: 36643088]
  - udp: never accept GSO_FRAGLIST packets (Paolo Abeni)  [Orabug: 36643088]
  - udp: initialize is_flist with 0 in udp_gro_receive (Xin Long)  [Orabug: 36643088]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.2.el7uek]
changelog:
  - rds: ib: Do not attempt to insert RDMA exthdr twice (Håkon Bugge)  [Orabug: 37721764]
  - net: mana: Fix TX CQE error handling (Haiyang Zhang)  [Orabug: 36983924]  {CVE-2023-52532}
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh)  [Orabug: 36929747]
  - rds: ib: Fix racy send affinity work cancellation (Håkon Bugge)  [Orabug: 36605776]
  - uek-rpm: install the perf exec dir (Stephen Brennan)  [Orabug: 35023180]
  - uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda)  [Orabug: 37764002]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.343.3.el7uek]
changelog:
  - LTS tag: v5.4.291 (Sherry Yang)
  - eeprom: digsy_mtc: Make GPIO lookup table match the device (Andy Shevchenko)
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku)
  - intel_th: pci: Add Panther Lake-P/U support (Alexander Shishkin)
  - intel_th: pci: Add Panther Lake-H support (Alexander Shishkin)
  - intel_th: pci: Add Arrow Lake support (Pawel Chmielewski)
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher)
  - xhci: pci: Fix indentation in the PCI device ID definitions (Andy Shevchenko)
  - usb: gadget: Check bmAttributes only if configuration is valid (Prashanth K)
  - usb: gadget: Fix setting self-powered state on suspend (Marek Szyprowski)
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes (Prashanth K)
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality (AngeloGioacchino Del Regno)
  - usb: typec: ucsi: increase timeout for PPM reset operations (Fedor Pchelkin)
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich)
  - usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea)
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Miao Li)
  - usb: renesas_usbhs: Use devm_usb_get_phy() (Claudiu Beznea)
  - usb: renesas_usbhs: Call clk_put() (Claudiu Beznea)
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" (Christian Heusel)
  - gpio: rcar: Fix missing of_node_put() call (Fabrizio Castro)
  - net: ipv6: fix missing dst ref drop in ila lwtunnel (Justin Iurman)
  - net: ipv6: fix dst ref loop in ila lwtunnel (Justin Iurman)
  - net-timestamp: support TCP GSO case for a few missing flags (Jason Xing)
  - vlan: enforce underlying device type (Oscar Maes)
  - ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen)
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Nikolay Aleksandrov)
  - drm/sched: Fix preprocessor guard (Philipp Stanner)
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() (Xinghuo Chen)
  - llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet)
  - hwmon: (ad7314) Validate leading zero bits and return error (Erik Schumacher)
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table (Maud Spierings)
  - hwmon: (pmbus) Initialise page count in pmbus_identify() (Titus Rwantare)
  - caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov)
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart)
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu)
  - HID: google: fix unused variable warning under !CONFIG_ACPI (Yu-Chun Lin)
  - wifi: iwlwifi: limit printed string from FW file (Johannes Berg)
  - mm/page_alloc: fix uninitialized variable (Hao Zhang)
  - rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li)
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li)
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov)
  - wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich)
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (Ahmed S. Darwish)
  - x86/cpu: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e (Mingcong Bai)
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M (Richard Thier)
  - ALSA: hda/realtek: update ALC222 depop optimize (Kailang Yang)
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Hoku Ishibe)
  - HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov)
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" (Rob Herring (Arm))
  - drm/amdgpu: disable BAR resize on Dell G5 SE (Alex Deucher)
  - drm/amdgpu: Check extended configuration space register when system uses large bar (Ma Jun)
  - drm/amdgpu: skip BAR resizing if the bios already did it (Alex Deucher)
  - acct: perform last write from workqueue (Christian Brauner)
  - kernel/acct.c: use dedicated helper to access rlimit values (Yang Yang)
  - kernel/acct.c: use #elif instead of #end and #elif (Hui Su)
  - drop_monitor: fix incorrect initialization order (Gavrilov Ilia)
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le)
  - sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner)
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (Kaustabh Chakraborty)
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (BH Hsieh)
  - usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich)
  - perf/core: Fix low freq setting via IOC_PERIOD (Kan Liang)
  - ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov)
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems (Russell Senior)
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. (Harshal Chaudhari)
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet() (Philo Lu)
  - ASoC: es8328: fix route from DAC to output (Nicolas Frattaroli)
  - net: cadence: macb: Synchronize stats calculations (Sean Anderson)
  - sunrpc: suppress warnings for unused procfs functions (Arnd Bergmann)
  - batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann)
  - batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann)
  - acct: block access to kernel internal filesystems (Christian Brauner)
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (John Veness)
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li)
  - tee: optee: Fix supplicant wait loop (Sumit Garg)
  - power: supply: da9150-fg: fix potential overflow (Andrey Vatoropin)
  - flow_dissector: Fix port range key handling in BPF conversion (Cong Wang)
  - flow_dissector: Fix handling of mixed port and port-range keys (Cong Wang)
  - net: extract port range fields from fl_flow_key (Maksym Glubokiy)
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima)
  - geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima)
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Christophe Leroy)
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline (Christophe Leroy)
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h (Michael Ellerman)
  - USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue)
  - usb/gadget: f_midi: Replace tasklet with work (Davidlohr Bueso)
  - usb/gadget: f_midi: convert tasklets to use new tasklet_setup() API (Allen Pais)
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Selvarasu Ganesan)
  - usb: dwc3: Increase DWC3 controller halt timeout (Wesley Cheng)
  - memcg: fix soft lockup in the OOM process (Chen Ridong)
  - mm: update mark_victim tracepoints fields (Carlos Galo)
  - crypto: testmgr - some more fixes to RSA test vectors (Ignat Korchagin)
  - crypto: testmgr - populate RSA CRT parameters in RSA test vectors (Ignat Korchagin)
  - crypto: testmgr - fix version number of RSA tests (lei he)
  - crypto: testmgr - Fix wrong test case of RSA (Lei He)
  - crypto: testmgr - fix wrong key length for pkcs1pad (Lei He)
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu)
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li)
  - vlan: move dev_put into vlan_dev_uninit (Xin Long)
  - vlan: introduce vlan_dev_free_egress_priority (Xin Long)
  - pps: Fix a use-after-free (Calvin Owens)
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - x86/i8253: Disable PIT timer 0 when not in use (David Woodhouse)
  - parport_pc: add support for ASIX AX99100 (Jiaqing Zhao)
  - serial: 8250_pci: add support for ASIX AX99100 (Jiaqing Zhao)
  - can: ems_pci: move ASIX AX99100 ids to pci_ids.h (Jiaqing Zhao)
  - nilfs2: protect access to buffers with no active references (Ryusuke Konishi)
  - nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi)
  - nilfs2: do not output warnings when clearing dirty buffers (Ryusuke Konishi)
  - alpha: replace hardcoded stack offsets with autogenerated ones (Ivan Kokshaysky)
  - ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet)
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet)
  - arp: use RCU protection in arp_xmit() (Eric Dumazet)
  - neighbour: use RCU protection in __neigh_notify() (Eric Dumazet)
  - neighbour: delete redundant judgment statements (Li Zetao)
  - ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet)
  - ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet)
  - ipv4: use RCU protection in inet_select_addr() (Eric Dumazet)
  - ipv4: use RCU protection in rt_is_expired() (Eric Dumazet)
  - net: add dev_net_rcu() helper (Eric Dumazet)
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Jiri Pirko)
  - regmap-irq: Add missing kfree() (Jiasheng Jiang)
  - partitions: mac: fix handling of bogus partition table (Jann Horn)
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock (Wentao Liang)
  - alpha: align stack for page fault and user unaligned trap handlers (Ivan Kokshaysky)
  - serial: 8250: Fix fifo underflow on flush (John Keeping)
  - alpha: make stack 16-byte aligned (most cases) (Ivan Kokshaysky)
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero (Alexander Hölzl)
  - can: c_can: fix unbalanced runtime PM disable in error path (Krzysztof Kozlowski)
  - USB: serial: option: drop MeiG Smart defines (Johan Hovold)
  - USB: serial: option: fix Telit Cinterion FN990A name (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FN990B compositions (Fabio Porcedda)
  - USB: serial: option: add MeiG Smart SLM828 (Chester A. Unal)
  - usb: cdc-acm: Fix handling of oversized fragments (Jann Horn)
  - usb: cdc-acm: Check control transfer buffer size before access (Jann Horn)
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Marek Vasut)
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces (Alan Stern)
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping)
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Mathias Nyman)
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Lei Huang)
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Huacai Chen)
  - usb: dwc2: gadget: remove of_node reference upon udc_stop (Fabrice Gasnier)
  - usb: gadget: udc: renesas_usb3: Fix compiler warning (Guo Ren)
  - usb: roles: set switch registered flag early on (Elson Roy Serrao)
  - batman-adv: fix panic during interface removal (Andy Strohman)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Hans de Goede)
  - orangefs: fix a oob in orangefs_debug_write (Mike Marshall)
  - Grab mm lock before grabbing pt lock (Maksym Planeta)
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Ramesh Thomas)
  - media: cxd2841er: fix 64-bit division on gcc-9 (Arnd Bergmann)
  - gpio: bcm-kona: Add missing newline to dev_err format string (Artur Weber)
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ (Artur Weber)
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 (Artur Weber)
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec)
  - team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet)
  - vrf: use RCU protection in l3mdev_l3_out() (Eric Dumazet)
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet)
  - HID: multitouch: Add NULL check in mt_input_configured (Charles Han)
  - ocfs2: check dir i_size in ocfs2_find_entry (Su Yue)
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static (WangYuli)
  - ptp: Ensure info->enable callback is always set (Thomas Weißschuh)
  - net/ncsi: wait for the last response to Deselect Package before configuring channel (Paul Fertser)
  - misc: fastrpc: Fix registered buffer page address (Ekansh Gupta)
  - mtd: onenand: Fix uninitialized retlen in do_otp_read() (Ivan Stepchenko)
  - NFC: nci: Add bounds checking in nci_hci_create_pipe() (Dan Carpenter)
  - nilfs2: fix possible int overflows in nilfs_fiemap() (Nikita Zhandarovich)
  - ocfs2: handle a symlink read error correctly (Matthew Wilcox (Oracle))
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
  - nvmem: core: improve range check for nvmem_cell_write() (Jennifer Berringer)
  - crypto: qce - unregister previously registered algos in error path (Bartosz Golaszewski)
  - crypto: qce - fix goto jump in error path (Bartosz Golaszewski)
  - media: uvcvideo: Remove redundant NULL assignment (Ricardo Ribalda)
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Ricardo Ribalda)
  - media: ov5640: fix get_light_freq on auto (Sam Bobrowicz)
  - soc: qcom: smem_state: fix missing of_node_put in error path (Krzysztof Kozlowski)
  - kbuild: Move -Wenum-enum-conversion to W=2 (Nathan Chancellor)
  - powerpc/pseries/eeh: Fix get PE state translation (Narayana Murty N)
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Claudiu Beznea)
  - serial: sh-sci: Drop __initdata macro for port_cfg (Claudiu Beznea)
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (Stephan Gerhold)
  - usb: gadget: f_tcm: Don't prepare BOT write request twice (Thinh Nguyen)
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (Thinh Nguyen)
  - usb: gadget: f_tcm: Decrement command ref count on cleanup (Thinh Nguyen)
  - usb: gadget: f_tcm: Translate error to sense (Thinh Nguyen)
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer)
  - HID: hid-sensor-hub: don't use stale platform-data on remove (Heiko Stuebner)
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Zijun Hu)
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options (Zijun Hu)
  - of: Correct child specifier used as input of the 2nd nexus node (Zijun Hu)
  - perf bench: Fix undefined behavior in cmpworker() (Kuan-Wei Chiu)
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate (Anastasia Belova)
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration (Gabor Juhos)
  - drm/komeda: Add check for komeda_get_layer_fourcc_list() (Haoxiang Li)
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (David Hildenbrand)
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson)
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (Jakob Unterwurzacher)
  - binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter)
  - m68k: vga: Fix I/O defines (Thomas Zimmermann)
  - s390/futex: Fix FUTEX_OP_ANDN implementation (Heiko Carstens)
  - leds: lp8860: Write full EEPROM, not only half of it (Alexander Sverdlin)
  - cpufreq: s3c64xx: Fix compilation warning (Viresh Kumar)
  - tun: revert fix group permission check (Willem de Bruijn)
  - net: rose: lock the socket in rose_bind() (Eric Dumazet)
  - udp: gso: do not drop small packets when PMTU reduces (Yan Zhai)
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz)
  - gpu: drm_dp_cec: fix broken CEC adapter properties check (Hans Verkuil)
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry (Prasad Pandit)
  - nvme: handle connectivity loss in nvme_set_queue_count (Daniel Wagner)
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Michal Pecio)
  - usb: xhci: Add timeout argument in address_device USB HCD callback (Hardik Gajjar)
  - net: usb: rtl8150: enable basic endpoint checking (Nikita Zhandarovich)
  - net: usb: rtl8150: use new tasklet API (Emil Renner Berthing)
  - tasklet: Introduce new initialization API (Romain Perier)
  - kbuild: userprogs: use correct lld when linking through clang (Thomas Weißschuh)
  - media: uvcvideo: Remove dangling pointers (Ricardo Ribalda)
  - media: uvcvideo: Only save async fh if success (Ricardo Ribalda)
  - nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi)
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi)
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi)
  - spi-mxs: Fix chipselect glitch (Ralf Schlatterbeck)
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode (Xi Ruoyao)
  - APEI: GHES: Have GHES honor the panic= setting (Borislav Petkov)
  - HID: Wacom: Add PCI Wacom device support (Even Xu)
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id (Hans de Goede)
  - tomoyo: don't emit warning in tomoyo_write_control() (Tetsuo Handa)
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Dmitry Antipov)
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card (Shawn Lin)
  - tun: fix group permission check (Stas Sergeev)
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Kuan-Wei Chiu)
  - x86/amd_nb: Restrict init function to AMD-based systems (Yazen Ghannam)
  - sched: Don't try to catch up excess steal time. (Suleiman Souhlal)
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Josef Bacik)
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana)
  - btrfs: output the reason for open_ctree() failure (Qu Wenruo)
  - usb: gadget: f_tcm: Don't free command immediately (Thinh Nguyen)
  - media: uvcvideo: Fix double free in error path (Laurent Pinchart)
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (Alan Stern)
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (Jos Wang)
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection (Sean Rhodes)
  - ktest.pl: Check kernelrelease return in get_version (Ricardo B. Marliere)
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Chuck Lever)
  - hexagon: Fix unbalanced spinlock in die() (Lin Yujun)
  - hexagon: fix using plain integer as NULL pointer warning in cmpxchg (Willem de Bruijn)
  - genksyms: fix memory leak when the same symbol is read from *.symref file (Masahiro Yamada)
  - genksyms: fix memory leak when the same symbol is added from source (Masahiro Yamada)
  - net: sh_eth: Fix missing rtnl lock in suspend/resume path (Kory Maincent)
  - vsock: Allow retrying on connect() failure (Michal Luczaj)
  - perf trace: Fix runtime error of index out of bounds (Howard Chu)
  - net: davicom: fix UAF in dm9000_drv_remove (Chenyuan Yang)
  - net: rose: fix timer races against user threads (Eric Dumazet)
  - PM: hibernate: Add error handling for syscore_suspend() (Wentao Liang)
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Eric Dumazet)
  - net: fec: implement TSO descriptor cleanup (Dheeraj Reddy Jonnalagadda)
  - ubifs: skip dumping tnc tree when zroot is null (pangliyuan)
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (Oleksij Rempel)
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Joe Hattori)
  - module: Extend the preempt disabled section in dereference_symbol_descriptor(). (Sebastian Andrzej Siewior)
  - ocfs2: mark dquot as inactive if failed to start trans while releasing dquot (Su Yue)
  - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails (Guixin Liu)
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 (Paul Menzel)
  - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (Joe Hattori)
  - media: uvcvideo: Propagate buf->error to userspace (Ricardo Ribalda)
  - media: camif-core: Add check for clk_enable() (Jiasheng Jiang)
  - media: mipi-csis: Add check for clk_enable() (Jiasheng Jiang)
  - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (Zijun Hu)
  - media: lmedm04: Handle errors for lme2510_int_read (Chen Ni)
  - media: lmedm04: Use GFP_KERNEL for URB allocation/submission. (Malcolm Priestley)
  - media: rc: iguanair: handle timeouts (Oliver Neukum)
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (Joe Hattori)
  - ARM: dts: mediatek: mt7623: fix IR nodename (Rafał Miłecki)
  - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property (Chen-Yu Tsai)
  - rdma/cxgb4: Prevent potential integer overflow on 32bit (Dan Carpenter)
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array (Leon Romanovsky)
  - bpf: Send signals asynchronously if !preemptible (Puranjay Mohan)
  - perf report: Fix misleading help message about --demangle (Jiachen Zhang)
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Arnaldo Carvalho de Melo)
  - padata: fix sysfs store callback check (Thomas Weißschuh)
  - ktest.pl: Remove unused declarations in run_bisect_test function (Ba Jing)
  - perf header: Fix one memory leakage in process_bpf_prog_info() (Zhongqiu Han)
  - perf header: Fix one memory leakage in process_bpf_btf() (Zhongqiu Han)
  - ASoC: sun4i-spdif: Add clock multiplier settings (George Lander)
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande)
  - net: sched: Disallow replacing of child qdisc from one parent to another (Jamal Hadi Salim)
  - net/mlxfw: Drop hard coded max FW flash image size (Maher Sanalla)
  - net: let net.core.dev_weight always be non-zero (Liu Jian)
  - clk: analogbits: Fix incorrect calculation of vco rate delta (Bo Gan)
  - selftests: harness: fix printing of mismatch values in __EXPECT() (Dmitry V. Levin)
  - selftests/harness: Display signed values correctly (Kees Cook)
  - wifi: wlcore: fix unbalanced pm_runtime calls (Andreas Kemnade)
  - regulator: of: Implement the unwind path of of_regulator_match() (Joe Hattori)
  - team: prevent adding a device which is already a team device lower (Octavian Purdila)
  - cpupower: fix TSC MHz calculation (He Rongguang)
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: remove unused dualmac control leftovers (Dmitry Antipov)
  - wifi: rtlwifi: remove unused timer and related code (Dmitry Antipov)
  - rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel)
  - dt-bindings: mmc: controller: clarify the address-cells description (Neil Armstrong)
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (Thadeu Lima de Souza Cascardo)
  - rtlwifi: rtl8192se Rename RT_TRACE to rtl_dbg (Larry Finger)
  - wifi: rtlwifi: do not complete firmware loading needlessly (Thadeu Lima de Souza Cascardo)
  - ipmi: ipmb: Add check devm_kasprintf() returned value (Charles Han)
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko)
  - drm/etnaviv: Fix page property being used for non writecombine buffers (Sui Jingfeng)
  - partitions: ldm: remove the initial kernel-doc notation (Randy Dunlap)
  - nbd: don't allow reconnect after disconnect (Yu Kuai)
  - afs: Fix directory format encoding struct (David Howells)
  - overflow: Allow mixed type arguments (Kees Cook)
  - overflow: Correct check_shl_overflow() comment (Keith Busch)
  - overflow: Add __must_check attribute to check_*() helpers (Kees Cook)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.4.el7uek]
changelog:
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
  - Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy" (Magali Lemes)
  - jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
  - Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy" (Magali Lemes)
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
  - vlan: fix memory leak in vlan_newlink() (Eric Dumazet)
  - rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge)  [Orabug: 37747826]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.343.5.el7uek]
changelog:
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0))  [Orabug: 37846673]
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0))  [Orabug: 37846668]
  - uek-rpm: remove .el7 from shim version (Samasth Norway Ananda)  [Orabug: 37834734]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.5.2.el7uek]
changelog:
  - RDS: use get_user_pages_fast() in rdma_pin_pages() (Stephen Brennan)  [Orabug: 37990761]
  - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37990759]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.5.3.el7uek]
changelog:
  - shmem: add support to ignore swap (Luis Chamberlain)  [Orabug: 38130653]  
  - shmem: update documentation (Luis Chamberlain)  [Orabug: 38130653]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.5.3.el7uek]
changelog:
  - shmem: add support to ignore swap (Luis Chamberlain)  [Orabug: 38130653]
  - shmem: update documentation (Luis Chamberlain)  [Orabug: 38130653]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.5.4.el7uek]
changelog:
  - net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju)  [Orabug: 38232071]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.343.5.5.el7uek]
changelog:
  - net/mlx5: Add poll-eq API to be used by ULP's (Praveen Kumar Kannoju)  [Orabug: 38243275]  
  - net/rds: poll eq during user-reset (Praveen Kumar Kannoju)  [Orabug: 38243274]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.1.el7uek]
changelog:
  - rds: ib: Make traffic_class visible to user-space (Håkon Bugge) [Orabug: 37617866]
  - rds: ib: Remove incorrect update of the path record sl and qos_class fields (Håkon Bugge) [Orabug: 37617866]
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Felix Fietkau) [Orabug: 36683418] {CVE-2024-36929}
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Antoine Tenart) [Orabug: 36643088] {CVE-2024-35884}
  - udp: never accept GSO_FRAGLIST packets (Paolo Abeni) [Orabug: 36643088] {CVE-2024-35884}
  - udp: initialize is_flist with 0 in udp_gro_receive (Xin Long) [Orabug: 36643088] {CVE-2024-35884}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.2.el7uek]
changelog:
  - rds: ib: Do not attempt to insert RDMA exthdr twice (Håkon Bugge) [Orabug: 37721764]
  - net: mana: Fix TX CQE error handling (Haiyang Zhang) [Orabug: 36983924] {CVE-2023-52532}
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh) [Orabug: 36929747]
  - rds: ib: Fix racy send affinity work cancellation (Håkon Bugge) [Orabug: 36605776]
  - uek-rpm: install the perf exec dir (Stephen Brennan) [Orabug: 35023180]
  - uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda) [Orabug: 37764002]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.343.3.el7uek]
changelog:
  - LTS tag: v5.4.291 (Sherry Yang)
  - eeprom: digsy_mtc: Make GPIO lookup table match the device (Andy Shevchenko)
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku) [Orabug: 37827905] {CVE-2025-21914}
  - intel_th: pci: Add Panther Lake-P/U support (Alexander Shishkin)
  - intel_th: pci: Add Panther Lake-H support (Alexander Shishkin)
  - intel_th: pci: Add Arrow Lake support (Pawel Chmielewski)
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [Orabug: 36597911] {CVE-2024-26982}
  - xhci: pci: Fix indentation in the PCI device ID definitions (Andy Shevchenko)
  - usb: gadget: Check bmAttributes only if configuration is valid (Prashanth K)
  - usb: gadget: Fix setting self-powered state on suspend (Marek Szyprowski)
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes (Prashanth K)
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality (AngeloGioacchino Del Regno)
  - usb: typec: ucsi: increase timeout for PPM reset operations (Fedor Pchelkin)
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich) [Orabug: 37828336] {CVE-2025-21916}
  - usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea) [Orabug: 37827913] {CVE-2025-21917}
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Miao Li)
  - usb: renesas_usbhs: Use devm_usb_get_phy() (Claudiu Beznea)
  - usb: renesas_usbhs: Call clk_put() (Claudiu Beznea)
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" (Christian Heusel)
  - gpio: rcar: Fix missing of_node_put() call (Fabrizio Castro)
  - net: ipv6: fix missing dst ref drop in ila lwtunnel (Justin Iurman)
  - net: ipv6: fix dst ref loop in ila lwtunnel (Justin Iurman)
  - net-timestamp: support TCP GSO case for a few missing flags (Jason Xing)
  - vlan: enforce underlying device type (Oscar Maes) [Orabug: 37827929] {CVE-2025-21920}
  - ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen) [Orabug: 37827937] {CVE-2025-21922}
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Nikolay Aleksandrov)
  - drm/sched: Fix preprocessor guard (Philipp Stanner)
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() (Xinghuo Chen)
  - llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet) [Orabug: 37827950] {CVE-2025-21925}
  - hwmon: (ad7314) Validate leading zero bits and return error (Erik Schumacher)
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table (Maud Spierings)
  - hwmon: (pmbus) Initialise page count in pmbus_identify() (Titus Rwantare)
  - caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov) [Orabug: 37827863] {CVE-2025-21904}
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart) [Orabug: 37827956] {CVE-2025-21926}
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu) [Orabug: 37827964] {CVE-2025-21928}
  - HID: google: fix unused variable warning under !CONFIG_ACPI (Yu-Chun Lin)
  - wifi: iwlwifi: limit printed string from FW file (Johannes Berg) [Orabug: 37827870] {CVE-2025-21905}
  - mm/page_alloc: fix uninitialized variable (Hao Zhang)
  - rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li) [Orabug: 37827984] {CVE-2025-21934}
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li) [Orabug: 37827989] {CVE-2025-21935}
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov) [Orabug: 37827880] {CVE-2025-21909}
  - wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich) [Orabug: 37827887] {CVE-2025-21910}
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (Ahmed S. Darwish)
  - x86/cpu: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e (Mingcong Bai)
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M (Richard Thier)
  - ALSA: hda/realtek: update ALC222 depop optimize (Kailang Yang)
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Hoku Ishibe)
  - HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov) [Orabug: 37828025] {CVE-2025-21948}
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" (Rob Herring)
  - drm/amdgpu: disable BAR resize on Dell G5 SE (Alex Deucher)
  - drm/amdgpu: Check extended configuration space register when system uses large bar (Ma Jun)
  - drm/amdgpu: skip BAR resizing if the bios already did it (Alex Deucher)
  - acct: perform last write from workqueue (Christian Brauner) [Orabug: 37702044] {CVE-2025-21846}
  - kernel/acct.c: use dedicated helper to access rlimit values (Yang Yang)
  - kernel/acct.c: use #elif instead of #end and #elif (Sh_Def)
  - drop_monitor: fix incorrect initialization order (Gavrilov Ilia) [Orabug: 37702107] {CVE-2025-21862}
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le) [Orabug: 37611837] {CVE-2025-21702}
  - sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner) [Orabug: 37766213] {CVE-2024-58090}
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (Kaustabh Chakraborty)
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (Bh Hsieh)
  - usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich) [Orabug: 37766256] {CVE-2025-21877}
  - perf/core: Fix low freq setting via IOC_PERIOD (Kan Liang)
  - ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov) [Orabug: 37827849] {CVE-2025-21898}
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems (Russell Senior)
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. (Harshal Chaudhari)
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet() (Philo Lu)
  - ASoC: es8328: fix route from DAC to output (Nicolas Frattaroli)
  - net: cadence: macb: Synchronize stats calculations (Sean Anderson)
  - sunrpc: suppress warnings for unused procfs functions (Arnd Bergmann)
  - batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann) [Orabug: 37650307] {CVE-2025-21823}
  - batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann)
  - acct: block access to kernel internal filesystems (Christian Brauner)
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (John Veness)
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li) [Orabug: 37702054] {CVE-2025-21848}
  - tee: optee: Fix supplicant wait loop (Sumit Garg) [Orabug: 37766233] {CVE-2025-21871}
  - power: supply: da9150-fg: fix potential overflow (Andrey Vatoropin)
  - flow_dissector: Fix port range key handling in BPF conversion (Cong Wang)
  - flow_dissector: Fix handling of mixed port and port-range keys (Cong Wang)
  - net: extract port range fields from fl_flow_key (Maksym Glubokiy)
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima)
  - geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima) [Orabug: 37702088] {CVE-2025-21858}
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Christophe Leroy) [Orabug: 37702123] {CVE-2025-21866}
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline (Christophe Leroy)
  - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h (Michael Ellerman)
  - USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue) [Orabug: 37702094] {CVE-2025-21859}
  - usb/gadget: f_midi: Replace tasklet with work (Davidlohr Bueso)
  - usb/gadget: f_midi: convert tasklets to use new tasklet_setup() API (Allen Pais)
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Selvarasu Ganesan)
  - usb: dwc3: Increase DWC3 controller halt timeout (Wesley Cheng)
  - memcg: fix soft lockup in the OOM process (Chen Ridong) [Orabug: 37649599] {CVE-2024-57977}
  - mm: update mark_victim tracepoints fields (Carlos Galo)
  - crypto: testmgr - some more fixes to RSA test vectors (Ignat Korchagin)
  - crypto: testmgr - populate RSA CRT parameters in RSA test vectors (Ignat Korchagin)
  - crypto: testmgr - fix version number of RSA tests (Lei He)
  - crypto: testmgr - Fix wrong test case of RSA (Lei He)
  - crypto: testmgr - fix wrong key length for pkcs1pad (Lei He)
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu) [Orabug: 37206511] {CVE-2024-50055}
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li)
  - vlan: move dev_put into vlan_dev_uninit (Xin Long)
  - vlan: introduce vlan_dev_free_egress_priority (Xin Long)
  - pps: Fix a use-after-free (Calvin Owens) [Orabug: 37649607] {CVE-2024-57979}
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - x86/i8253: Disable PIT timer 0 when not in use (David Woodhouse)
  - parport_pc: add support for ASIX AX99100 (Jiaqing Zhao)
  - serial: 8250_pci: add support for ASIX AX99100 (Jiaqing Zhao)
  - can: ems_pci: move ASIX AX99100 ids to pci_ids.h (Jiaqing Zhao)
  - nilfs2: protect access to buffers with no active references (Ryusuke Konishi) [Orabug: 37650248] {CVE-2025-21811}
  - nilfs2: do not force clear folio if buffer is referenced (Ryusuke Konishi) [Orabug: 37649878] {CVE-2025-21722}
  - nilfs2: do not output warnings when clearing dirty buffers (Ryusuke Konishi)
  - alpha: replace hardcoded stack offsets with autogenerated ones (Ivan Kokshaysky)
  - ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet) [Orabug: 37650045] {CVE-2025-21760}
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet) [Orabug: 37650052] {CVE-2025-21761}
  - arp: use RCU protection in arp_xmit() (Eric Dumazet) [Orabug: 37650059] {CVE-2025-21762}
  - neighbour: use RCU protection in __neigh_notify() (Eric Dumazet) [Orabug: 37650066] {CVE-2025-21763}
  - neighbour: delete redundant judgment statements (Li Zetao)
  - ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet) [Orabug: 37650072] {CVE-2025-21764}
  - ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet) [Orabug: 37650078] {CVE-2025-21765}
  - ipv4: use RCU protection in inet_select_addr() (Eric Dumazet)
  - ipv4: use RCU protection in rt_is_expired() (Eric Dumazet)
  - net: add dev_net_rcu() helper (Eric Dumazet)
  - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Jiri Pirko)
  - regmap-irq: Add missing kfree() (Jiasheng Jiang)
  - partitions: mac: fix handling of bogus partition table (Jann Horn) [Orabug: 37650105] {CVE-2025-21772}
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock (Xu Wang)
  - alpha: align stack for page fault and user unaligned trap handlers (Ivan Kokshaysky)
  - serial: 8250: Fix fifo underflow on flush (John Keeping)
  - alpha: make stack 16-byte aligned (most cases) (Ivan Kokshaysky)
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero (Alexander Hölzl)
  - can: c_can: fix unbalanced runtime PM disable in error path (Krzysztof Kozlowski)
  - USB: serial: option: drop MeiG Smart defines (Johan Hovold)
  - USB: serial: option: fix Telit Cinterion FN990A name (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FN990B compositions (Fabio Porcedda)
  - USB: serial: option: add MeiG Smart SLM828 (Chester A. Unal)
  - usb: cdc-acm: Fix handling of oversized fragments (Jann Horn)
  - usb: cdc-acm: Check control transfer buffer size before access (Jann Horn) [Orabug: 37634049] {CVE-2025-21704}
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Marek Vasut)
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces (Alan Stern) [Orabug: 37650120] {CVE-2025-21776}
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping) [Orabug: 37685650] {CVE-2025-21835}
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Mathias Nyman)
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Huanglei)
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Huacai Chen)
  - usb: dwc2: gadget: remove of_node reference upon udc_stop (Fabrice Gasnier)
  - usb: gadget: udc: renesas_usb3: Fix compiler warning (Guo Ren)
  - usb: roles: set switch registered flag early on (Elson Roy Serrao)
  - batman-adv: fix panic during interface removal (Andy Strohman) [Orabug: 37650144] {CVE-2025-21781}
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Hans de Goede)
  - orangefs: fix a oob in orangefs_debug_write (Mike Marshall) [Orabug: 37650149] {CVE-2025-21782}
  - Grab mm lock before grabbing pt lock (Maksym Planeta)
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Ramesh Thomas)
  - media: cxd2841er: fix 64-bit division on gcc-9 (Arnd Bergmann)
  - gpio: bcm-kona: Add missing newline to dev_err format string (Artur Weber)
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ (Artur Weber)
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 (Artur Weber)
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec) [Orabug: 37650160] {CVE-2025-21785}
  - team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet) [Orabug: 37650167] {CVE-2025-21787}
  - vrf: use RCU protection in l3mdev_l3_out() (Eric Dumazet) [Orabug: 37650181] {CVE-2025-21791}
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet)
  - HID: multitouch: Add NULL check in mt_input_configured (Charles Han) [Orabug: 37649788] {CVE-2024-58020}
  - ocfs2: check dir i_size in ocfs2_find_entry (Su Yue)
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static (Yuli Wang)
  - ptp: Ensure info->enable callback is always set (Thomas Weißschuh) [Orabug: 37650263] {CVE-2025-21814}
  - net/ncsi: wait for the last response to Deselect Package before configuring channel (Paul Fertser)
  - misc: fastrpc: Fix registered buffer page address (Ekansh Gupta)
  - mtd: onenand: Fix uninitialized retlen in do_otp_read() (Ivan Stepchenko)
  - NFC: nci: Add bounds checking in nci_hci_create_pipe() (Dan Carpenter) [Orabug: 37649936] {CVE-2025-21735}
  - nilfs2: fix possible int overflows in nilfs_fiemap() (Nikita Zhandarovich) [Orabug: 37649942] {CVE-2025-21736}
  - ocfs2: handle a symlink read error correctly (Matthew Wilcox) [Orabug: 37649687] {CVE-2024-58001}
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson) [Orabug: 37592070] {CVE-2025-21687}
  - nvmem: core: improve range check for nvmem_cell_write() (Jennifer Berringer)
  - crypto: qce - unregister previously registered algos in error path (Bartosz Golaszewski)
  - crypto: qce - fix goto jump in error path (Bartosz Golaszewski)
  - media: uvcvideo: Remove redundant NULL assignment (Ricardo Ribalda)
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Ricardo Ribalda)
  - media: ov5640: fix get_light_freq on auto (Samuel Bobrowicz)
  - soc: qcom: smem_state: fix missing of_node_put in error path (Krzysztof Kozlowski)
  - kbuild: Move -Wenum-enum-conversion to W=2 (Nathan Chancellor)
  - powerpc/pseries/eeh: Fix get PE state translation (Narayana Murty N)
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Claudiu Beznea)
  - serial: sh-sci: Drop __initdata macro for port_cfg (Claudiu Beznea)
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (Stephan Gerhold) [Orabug: 37649715] {CVE-2024-58007}
  - usb: gadget: f_tcm: Don't prepare BOT write request twice (Thinh Nguyen)
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (Thinh Nguyen)
  - usb: gadget: f_tcm: Decrement command ref count on cleanup (Thinh Nguyen)
  - usb: gadget: f_tcm: Translate error to sense (Thinh Nguyen)
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer) [Orabug: 37649971] {CVE-2025-21744}
  - HID: hid-sensor-hub: don't use stale platform-data on remove (Heiko Stuebner)
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Zijun Hu)
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options (Zijun Hu)
  - of: Correct child specifier used as input of the 2nd nexus node (Zijun Hu)
  - perf bench: Fix undefined behavior in cmpworker() (Kuan-Wei Chiu)
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate (Anastasia Belova)
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration (Gabor Juhos)
  - drm/komeda: Add check for komeda_get_layer_fourcc_list() (Haoxiang Li)
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (David Hildenbrand)
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson) [Orabug: 37678567] {CVE-2024-58083}
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (Jakob Unterwurzacher)
  - binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter) [Orabug: 37649721] {CVE-2024-58010}
  - m68k: vga: Fix I/O defines (Thomas Zimmermann)
  - s390/futex: Fix FUTEX_OP_ANDN implementation (Heiko Carstens)
  - leds: lp8860: Write full EEPROM, not only half of it (Alexander Sverdlin)
  - cpufreq: s3c64xx: Fix compilation warning (Viresh Kumar)
  - tun: revert fix group permission check (Willem de Bruijn)
  - net: rose: lock the socket in rose_bind() (Eric Dumazet) [Orabug: 37649987] {CVE-2025-21749}
  - udp: gso: do not drop small packets when PMTU reduces (Yan Zhai)
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz)
  - gpu: drm_dp_cec: fix broken CEC adapter properties check (Hans Verkuil)
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry (Prasad Pandit)
  - nvme: handle connectivity loss in nvme_set_queue_count (Daniel Wagner)
  - usb: xhci: Fix NULL pointer dereference on certain command aborts (Michał Pecio) [Orabug: 37649622] {CVE-2024-57981}
  - usb: xhci: Add timeout argument in address_device USB HCD callback (Hardik Gajjar)
  - net: usb: rtl8150: enable basic endpoint checking (Nikita Zhandarovich) [Orabug: 37649812] {CVE-2025-21708}
  - net: usb: rtl8150: use new tasklet API (Emil Renner Berthing)
  - tasklet: Introduce new initialization API (Romain Perier)
  - kbuild: userprogs: use correct lld when linking through clang (Thomas Weißschuh)
  - media: uvcvideo: Remove dangling pointers (Ricardo Ribalda) [Orabug: 37649696] {CVE-2024-58002}
  - media: uvcvideo: Only save async fh if success (Ricardo Ribalda)
  - nilfs2: handle errors that nilfs_prepare_chunk() may return (Ryusuke Konishi) [Orabug: 37649870] {CVE-2025-21721}
  - nilfs2: eliminate staggered calls to kunmap in nilfs_rename (Ryusuke Konishi)
  - nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link (Ryusuke Konishi)
  - spi-mxs: Fix chipselect glitch (Ralf Schlatterbeck)
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode (Xi Ruoyao)
  - APEI: GHES: Have GHES honor the panic= setting (Borislav Petkov)
  - HID: Wacom: Add PCI Wacom device support (Even Xu)
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id (Hans de Goede)
  - tomoyo: don't emit warning in tomoyo_write_control() (Tetsuo Handa)
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Dmitry Antipov) [Orabug: 37649750] {CVE-2024-58014}
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card (Shawn Lin)
  - tun: fix group permission check (Stas Sergeev)
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Kuan-Wei Chiu) [Orabug: 37649768] {CVE-2024-58017}
  - x86/amd_nb: Restrict init function to AMD-based systems (Yazen Ghannam)
  - sched: Don't try to catch up excess steal time. (Suleiman Souhlal)
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Josef Bacik)
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana) [Orabug: 37650014] {CVE-2025-21753}
  - btrfs: output the reason for open_ctree() failure (Qu Wenruo)
  - usb: gadget: f_tcm: Don't free command immediately (Thinh Nguyen) [Orabug: 37678479] {CVE-2024-58055}
  - media: uvcvideo: Fix double free in error path (Laurent Pinchart) [Orabug: 37649615] {CVE-2024-57980}
  - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (Alan Stern) [Orabug: 37649644] {CVE-2024-57986}
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (Jos Wang)
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection (Sean Rhodes)
  - ktest.pl: Check kernelrelease return in get_version (Ricardo B. Marliere)
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Chuck Lever)
  - hexagon: Fix unbalanced spinlock in die() (Lin Yujun)
  - hexagon: fix using plain integer as NULL pointer warning in cmpxchg (Willem de Bruijn)
  - genksyms: fix memory leak when the same symbol is read from *.symref file (Masahiro Yamada)
  - genksyms: fix memory leak when the same symbol is added from source (Masahiro Yamada)
  - net: sh_eth: Fix missing rtnl lock in suspend/resume path (Kory Maincent)
  - vsock: Allow retrying on connect() failure (Michal Luczaj)
  - perf trace: Fix runtime error of index out of bounds (Howard Chu)
  - net: davicom: fix UAF in dm9000_drv_remove (Chenyuan Yang) [Orabug: 37649846] {CVE-2025-21715}
  - net: rose: fix timer races against user threads (Eric Dumazet) [Orabug: 37649856] {CVE-2025-21718}
  - PM: hibernate: Add error handling for syscore_suspend() (Xu Wang)
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Eric Dumazet) [Orabug: 37649862] {CVE-2025-21719}
  - net: fec: implement TSO descriptor cleanup (Dheeraj Reddy Jonnalagadda)
  - ubifs: skip dumping tnc tree when zroot is null (Pangliyuan) [Orabug: 37678491] {CVE-2024-58058}
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (Oleksij Rempel) [Orabug: 37678517] {CVE-2024-58069}
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Joe Hattori)
  - module: Extend the preempt disabled section in dereference_symbol_descriptor(). (Sebastian Andrzej Siewior)
  - ocfs2: mark dquot as inactive if failed to start trans while releasing dquot (Su Yue)
  - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails (Guixin Liu)
  - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1 (Paul Menzel)
  - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (Joe Hattori)
  - media: uvcvideo: Propagate buf->error to userspace (Ricardo Ribalda)
  - media: camif-core: Add check for clk_enable() (Jiasheng Jiang)
  - media: mipi-csis: Add check for clk_enable() (Jiasheng Jiang)
  - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (Zijun Hu)
  - media: lmedm04: Handle errors for lme2510_int_read (Chen Ni)
  - media: lmedm04: Use GFP_KERNEL for URB allocation/submission. (Malcolm Priestley)
  - media: rc: iguanair: handle timeouts (Oliver Neukum)
  - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (Joe Hattori)
  - ARM: dts: mediatek: mt7623: fix IR nodename (Rafał Miłecki)
  - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property (Chen-Yu Tsai)
  - rdma/cxgb4: Prevent potential integer overflow on 32bit (Dan Carpenter) [Orabug: 37649564] {CVE-2024-57973}
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array (Leon Romanovsky)
  - bpf: Send signals asynchronously if !preemptible (Puranjay Mohan) [Orabug: 37649909] {CVE-2025-21728}
  - perf report: Fix misleading help message about --demangle (Jiachen Zhang)
  - perf top: Don't complain about lack of vmlinux when not resolving some kernel samples (Arnaldo Carvalho de Melo)
  - padata: fix sysfs store callback check (Thomas Weißschuh)
  - ktest.pl: Remove unused declarations in run_bisect_test function (Ba Jing)
  - perf header: Fix one memory leakage in process_bpf_prog_info() (Zhongqiu Han)
  - perf header: Fix one memory leakage in process_bpf_btf() (Zhongqiu Han)
  - ASoC: sun4i-spdif: Add clock multiplier settings (George Lander)
  - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande)
  - net: sched: Disallow replacing of child qdisc from one parent to another (Jamal Hadi Salim) [Orabug: 37592533] {CVE-2025-21700}
  - net/mlxfw: Drop hard coded max FW flash image size (Maher Sanalla)
  - net: let net.core.dev_weight always be non-zero (Liu Jian) [Orabug: 37650232] {CVE-2025-21806}
  - clk: analogbits: Fix incorrect calculation of vco rate delta (Bo Gan)
  - selftests: harness: fix printing of mismatch values in __EXPECT() (Dmitry V. Levin)
  - selftests/harness: Display signed values correctly (Kees Cook)
  - wifi: wlcore: fix unbalanced pm_runtime calls (Andreas Kemnade)
  - regulator: of: Implement the unwind path of of_regulator_match() (Joe Hattori)
  - team: prevent adding a device which is already a team device lower (Octavian Purdila) [Orabug: 37678523] {CVE-2024-58071}
  - cpupower: fix TSC MHz calculation (He Rongguang)
  - wifi: rtlwifi: pci: wait for firmware loading before releasing memory (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: fix memory leaks and invalid access at probe error path (Thadeu Lima de Souza Cascardo) [Orabug: 37678504] {CVE-2024-58063}
  - wifi: rtlwifi: remove unused check_buddy_priv (Thadeu Lima de Souza Cascardo) [Orabug: 37678530] {CVE-2024-58072}
  - wifi: rtlwifi: remove unused dualmac control leftovers (Dmitry Antipov)
  - wifi: rtlwifi: remove unused timer and related code (Dmitry Antipov)
  - rtlwifi: replace usage of found with dedicated list iterator variable (Jakob Koschel)
  - dt-bindings: mmc: controller: clarify the address-cells description (Neil Armstrong)
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails (Thadeu Lima de Souza Cascardo)
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (Thadeu Lima de Souza Cascardo)
  - rtlwifi: rtl8192se Rename RT_TRACE to rtl_dbg (Larry Finger)
  - wifi: rtlwifi: do not complete firmware loading needlessly (Thadeu Lima de Souza Cascardo)
  - ipmi: ipmb: Add check devm_kasprintf() returned value (Charles Han) [Orabug: 37678457] {CVE-2024-58051}
  - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (Ivan Stepchenko) [Orabug: 37678463] {CVE-2024-58052}
  - drm/etnaviv: Fix page property being used for non writecombine buffers (Sui Jingfeng)
  - partitions: ldm: remove the initial kernel-doc notation (Randy Dunlap)
  - nbd: don't allow reconnect after disconnect (Yu Kuai) [Orabug: 37649918] {CVE-2025-21731}
  - afs: Fix directory format encoding struct (David Howells)
  - overflow: Allow mixed type arguments (Kees Cook)
  - overflow: Correct check_shl_overflow() comment (Keith Busch)
  - overflow: Add __must_check attribute to check_*() helpers (Kees Cook)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.343.4.el7uek]
changelog:
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
  - Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy" (Magali Lemes)
  - jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz) [Orabug: 37855411] {CVE-2025-39735}
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
  - Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy" (Magali Lemes)
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
  - vlan: fix memory leak in vlan_newlink() (Eric Dumazet)
  - rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge) [Orabug: 37747826]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.343.5.el7uek]
changelog:
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497283,37846673] {CVE-2025-21638}
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497303,37846668] {CVE-2025-21640}
  - uek-rpm: remove .el7 from shim version (Samasth Norway Ananda) [Orabug: 37834734]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.344.1.el7uek]
changelog:
  - RDS: avoid using offlined CPU during reconnect (Arumugam Kolappan) [Orabug: 37800559]
  - x86/microcode/AMD: Clean the cache if update did not load microcode (Boris Ostrovsky) [Orabug: 37800729]
  - x86/microcode/AMD: Add finalize_late_load() microcode_op (Boris Ostrovsky) [Orabug: 37800729]
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov) [Orabug: 37800729]
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Borislav Petkov) [Orabug: 37800729]
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Borislav Petkov) [Orabug: 37800729]
  - x86/microcode/AMD: Flush patch buffer mapping after application (Borislav Petkov) [Orabug: 37800729]
  - x86/microcode/AMD: Stash BSP's CPUID(1).EAX and patch size (Boris Ostrovsky) [Orabug: 37800729]
  - nvme: fix deadlock between reset and scan (Bitao Hu) [Orabug: 37861518]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.344.2.el7uek]
changelog:
  - LTS tag: v5.4.292 (Alok Tiwari)
  - jfs: add index corruption check to DT_GETPAGE() (Roman Smirnov)
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu) [Orabug: 37844202] {CVE-2025-22035}
  - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability (Karel Balej)
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Paul Menzel)
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Jann Horn) [Orabug: 37844275] {CVE-2025-22045}
  - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume (Guilherme G. Piccoli)
  - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() (Markus Elfring)
  - can: flexcan: only change CAN state when link up in system PM (Haibo Chen)
  - arcnet: Add NULL check in com20020pci_probe() (Henry Martin) [Orabug: 37844303] {CVE-2025-22054}
  - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy (David Oberhollenzer)
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (Fernando Fernandez Mancera)
  - vsock: avoid timeout during connect() if the socket is closing (Stefano Garzarella)
  - net_sched: skbprio: Remove overly strict queue assertions (Cong Wang) [Orabug: 37855375] {CVE-2025-38637}
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu) [Orabug: 37844344] {CVE-2025-22063}
  - ntb: intel: Fix using link status DB's (Nikita Shubin)
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng)
  - spufs: fix a leak in spufs_create_context() (Al Viro) [Orabug: 37844365] {CVE-2025-22071}
  - spufs: fix a leak on spufs_new_file() failure (Al Viro) [Orabug: 37844378] {CVE-2025-22073}
  - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} (Tasos Sahanidis)
  - can: statistics: use atomic access in hot path (Oliver Hartkopp)
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long)
  - sched/deadline: Use online cpus for validating runtime (Shrikanth Hegde)
  - affs: don't write overlarge OFS data block size fields (Simon Tatham)
  - affs: generate OFS sequence numbers starting at 1 (Simon Tatham)
  - wifi: iwlwifi: fw: allocate chained SG tables for dump (Johannes Berg)
  - sched/smt: Always inline sched_smt_active() (Josh Poimboeuf)
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64 (Geetha Sowjanya)
  - ring-buffer: Fix bytes_dropped calculation issue (Feng Yang)
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf) [Orabug: 37976879] {CVE-2025-37937}
  - fs/procfs: fix the comment above proc_pid_wchan() (Bart Van Assche)
  - perf python: Check if there is space to copy all the event (Arnaldo Carvalho de Melo)
  - perf python: Decrement the refcount of just created event on failure (Arnaldo Carvalho de Melo)
  - perf python: Fixup description of sample.id event member (Arnaldo Carvalho de Melo)
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev) [Orabug: 37844394] {CVE-2025-22079}
  - kexec: initialize ELF lowest address to ULONG_MAX (Sourabh Jain)
  - perf units: Fix insufficient array space (Arnaldo Carvalho de Melo)
  - iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio (Jonathan Cameron)
  - coresight: catu: Fix number of pages while using 64k pages (Ilkka Koskinen)
  - isofs: fix KMSAN uninit-value bug in do_isofs_readdir() (Qasim Ijaz)
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment (Jann Horn)
  - mfd: sm501: Switch to BIT() to mitigate integer overflows (Nikita Zhandarovich)
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad) [Orabug: 37844422] {CVE-2025-22086}
  - power: supply: max77693: Fix wrong conversion of charge input threshold value (Artur Weber)
  - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 (Jann Horn)
  - clk: amlogic: g12a: fix mmc A peripheral clock (Jerome Brunet)
  - clk: amlogic: gxbb: drop non existing 32k clock parent (Jerome Brunet)
  - clk: amlogic: g12b: fix cluster A parent data (Jerome Brunet)
  - IB/mad: Check available slots before posting receive WRs (Maher Sanalla)
  - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent (Peter Geis)
  - pinctrl: renesas: rza2: Fix missing of_node_put() call (Fabrizio Castro)
  - lib: 842: Improve error handling in sw842_compress() (Tanya Agarwal)
  - clk: amlogic: gxbb: drop incorrect flag on 32k clock (Jerome Brunet)
  - fbdev: sm501fb: Add some geometry checks. (Danila Chernetsov)
  - mdacon: rework dependency list (Arnd Bergmann)
  - fbdev: au1100fb: Move a variable assignment behind a null pointer check (Markus Elfring)
  - PCI: pciehp: Don't enable HPIE when resuming in poll mode (Ilpo Järvinen)
  - PCI: Remove stray put_device() in pci_register_host_bridge() (Dan Carpenter)
  - PCI/portdrv: Only disable pciehp interrupts early when needed (Feng Tang)
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden) [Orabug: 37844108] {CVE-2024-58093}
  - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member (AngeloGioacchino Del Regno)
  - ALSA: hda/realtek: Always honor no_shutup_pins (Takashi Iwai)
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Tao Chen)
  - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() (Sebastian Andrzej Siewior)
  - PM: sleep: Fix handling devices with direct_complete set on errors (Rafael J. Wysocki)
  - thermal: int340x: Add NULL check for adev (Chenyuan Yang) [Orabug: 37844584] {CVE-2025-23136}
  - EDAC/ie31200: Fix the error path order of ie31200_init() (Qiuxu Zhuo)
  - EDAC/ie31200: Fix the DIMM size mask for several SoCs (Qiuxu Zhuo)
  - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer (Qiuxu Zhuo)
  - selinux: Chain up tool resolving errors in install_policy.sh (Tim Schumacher)
  - x86/platform: Only allow CONFIG_EISA for 32-bit (Arnd Bergmann)
  - x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() (Benjamin Berg)
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Jie Zhan)
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Mike Rapoport)
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Luo Qiu) [Orabug: 37844141] {CVE-2025-22020}
  - net: usb: qmi_wwan: add Telit Cinterion FE990B composition (Fabio Porcedda)
  - net: usb: qmi_wwan: add Telit Cinterion FN990B composition (Fabio Porcedda)
  - tty: serial: 8250: Add some more device IDs (Cameron Williams)
  - counter: stm32-lptimer-cnt: fix error handling when enabling (Fabrice Gasnier)
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy) [Orabug: 37844145] {CVE-2025-22021}
  - ARM: Remove address checking for MMUless devices (Yanjun Yang)
  - ARM: 9351/1: fault: Add "cut here" line for prefetch aborts (Kees Cook)
  - ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed() (Kees Cook)
  - atm: Fix NULL pointer dereference (Minjoong Kim) [Orabug: 37838897] {CVE-2025-22018}
  - HID: hid-plantronics: Add mic mute mapping and generalize quirks (Terry Junge)
  - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Terry Junge)
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich) [Orabug: 37828196] {CVE-2025-21996}
  - batman-adv: Ignore own maximum aggregation size during RX (Sven Eckelmann)
  - ARM: shmobile: smp: Enforce shmobile_smp_* alignment (Geert Uytterhoeven)
  - mmc: atmel-mci: Add missing clk_disable_unprepare() (Gu Bowen)
  - drm/v3d: Don't run jobs that have errors flagged in its fence (Maíra Canal)
  - i2c: omap: fix IRQ storms (Andreas Kemnade)
  - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES (Lin Ma)
  - net: atm: fix use after free in lec_send() (Dan Carpenter) [Orabug: 37828221] {CVE-2025-22004}
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Kuniyuki Iwashima)
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima) [Orabug: 37828229] {CVE-2025-22005}
  - Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter) [Orabug: 37828235] {CVE-2025-22007}
  - RDMA/hns: Fix wrong value of max_sge_rd (Junxian Huang)
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Saravanan Vajravel)
  - xfrm_output: Force software GSO only in tunnel mode (Cosmin Ratiu)
  - firmware: imx-scu: fix OF node leak in .probe() (Joe Hattori)
  - i2c: sis630: Fix an error handling path in sis630_probe() (Christophe Jaillet)
  - i2c: ali15x3: Fix an error handling path in ali15x3_probe() (Christophe Jaillet)
  - i2c: ali1535: Fix an error handling path in ali1535_probe() (Christophe Jaillet)
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Christophe Jaillet)
  - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() (Ivan Abramov)
  - qlcnic: fix memory leak issues in qlcnic_sriov_common.c (Haoxiang Li)
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Alex Hung) [Orabug: 37828049] {CVE-2025-21956}
  - drm/atomic: Filter out redundant DPMS calls (Ville Syrjälä)
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (Florent Revest) [Orabug: 37828167] {CVE-2025-21991}
  - USB: serial: option: match on interface class for Telit FN990B (Johan Hovold)
  - USB: serial: option: fix Telit Cinterion FE990A name (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FE990B compositions (Fabio Porcedda)
  - USB: serial: ftdi_sio: add support for Altera USB Blaster 3 (Boon Khai Ng)
  - block: fix 'kmem_cache of name 'bio-108' already exists' (Ming Lei)
  - drm/nouveau: Do not override forced connector status (Thomas Zimmermann)
  - x86/irq: Define trace events conditionally (Arnd Bergmann)
  - fuse: don't truncate cached, mutated symlink (Miklos Szeredi)
  - nvme: only allow entering LIVE from CONNECTING state (Daniel Wagner)
  - sctp: Fix undefined behavior in left shift operation (Yu-Chun Lin)
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Ruozhu Li)
  - ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime() (Kuninori Morimoto)
  - s390/cio: Fix CHPID "configure" attribute caching (Peter Oberparleiter)
  - HID: ignore non-functional sensor in HP 5MP Camera (Chia-Lin Kao) [Orabug: 37828174] {CVE-2025-21992}
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell (Zhang Lixu)
  - ACPI: resource: IRQ override for Eluktronics MECH-17 (Gannon Kolding)
  - scsi: qla1280: Fix kernel oops when debug level > 2 (Magnus Lindholm) [Orabug: 37828056] {CVE-2025-21957}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Chengen Du) [Orabug: 37828181] {CVE-2025-21993}
  - powercap: call put_device() on an error path in powercap_register_control_type() (Joe Hattori)
  - hrtimers: Mark is_migration_base() with __always_inline (Andy Shevchenko)
  - nvme-fc: go straight to connecting state when initializing (Daniel Wagner)
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Carolina Jubran)
  - netfilter: nft_exthdr: fix offset with ipv4_find_option() (Alexey Kashavkin)
  - net_sched: Prevent creation of classes with TC_H_ROOT (Cong Wang) [Orabug: 37828110] {CVE-2025-21971}
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl() (Dan Carpenter)
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Kohei Enju) [Orabug: 37828064] {CVE-2025-21959}
  - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() (Michael Kelley)
  - drivers/hv: Replace binary semaphore with mutex (Davidlohr Bueso)
  - netpoll: hold rcu read lock in __netpoll_send_skb() (Breno Leitao)
  - netpoll: netpoll_send_skb() returns transmit status (Eric Dumazet)
  - netpoll: move netpoll_send_skb() out of line (Eric Dumazet)
  - netpoll: remove dev argument from netpoll_send_skb_on_dev() (Eric Dumazet)
  - netpoll: Fix use correct return type for ndo_start_xmit() (Yunjian Wang)
  - pinctrl: bcm281xx: Fix incorrect regmap max_registers value (Artur Weber)
  - sched/isolation: Prevent boot crash when the boot CPU is nohz_full (Oleg Nesterov)
  - clockevents/drivers/i8253: Fix stop sequence for timer 0 (David Woodhouse)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.344.3.el7uek]
changelog:
  - net/mlx5e: Don't call cleanup on profile rollback failure (Cosmin Ratiu) [Orabug: 37670859]
  - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (Elena Salomatkina) [Orabug: 37206299,37670859] {CVE-2024-50000}
  - net/mlx5: Fix error path in multi-packet WQE transmit (Gerd Bayer) [Orabug: 37206302,37670859] {CVE-2024-50001}
  - net/mlx5: Discard command completions in internal error (Akiva Goldberger) [Orabug: 36753438,37670859] {CVE-2024-38555}
  - net/mlx5e: fix a potential double-free in fs_any_create_groups (Dinghao Liu) [Orabug: 36802351,37670859] {CVE-2023-52667}
  - net/mlx5: Reclaim max 50K pages at once (Anand Khoje) [Orabug: 36275016]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.344.4.3.el7uek]
changelog:
  - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini)  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov (AMD))  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky)  [Orabug: 38129026]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 38129010]  
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956} 
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 38128642]  {CVE-2024-28956}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.345.1.el7uek]
changelog:
  - RDS: use get_user_pages_fast() in rdma_pin_pages() (Stephen Brennan) [Orabug: 37973441]
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre) [Orabug: 37959151]
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37863727] {CVE-2024-28956}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.345.2.el7uek]
changelog:
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37959995]
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37959995]
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37959995]
  - certs: Reference revocation list for all keyrings (Eric Snowberg) [Orabug: 38026794]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.345.3.el7uek]
changelog:
  - dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" (Nathan Lynch)
  - nvme: unblock ctrl state transition for firmware update (Daniel Wagner)
  - memcg: always call cond_resched() after fn() (Breno Leitao)
  - ACPI: PPTT: Fix processor subtable walk (Jeremy Linton)
  - LTS tag: v5.4.293 (Sherry Yang)
  - MIPS: cm: Fix warning if MIPS_CM is disabled (Thomas Bogendoerfer)
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible (Marek Behún)
  - comedi: jr3_pci: Fix synchronous deletion of timer (Ian Abbott)
  - md/raid1: Add check for missing source disk in process_checks() (Meir Elisha)
  - scsi: pm80xx: Set phy_attached to zero when device is gone (Igor Pylypiv)
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Jean-Marc Eurin)
  - selftests: ublk: fix test_stripe_04 (Ming Lei)
  - udmabuf: fix a buf size overflow issue during udmabuf creation (Xiaogang Chen) [Orabug: 37929939] {CVE-2025-37803}
  - KVM: s390: Don't use %pK through tracepoints (Thomas Weißschuh)
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP (Oleg Nesterov)
  - ntb: reduce stack usage in idt_scan_mws (Arnd Bergmann)
  - qibfs: fix _another_ leak (Al Viro) [Orabug: 37977084] {CVE-2025-37983}
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang) [Orabug: 37937504] {CVE-2025-37881}
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted (Vinicius Costa Gomes)
  - usb: host: max3421-hcd: Add missing spi_device_id table (Alexander Stein)
  - parisc: PDT: Fix missing prototype warning (Yu-Chun Lin)
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() (Heiko Stuebner)
  - crypto: null - Use spin lock instead of mutex (Herbert Xu) [Orabug: 37929974] {CVE-2025-37808}
  - MIPS: cm: Detect CM quirks from device tree (Gregory Clement)
  - USB: VLI disk crashes if LPM is used (Oliver Neukum)
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive (Miao Li)
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive (Miao Li)
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen) [Orabug: 37929982] {CVE-2025-37810}
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) (Huacai Chen)
  - usb: cdns3: Fix deadlock when using NCM gadget (Ralph Siemsen) [Orabug: 37929989] {CVE-2025-37812}
  - USB: serial: simple: add OWON HDS200 series oscilloscope support (Craig Hesling)
  - USB: serial: option: add Sierra Wireless EM9291 (Adam Xue)
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe (Michael Ehrenreich)
  - serial: sifive: lock port in startup()/shutdown() callbacks (Ryo Takakura)
  - USB: storage: quirk for ADATA Portable HDD CH94 (Oliver Neukum)
  - mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li) [Orabug: 37930001] {CVE-2025-37817}
  - virtio_console: fix missing byte order handling for cols and rows (Halil Pasic)
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [Orabug: 37930029] {CVE-2025-37823}
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [Orabug: 37908485] {CVE-2025-37797}
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [Orabug: 37930040] {CVE-2025-37824}
  - net: phy: leds: fix memory leak (Qingfang Deng) [Orabug: 37977113] {CVE-2025-37989}
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin) [Orabug: 37930052] {CVE-2025-37829}
  - drm/amd/pm: Prevent division by zero (Denis Arefev) [Orabug: 37901824,37901841,37901831] {CVE-2025-37766,CVE-2025-37768,CVE-2025-37770}
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error (Kunihiko Hayashi)
  - misc: pci_endpoint_test: Use INTX instead of LEGACY (Damien Le Moal)
  - PCI: Rename PCI_IRQ_LEGACY to PCI_IRQ_INTX (Bjorn Helgaas)
  - iio: adc: ad7768-1: Fix conversion result sign (Sergiu Cuciurean)
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check (Jonathan Cameron)
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family (Marek Behún)
  - media: vim2m: print device name after registering device (Matthew Majewski)
  - ext4: fix OOB read when checking dotdot dir (Jakub Acs) [Orabug: 37855335] {CVE-2025-37785}
  - ext4: optimize __ext4_check_dir_entry() (Theodore Ts'O)
  - ext4: don't over-report free space or inodes in statvfs (Theodore Ts'O)
  - ext4: code cleanup for ext4_statfs_project() (Chengguang Xu)
  - ext4: simplify checking quota limits in ext4_statfs() (Jan Kara)
  - platform/x86: ISST: Correct command storage data length (Srinivas Pandruvada)
  - MIPS: ds1287: Match ds1287_set_base_clock() function types (Yuli Wang)
  - MIPS: cevt-ds1287: Add missing ds1287.h include (Yuli Wang)
  - MIPS: dec: Declare which_prom() as static (Yuli Wang)
  - virtio-net: Add validation for used length (Xie Yongji) [Orabug: 37079171] {CVE-2021-47352}
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche) [Orabug: 36530711] {CVE-2024-26744}
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Ilya Maximets)
  - net: openvswitch: fix race on port output (Felix Huettner)
  - mmc: cqhci: Fix checking of CQHCI_HALT state (Seunghwan Baek)
  - nvmet-fc: Remove unused functions (Yuli Wang)
  - usb: dwc3: support continuous runtime PM with dual role (Martin Kepplinger)
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type (Kunihiko Hayashi)
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [Orabug: 37901587] {CVE-2025-23140}
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [Orabug: 37264115] {CVE-2024-50154}
  - powerpc/prom_init: Use -ffreestanding to avoid a reference to bcmp (Nathan Chancellor)
  - kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor)
  - cpufreq: Reference count policy in cpufreq_update_limits() (Rafael J. Wysocki)
  - drm/sti: remove duplicate object names (Rolf Eike Beer)
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [Orabug: 37901818] {CVE-2025-37765}
  - drm/repaper: fix integer overflows in repeat functions (Nikita Zhandarovich)
  - module: sign with sha512 instead of sha1 by default (Thorsten Leemhuis)
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Kan Liang)
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Dapeng Mi)
  - virtiofs: add filesystem context source name check (Xiangsheng Hou) [Orabug: 37901855] {CVE-2025-37773}
  - riscv: Avoid fortify warning in syscall_get_arguments() (Nathan Chancellor)
  - isofs: Prevent the use of too small fid (Edward Adam Davis) [Orabug: 37901890] {CVE-2025-37780}
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [Orabug: 37901898] {CVE-2025-37781}
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev)
  - btrfs: correctly escape subvol in btrfs_show_options() (Johannes Kimmel)
  - nfs: add missing selections of CONFIG_CRC32 (Eric Biggers)
  - nfs: move nfs_fhandle_hash to common include file (Jeff Layton)
  - NFSD: Constify @fh argument of knfsd_fh_hash() (Chuck Lever)
  - asus-laptop: Fix an uninitialized variable (Denis Arefev)
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher)
  - net: b53: enable BPDU reception for management port (Jonas Gorski)
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [Orabug: 37901923] {CVE-2025-37789}
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Johannes Berg)
  - Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter) [Orabug: 37901934] {CVE-2025-37792}
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address (Luiz Augusto von Dentz)
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() (Yue Haibing)
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Miaoqian Lin)
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [Orabug: 37977076] {CVE-2025-37982}
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel) [Orabug: 37901940] {CVE-2025-37794}
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Remi Pommarel)
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [Orabug: 37901953] {CVE-2025-37796}
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [Orabug: 37855341] {CVE-2025-37838}
  - pwm: mediatek: always use bus clock for PWM on MT7622 (Daniel Golle)
  - Bluetooth: hci_uart: Fix another race during initialization (Arseniy Krasnov)
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() (Myrrh Periwinkle)
  - PCI: Fix reference leak in pci_alloc_child_bus() (Ma Ke)
  - of/irq: Fix device node refcount leakages in of_irq_init() (Zijun Hu)
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() (Zijun Hu)
  - of/irq: Fix device node refcount leakages in of_irq_count() (Zijun Hu)
  - ntb: use 64-bit arithmetic for the MSI doorbell mask (Fedor Pchelkin)
  - gpio: zynq: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - ftrace: Add cond_resched() to ftrace_graph_set_hash() (Zhoumin) [Orabug: 37976893] {CVE-2025-37940}
  - dm-integrity: set ti->error on memory allocation failure (Mikulas Patocka)
  - crypto: ccp - Fix check for the primary ASP device (Tom Lendacky)
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry (Trevor Woerner)
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) [Orabug: 37901597] {CVE-2025-23142}
  - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Mathieu Desnoyers)
  - sparc/mm: disable preemption in lazy mmu mode (Ryan Roberts)
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string (Chen-Yu Tsai)
  - mtd: rawnand: Add status chack in r852_ready() (Xu Wang)
  - mtd: inftlcore: Add error check for inftl_read_oob() (Xu Wang) [Orabug: 37976720] {CVE-2025-37892}
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (T Pratham)
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() (Boqun Feng)
  - jbd2: remove wrong sb->s_sequence check (Jan Kara) [Orabug: 37937283] {CVE-2025-37839}
  - i3c: Add NULL pointer check in i3c_master_queue_ibi() (Manjunatha Venkatesh) [Orabug: 37901622] {CVE-2025-23147}
  - ext4: fix off-by-one error in do_split (Artem Sadovnikov) [Orabug: 37901631] {CVE-2025-23150}
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Gavrilov Ilia)
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family (Marek Behún)
  - media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia) [Orabug: 37901653] {CVE-2025-23157}
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO (Sakari Ailus)
  - media: i2c: ov7251: Set enable GPIO low in probe (Sakari Ailus)
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Karina Yankevich)
  - media: streamzap: prevent processing IR data on URB failure (Murad Masimov)
  - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) [Orabug: 37937292] {CVE-2025-37840}
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Douglas Anderson)
  - xenfs/xensyms: respect hypervisor's "next" indication (Jan Beulich)
  - media: siano: Fix error handling in smsdvb_module_init() (Yuan Can)
  - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) [Orabug: 37901657] {CVE-2025-23158}
  - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) [Orabug: 37901662] {CVE-2025-23159}
  - media: i2c: adv748x: Fix test pattern selection mask (Niklas Söderlund)
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Jann Horn)
  - ext4: reject casefold inode flag without casefold feature (Eric Biggers)
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags (Willem de Bruijn)
  - bpf: Add endian modifiers to fix endian warnings (Ben Dooks)
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Uwe Kleine-König)
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) [Orabug: 37937329] {CVE-2025-37850}
  - pwm: mediatek: Always use bus clock (Fabien Parent)
  - fbdev: omapfb: Add 'plane' value check (Leonid Arapov)
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off (AngeloGioacchino Del Regno)
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset (Philip Yang)
  - drm/amdkfd: clamp queue size to minimum (David Yat Sin)
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2 (Andrew Wyatt)
  - drm: panel-orientation-quirks: Add support for AYANEO 2S (Andrew Wyatt)
  - drm: allow encoder mode_set even when connectors change for crtc (Abhinav Kumar)
  - Bluetooth: hci_uart: fix race during initialization (Arseniy Krasnov)
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Gabriele Paoloni)
  - net: vlan: don't propagate flags on open (Stanislav Fomichev) [Orabug: 37901684] {CVE-2025-23163}
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Icenowy Zheng)
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) [Orabug: 37937379] {CVE-2025-37857}
  - ext4: ignore xattrs past end (Bhupesh) [Orabug: 37901692] {CVE-2025-37738}
  - ext4: protect ext4_release_dquot against freezing (Ojaswin Mujoo)
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Daniel Kral)
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Niklas Cassel)
  - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) [Orabug: 37901707] {CVE-2025-37740}
  - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) [Orabug: 37901716] {CVE-2025-37741}
  - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) [Orabug: 37937387] {CVE-2025-37858}
  - fs/jfs: cast inactags to s64 to prevent potential overflow (Rand Deeb)
  - page_pool: avoid infinite loop to schedule delayed worker (Jason Xing) [Orabug: 37937395] {CVE-2025-37859}
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards (Ricard Wanderlof)
  - ALSA: hda: intel: Fix Optimus when GPU has no sound (Maxim Mikityanskiy)
  - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła) [Orabug: 37937410] {CVE-2025-37862}
  - HID: pidff: Do not send effect envelope if it's empty (Tomasz Pakuła)
  - HID: pidff: Convert infinite length from Linux API to PID standard (Tomasz Pakuła)
  - xen/mcelog: Add __nonstring annotations for unterminated strings (Kees Cook)
  - perf: arm_pmu: Don't disable counter in armpmu_add() (Mark Rutland)
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine (Max Grobecker)
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) [Orabug: 37937297] {CVE-2025-37841}
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [Orabug: 37901766] {CVE-2025-37749}
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read() (Xu Wang)
  - ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones (Hannes Reinecke)
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [Orabug: 37901790] {CVE-2025-37757}
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) [Orabug: 37901796] {CVE-2025-37758}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.345.4.el7uek]
changelog:
  - x86/its: BPF can crash in bpf_jit_comp.c when ITS is enabled (Alexandre Chartre) [Orabug: 38043586]
  - shmem: add support to ignore swap (Luis Chamberlain) [Orabug: 38034040]
  - shmem: update documentation (Luis Chamberlain) [Orabug: 38034040]
  - mm: hold the source mmap write lock when copying PTEs (Anthony Yznaga) [Orabug: 38029050]
  - mm: do not write protect COW mappings when preserving across exec (Anthony Yznaga) [Orabug: 38029050]
  - mm: differentiate copying PTEs for preservation from copying for fork (Anthony Yznaga) [Orabug: 38029050]
  - mm/fork: Pass new vma pointer into copy_page_range() (Peter Xu) [Orabug: 38029050]
  - xen/swiotlb: relax alignment requirements (Juergen Gross) [Orabug: 37523168]
  - Reapply "xen/swiotlb: add alignment check for dma buffers" (Harshvardhan Jha) [Orabug: 37523168]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.345.5.el7uek]
changelog:
  - rds: ib: Add cm_id generation scheme in order to detect new ones (Håkon Bugge)  [Orabug: 37799171]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.345.5.2.el7uek]
changelog:
  - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
  - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
  - KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini)  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov (AMD))  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky)  [Orabug: 38023241]  {CVE-2024-36350} {CVE-2024-36357}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.345.5.3.el7uek]
changelog:
  - x86/bpf: Classic BPF program can fail when BHB barrier is used (Alexandre Chartre)  [Orabug: 38167806]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.346.1.el7uek]
changelog:
  - scsi: qedf: Wait for stag work during unload (Saurav Kashyap) [Orabug: 37296386]
  - scsi: qedf: Don't process stag work during unload and recovery (Saurav Kashyap) [Orabug: 37296386]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.346.2.el7uek]
changelog:
  - Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older (Breno Leitao)
  - tracing: Fix compilation warning on arm32 (Pan Taixi)
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices (Rafael J. Wysocki)
  - LTS tag: v5.4.294 (Alok Tiwari)
  - platform/x86: thinkpad_acpi: Ignore battery threshold change event notification (Mark Pearson)
  - platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys (Valtteri Koskivuori)
  - spi: spi-sun4i: fix early activation (Alessandro Grassi)
  - um: let 'make clean' properly clean underlying SUBARCH as well (Masahiro Yamada)
  - platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS (John Chau)
  - nfs: don't share pNFS DS connections between net namespaces (Jeff Layton)
  - HID: quirks: Add ADATA XPG alpha wireless mouse support (Milton Barrera)
  - coredump: hand a pidfd to the usermode coredump helper (Christian Brauner)
  - fork: use pidfd_prepare() (Christian Brauner)
  - pid: add pidfd_prepare() (Christian Brauner)
  - pidfd: check pid has attached task in fdinfo (Christian Brauner)
  - coredump: fix error handling for replace_fd() (Christian Brauner)
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Pedro Tammela) [Orabug: 38049365] {CVE-2025-38001}
  - smb: client: Reset all search buffer pointers when releasing buffer (Zhaolong Wang)
  - smb: client: Fix use-after-free in cifs_fill_dirent (Zhaolong Wang) [Orabug: 38094972] {CVE-2025-38051}
  - drm/i915/gvt: fix unterminated-string-initialization warning (Jani Nikula)
  - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [Orabug: 38186911] {CVE-2024-56655}
  - netfilter: nf_tables: wait for rcu grace period on net_device removal (Pablo Neira Ayuso)
  - netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx (Florian Westphal)
  - kbuild: Disable -Wdefault-const-init-unsafe (Nathan Chancellor)
  - spi: spi-fsl-dspi: restrict register range for regmap access (Larisa Grigore)
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Tianyang Zhang)
  - drm/edid: fixed the bug that hdr metadata was not reset (Feijuan Li)
  - llc: fix data loss when reading from a socket in llc_ui_recvmsg() (Gavrilov Ilia)
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [Orabug: 38095147] {CVE-2025-38078}
  - can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp) [Orabug: 38049371] {CVE-2025-38003}
  - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [Orabug: 38049376] {CVE-2025-38004}
  - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [Orabug: 38095156] {CVE-2025-38079}
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [Orabug: 38049359] {CVE-2025-38000}
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Paul Kocialkowski)
  - bridge: netfilter: Fix forwarding of fragmented packets (Ido Schimmel)
  - xfrm: Sanitize marks before insert (Paul Chaignon)
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [Orabug: 38095002] {CVE-2025-38058}
  - xenbus: Allow PVH dom0 a non-local xenstore (Jason Andryuk)
  - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues) [Orabug: 38094858] {CVE-2025-38034}
  - nvmet-tcp: don't restore null sk_state_change (Alistair Francis) [Orabug: 38094865] {CVE-2025-38035}
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 (Takashi Iwai)
  - pinctrl: meson: define the pull up/down resistor value as 60 kOhm (Martin Blumenstingl)
  - drm: Add valid clones check (Jessica Zhang)
  - drm/atomic: clarify the rules around drm_atomic_state->allow_modeset (Simona Vetter)
  - regulator: ad5398: Add device tree support (Isaac Scott)
  - wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate (Bitterblue Smith)
  - bpftool: Fix readlink usage in get_fd_type (Viktor Malik)
  - HID: usbkbd: Fix the bit shift number for LED_KANA (Junan)
  - scsi: st: Restore some drive settings after reset (Kai Mäkisara)
  - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Justin Tee)
  - rcu: fix header guard for rcu_all_qs() (Ankur Arora)
  - rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y (Ankur Arora)
  - vxlan: Annotate FDB data races (Ido Schimmel) [Orabug: 38094881] {CVE-2025-38037}
  - hwmon: (xgene-hwmon) use appropriate type for the latency value (Andrey Vatoropin)
  - ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Kuniyuki Iwashima)
  - net/mlx5e: reduce rep rxq depth to 256 for ECPF (William Tu)
  - net/mlx5e: set the tx_queue_len for pfifo_fast (William Tu)
  - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Alexei Lazar)
  - phy: core: don't require set_mode() callback for phy_get_mode() to work (Dmitry Baryshkov)
  - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Kees Cook)
  - smack: recognize ipv4 CIPSO w/o categories (Konstantin Andreev)
  - pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map (Valentin Caron)
  - ASoC: ops: Enforce platform maximum on initial value (Martin Povišer)
  - net/mlx5: Apply rate-limiting to high temperature warning (Shahar Shitrit)
  - net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Shahar Shitrit)
  - ACPI: HED: Always initialize before evged (Xiaofei Tan)
  - PCI: Fix old_size lower bound in calculate_iosize() too (Ilpo Järvinen)
  - EDAC/ie31200: work around false positive build warning (Arnd Bergmann)
  - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer) [Orabug: 38095027] {CVE-2025-38061}
  - wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU (Bitterblue Smith)
  - scsi: mpt3sas: Send a diag reset if target reset fails (Shivasharan S)
  - MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core (Paul Burton)
  - MIPS: Use arch specific syscall name match function (Bibo Mao)
  - cpuidle: menu: Avoid discarding useful information (Rafael J. Wysocki)
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long)
  - bonding: report duplicate MAC address in all situations (Hangbin Liu)
  - net: xgene-v2: remove incorrect ACPI_PTR annotation (Arnd Bergmann)
  - drm/amdkfd: KFD release_work possible circular locking (Philip Yang)
  - net/mlx5: Avoid report two health errors on same syndrome (Moshe Shemesh)
  - fpga: altera-cvp: Increase credit timeout (Kuhanh Murugasen Krishnan)
  - drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence (AngeloGioacchino Del Regno)
  - hwmon: (gpio-fan) Add missing mutex locks (Alexander Stein)
  - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Breno Leitao)
  - net: pktgen: fix mpls maximum labels list parsing (Peter Seiderer)
  - pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" (Artur Weber)
  - media: cx231xx: set device_caps for 417 (Hans Verkuil) [Orabug: 38094937] {CVE-2025-38044}
  - orangefs: Do not truncate file size (Matthew Wilcox) [Orabug: 38095058] {CVE-2025-38065}
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [Orabug: 38095065] {CVE-2025-38066}
  - media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() (Markus Elfring)
  - ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 (Svyatoslav Ryhel)
  - ieee802154: ca8210: Use proper setters and getters for bitwise types (Andy Shevchenko)
  - rtc: ds1307: stop disabling alarms on probe (Alexandre Belloni)
  - powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 (Andreas Schwab)
  - mmc: sdhci: Disable SD card clock before changing parameters (Erick Shepherd)
  - netfilter: conntrack: Bound nf_conntrack sysctl writes (Nicolas Bouchinet)
  - posix-timers: Add cond_resched() to posix_timer_add() search loop (Eric Dumazet)
  - xen: Add support for XenServer 6.1 platform device (Frediano Ziglio)
  - dm: restrict dm device size to 2^63-512 bytes (Mikulas Patocka)
  - kbuild: fix argument parsing in scripts/config (Seyediman Seyedarab)
  - scsi: st: ERASE does not change tape location (Kai Mäkisara)
  - scsi: st: Tighten the page format heuristics with MODE SELECT (Kai Mäkisara)
  - ext4: reorder capability check last (Christian Göttsche)
  - um: Update min_low_pfn to match changes in uml_reserved (Tiwei Bie)
  - um: Store full CSGSFS and SS register from mcontext (Benjamin Berg)
  - btrfs: send: return -ENAMETOOLONG when attempting a path that is too long (Filipe Manana)
  - btrfs: avoid linker error in btrfs_find_create_tree_block() (Mark Harmstone)
  - i2c: pxa: fix call balance of i2c->clk handling routines (Vitalii Mordan)
  - mmc: host: Wait for Vdd to settle on card power off (Erick Shepherd)
  - libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [Orabug: 38095111] {CVE-2025-38072}
  - pNFS/flexfiles: Report ENETDOWN as a connection error (Trond Myklebust)
  - tools/build: Don't pass test log files to linker (Ian Rogers)
  - dql: Fix dql->limit value when reset. (Jing Su)
  - SUNRPC: rpc_clnt_set_transport() must not change the autobind setting (Trond Myklebust)
  - NFSv4: Treat ENETUNREACH errors as fatal for state recovery (Trond Myklebust)
  - fbdev: core: tileblit: Implement missing margin clearing for tileblit (Zsolt Kajtar)
  - fbdev: fsl-diu-fb: add missing device_remove_file() (Shixiong Ou)
  - mailbox: use error ret code of of_parse_phandle_with_args() (Tudor Ambarus)
  - kconfig: merge_config: use an empty file as initfile (Daniel Gomez)
  - cgroup: Fix compilation issue due to cgroup_mutex not being exported (Gao Xu)
  - dma-mapping: avoid potential unused data compilation warning (Marek Szyprowski)
  - scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [Orabug: 38095136] {CVE-2025-38075}
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [Orabug: 38015150] {CVE-2025-37998}
  - Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 (Aditya Garg)
  - Input: synaptics - enable SMBus for HP Elitebook 850 G1 (Dmitry Torokhov)
  - clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() (Sebastian Andrzej Siewior)
  - phy: renesas: rcar-gen3-usb2: Set timing registers only once (Claudiu Beznea)
  - phy: Fix error handling in tegra_xusb_port_init (Ma Ke)
  - ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() (Xu Wang)
  - NFSv4/pnfs: Reset the layout state after a layoutreturn (Trond Myklebust)
  - NFSv4/pnfs: pnfs_set_layout_stateid() should update the layout cred (Trond Myklebust)
  - qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() (Abdun Nihaal)
  - ALSA: sh: SND_AICA should depend on SH_DMA_API (Geert Uytterhoeven)
  - net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING (Vladimir Oltean)
  - spi: loopback-test: Do not split 1024-byte hexdumps (Geert Uytterhoeven)
  - nfs: handle failure of nfs_get_lock_context in unlock path (Li Lingfeng) [Orabug: 38094820] {CVE-2025-38023}
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [Orabug: 38094829] {CVE-2025-38024}
  - iio: chemical: sps30: use aligned_s64 for timestamp (David Lechner)
  - iio: adc: ad7768-1: Fix insufficient alignment of timestamp. (Jonathan Cameron)
  - staging: axis-fifo: Correct handling of tx_fifo_depth for size validation (Gabriel)
  - staging: axis-fifo: avoid parsing ignored device tree properties (Quentin Deslandes)
  - staging: axis-fifo: Remove hardware resets for user errors (Gabriel)
  - staging: axis-fifo: replace spinlock with mutex (Quentin Deslandes)
  - platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection (Hans de Goede)
  - do_umount(): add missing barrier before refcount checks in sync case (Al Viro)
  - MIPS: Fix MAX_REG_OFFSET (Thorsten Blum)
  - iio: adc: dln2: Use aligned_s64 for timestamp (Jonathan Cameron)
  - types: Complement the aligned types with signed 64-bit one (Andy Shevchenko)
  - usb: usbtmc: Fix erroneous generic_read ioctl return (Dave Penkler)
  - usb: usbtmc: Fix erroneous wait_srq ioctl return (Dave Penkler)
  - usb: usbtmc: Fix erroneous get_stb ioctl error returns (Dave Penkler)
  - USB: usbtmc: use interruptible sleep in usbtmc_read (Oliver Neukum)
  - usb: typec: ucsi: displayport: Fix NULL pointer access (Andrei Kuchynski) [Orabug: 38015128] {CVE-2025-37994}
  - usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition (Rd Babiera)
  - ocfs2: stop quota recovery before disabling quotas (Jan Kara)
  - ocfs2: implement handshaking with ocfs2 recovery thread (Jan Kara)
  - ocfs2: switch osb->disable_recovery to enum (Jan Kara)
  - module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [Orabug: 38015133] {CVE-2025-37995}
  - xenbus: Use kref to track req lifetime (Jason Andryuk) [Orabug: 37976936] {CVE-2025-37949}
  - usb: uhci-platform: Make the clock really optional (Alexey Charkov)
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo (Silvano Seva) [Orabug: 37977033] {CVE-2025-37969}
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [Orabug: 37977039] {CVE-2025-37970}
  - iio: adis16201: Correct inclinometer channel resolution (Gabriel)
  - iio: adc: ad7606: fix serial register access (Angelo Dureghello)
  - staging: iio: adc: ad7816: Correct conditional logic for store mode (Gabriel)
  - Input: synaptics - enable InterTouch on Dell Precision M3800 (Aditya Garg)
  - Input: synaptics - enable InterTouch on Dynabook Portege X30L-G (Aditya Garg)
  - Input: synaptics - enable InterTouch on Dynabook Portege X30-D (Manuel Fombuena)
  - net: dsa: b53: fix learning on VLAN unaware bridges (Jonas Gorski)
  - netfilter: ipset: fix region locking in hash types (Jozsef Kadlecsik) [Orabug: 38015143] {CVE-2025-37997}
  - sch_htb: make htb_deactivate() idempotent (Cong Wang) [Orabug: 38186817] {CVE-2025-37953}
  - dm: fix copying after src array boundaries (Tudor Ambarus)
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov) [Orabug: 37976839] {CVE-2025-37927}
  - arm64: dts: rockchip: fix iface clock-name on px30 iommus (Heiko Stuebner)
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling (Fedor Pchelkin)
  - usb: chipidea: ci_hdrc_imx: use dev_err_probe() (Alexander Stein)
  - usb: chipidea: imx: refine the error handling for hsic (Peter Chen)
  - usb: chipidea: imx: change hsic power regulator as optional (Peter Chen)
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Suzuki K Poulose) [Orabug: 37930014] {CVE-2025-37819}
  - irqchip/gic-v2m: Mark a few functions __init (Thomas Gleixner)
  - irqchip/gic-v2m: Add const to of_device_id (Xiang Wangx)
  - sch_htb: make htb_qlen_notify() idempotent (Cong Wang) [Orabug: 37976860] {CVE-2025-37932}
  - of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [Orabug: 36753382] {CVE-2024-38541}
  - PCI: imx6: Skip controller_id generation logic for i.MX7D (Richard Zhu)
  - net: fec: ERR007885 Workaround for conventional TX (Mattias Barthel)
  - net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan) [Orabug: 37976767] {CVE-2025-37909}
  - lan743x: fix endianness when accessing descriptors (Alexey Denisov)
  - lan743x: remove redundant initialization of variable current_head_index (Colin Ian King)
  - nvme-tcp: fix premature queue removal and I/O failover (Michael Liang)
  - net: dlink: Correct endianness handling of led_mode (Simon Horman)
  - net_sched: qfq: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug: 37976785] {CVE-2025-37913}
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Victor Nogueira) [Orabug: 37967412] {CVE-2025-37890}
  - net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug: 37976794] {CVE-2025-37915}
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID (Maor Gottlieb)
  - tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park) [Orabug: 37976823] {CVE-2025-37923}
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski)
  - dm-integrity: fix a warning on invalid table line (Mikulas Patocka)
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Xu Wang) [Orabug: 37977121] {CVE-2025-37990}
  - amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload (Vishal Badole)
  - parisc: Fix double SIGFPE crash (Helge Deller) [Orabug: 37977129] {CVE-2025-37991}
  - i2c: imx-lpi2c: Fix clock count when probe defers (Clark Wang)
  - EDAC/altera: Set DDR and SDMMC interrupt mask before registration (Niravkumar L Rabara)
  - EDAC/altera: Test the correct error reg offset (Niravkumar L Rabara)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.346.3.el7uek]
changelog:
  - x86/bpf: Classic BPF program can fail when BHB barrier is used (Alexandre Chartre) [Orabug: 38151403]
  - Add Zen34 clients (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
  - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
  - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
  - KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
  - x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}
  - x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky) [Orabug: 38172250] {CVE-2024-36350,CVE-2024-36357}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.346.4.el7uek]
changelog:
  - pwm: mediatek: Ensure to disable clocks in error path (Uwe Kleine-König)
  - Revert "mmc: sdhci: Disable SD card clock before changing parameters" (Ulf Hansson)
  - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.346.5.el7uek]
changelog:
  - perf: Fix perf_event_validate_size() lockdep splat (Mark Rutland)  [Orabug: 36261486]  {CVE-2023-6931}
  - perf: Fix perf_event_validate_size() (Peter Zijlstra)  [Orabug: 36261486]  {CVE-2023-6931}
  - net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju)  [Orabug: 38182891]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.346.6.el7uek]
changelog:
  - net/mlx5: Add poll-eq API to be used by ULP's (Praveen Kumar Kannoju)  [Orabug: 38109070]  
  - net/rds: poll eq during user-reset (Praveen Kumar Kannoju)  [Orabug: 38189315]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.0-1948.2.el7uek]
changelog:
  - uek6: Temporarily disable KABI check (Jack Vogel)   
  - arm64/crash_core: Export TCR_EL1.T1SZ in vmcoreinfo (John Donnelly)  [Orabug: 30193155]  
  - crypto: Enable CONFIG_CRYPTO_OFB for fips mode (Jack Vogel)   
  - kernel/crash_core.c - Add crashkernel=auto for x86 and Arm. (John Donnelly)  [Orabug: 30549968]  
  - drm/mgag200: Pin all framebuffer memory at offset 0 in VRAM (John Donnelly)  [Orabug: 30418470]  
  - uek-rpm: Reenable with_dtrace in both OL spec files. (Jack Vogel)   
  - ctf: toolchain-based CTF support (Nick Alcock)  [Orabug: 30544408]  
  - ctf: kernel build with -gt for CTF generation using GCC (sans ld atm) (Indu Bhagat)  [Orabug: 30544408]  
  - waitfd: new syscall implementing waitpid() over fds (Nick Alcock)  [Orabug: 30544408]  
  - ctf: generate CTF information for the kernel (Nick Alcock)  [Orabug: 30544408]  
  - kallsyms: new /proc/kallmodsyms with builtin modules and symbol sizes (Kris Van Hees)  [Orabug: 30544408]  
  - oracleasm: Convert block layer status to errno (Martin K. Petersen)  [Orabug: 30538854]  
  - Enable CONFIG_DM_WRITECACHE in UEK6 (Jack Vogel)  [Orabug: 30421025]  
  - Update the build versioning files. (Jack Vogel)  [Orabug: 30487822]  
  - sched: SIS_CORE to disable idle core search (subhra mazumdar)  [Orabug: 29708118]  
  - sched: add sched feature to disable idle core search (subhra mazumdar)  [Orabug: 29708118]  
  - sched: rotate the cpu search window for better spread (subhra mazumdar)  [Orabug: 29708118]  
  - sched: introduce per-cpu var next_cpu to track search limit (subhra mazumdar)  [Orabug: 29708118]  
  - sched: limit cpu search in select_idle_cpu (subhra mazumdar)  [Orabug: 29708118]  
  - CALL_NOSPEC macro needs forward/backward in label references (George Kennedy)  [Orabug: 30506771]  
  - uek-rpm: Update config files with "make olddefconfig" (Victor Erminpour)  [Orabug: 30507302]  
  - x86/kABI: Increase the NCAPINTS in case we need more CPU bits. (Konrad Rzeszutek Wilk)  [Orabug: 30318342]  
  - KEYS: Print insert-sys-cert information to stdout instead of stderr (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Support for inserting a certificate into x86 bzImage (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Add ELF class-independent certificate insertion support (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Insert incompressible bytes to reserve space in bzImage (Mehmet Kayaalp)  [Orabug: 30329032]  
  - uek-rpm: enable CONFIG_SYSTEM_EXTRA_CERTIFICATE (Eric Snowberg)  [Orabug: 30329032]  
  - Allow mce to reset instead of panic on UE (Allen Pais)  [Orabug: 29750244]  
  - net: enable RPS on vlan devices (Allen Pais)  [Orabug: 29751757]  
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27429506]  
  - mm: parallelize deferred page init along max order boundaries (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add ktask_ctl flag KTASK_ATOMIC (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add ktask_aligned_size (Daniel Jordan)  [Orabug: 29708084]  
  - vfio: Fix locked DMA page accounting (Aaron Young)  [Orabug: 29708084]  
  - vfio: relieve mmap_sem reader cacheline bouncing by holding it longer (Daniel Jordan)  [Orabug: 29708084]  
  - vfio: ease mmap_sem writer contention by caching locked_vm (Daniel Jordan)  [Orabug: 29708084]  
  - vfio: parallelize vfio_pin_map_dma (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add undo support (Daniel Jordan)  [Orabug: 29708084]  
  - ktask, lockdep: detect deadlocks between master and helper threads (Daniel Jordan)  [Orabug: 29708084]  
  - kernel/ktask: annocate debugobjects properly according to its storage location (Shan Hai)  [Orabug: 29708084]  
  - ktask: multithread CPU-intensive kernel work (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add documentation (Daniel Jordan)  [Orabug: 29708084]  
  - uek-rpm: Enable lockdown LSM (Eric Snowberg)  [Orabug: 30431425]  
  - lockdown: Run in lockdown integrity mode when SB is enabled. (Eric Snowberg)  [Orabug: 30431425]  
  - parfait: Speculative Side Channel defect groups in lib/hexdump.c (Anjali Kulkarni)  [Orabug: 30092081]  
  - Parfait fixes for defects found by parfait-tools (Anjali Kulkarni)  [Orabug: 29962202]  
  - uek-rpm: Set to old style build_id generation to avoid rpm install conflicts. (Somasundaram Krishnasamy)  [Orabug: 30435996]  
  - vmscan: Support multiple kswapd threads per node (Buddy Lumpkin)  [Orabug: 29708468] [Orabug: 29708453]  
  - scsi: mpt3sas: Bump mpt3sas driver version to 32.100.00.00 (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Fix module parameter max_msix_vectors (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Reject NVMe Encap cmnds to unsupported HBA (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Use Component img header to get Package ver (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Fail release cmnd if diag buffer is released (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Add app owned flag support for diag buffer (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Reuse diag buffer allocated at load time (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: clear release bit when buffer reregistered (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Maintain owner of buffer through UniqueID (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Free diag buffer without any status check (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Fix clear pending bit in ioctl status (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Display message before releasing diag buffer (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Register trace buffer based on NVDATA settings (Sreekanth Reddy)  [Orabug: 30376506]  
  - mm/memory-failure.c clean up around tk pre-allocation (Jane Chu)  [Orabug: 30124017]  
  - uek-rpm: enable CONFIG_INTEGRITY_PLATFORM_KEYRING (Eric Snowberg)  [Orabug: 30434806]  
  - x86/microcode/intel: Issue the revision updated message only on the BSP (Borislav Petkov)  [Orabug: 30353603]  
  - x86/microcode: Update late microcode in parallel (Ashok Raj)  [Orabug: 30353603]  
  - mm: Allow userspace to reserve VA range for use by userspace only (Khalid Aziz)  [Orabug: 30135230]  
  - x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju)  [Orabug: 29962281]  
  - x86/speculation/mds: Make mds_mitigation mutable after init (Kanth Ghatraju)  [Orabug: 30091537]  {CVE-2019-11091} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add debugfs for controlling MDS (Kanth Ghatraju)  [Orabug: 30091537]  {CVE-2019-11091} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add boot option to enable MDS protection only while in idle (Boris Ostrovsky)  [Orabug: 30091537]  {CVE-2019-11091} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk)  [Orabug: 29689986]  
  - x86/speculation: Properly initialize percpu variables (Boris Ostrovsky)  [Orabug: 30386767]  
  - Revert "x86/microcode: Probe CPU features on microcode update" (Boris Ostrovsky)  [Orabug: 30386767]  
  - x86/microcode: Probe CPU features on microcode update (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add per-cpu variables to control speculation (Patrick Colp)   
  - x86/speculation: Add the option to control spectre v2 heuristics (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Enable support for skylake (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add runtime knobs (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Plumb additional support into KVM (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add support for SPEC_CTRL idle (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add SSBD userspace mode (deprecated) (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add SSBD support with IBRS (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add IBPB static key support (Patrick Colp)   
  - x86/speculation: Add RSB stuffing to entry code (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add support for RSB stuffing (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add IBRS_{ENABLE|DISABLE} to entry code (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add static keys for IBRS firmware support (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add support for basic IBRS in the kernel (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Use a static key to enable/disable retpoline (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Refactor mitigation selection code (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Split out nospec-annotate.h from nospec-branch.h (Patrick Colp)  [Orabug: 30090397]  
  - uek-rpm: Fix rpm warnings on OL8 (Somasundaram Krishnasamy)  [Orabug: 30346507]  
  - uek-rpm: Disable PCMCIA (Eric Snowberg)  [Orabug: 30318827]  
  - x86/simplefb: simplefb was broken on UEFI mode Oracle and HP system, skip VIDEO_TYPE_EFI (Ethan Zhao)  [Orabug: 29746425]  
  - revert commit ff8fb335221e2c446b0d4cbea26be371fd2feb64 (Shuning Zhang)  [Orabug: 29708297]  
  - sysfs: replace WARN() with pr_debug when sysfs_remove_group() failed (Ethan Zhao)  [Orabug: 29746401]  
  - uek6: enable XFS online scrub code (Darrick J. Wong)  [Orabug: 30195940]  
  - xfs: change DAX warning for Exadata (Darrick J. Wong)  [Orabug: 30033648]  
  - xfs: add lazytime mount option (Darrick J. Wong)  [Orabug: 29962792]  
  - scsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Fred Herard)  [Orabug: 30023361]  
  - scsi: scsi_transport_iscsi: redirect conn error to console (Fred Herard)  [Orabug: 30023375]  
  - mISDN: Add __exit declaration for module exit function (Somasundaram Krishnasamy)  [Orabug: 29903374]  
  - crypto: cavium: cpt: Cavium Cryptographic Accelerator driver (Henry Willard)  [Orabug: 29751550]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/pmu.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in include/linux/kvm_host.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/cpuid.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/lapic.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mmu.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mtrr.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/x86.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in virt/kvm/irqchip.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in virt/kvm/kvm_main.c (Darren Kenny)  [Orabug: 28713077]  
  - arm64: do not place BUG() file name in generic section (Rob Gardner)  [Orabug: 29708067]  
  - ocfs2: Tighten free bit calculation in the global bitmap (Sunil Mushran)  [Orabug: 27199147]  
  - hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz)  [Orabug: 29708524]  
  - hugetlbfs: introduce truncation/fault mutex to avoid races (Mike Kravetz)  [Orabug: 29708507]  
  - kernel: VirtBox workaround for dynamically allocated text (Mike Kravetz)  [Orabug: 29708488]  
  - perf tools: add --sym-lookup arg to enable symbol lookup in hugepage shm segment (Ashok Vairavan)  [Orabug: 29745533]  
  - ocfs2: fix a performance issue with synced buffer io (Ryan Ding)   
  - ocfs2: call ocfs2_abort when journal abort (Ryan Ding)   
  - ocfs2/trivial: Limit unaligned aio+dio write messages to once per day (Sunil Mushran)  [Orabug: 27199146]  
  - ocfs2/trivial: Print message indicating unaligned aio+dio write (Sunil Mushran)  [Orabug: 27199145]  
  - ocfs2: Suppress the error message from being printed in ocfs2_rename (Xiaowei.Hu)  [Orabug: 27199148]  
  - ocfs2: make 'buffered' as the default coherency option (Wengang Wang)  [Orabug: 27199044]  
  - vmcore: quiet zero PT_NOTE warning (Dave Kleikamp)  [Orabug: 27199039]  
  - block: loop: Enable directIO whenever possible (Dave Kleikamp)  [Orabug: 27194729]  
  - arm64: Extend erratum 27456 workaround to ThunderX 83xx (Allen Pais)  [Orabug: 29538492]  
  - arm64: add support for crashkernel=auto (Allen Pais)  [Orabug: 29538492]  
  - oracleasm: Switch to new mount API in Linux 5.3 (Martin K. Petersen)   
  - oracleasm: Kernel changes for 5.2 (Martin K. Petersen)   
  - oracleasm: Kernel changes for 5.0 (Martin K. Petersen)   
  - oracleasm: Kernel changes for 4.18 (Martin K. Petersen)   
  - oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen)   
  - oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen)   
  - oracleasm: Fix use after free for request processing timer (Martin K. Petersen)   
  - oracleasm: Fix incorrectly set flag (Martin K. Petersen)   
  - oracleasm: Fix memory leak (Martin K. Petersen)   
  - oracleasm: Add ENXIO handling (Martin K. Petersen)   
  - oracleasm: Tracing update (Martin K. Petersen)   
  - oracleasm: Don't assume bip was allocated by oracleasm (Martin K. Petersen)   
  - oracleasm: fix asmfs_dir_operations compiler error (Tom Saeger)  [Orabug: 27465296]  
  - oracleasm: Kernel interface changes for 4.12 (Divya Indi)   
  - oracleasm: Copy the integrity descriptor (Martin K. Petersen)   
  - oracleasm: Integrity profile has moved (Martin K. Petersen)   
  - oracleasm: Add support for inline bio error reporting (Martin K. Petersen)   
  - oracleasm: Fix trace output for warn_asm_ioc and check_asm_ioc (Martin K. Petersen)   
  - oracleasm: Fix occasional I/O stall due to merge error (Martin K. Petersen)   
  - oracleasm: Classify device connectivity issues as global errors (Martin K. Petersen)  [Orabug: 20117903]  
  - oracleasm: Deprecate mlog and implement support for tracepoints (Martin K. Petersen)   
  - oracleasm: Abolish mlog usage in integrity.c and clean up error printing. (Martin K. Petersen)   
  - oracleasm: Various code and whitespace cleanups. (Martin K. Petersen)   
  - oracleasm: 4.0 compat changes (Martin K. Petersen)   
  - oracleasm: Compat changes for 3.18 (Martin K. Petersen)   
  - oracleasm: claim FMODE_EXCL access on disk during asm_open (Srinivas Eeda)  [Orabug: 19454829]  
  - oracleasm: Restrict logical block size reporting (Martin K. Petersen)   
  - oracleasm: Report logical block size (Martin K. Petersen)   
  - oracleasm: Compat changes for 3.10 (Martin K. Petersen)   
  - oracleasm: Add support for new error return codes from block/SCSI (Martin K. Petersen)  [Orabug: 17484923]  
  - oracleasm: Compat changes for 3.8 (Martin K. Petersen)   
  - oracleasm: Compat changes for 3.5 (Dwight Engen)   
  - oracleasm: Introduce module parameter for block size selection (Martin K. Petersen)  [Orabug: 15924773]  
  - oracleasm: Data integrity support (Martin K. Petersen)   
  - oracleasm: Fix two merge errors (Martin K. Petersen)   
  - Oracle ASM Kernel Driver (Martin K. Petersen)   
  - ksplice: aarch64 use ksplice friendly KBUILD_CFLAGS (Tom Saeger)  [Orabug: 27649476] [Orabug: 29961704]  
  - ksplice: add sysctls for determining Ksplice features. (Jamie Iles)  [Orabug: 26537364] [Orabug: 29961704]  
  - ksplice: clear the stack before going in the freezer. (Victor Erminpour)  [Orabug: 29961704]  
  - ksplice: avoid going in the __refrigerator without unwinding the stack. (Victor Erminpour)  [Orabug: 29961704]  
  - ksplice: do not skip tasks with TIF_KSPLICE_FREEZING. (Quentin Casasnovas)  [Orabug: 29961704]  
  - ksplice: Provide an interface to freeze tasks (Victor Erminpour)  [Orabug: 29961704]  
  - uek-rpm: Remove kernel-uek-tools RPMs for OL8 (Victor Erminpour)  [Orabug: 30205292]  
  - uek-rpm: Add changes for kernel-uek-doc build support. (Victor Erminpour)  [Orabug: 30381773]  
  - uek-rpm: Update summary to Oracle UEK Release 6 from 5 (Victor Erminpour)  [Orabug: 30310967]  
  - uek-rpm: Re-enable NF_TABLES config options (Victor Erminpour)  [Orabug: 30326867]  
  - uek-rpm: Fix kabitool Module.symvers parse error (Victor Erminpour)  [Orabug: 30341561]  
  - uek-rpm: Update OL8 spec to latest firmware revision (Jack Vogel)  [Orabug: 30299029]  
  - uek-rpm: Generate bls.conf file and copy UEFI CA cert (Victor Erminpour)  [Orabug: 30275817]  
  - uek-rpm: Package vmlinuz and .vmlinuz.hmac in /lib/modules/ (Victor Erminpour)  [Orabug: 30269735]  
  - uek-rpm: kernel-uek RPM specfile cleanup (Victor Erminpour)  [Orabug: 30199979]  
  - uek-rpm: RPM debuginfo improvements for OL8 (Victor Erminpour)  [Orabug: 30199979]  
  - uek-rpm: Fix bug in OL8 kernel RPM scriptlets (Victor Erminpour)  [Orabug: 30179076]  
  - uek-rpm: Disable CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT (Victor Erminpour)  [Orabug: 30179070]  
  - uek-rpm: Call find instead of cp and don't copy .tmp_versions (Victor Erminpour)  [Orabug: 30116866]  
  - uek-rpm: Add rsync as a 'BuildRequires' in RPM specfile (Victor Erminpour)  [Orabug: 30068210]  
  - uek-rpm: Enable CONFIG_NF_TABLES_NETDEV=y (Victor Erminpour)  [Orabug: 29897273]  
  - uek-rpm: Import 'certs/ol_signing_keys.pem' from 'linux-uek.git/uek5/master' (Victor Erminpour)   
  - config-aarch64: change CONFIG_HZ and CONFIG_FRAME_WARN (Thomas Tai)  [Orabug: 28894138]  
  - kernel-uek.spec: defuse a memory bomb in xargs (Lukáš Lipinský)  [Orabug: 30344582]  
  - kernel-uek.spec: defuse a memory bomb in xargs (Lukáš Lipinský)  [Orabug: 30057188]  
  - config-aarch64: enable CONFIG_MPLS_IPTUNNEL and CONFIG_BPF_JIT_ALWAYS_ON (Thomas Tai)  [Orabug: 29493120] [Orabug: 29409143]  
  - Revert "AMD: Change CONFIG_EDAC_DECODE_MCE to built-in" (George Kennedy)  [Orabug: 30080594]  
  - config-aarch64: enable ISCSI_IBFT (Thomas Tai)  [Orabug: 29456913]  
  - uek-rpm: Update firmware prerequisites to 20190627-999.2.git7ae3a09d. (John Donnelly)  [Orabug: 30043163]  
  - uek-rpm: Update UEK5 config files with "make olddefconfig" (Victor Erminpour)  [Orabug: 30038078]  
  - uek-rpm/ol7/nano_modules fix (Jane Chu)  [Orabug: 29959677]  
  - AMD: Change CONFIG_EDAC_DECODE_MCE to built-in (George Kennedy)  [Orabug: 29922372]  
  - config: enable PSI (Tom Hromatka)  [Orabug: 29896477]  
  - uek-rpm: Fix mce-inject.ko path in nano kernel modules list (Somasundaram Krishnasamy)  [Orabug: 29667299]  
  - Revert "aarch64 enable BNX2 CNIC ISCSI, FCOE" (Eric Saint-Etienne)  [Orabug: 29481221]  
  - uek-rpm: update list of removed files, generated by depmod on install stage (Alexander Burmashev)  [Orabug: 29383638]  
  - uek-rpm: replace i40evf.ko with iavf.ko in nano_modules. (John Donnelly)  [Orabug: 29421946]  
  - uek-rpm: aarch64 config enable RETPOLINE (Tom Saeger)  [Orabug: 28867144]  
  - add symbols to kABI whitelist (Dan Duval)  [Orabug: 29261848]  
  - uek-rpm: Remove hardcoded 'kernel_git_commit' macro from specfile (Victor Erminpour)  [Orabug: 29357441]  
  - uek-rpm: Add perf packages back to ol7-aarch64 (Victor Erminpour)  [Orabug: 29343605]  
  - uek-rpm: Remove perf RPMs (Victor Erminpour)  [Orabug: 29325581]  
  - uek-rpm: Remove oracle-armtoolset-1 for OL8 (Victor Erminpour)  [Orabug: 29325581]  
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29201054]  
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29201054]  
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29201054]  
  - uek-rpm: Port to OL8 (Victor Erminpour)  [Orabug: 29287050]  
  - uek-rpm: Change RPM variant from 4k-debug to 4kdebug (Victor Erminpour)  [Orabug: 29287050]  
  - uek-rpm: Copy uek-rpm/ol7/ directory to uek-rpm/ol8/ (Victor Erminpour)  [Orabug: 29287050]  
  - Add the Intel ICE driver to UEK5 configuration (Jack Vogel)  [Orabug: 29293770]  
  - Add Configuration option for Intel IGC driver to UEK5 (Jack Vogel)  [Orabug: 29294226]  
  - uek-rpm: Enable device-mapper era driver (Dave Aldridge)  [Orabug: 29245896]  
  - uek-rpm: Enable Ext2 extended attributes (Dave Aldridge)  [Orabug: 29252939]  
  - uek-rpm: Update x86_64 config options (Victor Erminpour)  [Orabug: 28700595]  
  - uek-rpm: Enable Cavium ThunderX coprocessors and AES_TI crypto (Victor Erminpour)  [Orabug: 29186152]  
  - uek-rpm: Enable ena driver (Somasundaram Krishnasamy)  [Orabug: 29162519]  
  - ctf: explicitly specify the sizes of structures and unions (Nick Alcock)  [Orabug: 29054989]  
  - uek-rpm: remove obsolete CTF-related find-debuginfo hack (Nick Alcock)  [Orabug: 29043023]  
  - ktask: multithread CPU-intensive kernel work (Daniel Jordan)  [Orabug: 25577642]  
  - uek-rpm: build in vfio and vfio_iommu_type1 modules (Daniel Jordan)  [Orabug: 25577642]  
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  
  - [PATCH UEK5 v3] dtrace: add DTRACEACT_PCAP for packet capture for later pcap_dump() (Alan Maguire)  [Orabug: 28975818]  
  - uek-rpm: Allow blacklisting of kernel modules in initramfs during nano-kernel build (Somasundaram Krishnasamy)  [Orabug: 28925565]  
  - uek-rpm: aarch64: enable CONFIG_GPIO_THUNDERX (Henry Willard)  [Orabug: 28932941]  
  - uek-rpm: Enable read IMA policy (Eric Snowberg)  [Orabug: 28702669]  
  - Update the UEFI secureboot keys in UEK5 Master (Jack Vogel)  [Orabug: 28900807]  
  - arm64: disable /dev/port on 64 bit ARM (Eric Saint-Etienne)  [Orabug: 28320013]  
  - config: disable xfs online scrub in uek5 (Darrick J. Wong)  [Orabug: 28874134]  
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928} 
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928} 
  - uek-rpm: Run 'make olddefconfig' to get latest x86 config values (Victor Erminpour)  [Orabug: 28763256]  
  - uek-rpm: Remove module rpcrdma.ko (NFSoRDMA) from nano_modules (Somasundaram Krishnasamy)  [Orabug: 28850263]  
  - config: enable BNXT_HWMON (Brian Maly)  [Orabug: 28797053]  
  - uek-rpm: aarch64 some XGENE drivers must be be modules (Tom Saeger)  [Orabug: 28549351]  
  - uek-rpm: enable DTrace FBT for aarch64 (Kris Van Hees)  [Orabug: 28707614]  
  - uek-rpm: enable DTrace SDT for aarch64 (Kris Van Hees)  [Orabug: 28707604]  
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28630247]  
  - uek-rpm: support both 4k and 64k page size for aarch64 (Allen Pais)  [Orabug: 28526023]  
  - Revert "uek-rpm: support both 4k and 64k page size for aarch64" (Jack Vogel)   
  - uek-rpm: Disable F2FS in the UEK5 config (Victor Erminpour)  [Orabug: 28570381]  
  - uek-rpm: support both 4k and 64k page size for aarch64 (Allen Pais)  [Orabug: 28526023]  
  - uek-rpm: Enable MPLS suppoprt (Victor Erminpour)  [Orabug: 28367674]  
  - dtrace: increment dtrace-kernel-headers revision to 1.1.0 (Vincent Lim)  [Orabug: 28241736]  
  - uek-rpm: aarch64: enable building SHA3 algorithms (Henry Willard)  [Orabug: 28486461]  
  - mstflint: add mstflint secure boot access kernel support (Qing Huang)  [Orabug: 27416559]  
  - uek-rpm: Enable perf stripped binary (Victor Erminpour)  [Orabug: 28469286]  
  - uek-rpm: Show UEK Release Number in RPM summary (Victor Erminpour)  [Orabug: 28468593]  
  - uek-rpm: aarch64 Set CONFIG_BPF_STREAM_PARSER (Henry Willard)  [Orabug: 27653372]  
  - aarch64: remove duplicate dtb in kernel rpm (Eric Saint-Etienne)  [Orabug: 28216582]  
  - uek-rpm: Enable net_failover.ko in nano_modules file (Victor Erminpour)  [Orabug: 28390028]  
  - uek-rpm: config: Disable CONFIG_SECURITY_DMESG_RESTRICT (Victor Erminpour)  [Orabug: 28372959]  
  - uek-rpm: Enable ovmapi.ko in nano_modules file (Victor Erminpour)  [Orabug: 28144761]  
  - Revert "aarch64: remove duplicate dtb in kernel rpm" (Jack Vogel)   
  - aarch64: remove duplicate dtb in kernel rpm (Eric Saint-Etienne)  [Orabug: 28216582]  
  - aarch64: fix device mapper multipathing (Eric Saint-Etienne)  [Orabug: 27893211]  
  - uek-rpm: config-debug: Turn off torture testing by default (Knut Omang)  [Orabug: 27746166]  
  - rpi: MMC fails to find DMA channel and falls back to PIO (Vijay Kumar)  [Orabug: 28159727]  
  - uek-rpm: aarch64 Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 28158146]  
  - uek-rpm: config: disable CONFIG_DEBUG_VM on aarch64 (Henry Willard)  [Orabug: 28104208]  
  - uek-rpm: Enable kernel-uek-headers build. (Victor Erminpour)  [Orabug: 28110910]  
  - arm64: add support for crashkernel=auto (Dave Kleikamp)  [Orabug: 28095909]  
  - uek-rpm: aarch64 sync NVME config with x86 (Tom Saeger)  [Orabug: 28096294]  
  - uek-rpm: aarch64 make olddefconfig latest stable (Tom Saeger)  [Orabug: 28084270]  
  - uek-rpm: aarch64 make olddefconfig usercopy whitelist (Tom Saeger)  [Orabug: 28084248]  
  - uek-rpm: aarch64 set default cpu governor to PERFORMANCE (Tom Saeger)  [Orabug: 27952402]  
  - uek-rpm: Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 27801112]  
  - uek-rpm: Enable CONFIG_QED_OOO option in UEK5 (Victor Erminpour)  [Orabug: 27774819]  
  - uek-rpm: aarch64 use 64K pagesize (Tom Saeger)  [Orabug: 28057643]  
  - add new checksum files for kABI; re-enable kABI checking (Dan Duval)  [Orabug: 27199028]  
  - uek-rpm: aarch64 build using oracle-armtoolset (Tom Saeger)  [Orabug: 28022143]  
  - uek-rpm: aarch64 make TORTURE modules debug only (Tom Saeger)  [Orabug: 28032744]  
  - uek-rpm: aarch64 enable QLOGIC modules (Tom Saeger)  [Orabug: 28021280]  
  - uek-rpm: aarch64 disable HARDENED_USERCOPY (Tom Saeger)  [Orabug: 27996695]  
  - uek-rpm: aarch64 disable modules that panic kernel (Tom Saeger)  [Orabug: 27999744]  
  - uek-rpm: aarch64 make olddefconfig for ARM SDEI (Tom Saeger)  [Orabug: 28022735]  
  - uek-rpm: Add kernel/drivers/crypto/ccp/ccp.ko to nano modules list (Liam Merwick)  [Orabug: 27854232]  
  - uek-rpm: Run 'make olddefconfig' for UEK5 v4.14.35 (Victor Erminpour)  [Orabug: 27981731]  
  - uek-rpm: Enable silently dropped options from UEK4 (Victor Erminpour)  [Orabug: 27834007]  
  - Revert "enable kABI checking in spec file" (Jack Vogel)   
  - uek-rpm: Remove deprecated config options from UEK5 (Victor Erminpour)  [Orabug: 27981766]  
  - uek-rpm: enable building SHA3 algorithms (Khalid Aziz)  [Orabug: 28001020]  
  - initial kABI whitelists for UEK5 (Dan Duval)  [Orabug: 27199028]  
  - enable kABI checking in spec file (Dan Duval)  [Orabug: 27199028]  
  - uek-rpm: Update linux-firmware dependency to latest (Somasundaram Krishnasamy)  [Orabug: 27989702]  
  - uek-rpm: Turn on intel iommu/vt-d (Tushar Dave)  [Orabug: 27747905]  
  - kernel.spec: add requires system-release for OL7 (Brian Maly)  [Orabug: 27964285]  
  - uek-rpm: aarch64 add arm64 defconfig platforms (Tom Saeger)  [Orabug: 27573165]  
  - uek-rpm: aarch64 disable nct hwmon modules (Tom Saeger)  [Orabug: 27866965]  
  - uek-rpm: aarch64 olddefconfig update to 4.14.35 (Tom Saeger)  [Orabug: 27933685]  
  - uek-rpm: aarch64 remove perl dependency from perf (Tom Saeger)  [Orabug: 27704937]  
  - config: enable fasttrap provider for arm64 (Kris Van Hees)  [Orabug: 27847920]  
  - uek-rpm: Enable build of kernel-uek-doc rpm (Somasundaram Krishnasamy)  [Orabug: 27845100]  
  - uek-rpm: Enable options from RHCK-7.5 missing in UEK5 (Victor Erminpour)  [Orabug: 27866120]  
  - uek-rpm: Enable CONFIG_EDAC_SKX and CONFIG_RAS_CEC (Victor Erminpour)  [Orabug: 27824333]  
  - uek-rpm: Set base_sublevel to 35 (Somasundaram Krishnasamy)  [Orabug: 27911742]  
  - uek-rpm: aarch64 set CMA_SIZE_MBYTES to 0 (Tom Saeger)  [Orabug: 27854630]  
  - uek-rpm: aarch64 enable resilient_rdmaip module (Tom Saeger)  [Orabug: 27854808]  
  - uek-rpm: aarch64 add PANIC_ON_OOPS (Tom Saeger)  [Orabug: 27847484]  
  - uek-rpm: RPM install scripts doesn't supply grub2 with a DT despite it is requested (Petr Benes)  [Orabug: 27802749]  
  - uek-rpm: remove virtio-gpu from nanokernel modules (Jim Quigley)  [Orabug: 27829972]  
  - uek-rpm: aarch64 enable BNX2 CNIC ISCSI, FCOE (Tom Saeger)  [Orabug: 27824608]  
  - uek-rpm: aarch64 olddefconfig update to 4.14.32 (Tom Saeger)  [Orabug: 27824121]  
  - uek-rpm: aarch64 config enable NUMA (Tom Saeger)  [Orabug: 27570228]  
  - uek-rpm: config: Add support for resilient_rdmaip new kernel module (Sudhakar Dindukurti)  [Orabug: 27718686]  
  - uek-rpm: config: Enable ARM64_SVE for aarch64 (Jim Quigley)  [Orabug: 27821643]  
  - uek-rpm: Include tools/objtool/objtool in kernel-uek-devel (Somasundaram Krishnasamy)  [Orabug: 27799902]  
  - uek-rpm: config: Enable DRM_VIRTIO_GPU for x-86_64. (Jim Quigley)  [Orabug: 27815399]  
  - uek-rpm/kernel-uek.spec: Add module.lds in uek5 devel rpm (Vijay Kumar)  [Orabug: 27613639]  
  - Revert "uek-rpm: kabi: remove __stack_chk_fail from kABI list" (Todd Vierling)  [Orabug: 27509441]  
  - uek-rpm: Enable CONFIG_SCHEDSTATS in UEK5 config file (Victor Erminpour)  [Orabug: 27774280]  
  - uek-rpm: Enable config options from UEK5 review (Victor Erminpour)  [Orabug: 27741375]  
  - uek-rpm: Set base_sublevel to 32 (Somasundaram Krishnasamy)  [Orabug: 27792024]  
  - uek-rpm: deliver kvm_stat on x86_64 via kernel-uek-tools (Liam Merwick)  [Orabug: 27566074]  
  - uek-rpm: config: Run "make olddefconfig" against v4.14.28 for x86_64 (Victor Erminpour)  [Orabug: 27656430]  
  - uek-rpm: config: Enable OL7U5 RHCK options for UEK5 (Victor Erminpour)  [Orabug: 27622705]  
  - uek-rpm: config: Enable CONFIG_DMA_CMA and CONFIG_CMA_SIZE_MBYTES=0 (Victor Erminpour)  [Orabug: 25917090]  
  - uek-rpm: config: Enable KASLR in UEK5 (Victor Erminpour)  [Orabug: 27741231]  
  - uek-rpm: config: Enable CONFIG_X86_MCELOG_LEGACY=y (Victor Erminpour)  [Orabug: 27684921]  
  - uek-rpm: config: Enable XFRM_OFFLOAD and ESP_OFFLOAD config options (Victor Erminpour)  [Orabug: 27741365]  
  - uek-rpm: config: Enable CONFIG_KVM_DEBUG_FS in UEK5 debug kernel (Victor Erminpour)  [Orabug: 27741246]  
  - uek-rpm: config: Enable CONFIG_F2FS_FS in UEK5 (Victor Erminpour)  [Orabug: 27739286]  
  - uek-rpm: config: Enable qat_c62x and qat_c62xvf modules (Victor Erminpour)  [Orabug: 27725149]  
  - uek-rpm: config: Disable CONFIG_SECURITY_LOADPIN (Victor Erminpour)  [Orabug: 27703796]  
  - uek-rpm: update dtrace-kernel-headers to 1.0.0 (Tomas Jedlicka)  [Orabug: 27752578]  
  - uek-rpm: enable BNX* drivers for aarch64 (Allen Pais)  [Orabug: 27717735]  
  - uek-rpm: config aarch64 add RPi3 support (Tom Saeger)  [Orabug: 27574522]  
  - uek-rpm/config-aarch64: Unset CONFIG_MODULE_SIG_FORCE in kernel config (Vijay Kumar)  [Orabug: 27620376]  
  - uek-rpm/config-aarch64: Enable default sysrq in kernel config (Vijay Kumar)  [Orabug: 27080659]  
  - uek-rpm: Bump libdtrace-ctf dependency to 0.8.0. (Todd Vierling)  [Orabug: 27741711]  
  - uek-rpm: Set base_sublevel to 30 (Somasundaram Krishnasamy)  [Orabug: 27752925]  
  - uek-rpm: Update nano modules list (Somasundaram Krishnasamy)  [Orabug: 27706743]  
  - uek-rpm: Set base_sublevel to 28 (Somasundaram Krishnasamy)  [Orabug: 27717309]  
  - uek-rpm: aarch64 build kernel-tools, perf packages (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: aarch64 add cpupower files needed by kernel-tools (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: aarch64 install perf with kernel-uek (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: config: Enable ext4 file system encryption (Victor Erminpour)  [Orabug: 27635263]  
  - uek-rpm: UEK5 config file Review (Victor Erminpour)  [Orabug: 27649939]  
  - uek-rpm: Remove config-sparc file (Victor Erminpour)  [Orabug: 27649916]  
  - uek-rpm: config: Enable IPVLAN support (Victor Erminpour)  [Orabug: 27633248]  
  - uek-rpm: config: Enable vfio_mdev VFIO mediated device module (Victor Erminpour)  [Orabug: 27583169]  
  - uek-rpm: config: Enable Intel RDT (Victor Erminpour)  [Orabug: 27581283]  
  - uek-rpm: Set base_sublevel to 26 (Somasundaram Krishnasamy)  [Orabug: 27678165]  
  - uek-rpm: config aarch64 enable kpti and bp harden (Tom Saeger)  [Orabug: 27657714]  
  - uek-rpm: Remove unneeded modules from kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 27663420]  
  - uek-rpm: config aarch64 enable Mellanox hardware (Tom Saeger)  [Orabug: 27657528]  
  - uek-rpm: Set base_sublevel to 24 (Somasundaram Krishnasamy)  [Orabug: 27639261]  
  - uek-rpm: config: enable XFS Realtime subvolume support by default (Shan Hai)  [Orabug: 27548835]  
  - uek-rpm: aarch64 provide kernel-uname-r metadata (Tom Saeger)  [Orabug: 27540755]  
  - modsign: aarch64 Add key for module signing (Tom Saeger)  [Orabug: 27448208]  
  - uek-rpm: Set base_sublevel to 23 (Somasundaram Krishnasamy)  [Orabug: 27601642]  
  - uek-rpm: Update nano modules list (Somasundaram Krishnasamy)  [Orabug: 27532347]  
  - uek-rpm: Set base_sublevel to 20 (Somasundaram Krishnasamy)  [Orabug: 27586336]  
  - uek-rpm: enable USERFAULTFD in debug kernel (Mike Kravetz)  [Orabug: 27574106]  
  - uek-rpm: Set base_sublevel to 19 (Somasundaram Krishnasamy)  [Orabug: 27396439]  
  - uek-rpm: aarch64 enable available DTrace options (Tom Saeger)  [Orabug: 27485993]  
  - uek-rpm: Update to latest linux-firmware version (Somasundaram Krishnasamy)  [Orabug: 27523859]  
  - uek-rpm: enable LOCK_DOWN_IN_EFI_SECURE_BOOT (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: Enable CONFIG_MODULE_SIG_ALL (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_LOCK_DOWN_KERNEL (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_LOAD_UEFI_KEYS. (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable EFI_SIGNATURE_LIST_PARSER (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_SECONDARY_TRUSTED_KEYRING (Eric Snowberg)  [Orabug: 27193819]  
  - Revert "uek-rpm: config: enable some secure boot features" (Somasundaram Krishnasamy)  [Orabug: 27193819]  
  - uek-rpm: Enable RDS_ACL in UEK5 (Aron Silverton)  [Orabug: 27503146]  
  - uek-rpm: aarch64 enable OCFS2_FS (Tom Saeger)  [Orabug: 27525109]  
  - uek-rpm: Add support for QLogic 41000 Series Converged Network Adapters (Somasundaram Krishnasamy)  [Orabug: 27426190]  
  - uek-rpm: Enable KPTI and Retpoline config options in UEK5 (Victor Erminpour)  [Orabug: 27487028]  
  - uek-rpm: Enable Yama LSM in UEK5 (Victor Erminpour)  [Orabug: 27486963]  
  - uek-rpm: Enable config support for NVMe over Fabrics (NVMe-oF) (Victor Erminpour)  [Orabug: 27449641]  
  - uek-rpm: Enable support for iWarp QLogic QEDR in UEK5 (Victor Erminpour)  [Orabug: 27448989]  
  - uek-rpm: Enable config support for iWARP Intel i40iw (Victor Erminpour)  [Orabug: 27448941]  
  - uek-rpm: Enable config options for Heterogeneous Memory Management (HMM) (Victor Erminpour)  [Orabug: 27110778]  
  - uek-rpm: Enable eBPF related configs in UEK5 (Victor Erminpour)  [Orabug: 27416748]  
  - uek-rpm: Use olddefconfig instead of oldnoconfig (Somasundaram Krishnasamy)  [Orabug: 27283275]  
  - uek-rpm: aarch64 RPMs need Provides 'kernel' (Tom Saeger)  [Orabug: 27516320]  
  - uek-rpm: kabi: remove __stack_chk_fail from kABI list (Todd Vierling)  [Orabug: 27509305]  
  - uek-rpm: aarch64 needs kernel-headers by default (Tom Saeger)  [Orabug: 27495792]  
  - uek-rpm: Update kernel-ueknano modules list (Somasundaram Krishnasamy)  [Orabug: 27494605]  
  - uek-rpm: require CC=gcc7 on aarch64 (Tom Saeger)  [Orabug: 27438232]  
  - uek-rpm: add _kernel_cc to kernel-uek.spec (Tom Saeger)  [Orabug: 27438232]  
  - uek-rpm: config: enable numa balancing on by default (Henry Willard)  [Orabug: 27464647]  
  - uek-rpm: Do not create kernel-uek-base rpm (Somasundaram Krishnasamy)  [Orabug: 27364632]  
  - uek-rpm: enable CONFIG_PREEMPT_VOLUNTARY (Vincent Lim)  [Orabug: 27456269]  
  - uek-rpm: Enable SoftRoCE related configuration in UEK5 (Victor Erminpour)  [Orabug: 27449119]  
  - uek-rpm: Do not build kernel-uek-headers by default. (Somasundaram Krishnasamy)  [Orabug: 27363133]  
  - ctf: enable in debugging kernels (Nick Alcock)  [Orabug: 27266231]  
  - uek-rpm: build env files for aarch64 (Tom Saeger)  [Orabug: 27437589]  
  - uek-rpm: enable debug builds on aarch64 (Tom Saeger)  [Orabug: 27433384]  
  - uek-rpm: configs: Enabel Oracle HXGE and ASM driver (Allen Pais)  [Orabug: 27199116]  
  - fm10k: Add driver to the kernel config for UEK4 (Allen Pais)  [Orabug: 27199008]  
  - uek-rpm: config: enable some secure boot features (Allen Pais)  [Orabug: 27199002]  
  - uek-rpm: config: Enable OVM API (Allen Pais)  [Orabug: 27199003]  
  - uek-rpm: config: sxge/sxgevf: enable driver (Allen Pais)  [Orabug: 27199004]  
  - uek-rpm: enable CONFIG_KSPLICE. (Allen Pais)  [Orabug: 27199009]  
  - x86: add support for crashkernel=auto (Brian Maly)  [Orabug: 27234070]  
  - modsign: Add key for module signing (Eric Snowberg)  [Orabug: 27199070]  
  - uek-rpm: Add Mellanox drivers neeeded for Exadata to base_modules (Victor Erminpour)  [Orabug: 27300509]  
  - uek-rpm: Enable Mellanox hardware kernel config options for UEK5. (Victor Erminpour)  [Orabug: 27300509]  
  - uek-rpm: Disable CONFIG_DMA_CMA in UEK5 kernel config (Victor Erminpour)  [Orabug: 27201411]  
  - uek-rpm: Enable CONFIG_IMA_DEFAULT_HASH=sha256 (Victor Erminpour)  [Orabug: 27186234]  
  - uek-rpm: Enable CGROUP config in the UEK5 kernel (Victor Erminpour)  [Orabug: 25974804]  
  - uek-rpm: Kernel config settings needed to support TCP-BBR (Victor Erminpour)  [Orabug: 27110608]  
  - uek-rpm: enable and configure PMEM/DAX for UEK (Victor Erminpour)  [Orabug: 27201433]  
  - uek-rpm: enable DTrace. (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: emit vmlinux.ctfa into -base package. (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: set CONFIG_DTRACE depending on the value of with_dtrace (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: Add signing options for aarch64 (Tom Saeger)  [Orabug: 27255646]  
  - uek-rpm: add aarch64 config files (Allen Pais)  [Orabug: 27255646]  
  - uek-rpm: add support for aarch64 (Allen Pais)  [Orabug: 27255646]  
  - config: CONFIG_FRAME_POINTER_UNWINDER is CONFIG_UNWINDER_FRAME_POINTER in 4.14.8 (Kris Van Hees)  [Orabug: 27419674]  
  - uek-rpm: create base config files for UEK5 (Victor Erminpour)  [Orabug: 26942304]  
  - uek-rpm: Enable signed modules (Dhaval Giani)  [Orabug: 27162491]  
  - uek-rpm: Downgrade linux-firmware version (Dhaval Giani)  [Orabug: 27162498]  
  - uek-rpm: define base_sublevel as 14 after pull of mainline stable 4.14.14 (Chuck Anderson)  [Orabug: 26942304]  
  - uek-rpm: Temporarily disable doc build (Chuck Anderson)  [Orabug: 26942304]  
  - uek-rpm: Add build dependencies to avoid build errors (Somasundaram Krishnasamy)  [Orabug: 26942304]  
  - uek-rpm: Add RPM build environment for UEK5 (Somasundaram Krishnasamy)  [Orabug: 26942304]  
  - Linux 5.4 (Linus Torvalds)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.1-1949.el7uek]
changelog:
  - Linux 5.4.1 (Greg Kroah-Hartman)   
  - KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel (Michael Ellerman)   
  - powerpc/book3s64: Fix link stack flush on context switch (Michael Ellerman)   {CVE-2019-18660} 
  - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error (Bernd Porr)   
  - USB: serial: option: add support for Foxconn T77W968 LTE modules (Aleksander Morgado)   
  - USB: serial: option: add support for DW5821e with eSIM support (Aleksander Morgado)   
  - USB: serial: mos7840: fix remote wakeup (Johan Hovold)   
  - USB: serial: mos7720: fix remote wakeup (Johan Hovold)   
  - USB: serial: mos7840: add USB ID to support Moxa UPort 2210 (Pavel Löbl)   
  - appledisplay: fix error handling in the scheduled work (Oliver Neukum)   
  - USB: chaoskey: fix error case of a timeout (Oliver Neukum)   
  - usb-serial: cp201x: support Mark-10 digital force gauge (Greg Kroah-Hartman)   
  - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (Suwan Kim)   
  - usbip: tools: fix fd leakage in the function of read_attr_usbip_status (Hewenliang)   
  - USBIP: add config dependency for SGL_ALLOC (Oliver Neukum)   
  - ALSA: hda - Disable audio component for legacy Nvidia HDMI codecs (Takashi Iwai)   
  - media: mceusb: fix out of bounds read in MCE receiver buffer (A Sun)   
  - media: imon: invalid dereference in imon_touch_event (Sean Young)   
  - media: cxusb: detect cxusb_ctrl_msg error in query (Vito Caputo)   
  - media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum)   
  - media: uvcvideo: Fix error path in control parsing failure (Laurent Pinchart)   
  - futex: Prevent exit livelock (Thomas Gleixner)   
  - futex: Provide distinct return value when owner is exiting (Thomas Gleixner)   
  - futex: Add mutex around futex exit (Thomas Gleixner)   
  - futex: Provide state handling for exec() as well (Thomas Gleixner)   
  - futex: Sanitize exit state handling (Thomas Gleixner)   
  - futex: Mark the begin of futex exit explicitly (Thomas Gleixner)   
  - futex: Set task::futex_state to DEAD right after handling futex exit (Thomas Gleixner)   
  - futex: Split futex_mm_release() for exit/exec (Thomas Gleixner)   
  - exit/exec: Seperate mm_release() (Thomas Gleixner)   
  - futex: Replace PF_EXITPIDONE with a state (Thomas Gleixner)   
  - futex: Move futex exit handling into futex code (Thomas Gleixner)   
  - cpufreq: Add NULL checks to show() and store() methods of cpufreq (Kai Shen)   
  - media: usbvision: Fix races among open, close, and disconnect (Alan Stern)   
  - media: usbvision: Fix invalid accesses after device disconnect (Alan Stern)   
  - media: vivid: Fix wrong locking that causes race conditions on streaming stop (Alexander Popov)   
  - media: vivid: Set vid_cap_streaming and vid_out_streaming to true (Vandana BN)   
  - ALSA: usb-audio: Fix Scarlett 6i6 Gen 2 port data (Geoffrey D. Bennett)   
  - ALSA: usb-audio: Fix NULL dereference at parsing BADD (Takashi Iwai)   
  - futex: Prevent robust futex exit race (Yang Tao)   
  - x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3 (Andy Lutomirski)   
  - x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make the CPU_ENTRY_AREA_PAGES assert precise (Ingo Molnar)   
  - selftests/x86/sigreturn/32: Invalidate DS and ES when abusing the kernel (Andy Lutomirski)   
  - selftests/x86/mov_ss_trap: Fix the SYSENTER test (Andy Lutomirski)   
  - x86/entry/32: Fix NMI vs ESPFIX (Peter Zijlstra)   
  - x86/entry/32: Unwind the ESPFIX stack earlier on exception entry (Andy Lutomirski)   
  - x86/entry/32: Move FIXUP_FRAME after pushing %fs in SAVE_ALL (Andy Lutomirski)   
  - x86/entry/32: Use %ss segment where required (Andy Lutomirski)   
  - x86/entry/32: Fix IRET exception (Peter Zijlstra)   
  - x86/cpu_entry_area: Add guard page for entry stack on 32bit (Thomas Gleixner)   
  - x86/pti/32: Size initial_page_table correctly (Thomas Gleixner)   
  - x86/doublefault/32: Fix stack canaries in the double fault handler (Andy Lutomirski)   
  - x86/xen/32: Simplify ring check in xen_iret_crit_fixup() (Jan Beulich)   
  - x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout (Jan Beulich)   
  - x86/stackframe/32: Repair 32-bit Xen PV (Jan Beulich)   
  - nbd: prevent memory leak (Navid Emamdoost)   
  - x86/speculation: Fix redundant MDS mitigation message (Waiman Long)   
  - x86/speculation: Fix incorrect MDS/TAA mitigation status (Waiman Long)   
  - x86/insn: Fix awk regexp warnings (Alexander Kapshuk)   
  - md/raid10: prevent access of uninitialized resync_pages offset (John Pittman)   
  - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues" (Mike Snitzer)   
  - Revert "Bluetooth: hci_ll: set operational frequency earlier" (Adam Ford)   
  - ath10k: restore QCA9880-AR1A (v1) detection (Christian Lamparter)   
  - ath10k: Fix HOST capability QMI incompatibility (Bjorn Andersson)   
  - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe (Hui Peng)   
  - ath9k_hw: fix uninitialized variable data (Denis Efremov)   
  - Bluetooth: Fix invalid-free in bcsp_close() (Tomas Bortoli)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.1-1949.1.el7uek]
changelog:
  - x86/spectre: Fix retpoline mode selection logic (Patrick Colp)  [Orabug: 30604403]  
  - uek-rpm: Add CONFIG_CRYPTO_CFB for FIPS (Jack Vogel)  [Orabug: 30158461]  
  - uek-rpm: Enable CONFIG_KEXEC_SIG (Victor Erminpour)  [Orabug: 30488668]  
  - uek-rpm: Enable CONFIG_FW_CFG_SYSFS and CONFIG_FW_CFG_SYSFS_CMDLINE (Victor Erminpour)  [Orabug: 30619488]  
  - uek-rpm: Enable CONFIG_X86_5LEVEL (Victor Erminpour)  [Orabug: 30155946]  
  - uek-rpm: Disable CONFIG_SCHED_AUTOGROUP (Victor Erminpour)  [Orabug: 30596055]  
  - uek-rpm: Carry forward previous UEK5 config options. (Victor Erminpour)  [Orabug: 30595946]  
  - x86/boot: Introduce setup_indirect (Daniel Kiper)  [Orabug: 30564020]  
  - x86/boot: Introduce kernel_info.setup_type_max (Daniel Kiper)  [Orabug: 30564020]  
  - x86/boot: Introduce kernel_info (Daniel Kiper)  [Orabug: 30564020]  
  - uek-rpm: Turn off CONFIG_DEBUG_WX for Arm production kernels. (John Donnelly)  [Orabug: 30193143]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.2-1950.el7uek]
changelog:
  - uek-rpm: Run "make olddefconfig" against uek6/master (Victor Erminpour)  [Orabug: 30596470]  
  - uek-rpm: Enable kTLS offload for for MLX5 (Victor Erminpour)  [Orabug: 30630366]  
  - uek-rpm: Enable CONFIG_CPU_IDLE_GOV_HALTPOLL (Victor Erminpour)  [Orabug: 30614031]  
  - uek-rpm: Enable DTrace required config options (Victor Erminpour)  [Orabug: 30619618]  
  - uek-rpm: UEK6 config option requests from John Haxby (Victor Erminpour)  [Orabug: 30596031]  
  - uek-rpm: UEK6 config option requests from Martin Petersen (Victor Erminpour)  [Orabug: 30596031]  
  - uek-rpm: RHCK config options for UEK6 (Victor Erminpour)  [Orabug: 30540922]  
  - Linux 5.4.2 (Greg Kroah-Hartman)   
  - platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size (Hans de Goede)   
  - platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer (Hans de Goede)   
  - HID: core: check whether Usage Page item is after Usage ID items (Candle Sun)   
  - crypto: talitos - Fix build error by selecting LIB_DES (Herbert Xu)   
  - Revert "jffs2: Fix possible null-pointer dereferences in jffs2_add_frag_to_fragtree()" (Joel Stanley)   
  - ext4: add more paranoia checking in ext4_expand_extra_isize handling (Theodore Ts'o)   
  - r8169: fix resume on cable plug-in (Heiner Kallweit)   
  - r8169: fix jumbo configuration for RTL8168evl (Heiner Kallweit)   
  - selftests: pmtu: use -oneline for ip route list cache (Thadeu Lima de Souza Cascardo)   
  - tipc: fix link name length check (John Rutherford)   
  - selftests: bpf: correct perror strings (Jakub Kicinski)   
  - selftests: bpf: test_sockmap: handle file creation failures gracefully (Jakub Kicinski)   
  - net/tls: use sg_next() to walk sg entries (Jakub Kicinski)   
  - net/tls: remove the dead inplace_crypto code (Jakub Kicinski)   
  - selftests/tls: add a test for fragmented messages (Jakub Kicinski)   
  - net: skmsg: fix TLS 1.3 crash with full sk_msg (Jakub Kicinski)   
  - net/tls: free the record on encryption error (Jakub Kicinski)   
  - net/tls: take into account that bpf_exec_tx_verdict() may free the record (Jakub Kicinski)   
  - openvswitch: remove another BUG_ON() (Paolo Abeni)   
  - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() (Paolo Abeni)   
  - sctp: cache netns in sctp_ep_common (Xin Long)   
  - slip: Fix use-after-free Read in slip_open (Jouni Hogander)   
  - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook (Navid Emamdoost)   
  - openvswitch: fix flow command message size (Paolo Abeni)   
  - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues (Dust Li)   
  - net: psample: fix skb_over_panic (Nikolay Aleksandrov)   
  - net: macb: add missed tasklet_kill (Chuhong Yuan)   
  - net: dsa: sja1105: fix sja1105_parse_rgmii_delays() (Oleksij Rempel)   
  - mdio_bus: don't use managed reset-controller (David Bauer)   
  - macvlan: schedule bc_work even if error (Menglong Dong)   
  - gve: Fix the queue page list allocated pages count (Jeroen de Borst)   
  - x86/fpu: Don't cache access to fpu_fpregs_owner_ctx (Sebastian Andrzej Siewior)   
  - thunderbolt: Power cycle the router if NVM authentication fails (Mika Westerberg)   
  - mei: me: add comet point V device id (Alexander Usyskin)   
  - mei: bus: prefix device names on bus with the bus name (Alexander Usyskin)   
  - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P (Fabio D'Urso)   
  - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids (Hans de Goede)   
  - staging: rtl8723bs: Drop ACPI device ids (Hans de Goede)   
  - staging: rtl8192e: fix potential use after free (Pan Bian)   
  - staging: wilc1000: fix illegal memory access in wilc_parse_join_bss_param() (Ajay Singh)   
  - usb: dwc2: use a longer core rest timeout in dwc2_core_reset() (Mathias Kresin)   
  - driver core: platform: use the correct callback type for bus_find_device (Sami Tolvanen)   
  - crypto: inside-secure - Fix stability issue with Macchiatobin (Pascal van Leeuwen)   
  - net: disallow ancillary data for __sys_{send,recv}msg_file() (Jens Axboe)   
  - net: separate out the msghdr copy from ___sys_{send,recv}msg() (Jens Axboe)   
  - io_uring: async workers should inherit the user creds (Jens Axboe)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.2-1950.1.el7uek]
changelog:
  - uek-rpm: aarch64 config enable RETPOLINE OL8 (Henry Willard)  [Orabug: 30297793]  
  - uek-rpm: aarch64 config enable RETPOLINE (Tom Saeger)  [Orabug: 30297793]  
  - arm64: Allow reference symbols in alt-seqs to be in kernel-data. (Christoph Muellner)  [Orabug: 30297793]  
  - arm64: retpoline: Don't use retpoline in KVM's HYP part. (Christoph Muellner)  [Orabug: 30297793]  
  - Arm64: add retpoline to cpu_show_spectre_v2 (Henry Willard)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline. (Christoph Muellner)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block. (Christoph Muellner)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr. (Christoph Muellner)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA. (Henry Willard)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br. (Henry Willard)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: Add initial retpoline support (Henry Willard)  [Orabug: 30297793]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.2-1950.2.el7uek]
changelog:
  - x86/speculation: Remove static jump from inside ALTERNATIVE block (Patrick Colp)  [Orabug: 30324611]


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: Edward Leung <edward.leung@oracle.com> - 2.0.14-17.2.0.1
changelog:
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> 2.0.15-5
changelog:
  - Revert "Update kdump anaconda addon"
  - Revert "Update kdump anaconda addon: fix the md5sum in source file"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-7
changelog:
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: remove "root=X" for kdump boot
  - kdumpctl: fix a bug in remove_cmdline_param()


author: Pingfan Liu <piliu@redhat.com> 2.0.15-9
changelog:
  - makedumpfile: Fix 'kernel_version' variable being uninitialized & introduce minor reorganization
  - makedumpfile: Fix segmentation fault when using --split on a vmcore
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not


author: Pingfan Liu <piliu@redhat.com> 2.0.15-10
changelog:
  - kexec-tools.spec: require dracut >= 033-522 to make 99kdump module installed correctly
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-11
changelog:
  - dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Pingfan Liu <piliu@redhat.com> 2.0.15-13
changelog:
  * Thu Feb 1 2018 Pingfan Liu <piliu@redhat.com> 2.0.15-12
  - makedumpfile/sadump: Fix a problem of PTI enabled kernel
  - makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'


author: Pingfan Liu <piliu@redhat.com> 2.0.15-14
changelog:
  - kdumpctl: Remove 'netroot' and 'iscsi initiator' entries from kdump cmdline
  - doc: remove btrfs from supported filesystems list
  - Update kdump anaconda addon
  - makedumpfile/arm64: Add '--mem-usage' support
  - Fix warning about persistent device name not found.
  - kdumpctl: Check the modification time of core_collector
  - kdump.sysconfig.x86_64: Remove 'notsc' from KDUMP_COMMANDLINE_REMOVE
  - makedumpfile: fix for hugepages filtering


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.1
changelog:
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.15-21.0.3.el7_6.3
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.4.el7_6.3
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug: 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 28043892]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-32
changelog:
  - makedumpfile: exclude pages that are logically offline
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-33
changelog:
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
    [Fix the Fix the patch to make sure makedumpfile-1.6.2/ path is used]


author: Livy Ge <livy.ge@oracle.com> 2.0.15-33.0.1
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43
changelog:
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48
changelog:
  - dracut-module-setup.sh: ensure cluster info is ready before query.
  - dracut-module-setup.sh: improve get_alias()


author: Alex Burmashev <alexander.burmashev@oracle.com> 2.0.15-51.0.1
changelog:
  - Check MokSBStateRT variable state to identify SecureBoot mode [Orabug: 31903240]
  - Add delay to avoid upstream race condition [Orabug: 31121959]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - rebase on top makedumpfile 1.6.6 [Orabug: 30352094]
  - makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30521746]
  - makedumpfile: backport needed upstream aarch64 patches [Orabug: 30352094]
  - trigger initramfs cleanup for kernel-uek and kernel-uek-debug [Orabug: 30192631]
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Tianyue Lan <tianyue.lan@oracle.com> 2.0.15-51.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug: 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 28043892]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface (Sriharsha Yadagudde) [Orabug: 18905671]
  - droped orabug30928441.kdump.no_timer_check.patch


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-51.0.3
changelog:
  - Mount sysroot inside kdump initramfs in specific FIPS cases [Orabug: 32179720]
  - Check MokSBStateRT variable state to identify SecureBoot mode [Orabug: 31903240]
  - Add delay to avoid upstream race condition [Orabug: 31121959]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - rebase on top makedumpfile 1.6.6 [Orabug: 30352094]
  - makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30521746]
  - makedumpfile: backport needed upstream aarch64 patches [Orabug: 30352094]
  - trigger initramfs cleanup for kernel-uek and kernel-uek-debug [Orabug: 30192631]
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Mridula Shastry <mridula.c.shastry@oracle.com> - 2.0.15-51.0.5.3
changelog:
  - kdumpctl: Add rd.md.uuid to kdump commandline if /boot is
   on a dedicated md device when fips is enabled (Todd Vierling) [Orabug: 34672180]


author: Brian Maly <brian.maly@oracle.com> 2.0.20-1.0.2
changelog:
  - fix kdump start with multiple crashkernel reservations [Orabug: 32133785]
  - fix OOM kill of makedumpfile when using smaller crashkernel reservations [Orabug: 32133850]
  - rebase to kexec-tools-2.0.20 [Orabug: 31933990]


author: WANG Chao <chaowang@redhat.com> - 2.0.4-25
changelog:
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel
  - Relax restriction of dumping on encrypted target
  - ssh dump: create random-seed manually


author: WANG Chao <chaowang@redhat.com> - 2.0.4-27
changelog:
  - mkdumprd: call dracut with --hostonly-cmdline (dracut >= 033-145)
  - warning on secure boot enabled platform


author: WANG Chao <chaowang@redhat.com> - 2.0.4-28
changelog:
  - Document supported/unsupported/unknown list of dump targets
  - Warn user about save vmcore path mounted by another disk


author: Guangyu Sun <guangyu.sun@oracle.com> - 2.0.4-32.0.1
changelog:
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Vaughan Cao <vaughan.cao@oracle.com> - 2.0.4-32.0.2
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]


author: Jingdong Lu <jingdong.lu@oracle.com> - 2.0.4-32.0.1.el7_0.1
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface (Sriharsha Yadagudde) [Orabug: 18905671]


author: Andrey Yutman <andrey.yutman@oracle.com> - 2.0.4-32.0.2.el7_0.3
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: WANG Chao <chaowang@redhat.com> - 2.0.7-14
changelog:
  - fix core_collector issue for ssh/raw dump
  - remove sysctl.conf for kdump kernel
  - exclude aarch64 build
  - fix path directive issue
  - remove panic_on_warn kernel parameter


author: WANG Chao <chaowang@redhat.com> - 2.0.7-15
changelog:
  - mount fail if its mount poing doesn't exist in /sysroot
  - rebuild initrd dependency during kdump restart
  - fix a dump path issue


author: Baoquan He <bhe@redhat.com> - 2.0.7-19.2
changelog:
  - dracut-module-setup: Enhance kdump to support the bind mounted feature in Atomic
  - Fix the warning if the target path is bind mount in Atomic
  - Get the mount point correctly, if the device has several mount point
  - kdump-lib: Add new function to judge the system is Atomic or not
  - kdump-lib: Add the new function to enhance bind mounted judgement
  - Remove duplicate slash in save path
  - dracut-module-setup.sh: change the insecure use of /tmp/*$$* filenames


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.7-19.0.1.el7_1.2
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
   (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Baoquan He <bhe@redhat.com> - 2.0.7-33
changelog:
  mkdumprd: Remove ifcfg from dracut's modules
  arm64: move -fno-exceptions from purgatory code to spec file
  module-setup: Choose the first matched gateway in kdump_static_ip


author: Baoquan He <bhe@redhat.com> - 2.0.7-34
changelog:
  arm64: Overwrite CFLAGS and remove -fno-exceptions from kexec purgatory code
  Fix comment to exclude keyword 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info
  Revert "arm64: move -fno-exceptions from purgatory code to spec file"


author: EL Errata <el-errata_ww@oracle.com> - 2.0.7-38.0.1
changelog:
  - Fix makedumpfile stall on systems with 6TB memory [Orabug: 20364744] (brian.maly@oracle.com)
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
   (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Baoquan He <bhe@redhat.com> - 2.0.7-42
changelog:
  - module-setup: Use get_ifcfg_filename() to get the proper ifcfg file
  - kdump-lib: Add get_ifcfg_filename() to get the proper ifcfg file
  - doc: add nfs to supported filesystems list


author: Baoquan He <bhe@redhat.com> - 2.0.7-43
changelog:
  - kexec/sadump: Back port two patches to fix regression bug of makedumpfile 1.6.0
  - Makedumpfile: Rebase to 1.6.0


author: Baoquan He <bhe@redhat.com> - 2.0.7-44
changelog:
  - Update kdump anaconda addon
  - kdumpctl: Do not rebuild initramfs when $KDUMP_BOOTDIR is read only
  - get_persistent_dev(): fix name contention with dracut's similar function


author: Baoquan He <bhe@redhat.com> - 2.0.7-45
changelog:
  - kdump.conf man page fixes
  - kdump.conf comments fixes
  - Add persistent memory support
  - module-setup: Don't handle iBFT in kdump


author: Baoquan He <bhe@redhat.com> - 2.0.7-47
changelog:
  - spec: Update to add dependency on dracut version >= 033-449
  - watchdog: do not add watchdog module in rd.driver.pre now
  - howto: Notes on watchdog module handling
  - kdumpctl: force rebuild in case of watchdog state change
  - mkdumprd: Add dracut watchdog module as default option


author: Baoquan He <bhe@redhat.com> - 2.0.7-50
changelog:
  - spec: Update to add dependency on dracut-network version >= 033-449
  - mkdumprd: Do not add "nfs" dracut module explicitly
  - kexec-kdump-howto: Add doc about the special mount information via "dracut_args"
  - Support special mount information via "dracut_args"


author: EL Errata <el-errata_ww@oracle.com> - 2.0.7-50.0.1
changelog:
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
   (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-2
changelog:
  - Resolves: #997594, misbehaving checkbox "Allow encryption with untrusted keys"
  - Resolves: #997599, Key Manager does not refresh after change
  - Resolves: #999850, shows error message despite the change was successful


author: Rex Dieter <rdieter@fedoraproject.org> - 4.10.1-2
changelog:
  - pull a few upstream patches, in particular...
  - kmix crahes moving streams between sinks (#922849)


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-10
changelog:
  - weak-modules: deprecate --delete-modules switch.
  - weak-modules: implement some pathes configuration from cmdline.
  - weak-modules: redesign to reuse depmod -aeE functionality
    (with some preparation changes).
    This is an updated version of the script which doesn't support
    multiple installation of the same out-of-tree module (stored in the
    'extra' subdirectory). But it more correctly checks dependencies
    between the modules.
    Resolves: rhbz#1367942


author: Tony Camuso <tcamuso@redhat.com> - 20-10
changelog:
  - Rename patches so they are not specific to the build. This was
    causing problems with z-stream builds.
    Resolves: rhbz#1416498


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.2
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1482385


author: John Mcwalters <john.mcwalters@oracle.com> - 20-15.0.1.el7_4.4
changelog:
  - Rebuilt with updated version
  - weak-modules: Cleanup weak-updates symlinks for external compiled in modules 
    created during dry-run option [Orabug: 26811747]
  - weak-modules: add patch for [Orabug: 26672773]


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.3
changelog:
  - weak-modules: implement dry run by symlink restoration.
  - weak-modules: fix dry-run for non-lib-modules installation.
    Resolves: rhbz#1489696.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.5
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1511943.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Natalya Naumova <natalya.naumova@oracle.com> - 20-23.0.1
changelog:
  - weak-modules: add patch for [Orabug: 26672773]
  - add PKCS#7 signature support [Orabug: 27645962]
  - Reviewed-by: Alexey Petrenko <alexey.petrenko@oracle.com>


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Jacob Wen <jian.w.wen@oracle.com> - 20-28.0.3
changelog:
  - Use ASN1_STRING_data for openssl-1.0.2k [Orabug: 31160124]
  - build: fix make distcheck [Orabug: 31160124]
  - libkmod-signature: implement pkcs7 parsing with openssl [Orabug: 31160124]
  - signature: do not report wrong data for pkc#7 signature [Orabug: 31160124]
  - libkmod: modinfo: implement signature output [Orabug: 31160124]
  - libkmod: modinfo: implement line splitting in hex_to_str [Orabug: 31160124]
  - libkmod: modinfo: use own function for sig_key hex output [Orabug: 31160124]
  - libkmod: modinfo: fix sig_id output [Orabug: 31160124]


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: David Shea <dshea@redhat.com> - 20-6
changelog:
  - Accept '.' as part of a symbol exported by the kernel
    Resolves: rhbz#1283486
  - Check the addon modules of the new kernel for exported symbols
    Resolves: rhbz#1296465


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.106-11
changelog:
  - Detect journal overflow after 160E of writes
  - Clean up UDS threads when removing last VDO
  - Resolves: rhbz#1512968
  - Resolves: rhbz#1523240


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.114-11
changelog:
  - /sys/uds permissions now resticted to superuser only
  - Remove /sys/uds files that should not be used in production
  - Removing kvdo module reports version
  - VDO automatically chooses the proper write policy by default
  - Fixed a Coverity-detected error path leak
  - Resolves: rhbz#1525305
  - Resolves: rhbz#1527734
  - Resolves: rhbz#1527737
  - Resolves: rhbz#1527924
  - Resolves: rhbz#1528399


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.124-11
changelog:
  - Fixed provisional referencing for dedupe.
  - Only log a bio submission from a VDO to itself.
  - vdoformat cleans up metadata properly after fail.
  - Resolves: rhbz#1511587
  - Resolves: rhbz#1520972
  - Resolves: rhbz#1532481


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.130-12
changelog:
  - Fix General Protection Fault unlocking UDS callback mutex
  - Removing kmod-kvdo package unloads kernel module
  - Fix URL to point to GitHub tree
  - Resolves: rhbz#1510176
  - Resolves: rhbz#1533260
  - Resolves: rhbz#1539061


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.146-13
changelog:
  - Module target is now "vdo" instead of "dedupe"
  - Fixed a bug where crash recovery led to failed kernel page request
  - Improved modification log messages
  - Improved package description and summary fields
  - Resolves: rhbz#1535127
  - Resolves: rhbz#1535597
  - Resolves: rhbz#1540696
  - Resolves: rhbz#1541409


author: - Andy Walsh <awalsh@redhat.com> - 6.1.0.168-16
changelog:
  - Updated source to use GitHub
  - Fixed module version checking for upgrades.
  - Removed debug kernel requirement from spec file.
  - Fixed a deadlock resulting from sleeping while holding a spinlock while
    getting statistics.
  - Resolves: rhbz#1567742
  - Fixed bugs arising from attempts to access sysfs nodes during startup and
    shutdown.
  - Resolves: rhbz#1567744
  - Removed the prepare_ioctl() function to avoid signature changes since this
    function currently does nothing.
  - Resolves: rhbz#1572494


author: - Andy Walsh <awalsh@redhat.com> - 6.1.0.181-17
changelog:
  - Fixed a bug which would cause kernel panics when a VDO device is stacked on a
    RAID50 device.
  - Resolves: rhbz#1599668
  - Fixed a bug which could cause data loss when discarding unused portions of a
    VDO's logical space.
  - Resolves: rhbz#1600058
  - Modified grow physical to fail in the prepare step if the size isn't
    changing, avoiding a suspend-and-resume cycle.
  - Resolves: rhbz#1600662
  - Fixed a bug which would cause attempts to grow the physical size of a VDO
    device to fail if the device below the VDO was resized while the VDO was
    offline.
  - Resolves: rhbz#1591180


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.84-1
changelog:
  - Deleted unused UDS features.
  - Improved performance of sub 4K writes.
  - Simplified and improved performance of writes with FUA.
  - Improved the accuracy of dedupe statistics.
  - Made the MurmurHash3 implementation architecture independent.
  - Fixed compilation errors on newer versions of GCC.
  - Eliminated spurious allocation of a UDS sparse cache for dense indexes.
  - Fixed a deadlock resulting from sleeping while holding a spinlock while
    getting statistics.
  - Resvolves: rhbz#1562228
  - Fixed bugs related to the timing of the creation and destruction of sysfs
    nodes relative to the creation and destruction of VDO data structures.
  - Resolves: rhbz#1559692
  - Fixed a bug which made deduplication impossible to disable.
  - Removed obsolete code.
  - Improved deduplication of concurrent requests containing the same data.
  - Reduced unnecessary logging.
  - Resolves: rhbz#1511127
  - Removed the prepare_ioctl() function to avoid signature changes since
    this function currently does nothing.
  - Resolves: rhbz#1568129
  - Fixed a bug which made using a sparse index impossible to create.
  - Resolves: rhbz#1570156


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.99-1
changelog:
  - Added /sys/kvdo/version which contains the currently loaded version of
    the kvdo module.
  - Resolves: rhbz#1533950
  - Added logging of normal operation when a VDO device starts normally.
  - Resolves: rhbz#1520988
  - Fixed a race in the UDS module which could cause the index to go offline.
  - Resolves: rhbz#1520988
  - Fixed a bug which would cause attempts to grow the physical size of a VDO
    device to fail if the device below the VDO was resized while the VDO was
    offline.
  - Resolves: rhbz#1582647
  - Fixed thread safety issues in the UDS page cache.
  - Resolves: rhbz#1579492
  - Modified the vdo script to not allow creation of a VDO device on top of an
    already running VDO device.
  - Resolves: rhbz#1572640
  - Fixed a bug which could cause data loss when discarding unused portions of a
    VDO's logical space.
  - Resolves: rhbz#1589249
  - Modified grow physical to fail in the prepare step if the size isn't
    changing, avoiding a suspend-and-resume cycle.
  - Resolves: rhbz#1576539


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.111-1
changelog:
  - Added support for issuing fullness warnings via dmeventd
  - rhbz#1519307
  - Fixed a bug which would cause kernel panics when a VDO device is stacked on a
    RAID50 device.
  - Resolves: rhbz#1593444
  - Improved logging when growing the physical size of a VDO volume.
  - Resolves: rhbz#1597890
  - Resolves: rhbz#1597886
  - Removed misleading log messages when rebuilding the UDS index.
  - Resolves: rhbz#1599867


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.120-2
changelog:
  - No longer attempt to unload modules in %preun
  - Resolves: rhbz#1553420
  - Improved memory allocation by not using the incorrect __GFP_NORETRY flag
    and by using the memalloc_noio_save mechanism.
  - Resolves: rhbz#1571292
  - Fixed a potential deadlock in the UDS index by using the kernel supplied
    struct callback instead of our own implementation of synchronous
    callbacks.
  - Resolves: rhbz#1602151
  - Fixed a potential stack overflow when reaping the recovery journal.
  - Resolves: rhbz#1608070
  - No longer attempt to unload modules in %preun
  - Resolves: rhbz#1553420
  - Improved safety around memory allocation permissions
  - Resolves: rhbz#1595923
  - Improved statistics accounting to allow for concurrent dedupe.
  - Resolves: rhbz#1540722


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.125-4
changelog:
  - Attempt to unload modules and print a warning if unable to.
  - Resolves: rhbz#1553420
  - Fixed a hang when recovering a VDO volume with a physical size larger than
    16TB.
  - Resolves: rhbz#1628316


author: Jingdong Lu <jingdong.lu@oracle.com> 6.1.1.125-5.0.1
changelog:
  - depmod error for symbolic link [OraBug: 28718247] (Hui Han)
    Reviewed-by: Laurence Rochfort <laurence.rochfort@oracle.com>
  - add RHCK signature


author: - Andy Walsh <awalsh@redhat.com> 6.1.2.38-5
changelog:
  - Fixed more error path memory leaks.
    - Resolves: rhbz#1609426
  - Rebased to version 6.2.0 of the UDS module
    - Resolves: rhbz#1637762
  - Improved counting of dedupe timeouts by including in the count queries
    which are not made due to their being a lack of resources from previous
    queries taking too long.
    - Resolves: rhbz#1639898
  - Fixed a NULL pointer dereference if dmeventd registration fails.
    - Resolves: rhbz#1640794
  - Fixed a bug in the statistics tracking partial I/Os.
    - Resolves: rhbz#1594406
  - Allowed VDO backing devices to be specified by major:minor device number.
    - Resolves: rhbz#1637762
  - Suppressed egregious read-only error logging.
    - Resolves: rhbz#1687005


author: - Andy Walsh <awalsh@redhat.com> 6.1.2.41-5
changelog:
  - Reduced and rate limited error logging in order to avoid kernel soft-lockups.
    - Resolves: rhbz#1687005


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.4-5
changelog:
  - Reduced and rate limited more error logging in order to avoid kernel
    soft-lockups.
    - Resolves: rhbz#1706196
  - Fixed a bug in the handling of re-used bios. This bug resulted in a
    kernel panic when rebooting a system after a crash with a VDO device on
    USB attached storage.
    - Resolves: rhbz#1676643


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.7-5
changelog:
  - Fixed a rare bug which would log an assertion failure when shutting down
    a VDO device.
    - Resolves: rhbz#1749000


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.23-5
changelog:
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
    - Resolves: rhbz#1821275


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.2.1_kern_dup7.5-1
changelog:
  - 394e4cd9074e05af7cd4843b33b4b1bef1e122d0
  - Resolves: #bz1607750
  - atlantic module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 1.10.0_dup7.7-1
changelog:
  - c45db7d2f34d6fad924c20443f73147dca7f6e29
  - bnxt_en kernel module for Driver Update Program
  - Resolves: #bz1755331


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.2K_dup7.6-2
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1659505
  - ena module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 1.6.27_k_dup7.3-1
changelog:
  - Resolves: #bz1448412
  - af7d3667969d1dedc990b0aa47458756796961c6
  - i40e module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 2.8.10_k_dup7.7-1
changelog:
  - c45db7d2f34d6fad924c20443f73147dca7f6e29
  - i40e kernel module for Driver Update Program
  - Resolves: #bz1784768


author: Eugene Syromiatnikov <esyr@redhat.com> 1.6.27_k_dup7.3-1
changelog:
  - Resolves: #bz1448413
  - 3545087798c48e481b8ae8aebcca6bfb199b470b
  - i40evf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 4.4.0_k_rh7.4_z-1
changelog:
  - 6591372b59cec0e59cd144bed3e51ba8ceb2dd88
  - ixgbe module for Driver Update Program
  - Resolves: #bz1439814


author: Eugene Syromiatnikov <esyr@redhat.com> 4.4.0_k_rh7.4_z-2
changelog:
  - Remove testing desclaimer from the package description
  - 6591372b59cec0e59cd144bed3e51ba8ceb2dd88
  - ixgbe module for Driver Update Program
  - Resolves: #bz1439814


author: Eugene Syromiatnikov <esyr@redhat.com> 3.2.2_k_rh7.4_z-1
changelog:
  - Resolves: #bz1441298
  - 5e0df6596e78194c6dc5dd0a038302b7fbdfb4c3
  - ixgbevf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 12.0.0.5_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1676589
  - lpfc kernel module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 07.700.00.00
changelog:
  - 5c36dd7d22747abb333b0c2541bac9544c358e3b
  - Resolves: #bz1427425
  - megaraid_sas module for Driver Update Program.


author: Eugene Syromiatnikov <esyr@redhat.com> 07.702.06.00_rh2_dup7.5-1
changelog:
  - 1514ac33c3e6a00c504e6e5eb0289f3c23bb8aa4
  - Resolves: #bz1578455
  - megaraid_sas module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 4.11.0_dup7.3-1
changelog:
  - Resolves: #bz1462099
  - 8d4022de88b02a390621a2bf9614b25b094951f8
  - mgag200 module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 4.11.0_dup7.3-5
changelog:
  - 8d4022de88b02a390621a2bf9614b25b094951f8
  - Provide fix for the #bz1463535 as a separate patch in order to preserve
    the integrity of sources.


author: Eugene Syromiatnikov <esyr@redhat.com> 14.101.00.00-1
changelog:
  - a2d3cbe3e7f414a5d0c8a9d931ddaf4dbc40c12d
  - Resolves: #rhbz1421748
  - mpt3sas module for Driver Update Program.


author: Eugene Syromiatnikov <esyr@redhat.com> 26.100.01.00_dup7.6-1
changelog:
  - db1eefc8c25d0a3feaed310963bb3c3d04d81825
  - Resolves: #bz1660390
  - mpt3sas module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 3.10.0_957-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1672909
  - nfit kernel module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.3-1
changelog:
  - d44f90c087a53365ef671c1a6414d07fd8bf4af0
  - Resolves: #bz1448409, #bz1448411
  - qed module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qed module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #1668206
  - qed module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.3-1
changelog:
  - Resolves: #bz1448411
  - 4fba2334c2fb174d98a4fabafd078f7b283b5622
  - qede module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qede module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qede module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.7.0_dup7.3-1
changelog:
  - Resolves: #bz1448408
  - e22c53a31fd2776bd02b4be1d9f93db5b5f8d678
  - qedf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.7.0_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qedf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qedf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.4.0_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qedi module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qedi module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 3.10.0_957_dup7.6-3
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qedr module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.0_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qedr module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 10.01.00.20.07.8_k_dup7.7-1
changelog:
  - c45db7d2f34d6fad924c20443f73147dca7f6e29
  - qla2xxx kernel module for Driver Update Program
  - Resolves: #bz1784769


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-3
changelog:
  - Enable direct calls
  - Fix method arguments that are both input and output
  - Don't install Find*.cmake files


author: Radek Novacek <rnovacek@redhat.com> 0.9.1-3
changelog:
  - Set format(printf) attribute to __KReturn2 function
  - Fix possible integer overflow
  - Resolves: rhbz#1000434, rhbz#1000430


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-40
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-42
changelog:
  - add proposed patch to fix the GSSAPI library's checks for expired
    client creds in gss_init_sec_context() so that they work with keyring
    caches (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-44
changelog:
  - pull in and backport multiple changes to allow replay caches to be added to
    a GSS credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-46
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-47
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066002, RT#7858)


author: Nathaniel McCallum <npmccallum@redhat.com> - 1.11.3-48
changelog:
  - add Nathaniel's backported fix for to make password changes work properly
    when performed while obtaining creds over FAST (RT#7868, #1072579)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-49
changelog:
  - mark the pkinit module "nodelete" so that applications which cause it
    to be loaded and unloaded repeatedly don't suffer from memory loss when
    libcrypto is initialized, allocating memory in the process, and then
    unloaded along with the module (most of #1063732)
  - when copying creds from one ccache to another, if we single out one
    server for which creds shouldn't be copied, don't leak the memory
    that those creds use (a bit more of #1063732)
  - fix an uninitialized variable warning that could, rarely, cause a
    service-unavailable error to be reported when a server was merely
    unreachable (spotted while chasing #1063732)
  - don't leak the per-request context allocated by preauth modules (a
    bit more of #1063732)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-9
changelog:
  - Undo libkadmclnt SONAME change (from 8 to 9) which originally
    happened in the krb5 1.12 rebase (#1166012) but broke
    rubygem-rkerberos (sort of ruby language bindings for
    libkadmclnt&co.) dependicies, as side effect of
    rubygem-rkerberos using private interfaces in libkadmclnt.


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-10
changelog:
  - In ksu, without the -e flag, also check .k5users (#1105489)
    When ksu was explicitly told to spawn a shell, a line in .k5users which
    listed "*" as the allowed command would cause the principal named on the
    line to be considered as a candidate for authentication.
    When ksu was not passed a command to run, which implicitly meant that
    the invoking user wanted to run the target user's login shell, knowledge
    that the principal was a valid candidate was ignored, which could cause
    a less optimal choice of the default target principal.
    This doesn't impact the authorization checks which we perform later.
    Patch by Nalin Dahyabhai <nalin@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-13
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-14
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-15
changelog:
  - Add a patch to fix RedHat bug #1256870 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed:
    - Bug 1144498 ("Fix the race condition in the libkrb5 replay cache")
    - Bug 1163402 ("kdb5_ldap_util view_policy does not shows ticket flags on s390x and ppc64")
    - Bug 1185770 ("Missing upstream test in krb5-1.12.2: src/tests/gssapi/t_invalid.c")
    - Bug 1204211 ("CVE-2014-5355 krb5: unauthenticated denial of service in recvauth_common() and other")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-3
changelog:
  - Add patch to fix Redhat Bug #1222903 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-4
changelog:
  - the rebase to krb5 1.13.2 in vers 1.13.2-0 also fixed:
    - Redhat Bug #1247761 ("RFE: Minor krb5 spec file cleanup and sync
      with recent Fedora 22/23 changes")
    - Redhat Bug #1247751 ("krb5-config returns wrong -specs path")
    - Redhat Bug #1247608 ('Add support for multi-hop preauth mechs
      via |KDC_ERR_MORE_PREAUTH_DATA_REQUIRED| for RFC 6113 ("A
      Generalized Framework for Kerberos Pre-Authentication")')
  - Removed "krb5-1.10-kprop-mktemp.patch" and
    "krb5-1.3.4-send-pr-tempfile.patch", both are no longer used since
    the rebase to krb5 1.13.1


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Add a patch to fix RedHat bug #1251586 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Add a patch to fix RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') so that krb5 resolves GSS creds
    if |time_rec| is requested.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-7
changelog:
  - Obsolete multilib versions of server packages to fix RH
    bug #1251913 ("krb5 should obsolete the multilib versions
    of krb5-server and krb5-server-ldap").
    The following packages are declared obsolete:
    - krb5-server-1.11.3-49.el7.i686
    - krb5-server-1.11.3-49.el7.ppc
    - krb5-server-1.11.3-49.el7.s390
    - krb5-server-ldap-1.11.3-49.el7.i686
    - krb5-server-ldap-1.11.3-49.el7.ppc
    - krb5-server-ldap-1.11.3-49.el7.s390


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-8
changelog:
  - Add a patch to fix RH Bug #1250154 ("[s390x, ppc64, ppc64le]:
    kadmind does not accept ACL if kadm5.acl does not end with EOL")
    The code "accidently" works on x86/AMD64 because declaring a
    variable |char| results in an |unsigned char| by default while
    most other platforms (e.g. { s390x, ppc64, ppc64le, ...})
    default to |signed char| (still have to use lint(1) to clean
    up 38 more instances of this kind of bug).


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-9
changelog:
  - Ammend patch for RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') to handle the newly introduced
    valgrind hits.


author: Robbie Harwood <rharwood@redhat.com> 1.13.2-9
changelog:
  - Add patch and test case for "KDC does not return proper
    client principal for client referrals"
  - Resolves: #1259846


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-12
changelog:
  - Fix CVE-2015-8631, CVE-2015-8630, and CVE-2015-8629
  - Remove obsolete trigger to enable building of package
  - Resolves: #1306969


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Mridula Shastry <mridula.c.shastry@oracle.com> - 1.15.1-55.0.3
changelog:
  - Length check when parsing GSS token encapsulation [Orabug: 36927256]
  - Add a simple DER support header [Orabug: 36927256]
  - Fix vulnerabilities in GSS message token handling [Orabug: 36927256]


author: Mridula Shastry <mridula.c.shastry@oracle.com> - 1.15.1-55.0.3
changelog:
  - Length check when parsing GSS token encapsulation [Orabug: 36927256]
  - Add a simple DER support header [Orabug: 36927256]
  - Fix vulnerabilities in GSS message token handling [Orabug: 36927256] (CVE-2024-37370 CVE-2024-37371)


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-7
changelog:
  - Fix installed files for -java subpkg
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-8
changelog:
  - Properly remove kross-java files
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1484937


author: Kamil Dudka <kdudka@redhat.com> - 20120801-137
changelog:
  - Increase the release number by 100 to make sure it stays higher than in RHEL-6
    Related: #1484937


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-12
changelog:
  - ksh sometimes wrote wrong byte sequence to terminal when vi editing 
    mode was used (#1026360)
  - fix errors in man page (#1030867)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-15
changelog:
  - fix argv rewrite (#1047507)
  - fix memory leak (#1048995)
  - standard error output could get misdirected (#1048272)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-19
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1070328)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-20
changelog:
  - fix segfault in job list code (#1084406)
  - do not resend signal on termination (#1085385)
  - fix brace expansion on/off (#1099935)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070871)
  - fix parser errors related to the end of the here-document marker (#1111120)
  - ksh hangs when command substitution fills out the pipe buffer (#1077090)
  - using typeset -l with a restricted variabled caused segmentation fault (#1121960)
  - monitor mode was documented incorrectly (#1100215)
  - do not crash when unsetting running function from another one (#1100215)
  - should report an error when trying to cd into directory without execution bit (#1109893)
  - job locking mechanism did not survive compiler optimization (#1116506)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-21
changelog:
  - include symlink for restricted shell (#1146161)
  - ksh hangs when command substitution containing pipe fills out the pipe buffer (#1138751)
  - current directory could differ from PWD (#1135573)
  - cd builtin could break IO redirection (#1133585)
  - return code from a function could be wrong (#1116507)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - closing a file descriptor in a command substitution caused loss of the output (#1202439)
  - fix: in a login shell "( cmd & )" does nothing (#1217237)
  - exporting fixed with variable corrupted its data (#1192026)
  - fix segfault when handling a trap (#1211540)
  - combining alarm and IFS caused segfault (#1192119)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
  - do not inherit invalid variables during shell initializaton (#1211538)
  - case in a for loop inside a subshell caused syntax error (#1241014)


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: John Dennis <jdennis@redhat.com> - 2.4.1-7
changelog:
  - Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
    Resolves: #1205342


author: John Dennis <jdennis@redhat.com> - 2.4.1-8
changelog:
  - Add explicit minimum dependency on glib2 2.42,
    for some reason RPM is not automatically detecting the dependency
    Resolves: #1254989


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3
changelog:
  - Resolves: #1634267 - ECP signature check fails with
                         LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                         instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4
changelog:
  - Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5
changelog:
  - Resolves: #1719014 - Expired certificate prevents tests from running
  - Actually apply the patch file for the previous build
  - Related: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6
changelog:
  - Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                         vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7
changelog:
  - Fix Coverity warning introduced by the previous patch
  - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                        vulnerability when parsing SAML responses


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-7
changelog:
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.


author: Richard Hughes <richard@hughsie.com> 2.4-1
changelog:
  - Update to new upstream version.
  - Black point detection from the algorithm disclosed by Adobe
  - Added support for transforms on planar data with different stride
  - Added a new plug-in type for optimizing full transforms
  - Linear (gamma 1.0) profiles can now operate in unbounded mode
  - Added "half" float support


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11.1
changelog:
  - Resolves: #1797963 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-12
changelog:
  - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased


author: Michal Ruprich <michalruprich@gmail.com> - 4.4.8-12.1
changelog:
  - Resolves: #1797964 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-13
changelog:
  - Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1392944 - File size decreases when synchronizing folders with a sftp account using lftp


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.7-2
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163604, bug 1163603)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163604, bug 1163603)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163604, bug 1163603)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.7-3
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258894)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258894)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258894)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1.5-3
changelog:
  - libXt 1.1.5
  - Merge F25:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps
  - Exclude docs from main package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: Jochen Schmitt <Jochen herr-schmitt de> - 2.3.21-7
changelog:
  - Add aarch64 as a 65-Bit architecture (#975267)
  - Add libtool as a BR
  - Call libtoolize before autoreconf


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Bastien Nocera <bnocera@redhat.com> - 0.2.3-6
changelog:
  + libbluray-0.2.3-0.12.git
  - Fix security issues in parts of the library that we never exercised
  Related: rhbz#1045453 rhbz#1045452


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-2
changelog:
  - added missing files from git: COPYING-GPL and COPYING-LGPL
  - added patch from git for missing pkgconfig requires
    and fixed FSF address


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-3
changelog:
  - included upstreamed patches which are changing the license
    headers to be LGPLv2+ for the library parts and GPLv2+ for the
    binaries


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.1
changelog:
  - resolves: #819568, #740113
    rebased to 0.40.rc1
  - resolves: #983264
    rebuilt with full relro and PIE
  - resolves: #1016810
    removed cgrulesengd daemon


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.2
changelog:
  - related: #1016810
    returned creation of cgred group, which was removed in previous commit by mistage


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.4-1
changelog:
  - Update to 0.12.4
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.4.news


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-4
changelog:
  - BuildRequires for libchewing-python changed
    from python-devel to python2-devel
  - RPM_BUILD_ROOT changed to buildroot


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-1
changelog:
  - Upstream update to 0.3.4
  - Download is changed to Google Code.
  - /usr/share/chewing is removed, data files now located in
    /usr/lib(64)/libchewing
  - Info for libchewing is included.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-3
changelog:
  - Fixed [Bug 913214] libchewing complains "no info dir entry" while installing
    Add direntry in libchewing.texi so it can be listed under 
    Category "Localization"


author: David Tardon <dtardon@redhat.com> - 0.3.1-5
changelog:
  - Resolves: rhbz#918079 libcmis::sha1() can return digests with fewer
    than 40 hexadecimal digits
  - Resolves: rhbz#918080 restrict redirection protocols


author: David Tardon <dtardon@redhat.com> - 0.5.0-2
changelog:
  - Related: rhbz#1290152 autoreconf is not needed
  - Related: rhbz#1290152 add a bunch of fixes found by coverity


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Doug Ledford <dledford@redhat.com> - 1.2.0-6
changelog:
  - Our -fno-strict-alias option patch was lost, and we discovered it
    was lost when I rebuilt the package.  Put it back and rebuild
    again.
  - Related: bz1062281


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Lane <tgl@redhat.com> 0.8.3-4
changelog:
  - Do not use -ffast-math; it breaks things and seems quite unlikely to offer
    any useful performance benefit for this type of package, anyway
  Resolves: #629964


author: Tom Lane <tgl@redhat.com> 0.8.4-1
changelog:
  - Update to version 0.8.4 (seems to contain only configure-support updates,
    but might as well adopt it)
  - Fix memory leak due to incorrect test in _is_row_fetched()
  Related: #733413


author: Tom Lane <tgl@redhat.com> 0.8.3-12
changelog:
  - Remove unnecessary package-name Requires:, since dependencies on library
    sonames should be enough, and we don't want to hard-wire assumptions about
    which packages provide which libraries
  - isa-ify cross-subpackage Requires:


author: Richard W.M. Jones <rjones@redhat.com> - 1.12-13.1.el7
changelog:
  - Add patch to fix multilib conflicts in dnet-config
    resolves: rhbz#1059593
  - Remove RPM cruft from the spec file.


author: - nick.alcock@oracle.com - 0.5.0-3
changelog:
  - Include the distribution in the RPM release. [Orabug: 21211461]
  - No longer Provide: our own name. [Orabug: 21622263]


author: - nick.alcock@oracle.com - 0.7.1-1
changelog:
  - Fix CTF archive alignment and failed write() handling
    (Tomas Jedlicka) [Orabug: 27191792, 27204447]
  - Build on arm64 (Vincent Lim) [Orabug: 27418554]


author: - nick.alcock@oracle.com - 0.8.1-1
changelog:
  - Fix ctf_rollback() in client containers to delete only the types
  added since the last snapshot, rather than all of them.
  [Orabug: 27971037]


author: - nick.alcock@oracle.com - 1.0.0-1
changelog:
  - Format v2, supporting many more types and enum/struct/union members.
  v1 CTF files are transparently updated to v2. No soname change, but
  some API for users directly accessing CTF files is broken.
  [Orabug: 28150489]


author: - nick.alcock@oracle.com - 1.1.0-1
changelog:
  - Add ctf_add_{struct,union}_sized(). [Orabug: 29054972]
  - Work around some very minor CTF-generation bugs seen in the wild
    in old UEK kernels. [Orabug: 28952429]
  - Do not mprotect() the heap by mistake when reading CTF from a
    user-provided buffer. [Orabug: 28952429]


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.4-0.1.svn1184
changelog:
  - fix multilib conflict, based on a patch by Rex Dieter (rhbz#477684)
  - update to SVN r1184
  - move TODO to devel docs


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-12.1
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Debarshi Ray <rishi@fedoraproject.org> - 0.10.4-4
changelog:
  - Ensure that the new exiv2 soname is used during the build
  - Adapt to Exiv2::BasicIo API change
    Resolves: rhbz#1486570


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.0.1-0.2.20180226gitb029c24
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Ray Strode <rstrode@redhat.com> 2.32.1-4
changelog:
  - drop /etc/skel entry. libgnome creates it by default if it's
    not around and it needs it anyway. Better not to clutter users
    home directories just because they install glade.


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0.1-1
changelog:
  - Update to 3.4.0.1
  - Obsolete the -capplet subpackage; the whole plugins architecture is
    removed from libgnomekbd


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Related: rhbz#1344633


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.3-5
changelog:
  - New storage format added in oVirt 4.1
    Resolves: rhbz#1346215
  - Check if operation was cancelled before disconnecting signal
    Resolves: rhbz#1431275


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.4-1
changelog:
  - Rebase to latest 0.3.4 upstream release. Still quite a few patches as
    there was no 0.3.5 release yet
    Resolves: rhbz#1584266


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-2
changelog:
  - Parse XML nodes automatically
    Related: rhbz#1427467
  - Set detailed error message for async call
    Related: rhbz#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-4
changelog:
  - Use certificate data from XML
    Resolves: rhbz#https://bugzilla.redhat.com/show_bug.cgi?id=1402909


author: Caolán McNamara <caolanm@redhat.com> 1.14.26-1
changelog:
  - latest version
  - drop integrated gnome689706.gsf_input_dup.patch
  - libgsf-python is gone with "excise old bit-rotted python support"


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-11
changelog:
  - Further fixes for kvmclock
    resolves: rhbz#998109
  - Document that blockdev-setbsz is deprecated and should not be used
    resolves: rhbz#1016465


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-12
changelog:
  - Backport: "daemon: Fix xfs_info parser because of new format."
    which is required to fix libguestfs tests.
    related: rhbz#1019503


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-15
changelog:
  - Add libguestfs-tools.conf(5) man page
    resolves: rhbz#1019891
  - Drop PHP bindings
    resolves: rhbz#1020021
  - Disable Haskell & Erlang (in case someone has these dependencies
    installed and tries to rebuild the package).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-19
changelog:
  - Fix placement of *.py[co] files
    resolves: rhbz#1061155
  - Remove bogus license file from daemon
    resolves: rhbz#1061160
  - Prevent virt-sparsify from overwriting block or char devices
    resolves: rhbz#1056556
  - mount-local should give a clearer error if root is not mounted
    resolves: rhbz#1057492


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-21
changelog:
  - Fix segfault in guestfs_list_filesystems when presented with a
    corrupt btrfs filesystem
    resolves: rhbz#1064008


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.47
changelog:
  - v2v: Work around 'umount: /sysroot: target is busy'
    resolves: rhbz#1246032
  - v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
    virt-inspector
    resolves: rhbz#1243493


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.50
changelog:
  - v2v:
    * When debugging, dump OVF to stderr.
    * Ignore missing kernels from grub
      resolves: rhbz#1230412
    * Calculate VMware dcPath correctly (1256823)
    * Map empty VMware network or bridge name to default (1257895)
  - p2v:
    * Wait for network to come online before testing connection
      resolves: rhbz#1256222
  - Fix tests to run correctly with libguestfs-winsupport 7.2.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.51
changelog:
  - v2v: Fix handling of extra slashes in dcPath calculation
    resolves: rhbz#1258342 rhbz#1256823
  - v2v: Fix -oa preallocation option
    resolves: rhbz#1251909


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.52
changelog:
  - v2v: Warn if Group Policy or AV software may result in 7B boot failure
    (1260689)
  - v2v: Fix OVF XML to enable qxl display
    resolves: rhbz#1260590


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.53
changelog:
  - v2v: Error if certain options appear twice on the command line (1261242)
  - v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
  - v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
  - v2v: Detect AVG Technologies as AV software (1261436)
    resolves: rhbz#1261281


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.32.7-3
changelog:
  - Rebase to libguestfs 1.32 in RHEL 7.3
    resolves: rhbz#1218766
  - The full tests are now run after the package has been built.
  - New tool and subpackage: virt-dib (safe diskimage-builder replacement).
  - New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
    (see https://bugzilla.redhat.com/1194158).
  - New tool: virt-get-kernel.
  - Depend on java-headless instead of full java.
  - New tool: virt-v2v-copy-to-local.
  - Disable virt-v2v subpackage on ppc64 etc
    resolves: rhbz#1287826
  - v2v: Remove VirtualBox Additions correctly
    resolves: rhbz#1296606
  - Add clearer warnings sections to all man pages
    resolves: rhbz#1293527
  - v2v: Disable the --in-place option.
  - v2v: Support conversion of Windows > 7
    resolves: rhbz#1190669
  - Add code to verify tarball signatures.
  - General performance improvements.
  - v2v: Prevent duplicate -b, -n, -oa options
    resolves: rhbz#1326266
    resolves: rhbz#1325825
  - v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
  - v2v: Fix alignment issues in treeviews in conversion dialog
    resolves: rhbz#1340407
  - p2v: spinner should be hidden when it stops spinning
    resolves: rhbz#1341564
  - p2v: ethtool command is not supported on p2v client
    resolves: rhbz#1341608
  - p2v: Add ifconfig command to ISO
    resolves: rhbz#1342447
  - p2v: Warn if virt-p2v-make-disk used on a partition
    resolves: rhbz#1342337
  - Build using OCaml with fix for CVE-2015-8869.
    resolves: rhbz#1343101
  - customize: Add --uninstall option (upstream 1343375)
  - p2v: Document permissions on id_rsa file
    resolves: rhbz#1343414
  - p2v: Print full curl error message
    resolves: rhbz#1343423
  - get-kernel: Fix --format auto
    resolves: rhbz#1341984
  - v2v: Provide better <Origin/> information to RHEV-M
    resolves: rhbz#1342398
  - customize: Give an error if --truncate-recursive path does not exist
    resolves: rhbz#1345809
  - sysprep: Add --network option so that --install option can be used
    resolves: rhbz#1345813
  - p2v: Print proper error if incorrect password is given
    resolves: rhbz#1227599
  - p2v: Print ssh error if incorrect hostname is given
    resolves: rhbz#1167916
  - p2v: Display progress of operation in non-GUI mode
    resolves: rhbz#1229386
  - p2v: Add a dialog confirming the user really means to cancel
    resolves: rhbz#1340464
  - p2v: log window should process colour escapes and backspaces
    resolves: rhbz#1314244
  - v2v: Fix installation of virtio drivers with *.dll files
    resolves: rhbz#1311373
  - p2v: Improve error message when ssh login to conversion server fails
    resolves: rhbz#1348900
  - v2v: Remove --dcpath parameter from manual
    resolves: rhbz#1315237
  - v2v: Fix conversion of guests with floppy drives
    resolves: rhbz#1309706
  - p2v: Better error when sudo requires a password
    resolves: rhbz#1340809
  - v2v: Refuse to convert if there is < 1GB free in temporary directory
    resolves: rhbz#1316479
  - inspection: Get Windows drive letters for GPT disks
    resolves: rhbz#1349237
  - p2v: Add disk utils and display serial number of disks
    resolves: rhbz#855058
  - p2v: Fix timeout error when connecting to unresponsive ssh server
    resolves: rhbz#1350363
  - Remove external dependency generator.  Use supermin RPM deps instead.
    related: rhbz#1309796
  - p2v: Flush messages to the journal immediately
    resolves: rhbz#1229386
  - customize: Fix --install on ppc64le
    resolves: rhbz#1264835
  - lib: Fix finding icons in Windows 7 64 bit guests
    resolevs: rhbz#1352761
  - v2v: Add virsh --quiet flag when running virt-v2v --quiet
    resolves: rhbz#1358142
  - lib: Fix inspection of ISOs with latest libosinfo
    resolves: rhbz#1359652
  - dib: Fix run_command exit handlers on failure
    resolves: rhbz#1362357
  - dib: Rework run of extra-data.d hooks
    resolves: rhbz#1362354
  - Miscellaneous fixes to man pages and --help output
    resolves: rhbz#1362668
  - lib: Specify backing format for read-only files
    resolves: rhbz#1354335
  - Fix --selinux-relabel option
    resolves: rhbz#1362669
  - sparsify: Fix --in-place option with UEFI guest
    resolves: rhbz#1364347
  - p2v: Use latest linux-firmware in ISO
    resolves: rhbz#1364419
  - v2v: Fix guest name when using -i disk
    resolves: rhbz#1365005
  - p2v: Fix GUI message.
  - v2v: Make fstrim message clearer
    resolves: rhbz#1366456
  - v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
    resolves: rhbz#1367615
  - lib: Fix assert-fail if port is missing in libvirt XML
    resolves: rhbz#1370424


author: Pino Toscano <ptoscano@redhat.com> - 1:1.32.7-3.el7_3.1
changelog:
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1406289
  - Disable EDD when launching the appliance
    resolves: rhbz#1406393
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1406854


author: Pino Toscano <ptoscano@redhat.com> - 1:1.32.7-3.el7_3.2
changelog:
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1408124
  - Avoid spurious dependency on kernel-rt.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-6
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
    resolves: rhbz#1503497
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12
changelog:
  - Rebase to libguestfs 1.38.2 in RHEL 7.6.
    resolves: rhbz#1551055
  - v2v: warn about unknown VMware controller types
    resolves: rhbz#1510801
  - df: show correct sizes in human-readable mode for filesystems with
    block size = 512
    resolves: rhbz#1525262
  - v2v: fix example URL in man page
    resolves: rhbz#1540535
  - Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
    resolves: rhbz#1541525
  - Fix qemu-img-ma dependency in non-x86_64 architectures
    resolves: rhbz#1568676
  - v2v: update "resume=/dev/sdaX" entries in GRUB command lines
    resolves: rhbz#1532224
  - v2v: fix virtio-rng and memballoon OVF fragment for RHV
    resolves: rhbz#1550168
  - v2v: detect whether the root filesystem was not mounted in read-write mode
    resolves: rhbz#1567763
  - v2v: import OVAs with snapshots
    resolves: rhbz#1570407
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1571237
  - Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
    place where it used now (by virt-builder-repository).
  - v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
    oVirt REST API
    resolves: rhbz#1557273
  - Start lvmetad earlier when booting the appliance
    resolves: rhbz#1581810
  - v2v: fix kernel detection in Ubuntu guests since 18.04
    resolves: rhbz#1591248
  - v2v: convert the CPU topology correctly
    resolves: rhbz#1541908
  - Add a new inspect_get_osinfo API, and add its result to the output of
    virt-inspector
    resolves: rhbz#1544842
  - Pass absolute paths to NBD sockets when using the libvirt backend
    resolves: rhbz#1588451
  - v2v: do not write only <vendor> without <model> in libvirt XMLs
    resolves: rhbz#1591789
  - v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
    used for -it vddk, and -o rhv-upload
    resolves: rhbz#1589776
    resolves: rhbz#1608718
  - v2v/p2v: disable on aarch64, since it is not supported (nor even working)
    there
    resolves: rhbz#1601488
  - v2v: handle srN devices in libvirt XML (for virt-p2v)
    resolves: rhbz#1612785
  - Do not use the -cpu parameter under any circumstances for ppc64le.
    resolves: rhbz#1605071


author: EL Errata <el-errata_ww@oracle.com> - 1:1.38.2-12.0.1
changelog:
  - Set DISTRO_ORACLE_LINUX corresponding to ol
  - Remove 0001-update-distro-for-oracle.patch
    To support OL, update related code about /etc/os-release [bug 28760753]
  - Update packagelist.in for OL


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12.el7_6.1
changelog:
  - v2v: update documentation regarding SHA-2 certificates in Windows 7 and
    Windows Server 2008 R2
    resolves: rhbz#1632788
  - v2v: fix rhev-apt firstboot command for Windows
    resolves: rhbz#1625216


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5
changelog:
  - Rebase to libguestfs 1.40.2 in RHEL 7.7.
    resolves: rhbz#1621895
  - v2v: uninstall the VMware Tools correctly
    resolves: rhbz#1465849
    resolves: rhbz#1481930
  - v2v: fix VMware vCenter roles needed for conversion
    resolves: rhbz#1530967
  - v2v: preserve the VM Generation ID
    resolves: rhbz#1598350
  - Query QEMU to known whether KVM is supported
    resolves: rhbz#1605071
  - v2v: add --mac option
    resolves: rhbz#1607274
  - v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
    resolves: rhbz#1619665
    resolves: rhbz#1691659
  - v2v: provide a way to query for the estimated size of the disks
    resolves: rhbz#1622785
  - Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
    resolves: rhbz#1634248
  - p2v: add an option to Shutdown the machine after the conversion
    resolves: rhbz#1642044
  - v2v: fix epoch when querying installed RPM packages
    resolves: rhbz#1669395
  - Use a better icon for RHEL >= 7 guests
    resolves: rhbz#1679482
  - v2v: improve the architecture detection of Linux kernel modules
    resolves: rhbz#1690574
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688155
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1605242
  - v2v: warn when a guest has 'direct' network interfaces
    resolves: rhbz#1151902
  - v2v: use proper SELinux label for nbdkit sockets
    resolves: rhbz#1698437


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5.el7_7.1
changelog:
  - v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
    for 'rhv-upload'
    resolves: rhbz#1726168


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-7
changelog:
  - v2v: -o rhv-upload: improve wait logic after finalize
    resolves: rhbz#1680361
  - v2v: fix DISKTYPE value in generated .ovf files
    resolves: rhbz#1750719


author: EL Errata <el-errata_ww@oracle.com> - 1:1.40.2-10.0.1
changelog:
  - Set DISTRO_ORACLE_LINUX corresponding to ol
  - Remove 0001-update-distro-for-oracle.patch
    To support OL, update related code about /etc/os-release [Orabug: 28760753]
  - Update packagelist.in for OL


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Marek Kasik <mkasik@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Backport several important patches from current master
  - Revert addition of GXPSImage (it would change ABI)
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.2.5-1
changelog:
  - Update to newly released 0.2.5
  - Preserve ABI by exporting the same set of methods as before
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-2
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Resolves: #1574844


author: Rafael Aquini <aquini@redhat.com> - 2.16-13
changelog:
  - tests/stack_grow_into libhugetlbfs test fixes (#1422960)
  - PPC vm/hugepage/libhugetlbfs test fix (#1515365)


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 0.5.224-1
changelog:
  - Add BSD license text to COPYING
  - Clean up the AM_CFLAGS settings
  - Minor fixes to the spec.in, including license, config and url entries


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Correct the Url and Source tags now that the openfabrics server no longer
    responds if you don't include the www in the link


author: Doug Ledford <dledford@redhat.com> - 1.1.7-6
changelog:
  - Add in support for flow steering and IP addressing of UD RoCE QPs
  - Resolves: bz1058537, bz1062281


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1122333


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1094988
  - Resolves: bz947308


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Build against valgrind on ppc64le
  - Fix a coverity found issue
  - Resolves: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Fix one of the coverity bugs in a different way (the original fix
    caused a problem in libmlx4)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-6
changelog:
  - Add build on s390
  - Drop back to building against libnl instead of libnl3
  - Resolves: bz1182178, bz1177115


author: Doug Ledford <dledford@redhat.com> - 1.1.8-7
changelog:
  - Add checksum offload support
  - Update the various patches to the ones from the official upstream git repo
  - Related: bz1195888


author: Robert Scheck <robert@fedoraproject.org> 0.46-1
changelog:
  - Upgrade to 0.46 (#525933, #628893)
  - Fixed race in populating builtin timezone components (#637150)
  - Fixed wrong ICAL_ERRORS_ARE_FATAL preprocessor check (#575715)


author: Jarod Wilson <jarod@redhat.com> 1.2.0-1
changelog:
  - Update to libiec61883 v1.2.0 release
  - Rework installtests patch to not require autoreconf
  - Make iso channel allocation work w/o local fw node r/w


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.4-3
changelog:
  - disable broken python/cython bindings (for now, currently FTBFS)
  - track soname
  - tighten  subpkg deps


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.3-3
changelog:
  - Fix touchpad tap timestamps (#1491525)
  - Fix missing show-keycodes entry in man page (#1491532)
  - Change palm detection thresholds (#1491537)
  - Ignore tap motion threshold for nfingers > nslots (#1491533)
  - Fix a memory leak on destroy
  - Ignore hovering touches while tapping
  - Fix a man page typo


author: Peter Hutterer <peter.hutterer@redhat.com> 1.5.2-2
changelog:
  - Swap to the correct tarball so we match the checksums from upstream (had a
    local mixup of tarballs)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-3
changelog:
  - capitalize Name,Summary,Version tags
  - -devel: capitalize Summary
  - fix spurious permissions on header files
  - refresh upstream source
  - -admin,-devel: add %defattr(...)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-4
changelog:
  - -devel: install headers to /usr/include/libiodbc/ to better avoid
    conflicts and need for bogus unixODBC-devel dep


author: Doug Ledford <dledford@redhat.com> - 1.2-1.el6
changelog:
  - Update to latest upstream source
  - Change BuildRequires from valgrind to valgrind-devel for rhel6
  - Drop ppc64 build as it isn't officially supported upstream
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.3-1
changelog:
  - Update to latest upstream release and build against latest libibverbs
  - Resolve mezzanine configure issue (1085946)
  - Related: bz1137044


author: Paolo Bonzini <pbonzini@redhat.com> - 1.7.0-3
changelog:
  - Correct license for libiscsi-utils, prefer %global to %define
  - Add Requires
  - Remove %clean section


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-7.el7
changelog:
  - libiscsi-Discovery-return-multiple-portals-for-the-same-disco.patch [bz#1266523]
  - libiscsi-iscsi-ls-skip-link-local-IPv6-addresses.patch [bz#1266523]
  - Resolves: bz#1266523
    (iscsi-ls doesn't work if target has more than one portal)


author: Nikola Forró <nforro@redhat.com> - 1.2.90-7
changelog:
  - Fix CVE-2018-11212 (#1586062)
  - Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091)
    and CVE-2018-11214 (#1589110)
  - Fix CVE-2018-11813 (#1591203)


author: Than Ngo <than@redhat.com> - 4.10.5-2
changelog:
  - bz#970713, CVE-2013-2126, double-free flaw when handling
    damaged full-color in Foveon and sRAW files


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.14-2
changelog:
  - Add patch by Stephen Gallagher to include manual pages for
    ldb_connect() and several other functions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-1.1
changelog:
  - Resolves: rhbz#1290714 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-1.2
changelog:
  - Resolves: rhbz#1290714 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-8
changelog:
  - rename to liblockfile
  - sorting file to main and -devel package
  - explicitly list files in files-section


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-9
changelog:
  - change description and summary of -devel-subpackage
  - make wildcard for man-pages even match against uncompressed files


author: Mahaveer Darade <mah.darade@gmail.com> - 0.3.5-1
changelog:
  - upgrade to upstream version 0.3.5
  - drop patch0, merged upstream
    liblognorm-0.3.4-rename-to-lognormalizer.patch
  - remove trailing whitespace


author: Jiri Vymazal <jvymazal@redhat.com> 2.0.2-2
changelog:
  RHEL 7.6 erratum
  - added patch with skipempty support
    resolves: rhbz#1565219
  - removed no longer used patch file


author: Rui Matos <rmatos@redhat.com> - 2.5.2-11
changelog:
  - Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
    CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-5
changelog:
  - Resolves: #1643464 - Add libmaxminddb package as a successor of deprecated GeoIP package
  - Lowering the release to 1.2.0-5 due to current version in el8 - having larger version would break the migration from el7 to el8


author: Remi Collet <remi@fedoraproject.org> - 1.0.12-1
changelog:
  - update to 1.0.12
  - add aclocal/ax_lib_libmemcached.m4
  - abi-compliance-checker verdict : Compatible
  - uggly hack for man pages


author: Remi Collet <remi@fedoraproject.org> - 1.0.14-1
changelog:
  - update to 1.0.14
  - libmemcachedprotocol removed
  - sasl support is back
  - run test during build
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1079994 (bigendian)
    https://bugs.launchpad.net/libmemcached/+bug/1079995 (config.h)
    https://bugs.launchpad.net/libmemcached/+bug/1079996 (dtrace)
    https://bugs.launchpad.net/libmemcached/+bug/1079997 (-ldl)
    https://bugs.launchpad.net/libmemcached/+bug/1080000 (touch)


author: Remi Collet <remi@fedoraproject.org> - 1.0.15-1
changelog:
  - update to 1.0.15
  - libmemcachedprotocol is back
  - add memaslap command line tool
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1094413 (libevent)
    https://bugs.launchpad.net/libmemcached/+bug/1094414 (c99 MODE)


author: Remi Collet <remi@fedoraproject.org> - 1.0.16-1
changelog:
  - update to 1.0.16
  - ignore test result for memaslap (XFAIL but PASS)
    https://bugs.launchpad.net/libmemcached/+bug/1115357


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Doug Ledford <dledford@redhat.com> - 1.0.4-2
changelog:
  - Fix Url and Source tags
  - Drop old Provides/Obsoletes we used to change package names
  - Pick up a bug fix to modprobe.d/libmlx4.conf


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file


author: Doug Ledford <dledford@redhat.com> - 1.0.5-7
changelog:
  - Fix dracut module support to work with rdma dracut module
  - Add support for IP based RoCE addressing and UD QPs
  - Add flow steering support
  - Related: bz1064316, bz1062284, bz1058538


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Related: bz1122333


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Resolves: bz1094988


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Bump and rebuilt against latest libibverbs (updated RoCE GID
    patch in libibverbs)
  - Fix a couple compiler warnings (the problems were bogus, but
    we still prefer a silent build)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Drop the module init stuff and move it to the rdma package
  - Make sure we require the rdma package, and that we conflict
    with older versions of the package
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported
  - Resolves: bz1061584


author: Jarod Wilson <jarod@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream release v1.2.1
  - This is libmlx5, not libmlx4, fix descriptions accordingly
  - Resolves: bz1298698, bz1275412, bz1275396, bz1296267, bz1296186, bz1288821


author: Jarod Wilson <jarod@redhat.com> - 1.2.1-7
changelog:
  - Fix mlx5_post_send incompatibility with ibv_post_send ABI
  - Add explicit Requires: on libibverbs >= 1.2.1
  - Resolves: rhbz#1364525


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0-2
changelog:
  - %files: track lib soname (so bumps aren't a surprise)
  - tighten subpkg deps (%_isa)
  - %build: --disable-static


author: John5342 <john5342 at, fedoraproject.org> 4.2-1
changelog:
  - Rebase to new upstream version
  - Drop patches (they were already both upstream waiting for this new release)
  - No real changes in this version since we already carried all patches except the version change


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.6.alpha
changelog:
  - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682
  - resolves: rhbz#1611550 rhbz#1611551 rhbz#1611552 rhbz#1611553


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream version
  - Add pseudoprovide for libibverbs-driver.{_arch} while keeping old
    pseudoprovide until libibverbs can be rebuilt without needing the
    old provide


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Undo pseudoprovide workaround as it's no longer needed due to
    a change in the libibverbs requirements


author: Christophe Fergeau <cfergeau@redhat.com> - 4.0.3-1
changelog:
  - New upstream 4.0.3 release, should fix a bug breaking metadata fetching
    from musicbrainz servers


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-1
changelog:
  - Package libmusicbrainz5, apart from the name/version it's identical to
    libmusicbrainz4 so this .spec is based on it.


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-2
changelog:
  - Address review comments (rhbz#832670)
      fix licence (LGPLv2+ -> LGPLv2)
      fix tarball URL
      remove obsolete use of RPM_BUILD_ROOT
      remove BuildRequires on pkg-config
      remove use of %defattr


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Eric Garver <egarver@redhat.com> - 1.2-7
changelog:
  - libndp: add option flags to send messages
  - ndptool: add option to send messages types
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - libndp: revert API change for ndp_msg_send() and add


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to latest and rebuild against latest libibverbs and
    valgrind (1142116)
  - Related: bz1137044


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-14
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Dan Williams <dcbw@redhat.com> - 1.1-14
changelog:
  - Fix portmap position calculation (rh #677526) (rh #677725)
  - Make port allocation threadsafe (rh #677527) (rh #677724)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Jingdong Lu <jingdong.lu@oracle.com> - 3.2.21-10.0.1
changelog:
  - route/addr: only send IFA_FLAGS when needed to workaround picky older kernels
    [orabug 185775291] (john.haxby@oracle.com)


author: Dan Mashal <dan.mashal@fedoraproject.org> - 0.7.5-5
changelog:
  - Fix RHBZ #925824
  - Update source URL
  - Fix mix of spaces and tabs in spec file
  - Fix bogus changelog date


author: Ray Strode <rstrode@redhat.com> 0.7.5-8
changelog:
  - Don't require desktop notification daemon (breaks a build loop with mutter/gnome-shell)
    Related: #1174722


author: Jarod Wilson <jarod@redhat.com> - 1.0.8-1
changelog:
  - Update to upstream release v1.0.8 for RoCE v2 support
  - Restore AUTHORS, COPYING and README installation
  - Resolves: bz1276743


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.0.9-1
changelog:
  - Updated to 0.0.9
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Switched to .bz2 sources
  - Dropped included patches


author: Zeeshan Ali <zeenix@redhat.com> - 0.2.7-3
changelog:
  - rhel: Add info on 6.5 and 7.0 (#1015055).
  - install-script,rhel: Fix for 'Server' & 7.0 (#1033007).


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-3
changelog:
  - Resolves: rhbz#1712458 - [machines] The function of 'Auto-detect guest
                             operating system' is not available on rhel 7.7


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-3.1
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1169773)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4.2
changelog:
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is accounted for (#1207666)


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptr base on upstream
  - Related: #1283575


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.4.7-4
changelog:
  - Add upstream patches to use js rather than xulrunner
  - Add patch to fix FTBFS on gcc 4.7
  - Cleanup spec for latest updates and remove obsolete bits


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


